Malware Analysis Report

2024-11-15 08:07

Sample ID 230811-2hba4aba2z
Target https://gofile.io/d/aNewJO
Tags
mercurialgrabber stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file https://gofile.io/d/aNewJO was found to be: Known bad.

Malicious Activity Summary

mercurialgrabber stealer

Mercurial Grabber Stealer

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Suspicious use of WriteProcessMemory

Modifies data under HKEY_USERS

Modifies registry class

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of AdjustPrivilegeToken

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-08-11 22:34

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2023-08-11 22:34

Reported

2023-08-11 22:36

Platform

win10v2004-20230703-en

Max time kernel

103s

Max time network

108s

Command Line

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://gofile.io/d/aNewJO

Signatures

Mercurial Grabber Stealer

stealer mercurialgrabber

Modifies data under HKEY_USERS

Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133362668966597424" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1043950675-1972537973-2972532878-1000_Classes\Local Settings C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\Temp1_Gerador.zip\Gerador.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4108 wrote to memory of 1984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 1876 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 2928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 2928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4108 wrote to memory of 4740 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://gofile.io/d/aNewJO

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9cdea9758,0x7ff9cdea9768,0x7ff9cdea9778

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1696 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2204 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3228 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3196 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4636 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3484 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4852 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5280 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=5460 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5632 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3772 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5956 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6684 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3476 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=6872 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6452 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=7556 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=8524 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=8132 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=8116 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=8072 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=7536 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=6572 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=7036 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=7432 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=7172 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=7128 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=9068 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=6684 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=9172 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=9328 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Users\Admin\AppData\Local\Temp\Temp1_Gerador.zip\Gerador.exe

