Malware Analysis Report

2024-11-30 19:02

Sample ID 240316-ynj9eacf49
Target https://youtube.com
Tags
lumma agilenet stealer upx
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file https://youtube.com was found to be: Known bad.

Malicious Activity Summary

lumma agilenet stealer upx

Lumma Stealer

Obfuscated with Agile.Net obfuscator

Checks computer location settings

UPX packed file

Executes dropped EXE

Loads dropped DLL

Legitimate hosting services abused for malware hosting/C2

Suspicious use of SetThreadContext

Program crash

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of FindShellTrayWindow

Checks SCSI registry key(s)

Suspicious use of SendNotifyMessage

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of WriteProcessMemory

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: EnumeratesProcesses

Modifies data under HKEY_USERS

Enumerates system info in registry

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-03-16 19:55

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-03-16 19:55

Reported

2024-03-16 20:09

Platform

win10v2004-20240226-en

Max time kernel

784s

Max time network

789s

Command Line

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://youtube.com

Signatures

Lumma Stealer

stealer lumma

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Downloads\dnSpy.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Desktop\Archive installation\Installer.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A
N/A N/A C:\Users\Admin\Downloads\dnSpy.exe N/A

Obfuscated with Agile.Net obfuscator

agilenet
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A sites.google.com N/A N/A

Suspicious use of SetThreadContext

Description Indicator Process Target
PID 5692 set thread context of 5336 N/A C:\Users\Admin\Desktop\Archive installation\Installer.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133550925776158558" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-557049126-2506969350-2798870634-1000\{21EB9384-3ACE-4051-B47E-219248159CDC} C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000_Classes\Local Settings C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-557049126-2506969350-2798870634-1000\{8BA59731-E21C-4579-BC01-E09F3FD6399B} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4912 wrote to memory of 1684 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 1684 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 2144 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 1648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 1648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4912 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://youtube.com

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc9c539758,0x7ffc9c539768,0x7ffc9c539778

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1752 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2232 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3188 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3312 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4648 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4008 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5252 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5892 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5084 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5564 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5108 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x410 0x348

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5196 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1640 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3392 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=2844 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6128 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=5996 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6052 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=5020 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=6452 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=6664 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=6672 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=6668 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7216 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=6244 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=5020 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=4860 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=5768 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2840 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7864 --field-trial-handle=1900,i,3353923844328343725,6140380473031917733,131072 /prefetch:8

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\Archive installation.rar"

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Desktop\Archive installation\Installer.exe

"C:\Users\Admin\Desktop\Archive installation\Installer.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffc8b3346f8,0x7ffc8b334708,0x7ffc8b334718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2200 /prefetch:2

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 5336 -ip 5336

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 /prefetch:3

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 5336 -ip 5336

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2904 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3432 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3444 /prefetch:1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5336 -s 936

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5336 -s 1288

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3972 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1980 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3600 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6012 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6460 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6284 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6588 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6592 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6724 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6972 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9176 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9196 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8496 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9084 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5476 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=9380 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9332 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9520 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6760 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6172 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9292 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9292 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7356 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5820 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3600 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5908 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9168 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9632 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6048 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6608 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7228 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=9636 /prefetch:2

C:\Users\Admin\Desktop\ExeinfoPE\exeinfope.exe

"C:\Users\Admin\Desktop\ExeinfoPE\exeinfope.exe"

C:\Users\Admin\Desktop\ExeinfoPE\exeinfope.exe

"C:\Users\Admin\Desktop\ExeinfoPE\exeinfope.exe"

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /4

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8668 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3680 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7188 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6596 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6648 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7116 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7928 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7988 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8084 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8044 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7308 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7540 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8872 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9760 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8172 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6572 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9228 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8244 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8204 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7300 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4472 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7844 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6120 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7532 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5728 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8764 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8132 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6484 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6996 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9892 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8700 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8388 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6708 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5764 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5500 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3628 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,11275421855313199081,2238449945666477338,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8776 /prefetch:1

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap15625:92:7zEvent28359

C:\Users\Admin\Downloads\dnSpy.exe

"C:\Users\Admin\Downloads\dnSpy.exe"

