Malware Analysis Report

2025-01-19 00:35

Sample ID 240505-zzswcsha96
Target Krnl.exe
SHA256 c24855d316a3f7e445035168a2f03dd09d8e69ae35cd4c3d1c27674288383896
Tags
microsoft discovery phishing
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

c24855d316a3f7e445035168a2f03dd09d8e69ae35cd4c3d1c27674288383896

Threat Level: Likely malicious

The file Krnl.exe was found to be: Likely malicious.

Malicious Activity Summary

microsoft discovery phishing

Downloads MZ/PE file

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Detected potential entity reuse from brand microsoft.

Unsigned PE

Enumerates physical storage devices

Suspicious use of WriteProcessMemory

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of FindShellTrayWindow

Suspicious behavior: EnumeratesProcesses

NTFS ADS

Enumerates system info in registry

Modifies registry class

Suspicious use of SendNotifyMessage

Suspicious use of AdjustPrivilegeToken

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-05 21:09

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-05 21:09

Reported

2024-05-05 21:23

Platform

win10v2004-20240426-en

Max time kernel

799s

Max time network

794s

Command Line

"C:\Users\Admin\AppData\Local\Temp\Krnl.exe"

Signatures

Downloads MZ/PE file

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\Krnl.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe N/A

Checks installed software on the system

discovery

Detected potential entity reuse from brand microsoft.

phishing microsoft

Enumerates physical storage devices

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1162180587-977231257-2194346871-1000\{283A51FF-3864-403D-80A9-5AA5A2AE067C} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 392569.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\Krnl.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\Krnl.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2708 wrote to memory of 2200 N/A C:\Users\Admin\AppData\Local\Temp\Krnl.exe C:\Windows\SysWOW64\explorer.exe
PID 2708 wrote to memory of 2200 N/A C:\Users\Admin\AppData\Local\Temp\Krnl.exe C:\Windows\SysWOW64\explorer.exe
PID 2708 wrote to memory of 2200 N/A C:\Users\Admin\AppData\Local\Temp\Krnl.exe C:\Windows\SysWOW64\explorer.exe
PID 1108 wrote to memory of 1132 N/A C:\Windows\explorer.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1108 wrote to memory of 1132 N/A C:\Windows\explorer.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 3628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4804 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4804 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4400 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4400 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4400 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4400 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4400 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4400 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4400 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4400 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4400 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4400 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4400 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4400 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4400 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4400 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1132 wrote to memory of 4400 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Users\Admin\AppData\Local\Temp\Krnl.exe

"C:\Users\Admin\AppData\Local\Temp\Krnl.exe"

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe" https://apps.microsoft.com/store/detail/roblox/9NBLGGGZM6WM

C:\Windows\explorer.exe

C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://apps.microsoft.com/store/detail/roblox/9NBLGGGZM6WM

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ffadc6746f8,0x7ffadc674708,0x7ffadc674718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2880 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5040 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5040 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3456 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4160 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6064 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x4e8 0x50c

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5860 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5168 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4164 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3560 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6280 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6332 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6576 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6056 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6536 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=6448 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6804 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3388 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6660 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7148 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7784 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8088 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8244 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6260 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6568 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3452 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7292 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6944 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7776 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7088 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8528 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7896 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8056 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8640 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7672 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9644 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9076 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9672 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9256 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=10188 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=10628 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=10528 /prefetch:8

C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe

"C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10908 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.facebook.com/ldplayer