"C:\Users\Admin\AppData\Local\Temp\Temp1_Gerador.zip\Gerador.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=6572 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=8992 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=9552 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=10068 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=10176 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=10132 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=9732 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=10168 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=10164 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=9268 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=10204 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=9624 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=9928 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=9736 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=7784 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=3396 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=2624 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=1644 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=9500 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=9896 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=10248 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=9804 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=10612 --field-trial-handle=1888,i,10331763577608086845,17810945100826018204,131072 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 2.136.104.51.in-addr.arpa udp
US 8.8.8.8:53 gofile.io udp
US 8.8.8.8:53 240.81.21.72.in-addr.arpa udp
FR 151.80.29.83:443 gofile.io tcp
US 8.8.8.8:53 apps.identrust.com udp
NL 88.221.25.169:80 apps.identrust.com tcp
US 8.8.8.8:53 106.39.251.142.in-addr.arpa udp
US 8.8.8.8:53 83.29.80.151.in-addr.arpa udp
US 8.8.8.8:53 169.25.221.88.in-addr.arpa udp
US 8.8.8.8:53 api.gofile.io udp
FR 51.178.66.33:443 api.gofile.io tcp
US 8.8.8.8:53 plausible.gofile.io udp
FR 149.202.85.166:443 plausible.gofile.io tcp
US 8.8.8.8:53 ad.a-ads.com udp
DE 78.46.32.91:443 ad.a-ads.com tcp
US 8.8.8.8:53 a.pub.network udp
US 104.18.21.206:443 a.pub.network tcp
FR 149.202.85.166:443 plausible.gofile.io tcp
US 8.8.8.8:53 fronttoad.com udp
US 34.160.63.134:443 fronttoad.com tcp
US 8.8.8.8:53 d.pub.network udp
US 8.8.8.8:53 static.a-ads.com udp
US 34.160.152.31:443 d.pub.network tcp
DE 148.251.152.47:443 static.a-ads.com tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 static.adsafeprotected.com udp
NL 142.250.179.170:443 content-autofill.googleapis.com tcp
US 18.65.39.30:443 static.adsafeprotected.com tcp
US 8.8.8.8:53 cmp.quantcast.com udp
NL 13.227.219.52:443 cmp.quantcast.com tcp
US 8.8.8.8:53 33.66.178.51.in-addr.arpa udp
US 8.8.8.8:53 68.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 108.211.229.192.in-addr.arpa udp
US 8.8.8.8:53 166.85.202.149.in-addr.arpa udp
US 8.8.8.8:53 91.32.46.78.in-addr.arpa udp
US 8.8.8.8:53 206.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 134.63.160.34.in-addr.arpa udp
US 8.8.8.8:53 31.152.160.34.in-addr.arpa udp
US 8.8.8.8:53 47.152.251.148.in-addr.arpa udp
US 8.8.8.8:53 170.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 30.39.65.18.in-addr.arpa udp
US 8.8.8.8:53 158.240.127.40.in-addr.arpa udp
US 8.8.8.8:53 52.219.227.13.in-addr.arpa udp
US 8.8.8.8:53 optimise.net udp
US 34.111.152.239:443 optimise.net tcp
US 8.8.8.8:53 cdn.confiant-integrations.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 freestar-io.videoplayerhub.com udp
US 8.8.8.8:53 cdn.hadronid.net udp
DE 172.217.23.194:443 securepubads.g.doubleclick.net tcp
US 104.18.5.165:443 cdn.confiant-integrations.net tcp
US 104.26.9.50:443 freestar-io.videoplayerhub.com tcp
US 172.67.36.110:443 cdn.hadronid.net tcp
US 34.111.152.239:443 optimise.net udp
US 8.8.8.8:53 btloader.com udp
US 34.160.63.134:443 fronttoad.com udp
US 172.67.70.134:443 btloader.com tcp
US 104.18.5.165:443 cdn.confiant-integrations.net udp
US 8.8.8.8:53 id.hadron.ad.gt udp
DE 172.217.23.194:443 securepubads.g.doubleclick.net udp
DE 172.217.23.194:443 securepubads.g.doubleclick.net udp