Network

Country Destination Domain Proto
US 138.91.171.81:80 tcp
US 8.8.8.8:53 133.211.185.52.in-addr.arpa udp
US 8.8.8.8:53 youtube.com udp
GB 142.250.187.238:443 youtube.com tcp
GB 142.250.187.238:443 youtube.com tcp
US 8.8.8.8:53 187.178.17.96.in-addr.arpa udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 133.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 234.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 9.228.82.20.in-addr.arpa udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.179.238:443 www.youtube.com udp
GB 142.250.187.214:443 i.ytimg.com tcp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 214.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 accounts.google.com udp
IE 209.85.203.84:443 accounts.google.com udp
US 8.8.8.8:53 227.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 84.203.85.209.in-addr.arpa udp
IE 209.85.203.84:443 accounts.google.com tcp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.200:443 g.bing.com tcp
US 8.8.8.8:53 81.171.91.138.in-addr.arpa udp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 3.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 41.110.16.96.in-addr.arpa udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 172.217.169.74:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 74.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 consent.youtube.com udp
GB 142.250.180.14:443 consent.youtube.com tcp
US 8.8.8.8:53 14.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 26.165.165.52.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.178.4:443 www.google.com udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.187.214:443 i.ytimg.com udp
US 8.8.8.8:53 4.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
GB 216.58.204.66:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 142.250.178.6:443 static.doubleclick.net tcp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 6.178.250.142.in-addr.arpa udp
GB 172.217.169.74:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 217.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 suggestqueries-clients6.youtube.com udp
GB 142.250.187.238:443 suggestqueries-clients6.youtube.com udp
GB 142.250.187.238:443 suggestqueries-clients6.youtube.com tcp
US 8.8.8.8:53 195.177.78.104.in-addr.arpa udp
US 8.8.8.8:53 yt3.ggpht.com udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
US 8.8.8.8:53 lh5.googleusercontent.com udp
GB 142.250.178.1:443 yt3.ggpht.com tcp
GB 142.250.178.1:443 yt3.ggpht.com tcp
GB 216.58.201.97:443 lh5.googleusercontent.com udp
GB 216.58.201.97:443 lh5.googleusercontent.com udp
US 8.8.8.8:53 97.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 1.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 119.110.54.20.in-addr.arpa udp
US 8.8.8.8:53 203.178.17.96.in-addr.arpa udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 192.178.49.3:443 beacons.gcp.gvt2.com tcp
GB 142.250.178.1:443 yt3.ggpht.com udp
US 8.8.8.8:53 3.49.178.192.in-addr.arpa udp
US 8.8.8.8:53 0.204.248.87.in-addr.arpa udp
US 8.8.8.8:53 0.205.248.87.in-addr.arpa udp
US 8.8.8.8:53 rr5---sn-aigl6nze.googlevideo.com udp
GB 74.125.168.138:443 rr5---sn-aigl6nze.googlevideo.com tcp
GB 74.125.168.138:443 rr5---sn-aigl6nze.googlevideo.com tcp
US 8.8.8.8:53 rr5---sn-aigl6nsd.googlevideo.com udp
US 8.8.8.8:53 138.168.125.74.in-addr.arpa udp
GB 74.125.105.42:443 rr5---sn-aigl6nsd.googlevideo.com udp
US 8.8.8.8:53 rr4---sn-5hne6nsy.googlevideo.com udp
GB 172.217.169.74:443 jnn-pa.googleapis.com udp
NL 172.217.132.105:443 rr4---sn-5hne6nsy.googlevideo.com udp
GB 74.125.168.138:443 rr5---sn-aigl6nze.googlevideo.com udp
US 8.8.8.8:53 42.105.125.74.in-addr.arpa udp
US 8.8.8.8:53 105.132.217.172.in-addr.arpa udp
US 8.8.8.8:53 72.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.200.46:443 play.google.com tcp
GB 142.250.200.46:443 play.google.com tcp
GB 142.250.200.46:443 play.google.com udp
IE 209.85.203.84:443 accounts.google.com udp
IE 209.85.203.84:443 accounts.google.com tcp
GB 142.250.200.46:443 play.google.com tcp
US 8.8.8.8:53 beacons4.gvt2.com udp
US 216.239.32.116:443 beacons4.gvt2.com tcp
US 8.8.8.8:53 46.200.250.142.in-addr.arpa udp
US 216.239.32.116:443 beacons4.gvt2.com udp
US 8.8.8.8:53 116.32.239.216.in-addr.arpa udp
GB 216.58.204.66:443 googleads.g.doubleclick.net udp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 178.223.142.52.in-addr.arpa udp
GB 142.250.179.238:443 www.youtube.com udp
GB 216.58.204.66:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 211.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 rr2---sn-aigl6ney.googlevideo.com udp
GB 173.194.183.167:443 rr2---sn-aigl6ney.googlevideo.com udp
US 8.8.8.8:53 167.183.194.173.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
GB 216.58.204.66:443 googleads.g.doubleclick.net udp
US 192.178.49.3:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 sites.google.com udp
US 8.8.8.8:53 apis.google.com udp
GB 216.58.213.14:443 apis.google.com tcp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
GB 216.58.213.14:443 apis.google.com udp
US 8.8.8.8:53 lh4.googleusercontent.com udp
GB 216.58.201.97:443 lh4.googleusercontent.com udp
GB 142.250.200.46:443 play.google.com udp
GB 142.250.187.238:443 sites.google.com udp
US 8.8.8.8:53 ssl.gstatic.com udp
US 8.8.8.8:53 bit.ly udp
US 67.199.248.10:443 bit.ly tcp
US 67.199.248.10:443 bit.ly tcp
GB 142.250.200.46:443 play.google.com udp
US 8.8.8.8:53 10.248.199.67.in-addr.arpa udp
US 8.8.8.8:53 www.mediafire.com udp
US 104.16.113.74:443 www.mediafire.com tcp
US 172.67.199.186:443 the.gatekeeperconsent.com tcp
US 8.8.8.8:53 74.113.16.104.in-addr.arpa udp
US 8.8.8.8:53 btloader.com udp
US 172.67.41.60:443 btloader.com tcp
US 8.8.8.8:53 www.ezojs.com udp
US 8.8.8.8:53 privacy.gatekeeperconsent.com udp
US 8.8.8.8:53 translate.google.com udp
US 172.64.129.8:443 www.ezojs.com tcp
US 104.21.42.32:443 privacy.gatekeeperconsent.com tcp
GB 142.250.178.14:443 translate.google.com tcp
US 8.8.8.8:53 static.mediafire.com udp
US 8.8.8.8:53 api.btloader.com udp
US 130.211.23.194:443 api.btloader.com tcp
US 104.16.113.74:443 static.mediafire.com udp
US 8.8.8.8:53 232.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 186.199.67.172.in-addr.arpa udp
US 8.8.8.8:53 60.41.67.172.in-addr.arpa udp
US 8.8.8.8:53 8.129.64.172.in-addr.arpa udp
US 8.8.8.8:53 32.42.21.104.in-addr.arpa udp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 cdn.amplitude.com udp
US 8.8.8.8:53 cdn.otnolatrnup.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 104.21.42.32:443 privacy.gatekeeperconsent.com udp
US 172.67.199.186:443 privacy.gatekeeperconsent.com udp
US 8.8.8.8:53 translate.googleapis.com udp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
FR 13.224.57.60:443 cdn.amplitude.com tcp
US 104.19.215.37:443 cdn.otnolatrnup.com tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
GB 216.58.201.106:443 translate.googleapis.com tcp
US 8.8.8.8:53 g.ezoic.net udp
FR 13.39.145.251:443 g.ezoic.net tcp
US 8.8.8.8:53 73.79.16.104.in-addr.arpa udp
US 8.8.8.8:53 238.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 60.57.224.13.in-addr.arpa udp
US 8.8.8.8:53 37.215.19.104.in-addr.arpa udp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 198.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 106.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 251.145.39.13.in-addr.arpa udp
US 8.8.8.8:53 17.201.222.52.in-addr.arpa udp
US 8.8.8.8:53 go.ezodn.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 172.217.169.34:443 securepubads.g.doubleclick.net tcp
US 130.211.23.194:443 api.btloader.com udp
US 172.64.174.21:443 go.ezodn.com tcp
US 172.64.174.21:443 go.ezodn.com tcp
US 172.64.174.21:443 go.ezodn.com tcp
US 172.67.199.186:443 privacy.gatekeeperconsent.com udp
US 8.8.8.8:53 apps.identrust.com udp
GB 96.17.179.205:80 apps.identrust.com tcp
US 8.8.8.8:53 translate-pa.googleapis.com udp
US 8.8.8.8:53 otnolatrnup.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 tlx.3lift.com udp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
DE 3.123.206.126:443 btlr.sharethrough.com tcp
DE 3.123.206.126:443 btlr.sharethrough.com tcp
DE 3.123.206.126:443 btlr.sharethrough.com tcp
DE 3.123.206.126:443 btlr.sharethrough.com tcp
DE 3.123.206.126:443 btlr.sharethrough.com tcp
GB 172.217.169.34:443 securepubads.g.doubleclick.net udp
DE 3.124.64.248:443 tlx.3lift.com tcp
US 34.120.63.153:443 prebid.media.net tcp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 api.amplitude.com udp
US 54.68.242.50:443 api.amplitude.com tcp
BE 142.251.173.156:443 stats.g.doubleclick.net tcp
DE 3.123.206.126:443 btlr.sharethrough.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 172.64.174.21:443 go.ezodn.com udp
US 8.8.8.8:53 34.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 21.174.64.172.in-addr.arpa udp
US 8.8.8.8:53 205.179.17.96.in-addr.arpa udp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 248.64.124.3.in-addr.arpa udp
US 8.8.8.8:53 156.173.251.142.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 126.206.123.3.in-addr.arpa udp
US 8.8.8.8:53 50.242.68.54.in-addr.arpa udp
US 104.19.215.37:443 otnolatrnup.com udp
US 8.8.8.8:53 download1320.mediafire.com udp
US 205.196.123.8:443 download1320.mediafire.com tcp
US 205.196.123.8:443 download1320.mediafire.com tcp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 analytics.google.com udp
BE 142.251.173.156:443 stats.g.doubleclick.net udp
US 216.239.38.181:443 analytics.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 ad.crwdcntrl.net udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
IE 54.194.222.229:443 bcp.crwdcntrl.net tcp
IE 54.220.33.129:443 bcp.crwdcntrl.net tcp
FR 18.155.129.39:443 tags.crwdcntrl.net tcp
GB 142.250.178.4:443 www.google.com udp
GB 142.250.178.14:443 fundingchoicesmessages.google.com udp
US 216.239.38.181:443 analytics.google.com tcp
GB 216.58.201.106:443 translate-pa.googleapis.com udp
US 8.8.8.8:53 8.123.196.205.in-addr.arpa udp
US 8.8.8.8:53 39.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 229.222.194.54.in-addr.arpa udp
US 8.8.8.8:53 129.33.220.54.in-addr.arpa udp
US 104.19.215.37:80 otnolatrnup.com tcp
US 104.19.215.37:80 otnolatrnup.com tcp
US 104.19.215.37:80 otnolatrnup.com tcp
US 8.8.8.8:53 woreppercomming.com udp
FR 18.155.129.5:443 woreppercomming.com tcp
US 8.8.8.8:53 www.ovardu.com udp
US 172.67.174.4:443 www.ovardu.com tcp
US 8.8.8.8:53 5.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 4.174.67.172.in-addr.arpa udp
US 8.8.8.8:53 www.opera.com udp
DE 3.121.106.72:443 www.opera.com tcp
US 8.8.8.8:53 eb2.3lift.com udp
US 13.248.245.213:443 eb2.3lift.com tcp
US 13.248.245.213:443 eb2.3lift.com tcp
US 8.8.8.8:53 72.106.121.3.in-addr.arpa udp
US 8.8.8.8:53 181.38.239.216.in-addr.arpa udp
US 8.8.8.8:53 213.245.248.13.in-addr.arpa udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 ads.pubmatic.com udp
GB 96.16.109.9:443 ads.pubmatic.com tcp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 9.109.16.96.in-addr.arpa udp
GB 2.17.4.21:443 contextual.media.net tcp
US 216.239.38.181:443 analytics.google.com udp
US 8.8.8.8:53 21.4.17.2.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 8.8.8.8:53 image6.pubmatic.com udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
GB 142.250.178.14:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
NL 198.47.127.19:443 image6.pubmatic.com tcp
US 8.8.8.8:53 19.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 240.221.184.93.in-addr.arpa udp
US 192.178.49.3:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 csp.withgoogle.com udp
US 8.8.8.8:53 beacons3.gvt2.com udp
GB 216.58.212.241:443 csp.withgoogle.com tcp
GB 216.58.212.241:443 csp.withgoogle.com udp
IE 209.85.203.84:443 accounts.google.com udp
US 8.8.8.8:53 241.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 cdn-production-opera-website.operacdn.com udp
US 8.8.8.8:53 www.googleoptimize.com udp
GB 104.84.85.174:443 cdn-production-opera-website.operacdn.com tcp
GB 104.84.85.174:443 cdn-production-opera-website.operacdn.com tcp
GB 104.84.85.174:443 cdn-production-opera-website.operacdn.com tcp
GB 104.84.85.174:443 cdn-production-opera-website.operacdn.com tcp
GB 216.58.213.14:443 www.googleoptimize.com tcp
US 8.8.8.8:53 www-static.operacdn.com udp
US 8.8.8.8:53 www.redditstatic.com udp
US 8.8.8.8:53 static.hotjar.com udp
US 8.8.8.8:53 snap.licdn.com udp
US 8.8.8.8:53 connect.facebook.net udp
US 151.101.1.140:443 www.redditstatic.com tcp
GB 104.84.85.174:443 cdn-production-opera-website.operacdn.com tcp
FR 3.162.38.31:443 static.hotjar.com tcp
GB 88.221.134.88:443 snap.licdn.com tcp
GB 163.70.147.23:443 connect.facebook.net tcp
US 151.101.1.140:443 www.redditstatic.com tcp
US 8.8.8.8:53 px.ads.linkedin.com udp
US 8.8.8.8:53 alb.reddit.com udp
US 8.8.8.8:53 script.hotjar.com udp
US 8.8.8.8:53 174.85.84.104.in-addr.arpa udp
US 8.8.8.8:53 140.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 31.38.162.3.in-addr.arpa udp
US 8.8.8.8:53 23.147.70.163.in-addr.arpa udp
US 8.8.8.8:53 88.134.221.88.in-addr.arpa udp
US 151.101.1.140:443 alb.reddit.com tcp
GB 163.70.147.23:443 connect.facebook.net udp
US 13.107.42.14:443 px.ads.linkedin.com tcp
FR 18.164.52.73:443 script.hotjar.com tcp
US 13.107.42.14:443 px.ads.linkedin.com tcp
FR 18.164.52.73:443 script.hotjar.com tcp
US 8.8.8.8:53 14.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 73.52.164.18.in-addr.arpa udp
US 8.8.8.8:53 vc.hotjar.io udp
FR 13.32.145.82:443 vc.hotjar.io tcp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 www.linkedin.com udp
GB 163.70.151.35:443 www.facebook.com tcp
US 8.8.8.8:53 beacons5.gvt3.com udp
US 192.178.49.163:443 beacons5.gvt3.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
US 8.8.8.8:53 82.145.32.13.in-addr.arpa udp
US 8.8.8.8:53 35.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 bat.bing.com udp
DE 3.121.106.72:443 www.opera.com tcp
US 204.79.197.200:443 bat.bing.com tcp
US 204.79.197.200:443 bat.bing.com tcp
US 8.8.8.8:53 163.49.178.192.in-addr.arpa udp
US 8.8.8.8:53 www.clarity.ms udp
US 13.107.246.64:443 www.clarity.ms tcp
US 13.107.246.64:443 www.clarity.ms tcp
US 8.8.8.8:53 c.clarity.ms udp
IE 68.219.88.97:443 c.clarity.ms tcp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 h.clarity.ms udp
US 52.224.31.34:443 h.clarity.ms tcp
US 52.224.31.34:443 h.clarity.ms tcp
US 52.224.31.34:443 h.clarity.ms tcp
US 8.8.8.8:53 97.88.219.68.in-addr.arpa udp
US 8.8.8.8:53 34.31.224.52.in-addr.arpa udp
FR 13.39.145.251:443 g.ezoic.net tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 oa.openxcdn.net udp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 cdn.prod.uidapi.com udp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
US 8.8.8.8:53 cdn-ima.33across.com udp
US 8.8.8.8:53 09ea909f153666dda4cda498bd90ee07.safeframe.googlesyndication.com udp
US 34.102.146.192:443 oa.openxcdn.net tcp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 172.67.38.106:443 cdn.id5-sync.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 104.18.35.167:443 cdn-ima.33across.com tcp
FR 13.224.63.223:443 cdn.prod.uidapi.com tcp
GB 216.58.204.65:443 09ea909f153666dda4cda498bd90ee07.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 216.58.212.193:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 oajs.openx.net udp
US 8.8.8.8:53 id5-sync.com udp
US 34.120.107.143:443 oajs.openx.net tcp
DE 141.95.98.65:443 id5-sync.com tcp
GB 216.58.212.193:443 tpc.googlesyndication.com tcp
GB 216.58.212.193:443 tpc.googlesyndication.com tcp
GB 216.58.212.193:443 tpc.googlesyndication.com tcp
US 34.120.107.143:443 oajs.openx.net udp
GB 216.58.212.193:443 tpc.googlesyndication.com udp
GB 172.217.169.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 106.38.67.172.in-addr.arpa udp
US 8.8.8.8:53 192.146.102.34.in-addr.arpa udp
US 8.8.8.8:53 87.70.96.34.in-addr.arpa udp
US 8.8.8.8:53 167.35.18.104.in-addr.arpa udp
US 8.8.8.8:53 223.63.224.13.in-addr.arpa udp
US 8.8.8.8:53 65.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 193.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 143.107.120.34.in-addr.arpa udp
US 8.8.8.8:53 65.98.95.141.in-addr.arpa udp
US 8.8.8.8:53 google-bidout-d.openx.net udp
US 35.244.159.8:443 google-bidout-d.openx.net tcp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 gum.criteo.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 8.159.244.35.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 27.73.42.20.in-addr.arpa udp
US 8.8.8.8:53 59.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 10.175.16.69.in-addr.arpa udp
GB 216.58.204.66:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 google.com udp
GB 216.58.201.110:443 google.com tcp
US 8.8.8.8:53 e2c29.gcp.gvt2.com udp
US 34.106.86.104:443 e2c29.gcp.gvt2.com tcp
US 8.8.8.8:53 110.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 104.86.106.34.in-addr.arpa udp
US 8.8.8.8:53 sideindexfollowragelrew.pw udp
US 8.8.8.8:53 wisemassiveharmonious.shop udp
US 8.8.8.8:53 colorfulequalugliess.shop udp
US 172.67.185.152:443 colorfulequalugliess.shop tcp
US 8.8.8.8:53 152.185.67.172.in-addr.arpa udp
US 8.8.8.8:53 beacons2.gvt2.com udp
US 172.67.185.152:443 colorfulequalugliess.shop tcp
US 8.8.8.8:53 e2c24.gcp.gvt2.com udp
US 35.185.21.228:443 e2c24.gcp.gvt2.com tcp
US 8.8.8.8:53 beacons.gvt2.com udp
GB 172.217.169.67:443 beacons.gvt2.com tcp
US 8.8.8.8:53 228.21.185.35.in-addr.arpa udp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 e2c20.gcp.gvt2.com udp
CA 34.95.44.106:443 e2c20.gcp.gvt2.com tcp
US 8.8.8.8:53 106.44.95.34.in-addr.arpa udp
GB 92.123.128.175:443 www.bing.com tcp
GB 92.123.128.175:443 www.bing.com tcp
GB 92.123.128.175:443 www.bing.com tcp
US 8.8.8.8:53 175.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 92.123.128.136:443 r.bing.com tcp
GB 92.123.128.150:443 r.bing.com tcp
GB 92.123.128.150:443 r.bing.com tcp
GB 92.123.128.136:443 r.bing.com tcp
GB 92.123.128.150:443 r.bing.com tcp
US 8.8.8.8:53 150.128.123.92.in-addr.arpa udp
GB 92.123.128.136:443 r.bing.com tcp
GB 92.123.128.136:443 r.bing.com tcp
GB 92.123.128.136:443 r.bing.com tcp
GB 92.123.128.136:443 r.bing.com tcp
GB 92.123.128.136:443 r.bing.com tcp
US 8.8.8.8:53 exeinfo-pe32.en.softonic.com udp
US 35.227.233.104:443 exeinfo-pe32.en.softonic.com tcp
US 35.227.233.104:443 exeinfo-pe32.en.softonic.com tcp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 sc.sftcdn.net udp
GB 104.103.241.197:443 images.sftcdn.net tcp
US 8.8.8.8:53 sdk.privacy-center.org udp
DE 54.230.206.44:443 sdk.privacy-center.org tcp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
GB 172.217.169.34:443 securepubads.g.doubleclick.net tcp
FR 52.222.145.16:443 c.amazon-adsystem.com tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
GB 172.217.169.34:443 securepubads.g.doubleclick.net tcp
FR 52.222.145.16:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 104.233.227.35.in-addr.arpa udp
US 8.8.8.8:53 197.241.103.104.in-addr.arpa udp
US 8.8.8.8:53 44.206.230.54.in-addr.arpa udp
US 8.8.8.8:53 91.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 16.145.222.52.in-addr.arpa udp
US 151.101.1.91:443 sc.sftcdn.net udp
US 8.8.8.8:53 c.aaxads.com udp
US 172.67.4.231:443 c.aaxads.com tcp
US 8.8.8.8:53 231.4.67.172.in-addr.arpa udp
GB 172.217.169.34:443 securepubads.g.doubleclick.net udp
US 35.227.233.104:443 exeinfo-pe32.en.softonic.com udp
US 172.67.41.60:443 btloader.com tcp
US 151.101.1.91:443 sc.sftcdn.net udp
US 8.8.8.8:53 en-softonic-com.disqus.com udp
US 199.232.192.134:443 en-softonic-com.disqus.com tcp
US 8.8.8.8:53 134.192.232.199.in-addr.arpa udp
US 8.8.8.8:53 notix.io udp
US 130.211.23.194:443 api.btloader.com tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 8.8.8.8:53 c.disquscdn.com udp
US 8.8.8.8:53 disqus.com udp
NL 139.45.197.253:443 notix.io tcp
GB 172.217.169.34:443 securepubads.g.doubleclick.net udp
US 151.101.192.134:443 disqus.com tcp
DE 52.85.92.42:443 c.disquscdn.com tcp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 bat.bing.com udp
GB 142.250.178.4:443 www.google.com tcp
US 204.79.197.200:443 bat.bing.com tcp
US 35.227.233.104:443 softonic.com tcp
US 35.227.233.104:443 softonic.com tcp
US 8.8.8.8:53 253.197.45.139.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
NL 20.190.160.14:443 login.microsoftonline.com tcp
US 35.227.233.104:443 softonic.com tcp
US 204.79.197.200:443 bat.bing.com tcp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
GB 142.250.178.14:443 www.adsensecustomsearchads.com tcp
US 8.8.8.8:53 www.datadoghq-browser-agent.com udp
DE 52.222.176.36:443 www.datadoghq-browser-agent.com tcp
US 8.8.8.8:53 134.192.101.151.in-addr.arpa udp
US 8.8.8.8:53 42.92.85.52.in-addr.arpa udp
DE 52.222.176.36:443 www.datadoghq-browser-agent.com tcp
US 8.8.8.8:53 storage.googleapis.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
GB 172.217.169.91:443 storage.googleapis.com tcp
FR 52.84.174.40:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 36.176.222.52.in-addr.arpa udp
GB 172.217.169.91:443 storage.googleapis.com tcp
FR 52.84.174.40:443 config.aps.amazon-adsystem.com tcp
GB 142.250.178.4:443 www.google.com udp
BE 142.251.173.156:443 stats.g.doubleclick.net tcp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 91.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 40.174.84.52.in-addr.arpa udp
BE 142.251.173.156:443 stats.g.doubleclick.net udp
US 172.67.38.106:443 cdn.id5-sync.com tcp
GB 216.58.204.66:443 googleads.g.doubleclick.net udp
US 172.67.38.106:443 cdn.id5-sync.com tcp
US 8.8.8.8:53 f40a842b0416695022175f7f88ca0acc.safeframe.googlesyndication.com udp
GB 142.250.178.14:443 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 api.privacy-center.org udp
DE 54.230.206.73:443 api.privacy-center.org tcp