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffadc6746f8,0x7ffadc674708,0x7ffadc674718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11056 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11308 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11236 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3056 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8908 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9328 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7636 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4620 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8460 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7120 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7668 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1340 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11844 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11780 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,14050595486661841830,5048101772117965250,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7592 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 79.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 58.55.71.13.in-addr.arpa udp
US 8.8.8.8:53 apps.microsoft.com udp
US 13.107.246.64:443 apps.microsoft.com tcp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 71.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
BE 2.21.17.194:443 www.microsoft.com tcp
US 8.8.8.8:53 xbox.com udp
NL 20.76.201.171:443 xbox.com tcp
US 8.8.8.8:53 194.17.21.2.in-addr.arpa udp
US 8.8.8.8:53 www.xbox.com udp
BE 23.55.96.62:80 www.xbox.com tcp
BE 23.55.96.62:80 www.xbox.com tcp
US 8.8.8.8:53 171.201.76.20.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 62.96.55.23.in-addr.arpa udp
BE 23.55.96.62:443 www.xbox.com tcp
US 8.8.8.8:53 assets-www.xbox.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
BE 23.55.96.62:443 assets-www.xbox.com tcp
BE 23.55.96.62:443 assets-www.xbox.com tcp
BE 23.55.96.62:443 assets-www.xbox.com tcp
BE 23.55.96.62:443 assets-www.xbox.com tcp
BE 23.55.96.62:443 assets-www.xbox.com tcp
BE 23.55.96.62:443 assets-www.xbox.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 14.24.17.104.in-addr.arpa udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 assets.adobedtm.com udp
US 8.8.8.8:53 mem.gfx.ms udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 49.43.201.23.in-addr.arpa udp
US 8.8.8.8:53 166.17.21.2.in-addr.arpa udp
US 23.53.113.19:443 assets.adobedtm.com tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 13.107.246.64:443 mem.gfx.ms tcp
IE 20.190.159.4:443 login.microsoftonline.com tcp
IE 20.190.159.4:443 login.microsoftonline.com tcp
US 8.8.8.8:53 19.113.53.23.in-addr.arpa udp
US 8.8.8.8:53 4.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 52.182.143.211:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 emerald.xboxservices.com udp
US 8.8.8.8:53 138.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 211.143.182.52.in-addr.arpa udp
US 13.107.246.64:443 emerald.xboxservices.com tcp
US 8.8.8.8:53 js.monitor.azure.com udp
US 13.107.246.64:443 js.monitor.azure.com tcp
US 52.182.143.211:443 browser.events.data.microsoft.com tcp
US 13.107.246.64:443 js.monitor.azure.com tcp
US 52.182.143.211:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 logincdn.msftauth.net udp
US 8.8.8.8:53 acctcdn.msftauth.net udp
US 8.8.8.8:53 acctcdn.msauth.net udp
US 13.107.246.64:443 acctcdn.msauth.net tcp
US 13.107.246.64:443 acctcdn.msauth.net tcp
US 13.107.246.64:443 acctcdn.msauth.net tcp
US 192.229.221.185:443 logincdn.msftauth.net tcp
US 13.107.246.64:443 acctcdn.msauth.net tcp
US 8.8.8.8:53 acctcdnmsftuswe2.azureedge.net udp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
US 8.8.8.8:53 lgincdnmsftuswe2.azureedge.net udp
US 8.8.8.8:53 acctcdnvzeuno.azureedge.net udp
US 52.182.143.211:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 lgincdnvzeuno.azureedge.net udp
US 8.8.8.8:53 185.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 175.21.199.152.in-addr.arpa udp
US 8.8.8.8:53 86.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 dc.services.visualstudio.com udp
NL 20.50.88.244:443 dc.services.visualstudio.com tcp
US 8.8.8.8:53 244.88.50.20.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 57.169.31.20.in-addr.arpa udp
US 8.8.8.8:53 www.xbox.com udp
US 8.8.8.8:53 www.microsoft.com udp
IE 20.190.159.4:443 login.microsoftonline.com tcp
US 192.229.221.185:443 lgincdnvzeuno.azureedge.net tcp
NL 23.62.61.194:443 www.bing.com tcp
NL 23.62.61.194:443 www.bing.com tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
NL 23.62.61.129:443 th.bing.com tcp
NL 23.62.61.129:443 th.bing.com tcp
NL 23.62.61.97:443 th.bing.com tcp
NL 23.62.61.97:443 th.bing.com tcp
US 8.8.8.8:53 bing.com udp
US 13.107.21.200:443 bing.com tcp
US 8.8.8.8:53 194.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 97.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 129.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 roblox.en.softonic.com udp
US 151.101.1.91:443 roblox.en.softonic.com tcp
US 151.101.1.91:443 roblox.en.softonic.com tcp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 sc.sftcdn.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 bat.bing.com udp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 8.8.8.8:53 c.amazon-adsystem.com udp
BE 104.68.82.93:443 images.sftcdn.net tcp
BE 104.68.82.93:443 images.sftcdn.net tcp
BE 104.68.82.93:443 images.sftcdn.net tcp
BE 104.68.82.93:443 images.sftcdn.net tcp
US 199.232.213.91:443 softonic.com tcp
US 199.232.213.91:443 softonic.com tcp
GB 216.58.213.2:443 securepubads.g.doubleclick.net tcp
US 204.79.197.237:443 bat.bing.com tcp
GB 18.165.160.52:443 sdk.privacy-center.org tcp
GB 216.58.213.2:443 securepubads.g.doubleclick.net tcp
BE 104.68.82.93:443 images.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net udp
GB 3.162.21.19:443 c.amazon-adsystem.com tcp
US 151.101.1.91:443 sc.sftcdn.net udp
US 8.8.8.8:53 91.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 91.213.232.199.in-addr.arpa udp
US 8.8.8.8:53 93.82.68.104.in-addr.arpa udp
US 8.8.8.8:53 2.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 52.160.165.18.in-addr.arpa udp
US 8.8.8.8:53 91.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 72.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 www.datadoghq-browser-agent.com udp
GB 3.162.21.19:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 btloader.com udp
HR 65.9.27.165:443 www.datadoghq-browser-agent.com tcp
US 104.22.75.216:443 btloader.com tcp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 storage.googleapis.com udp
GB 216.58.201.123:443 storage.googleapis.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
HR 65.9.25.15:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 130.211.23.194:443 api.btloader.com tcp
US 172.67.38.106:443 cdn.id5-sync.com tcp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 apps.identrust.com udp
US 2.18.190.80:80 apps.identrust.com tcp
US 8.8.8.8:53 19.21.162.3.in-addr.arpa udp
US 8.8.8.8:53 216.75.22.104.in-addr.arpa udp
US 8.8.8.8:53 165.27.9.65.in-addr.arpa udp
US 8.8.8.8:53 123.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 15.25.9.65.in-addr.arpa udp
US 8.8.8.8:53 106.38.67.172.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 70.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
US 13.107.5.80:443 services.bingapis.com tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 8.8.8.8:53 wct.softonic.com udp
US 172.67.38.106:443 cdn.id5-sync.com tcp
US 172.67.74.173:443 wct.softonic.com tcp
US 8.8.8.8:53 2d858e183fa74966719be189d8119dae.safeframe.googlesyndication.com udp
US 8.8.8.8:53 api.privacy-center.org udp
US 8.8.8.8:53 shb.richaudience.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 brightcombid.marphezis.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 static.criteo.net udp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
US 34.120.63.153:443 prebid.media.net tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
DE 162.19.138.83:443 id5-sync.com tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
US 104.18.36.155:443 htlb.casalemedia.com tcp
IE 18.203.164.106:443 ap.lijit.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
IE 52.31.157.80:443 ad.360yield.com tcp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 70.3.26.104.in-addr.arpa udp
US 8.8.8.8:53 80.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 173.74.67.172.in-addr.arpa udp
GB 142.250.178.4:443 www.google.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
GB 18.172.93.140:443 aax.amazon-adsystem.com tcp
GB 13.224.81.114:443 api.privacy-center.org tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
DE 162.19.138.83:443 id5-sync.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
IE 18.203.164.106:443 ap.lijit.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
IE 52.31.157.80:443 ad.360yield.com tcp
US 34.120.63.153:443 prebid.media.net tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
US 104.18.36.155:443 htlb.casalemedia.com tcp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
GB 142.250.178.4:443 www.google.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 216.239.34.36:443 region1.analytics.google.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 www.google.co.uk udp
BE 64.233.167.154:443 stats.g.doubleclick.net tcp
GB 216.58.204.67:443 www.google.co.uk tcp
US 8.8.8.8:53 ampcid.google.com udp
BE 64.233.167.154:443 stats.g.doubleclick.net tcp
IE 18.203.164.106:443 ap.lijit.com tcp
IE 52.31.157.80:443 ad.360yield.com tcp
US 34.120.63.153:443 prebid.media.net tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
US 104.18.36.155:443 htlb.casalemedia.com tcp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
US 8.8.8.8:53 s.richaudience.com udp
US 8.8.8.8:53 qsearch-a.akamaihd.net udp
GB 142.250.178.4:443 www.google.com tcp
GB 216.58.204.67:443 www.google.co.uk udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 ag.gbc.criteo.com udp
GB 142.250.178.4:443 www.google.com tcp
DE 178.63.241.79:443 s.richaudience.com tcp
NL 178.250.1.11:443 dnacdn.net tcp
US 2.18.190.79:443 qsearch-a.akamaihd.net tcp
FR 185.235.86.155:443 gem.gbc.criteo.com tcp
NL 185.235.87.117:443 ag.gbc.criteo.com tcp
US 2.18.190.80:80 apps.identrust.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 140.93.172.18.in-addr.arpa udp
US 8.8.8.8:53 114.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 14.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 67.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 154.167.233.64.in-addr.arpa udp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 106.164.203.18.in-addr.arpa udp