US 104.22.4.69:443 id.hadron.ad.gt tcp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 130.211.23.194:443 api.btloader.com tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 8.8.8.8:53 api.intentiq.com udp
US 8.8.8.8:53 sync.intentiq.com udp
NL 108.156.60.87:443 api.intentiq.com tcp
NL 65.9.86.99:443 sync.intentiq.com tcp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 secure.quantserve.com udp
US 192.184.69.239:443 secure.quantserve.com tcp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
US 8.8.8.8:53 oa.openxcdn.net udp
US 104.22.53.86:443 cdn.id5-sync.com tcp
US 52.223.40.198:443 match.adsrvr.org tcp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 cdn-ima.33across.com udp
US 8.8.8.8:53 static.criteo.net udp
US 74.119.119.139:443 gum.criteo.com tcp
US 8.8.8.8:53 s2s.t13.io udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 8.8.8.8:53 c2shb.pubgw.yahoo.com udp
US 34.102.146.192:443 oa.openxcdn.net tcp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 8.8.8.8:53 g2.gumgum.com udp
US 8.8.8.8:53 colossusssp.com udp
US 104.18.24.112:443 cdn-ima.33across.com tcp
US 8.8.8.8:53 rtb.openx.net udp
US 74.119.119.131:443 static.criteo.net tcp
US 104.18.24.185:443 htlb.casalemedia.com tcp
US 34.107.140.113:443 s2s.t13.io tcp
US 34.107.140.113:443 s2s.t13.io tcp
US 8.8.8.8:53 hb.undertone.com udp
US 3.92.156.8:443 c2shb.pubgw.yahoo.com tcp
US 3.92.156.8:443 c2shb.pubgw.yahoo.com tcp
US 34.107.148.139:443 prebid.media.net tcp
NL 52.222.139.7:443 tags.crwdcntrl.net tcp
US 18.239.94.100:443 hb.undertone.com tcp
US 8.8.8.8:53 bidder.criteo.com udp
US 3.213.247.94:443 g2.gumgum.com tcp
US 3.213.247.94:443 g2.gumgum.com tcp
US 3.213.247.94:443 g2.gumgum.com tcp
US 35.227.252.103:443 rtb.openx.net tcp
US 64.247.192.240:443 colossusssp.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 74.119.119.129:443 bidder.criteo.com tcp
US 8.8.8.8:53 17.211.227.13.in-addr.arpa udp
US 8.8.8.8:53 oajs.openx.net udp
US 8.8.8.8:53 239.152.111.34.in-addr.arpa udp
US 8.8.8.8:53 194.23.217.172.in-addr.arpa udp
US 8.8.8.8:53 165.5.18.104.in-addr.arpa udp
US 8.8.8.8:53 50.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 110.36.67.172.in-addr.arpa udp
US 8.8.8.8:53 134.70.67.172.in-addr.arpa udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 198.23.217.172.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 70.3.26.104.in-addr.arpa udp
US 8.8.8.8:53 87.60.156.108.in-addr.arpa udp
US 34.120.107.143:443 oajs.openx.net tcp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 99.86.9.65.in-addr.arpa udp
US 8.8.8.8:53 86.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 198.40.223.52.in-addr.arpa udp
US 8.8.8.8:53 192.146.102.34.in-addr.arpa udp
US 8.8.8.8:53 87.70.96.34.in-addr.arpa udp
US 8.8.8.8:53 112.24.18.104.in-addr.arpa udp
US 8.8.8.8:53 185.24.18.104.in-addr.arpa udp
US 8.8.8.8:53 113.140.107.34.in-addr.arpa udp
US 8.8.8.8:53 139.148.107.34.in-addr.arpa udp
US 8.8.8.8:53 7.139.222.52.in-addr.arpa udp
US 8.8.8.8:53 239.69.184.192.in-addr.arpa udp
US 8.8.8.8:53 100.94.239.18.in-addr.arpa udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
DE 141.95.98.64:443 id5-sync.com tcp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
NL 213.19.162.80:443 pixel.rubiconproject.com tcp
US 3.213.30.187:443 bcp.crwdcntrl.net tcp
US 8.8.8.8:53 ads.yieldmo.com udp
US 3.234.113.180:443 ads.yieldmo.com tcp
US 74.119.119.139:443 gum.criteo.com tcp
US 34.120.107.143:443 oajs.openx.net udp
US 3.92.156.8:443 c2shb.pubgw.yahoo.com tcp
US 8.8.8.8:53 rules.quantcount.com udp
US 8.8.8.8:53 google-bidout-d.openx.net udp
US 35.244.159.8:443 google-bidout-d.openx.net tcp
US 18.65.39.99:443 rules.quantcount.com tcp
US 34.107.140.113:443 s2s.t13.io udp
US 35.227.252.103:443 rtb.openx.net udp
US 64.247.192.240:443 colossusssp.com tcp
US 104.18.24.185:443 htlb.casalemedia.com udp
US 8.8.8.8:53 3f353ebfbb1d97af2a86b1626850c2df.safeframe.googlesyndication.com udp
US 34.111.152.239:443 optimise.net udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 pixel.quantserve.com udp