US 130.211.23.194:443 api.btloader.com udp
GB 216.58.204.65:443 f40a842b0416695022175f7f88ca0acc.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 shb.richaudience.com udp
US 8.8.8.8:53 brightcombid.marphezis.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
DE 141.95.98.65:443 id5-sync.com tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 8.8.8.8:53 ap.lijit.com udp
US 216.239.38.181:443 analytics.google.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 37.252.171.21:443 ib.adnxs.com tcp
IE 108.128.36.135:443 ad.360yield.com tcp
US 34.120.63.153:443 prebid.media.net tcp
DE 54.230.206.73:443 api.privacy-center.org tcp
US 8.8.8.8:53 ampcid.google.com udp
GB 216.58.204.78:443 ampcid.google.com tcp
IE 108.128.36.135:443 ad.360yield.com tcp
DE 37.252.171.21:443 ib.adnxs.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 216.239.38.181:443 analytics.google.com tcp
GB 216.58.204.78:443 ampcid.google.com tcp
US 8.8.8.8:53 151.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 79.241.63.178.in-addr.arpa udp
US 8.8.8.8:53 204.135.128.178.in-addr.arpa udp
US 8.8.8.8:53 73.206.230.54.in-addr.arpa udp
US 8.8.8.8:53 78.204.58.216.in-addr.arpa udp
US 172.64.151.101:443 htlb.casalemedia.com tcp
IE 99.80.39.231:443 ap.lijit.com tcp
US 8.8.8.8:53 135.36.128.108.in-addr.arpa udp
US 8.8.8.8:53 21.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 231.39.80.99.in-addr.arpa udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 contextual.media.net udp
US 216.239.38.181:443 analytics.google.com udp
GB 172.217.169.67:443 beacons.gvt2.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
DE 54.230.207.221:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 partner.googleadservices.com udp
DE 141.95.98.65:443 id5-sync.com tcp
GB 172.217.16.226:443 partner.googleadservices.com tcp
GB 96.16.108.246:443 acdn.adnxs.com tcp
US 172.64.149.180:443 js-sec.indexww.com tcp
DE 138.201.8.249:443 sync.richaudience.com tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
GB 96.16.109.9:443 ads.pubmatic.com tcp
GB 92.123.240.21:443 contextual.media.net tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 articles-img.sftcdn.net udp
GB 23.48.165.134:443 articles-img.sftcdn.net tcp
GB 23.48.165.134:443 articles-img.sftcdn.net tcp
GB 23.48.165.134:443 articles-img.sftcdn.net tcp
GB 23.48.165.134:443 articles-img.sftcdn.net tcp
GB 23.48.165.134:443 articles-img.sftcdn.net tcp
GB 23.48.165.134:443 articles-img.sftcdn.net tcp
GB 96.16.108.246:443 acdn.adnxs.com tcp
US 172.64.149.180:443 js-sec.indexww.com tcp
DE 138.201.8.249:443 sync.richaudience.com tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 221.207.230.54.in-addr.arpa udp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 21.240.123.92.in-addr.arpa udp
US 8.8.8.8:53 83.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 134.165.48.23.in-addr.arpa udp
US 8.8.8.8:53 152.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 cacerts.rapidssl.com udp
GB 142.250.178.4:443 www.google.com udp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
GB 216.58.212.193:443 tpc.googlesyndication.com tcp
GB 216.58.212.193:443 tpc.googlesyndication.com tcp
GB 216.58.212.193:443 tpc.googlesyndication.com tcp
GB 216.58.212.193:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 onetag-sys.com udp
DE 51.38.120.206:443 onetag-sys.com tcp
US 67.202.105.22:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 180.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 246.108.16.96.in-addr.arpa udp
US 8.8.8.8:53 dis.criteo.com udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 csync.loopme.me udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 54.175.28.36:443 sync.srv.stackadapt.com tcp
US 52.205.90.189:443 cs-server-s2s.yellowblue.io tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 8.8.8.8:53 jadserve.postrelease.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 52.223.40.198:443 match.adsrvr.org tcp
IE 18.202.187.80:443 jadserve.postrelease.com tcp
NL 35.214.192.158:443 csync.loopme.me tcp
GB 185.64.190.79:443 image8.pubmatic.com tcp
IE 34.255.253.6:443 match.prod.bidr.io tcp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 sync.mathtag.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 8.8.8.8:53 ads.stickyadstv.com udp
NL 178.250.1.9:443 dis.criteo.com tcp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 t.adx.opera.com udp
DE 51.38.120.206:443 onetag-sys.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
GB 185.64.190.79:443 image8.pubmatic.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
DE 18.194.210.76:443 rtb.mfadsrvr.com tcp
US 52.223.40.198:443 match.adsrvr.org tcp
IE 34.255.253.6:443 match.prod.bidr.io tcp
US 216.200.232.249:443 sync.mathtag.com tcp
GB 185.64.190.79:443 image8.pubmatic.com tcp
NL 35.214.192.158:443 csync.loopme.me tcp
US 54.175.28.36:443 sync.srv.stackadapt.com tcp
US 52.205.90.189:443 cs-server-s2s.yellowblue.io tcp
NL 213.19.162.80:443 pixel.rubiconproject.com tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
NL 213.19.162.80:443 pixel.rubiconproject.com tcp
FR 164.132.25.180:443 ssbsync-global.smartadserver.com tcp
NL 154.57.158.25:443 ads.stickyadstv.com tcp
IE 18.202.187.80:443 jadserve.postrelease.com tcp
US 8.8.8.8:53 id.rlcdn.com udp
US 35.244.174.68:443 id.rlcdn.com tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
GB 142.250.180.2:443 cm.g.doubleclick.net tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 bttrack.com udp
NL 154.57.158.25:443 ads.stickyadstv.com tcp
FR 164.132.25.180:443 ssbsync-global.smartadserver.com tcp
US 192.132.33.67:443 bttrack.com tcp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
GB 142.250.180.2:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 209.54.182.161:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 206.120.38.51.in-addr.arpa udp
US 8.8.8.8:53 22.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 79.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 198.40.223.52.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 6.253.255.34.in-addr.arpa udp
US 8.8.8.8:53 76.210.194.18.in-addr.arpa udp
US 8.8.8.8:53 80.162.19.213.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 158.192.214.35.in-addr.arpa udp
US 8.8.8.8:53 166.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 36.28.175.54.in-addr.arpa udp
US 8.8.8.8:53 189.90.205.52.in-addr.arpa udp
US 8.8.8.8:53 249.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 180.25.132.164.in-addr.arpa udp
US 8.8.8.8:53 67.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 cdn.indexww.com udp
DE 54.230.206.40:443 api-2-0.spot.im tcp
US 8.8.8.8:53 161.182.54.209.in-addr.arpa udp
US 8.8.8.8:53 80.187.202.18.in-addr.arpa udp
US 8.8.8.8:53 40.206.230.54.in-addr.arpa udp
US 8.8.8.8:53 25.158.57.154.in-addr.arpa udp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 52.95.115.196:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 196.115.95.52.in-addr.arpa udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
US 8.8.8.8:53 qsearch-a.akamaihd.net udp
GB 88.221.134.131:443 qsearch-a.akamaihd.net tcp
GB 88.221.134.131:443 qsearch-a.akamaihd.net tcp
US 8.8.8.8:53 64.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 131.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 exeinfo-pe.en.uptodown.com udp
US 151.101.3.52:443 exeinfo-pe.en.uptodown.com tcp
US 151.101.3.52:443 exeinfo-pe.en.uptodown.com tcp
US 8.8.8.8:53 certificates.starfieldtech.com udp
US 192.124.249.36:80 certificates.starfieldtech.com tcp
US 8.8.8.8:53 52.3.101.151.in-addr.arpa udp
US 8.8.8.8:53 36.249.124.192.in-addr.arpa udp
US 8.8.8.8:53 stc.utdstc.com udp
US 8.8.8.8:53 img.utdstc.com udp
US 8.8.8.8:53 scripts.ssm.codes udp
GB 23.211.237.80:443 stc.utdstc.com tcp
GB 23.211.237.80:443 stc.utdstc.com tcp
GB 23.211.237.80:443 stc.utdstc.com tcp
GB 23.211.237.80:443 stc.utdstc.com tcp
GB 23.211.237.80:443 stc.utdstc.com tcp
GB 23.211.237.80:443 stc.utdstc.com tcp
GB 23.211.237.80:443 stc.utdstc.com tcp
GB 23.211.237.80:443 stc.utdstc.com tcp
US 151.101.3.52:443 img.utdstc.com tcp
US 172.67.69.203:443 scripts.ssm.codes tcp
GB 23.211.237.80:443 stc.utdstc.com tcp
US 8.8.8.8:53 203.69.67.172.in-addr.arpa udp
US 8.8.8.8:53 80.237.211.23.in-addr.arpa udp
US 8.8.8.8:53 8fb17ca1735d25065f98ac3e97fde26c.safeframe.googlesyndication.com udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 connectid.analytics.yahoo.com udp
US 8.8.8.8:53 cdn.prod.uidapi.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 104.18.35.167:443 cdn-ima.33across.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 34.102.146.192:443 oa.openxcdn.net tcp
GB 142.250.200.2:443 pubads.g.doubleclick.net tcp
FR 52.222.169.103:443 connectid.analytics.yahoo.com tcp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
DE 52.85.92.53:443 tags.crwdcntrl.net tcp
DE 54.192.210.17:443 cdn.prod.uidapi.com tcp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
GB 142.250.200.2:443 pubads.g.doubleclick.net tcp
DE 52.85.92.53:443 tags.crwdcntrl.net tcp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
DE 54.192.210.17:443 cdn.prod.uidapi.com tcp
FR 52.222.169.103:443 connectid.analytics.yahoo.com tcp
US 34.120.107.143:443 oajs.openx.net tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
DE 3.71.149.231:443 ups.analytics.yahoo.com tcp
IE 54.72.96.86:443 bcp.crwdcntrl.net tcp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 103.169.222.52.in-addr.arpa udp
US 8.8.8.8:53 53.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 17.210.192.54.in-addr.arpa udp
US 34.120.107.143:443 oajs.openx.net udp
DE 3.71.149.231:443 ups.analytics.yahoo.com tcp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
FR 185.235.86.93:443 ag.gbc.criteo.com tcp
FR 185.235.86.76:443 gem.gbc.criteo.com tcp
NL 178.250.1.11:443 dnacdn.net tcp
US 8.8.8.8:53 cdn.ampproject.org udp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 216.58.212.193:443 tpc.googlesyndication.com udp
GB 142.250.180.1:443 cdn.ampproject.org tcp
US 151.101.3.52:443 img.utdstc.com udp
US 35.244.159.8:443 google-bidout-d.openx.net tcp
GB 216.58.212.193:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 86.96.72.54.in-addr.arpa udp
US 8.8.8.8:53 93.86.235.185.in-addr.arpa udp
US 8.8.8.8:53 76.86.235.185.in-addr.arpa udp
US 8.8.8.8:53 1.180.250.142.in-addr.arpa udp
GB 172.217.169.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 consent.cookie-script.com udp
US 8.8.8.8:53 cdn.cookie-script.com udp
DE 65.108.188.9:443 cdn.cookie-script.com tcp
DE 78.47.189.205:443 cdn.cookie-script.com tcp
US 8.8.8.8:53 205.189.47.78.in-addr.arpa udp
US 8.8.8.8:53 231.149.71.3.in-addr.arpa udp
US 8.8.8.8:53 71c78b18c6d6d1a61dea5b9ceab69463.safeframe.googlesyndication.com udp
US 8.8.8.8:53 aefd.nelreports.net udp
GB 88.221.134.90:443 aefd.nelreports.net tcp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
US 151.101.3.52:443 img.utdstc.com udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
GB 88.221.134.90:443 aefd.nelreports.net udp
US 8.8.8.8:53 90.134.221.88.in-addr.arpa udp
GB 142.250.200.2:443 pubads.g.doubleclick.net udp
US 8.8.8.8:53 b48cd3720b35f3e59a046d48fecf2476.safeframe.googlesyndication.com udp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 e1d665cf0281eb81d2930f89cc22c2f9.safeframe.googlesyndication.com udp
US 8.8.8.8:53 dw.uptodown.com udp
FR 51.210.117.80:443 dw.uptodown.com tcp
FR 51.210.117.80:443 dw.uptodown.com tcp
US 8.8.8.8:53 8f232fae751efe5d3ff7b8c702f08158.safeframe.googlesyndication.com udp
US 8.8.8.8:53 dw17.uptodown.com udp
FR 162.19.62.169:443 dw17.uptodown.com tcp
US 8.8.8.8:53 169.62.19.162.in-addr.arpa udp
US 8.8.8.8:53 80.117.210.51.in-addr.arpa udp
GB 216.58.204.66:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 g.ezoic.net udp
FR 15.188.219.54:443 g.ezoic.net tcp
US 8.8.8.8:53 54.219.188.15.in-addr.arpa udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.187.214:443 i.ytimg.com udp
GB 142.250.200.46:443 play.google.com udp
GB 216.58.204.66:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.179.238:443 www.youtube.com udp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.128.132:443 th.bing.com tcp
GB 92.123.128.132:443 th.bing.com tcp
US 8.8.8.8:53 132.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
GB 92.123.128.132:443 th.bing.com tcp
GB 92.123.128.147:443 r.bing.com tcp
US 8.8.8.8:53 bing.com udp
US 8.8.8.8:53 147.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 dnspy.en.softonic.com udp
US 35.227.233.104:443 dnspy.en.softonic.com udp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 sc.sftcdn.net udp
US 151.101.1.91:443 sc.sftcdn.net udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 sdk.privacy-center.org udp
GB 104.103.241.197:443 images.sftcdn.net tcp
US 8.8.8.8:53 connect.facebook.net udp
GB 163.70.147.23:443 connect.facebook.net tcp
GB 142.250.178.14:443 www.youtube.com udp
FR 52.222.145.16:443 c.amazon-adsystem.com tcp
GB 172.217.169.34:443 securepubads.g.doubleclick.net udp
GB 104.103.241.197:443 images.sftcdn.net tcp
GB 104.103.241.197:443 images.sftcdn.net tcp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 9b3c2bed86feb22bd1e1e30a5e1dc438.safeframe.googlesyndication.com udp
GB 172.217.169.34:443 securepubads.g.doubleclick.net udp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 www.facebook.com udp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
FR 157.240.195.35:443 www.facebook.com tcp
FR 157.240.195.35:443 www.facebook.com tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 brightcombid.marphezis.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 ap.lijit.com udp
DE 37.252.171.21:443 ib.adnxs.com tcp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
IE 54.77.210.83:443 ad.360yield.com tcp
IE 99.80.67.139:443 ap.lijit.com tcp
GB 142.250.178.4:443 www.google.com udp
FR 157.240.195.35:443 www.facebook.com tcp
US 216.239.38.181:443 analytics.google.com udp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
IE 54.77.210.83:443 ad.360yield.com tcp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
BE 142.251.173.156:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 139.67.80.99.in-addr.arpa udp
US 8.8.8.8:53 83.210.77.54.in-addr.arpa udp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 s.richaudience.com udp
DE 157.90.0.38:443 s.richaudience.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 216.58.212.193:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 38.0.90.157.in-addr.arpa udp
US 8.8.8.8:53 notix.io udp
NL 139.45.197.227:443 notix.io tcp
US 8.8.8.8:53 227.197.45.139.in-addr.arpa udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 ce.lijit.com udp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 153.84.255.185.in-addr.arpa udp
DE 162.55.233.29:443 sync.richaudience.com tcp
US 8.8.8.8:53 29.233.55.162.in-addr.arpa udp
US 151.101.1.108:443 acdn.adnxs.com tcp
US 8.8.8.8:53 108.1.101.151.in-addr.arpa udp
IE 54.155.46.140:443 ce.lijit.com tcp
DE 51.38.120.206:443 onetag-sys.com tcp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 x.bidswitch.net udp
US 67.202.105.21:443 ssc-cms.33across.com tcp
IE 18.202.187.80:443 jadserve.postrelease.com tcp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
NL 178.250.1.9:443 dis.criteo.com tcp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 52.223.40.198:443 match.adsrvr.org tcp
US 8.8.8.8:53 bttrack.com udp
NL 35.214.192.158:443 csync.loopme.me tcp
US 35.244.174.68:443 id.rlcdn.com udp
US 192.132.33.69:443 bttrack.com tcp
US 54.82.57.110:443 cs-server-s2s.yellowblue.io tcp
US 54.205.171.68:443 sync.srv.stackadapt.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
IE 34.255.58.76:443 match.prod.bidr.io tcp
US 8.8.8.8:53 140.46.155.54.in-addr.arpa udp
US 8.8.8.8:53 76.58.255.34.in-addr.arpa udp
US 8.8.8.8:53 21.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 110.57.82.54.in-addr.arpa udp
US 8.8.8.8:53 68.171.205.54.in-addr.arpa udp
US 8.8.8.8:53 69.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
DE 18.158.154.121:443 rtb.mfadsrvr.com tcp
GB 142.250.180.2:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 121.154.158.18.in-addr.arpa udp
FR 18.155.122.233:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 233.122.155.18.in-addr.arpa udp
US 8.8.8.8:53 d8ccd82c4743ecd66528b9fb2ed26b36.safeframe.googlesyndication.com udp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
NL 139.45.197.227:443 notix.io tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 en.softonic.com udp
IE 34.255.58.76:443 match.prod.bidr.io tcp
NL 35.214.192.158:443 csync.loopme.me tcp
US 54.205.171.68:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 cdn.playwire.com udp
US 8.8.8.8:53 e2c76d8952a5d1d4cc7cc26c8b75e452.safeframe.googlesyndication.com udp
FR 18.244.28.10:443 cdn.playwire.com tcp
US 8.8.8.8:53 js.adscale.de udp
FR 99.86.91.32:443 js.adscale.de tcp
US 8.8.8.8:53 cdn.intergient.com udp
US 8.8.8.8:53 articles-img.sftcdn.net udp
FR 99.86.91.70:443 cdn.intergient.com tcp
GB 23.48.165.134:443 articles-img.sftcdn.net tcp
US 8.8.8.8:53 10.28.244.18.in-addr.arpa udp
US 8.8.8.8:53 32.91.86.99.in-addr.arpa udp
FR 99.86.91.70:443 cdn.intergient.com tcp
GB 23.48.165.134:443 articles-img.sftcdn.net tcp
GB 23.48.165.134:443 articles-img.sftcdn.net tcp
GB 23.48.165.134:443 articles-img.sftcdn.net tcp
GB 23.48.165.134:443 articles-img.sftcdn.net tcp
GB 23.48.165.134:443 articles-img.sftcdn.net tcp
US 8.8.8.8:53 ih.adscale.de udp
US 8.8.8.8:53 70.91.86.99.in-addr.arpa udp
DE 52.29.66.40:443 ih.adscale.de tcp
US 8.8.8.8:53 push-sdk.com udp
US 8.8.8.8:53 40.66.29.52.in-addr.arpa udp
DE 23.88.8.123:443 push-sdk.com tcp
GB 96.16.109.251:443 px.moatads.com tcp
GB 96.16.109.251:443 px.moatads.com tcp
US 8.8.8.8:53 123.8.88.23.in-addr.arpa udp
US 8.8.8.8:53 251.109.16.96.in-addr.arpa udp
US 8.8.8.8:53 config.playwire.com udp
FR 52.222.169.109:443 config.playwire.com tcp
FR 52.222.169.109:443 config.playwire.com tcp
US 8.8.8.8:53 gsf-fl.softonic.com udp
US 199.232.194.133:443 gsf-fl.softonic.com tcp
IE 34.255.58.76:443 match.prod.bidr.io tcp
NL 35.214.192.158:443 csync.loopme.me tcp
US 54.205.171.68:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 109.169.222.52.in-addr.arpa udp
US 8.8.8.8:53 133.194.232.199.in-addr.arpa udp
US 8.8.8.8:53 uidsync.net udp
DE 23.88.8.125:443 uidsync.net tcp
US 8.8.8.8:53 125.8.88.23.in-addr.arpa udp
DE 23.88.8.125:443 uidsync.net tcp
US 8.8.8.8:53 cdn.video.playwire.com udp
FR 3.162.38.75:443 cdn.video.playwire.com tcp
US 8.8.8.8:53 75.38.162.3.in-addr.arpa udp
NL 139.45.197.227:443 notix.io tcp
US 8.8.8.8:53 imasdk.googleapis.com udp
GB 142.250.180.10:443 imasdk.googleapis.com tcp
GB 142.250.180.10:443 imasdk.googleapis.com udp
US 8.8.8.8:53 s0.2mdn.net udp
GB 142.250.179.230:443 s0.2mdn.net tcp
US 8.8.8.8:53 10.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 230.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
GB 142.250.200.2:443 pubads.g.doubleclick.net udp
US 8.8.8.8:53 csi.gstatic.com udp
US 216.239.32.3:443 csi.gstatic.com tcp
US 216.239.32.3:443 csi.gstatic.com udp
US 8.8.8.8:53 3.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 ads-static.ampliffy.com udp
DE 54.230.206.92:443 ads-static.ampliffy.com tcp
US 8.8.8.8:53 92.206.230.54.in-addr.arpa udp
FR 3.162.38.75:443 cdn.video.playwire.com tcp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.179.238:443 www.youtube.com udp
US 8.8.8.8:53 cdn.playwire.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 172.217.169.34:443 securepubads.g.doubleclick.net udp
GB 142.250.200.2:443 pubads.g.doubleclick.net udp
US 216.239.32.3:443 csi.gstatic.com udp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 34.120.63.153:443 prebid.media.net udp
DE 37.252.171.21:443 ib.adnxs.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
IE 52.48.207.137:443 ad.360yield.com tcp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 137.207.48.52.in-addr.arpa udp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
US 8.8.8.8:53 beacons2.gvt2.com udp
DE 172.217.18.99:443 beacons2.gvt2.com udp
US 8.8.8.8:53 99.18.217.172.in-addr.arpa udp
DE 157.90.0.38:443 s.richaudience.com tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 cdn.playwire.com udp
GB 172.217.169.34:443 securepubads.g.doubleclick.net udp
GB 142.250.200.2:443 pubads.g.doubleclick.net udp
US 216.239.32.3:443 csi.gstatic.com udp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
GB 142.250.179.238:443 www.youtube.com udp
GB 172.217.169.34:443 securepubads.g.doubleclick.net udp
GB 142.250.200.2:443 pubads.g.doubleclick.net udp
US 216.239.32.3:443 csi.gstatic.com udp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 cdn.playwire.com udp
GB 172.217.169.34:443 securepubads.g.doubleclick.net udp
GB 142.250.200.2:443 pubads.g.doubleclick.net udp
US 216.239.32.3:443 csi.gstatic.com udp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.179.238:443 www.youtube.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 192.178.49.3:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
FR 52.222.160.111:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
US 8.8.8.8:53 prebid.media.net udp
US 34.120.63.153:443 prebid.media.net udp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 ad.360yield.com udp
NL 185.89.211.12:443 ib.adnxs.com tcp
IE 54.74.116.1:443 ap.lijit.com tcp
IE 34.246.66.7:443 ad.360yield.com tcp
GB 172.217.169.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 111.160.222.52.in-addr.arpa udp
US 8.8.8.8:53 150.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 12.211.89.185.in-addr.arpa udp
US 8.8.8.8:53 7.66.246.34.in-addr.arpa udp
US 8.8.8.8:53 1.116.74.54.in-addr.arpa udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
GB 216.58.212.193:443 tpc.googlesyndication.com udp