US 8.8.8.8:53 80.157.31.52.in-addr.arpa udp
US 8.8.8.8:53 155.36.18.104.in-addr.arpa udp
US 8.8.8.8:53 4.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 79.241.63.178.in-addr.arpa udp
US 8.8.8.8:53 117.87.235.185.in-addr.arpa udp
US 8.8.8.8:53 212.210.89.185.in-addr.arpa udp
IE 67.220.224.150:443 aax-eu.amazon-adsystem.com tcp
GB 142.250.187.193:443 2d858e183fa74966719be189d8119dae.safeframe.googlesyndication.com tcp
NL 178.250.1.11:443 dnacdn.net tcp
FR 185.235.86.155:443 gem.gbc.criteo.com tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 151.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 83.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 150.224.220.67.in-addr.arpa udp
US 8.8.8.8:53 193.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 204.135.128.178.in-addr.arpa udp
US 8.8.8.8:53 155.86.235.185.in-addr.arpa udp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 117.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 33.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 3.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 89.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 23.53.112.234:443 ads.pubmatic.com tcp
US 104.18.38.76:443 js-sec.indexww.com tcp
DE 162.55.236.224:443 sync.richaudience.com tcp
US 151.101.1.108:443 acdn.adnxs.com tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 227.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 234.112.53.23.in-addr.arpa udp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
DE 162.55.236.224:443 sync.richaudience.com tcp
US 151.101.1.108:443 acdn.adnxs.com tcp
US 8.8.8.8:53 cacerts.rapidssl.com udp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 onetag-sys.com udp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
US 67.202.105.21:443 ssc-cms.33across.com tcp
DE 51.75.86.98:443 onetag-sys.com tcp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 dis.criteo.com udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 csync.loopme.me udp
FR 91.134.110.133:443 ssbsync.smartadserver.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 52.223.40.198:443 match.adsrvr.org tcp
NL 35.214.179.39:443 csync.loopme.me tcp
IE 34.242.102.151:443 match.prod.bidr.io tcp
GB 185.64.190.79:443 image8.pubmatic.com tcp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
HR 65.9.25.91:443 api-2-0.spot.im tcp
DE 51.75.86.98:443 onetag-sys.com tcp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 54.172.53.250:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 jadserve.postrelease.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 3.230.236.227:443 cs-server-s2s.yellowblue.io tcp
IE 54.170.186.220:443 jadserve.postrelease.com tcp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 sync.mathtag.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 t.adx.opera.com udp
DE 51.75.86.98:443 onetag-sys.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 spl.zeotap.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 sync-tm.everesttech.net udp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 cdn.indexww.com udp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 80.77.87.163:443 cs.admanmedia.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
US 172.67.40.173:443 spl.zeotap.com tcp
US 151.101.2.49:443 sync-tm.everesttech.net tcp
FR 154.54.250.151:443 ads.stickyadstv.com tcp
US 8.8.8.8:53 76.38.18.104.in-addr.arpa udp
DE 3.67.74.124:443 match.sharethrough.com tcp
US 8.8.8.8:53 108.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 152.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 21.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 224.236.55.162.in-addr.arpa udp
US 8.8.8.8:53 133.110.134.91.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 198.40.223.52.in-addr.arpa udp
US 8.8.8.8:53 39.179.214.35.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 79.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 151.102.242.34.in-addr.arpa udp
US 8.8.8.8:53 98.86.75.51.in-addr.arpa udp
US 8.8.8.8:53 91.25.9.65.in-addr.arpa udp
US 8.8.8.8:53 250.53.172.54.in-addr.arpa udp
US 8.8.8.8:53 220.186.170.54.in-addr.arpa udp
NL 89.149.192.200:443 rtb-csync.smartadserver.com tcp
NL 81.17.55.170:443 ssbsync-global.smartadserver.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 216.200.232.249:443 sync.mathtag.com tcp
US 8.8.8.8:53 id.rlcdn.com udp
DE 18.158.134.185:443 rtb.mfadsrvr.com tcp
US 3.230.236.227:443 cs-server-s2s.yellowblue.io tcp
US 35.244.174.68:443 id.rlcdn.com tcp
DE 18.158.134.185:443 rtb.mfadsrvr.com tcp
US 80.77.87.163:443 cs.admanmedia.com tcp
NL 89.149.192.200:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 bttrack.com udp
US 192.132.33.67:443 bttrack.com tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 52.46.128.147:443 s.amazon-adsystem.com tcp
NL 89.149.192.200:443 rtb-csync.smartadserver.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
US 172.67.74.173:443 wct.softonic.com tcp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 49.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 173.40.67.172.in-addr.arpa udp
US 8.8.8.8:53 151.250.54.154.in-addr.arpa udp
US 8.8.8.8:53 200.192.149.89.in-addr.arpa udp
US 8.8.8.8:53 124.74.67.3.in-addr.arpa udp
US 8.8.8.8:53 170.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 249.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 185.134.158.18.in-addr.arpa udp
US 8.8.8.8:53 67.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 147.128.46.52.in-addr.arpa udp
US 8.8.8.8:53 leap.ldplayer.gg udp
US 163.181.154.243:443 leap.ldplayer.gg tcp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
US 8.8.8.8:53 connect.facebook.net udp
GB 163.70.151.21:443 connect.facebook.net tcp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 8.8.8.8:53 227.236.230.3.in-addr.arpa udp
US 8.8.8.8:53 243.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 21.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 6d9d9a0384df29fbe50b3ed67585116b.safeframe.googlesyndication.com udp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 cdn.playwire.com udp
HR 65.9.25.109:443 cdn.playwire.com tcp
US 8.8.8.8:53 js.adscale.de udp
GB 18.172.89.53:443 js.adscale.de tcp
US 8.8.8.8:53 109.25.9.65.in-addr.arpa udp
US 8.8.8.8:53 ih.adscale.de udp
DE 54.93.183.143:443 ih.adscale.de tcp
US 8.8.8.8:53 cdn.intergient.com udp
GB 18.165.160.81:443 cdn.intergient.com tcp
US 8.8.8.8:53 53.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 143.183.93.54.in-addr.arpa udp
US 8.8.8.8:53 81.160.165.18.in-addr.arpa udp
US 8.8.8.8:53 14.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 prs.sftcdn.net udp
US 8.8.8.8:53 cdn.ampproject.org udp
GB 172.217.16.225:443 cdn.ampproject.org tcp
GB 172.217.16.225:443 cdn.ampproject.org tcp
US 8.8.8.8:53 www.ldplayer.net udp
US 163.181.154.248:443 www.ldplayer.net tcp
US 8.8.8.8:53 articles-img.sftcdn.net udp
NL 23.62.61.178:443 articles-img.sftcdn.net tcp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 248.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 178.61.62.23.in-addr.arpa udp
GB 172.217.16.225:443 cdn.ampproject.org udp
US 8.8.8.8:53 cdn.ldplayer.net udp
US 8.8.8.8:53 play-lh.googleusercontent.com udp
US 8.8.8.8:53 cmp.setupcmp.com udp
US 8.8.8.8:53 www.facebook.com udp
GB 157.240.221.35:443 www.facebook.com tcp
GB 157.240.221.35:443 www.facebook.com tcp
GB 157.240.221.35:443 www.facebook.com tcp
US 8.8.8.8:53 px.moatads.com udp
US 23.53.113.212:443 px.moatads.com tcp
US 8.8.8.8:53 contextual.media.net udp
GB 142.250.200.54:443 play-lh.googleusercontent.com tcp
BE 2.21.16.25:443 contextual.media.net tcp
HR 65.9.25.127:443 cdn.ldplayer.net tcp
US 8.8.8.8:53 35.221.240.157.in-addr.arpa udp
US 8.8.8.8:53 212.113.53.23.in-addr.arpa udp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 54.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 25.16.21.2.in-addr.arpa udp
US 8.8.8.8:53 push-sdk.com udp
US 8.8.8.8:53 config.playwire.com udp
HR 65.9.25.78:443 config.playwire.com tcp
HR 65.9.25.127:443 cdn.ldplayer.net tcp
DE 178.63.248.56:443 push-sdk.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 34.242.102.151:443 match.prod.bidr.io tcp
US 8.8.8.8:53 cdn.video.playwire.com udp
US 8.8.8.8:53 uidsync.net udp
DE 157.90.33.122:443 uidsync.net tcp
US 8.8.8.8:53 163.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 56.248.63.178.in-addr.arpa udp
US 8.8.8.8:53 78.25.9.65.in-addr.arpa udp
US 8.8.8.8:53 127.25.9.65.in-addr.arpa udp
US 8.8.8.8:53 122.33.90.157.in-addr.arpa udp
US 80.77.87.163:443 cs.admanmedia.com tcp
DE 157.90.33.122:443 uidsync.net tcp
US 104.26.4.6:443 cmp.setupcmp.com tcp
US 104.26.4.6:443 cmp.setupcmp.com tcp
HR 65.9.25.122:443 cdn.video.playwire.com tcp
US 104.26.4.6:443 cmp.setupcmp.com tcp
US 8.8.8.8:53 122.25.9.65.in-addr.arpa udp
US 8.8.8.8:53 6.4.26.104.in-addr.arpa udp
NL 35.214.179.39:443 csync.loopme.me tcp
GB 142.250.200.54:443 play-lh.googleusercontent.com udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 172.217.16.238:443 fundingchoicesmessages.google.com tcp
GB 172.217.16.238:443 fundingchoicesmessages.google.com tcp
US 8.8.8.8:53 stpd.cloud udp
US 104.26.4.6:443 cmp.setupcmp.com tcp
US 104.18.31.49:443 stpd.cloud tcp
US 54.172.53.250:443 sync.srv.stackadapt.com tcp
GB 172.217.16.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 238.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 49.31.18.104.in-addr.arpa udp
US 8.8.8.8:53 apis.google.com udp
GB 216.58.201.110:443 apis.google.com tcp
US 8.8.8.8:53 apien.ldplayer.net udp
US 8.8.8.8:53 invite.ldplayer.net udp
US 8.8.8.8:53 usersdk.ldmnq.com udp
US 8.8.8.8:53 api.ldshop.gg udp
GB 216.58.201.110:443 apis.google.com udp
HR 65.9.25.21:443 apien.ldplayer.net tcp
SG 8.219.96.60:443 invite.ldplayer.net tcp
SG 8.222.160.10:443 api.ldshop.gg tcp
SG 47.236.4.49:443 usersdk.ldmnq.com tcp
US 8.8.8.8:53 www.googletagservices.com udp
GB 172.217.169.66:443 www.googletagservices.com tcp
SG 8.219.96.60:443 invite.ldplayer.net tcp
SG 47.236.4.49:443 usersdk.ldmnq.com tcp
SG 8.222.160.10:443 api.ldshop.gg tcp
US 8.8.8.8:53 110.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 21.25.9.65.in-addr.arpa udp
US 8.8.8.8:53 66.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 60.96.219.8.in-addr.arpa udp
US 8.8.8.8:53 10.160.222.8.in-addr.arpa udp
US 8.8.8.8:53 49.4.236.47.in-addr.arpa udp
US 35.244.174.68:443 id.rlcdn.com udp
US 8.8.8.8:53 tagan.adlightning.com udp
US 151.101.1.229:443 cdn.jsdelivr.net udp