NL 142.250.179.161:443 3f353ebfbb1d97af2a86b1626850c2df.safeframe.googlesyndication.com tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
US 8.8.8.8:53 c.pub.network udp
US 34.160.152.31:443 c.pub.network tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 34.160.152.31:443 c.pub.network udp
NL 142.251.36.1:443 tpc.googlesyndication.com tcp
US 74.119.119.131:443 static.criteo.net tcp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 c1.adform.net udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 54.81.223.21:443 match.sharethrough.com tcp
IE 54.239.38.253:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
DK 37.157.3.30:443 c1.adform.net tcp
NL 142.251.36.1:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 139.119.119.74.in-addr.arpa udp
US 8.8.8.8:53 103.252.227.35.in-addr.arpa udp
US 8.8.8.8:53 131.119.119.74.in-addr.arpa udp
US 8.8.8.8:53 8.156.92.3.in-addr.arpa udp
US 8.8.8.8:53 143.107.120.34.in-addr.arpa udp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 94.247.213.3.in-addr.arpa udp
US 8.8.8.8:53 64.98.95.141.in-addr.arpa udp
US 8.8.8.8:53 8.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 80.162.19.213.in-addr.arpa udp
US 8.8.8.8:53 129.119.119.74.in-addr.arpa udp
US 8.8.8.8:53 240.192.247.64.in-addr.arpa udp
US 8.8.8.8:53 187.30.213.3.in-addr.arpa udp
US 8.8.8.8:53 180.113.234.3.in-addr.arpa udp
US 8.8.8.8:53 8.159.244.35.in-addr.arpa udp
US 8.8.8.8:53 99.39.65.18.in-addr.arpa udp
US 8.8.8.8:53 162.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 161.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 212.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 1.36.251.142.in-addr.arpa udp
US 8.8.8.8:53 253.38.239.54.in-addr.arpa udp
US 8.8.8.8:53 30.3.157.37.in-addr.arpa udp
US 8.8.8.8:53 194.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 eu-u.openx.net udp
US 8.8.8.8:53 store10.gofile.io udp
FR 162.19.19.83:443 store10.gofile.io tcp
FR 162.19.19.83:443 store10.gofile.io tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 21.223.81.54.in-addr.arpa udp
US 8.8.8.8:53 196.168.217.172.in-addr.arpa udp
US 8.8.8.8:53 83.19.19.162.in-addr.arpa udp
NL 104.81.141.9:443 ads.pubmatic.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 9.141.81.104.in-addr.arpa udp
US 52.223.22.214:443 eb2.3lift.com tcp
US 8.8.8.8:53 image6.pubmatic.com udp
US 8.28.7.81:443 image6.pubmatic.com tcp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 sync.colossusssp.com udp
US 8.8.8.8:53 cdn.undertone.com udp
US 8.8.8.8:53 freestar-d.openx.net udp
US 209.192.253.52:443 sync.colossusssp.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
NL 108.156.60.118:443 cdn.undertone.com tcp
US 104.18.10.47:443 js-sec.indexww.com tcp
US 151.101.1.108:443 acdn.adnxs.com tcp
US 104.18.10.47:443 js-sec.indexww.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 151.101.1.108:443 acdn.adnxs.com tcp
US 209.192.253.52:443 sync.colossusssp.com tcp
NL 108.156.60.118:443 cdn.undertone.com tcp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 www.googletagservices.com udp
US 8.8.8.8:53 pixel.tapad.com udp
US 8.8.8.8:53 us01.z.antigena.com udp
US 8.8.8.8:53 um.simpli.fi udp
US 8.8.8.8:53 ad.turn.com udp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 81.7.28.8.in-addr.arpa udp
US 8.8.8.8:53 214.22.223.52.in-addr.arpa udp
US 34.111.113.62:443 pixel.tapad.com tcp
US 3.225.218.10:443 ups.analytics.yahoo.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
US 40.76.134.238:443 us01.z.antigena.com tcp
NL 34.91.62.186:443 um.simpli.fi tcp
NL 142.251.36.2:443 www.googletagservices.com tcp
IE 52.209.190.133:443 pr-bh.ybp.yahoo.com tcp
US 35.211.178.172:443 x.bidswitch.net tcp
US 35.211.178.172:443 x.bidswitch.net tcp
US 35.211.178.172:443 x.bidswitch.net tcp
US 40.76.134.238:443 us01.z.antigena.com tcp
IE 52.209.190.133:443 pr-bh.ybp.yahoo.com tcp
US 3.225.218.10:443 ups.analytics.yahoo.com tcp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 sync-tm.everesttech.net udp
US 8.8.8.8:53 p.rfihub.com udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 52.46.143.56:443 s.amazon-adsystem.com tcp
US 151.101.2.49:443 sync-tm.everesttech.net tcp
NL 104.85.0.23:443 contextual.media.net tcp