Files

\??\pipe\crashpad_4912_FSSLUCMNZDSNNFTX

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 d691f27dc6ccd8381e762a510b9277d5
SHA1 082560c942fbb7ffc8cfb10664c838950e1f9a92
SHA256 f6d38bc056e477289bb47fd2fe84e2538bdc76ef287d6e2a10625687d376a077
SHA512 2f14cdddc8739ec4ce64ee9f3c4f913eec3ad3c3fd12304c274fecd4c9678c542c314f73aab9e59e3eaaa7c2404bacc54254984feb62ea04bb38531c985a71d2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\3dfe5f7e-0564-4e9d-a141-1e84a491e3cb.tmp

MD5 20da2be91b1ae253a6503b0f611fb81b
SHA1 5ce7c47bdf71cd7a0bfbf16be8b3c7b4f371c008
SHA256 fdc429ddcf4dcab69d0450401ddf316022282e1362a6ecd096ce4b9dfb67d6c5
SHA512 d6eaa0f58791b58172b0171bda96a868bbf519c4dde7507825b467a863ef33804690455071b7f4be37777ccec3bc49d0a08c398f1a3414cda208d4c477e600eb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 afe75cb235ec91f3f0170677ca097fb5
SHA1 d66f7c529fc2645a9fc04441e006848637009c51
SHA256 93e0ba52e2ebb8ec9d2642425313ecbf911e95034bb8bf74f6cb8921e9011697
SHA512 e61e53b45a889f151342b5e51abb0f4023e650433f74fd3ea9fed0f946951775525563f8ea3fe3b1505cec98c1c4c63cd789562b9ce359596f3d3846ded8dfce

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 aa8a4ebb2a2fc7639eca5b73b6863e05
SHA1 1fa2ca3035da577b761fbee343fefc546a401ae3
SHA256 97128d4a35110963542735834772f3d1b8edccedad265ffa0ee9f76db5f8431d
SHA512 9ddd639bafd599576344afd69207e6bcb3459c174f3861e29ea15aad48edacbafe1a744de1c2c218aa0467bbb2475c13d0a5b524726b6aeca32d8c1fc313ebe8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe57d8fb.TMP

MD5 0ebb6977ea6ad8f83dae0782f293b1d9
SHA1 c62addbd0c14c2aecef5d3347b706dfcbdead13a
SHA256 71778ae86d73354a5071a209ee36e37ee93ce85ed90bbfd58b1eedd6632204fc
SHA512 063d89636c5fb3079c918cbc4222a15adc9d16769a42532d8a6cd045765850b0a609d855893f0397aa610ecb0aacf9fdd889d28d30618ef6ea82efc8d80ad1b9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 5000608afcaec8be6f81f12164a73b32
SHA1 bdfcdc0255606aca295002087212af82084659e4
SHA256 003ae27d16c075670c5f53ff5c958eb55f7195e902ca0025c775f5140f666b01
SHA512 b404422b1dd7f7fc7a65b8d37f47e76133e0b9942853e794065ef2bd63b89c5d4d16bfc6817cf7e10d2c0c2548099c296aaab5b2dbcabd926dfc2202e6d8b370

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d63475d2d9602c9011f6fcadff09056d
SHA1 72e20525092dac7845d2549325edd34e570598ba
SHA256 41b24354f5dea877287691d0d14855e8784172a1342d874b89151ba5ede7e8b5
SHA512 c140f1efc6646d8cc856c09dba6cd8641409a89e777c95306d32709f366113031fe09f19f27c1a1fb21507d13b9858e918232eb29c817e8002baa61fe9b7075b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 606ea7e7174698513bf70dc914afdb15
SHA1 87caa76bf4afce61106a677abe41ee1969e6eea7
SHA256 7d728aa86c4b9dffc8b13436494c056be3b2b96f9dcb86ab3522f5407f8a34ea
SHA512 b2b246a322e0f17c16b31b1a47a223afea28060286bea17385bab26d735a023dce0cd9cf4fcf16e690e2520f6b6c2f9f2910b9ee81c3c8e130e694277558a1cb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8e976b82-7216-402f-b09f-80ba2716607a\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 63f5983b6460478686b396242c6bc2c2
SHA1 8e275a1d472c2f36b0a86b79b21e0c1eadd510c3
SHA256 dbfbc6982abfc31a7f2c9d952290635be7f5593b3984b3249e3a400efc693cd7
SHA512 4a88c166a027325842bf6df3294f21d3cef0bce9b9007a9fdd7d1d190ce503b03e61c5891677133e691a0eb4a4921b5b4cad578d511bcbc6341932cc81dd2ce5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 9bd77b20f5ef2e62083e68f5685ec16d
SHA1 10ba62049b1fce1db188b6ab7a8250f6caf80184
SHA256 3f0f25f919c0bd9d66d1d46120e786062d0dbfd80c997ad4921a7bd324bf4d27
SHA512 497964370348e531f37ec7e70fe8ea6923141e86619d69ebe9523e17eb0ea1aca8aae0480f8dc5f54aa456078967fbe0512872af5571badeec0321a6f526cac0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 7eea3f414b757441141fa478b8c0b388
SHA1 343869c42e65de1ac7b479af75f1dc8905161203
SHA256 09d9f9bec2e4c3f9a26ddb7fc880210a06e36ca84c8d54cc1ae4af48dfa58659
SHA512 1cd44a4f1db02820993eeb1b9c24f60a9c8e7a9a87385362f8731037673afbc62752669d7d38b678ae9492cbb4792fd88512647ed2d3bde28f945fca044afa49

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000002

MD5 450fc63b968935b5108d6d92e560526c
SHA1 8f5134e6a2bf5d04486d61af5a002a2e67aa8377
SHA256 b161d42c405531732c92cb8b9279ccf3b3b0f0dd7256c9d6954724a8e1edfcea
SHA512 c73b7354552872b2b90c4df883fafc9f8545ed23b71c45f1afd71c3b8320551f2dd9ba1bc2b1e3564befcbd86eb89416dfed232962682db61856b6c194523b73

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

MD5 a9640c7c0e59132fcf56c0aab7d9fba4
SHA1 923cf473da15f10287b1fd9ee8b51091ae747db7
SHA256 acaf98c53ebe793e1db1873bb25251bbc600022a8e98ad25944861debb071b4f
SHA512 5df8b5cb652c0a080648db80a9095c85ba1ab7f4d27675f1adbe0e521c779a73ac44b94667a95d9618499460dedc8b6827eb03960a8abde323873f9397e8113a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

MD5 70836eb2ee7a4d5dd8ce09a83719c1a9
SHA1 f3cb202d2f635a9146d592f100f53cc1b6d70795
SHA256 5c14c4515d6488b2d632ac9d204f0540bdd9cbd4a28a58d3457c2926c84c382e
SHA512 106099cac94e9c170ba04bb885f14ed1fbb1e86be3594b9bf42715644dac3a9cb95e45c5c78bbbc1976251d323acc19a4bff8953eabf647f7a8c06d872321bd1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005

MD5 b05ec52600e755665171d1abf25e48b7
SHA1 056ee92e1ea021b59e128c7777404c456a6c48e9
SHA256 a62d96fe0b9b2c45d108aecc71247a7587aafaea78c780022a06b55c31e6a164
SHA512 6a73cd07872b7ef778b9b147627764b1e6422714e706f57fb3089b9590a954b56bfff627e8084f485a29e4d10d52750e7960fb1901ac240bad87fff6742a2c8a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

MD5 729cfde0079608537e35131b985e0255
SHA1 1cf1675e2875bef768336dcb1a3210e3153e9767
SHA256 0e862065d2f9f78d4f7efedb2a6d9979de53b4a2ee0ac3d4d5f23486fcbc9658
SHA512 e52fc50c3d78f75b7e548c35c29773288a6effb2557be40875a2760820e462470d05636246f4a3490c42b5b8a37631ae6db51663e2555a00afea8fde6c6558eb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4846904b64e0f1fb8e1e5b05505f4635
SHA1 ebae4d9ec82a019ee17c245653c2fbe7b2bcd0a5
SHA256 3f30678ed2070f7cec314936e350d3cd2b4b5824080333b30d25385769fcf44f
SHA512 3d1cbce637b60d76335ee66c33136683da34064737b86793339ede96d3aff8bd46b526a347986f342b315148597e35396c472420d07ad7bd8e007506764ac6a7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c996940f2ed2e95660ec88a641f4c0e9
SHA1 9999e7ee4bad59c49fdcfa26526546af44c82cb1
SHA256 8c51a85e439b6ddeebadbd7622fa980155c8103b36ef9f5cea3490a4872abde8
SHA512 451327cf96f83e184452c424dc0f0767f67f5278033dfc9961b434b9283377db99f6421c1e8477ea14f7f9b9ac7aa4cde51d90377626c109daaffa436ca9b59f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5847e1.TMP

MD5 784f43769d2b08037c2654dbb9e1c859
SHA1 c2c0beee5c9881c37648911f2af547c27082370e
SHA256 59208e1b57fa561fed2874bbd5462138e83462102d16c0c73be4a2a4d1e6a3ba
SHA512 2c7b987a9d57ad0c7c9ed76f86349fee65464d94a4ab6e832ce2323c23a5dde2433717b2502689a38cdab702cd98fe9f797db0d9691b5cb0e0217ede564fdd02

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 4f5fb86a82b7ee388bbcc1d4202f9b01
SHA1 4e84316d8fdbb0658a4725b39e1dfcd172b120bb
SHA256 7bae2c2f707723d527e84e0f817264b0e8ec61ac8585ebcfe61e755d55536910
SHA512 81c937b454ed33e36f263ce6f5b28a2c7740a98c100b0cd01b251b9a3af40eb4582dc4820b6ee5d1f192c59c2bb4f939884db9324074f962416e793ad85c187a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 dab15d0d2a688dfa13b6689b9456e1de
SHA1 b4d2d17a51c3c4f0cf69a9e4e5876c11dfec9e70
SHA256 eff6b1cb9fd63787ca2150518425de4ac61c32d289793daf4a87fd16d1a1de30
SHA512 7ebb2e0d336b12756c325f6acf7052e715df196add68e7879ce0b2c247863bff0b5f9f6f34466cd9bb63c338115f495941dda8d863d1a32f9c93d0fd3a8a1542

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7f263664-9c9f-43d4-9b2f-bccd5c4c25dd\index-dir\the-real-index

MD5 1ceb5ddffdb80df0fe0e134df5b381ea
SHA1 bf30084e8d9ba7e0a0c991dddfa7ada7198ae6e5
SHA256 5aa9f6c50301c25f7feba4e2ec92d264427ce2dc461ed03a30d46c28220e42f0
SHA512 13f229da21ed3bacb1f68c89b60e0f7452a94d6f79042fa5e90ab71949367614b37fbf9c71bbcf788d07a10d2249c67c6695a51f80abfef66b8a7ca201f89cb3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7f263664-9c9f-43d4-9b2f-bccd5c4c25dd\index-dir\the-real-index~RFe58536a.TMP