US 8.8.8.8:53 accounts.google.com udp
HR 65.9.25.2:443 tagan.adlightning.com tcp
IE 209.85.203.84:443 accounts.google.com tcp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 cdn.hadronid.net udp
DE 184.30.211.26:443 secure.cdn.fastclick.net tcp
DE 184.30.211.26:443 secure.cdn.fastclick.net tcp
US 104.22.52.173:443 cdn.hadronid.net tcp
GB 13.224.81.56:443 tags.crwdcntrl.net tcp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 8.8.8.8:53 2.25.9.65.in-addr.arpa udp
US 8.8.8.8:53 84.203.85.209.in-addr.arpa udp
US 8.8.8.8:53 56.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 173.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 26.211.30.184.in-addr.arpa udp
US 8.8.8.8:53 proc.ad.cpe.dotomi.com udp
US 104.22.4.69:443 id.hadron.ad.gt tcp
US 8.8.8.8:53 imasdk.googleapis.com udp
NL 64.158.223.146:443 proc.ad.cpe.dotomi.com tcp
GB 142.250.187.202:443 imasdk.googleapis.com tcp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
IE 54.77.42.245:443 bcp.crwdcntrl.net tcp
GB 142.250.187.202:443 imasdk.googleapis.com udp
US 8.8.8.8:53 s0.2mdn.net udp
GB 142.250.179.230:443 s0.2mdn.net tcp
GB 142.250.179.230:443 s0.2mdn.net tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 prebid-stag.setupad.net udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 prebid-eu.creativecdn.com udp
US 8.8.8.8:53 bidder.criteo.com udp
US 8.8.8.8:53 adx.adform.net udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 rtb.adxpremium.services udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 146.223.158.64.in-addr.arpa udp
US 8.8.8.8:53 245.42.77.54.in-addr.arpa udp
US 8.8.8.8:53 230.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 a.ad.gt udp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 35.227.252.103:443 rtb.openx.net tcp
NL 185.106.140.18:443 rtb.adxpremium.services tcp
NL 147.75.84.158:443 prebid.a-mo.net tcp
FR 185.86.139.116:443 prg.smartadserver.com tcp
US 104.26.9.169:443 script.4dex.io tcp
DK 37.157.5.133:443 adx.adform.net tcp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
US 172.67.68.162:443 prebid-stag.setupad.net tcp
US 172.67.68.162:443 prebid-stag.setupad.net tcp
US 104.22.4.69:443 a.ad.gt tcp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
DK 37.157.5.133:443 adx.adform.net tcp
US 35.227.252.103:443 rtb.openx.net tcp
IE 209.85.203.84:443 accounts.google.com udp
NL 81.17.55.170:443 ssbsync-global.smartadserver.com tcp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 cadmus.script.ac udp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 8.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 158.84.75.147.in-addr.arpa udp
US 8.8.8.8:53 18.140.106.185.in-addr.arpa udp
US 8.8.8.8:53 116.139.86.185.in-addr.arpa udp
US 8.8.8.8:53 169.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 162.68.67.172.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 103.252.227.35.in-addr.arpa udp
US 8.8.8.8:53 133.5.157.37.in-addr.arpa udp
US 80.77.87.163:443 cs.admanmedia.com tcp
US 8.8.8.8:53 u.openx.net udp
US 35.244.159.8:443 u.openx.net tcp
US 35.244.159.8:443 u.openx.net tcp
US 104.18.22.145:443 cadmus.script.ac tcp
US 8.8.8.8:53 8.159.244.35.in-addr.arpa udp
US 8.8.8.8:53 145.22.18.104.in-addr.arpa udp
US 8.8.8.8:53 notix.io udp
NL 139.45.197.227:443 notix.io tcp
US 8.8.8.8:53 cm.adform.net udp
US 35.244.159.8:443 u.openx.net udp
DK 37.157.2.228:443 cm.adform.net tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 8.8.8.8:53 7d9b9823f81ba4614164e4da71ba9de5.safeframe.googlesyndication.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 g.bing.com udp
US 8.8.8.8:53 227.197.45.139.in-addr.arpa udp
US 8.8.8.8:53 228.2.157.37.in-addr.arpa udp
US 204.79.197.237:443 g.bing.com tcp
US 172.64.153.78:443 mp.4dex.io tcp
GB 142.250.178.4:443 www.google.com tcp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 8.8.8.8:53 node.setupad.com udp
DE 159.89.25.223:443 node.setupad.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 78.153.64.172.in-addr.arpa udp
US 8.8.8.8:53 223.25.89.159.in-addr.arpa udp
US 8.8.8.8:53 csi.gstatic.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
TW 142.251.42.227:443 csi.gstatic.com tcp
TW 142.251.42.227:443 csi.gstatic.com tcp
TW 142.251.42.227:443 csi.gstatic.com tcp
NL 185.235.87.117:443 ag.gbc.criteo.com tcp
FR 185.235.86.155:443 gem.gbc.criteo.com tcp
US 80.77.87.163:443 cs.admanmedia.com tcp
TW 142.251.42.227:443 csi.gstatic.com tcp
US 8.8.8.8:53 ldcdn.ldmnq.com udp
US 8.8.8.8:53 sync.a-mo.net udp
US 8.8.8.8:53 adxbid.info udp
US 8.8.8.8:53 setupad-d.openx.net udp
GB 142.250.187.206:443 redirector.gvt1.com tcp
US 172.67.138.13:443 adxbid.info tcp
NL 89.149.192.200:443 rtb-csync.smartadserver.com tcp
TW 142.251.42.227:443 csi.gstatic.com tcp
TW 142.251.42.227:443 csi.gstatic.com tcp
US 8.8.8.8:53 ad.turn.com udp
US 8.8.8.8:53 pxl.iqm.com udp
GB 18.165.160.78:443 ldcdn.ldmnq.com tcp
GB 142.250.187.206:443 redirector.gvt1.com tcp
US 54.88.142.103:443 pxl.iqm.com tcp
US 54.88.142.103:443 pxl.iqm.com tcp
NL 89.149.192.200:443 rtb-csync.smartadserver.com tcp
GB 18.165.160.78:443 ldcdn.ldmnq.com tcp
US 8.8.8.8:53 227.42.251.142.in-addr.arpa udp
US 8.8.8.8:53 13.138.67.172.in-addr.arpa udp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
NL 145.40.97.66:443 sync.a-mo.net tcp
HR 65.9.25.122:443 cdn.video.playwire.com tcp
HR 65.9.25.122:443 cdn.video.playwire.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
US 8.8.8.8:53 78.160.165.18.in-addr.arpa udp
US 8.8.8.8:53 66.97.40.145.in-addr.arpa udp
GB 74.125.168.137:443 r4---sn-aigl6nze.gvt1.com udp
US 8.8.8.8:53 assets.a-mo.net udp
US 104.19.158.19:443 assets.a-mo.net tcp
US 104.19.158.19:443 assets.a-mo.net tcp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 137.168.125.74.in-addr.arpa udp
US 8.8.8.8:53 19.158.19.104.in-addr.arpa udp
US 8.8.8.8:53 11.164.228.46.in-addr.arpa udp
TW 142.251.42.227:443 csi.gstatic.com udp
US 8.8.8.8:53 id.a-mx.com udp
DE 79.127.216.47:443 id.a-mx.com tcp
DE 79.127.216.47:443 id.a-mx.com tcp
US 8.8.8.8:53 c3.a-mo.net udp
DE 79.127.216.47:443 c3.a-mo.net tcp
US 8.8.8.8:53 47.216.127.79.in-addr.arpa udp
US 8.8.8.8:53 id.rtb.mx udp
DE 79.127.216.47:443 id.rtb.mx tcp
US 8.8.8.8:53 ow.pubmatic.com udp
GB 185.64.190.84:443 ow.pubmatic.com tcp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
DE 3.71.149.231:443 ups.analytics.yahoo.com tcp
US 8.8.8.8:53 103.142.88.54.in-addr.arpa udp
US 8.8.8.8:53 150.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 84.190.64.185.in-addr.arpa udp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
NL 23.62.61.106:443 www.bing.com tcp
US 8.8.8.8:53 231.149.71.3.in-addr.arpa udp
US 8.8.8.8:53 eb2.3lift.com udp
US 13.248.245.213:443 eb2.3lift.com tcp
US 8.8.8.8:53 106.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 213.245.248.13.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 as.ck-ie.com udp
US 8.2.110.113:443 as.ck-ie.com tcp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 vid.vidoomy.com udp
GB 89.187.167.9:443 vid.vidoomy.com tcp
GB 89.187.167.9:443 vid.vidoomy.com tcp
US 8.8.8.8:53 crt.sectigo.com udp
US 8.8.8.8:53 d3n1ms4uhtqgov.cloudfront.net udp
US 104.18.38.233:80 crt.sectigo.com tcp
HR 65.9.191.185:443 d3n1ms4uhtqgov.cloudfront.net tcp
US 8.8.8.8:53 113.110.2.8.in-addr.arpa udp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 9.167.187.89.in-addr.arpa udp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 8.8.8.8:53 user-sync.adxpremium.services udp
US 209.192.201.180:443 user-sync.adxpremium.services tcp
US 8.8.8.8:53 vpaid.vidoomy.com udp
GB 195.181.164.15:443 vpaid.vidoomy.com tcp
GB 157.240.221.35:443 www.facebook.com tcp
US 8.8.8.8:53 creativecdn.com udp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 180.201.192.209.in-addr.arpa udp
US 8.8.8.8:53 15.164.181.195.in-addr.arpa udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 static.xx.fbcdn.net udp
US 8.8.8.8:53 video.xx.fbcdn.net udp
GB 163.70.151.21:443 static.xx.fbcdn.net tcp
GB 163.70.151.21:443 static.xx.fbcdn.net tcp
GB 163.70.151.21:443 static.xx.fbcdn.net tcp
GB 163.70.151.21:443 static.xx.fbcdn.net tcp
GB 163.70.151.21:443 static.xx.fbcdn.net tcp
GB 163.70.151.21:443 static.xx.fbcdn.net tcp
GB 163.70.151.21:443 static.xx.fbcdn.net tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
NL 23.62.61.106:443 www.bing.com tcp
US 8.8.8.8:53 a.vidoomy.com udp
ES 212.36.83.246:443 a.vidoomy.com tcp
US 8.8.8.8:53 185.191.9.65.in-addr.arpa udp
US 8.8.8.8:53 246.83.36.212.in-addr.arpa udp
US 8.8.8.8:53 d1arl2thrafelv.cloudfront.net udp
GB 18.172.99.149:443 d1arl2thrafelv.cloudfront.net tcp
US 8.8.8.8:53 149.99.172.18.in-addr.arpa udp
GB 18.172.99.149:443 d1arl2thrafelv.cloudfront.net tcp
US 8.8.8.8:53 middledata.ldplayer.net udp
SG 8.219.48.146:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 146.48.219.8.in-addr.arpa udp
US 8.8.8.8:53 www.roblox.com udp
GB 128.116.119.4:443 www.roblox.com tcp
GB 128.116.119.4:443 www.roblox.com tcp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
HR 65.9.25.108:443 css.rbxcdn.com tcp
HR 65.9.25.108:443 css.rbxcdn.com tcp
HR 65.9.25.108:443 css.rbxcdn.com tcp
HR 65.9.25.108:443 css.rbxcdn.com tcp
HR 65.9.25.108:443 css.rbxcdn.com tcp
HR 65.9.25.108:443 css.rbxcdn.com tcp
HR 65.9.25.85:443 static.rbxcdn.com tcp
HR 65.9.25.4:443 js.rbxcdn.com tcp
HR 65.9.25.4:443 js.rbxcdn.com tcp
HR 65.9.25.4:443 js.rbxcdn.com tcp
HR 65.9.25.4:443 js.rbxcdn.com tcp
HR 65.9.25.4:443 js.rbxcdn.com tcp
HR 65.9.25.4:443 js.rbxcdn.com tcp
US 8.8.8.8:53 4.119.116.128.in-addr.arpa udp
US 8.8.8.8:53 roblox.com udp
GB 128.116.119.4:443 www.roblox.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 metrics.roblox.com udp
US 128.116.99.4:443 roblox.com tcp
US 104.18.33.170:443 roblox-api.arkoselabs.com tcp
US 8.8.8.8:53 apis.roblox.com udp
GB 128.116.119.4:443 apis.roblox.com tcp
US 8.8.8.8:53 ecsv2.roblox.com udp
GB 128.116.119.3:443 ecsv2.roblox.com tcp
GB 128.116.119.4:443 apis.roblox.com tcp
US 8.8.8.8:53 locale.roblox.com udp
GB 128.116.119.4:443 locale.roblox.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
HR 65.9.25.108:443 css.rbxcdn.com tcp
GB 128.116.119.4:443 locale.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 2.18.190.83:443 apis.rbxcdn.com tcp
US 8.8.8.8:53 images.rbxcdn.com udp
HR 65.9.25.13:443 images.rbxcdn.com tcp
HR 65.9.25.13:443 images.rbxcdn.com tcp
HR 65.9.25.13:443 images.rbxcdn.com tcp
HR 65.9.25.13:443 images.rbxcdn.com tcp
HR 65.9.25.13:443 images.rbxcdn.com tcp
HR 65.9.25.13:443 images.rbxcdn.com tcp
GB 128.116.119.4:443 auth.roblox.com udp