NL 193.0.160.131:443 p.rfihub.com tcp
US 8.8.8.8:53 106.208.58.216.in-addr.arpa udp
US 8.8.8.8:53 52.253.192.209.in-addr.arpa udp
US 8.8.8.8:53 118.60.156.108.in-addr.arpa udp
US 8.8.8.8:53 47.10.18.104.in-addr.arpa udp
US 8.8.8.8:53 108.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 62.113.111.34.in-addr.arpa udp
US 8.8.8.8:53 11.164.228.46.in-addr.arpa udp
US 8.8.8.8:53 2.36.251.142.in-addr.arpa udp
US 8.8.8.8:53 186.62.91.34.in-addr.arpa udp
US 8.8.8.8:53 133.190.209.52.in-addr.arpa udp
US 8.8.8.8:53 195.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 238.134.76.40.in-addr.arpa udp
US 8.8.8.8:53 10.218.225.3.in-addr.arpa udp
US 8.8.8.8:53 172.178.211.35.in-addr.arpa udp
US 8.8.8.8:53 23.0.85.104.in-addr.arpa udp
US 8.8.8.8:53 131.160.0.193.in-addr.arpa udp
US 8.8.8.8:53 56.143.46.52.in-addr.arpa udp
US 8.8.8.8:53 49.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 sync.1rx.io udp
US 199.127.204.171:443 sync.1rx.io tcp
US 8.8.8.8:53 usersync.gumgum.com udp
US 54.87.127.173:443 usersync.gumgum.com tcp
US 8.8.8.8:53 image2.pubmatic.com udp
US 104.36.113.107:443 image2.pubmatic.com tcp
US 199.127.204.171:443 sync.1rx.io tcp
US 8.8.8.8:53 fksnk.com udp
US 8.8.8.8:53 dis.criteo.com udp
US 8.8.8.8:53 cc.adingo.jp udp
US 8.8.8.8:53 ap.lijit.com udp
NL 216.52.2.30:443 ap.lijit.com tcp
US 8.8.8.8:53 cm.smadex.com udp
US 3.210.108.67:443 fksnk.com tcp
US 74.119.119.150:443 dis.criteo.com tcp
US 44.205.131.172:443 cc.adingo.jp tcp
NL 52.222.139.7:443 cm.smadex.com tcp
US 199.127.204.171:443 sync.1rx.io tcp
US 8.8.8.8:53 sync.targeting.unrulymedia.com udp
US 199.127.204.142:443 sync.targeting.unrulymedia.com tcp
US 199.127.204.142:443 sync.targeting.unrulymedia.com tcp
US 8.8.8.8:53 171.204.127.199.in-addr.arpa udp
US 8.8.8.8:53 131.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 173.127.87.54.in-addr.arpa udp
US 8.8.8.8:53 30.2.52.216.in-addr.arpa udp
US 8.8.8.8:53 107.113.36.104.in-addr.arpa udp
US 8.8.8.8:53 150.119.119.74.in-addr.arpa udp
US 8.8.8.8:53 142.204.127.199.in-addr.arpa udp
US 8.8.8.8:53 172.131.205.44.in-addr.arpa udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
CA 185.80.39.216:443 ssum-sec.casalemedia.com tcp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
HK 23.42.175.200:443 secure-assets.rubiconproject.com tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
NL 104.85.2.117:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 us-u.openx.net udp
US 8.8.8.8:53 pixel.advertising.com udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.28.7.82:443 image8.pubmatic.com tcp
US 207.198.113.203:443 pixel-sync.sitescout.com tcp
US 8.8.8.8:53 usr.undertone.com udp
NL 65.9.86.35:443 usr.undertone.com tcp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 openrtb.cootlogix.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 sync.cootlogix.com udp
US 8.8.8.8:53 sync.adkernel.com udp
US 8.8.8.8:53 ids.ad.gt udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 34.111.113.62:443 pixel.tapad.com udp
US 198.148.27.131:443 bh.contextweb.com tcp
NL 77.245.57.72:443 sync.adkernel.com tcp
US 8.8.8.8:53 tr.blismedia.com udp
US 67.205.188.72:443 openrtb.cootlogix.com tcp
US 204.48.28.254:443 sync.cootlogix.com tcp
US 204.48.28.254:443 sync.cootlogix.com tcp
US 35.190.60.146:443 id.rlcdn.com tcp
US 172.67.23.234:443 ids.ad.gt tcp
US 52.20.6.194:443 match.prod.bidr.io tcp
US 52.20.6.194:443 match.prod.bidr.io tcp
US 8.8.8.8:53 openx2-match.dotomi.com udp
US 34.96.105.8:443 tr.blismedia.com tcp
US 8.8.8.8:53 cms.quantserve.com udp
NL 64.158.223.140:443 openx2-match.dotomi.com tcp
US 8.8.8.8:53 r.bidswitch.net udp
US 35.244.159.8:443 us-u.openx.net udp
US 35.211.118.13:443 r.bidswitch.net tcp
US 35.190.60.146:443 id.rlcdn.com udp
US 8.8.8.8:53 216.39.80.185.in-addr.arpa udp
US 8.8.8.8:53 200.175.42.23.in-addr.arpa udp
US 8.8.8.8:53 117.2.85.104.in-addr.arpa udp
US 8.8.8.8:53 82.7.28.8.in-addr.arpa udp
US 8.8.8.8:53 203.113.198.207.in-addr.arpa udp
US 8.8.8.8:53 35.86.9.65.in-addr.arpa udp
US 8.8.8.8:53 72.57.245.77.in-addr.arpa udp
US 8.8.8.8:53 146.60.190.35.in-addr.arpa udp
US 8.8.8.8:53 234.23.67.172.in-addr.arpa udp