MD5 7d7b0c2d3397b767ace004eb2e81f7c8
SHA1 48d509a9bbd278dfdaac2fba50b342fae7d8cc4b
SHA256 80729e907dfcaf98dbee22cec467b68eb9d6d88a331dc6eae8a20cae8fb0c720
SHA512 86694d73c04829334ba34ad6562577fb39d7220dd0a8c571dde6119906ec77a4d1ae79c0451bd3e954cd08fac755f22babc758f9b921ffce8e041961c6892bab

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 de012bc649a5ea9d8f691fee3ad48105
SHA1 640cdb783766532c3ca6e22ca68616aa1dc9fcf2
SHA256 ec7a09597fe774b2302ee2d73849b1b6b61aa4ccd61bce6d012089f2c736c8e6
SHA512 29ee8f9a9fbb7546efb41f1731c64590059c3dcfb1fe7b035d3dcbb22232a1278f77e74df231c43c3fcb8a70290a93a3a5f2d8327bfb18e47fffd0b33a4c5844

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\4454fcd1-08e0-46e7-863c-6a3908e094dc\index-dir\the-real-index

MD5 614dacf332a1f93b2c0a60bd8494066d
SHA1 201ec597b4e1254bf84167f1eca9d3b305b2f94f
SHA256 34bfef3ac5ab5ebad8e0a8abca6b377229b385e0a9be83791604b07a8a314724
SHA512 cbb60c0e05a0805a4e3c3e78a6bf3c90845cea4ad99e76b9e142322d0500e6483fc7b3df082f4c389406e96aa4d2409b950aeb1087f4246069fb648861d180b4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\4454fcd1-08e0-46e7-863c-6a3908e094dc\index-dir\the-real-index

MD5 706cebb09b9fef9b2921f06388f5ebf2
SHA1 683119be97a8244cedb6f84f45f02342ca642b41
SHA256 06c62f5e0224c3f6088d05f3f0b42c8f42f26c9b440824d6907519dd090d9cc4
SHA512 ceb3036dce21f867f24fe0f0581dec7b73e57f2ea2b60547866f0ec215e96588a206e686f3119eeb56b651e42972d4185ac6b2388b13fed895886dfe911de744

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7f263664-9c9f-43d4-9b2f-bccd5c4c25dd\2c7dc7c01e6c7bd3_0

MD5 554da18dcff3dc1c470fc3554c614ae6
SHA1 25790c9b371e12bbf8d26434b27dc69b8de371fa
SHA256 fbf4744365d95134ddea9350a11176ff998cbb80072cc1b46ef47467c3aca87a
SHA512 a66c6f8994d451d6cf53de617d9b94840c6087239aec75014b64fb4b867c73e810397ca196b83749af081e9acfe38350c46b0659f52a903efa57346a0a58ca39

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 be58425af28bcc733af8fd71d3ec936a
SHA1 989ad9cf6d08139635f3aef42f899975eaf7c2dd
SHA256 6c5a75a28a5497eff5aa8e4267804ae8247c811e5ac63de3b36555adecfb9bb3
SHA512 4ad1743c38c50e0ea5d908190c75fdb781b34a87eeec573a9d78cf8bf99a9d1caedc3ee8130b82ee0a15edee4f3a28efa12855f78b95fa7334c3f51d787e886b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 253669cfb2e2d513c7ea2c8bdb70522c
SHA1 91365b5427652d49b75876c070184cdc9b702201
SHA256 91eb9463bec28c3625cc674a3335edd8ef1d12c89324d0271cd445e4923bfe9a
SHA512 4857a11b60a527ddc68054b55c5c0cc42ea83f61692c5fd594ae1f8e071f7edb38246e591af93978b13e4d1d8f2d4dc590c992b3315d4e09f33a88abceb8cf1f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe58a9b8.TMP

MD5 e18cca4d6dd12dda37829b2cbf2646f0
SHA1 7db57db0c1a3cae9eafe1032348d60ce85f4910c
SHA256 bfc13cc5e4232271693bdea6371a5dc4e509e7588a8c2f6c2e268696081f6262
SHA512 5cb42edbc8a3e5a4fbdaa7551a05be60b25999b5ad302656bba18a42682b53263eec85f9d2f93a350ac3ac32f21792db8510e7329ac79ed0954eb6a6d5675a9d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ae3709149130b7d5d4e7dadeff4f7d7e
SHA1 ecd59582c7b9b49fa74303be3cb527249a5285a0
SHA256 4fbafdf1f8deb984e786f7bb6506f5d162d4e9e44393921101239f8fda4afe12
SHA512 28f0c47cd114459f91b34fe450fdcf626f02f198cba455eacaf7a7828ac15fc9fa91e8799e9167a1fc4c48a02b5de5931ee659dc66fda7c6c26d625ad1926a51

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 95e545dd67f9642ab4cb1846dadf0000
SHA1 df30843444ee972425e50e3c7282a7d4530c900c
SHA256 da1ac4cff6ed0b360bf703af6b4c579da648fe9d0dab6409ed8d97e8ad401c36
SHA512 27840068199ee509e09be31b83a65f8d671b2e6f65f2515c626f0fa72a29fbe695021d135eb5671bc2c33af44fb646c892427b9d6429c2b503d70729467205f4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 28a10ba53f4294c9cb1103cf3479683e
SHA1 1b4bc9543c9f1736eab26acb71dcbc007f203af9
SHA256 eb5009f0d132c92810400941147e1cbb902600badb430b925fb8dd885b6ca70a
SHA512 d4f434021dad8dd0b225bdfe459e5b2f48bdddd9a07cca3dd34b0363b5cb44e1906fdac2437ca444663f39076dd75f2d0976f1b27d20117168412aaa9d114f10

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 a34048aca22f5fcf6d4ec3c25f047e0d
SHA1 5f2b85c084b971f64b2c24a515ff262d74703448
SHA256 150da667dc63d62b3a7d59bbf73d507c7047202e3d233bf44636b8f310ec6481
SHA512 a9ae2870634f0d641999d3878e0d7955a2a55ac4e5a0a429c2d131b5b54307945176385af87fca77fe495bde5611cb89ba401f069e731f6da0d7e52bb35627b5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 dd75eaa5e43a4475f081a416db50d93c
SHA1 98ec86d5c57bcbaa728415fd768b43f7be1e2b8b
SHA256 a82eba206e5b01d4afc8ab76eb90dc006ad3fcce13a084ec0c21d4bd6fb1f340
SHA512 4f1b6ae5325530c5a90fa190b8c312a2b2b1ba0aab61d24c5a3eb9acec62223308d502f76b808495352be5a3e42bd8c2911dcf92b9177d4738b52d7ee2ace423

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009

MD5 294aec0d4ff806bfcdb87fbb3c8e6568
SHA1 041fd7d717e4c4481f191df457489bbe7428df9e
SHA256 5a6bdc57db2a75818058849855792ea4d4026cadaa97e22de60e81cd824f45fe
SHA512 151e8486a17b3ddad149206a9a5f8d78f7738997906b6519dfade38cb78a53ae5ebdd856be4b4e7379bc6782fe328ba958854ae76b1371e212cd625ec72e720d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_0

MD5 bba091c83e714bdf8ae8af6a40de011e
SHA1 7c9ca02ed45f84e088b5721c9d64493409185701
SHA256 4e6487fc99cf159b100f35b61336d8ca7368e12f21eeb8f1ba195f3122a0b775
SHA512 d800388ea6e7af14590a91ea9d0392af0f33e6a5ca515065454dd7e6fcb5f6b459eeb06f70d200d6de62c239d70985c4b663042ed528a8ee33807d6284dfc474

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0

MD5 73b2bf4c7a6ab84faf604289b385ba20
SHA1 2a28c6fcd408e66cbb83643cf347742e71dff485
SHA256 0ae59122f25d2c96f65f65376c9da587ffef0c37d023584da49ff319d59094ff
SHA512 5e9476489733b34985853567ae5ad99a9e86d72cd5f0c7f5e39fba25f747d6d9feca939da3f126d0c29fad5b7ba31f440ecb84b8882ab51d82d13ff8f3829f80

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\4454fcd1-08e0-46e7-863c-6a3908e094dc\index-dir\the-real-index

MD5 a939ffbe716b5fad52e764623f808f14
SHA1 1cdc26232456faa6cc1ddb3b14c7edbcebcbc509
SHA256 60c1e8c2c2536ab879d864e677bd564e5da4d68a54ab4cc347ea9efc118c9d8a
SHA512 b433f819640a915a756e53b18c4ea755629156badc019b744c66bf6ba9d1c0ee8e09639c190cf478856223b6d1e108d9adb745e506fabdd3d9da3d9573e39b91

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 353070797edca8b4f1bc943a0067e9c6
SHA1 00133c414db997a0b2cb8b688d8dce072587260a
SHA256 b632ac27aa04a8f90fe60809aa05f5ef3dea09d88619bd4e76a2755dcbe68406
SHA512 a09b4acd2067c0e97dd4a4b3585d474eee8ffa160366469b4fc28564467ec42ab30a83d10b0c0b85228499d3465706fb24e23ad40e21ee32c15a4940baa8f57b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 47025ff583cd03631ad7cd7cb9df4e31
SHA1 e65dfa1b47942c979da3df24fdd9d593551c439d
SHA256 620e22df1fe115201d2cd6477fd75c98b4063d7d9adcf6338db2922a0e4e322b
SHA512 95d497a147dea796456bb882f766d1fc52dde6853814377f42ef64214a865d31e3464e0068f92b265b9a96f73a3f8361d303cea258e86f0529079aba2175ce37

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e0e46f5e40fa21cac540db05a8ea48a6
SHA1 0cc893c2e7093289e7b6924db61a4331a2d239e2
SHA256 9ac958385a2b1f37db5cc2b73f8765241f00f41af56c83621fce54a976917703
SHA512 78052ecee065e0779f37130138db26e2ee3cfc1c165883fa96967924673284a580c1fad3398b823d8eaac96c08dd07faeb574285a09928050ff0191a30936e14

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 21b08839ed3bcb5e035d1f4a9e736091
SHA1 da94a57e7f9effea75d7a25468da35c2cbb96a1d
SHA256 1b34d582f0e144f1421872f7c6b3095f832930fb97e2e2ac0bad17a69362aed6
SHA512 e09a215dbb7c04f68d53b8bf89be837af2343d501cae2e2ad5d5c33d84ae025ec71bef977b74660883503f4bca6c00e76e026cedcfe2278e10b7b5b48d2d13be

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\bf655324-020c-495c-add9-f87d17b77fb8.tmp

MD5 e176146aa7892897e24cdb18c5e8fcf9
SHA1 bdc644e2d791cda02e5367936db9b50212449fae
SHA256 d0be7ea7abd44aca1ca9f004eef78fd0f1c37e6ba96c34867f420db3b1944a8a
SHA512 6fbc29d1370cd292a72cc860252c69b13fff26df09cd12eeb733fe5a83d99c03990e1b8f44d5dc3642359aa8466c2db5c7ca38db46c3984e109331a8609e26ac

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ceea317f1e63d8dfa485a0b14d51e393
SHA1 bdb2cd774d008c7ed7b2cead9d5b66535008ee5d
SHA256 9f79841a2b9819558fa69b81ec01a826d8628240fd6ce716511417104eb20149
SHA512 59a4a021dbf18b5f0afa25874303122cb4f75b60d871fcbbacc0287c17742488bb34772e1c3e8f7faea30b3e37314e73c391a40fbe46366bafba563c93ff1565

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c7bd9d9d79458a7b23a4abe97c8c4550
SHA1 780a18d64159dd6604136261520712a210971bcd
SHA256 01d36e60a39d333bd2af785c0d8d6a33a3758a9f659c13c26a555cc93f391a5b
SHA512 71340112dac408beb74f8c33ce252992980bacaaa397ecab6338de5a24b83ec28b2a0e00024d4193e69a401936fbb023c4ab83d28c29240595cba7b5adbb5b44

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 2aa05ce0a3ff5aa200a42cc97f9fec49
SHA1 f44fecd3fa4c3b5d4b055ec75f2904948c1ee548
SHA256 a068ef9f03a671b4072dac2b19ea40d053e8b9cd689da8bdd1aae1d027e4b436
SHA512 fbe4c95c5505f3f8ef4383bcd9746c892fecbb5025c04d0c203d089ee2b4b3d06b53735550a515fa9f03201b8ed10f60cb7c1140848c71e6b5c502d737b411bc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 8d7e742b2f95c0b0760c858badecbe97
SHA1 c8d0be3df55290eaa2191a24bc7c4a9e246b88fc
SHA256 e22d6b4caa6eacd93859494ea94b78b6ba299ca16b1875f3ebac2bd09e3e7ba1
SHA512 eca4e049940e5190692f3a0a207974fad7e0eb57539f348bc7d713b0c35294079fda6506661c73685713548c81200da6adb00c198175a7430216198eab17bc9f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 b62bed683333c7edb7d5b79c0fbf60a8
SHA1 3b4e051242caf8004a764eacd9c858dc50800a71
SHA256 f432b78c2fc0866a3535b5665f40f99cbc16f7f5281806d9c341ed746b44065a
SHA512 037c581bc43bec68e622d5c82feec9594debc5cc10b6d7e3eb4c5a68a97b2b4533782a14355402d894b0d8fe9c840eb33ef786b7549cec0b30c265f29a9af9b1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ab069580b9dd3326c4d0c78c9007b4f3
SHA1 7cba5a2fb7667e110ceaec3b8eceefc9a169f0ab
SHA256 60d03c2d3f93254929b9b66307f0f41b4db3d97da853c07f20063a2a6c61c277
SHA512 bbe66e94d3cf97b5104d651368258eb42dfecd6f26f643acce79aa3a6089b8bee67a233bddd2638248145b612c3985e06301348138d2d2442171b2c2ee39578f

C:\Users\Admin\Downloads\Archive installation.rar

MD5 5cb7e8344fc0a65ae9b007041805024d
SHA1 4395948bc9f68dd34619ce61b96b49549faf056a
SHA256 ab3e8f9ca46374e83f56776d96c44f62cb471c57edec164455c4390858892b15
SHA512 da983682a7541ebd6f0bba277bfdc48750b2e799288fff3705ec710f941cc4cf18dd1200713f59206f5a6888fc94d455f1758bf13ee4c1157b06a9f0e8a48a0f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f3441425b7445488865480467fd34363
SHA1 aab21e6d005e9ce3fb740a1cd6e10dbd5e7b6660
SHA256 8d8d3ad204327307dd4b7a4d568d5141fd8dbcbed055f93c626ccb9cd47cbb3b
SHA512 33d9b1f93b4917ecf8a44c709167287b568df3bc76de989033e1a842f2e941c6088e89c954bee70310414f027947258d2d3da56ada36e61c3f77a92d58873099

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 81280fa3b1bf7f0266d353fe90a8ad9d
SHA1 2c4bb0f7deba42c06d13392a30030f90ef3dfb7d
SHA256 2537d0c78437f755bcf886c033385ebdfe20b477d960f93b481d8552af141a6f
SHA512 64932457e71171f153da5ccaf2b330fd55086011c9127694515bca15c44e164ca4bbb02d333dca3187f5a6e7a25a716d5178506c317d8c4ad67eac6cc8a81a7d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 3536e22cd00d7df5333a0144c56b1191
SHA1 8640cfc52543ba4b33475b69399b46c36aeadfe6
SHA256 bfab11e04ab071cac649988e48fdc3741e5a7e409894c97fc89f438c2b951ccc
SHA512 a092ea8520d02d5dd36d2def86d478cf77bf26777b0b211b8e552675408bf0dd23b2d5ec68eeba4c42b857182dae4ea39fd21af4390dd1a549418707342cceed