US 8.8.8.8:53 108.25.9.65.in-addr.arpa udp
US 8.8.8.8:53 85.25.9.65.in-addr.arpa udp
US 8.8.8.8:53 4.25.9.65.in-addr.arpa udp
US 8.8.8.8:53 170.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 4.99.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.119.116.128.in-addr.arpa udp
US 8.8.8.8:53 83.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 13.25.9.65.in-addr.arpa udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
US 8.8.8.8:53 175.117.168.52.in-addr.arpa udp
NL 185.89.210.212:443 secure.adnxs.com tcp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 brightcombid.marphezis.com udp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
IE 34.247.154.112:443 ad.360yield.com tcp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
IE 34.247.154.112:443 ad.360yield.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
IE 34.247.154.112:443 ad.360yield.com tcp
NL 185.89.210.212:443 secure.adnxs.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 8.8.8.8:53 150.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 112.154.247.34.in-addr.arpa udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 en.softonic.com udp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 brightcombid.marphezis.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 shb.richaudience.com udp
IE 52.31.171.23:443 ap.lijit.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
US 34.120.63.153:443 prebid.media.net udp
IE 34.247.154.112:443 ad.360yield.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
HR 65.9.20.237:443 aax.amazon-adsystem.com tcp
DE 46.4.139.58:443 shb.richaudience.com tcp
US 8.8.8.8:53 23.171.31.52.in-addr.arpa udp
US 8.8.8.8:53 237.20.9.65.in-addr.arpa udp
US 8.8.8.8:53 58.139.4.46.in-addr.arpa udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 6d9d9a0384df29fbe50b3ed67585116b.safeframe.googlesyndication.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 151.101.1.229:443 cdn.jsdelivr.net udp
US 8.8.8.8:53 rosetta.richmediastudio.com udp
GB 195.181.164.18:443 rosetta.richmediastudio.com tcp
US 8.8.8.8:53 226.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 s4.richmediastudio.com udp
US 8.8.8.8:53 st.pubmatic.com udp
US 8.8.8.8:53 ade.googlesyndication.com udp
DE 195.201.240.22:443 s4.richmediastudio.com tcp
GB 185.64.190.89:443 st.pubmatic.com tcp
GB 142.250.187.194:443 ade.googlesyndication.com tcp
US 8.8.8.8:53 s.richmediastudio.com udp
DE 168.119.149.172:443 s.richmediastudio.com tcp
US 8.8.8.8:53 t.richaudience.com udp
FI 65.108.229.137:443 t.richaudience.com tcp
US 8.8.8.8:53 t4.richmediastudio.com udp
US 8.8.8.8:53 s1.richmediastudio.com udp
FI 65.108.229.137:443 t4.richmediastudio.com tcp
US 8.8.8.8:53 18.164.181.195.in-addr.arpa udp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 89.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 172.149.119.168.in-addr.arpa udp
US 8.8.8.8:53 137.229.108.65.in-addr.arpa udp
US 8.8.8.8:53 22.240.201.195.in-addr.arpa udp
US 8.8.8.8:53 secure.insightexpressai.com udp
US 23.53.113.23:443 secure.insightexpressai.com tcp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
GB 142.250.200.34:443 googleads4.g.doubleclick.net tcp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
DE 168.119.149.172:443 s.richmediastudio.com tcp
US 8.8.8.8:53 srms.richmediastudio.com udp
FI 65.108.228.94:443 srms.richmediastudio.com tcp
US 8.8.8.8:53 t2.richaudience.com udp
FI 65.108.228.94:443 t2.richaudience.com tcp
US 8.8.8.8:53 23.113.53.23.in-addr.arpa udp
US 8.8.8.8:53 94.228.108.65.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
GB 142.250.187.194:443 ade.googlesyndication.com udp
DE 168.119.149.172:443 s.richmediastudio.com tcp
DE 168.119.149.172:443 s.richmediastudio.com tcp
GB 142.250.187.194:443 ade.googlesyndication.com udp
DE 168.119.149.172:443 s.richmediastudio.com tcp
FI 65.108.229.137:443 t4.richmediastudio.com tcp
US 8.8.8.8:53 en.softonic.com udp
US 151.101.1.91:443 en.softonic.com udp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 204.79.197.237:443 bat.bing.com tcp
GB 216.58.204.67:443 www.google.co.uk udp
US 216.239.34.36:443 region1.analytics.google.com udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 sc.sftcdn.net udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
BE 104.68.82.93:443 images.sftcdn.net tcp
HR 65.9.25.70:443 sdk.privacy-center.org tcp
HR 65.9.188.49:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 b-code.liadm.com udp
US 104.22.75.216:443 btloader.com tcp
HR 65.9.25.3:443 b-code.liadm.com tcp
US 8.8.8.8:53 70.25.9.65.in-addr.arpa udp
US 8.8.8.8:53 49.188.9.65.in-addr.arpa udp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 35bc520128ff867b4f21cdc97fb9f88b.safeframe.googlesyndication.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 prebid.media.net udp
NL 185.89.210.82:443 ib.adnxs.com tcp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
US 8.8.8.8:53 stats.g.doubleclick.net udp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
IE 18.203.166.127:443 ap.lijit.com tcp
US 34.120.63.153:443 prebid.media.net udp
GB 142.250.187.193:443 35bc520128ff867b4f21cdc97fb9f88b.safeframe.googlesyndication.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
IE 34.247.154.112:443 ad.360yield.com tcp
BE 64.233.167.157:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 www.google.com udp
US 130.211.23.194:443 api.btloader.com udp
US 104.26.2.70:443 ad-delivery.net tcp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 67.220.226.238:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 notix.io udp
NL 139.45.197.253:443 notix.io tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 142.250.178.4:443 www.google.com udp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 3.25.9.65.in-addr.arpa udp
US 8.8.8.8:53 157.167.233.64.in-addr.arpa udp
US 8.8.8.8:53 127.166.203.18.in-addr.arpa udp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 238.226.220.67.in-addr.arpa udp
US 8.8.8.8:53 253.197.45.139.in-addr.arpa udp
US 8.8.8.8:53 s.richaudience.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 178.63.241.79:443 s.richaudience.com tcp
DE 162.19.138.118:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
US 151.101.1.91:443 sc.sftcdn.net udp
US 8.8.8.8:53 articles-img.sftcdn.net udp
NL 23.62.61.178:443 articles-img.sftcdn.net tcp
US 8.8.8.8:53 119.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 118.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 push-sdk.com udp
DE 157.90.33.121:443 push-sdk.com tcp
US 8.8.8.8:53 uidsync.net udp
DE 157.90.33.121:443 uidsync.net tcp
DE 157.90.33.121:443 uidsync.net tcp
US 8.8.8.8:53 121.33.90.157.in-addr.arpa udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 ce.lijit.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 sync.richaudience.com udp
IE 18.203.106.185:443 ce.lijit.com tcp
DE 138.201.8.249:443 sync.richaudience.com tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 ssc-cms.33across.com udp
DE 51.75.86.98:443 onetag-sys.com tcp
US 67.202.105.24:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
NL 89.149.192.76:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 8.8.8.8:53 c1.adform.net udp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 8.8.8.8:53 sync.1rx.io udp
DK 37.157.2.228:443 c1.adform.net tcp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
NL 46.228.174.117:443 sync.1rx.io tcp
DE 35.156.181.136:443 rtb.mfadsrvr.com tcp
US 8.8.8.8:53 pixel.rubiconproject.com udp
FR 5.135.209.104:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 x.bidswitch.net udp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 image8.pubmatic.com udp
DE 18.184.177.15:443 match.sharethrough.com tcp
US 8.8.8.8:53 spl.zeotap.com udp
GB 185.64.190.79:443 image8.pubmatic.com tcp
US 104.22.51.98:443 spl.zeotap.com tcp
HR 65.9.25.39:443 api-2-0.spot.im tcp
US 8.8.8.8:53 match.prod.bidr.io udp
IE 52.209.243.124:443 match.prod.bidr.io tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 185.106.203.18.in-addr.arpa udp
US 8.8.8.8:53 249.8.201.138.in-addr.arpa udp
US 8.8.8.8:53 76.192.149.89.in-addr.arpa udp
US 8.8.8.8:53 24.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 136.181.156.35.in-addr.arpa udp
US 8.8.8.8:53 98.51.22.104.in-addr.arpa udp
US 8.8.8.8:53 39.25.9.65.in-addr.arpa udp
US 8.8.8.8:53 104.209.135.5.in-addr.arpa udp
US 8.8.8.8:53 124.243.209.52.in-addr.arpa udp
DE 51.75.86.98:443 onetag-sys.com udp
US 52.223.40.198:443 match.adsrvr.org tcp
NL 35.214.179.39:443 csync.loopme.me tcp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 54.209.2.183:443 sync.srv.stackadapt.com tcp
US 54.175.79.127:443 cs-server-s2s.yellowblue.io tcp
IE 54.170.186.220:443 jadserve.postrelease.com tcp
US 8.8.8.8:53 183.2.209.54.in-addr.arpa udp
US 8.8.8.8:53 127.79.175.54.in-addr.arpa udp
US 8.8.8.8:53 id.rlcdn.com udp
US 35.244.174.68:443 id.rlcdn.com udp
US 8.8.8.8:53 bttrack.com udp
US 192.132.33.67:443 bttrack.com tcp
US 8.8.8.8:53 shb.richaudience.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 ib.adnxs.com udp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
IE 52.31.157.80:443 ad.360yield.com tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
DE 46.4.139.58:443 shb.richaudience.com tcp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
GB 216.58.213.2:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 rosetta.richmediastudio.com udp
GB 89.187.167.3:443 rosetta.richmediastudio.com tcp
US 8.8.8.8:53 s4.richmediastudio.com udp
US 8.8.8.8:53 ade.googlesyndication.com udp
DE 168.119.149.172:443 s.richmediastudio.com tcp
DE 94.130.51.97:443 s4.richmediastudio.com tcp
GB 142.250.179.226:443 ade.googlesyndication.com udp
US 8.8.8.8:53 t.richaudience.com udp
DE 116.202.160.46:443 t.richaudience.com tcp
US 8.8.8.8:53 3.167.187.89.in-addr.arpa udp
US 8.8.8.8:53 97.51.130.94.in-addr.arpa udp
US 8.8.8.8:53 secure.insightexpressai.com udp
US 23.53.113.23:443 secure.insightexpressai.com tcp
US 8.8.8.8:53 t4.richmediastudio.com udp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
FI 65.108.231.149:443 t4.richmediastudio.com tcp
GB 142.250.187.226:443 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.200.34:443 googleads.g.doubleclick.net udp
DE 168.119.149.172:443 s.richmediastudio.com tcp
US 8.8.8.8:53 srms.richmediastudio.com udp
FI 65.108.228.94:443 srms.richmediastudio.com tcp
US 8.8.8.8:53 t2.richaudience.com udp
FI 65.108.228.94:443 t2.richaudience.com tcp
US 8.8.8.8:53 46.160.202.116.in-addr.arpa udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 149.231.108.65.in-addr.arpa udp
DE 168.119.149.172:443 s.richmediastudio.com tcp