US 8.8.8.8:53 8.105.96.34.in-addr.arpa udp
US 8.8.8.8:53 140.223.158.64.in-addr.arpa udp
US 8.8.8.8:53 131.27.148.198.in-addr.arpa udp
US 8.8.8.8:53 72.188.205.67.in-addr.arpa udp
US 8.8.8.8:53 13.118.211.35.in-addr.arpa udp
US 8.8.8.8:53 254.28.48.204.in-addr.arpa udp
US 8.8.8.8:53 194.6.20.52.in-addr.arpa udp
US 209.192.253.52:443 sync.colossusssp.com tcp
US 8.8.8.8:53 simage2.pubmatic.com udp
US 8.8.8.8:53 simage4.pubmatic.com udp
US 104.36.113.111:443 simage4.pubmatic.com tcp
US 8.8.8.8:53 sync.ipredictive.com udp
US 52.204.160.102:443 sync.ipredictive.com tcp
US 8.8.8.8:53 102.160.204.52.in-addr.arpa udp
US 8.8.8.8:53 111.113.36.104.in-addr.arpa udp
US 8.8.8.8:53 sync.technoratimedia.com udp
US 150.136.26.45:443 sync.technoratimedia.com tcp
US 8.8.8.8:53 image4.pubmatic.com udp
US 162.248.18.34:443 image4.pubmatic.com tcp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
FR 185.86.139.94:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 59.128.231.4.in-addr.arpa udp
US 8.8.8.8:53 45.26.136.150.in-addr.arpa udp
US 8.8.8.8:53 34.18.248.162.in-addr.arpa udp
FR 185.86.139.94:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 pubmatic-match.dotomi.com udp
US 8.8.8.8:53 dsum-sec.casalemedia.com udp
CA 185.80.39.216:443 dsum-sec.casalemedia.com tcp
US 8.8.8.8:53 euexchangesync.digitaleast.mobi udp
US 34.95.81.168:443 euexchangesync.digitaleast.mobi tcp
US 8.8.8.8:53 dpm.demdex.net udp
IE 52.31.139.111:443 dpm.demdex.net tcp
CA 185.80.39.216:443 dsum-sec.casalemedia.com tcp
US 8.8.8.8:53 rtb2-useast.marketiq.com udp
US 174.137.133.49:443 rtb2-useast.marketiq.com tcp
US 8.8.8.8:53 94.139.86.185.in-addr.arpa udp
US 8.8.8.8:53 168.81.95.34.in-addr.arpa udp
US 8.8.8.8:53 111.139.31.52.in-addr.arpa udp
US 8.8.8.8:53 inv-nets.admixer.net udp
DE 146.0.227.110:443 inv-nets.admixer.net tcp
US 162.159.130.233:443 discordapp.com tcp
US 8.8.8.8:53 49.133.137.174.in-addr.arpa udp
DE 146.0.227.110:443 inv-nets.admixer.net tcp
US 8.8.8.8:53 cm.adgrx.com udp
NL 72.251.245.179:443 cm.adgrx.com tcp
US 162.159.130.233:443 discordapp.com tcp
US 8.8.8.8:53 match.deepintent.com udp
US 169.197.150.8:443 match.deepintent.com tcp
US 8.8.8.8:53 233.130.159.162.in-addr.arpa udp
US 8.8.8.8:53 179.245.251.72.in-addr.arpa udp
US 8.8.8.8:53 thrtle.com udp
US 44.208.98.212:443 thrtle.com tcp
US 8.8.8.8:53 sync.crwdcntrl.net udp
US 8.8.8.8:53 dsp.adkernel.com udp
US 52.204.160.102:443 sync.ipredictive.com tcp
US 8.8.8.8:53 crb.kargo.com udp
US 8.8.8.8:53 sync.bfmio.com udp
US 8.8.8.8:53 pmp.mxptint.net udp
US 8.8.8.8:53 rtb.adentifi.com udp
US 52.204.48.177:443 sync.bfmio.com tcp
US 18.207.85.110:443 rtb.adentifi.com tcp
US 38.98.69.175:443 pmp.mxptint.net tcp
US 174.137.133.49:443 dsp.adkernel.com tcp
US 3.92.38.243:443 crb.kargo.com tcp
US 8.8.8.8:53 8.150.197.169.in-addr.arpa udp
US 8.8.8.8:53 212.98.208.44.in-addr.arpa udp
US 8.8.8.8:53 175.69.98.38.in-addr.arpa udp
US 8.8.8.8:53 110.85.207.18.in-addr.arpa udp
US 8.8.8.8:53 177.48.204.52.in-addr.arpa udp
US 8.8.8.8:53 243.38.92.3.in-addr.arpa udp
US 8.8.8.8:53 ads.creative-serving.com udp
US 52.44.3.194:443 ads.creative-serving.com tcp
US 8.8.8.8:53 token.rubiconproject.com udp
NL 213.19.162.90:443 token.rubiconproject.com tcp
US 8.8.8.8:53 dsum.casalemedia.com udp
US 8.8.8.8:53 194.3.44.52.in-addr.arpa udp
US 8.8.8.8:53 90.162.19.213.in-addr.arpa udp
CA 185.80.39.216:443 dsum.casalemedia.com tcp
US 8.8.8.8:53 synchroscript.deliveryengine.adswizz.com udp
IE 52.17.100.232:443 synchroscript.deliveryengine.adswizz.com tcp
US 8.8.8.8:53 idsync.rlcdn.com udp
US 207.198.113.203:443 pixel-sync.sitescout.com tcp
US 8.8.8.8:53 pool.admedo.com udp
BE 35.210.53.219:443 pool.admedo.com tcp
NL 213.19.162.90:443 token.rubiconproject.com tcp
US 8.8.8.8:53 beacon.lynx.cognitivlabs.com udp
US 54.225.185.242:443 beacon.lynx.cognitivlabs.com tcp
US 8.8.8.8:53 rcp.c.appier.net udp
JP 139.162.84.221:443 rcp.c.appier.net tcp
US 8.8.8.8:53 232.100.17.52.in-addr.arpa udp
US 8.8.8.8:53 219.53.210.35.in-addr.arpa udp
US 8.8.8.8:53 242.185.225.54.in-addr.arpa udp
JP 139.162.84.221:443 rcp.c.appier.net tcp
US 8.8.8.8:53 pippio.com udp
US 107.178.254.65:443 pippio.com tcp