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 676a3c121800ded8708b3292b768899b
SHA1 62f835f5ef1750fe638740ddc355412b5fa99453
SHA256 889cec42a8b751446bc5eabf96aba31edbb84228d1d772ce34c789d84d1cbafa
SHA512 c44ff6292536eb0d1c56a47a4aea9d56f371bd5c11bd98b444f9783702394a7a85d2429a6baf7d06e7731818d4419fb190fe970d257febbe9697f60a7e8de603

C:\Users\Admin\Desktop\Archive installation\Installer.exe

MD5 c06b281a3d785d1c00cf676679fd05c5
SHA1 0d34738eac87ee52ff2202d11c227d8db7d19c5f
SHA256 c1915447385d3e3046caaefb7e6a04131c10af30aeb0aef2515f312e02eb2fa8
SHA512 2763afa3c8d3e0540fec78c26ca2b37f68b6f5a5841a8ffb617739ae62df09f02f1fcb5d1dfe717702b404f3c3595902611298922abd0ae1d86ef7b59c11254d

memory/5692-1400-0x0000000074960000-0x0000000075110000-memory.dmp

memory/5692-1399-0x0000000000B60000-0x0000000000BF2000-memory.dmp

memory/5336-1403-0x0000000000400000-0x000000000044C000-memory.dmp

memory/5336-1406-0x0000000000400000-0x000000000044C000-memory.dmp

memory/5692-1408-0x0000000074960000-0x0000000075110000-memory.dmp

memory/5692-1409-0x00000000030B0000-0x00000000050B0000-memory.dmp

memory/5336-1411-0x00000000014B0000-0x00000000014E2000-memory.dmp

memory/5336-1410-0x00000000014B0000-0x00000000014E2000-memory.dmp

memory/5336-1413-0x00000000014B0000-0x00000000014E2000-memory.dmp

memory/5336-1414-0x00000000014B0000-0x00000000014E2000-memory.dmp

memory/5336-1415-0x0000000000400000-0x000000000044C000-memory.dmp

memory/5336-1412-0x00000000014B0000-0x00000000014E2000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 a774512b00820b61a51258335097b2c9
SHA1 38c28d1ea3907a1af6c0443255ab610dd9285095
SHA256 01946a2d65e59b66ebc256470ff4861f32edee90a44e31bf67529add95cafef4
SHA512 ce109be65060a5e7a872707c6c2ccce3aacd577e59c59d6e23e78d03e3d502f2707713fda40a546ed332e41a56ef90297af99590a5ab02f686a58bcbf3a82da1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 fd7944a4ff1be37517983ffaf5700b11
SHA1 c4287796d78e00969af85b7e16a2d04230961240
SHA256 b54b41e7ce5600bc653aa7c88abb666976872b2d5e2d657bfc1147a0b49e9d74
SHA512 28c58a2ccf39963a8d9f67ea5b93dbccf70b0109b2c8a396a58389cdec9db1205523a95730485bcbc9d533867cbf0e7167ad370fd45740e23656d01d96ee543b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 996fa696cf6d725b792c7bb43cf9dcdc
SHA1 acf8f646ae6cf66827d1ea782266ba5e9df02000
SHA256 76f5bc2f728e488500bf2d8f80997a38505eb17b78836bf4bbb4ec2df8d3b653
SHA512 03720f56f0833983bf94e50216a53f0543404890f89b8808e72ffedf640b953ffbb843cc014b250151d7f214d93ccb3f3c9cf2f5d2e3bbe89ee7cdef25b3a769

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 3b59565b1457709ba3bdb4ecd5cfc264
SHA1 71a640840e25a60330afea620456fe96b077ea77
SHA256 206d855cfc4bdf9604a4d1bf6354bffc65eb5e0959e66667203f8a5170746973
SHA512 a12f2137181d331f74a635a5fe39fc4397ea97c3e14398f6c3ce75df4a80acfb81b85a6d46c2c40e20d84c202635c382ae8f6dddef769faa3888a72fce44ba60

memory/5336-1462-0x0000000000400000-0x000000000044C000-memory.dmp

memory/5692-1463-0x00000000030B0000-0x00000000050B0000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 ce1f1645c8b26074f6aa1cf7a40381a2
SHA1 39f43a1c125951588f08f49bac0cf439169acff6
SHA256 7ee65ba75da837f15bd60ce98184347122427037ca546bc065cb2f809edf2272
SHA512 0c785920b62ea9166df800c52d2584b272d01a5f31639ed05c8120924e26966c62b10a05340e069301a7379e665d69741d6be7b7188f0e688d6b998d88aefded

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f20cdfa66f03a29b67a598caf08d82e1
SHA1 0f27d0c2b9a9fc16f8294c6118aeaa2a32b9f8da
SHA256 79f14c7019242754e858594c1fc59eea386c699adcab486d34e81126288461ac
SHA512 7ac639b33f2c94eebd71e8f1788d8d8331546a06c56b4e67d9fdaaf1829a9ce65647ecbcbc44e41a596b108fd932a70be2beb6428d4bccb0b7b517b7fe7ee910

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 84cdc542ecf7ac3cd5762e7c25a8e187
SHA1 05d8d78b40ce64b335ebaf4c9829b1cb4491a556
SHA256 b9aaf8384003939ed77e578d8cc634214894af70c75cfb19ac93a04cf4fbfcee
SHA512 8ef3d86042782e6b6e9cfd98453d231d895f527de22762915de41c31d28cce84fcc799348a6277b7a743ee2b0f0c7e942811816f30cb18432acbb55aea7888c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

MD5 9174e0bf41ae55e427f491139b73d70a
SHA1 0d7446e86cc72bc514d282bb8f0a730ade0c4f39
SHA256 378e3bb7735e8f3cbece7db82211689b1333bae0348bcac42a893bf43b020749
SHA512 447b3c754ab99e54ad37ae993ae36ffe40b62908985cbd96d3fe1d049073fcc07182dccf87464a6a06d615e9d8b0772fc59e198485acb9e746093cfce6cc59ee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c227762b04bd7a562d7c9617ec4e3349
SHA1 3b07ed86e9e6cd8807216175a68b9ecebb63ad7e
SHA256 0236af6d9d93d64079c52c1a6475d4a9ed2bdb399c4abf343a3bec8853db1a06
SHA512 7ea649c5d40cf8053448ca0df0e110f849e7f3f390fcb2b7d7918c34185fab3f1cb5b95cc43fb3d53f2b467ef1ceef9cb09bd0de061a4aa748123f2ce4d31fd0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3cb8982939627b52ee46f2c3e41e1c4e
SHA1 642842c94047711e8044884ec2961259469b2cab
SHA256 0a1795fbb443594abaa1cd010066a597f8565643021cac8d228771b201eff681
SHA512 28424ff148e78a6199d8b52151a693c6a0fe746187fed51022e091385303116c08c730ea44c1eb7e3c2f4e69bd1c27194c7d3a990ed193a9b5698ca73e629786

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5c36baa550b6e9a6c7931c094756f68a
SHA1 d3d13386524c56b41089abe56c7262c5f901ffa3
SHA256 7d34a266a67319afe69e2d6518662ca15e9d9eee821a1b57879d15a77d9830b7
SHA512 3bdea3b54f36acb61dee4b95e93de4c0ebef804d2e4495a2dd02543bf7eeaa6da50cb9f918a9d5bf67fd0de9582c04968c74c78969ce2ae880b96c60a2d7155e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002f

MD5 98a8a5d471fe111c573e93bf61d14b6c
SHA1 75a0d1a33fdb53af8ff78560e6a716fdc37b539d
SHA256 a3e0a65923306d126ffe4f9ca8b2288dbad7a02e8b8efb8c3a4ef8351889f9b7
SHA512 100cfaa619b5136ec83ac82c9a2333216716581ea7bbd934a964fa03fb9d92e695eeeb8e6425a3cc86348b654e15050aa1faccab7189fc4ce7e66bc9bf488c5f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d

MD5 06d38d9bf028710762491328778f9db6
SHA1 83e1b6cbaad5ca5f6dc63453da324f8df28de193
SHA256 91558d69c027808e375e11c80166dc6ba245fbcfce715c9588decc55b4a33dad
SHA512 b197e5f92add72688396a07246ee9842a3b0de36508aa57f0254531cb109c77d0392e00ea28e006f9fbab1b8fee9b333998946de47ca7526b631e8c810780781

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4732382ba751b74f39daa242eb5dbb45
SHA1 9417b023b67ae5d8c84878f543e4ad9c44c58b2a
SHA256 b53bfd0721007ab024d1c9cbca6e369ddcc7ade7cc4cca832d53d715a02124f7
SHA512 723713845010080ede119652914f0e0d9c02c32da5c3f6cdf00e86e9fc2adeff4996c973e5922d6313d499219ffbc92894b26230cc0dc87171741f2ea56a78eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8b15e05bf89658c6fcd3f1b38873f9b6
SHA1 4412f95f848f7e10e4db1b16c415b7d4b8c5d423
SHA256 da420cc6fbc8cc3bbb1606534cd8c4d57b63cdf2c43ff3ba38ea48b10fe52200
SHA512 a2836d0b4d527f4d60e1157d1fbee05524123e0c273ae65ffb24b9ea61186e7ec5d8a31ce1645fc2f4111e871223a29333ba4e7fffa16ae7824d8e7b8f228e16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

MD5 83fd5a2563bd13ef9c7c84e5f67b60e5
SHA1 5cc64e6f42a2e80f0d3cd6c7a42b7f152cdcbb6b
SHA256 1a4bc5056ff41fe399b8d2f5c6db329eb1171b4a0cbd287299179c3ff65eb587
SHA512 6158f5c06366df1aa6fa882711f103792c39b06225aef05f11b1c6671dfeb0c8108d7f15c76f0eeae90fcb6abf7b2d838599898354587a3486213f0055849d72

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_00000c

MD5 aab2532f8363e63359dbf0c31981f57f
SHA1 a21523eb85636a0455977ffe525260a1a8568043
SHA256 a6abef5f074c67b1f9fbee679151a4c705b71f054c98f720dfabdc65786d5d13
SHA512 7b3c4ce6574b36bf0d4e05bba1063798b525744fdb37b28ad6fc78456ef7d704677795ae4dd0d0eda0954d15b3776395fa931abf82dd4b64583c360dd9916f64

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 695822221a07c1af40c69d7b0d92b5d5
SHA1 b2cf32e4857aff1ca1b779757b854ae7a463dd2b
SHA256 9db1724f721e98033b99063394dfe0347c9b9c5f5f5231c94550f6980e3ed5b7
SHA512 cddbb5ca578464ec00f03bf6072e7e66f68c818b0b3b524557e0c3e60d9c0c81abfac8c36a00cfea1d05c63346f8da9bf297e66dbb30cc78caaad548806af528

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bbd076aa885c7cb6cebe8029fd9e5a33
SHA1 94f7590f2109bffdd29d30fc22336e47fc01779c
SHA256 0f3d1462777076a87421563251faea9607036f5441e24b55647821c0335d1ae4
SHA512 25aea6c5177d29857b6128717beb27695554515d89df99c0dcb9766d7007feba8e266a473465e8042362ad84d7c663a560a38c42e4a9aaced51bfd007a8b049e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 ced97e4bc9aa0a72a2f13f51403074cb
SHA1 ac3f20cf5f31fe7cf494bcafd0d2d769d1bba417
SHA256 bab6c17c507c448fd8153f6fcd0e0b02257f29199f9904919a5a72cdf3db7c68
SHA512 48237dad2f33e3b59756b45afa5b93612d798081610ada7eaff5a0215f2f8d0f4b3522699df9395301ef13d78d2e5af0d107f83e72139c9905980e85eef3a1c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

MD5 d7ab34372c3354cce1155292d78a16af
SHA1 aa4029dbd7a088d4dd1af5dd282e21c0024aacd9
SHA256 fa67ca3a712b8fda45107556936305a84004754afa3540e1727328e9a1c0de33
SHA512 55883a8d24112a7c49a361cd10d30c461342d88e790d6d5afc194f2e75867889302a1fa9e9f873e897514fec593aa55c8b2475f9e18b0ae78ec98d6ef7c11216

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 239c3a13121741e03b9982752c29f9ed
SHA1 75e72e967a43a4d5da01382b152823dbf3b61aed
SHA256 2425a010986d281cdd73f714642ae3d8bbd25218942a8cf45e6a1010256153c6
SHA512 804b1e554a95619c473f29c38fe3467c9e004c857f7bf66e945f203632780f0a9db736bc641b01f73d57b58eaca57de9c5b1bd3f4aacdc74a7f653c54500de4f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000039

MD5 44b3bd0e7c96bfa2163009836f5f4c0c
SHA1 44933a4458fc305e20c2ed48ada38d29b597deb2
SHA256 c882160f75b3b51378094db16fbf3d4fca7cef1e3d8e9bb0cb95e4752cc2dda8
SHA512 7d5bf9e19ae6acae2b07da4b305d21d654486bca86eefb97388675d76b70eb27a12c5734110dfa8b80af8b20986e00388dadf14b4c1761b94cceb7ad35085566

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

MD5 2a3952138eac9c8c8ef617fde9d31084
SHA1 bfb224755da2eae683155c362e58ba46340e6ed8
SHA256 62cc3399164653c4f7778051479eabae743caa7d15c71acab2b21562dc2f7993
SHA512 11da1321573cb420926bb1e314961580209ca6b87ab3df1a078ca700b663490545f2dc3c4864d6674e01df211eaf180e892624322888ce1717add11eb31f9075

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003b

MD5 9566ce333bff8c1144f5a1f95c6fcaaa
SHA1 e1a5bf7e6746f4db46f891407b5cab4e96da9f7c
SHA256 7d324da9e4b12040fad20c9d49a4ed25b3acf761d0944937e5f95badec412b64
SHA512 3af7fede73d2360e32aa867266a4fb369eb35161f9a2134e28718d75feeb47091a9930951ba56cd829a586995491a6900b81c7ced8cf3d68bcb167136267c6de

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

MD5 2c71e1a7dea125936dda8954fe21cec5
SHA1 cfa7c0658fb08a0c45fd982bda9b8d031bdf09e0
SHA256 d70616c78a6bd1c3c89d71bf4d0cfbb48c7c5107c710b6c592ae6b4e80c48425
SHA512 46391e2f0e5fb7df4607798c19b3bdb837efeaab3595a92a6907cd5620c644d4395496b6e39278ddce35b76501f827091bdafb78492fa12c20bcca1bd3563253

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000044

MD5 29e1aceb1ab31f096f1e0a6ee9522fd0
SHA1 cbeafd2d372503d1a1a9aea2b7576794f76476ae
SHA256 f1b7fb174474f3b8ed51c653dc59d3ee34e76d65668a5e7cba4ec4376d96101f
SHA512 9fa566140e2ade7d68d179e8b3581a9e039788b35b6f89d4634fc430f8400b06269be6b3aaddf6ec29d849d5033f2ac0c637f7424137b925ccf5cb6d822a3136