Files

memory/2708-0-0x000000007536E000-0x000000007536F000-memory.dmp

memory/2708-1-0x00000000006C0000-0x0000000000898000-memory.dmp

memory/2708-2-0x0000000075360000-0x0000000075B10000-memory.dmp

memory/2708-3-0x0000000008180000-0x0000000008188000-memory.dmp

memory/2708-4-0x0000000075360000-0x0000000075B10000-memory.dmp

memory/2708-5-0x0000000075360000-0x0000000075B10000-memory.dmp

memory/2708-6-0x00000000091E0000-0x0000000009218000-memory.dmp

memory/2708-7-0x00000000091A0000-0x00000000091AE000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 8b167567021ccb1a9fdf073fa9112ef0
SHA1 3baf293fbfaa7c1e7cdacb5f2975737f4ef69898
SHA256 26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513
SHA512 726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54

\??\pipe\LOCAL\crashpad_1132_KSFAKZILJGCFYMJN

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 537815e7cc5c694912ac0308147852e4
SHA1 2ccdd9d9dc637db5462fe8119c0df261146c363c
SHA256 b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f
SHA512 63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 dd1f9e257aac5ca13eac0fc00b24fbe5
SHA1 8e81e05903d93ed0b02dae313642538bb0c05fde
SHA256 7c1f933c58fb11a8e7bc5b143e8bc333f04f7d56852815ed0b6c0ea4c38d4734
SHA512 bedb13ac3579e65b92646452c0517efa0688361c88b1c31457b3ac3de4bf118aa2edca188273c743c98406df9826423a8536cb619411f97d5343e9afa09a082e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 499f6e58b1cba7636e558c2fe47fb861
SHA1 4d67fdb86076bb0be921eee125fb87d60f090a57
SHA256 d6669768695fbd9605c8e15248edb7ac04085d80e57458db67043f2dee31d8ad
SHA512 a9dffb1dd94a3ca416ece5518884b047df0abdffdde40989fbfde9da8c4528743a9857eb4bf9b4ea3b831f2dd4f631394e4b1c7ef06bfc3a7498f20310d84fea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e3fb07545551719184e3c968cc0c4329
SHA1 f158a2cf7424fdb1c4f35976753db1a68089772c
SHA256 041a727427ead2abda26b69224ddb471b0938f2abfe6684989d3b76b57f4f402
SHA512 10bf2baabb6da32d0226b410440053096fd7b6d08eeb4a66dd6da7b4bfe5d9fc87c8de16652be473f54cb3a7b1d239b54edbf5d93d0ca97504b59c9d0a7f26a0

memory/2708-86-0x000000007536E000-0x000000007536F000-memory.dmp

memory/2708-182-0x0000000075360000-0x0000000075B10000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 41b7a273a117632098a0a8807937c479
SHA1 1b9ced3292019e1375024da1cb89d93c1e5c361f
SHA256 d137fe2affa3cf09140f605a9f6d4d77de1f9f7a8ccfd4a6cd5098cf7b8fd38f
SHA512 48822f2e2810c97c90d2d2789378de6c656035352d5358251ca2b64ca686e1d2dd308ad39729352f41ee94b240f77c9a5c2bf64bba8f86de5edd5601ca949488

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57a0e3.TMP

MD5 04f7dd62ad41af9be688fdbc2a15ad21
SHA1 c7e8198253f3177d238948ec70688ed8dd2cb696
SHA256 621deab2013ddb6450d6250cb1c81b26473777b19e8ab86a1c993fe57c502421
SHA512 c5a708babb069d316f4f3d9ed89a9972b8a5d8bdae6c76f60f8e06bad9ec15710a48726682bed9a15c25df1db4ffaa31ba6067843bb41fc6a0cf9fe9e0684acd

memory/2708-234-0x0000000075360000-0x0000000075B10000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0ff3e962e1cfe5165fd43bd34fc0ade8
SHA1 65f29a75c996b7b288724ff08cc319a211953c02
SHA256 917bb96b48fa962bf749c13cdff6de7eadb0623f45fd984a1ae3a921bb05144a
SHA512 4414235e3f31e7c8f8396b6ad2e6d87516d3b601e61c8cc35c7f1e89b8fe9a403730394fb58b9fb00e7e70871126d9ea5d0101cd613f7cf5347792c4f9b92a74

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d71bca82908dd0c5c30de994f7716b6a
SHA1 a2f747d36c3fe8f053ea11bb073ab021efa8f5b5
SHA256 4103acd151b311945202d4345c402aece52b7e1fdac77d3e261689b343fe133a
SHA512 245a40fc3ed760e88045cde9b9a12e0b5906eb71902e2bda260d533a4148f035c494ae5b5e21e67fa0d42d0b248f2a997cb68e96acbdca25945046fba348e355

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4bbd4eeb668bf3160f0f3992e6875b4a
SHA1 461cc6374763a6b7e50b54578bd125b2bf52b073
SHA256 579a9eabeb2ea6bc3ba5e4b5aae2f51c9ac35aa4245b97a462dd583dbc00d938
SHA512 a68b0c4a6c5a4762720bf2271005d3a40db1799ca19d0f48718ee319c07f18ce00308301a4327679ea45303dfe9e7c0b028f0d48de46d5cfe4ec77b1f6c553e7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 e8f9602224cd5186581178b82f5aa15f
SHA1 faeec89ec65a9ec2b25e6ba1c564ce822e6984fc
SHA256 77150ae360c148bc9af0688dd667f783c948843c06c0bc3fe2e14ac178ac38b6
SHA512 3147b4033d7da4558c85da8603c5cadefec7f15932682060afd6f18efc4764a31cd61a41405f10e15d535fbf27a1664f19dfd025cb77bc4e41c66b6647886036

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1a74c7d5979942472389e5d562d5f3c1
SHA1 14509b19a433e014dad2316944e9b7160a549dbe
SHA256 50367d52428db3ef49d8527440d684c6ab9dc2eac86aed380cf0378c55f71a73
SHA512 dcd4e707c627702368838a6e5be24a328382a960435c88071e248370fa7fab73f64c2496cfe1f49f03c1362f40f3eeb86c010495441f0d254a61f4d992c30a6f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 348cbd81f372f76c955ed3ab549dd8a9
SHA1 f4a8f4d8aef8199da47654c253bcc8a1eedd1bc9
SHA256 77be9185fe6341b63d2a8b62dd464218e3d59a1a8b71c833d57a49fec5417928
SHA512 61189649b907a06bc3a7a0d49554bc31bc828ded73e5c61bc4cd8927b4c176a1c463a3d898aeb2fad4e16bcb5530a2de9689b2fde17eaca6d42d29a9f9f43415