BE 35.210.53.219:443 pool.admedo.com udp
US 8.8.8.8:53 px.ads.linkedin.com udp
US 13.107.42.14:443 px.ads.linkedin.com tcp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 52.45.151.151:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 pm.w55c.net udp
US 52.5.225.244:443 pm.w55c.net tcp
US 8.8.8.8:53 a.tribalfusion.com udp
US 104.18.25.173:443 a.tribalfusion.com tcp
US 54.225.185.242:443 beacon.lynx.cognitivlabs.com tcp
US 8.8.8.8:53 ad.mrtnsvr.com udp
US 8.8.8.8:53 csync.loopme.me udp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
NL 35.214.211.255:443 csync.loopme.me tcp
US 8.8.8.8:53 ums.acuityplatform.com udp
US 8.8.8.8:53 s.tribalfusion.com udp
US 69.90.254.78:443 ums.acuityplatform.com tcp
US 8.8.8.8:53 t.adx.opera.com udp
US 8.8.8.8:53 bpi.rtactivate.com udp
US 8.8.8.8:53 i.liadm.com udp
US 8.8.8.8:53 io.narrative.io udp
NL 82.145.213.8:443 t.adx.opera.com tcp
US 8.8.8.8:53 221.84.162.139.in-addr.arpa udp
US 8.8.8.8:53 65.254.178.107.in-addr.arpa udp
US 8.8.8.8:53 14.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 151.151.45.52.in-addr.arpa udp
US 8.8.8.8:53 244.225.5.52.in-addr.arpa udp
US 3.82.71.238:443 i.liadm.com tcp
US 8.8.8.8:53 6.163.102.34.in-addr.arpa udp
US 8.8.8.8:53 255.211.214.35.in-addr.arpa udp
US 18.208.101.220:443 bpi.rtactivate.com tcp
US 54.158.247.65:443 io.narrative.io tcp
NL 46.228.164.11:443 ad.turn.com tcp
US 199.127.204.142:443 sync.targeting.unrulymedia.com tcp
US 8.8.8.8:53 i6.liadm.com udp
US 23.22.44.74:443 i6.liadm.com tcp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 78.254.90.69.in-addr.arpa udp
US 8.8.8.8:53 238.71.82.3.in-addr.arpa udp
US 8.8.8.8:53 220.101.208.18.in-addr.arpa udp
US 8.8.8.8:53 65.247.158.54.in-addr.arpa udp
US 8.8.8.8:53 74.44.22.23.in-addr.arpa udp
US 8.8.8.8:53 26.165.165.52.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 8.3.197.209.in-addr.arpa udp
US 8.8.8.8:53 gocm.c.appier.net udp
US 8.8.8.8:53 ipac.ctnsnet.com udp
JP 172.105.221.29:443 gocm.c.appier.net tcp
US 8.8.8.8:53 mweb.ck.inmobi.com udp
US 35.186.193.173:443 ipac.ctnsnet.com tcp
US 20.85.134.6:443 mweb.ck.inmobi.com tcp
US 8.8.8.8:53 matching.truffle.bid udp
DE 23.88.86.2:443 matching.truffle.bid tcp
US 8.8.8.8:53 core.iprom.net udp
SI 195.5.165.20:443 core.iprom.net tcp
JP 172.105.221.29:443 gocm.c.appier.net tcp
US 8.8.8.8:53 crt.sectigo.com udp
US 104.18.15.101:80 crt.sectigo.com tcp
US 8.8.8.8:53 px.owneriq.net udp
US 8.8.8.8:53 a.audrte.com udp
US 8.8.8.8:53 aa.agkn.com udp
US 8.8.8.8:53 pixel.onaudience.com udp
US 8.8.8.8:53 ads.playground.xyz udp
US 8.8.8.8:53 match.adsby.bidtheatre.com udp
JP 23.207.104.228:443 px.owneriq.net tcp
US 52.6.12.210:443 a.audrte.com tcp
FR 141.94.171.216:443 pixel.onaudience.com tcp
US 34.102.253.54:443 ads.playground.xyz tcp
NL 134.122.57.34:443 match.adsby.bidtheatre.com tcp
IE 54.155.55.68:443 aa.agkn.com tcp
DK 77.243.51.122:443 uipglob.semasio.net tcp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 uipus.semasio.net udp
NL 185.89.210.153:443 secure.adnxs.com tcp
US 50.57.31.206:443 uipus.semasio.net tcp
US 8.8.8.8:53 tags.bluekai.com udp
JP 23.207.96.112:443 tags.bluekai.com tcp
US 8.8.8.8:53 dmp.adform.net udp
DK 37.157.4.28:443 dmp.adform.net tcp
US 8.8.8.8:53 173.193.186.35.in-addr.arpa udp
US 8.8.8.8:53 6.134.85.20.in-addr.arpa udp
US 8.8.8.8:53 2.86.88.23.in-addr.arpa udp
US 8.8.8.8:53 20.165.5.195.in-addr.arpa udp
US 8.8.8.8:53 29.221.105.172.in-addr.arpa udp
US 8.8.8.8:53 228.104.207.23.in-addr.arpa udp
US 8.8.8.8:53 54.253.102.34.in-addr.arpa udp
US 8.8.8.8:53 34.57.122.134.in-addr.arpa udp
US 8.8.8.8:53 68.55.155.54.in-addr.arpa udp
US 8.8.8.8:53 216.171.94.141.in-addr.arpa udp
US 8.8.8.8:53 101.15.18.104.in-addr.arpa udp
US 8.8.8.8:53 122.51.243.77.in-addr.arpa udp
US 8.8.8.8:53 210.12.6.52.in-addr.arpa udp
US 8.8.8.8:53 153.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 112.96.207.23.in-addr.arpa udp
US 8.8.8.8:53 206.31.57.50.in-addr.arpa udp
US 8.8.8.8:53 28.4.157.37.in-addr.arpa udp
US 35.190.60.146:443 idsync.rlcdn.com udp
US 35.244.159.8:443 us-u.openx.net udp
US 8.8.8.8:53 163.252.72.23.in-addr.arpa udp