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 cb1f448bf7eb16f007d8987033c7d883
SHA1 7d069634c12fa538a06ee77bb02275e99f709947
SHA256 1dfa5cd74244092e698512c56e2b8ad2521fb8f433bc956ed8ed2b41a6101018
SHA512 5e28d191a7cf27f5e877dae858d8aba4033729a4be037c85aec60cc4fe24e88179551c7e5158ed18bb5f7befff21419abfe8f6b731ccead380e10a15f15869f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 26758defe71b8ac426efe91735bd4dda
SHA1 f6c1917e721d8538bcccf3d6115722680578abae
SHA256 abe01b66f09585892276ab120036044e6cd090df0a74953ff98887acde4a490d
SHA512 0231ae329bd867fea4fd0c40c051aca9b6172f141fec9e64f1173d1e632ff95d3af598ed84ceea1e8b49fd1de9d9bb634a3f85c6229d60b137f81178b621eec8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b8b7e371a13f3397a24dce3e5a807f01
SHA1 6ca933708bd0946e6881624b79cf62eee6b4faf3
SHA256 474ceeebdba2728dc686783448254f5d746f7eff768917b9e2dbc45cfb8e32d0
SHA512 ecdc42eac33d5c58a7ac2380f3a7108ffb82a845df9fecc95a086c907957c2c7279841156ff309a35dab0124ed2c092395ec2d4aa6ace5e9c3af9806f16d656f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a28ad2586f8229a373f81b6f53c7c9d2
SHA1 fe645afd4555951377b17457a77eb0d41ab03d4d
SHA256 378317315ba054a16ccd261179f215c3d35781c1b6b4376bd0fd106fed48297b
SHA512 b81af4b29cb05a1792d3306159951503472ee2e808490150f6b118c5c99419b2ff3f34cb9fcdd129fedeae5e1dc2fbb1854370b6654c0ffad29d8076c6100887

C:\Users\Admin\Downloads\Unconfirmed 420938.crdownload

MD5 3bce767ca32b027327f991f75eff7745
SHA1 855a8d50305c2e98c93d95a2ab252d1f22371eca
SHA256 aea4da4def6d704fecd5eb861cbe30d6142a02c1f2c2e5919be9245d825a938f
SHA512 ed5f9be3d9e5f667387b68a1f5c88893822abd82b29a9d02284076f1d23d6b1e2564d1e1b2349d9dd1e521f1e16fd7787f87446737ec3ad4f33a906b39c43113

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 95e5df77ec38555c3a7e776a1c801ca6
SHA1 89d3bff6aa2e8f997af843db3f1ad62ba4eadaeb
SHA256 f2c129564c49411f5b23dbd250667df99bcecea5aa4c3137e765e8c16ad2a046
SHA512 891e642a706ae5ea0c9a2579e90f8f26ac11616dcef30314a282d61e1cbf744c6d71e6edb14726ae641346416ece3aa539b558c1c903ffe4594b98cfbb7fad1f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 dac3705185319f4915d662f5875c4c3a
SHA1 a09670ab7e3909b30bfb0841f9b5596f95da2fd7
SHA256 5106c45c553ebbdd042e3beebd5c818c4feac8eed8cfa4af6ff3555723cc71b9
SHA512 035a2050691bf32750c0bf916b10267c0c1c6f5b7c7770468fe0f2880e4a3a757911e7cb28fd8a70db3bfd78701ec6c25bb2aa0e3b9462193a5cef39ca4543fe

memory/7156-2254-0x0000000013870000-0x00000000138CF000-memory.dmp

memory/7156-2255-0x0000000013870000-0x00000000138CF000-memory.dmp

memory/3372-2257-0x0000000013590000-0x00000000135EF000-memory.dmp

memory/3372-2256-0x0000000013590000-0x00000000135EF000-memory.dmp

memory/7156-2258-0x0000000013960000-0x0000000013961000-memory.dmp

memory/3372-2259-0x0000000015480000-0x0000000015481000-memory.dmp

memory/7156-2261-0x0000000015BE0000-0x0000000015BE1000-memory.dmp

memory/3372-2260-0x0000000017730000-0x0000000017731000-memory.dmp

memory/7156-2271-0x0000000000400000-0x0000000001400000-memory.dmp

memory/7156-2272-0x0000000013870000-0x00000000138CF000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 ec68d0179c859c515cfe97a3c5381530
SHA1 c8de74d351bda1922a3c6eb81c2368ad61a3e53f
SHA256 cb45ff8ab9f607a39335fe6f1f2013632537659bb771a79a233c9deb9c7818c2
SHA512 0073ee9d8fae3c584b7a3fc05b8674265f740a67a97b30d85fe721395a433917aa13b2f374b3dd4672202146c31fb571ccfd01f7da3a7109cccd61884b99150a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 7612c3ce224b5c84bf0877cd98dd4e6b
SHA1 80534d24a6a2d3139e5169ea7cd6845560569800
SHA256 0532a52a955d974fa1cf89b7cdc8d9953a0b6a88a4b98abe1f408446652f1781
SHA512 b9b81299973f399ab2fffecc5aad47e2565bad9a403096b6831ddc0e097c95b820d9b696bebae4ee0a97e3daddfbfb82d9baa74533d5fbe30a090696d094b43d

memory/3372-2295-0x0000000013590000-0x00000000135EF000-memory.dmp

memory/2216-2296-0x000001E64D330000-0x000001E64D331000-memory.dmp

memory/2216-2297-0x000001E64D330000-0x000001E64D331000-memory.dmp

memory/2216-2298-0x000001E64D330000-0x000001E64D331000-memory.dmp

memory/7156-2299-0x0000000013960000-0x0000000013961000-memory.dmp

memory/2216-2303-0x000001E64D330000-0x000001E64D331000-memory.dmp

memory/2216-2308-0x000001E64D330000-0x000001E64D331000-memory.dmp

memory/2216-2309-0x000001E64D330000-0x000001E64D331000-memory.dmp

memory/2216-2307-0x000001E64D330000-0x000001E64D331000-memory.dmp

memory/2216-2306-0x000001E64D330000-0x000001E64D331000-memory.dmp

memory/2216-2305-0x000001E64D330000-0x000001E64D331000-memory.dmp

memory/2216-2304-0x000001E64D330000-0x000001E64D331000-memory.dmp

memory/3372-2310-0x0000000015480000-0x0000000015481000-memory.dmp

memory/7156-2324-0x0000000000400000-0x0000000001400000-memory.dmp

memory/7156-2325-0x0000000013870000-0x00000000138CF000-memory.dmp

memory/3372-2328-0x0000000017730000-0x0000000017731000-memory.dmp

memory/3372-2326-0x0000000000400000-0x0000000001400000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 88a552e6be1ac3978c49143983276b3a
SHA1 dbf4f4dc62a3da564b1a87b5191dc9a72a9b9423
SHA256 927121d8118a41fa3460b9ad84daeae59ea60dc9607e462b7e1341bea60da8d5
SHA512 125b13be3d209ff5cc12d8f9f12d01d271cd50c2800059241ebb419167c21adfa9d979ff6b8d88052f5d302e98090b7c8ceff4894b397168d8ba6d8a6204fb9a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 3baf7c2e036abf00bf52d8e4a918e970
SHA1 0eb5406e14050dc41227ba74b64a38da778fe5d6
SHA256 d30dcb199ca26a9664a46c01b4eccb26f5b8682f04480d0a9d2beffab7d0a049
SHA512 c12875c0e5085f534496ca9f1f43bc4d5097f6d4d969f70ad1651bf01bdd4e9f5e27c93413ef0589c06c647c0a22d8c4b7a2ffbda2fe61bdeb84657f53a6a429

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 76a3f1e9a452564e0f8dce6c0ee111e8
SHA1 11c3d925cbc1a52d53584fd8606f8f713aa59114
SHA256 381396157ed5e8021dd8e660142b35eb71a63aecd33062a1103ce9c709c7632c
SHA512 a1156a907649d6f2c3f7256405d9d5c62a626b8d4cd717fa2f29d2fbe91092a2b3fdd0716f8f31e59708fe12274bc2dea6c9ae6a413ea290e70ddf921fe7f274

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1 386ba241790252df01a6a028b3238de2f995a559
SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

MD5 3b7b2d976fa66ae3574026c395f12317
SHA1 3594d4d09a86a5821160d4346ee61b20c2cb0014
SHA256 7dfaeaecbc74b2a977645aa3c1aeac81401edf17377c6778f333a6f5aa1a0e31
SHA512 4a31d1cf43c6ac7575bc0a5805ecd2e02733d5c29ab372df0f8086305d143419d9053db5a91cbd22131044113ac9277b81ae97e3926cb7cf5b610fcc50433a39

memory/3372-2423-0x0000000000400000-0x0000000001400000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2246f097f9643fde453806dcb330ab19
SHA1 41d7771408dd45a6dc9907b490c03c1dcabaf982
SHA256 7ef0efa70ca9744c6909724a457512500bc6b420375bb5cd5e88b9d434354beb
SHA512 a56601fad262ca5ea640ba98033d72dee471b50947687e8e3642c9648e10e98aabd3f585ae743efde1e6788b4d535658957af11490634204f6e27ffd318dfc57

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 139f22dbb85d16609189baefed635ecc
SHA1 c63056b195c7fda11bf0f39416dbd9049e191dce
SHA256 3053c4a0d6384fdcb2504164b4b54f8c386d948901f2e16b7ebd862370095169
SHA512 a66e51fe51d36c16b284c7e12794e9d762824d1da5d9caef6d1e9067a0b9c83da4c56d72c1ead6646d74f771c65d860d1be9574c0a80d25c5de71570e04bb045

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 7a2c0851f39190ca8c815c87d6bc5114
SHA1 86d92979e3315ac928876ff86bafdb38f211bb70
SHA256 ea7670f4aab2857ec7cde37e6a8bdc8247c624a77c13de9df820deefd56e2df4
SHA512 f874b745e76c596d8f841e3d6341fe1baf68f33d5c4cb943ff0b1d7f16dc57ee88473106e7ad0ef724a76b061175537ab4ab31557eafc890568133d0abaa0b16

memory/3372-2566-0x0000000000400000-0x0000000001400000-memory.dmp

memory/3372-2567-0x0000000013590000-0x00000000135EF000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 dbe899c5469c556863c2a0681b97de34
SHA1 4d5ea95d6ed1f98076b5b4e9663796b39cff8f59
SHA256 baf3634e1579a58acd7469d723a11e95841d6d12023d9eb8e32a4c18f6d47551
SHA512 f199d906ff7260d767ed68ef9c70abe71feae7aadd71f0a2e66ce2d0dd7f2a4ce4dab09a9765125ca20dc08ae1068f70218696d86b1a8341c56da24de862a52e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 d5eecab9ecd03ea3887320356a289b41
SHA1 3f2385763b465b248a2e18ddc31a202f8722e617
SHA256 4017e405bc4b3c03a1a164936c2565ff93b863e5fef0cdc8a0ddfd394ed0bcc2
SHA512 b477079bf738b8344a6c9a07418316a68176f5e36b4b9ad44200fd9b230d99c58294e484db192a6c9024ed48940f8fbc6bc9c6bb1d5170a6ebac29399342c76b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

MD5 9e845325e013ef2eeb8d6630bbac8c8f
SHA1 0958508068b62d93abc04c078609e3bc6534f02b
SHA256 79e6dfe228e74f1d1132d2651afd5f8ce67617c1fe5508e166fb2277271c7561
SHA512 a9f882385db7ba4ff802389ee81ad7a8197c32a24844c8922394bf96848f17fa2d05e7331b78b9aef6c67bb9e14f61f394a02818a069cc837c9527e1b8474ce3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

MD5 9a2041762a0a828fe817a78e2b448c6f
SHA1 cce2a06d71c465e4e8daa53e4cf1d146b705c6b5
SHA256 db90e4325c06408201d4f8605ec5599200cb826cfde242de004d6b99d26f769d
SHA512 4341881a14621dd2fd3b5a7cf5c893efc4317e2c45d4cbefd194cf3bfeaead1c5369f7f184d3dd92a03a73f649da1b7a3eb1739b4354e2b19ca43cf5270660d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 17ed87129f9b334cef63ef20b8f880fb
SHA1 c41936e06093d027a8ffff75bd148317b8d96b12
SHA256 2fe8f75104e92b17123c1ce14619a1b49f073dd7105f63b757fc12ecfc7371e7
SHA512 67e9a5283b2913828b83ca1edc150bbd4f1267872f37d2df0f08a398e0ae5d6ed01478d9e30c5f1d637f85668c0cc065c6c895df0fe2c88b0eadbb66a68e308e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 df1857c9e584a3f1e297ea6f5c540820
SHA1 b7f9870d3323a87c35d30c56dc0471beebfb64e8
SHA256 c7ccef16e44f06a6a06e6de7e91911228d9289cf44f47c5451ee03cc6bf8b0ed
SHA512 5d5e9eba86a63bde5b491e10986097619961dfe2dfa7e7b7c2996d5c53823f90c052cf7fbd07030a837d556678d020fff7e57f6903049a1b523baae708e02c72

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

MD5 c03c066b307e8ee9cf21f4a624f3fdc5
SHA1 3ca647eeaac646ca7abb0815218ffd6914f8e3c2
SHA256 a34d7801cf7fa455d031bfb02ab513f0cedf049303c370861d9223095120fc92
SHA512 add29465f80fd0ab1184210602f3030ddcdc17e368daa2eca13280d70d121545dcf9224746dd7f9c307f4a1abfc24f837ac33019ffabe648b78998333b7cd337

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

MD5 7cd7a945ba724666130cbda7ab29ca5e
SHA1 0353a6a3d8522f9f6f86bf389ba87b84917c905a
SHA256 7636fc29ab5c6ec1a113bf9eb0bff014227f5b36a81aee543869ba3527c801f7
SHA512 4b576d2f9e0f83aebc1c6bff38607408736d25236c1c39b39406755c943c7c30f67a6482f6bdc914f7f44b630ef5fa5467dddeadf8aa86a74c1283ecdcbf899e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

MD5 980fd68d0ef6682d2811e22f10de3d19
SHA1 1cf659af3493c27545e608039587d2d9b18e7490
SHA256 b5b0ddd00b8cb584fdf25dd65e4c1cad9875716fcd0bf1ec34fd5594116df2c5
SHA512 daab3ce3b4dae92aefc904836ad31f28a6b28702c4805f14b872a6d2432fa2bbbac6b67354fff01b339cafe87f2a8623da7928121e365f00c845f5d16e9b5c2b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031

MD5 b82ca47ee5d42100e589bdd94e57936e
SHA1 0dad0cd7d0472248b9b409b02122d13bab513b4c
SHA256 d3c59060e591b3839ec59cad150c0a38a2a2a6ba4cc4dc5530f68be54f14ef1d
SHA512 58840a773a3a6cb0913e6a542934daecaef9c0eeab626446a29a70cd6d063fdb012229ff2ccfa283e3c05bc2a91a7cac331293965264715bdb9020f162dc7383

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0373de2b20ea38910333c5f1ab22a828
SHA1 a119bd9335d970b311945ba0698ee24c62c26237
SHA256 6959af9cf00fb711f010870e8f9798f74a6f5c129afba1a7cdc1ab7bbe92c40c
SHA512 c7a89740fd6ae18cd0afe8f49f1cea0bf7c3ef5419fe10ee61ff8c95c5e1ddf7d39a1de4afc99aca1394738fa007bec0b28bdc00384ae2e148a86ad7236568f1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e3d29728c70e8f32c20b4a56de24bc63
SHA1 0dc7285926406d408bd4717e9a921b433ed44302
SHA256 0653c986d184d5b59db9f2d26a543764a8a5b84f581359e47ad6862fb5937f44
SHA512 ff11c8c6ced7966fd034845f8aa35103bb0fa4802cac1b293c49131f3bc82381b5fa3dfeb572021af84b31b479998994c71e36afcb78511f5abb20b7e556c0e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

MD5 a5bdec508d61365ad99e4d83760e0183
SHA1 a43b57c11870c0db4f40022b0ff22c961f4d5df9
SHA256 a4af789d11bab1122bc3e1e9dc566b830f0e6b76cd47ea5f16fc2e1c9bbf3a79
SHA512 0fbd48d64bbe9428fb71b0d7676a50d0cc4025fd58d7848b4f93392e4ae97fec55fdd9e62f1064d1ece6a3e0717e167824bcbbf8a28fb98019bf49fc888f83f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