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000055

MD5 3bd6e8b735a61d32c66e6c3750e903c3
SHA1 682c567a2bd2530afd794f5999030a03f56305c1
SHA256 809bafd21f2e8f5aee3c5b002d865086ce84e5cf4dc4a18c2e6d9f7ad88bbfc7
SHA512 875969bda2db5d4199f5105f49e50268b5aecc1285d7d86c2e8fa1cab1986de727b1fbd8e673244596d0ffe10a3517f0b8827fda4df6bfbc4f95f0bd192438be

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4c307b02b4dcc58c_0

MD5 9b866e2e3cb03c24667fdfdc0f403ff6
SHA1 cd3c0a256aeb0b663874e2d31b1eb42f0161de45
SHA256 9f240cd7e799ce622a6edf9ad3b8829e20046166f2c84f877605a989c7e73e83
SHA512 51bb26ad36bea7e6dd30dfef912b5472b0840a71260dd7c1048846769b1b77bb82329611301217b051adb7e9d4aa62621d674dc528698492c97d027be6b9dd1f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b7814b75ff7198ac_0

MD5 1ee62055115f5d73b65dd4812fe6e415
SHA1 c123df65e7db136604bdafc0e3f6285436ec0fbe
SHA256 bb9235f4c28e9aca0e9367718ad053e80f39ba02771cc856026fd6c5667f6f3b
SHA512 9f7c605d87475e297934df7188072aaf19a4efc3c8c6c10d2f7da1ae2a6cec803643160bb2308192a658472ef05c0e1d7f9b1e475200235745a2a3ac1affb2e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\95145146-bea2-466f-bcef-0ed363ec52d0.tmp

MD5 1ef925be9e702c527bef904962e05fbe
SHA1 bec4c327e3f458cf18aeece0e520f8d23c3cd847
SHA256 b1c136d53586ba5cc55cb46e5b9a22ca282e29f55c5cee1de2c650ced50e95b9
SHA512 5a114d3bd08f0cb721140a846c2e135be415608026f6c1f3f09db18df0799223dca7d069a542dbb969a68f41970a9a188aefffb538482e6199c7f7d37247ca33

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00009b

MD5 29511afae3d5ae8efa7d5b658d11f0a1
SHA1 81b5b33e02b3e52ff43549c52188762b53a61531
SHA256 aa847037795ac6956578a8af7c03e804ab7245b0fe56198ea18b12ac47374848
SHA512 3725aacd3ff3a1258df81c5f0f0c4ac99fedb11e0b85f7e56f6dc51862ae07459619ef27cfd397906def474be695848f669d8fbe5a79d4c57d742c5458a436e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a3

MD5 71ce83bb81da9b4e87fdb38bb7ecf5f3
SHA1 27f4759283576099c70152c98eef91464a97400f
SHA256 3348183d401f9f40635d837d148cbbb4b29689831bed9a6fd0794562c60416a8
SHA512 1c59ab6a6ab16683708e34d658d7ea8c804523fd43c907466e05b4cee14290e07689a67ebea04ab3abfd28459859a75693dbe4c46ae7737ba572bc922deebdb3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4187cf19cf5101b1e6bf12939d187cb2
SHA1 4c6308a74754e9e2e6a874b5c72648066b6b9926
SHA256 02fa7af9faab5397ebe0f65cfbbda9700d611418d86f07090b66a9bcb43e650c
SHA512 015df79d9d11d3dfe45bdee375178954076c1e129546d0f0583ec2e9d4cc913830691dc890560b7c116703cb97577041d722ce8a22120f14a4d2c3cb4c32b94c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b4

MD5 ba1bc252528a94df68abc4158c30a342
SHA1 fdafa2adda170ab9a2473aa741f5ed31a6f256f8
SHA256 fd8f7fd869509c751b5e841163cd4ff6dcd42d3fc5d884731f33d30ac647a1e4
SHA512 9c0c9b8322343f22f21a42426713c6a8f9a3f63f9bd9362eeca1d30fc4a4d911f828c480ab9b08f45d3c72565209356b1d916c2d8ca9ba6784651b37ccd32583

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b8

MD5 eb9d94a878c79ea4d22c85c09be7093a
SHA1 fcca4e37562ab5129fb52d67a0f4d1c18b87e732
SHA256 0c1eb0979cb7b57ae24c743868ccba6b141cd95c27a0c005c71da72d7cd73f86
SHA512 147ca48875f37af28a323c48926788f6d2db817d8e7d0080e95b44f8721b0d9059d390867b2ddbc59ceaba829087401298eaf8b677a075f66e54d50eeba67b63

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b7

MD5 522502621a31eeb7679166fcc3ce06d2
SHA1 bb7a73cd079d8c8fc352c33f62af977ae74af51b
SHA256 af2fb87aa58032445c7a7a7b6465adaabcee921c3239815e65a4d278f0c3d7ef
SHA512 b6857be33675c179be673ef4fd070d22518f741b36e5f3ece37aafa8b699fcee353e85586c9c65a1499468e2fa2487575ec700e9c889feb2414a6a5628f532f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 483dab35fdefc0764de9aaa1e950f7c1
SHA1 d96ff622fd4653cfd3ef50cce00aaf8d7112ee37
SHA256 a7612cde955535cbd503a8270c3a83564ca3ef8722842a31f22e1f9cb028d388
SHA512 365755f94f0d7327e507d40c10455242fe9b0ebb359842e4d79a9c3788cdbb492bd7ed403e4a4ddad4c5bb6cccfcdb96c1caa5baeaf266006a9a582d20710ccb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c3

MD5 1aca735014a6bb648f468ee476680d5b
SHA1 6d28e3ae6e42784769199948211e3aa0806fa62c
SHA256 e563f60814c73c0f4261067bd14c15f2c7f72ed2906670ed4076ebe0d6e9244a
SHA512 808aa9af5a3164f31466af4bac25c8a8c3f19910579cf176033359500c8e26f0a96cdc68ccf8808b65937dc87c121238c1c1b0be296d4306d5d197a1e4c38e86

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c5

MD5 7c2e5ef59e9589422bcd5bf3726fbcb1
SHA1 c4dac6966ac4cd3500d6a7fe44138a0db639d507
SHA256 6870e8dbcfaf543500add1d303de528c34e3b1f4d4424b0097c4ffb408a44fcd
SHA512 28870d9cb07f964ba0ecedfb25762cb4530bda869cc717dd4fffcd176085f03c05fd129b23e826dd6ac33ae6af8132bf9dc317ebffb52448b83236ad2349ca45

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 146718b7951b7f458325642a2e0075a6
SHA1 17c57d33053bed7a78aec8696bb8c57e871eefe7
SHA256 19112f9aa082e6dfc953763bc4335812729760d56bf3b21693fb613027a8334a
SHA512 a49a5b3a6eb299a89d53407feea5ad452dce72f05fdfec03ed9208cebd2de5d33d8c9e4ad9642c477ebef6dedfa0c4cc5a088c070f0208c98547b97b01c8bdf4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 28f6bdb9afc7e4d2ed23f458c53aea77
SHA1 5378ea116646ba0b01f34f2d9486df30f058a905
SHA256 ff3c2d8925ab4dcb2366dc4a51baca19b904b72223133051fe939dbbefc2cb2d
SHA512 f97900c0c7f2257f956954953133b53c5bd171076fc03c4b56f5a41f55967149f7d59a7d4d44eb08885470b2c8b739ecb8bcd3d629c3da8d6001f8a89130eaef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a37d2e97-a0b0-4180-9414-9f4665e3af85.tmp

MD5 0611caa6b20a0b167986fd7b44249666
SHA1 a47a4c56541c487ba9dc8f209c8aa2b463de993e
SHA256 4a8914f71c750acba2e91a8f5b0bbf12dcc2dbac0295dfbae0ccd21eac286c07
SHA512 c79516ad57b8f826153861713bc8fa00ba809ea6884d132325d31836e85630cb64cb576841437e3422c3d52afe5c5f99340e728367db1986857c1b970234e116

memory/4220-1582-0x000000006BBD0000-0x000000006BBE4000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Setup\ds.dll