Files

\??\pipe\crashpad_4108_SKTAWGMUHBDRBYTD

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 a530a0b56e051410794f6d04c8aa04d1
SHA1 75ac2c703986e2ac78d04eece453cf1b7cc5dbd7
SHA256 b89645e7d2a5a4ea557b174820061efb948dce1ebd4a57fc284d848a854cdf8b
SHA512 8366db02e4506e8df1140bd0bfa3989c4de732dd8c33328d5b4e59989b7afa27cf4e023b29f1ad3c7dd9a332001d7bfe8759bf26abef5aa6cd3e5c576e005966

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 25fabb989778ccfc97418f9b1f179260
SHA1 9d572fa9e1b8864a9a3e078bf8492edbb7c20ad3
SHA256 e1476417fed1cc9bfb1b7810f96576c75f729a11163ff6b962a272469c46447e
SHA512 e15942899427310f5a48e96c825797bd9df700f13fd052d8c48b26ff563d6d4c5679ff7319160e563c257f61f4182e184870264b45bf2bd2b4e1c9aa2c0d7d36

C:\Users\Admin\Downloads\Gerador.zip

MD5 2054de7c18d981858987e6f7e64fd808
SHA1 ace760b85ad37fa12a3e65f3bfb0529362537bcf
SHA256 7bf8b31e20e0d651fc7ec648cde247ee0a5319c3ce80ddfa99e018dc784306f5
SHA512 c805d8b4f595e7fea85705908d0147ab7e774a9eecc6d35e3185b651884cfd8120941b97798b8969bffd3e41acc95b5a8357c3aed67b293a6f3355913ad053d4

memory/6256-283-0x0000000000B70000-0x0000000000B80000-memory.dmp

memory/6256-286-0x00007FF9BA4D0000-0x00007FF9BAF91000-memory.dmp

memory/6256-290-0x0000000001220000-0x0000000001230000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 9002aa7b289a221c3fcea70886d1023e
SHA1 46802aedf253b6a9829f3389d35e83b4ee8a2255
SHA256 3a27d7108e585c0f8fb15d90e9ba06f8ebc43d0ae1768c55eb8a63163112c0ef
SHA512 51d787f5f819e692de869e2c82cb9e527e64e2d46661570b186214edd21b668486d52afc88532262770525702f37e4055a9121613215aa3978920042d86a2f0b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b9f485ee208d673a22856a442bcd34c9
SHA1 e7e0fddaca4fa289c1e498015da30fe1ce61ad24
SHA256 aff6316ddf09d17fa8043f8b4c358cbd3c1483387c3a7a82a7c59c3674e0782c
SHA512 903cdcd3fead4239335a9640bc2aab1f1a4735e867ae57ab82b9937486679af37e1f681a8d49b3e647cafc726387e792109aa7a0054cd8ae1660103d93aad548

memory/6256-354-0x00007FF9BA4D0000-0x00007FF9BAF91000-memory.dmp

memory/6256-355-0x0000000001220000-0x0000000001230000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 92169a460031769b157df60d56296dd9
SHA1 8d69e562158802f4e29697d31f176c3e7da6cf74
SHA256 e37f0da7fc917de7dc78e087c93b9a26193ad880840c00b400ce2ae17c5de517
SHA512 ff6497ee5f48747fe917a97f10240cf101bf892c21a87a45a953d804f704331c81f51e728c35a05ef927cfcb1494ddf02c5f7eed9d95012b803105ad5441210d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 2cfeed86b9eeb7caefa6015867d4b829
SHA1 b8bf99283b0682d5f63aca19abf7d9e0535ed9c8
SHA256 b1b5b524c8101bab0872b66fb4dc2aaf6a4b4749c5ead6d22fd47051f435423a
SHA512 0ce4f246e5845c057fb19943c77ff208f2a878b7f8ef5c80b4594aba994e5ed39db359180849600318784b1964ee032e2607569c71b9d071aa48737cd1c6065b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 222ea7e1f2fd0e66900c47643e13915d
SHA1 e1d1745ba3e047c3fc46f89e40ed959a352dac65
SHA256 bfe4e7b94ef19a26f6bf5ff256926b0286c45c3ac2fb044994d3cd9aeff0ce42
SHA512 e82818cfbc9c9f47381e45e33454d9df0ad3990f4ac4e03cc275e151b96d06295dea75dbec1820d7a95353c5d1ffe2426053388b1c9851b4986e357a5850efa5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 d3acb850e6805a105bc5d19ffd3e55f6
SHA1 779e587b8f7e984156ad50a75370eb448fffad6e
SHA256 12436b419399f874bd532c1c00e3838844d1fd59f8ed335fa2a86dc86fa34f71
SHA512 70923a99861c774a77000586e0f04d96a9cbd5c0a1f41a8f142b41c418e0ffe75176584cd96616bf8db111d0f728f81cd9d120599d06831ecd39857be5922e3e