MD5 8982eaeb677fa94317f5feffdf3190b0
SHA1 64300ee35e8f267ddc8a86acc491da05244bddcc
SHA256 e70f62d1a617ccd2dec17727ce31b449a9a02ca1f8cda2f980afc74a99de8dcb
SHA512 30c4d8aceb32bd923813c30a40c0dde96deebb91b805f4ec31a403f25eced5f642477b236f39a7b214234553a7e139c4b1426c9d2a02338ee4d9f23b2ee60e6b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000051

MD5 29f1972d3cee41bd52224d421e54d4d9
SHA1 49a3add9a4ecb8ca3aec701e5c66f39032f159b5
SHA256 19b93cc0a495aced95f6bbe81d92360d4883eed48fbb7a46413e2d4a527f8d01
SHA512 be734365b530c7ca175c1669eb40b75f279a04c9121d38f11b783cfeb2e7a3787f533ed3cefb0c7941a72f4e88d527cd7aa7803723ae4855478013fe7ae7fffd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

MD5 b61f359a349057aa144d805b17f92a11
SHA1 5f7cf4680d902cf9d12591e05a035f3912dcdbf8
SHA256 2b96ed8da54d6a5a31d82a621c4087a7ce6d5b08d899de4c13edbf24d89e8696
SHA512 7e66751062c77df899042c018c192d984b85d6e9f08df4120b73fdf8b2521ddc59c730ae8084bac2c2498641391b206168c4477c2b58e3dc56cc7b6a9f9d7e0f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

MD5 589b8f71193e9a162fd74c211f407001
SHA1 88ac4f628354fc6c3c41caa426c627f945649cd1
SHA256 2fab3594b5692710df29755288d0e17a40a339a367b9a39143575e655fc27fed
SHA512 a3b28f8156eaebebfbb69cc27215662e3bf5c3a7bc06ca6f00e5e2ad9b2843b97788e77e859ff49441d61d25af101836e7f915343b83f9ebbd6b0a31d567d192

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

MD5 7e31b3c996de1ad1dc37f42fc4dcd877
SHA1 b785588a735f7712cc0e07d0f0a610e8bdd2440a
SHA256 f6e3909d31e34059c1c2a6bef1372f85e5e38378ad26380d4fe7ef16cf59001b
SHA512 304d5452d1eeeb73c0f227a994426710553245b8e8a4776ada09c7f222a5b9408f064aade03e1ec38e2c36502b1cd777d23bbd2fdb810990917c114d947d899f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

MD5 bd17d16b6e95e4eb8911300c70d546f7
SHA1 847036a00e4e390b67f5c22bf7b531179be344d7
SHA256 9f9613a0569536593e3e2f944d220ce9c0f3b5cab393b2785a12d2354227c352
SHA512 f9647d2d7452ce30cf100aeb753e32203a18a1aaef7b45a4bc558397b2a38f63bfcfe174e26300317b7df176155ae4ebaee6bdf0d4289061860eff68236fe1bb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

MD5 19c73397068ded824edd2c5b13d0a9da
SHA1 7f0f149b66309aaba41974d524ca69390a34e4f2
SHA256 8c93e33fb098c30a82d774c6a9db9aa92ea0e34586e907ed7d9d2935582c6100
SHA512 8795cd26570fe65181d49676dd9cc9a8012bc22c3e505ac8ed8c1bea68ac7db7f77d6bade360a403a8d79cc4126ac18c2c10e3b83a163e3b42f2e3f60c32426e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000052

MD5 94f5db094d71a015b09454c8b14d54fe
SHA1 2df74e3ff28dafd3bebec4ede1ad4d6932ff47a1
SHA256 93f221c903928f2d7c4d05c45d14f8a97154ad0a8c1ccb5502ebcb00bd5c597e
SHA512 7a9b8bc07443209b297dfa896677d4250749324ce9040bbf6e31746cfc1d789e842a849959481d3a1c276e191fba38f2e0dd9c7770ae482cde19274cd6a2eb94

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022

MD5 3ae0b6cd13ef1742123501805ca53be0
SHA1 b188bf2edafe4f098e8adff0a595c21159bb098d
SHA256 a5a9a6ad94403b8949ece40c2869cffbcabb013413761b12642b84bc1fa3c268
SHA512 2db1c10b998ed2ddae64335922feb2f357598e0d8e1528195c5882961da3dcd4f8596505fcfdccf326e27a236c0caca8f6e6d5c793af60304e4d18bbc0fc319f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024

MD5 bd277d6710263cbd9eed572248cb83b2
SHA1 2ee01929f87f04b766f04a9dc2e19860139f3a90
SHA256 8b96c5f204df1979e7452832ba595b20ee698b5ef9d334cb2342f6ca9a354f04
SHA512 cc79e88e39f54f7497600716db9d30e073edd4350fec8e4d58d427f8c194bc9532a108ac27d88e1bebbca0780a3fb02294d35a3b5acc8383344eacbafcaafc3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cf206594a6333610e299391414c68306
SHA1 fd9370c3af425acc4f6108f1a6b52147f6a4d847
SHA256 f11984b285c4122928fbbe24ca58a6a11f41c192c08860fb37ddbac05d2b9422
SHA512 acf9a8fe200d7700cc9fc469f07fd2bc0da7262ebfb17772f66ce7c09931a41900b31af1181bfce2b71d23ffd560e9744eaf8782fec96d98c51cd815e343c6c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f195d4af905252965a8e131a100b0ed3
SHA1 d6e35fdba0b11e0e545f90d5b51c83573791e279
SHA256 bb0641c149398b01e40ea5348192800609c6c991f3d6642a392b3f7ad8a525da
SHA512 c51ff752d3731a6037a81dca72619e6c7b68fa6175189bcd5e04fb6077e5f9dac1927e4e67a7b5775cef80fb655a78641ffba5770712620503975787149ae87e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9ade5c0704da814f_0

MD5 c55dd0a796b6068da8ba8446439fc612
SHA1 7025e406b386c92a8e9d725de7ebb35368707319
SHA256 5e31241f32c42f52ba8eb5a6cd901ff264f4ba432f707b5c236842312bd23ea3
SHA512 dc5e5ca2b8ac61c29a65a53405e6fc65b81956beff80e6d59c816207112a7b8b364d2228197194b3fcc78d68092f90b9be6ab30264c60ee36eda9f192210e428

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e4ff7a9ec996d698_0

MD5 fddd2fb90f924033b0acb45ced5a468f
SHA1 2a36d67788423e889ef1079276c3330bd2169ec5
SHA256 4c5b48656a018577ee70c5c505a7a88e4b7a5b8f6341dad052b99d37e0db2b8d
SHA512 3c4f21959f71d667a5954edca2b2316f502c704cdaa60fd02936bbc1c741910524c1511b53e3ffd9f8754e9a5c41e05adb7ec8e8ec2f0c65a800cb483262dadf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000032

MD5 82273a67b6570b057c7dfd9e12e33700
SHA1 3b30990e574ef8a2aa557e9d7b8f412d4cfcf4bb
SHA256 403eb22b9f3de6bdbe8b71854c464ea59aa6e562e170e518a00e91ba36a2536e
SHA512 73c55dc5f25b91c6ccab24f666280aca8a8c5bfb52eaa55e7b483fcd425ee845ede04cfe13095e75531edd54a902e5bebf106f09787d84de11e61c4d3c72ea13

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000060

MD5 9c6b5ce6b3452e98573e6409c34dd73c
SHA1 de607fadef62e36945a409a838eb8fc36d819b42
SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a7b786308d9ed53b0af5c8e592a007c7
SHA1 f6c3f5a59cd0287b2b7eb4433bed29837c6b308a
SHA256 68113b77c0ac092ad2063dff107f603526130fc41f810e3443eb760d2c1dedac
SHA512 dc8a7d886421d69e577d8b5acb19026020594fb6ad8fa257720af35134fbd9b249912f982214b0955863f82bc654094ad7eb7d8ea2b73267624f5ccea0f82b98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e8a2928882ff7111242acd854c939727
SHA1 cb81fe63f95aa215fc6f379a86fa342c63c86644
SHA256 22825d45efccd18a6e5266b297ca9ec051661bb274da41609a843987caa0861f
SHA512 8845e1239656f4f063246e64371be5ffe9c9ea901f53a6089ac6eb573fe1542b04d2dc6a46ecea2731f3b9ccc3f4c45017a3928155e03f8140f660f0e1859885

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 55b859a56a617701018bc6ea472697c9
SHA1 fa7c2b0438e2ba4241b6896bc37d621c4075fd42
SHA256 5faf7a497addcb60ed0b1dfcfce42c406209cb236e9ffae87d55e6dc770e5301
SHA512 b5ead80860e028328e760742f9e85b9ea4f9aa4b58e072af182c07c6c6c39d14e66e8ef224aacf6da3c5c3dc0e1fe5ef6a87a87a71f819c00dfe8a731fa36134

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 928d258eb5061af97baee7122a65089e
SHA1 cc21062d51ba33411b73b522325068e0b980a547
SHA256 a18f0aa54b2331fbd9e5a834a4e17012123cff4211205fc9fa4e37b352442874
SHA512 91b686b2efc432ed302cb8140315f1644b6c99c4901f7de13dce8a74ef667468a1843d3820d75d3ee17bb6395d38cd301d0b0692de478240285d360f6aef842e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_1

MD5 cbf74046bfe6f049eadc192ce706adc9
SHA1 f5b69d1423d33515d028e93a7bf925904236d6f1
SHA256 0d477f217c99a15c070603d71d7ae48eaf53489b0634e06759bec5fd9c003a1b
SHA512 e0544ea1f30b8ee15f98d0126d09959b626f2911744c6c31e6e523f760a5fe7cf6068371960283db1cf011eeadcd3fea69e924e19eb7c06021c0fdd1499f4f0e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_1

MD5 7e9e717207d72d6063e2b76fca3757aa
SHA1 068600ba036807c17816c5cfa0892ca327276c6b
SHA256 2dbc6db5e630ef53fcef025570eb2a01407e0fe666f31e01cb47aab3597b35b7
SHA512 77785834223932c1b5f622f9e9db608bc3d35a6eb7a4443fdb7198dac2f7fbadcfad015f7fa2f0705e06df17603cfe9a0c9a3333f5744e3dd7c60ca9f0e6f2ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 52d8aaddedd98efb615d6f2b27068c50
SHA1 76333747ea5383ce91a4f2595fda8a6ddce71b8f
SHA256 6a951cffa5adb9b10649d19864e8540287e8ba5c1ffc3b21bc6e8c9ed742dca3
SHA512 0ab4389057c29deccf2132d17d2339ed641264e42d8b8883213c2c6a1fec06e7c8187b466df743ad0110252cf39f413230235a3cb4c130efd85a16cb61abe385

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000073

MD5 19d732f78b1d478be68b187ca5cc8e1d
SHA1 6b73b141bb383fd383ed5a8d9485c936906ce34f
SHA256 8705e7177d1da224ad02367b62db8d67b004723458a2439db02b8ce71d504091
SHA512 e246f0c9b1e9b01bd4f5eb1b73d8917d88c3f405bb958d42fd15e39e9bb96e1ad5642ec754627efba3d8e8e67cab11a9961c8713149c7e5820b1e35e4914defe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000071

MD5 9c48a0a5bd9686c757787bf4de4d332f
SHA1 9ac19a0d956bf1ed3335b3d9465cfdde99815f4e
SHA256 37062435ac62d6fa676dc75b1daa3721284b593e66e96854e00d1537daa0aa24
SHA512 c8f5f1082f3e5845346e3b463a2c6ac827b8c83e36f2da6b9f134980f674aea1293b5b7c9e80674bed7cf8276fbb19a82372b629d118b7b83e2b0bb29176ad7c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9e07d6e87dbd3361c8646cee000e8694
SHA1 8781ce1bf7f10bf0b3f750bb2820b6bd91eebe6b
SHA256 f09d025dc08a8fb53ede829e4fa9c82bd87649ca1f344cd5c06e23db77521c32
SHA512 dd461fbe1a419b062d393c6d7dbab0e8c89b54661808539c3df01494c4edfa0015c11e78cf4bbb91c75dbe1d7f6b026c1a3c552349376884154eef44b0a04fab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f2dcb8f76859a240c60bbc79936afd52
SHA1 47a319308b14cd92b3ee35408ce940917f98f42a
SHA256 99f419e769ad5c3a8bc4a70e51e886109250352243c53f28eb0c217125c58d68
SHA512 d02f313fa2cd4398b8e7e36fd8dc1b85f6c58f100bb4a6bba9b438e4ecb33cfbe0e3054a4fb2513d8c82a7e7f34c2a6c8a42fb39f935a5929d5b8543f38c71fb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 7785f135755b4509ec5b4b15c49ef718
SHA1 a85f0af0f71423c1a74dfd9023f6f6483e26704c
SHA256 d3da5f8a5d56b59afe1994bfdcec9f7a6694318facdbdd496e58b18f91582ac0
SHA512 f1462dd461b874b3e6cd0a6721a5ebeb4cd73a43ca5c5a46e2aff1647fc29e124a5e6dc0639a92a077b6dcc8c970484167068be8f9afcd4088c4639e2bd1975a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ba73c59a02230464569a40b6900274a4
SHA1 8c18e1f548b406b7823cd1345e3275076408fd49
SHA256 f9c6544b959687f48208c68c75bf9998b9519e2d5abcbf73036eecdf0c20e045
SHA512 94dbb29add50769724bc905eee8afa35c82453f4c5109c267c068deb83ba350e3a528108fe2dff04e133ffc717f1576f63d66b093ed52251639cc32a61a69d3e

C:\Users\Admin\Downloads\dnSpy-net-win64.zip

MD5 98d48d6a22b058d17819de82b743c4e3
SHA1 88189b6717316af94002da0b895c57d4d4cee05e
SHA256 e08e90b34e51b27800f3b9f94653e92d87377de530356c7f55638b9c5a48643b
SHA512 d8a659d4d4a1acfaa77ba5663c74710ae5e47739267cb2a8d7abdede9d636ff02b19b667141b8565d5dac31f582d2c4da294719df20a35d551d3fe737d76ff1b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fc880b3ff377139ef2ea91ab179ef57a
SHA1 c5389ebeb2d24bb7206927ab33f0f4651631014f
SHA256 5d6b55b5fa716c8b1b44cdb9548a099c8dfbeeab5a94316e0a4f24f1ac0ac342
SHA512 096a7f4c83ef8c7c627279f765bc0038123cfffe750ba0be5046ccb54eaf368d17cc2498bf4e3e041bcc80225e94f282ea3d4e589a5c9288ba4eec19dee2e897

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 429b651c55284145dea253c197562eb6
SHA1 6bef359fd6bf17c48b704f6a32ea1b72f9fc6d85
SHA256 edc0939a6262f7db08e8bf239df825d9d4fa493ccc18e497457376cacd168a4d
SHA512 55b85ef93b6519871c91e5e6bceb3acf18cc025f2a36f14ebbe97ff729da8c3d7683632c941a34eefc0eead1aeb8dcc63200167f1cf4567dc276749557a772d0

memory/5124-5384-0x00007FFC84420000-0x00007FFC84924000-memory.dmp

memory/5124-5400-0x00007FFC84420000-0x00007FFC84924000-memory.dmp

memory/5124-5401-0x00000197AD0F0000-0x00000197AD100000-memory.dmp

memory/5124-5402-0x00000197AD0F0000-0x00000197AD100000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 62d232238c4e56a1eaff3b570a94efa1
SHA1 0ed8d7698200558efb6500cdb8187519f8fd7806
SHA256 34b4500c589ebf07060b6fc34f6cbb9ed4f1993c7a5428c257219e67c488a29f
SHA512 b7d81456d9a3dbee28a188d1a3f77fc457e01f093cb7933a6d39520c71e326644c4d830f432b02715f551655b43e84e36b7dc226466beef29f12ee365e784011

memory/5124-5440-0x00000197AD0F0000-0x00000197AD100000-memory.dmp

memory/5124-5441-0x00000197AD0F0000-0x00000197AD100000-memory.dmp