MD5 7d5d3e2fcfa5ff53f5ae075ed4327b18
SHA1 3905104d8f7ba88b3b34f4997f3948b3183953f6
SHA256 e1fb95609f2757ce74cb531a5cf59674e411ea0a262b758371d7236c191910c4
SHA512 e67683331bb32ea4b2c38405be7f516db6935f883a1e4ae02a1700f5f36462c31b593e07c6fe06d8c0cb1c20c9f40a507c9eae245667c89f989e32765a89f589

memory/4220-1581-0x00000000059D0000-0x00000000059E4000-memory.dmp

memory/4220-1583-0x0000000008260000-0x0000000008804000-memory.dmp

memory/4220-1584-0x0000000008090000-0x0000000008122000-memory.dmp

memory/4220-1604-0x0000000003F70000-0x0000000003FB4000-memory.dmp

memory/4220-1605-0x00000000094C0000-0x000000000955C000-memory.dmp

memory/4220-1606-0x0000000005810000-0x0000000005876000-memory.dmp

memory/4220-1607-0x0000000009E10000-0x000000000A33C000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 39f11b4f2c3dd12c60e62bf554f117f1
SHA1 2c405ec7cd350da96533ffc8cb66045f08080af8
SHA256 31b77831a892e9da564ce018a2e2b175a81da37ef0e6068882b8f6dcd7eae794
SHA512 198d8e8263bec35eb084e99b99efd0ca8faf30bf8e833823b305dbe86b9c1cf42a0b530d24f9f611f6f6350c7794971299d44939223ce1f34d98cf1225545267

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 08f19966a3c79c2afb56f7968bf27ba8
SHA1 522cd03dad44b9bf9d8d96e700514ff13f203362
SHA256 ff6a54f5d3989a2c743d45295c3af16c5a2f19c4792de2e9647905baee8bf4ac
SHA512 85251a95896248c2947e6f0a76e6ffc56c80d9d7bd0ca1ef193f58cc56b1c9f3b02bca680e671689865148bba41118a207cfa6a6349dea1b19cbc45989a5f80b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 1f3cbd47885135befec222fe1163595a
SHA1 736df1b055272c64e47fdf606142f3eb24064395
SHA256 24a6587767e0bdf115e32b29e5772cf374a8d3b4916d6707959d20d60157761c
SHA512 4f3e6d13faa88445f3c467fa2f2253c17bc5b7a404b5dc6ad59cc3fac6fb5690664ef9f0ca678217ebde0b47a36220078135ffd24e42e4d640992264bc1c7357

memory/2708-1864-0x0000000075360000-0x0000000075B10000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 6c6729a560b07bebc3c7811f61e70c9a
SHA1 b64a1ca8898ad32053cf88295a0b506715433ddc
SHA256 5a241855b13e993f06630762033f2bdc054b6da8a2a8b66d0f0c1292295e2a84
SHA512 2dfdce9bc4e4f685ab7eeccc239c97d4a2f845cc253f8b73e9adceaf54d1314c6bc821c38cf0a72cfa8040f7244040768776bf42ea87492f0c98632ba512ba1a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b257506b270bf760f9eafe268494347c
SHA1 ffdf7dbee7eb3aaf4edfe18d1466fa243816bf50
SHA256 ee7427220254058620348e714d28461b2f1cad8246aa0f7b956f6b219db66b66
SHA512 13440bff82acaeabb879eb94eec6014af9232c4176a7b1a49f4764114d3e9461f37282be4b00c5037103cca53b8126d0357f95bdcd2a0942b36040c68a9374ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c908651ff6ea62cf25a818f2ea52aace
SHA1 5fc354f23cb3d3f2c10a502bde73a4a5efea40ed
SHA256 743b4a0a912df74efdf9a04398db42236f8400891c776ee872589167948064fa
SHA512 b09e2c2c7c1eccf3322fa70836b610947c29757d6e8f973789484f43b2ccdaa873bbb8388fef21523bd6443e9ad8d1e89d7c5b6791c2ace23dcb67f84524c087

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 49f8acc49d2d0d8915d6a10bee2fd5e5
SHA1 5b596b61242b698966752addb16328922ddd174e
SHA256 385f96f5c23b1e26c733dc8402c0a93a3423f70689cf1b352ad11db123cf81f6
SHA512 15ab08d341c37ac2534cb9ce69f1ae954c99b1d37d1719a3f1feb9f7171fdd50a7d0e0a7474111d291a8d5c9c6e9d10bf32a8d50de74665abf54752ec4518abd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 231ee6c646a018dfdcc054b9e0b4643b
SHA1 23c4fd1d1839dd402f62cc38a9dec3de6fadbd31
SHA256 041787cb3dc10d2e9abd503e095a4282ca2dba51baf905ed330f12d75f25c2e9
SHA512 a5d74257b392b4b87dbf43a2db7eb7e6dc8f59a672525cb281ac255607874549f5c9bb140f04b2581219db616ff7376e8304d12d10e4f1cd27ca3ad76cd693e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 43784c432adf3e7c45dcdb7c1c844dce
SHA1 0721ef57d7dc2497fae9c1be57763367da650d42
SHA256 9352bf0d40cbbcd10fd9a56fe65cab75f34c499be87bb9965c9dbdb3d481a99b
SHA512 34eb9b9af99329cab22c5f797ec5bd7ac1334229f3ead0ab343e0a4ff787422fa58501715fb7b4b1c98d6076b7a7af1a0d9bc0aab47fef6d6214d9cc7cb5f421

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000076

MD5 23e27b25649876f27c181efdeadfc8d6
SHA1 9863dad332964fb57e21f951be539fcfeafe7250
SHA256 7b1e20c89858082755a93ed4511747464aff17b722a0a4d533e89784ab7b70fc
SHA512 683f3235691e33cbdee39172b211fa103361ec3c41a9b554834d41ad5ab079993b39bad9c5a5a743652bcea618ff3356c5287dc95817ce2a9d167c8e2a6ada75

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d796c2e02b455476ca11c735bc391422
SHA1 470155a0a03691c850dc5eb11fc427fdde7b23b4
SHA256 a75bf2178df39a41842aa102258adb85ab7229b5dfbe6a9044e45eec3c7291b5
SHA512 8232d0ace9a4c7baae5a91ba5a6940f37f97165626107b5c6a55ed8fd6290257d828d7558fcf3c2975ffc3ec6446db01f5506a714597b43f5a76d500d4e40467

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 42187892605ec5fc05bd3188897aef94
SHA1 12bddd34855a68cd35a77feb4911a2a390d37ed9
SHA256 a41d14a353b7ed5f4648cca4229f21d9abc6aeca53b339e7f049115548691a40
SHA512 54eea2556f85f65c78a34349ade2ae4237271c64703b2b9e379a17137e0db4bfe8ea4e60861c574e41b26f371e16a889b4084737a2766a58e7012d2c82186634

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e10849084042107af0e06720f9e3bb99
SHA1 65433b0cc0ad6910f52e5fec0b0503f1b0ec4c8d
SHA256 df43f2e80e8ded442f6f46898abe9755a930978522a5dad0b724d9aeb25debbf
SHA512 ad3dac6e51b835c46f699634c048b34c3124b1dac275ea65bbc6c6fc68090a67dc867b123757b45512926d78cde3edf486706048591cd6923be315ac84b28cca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 23c81cd86bbf0a2e273fd35fa9347e2f
SHA1 a4c6b65bc337928bda80ed79735fa0fed3546c98
SHA256 d3c5e110874be96f90ae812bfc72b03abecf4bd0f686c6ab1fc73e9096f36442
SHA512 1cd26ed958079d277910258304a1a69e7c0569aa75f70b426439fde4682ce1670534c2716e09e1d97fce7edcf1993a99bda4a8d7846f21d12ce0bb75346712f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 1ad119b54d81cefe7748a08435045fae
SHA1 0ebe30f22e7a85a441a7ac04b784a3fc642ad34f
SHA256 525998bf465e934ed5a54a624079c2ddd8ad3b23ef6b9dcd13940c9f3fc423c4
SHA512 9f93ebb3b29c8eb025dabecbb10ae82cb8a9af004542f459faeef9d305cb1bb06a69338a2f1442b5e9f7492d07d31a7b60352c2691db8412e5301a2539bd934f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

MD5 1fdaa3adff25b46c98eba44b41a42684
SHA1 cccb2d42951e4b9983f0fa7c5d87303396f37343
SHA256 83267fab2c0bd35df027f704f7ce76ccec1cb43b7844b51b1b04fab733912aa1
SHA512 d0e164b3fc9a56affe96cb9b6c7f1ee9f3b967e90e31c20dd172065b1ed87347575e03cf8316f3d7a99839855173df6e2dfc0afb004c41033e4bbe8a02473434

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038

MD5 16b7c29170a164380a86f1c3bff874cb
SHA1 47221ea9b9b69a88edd7dc35de071ee333e2775c
SHA256 93b4ecd1874eb3abcdde0171d042899ce732a9e5970bb2e23a8545d9e70a0a6b
SHA512 a32dde5affed6c5a5601a7403fc2908b7dd4aaeeea42cebd3d7e0eaef67358c98d9dc99aa00624bf442da780fdfc268e26df41be6cef740654aa3006ad663e29

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000037

MD5 1d05cc62583a7db7139e30dc7a7c24f8
SHA1 001c2cb08fc747cde1028a45b75e462ab333ea08
SHA256 35d0d6598bbfd4722ba330d6d957829de05c18706b4ea9443402298720beb854
SHA512 f4ebf61f3a49256e0a1c50e88d940d75891b54a6766d68346550d0fc04d65c63bc6224db35bc150a108d6dec981cc9b292aa90d7c339ff523e7d3a7f90b3d986

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036

MD5 65ea735154b4fad52043cc9b82689369
SHA1 0942adb6b44cd43a96ad5c2640b096d00bca8242
SHA256 edc11286a751b3fa3f9192bc3c468bccb5037d66dd7201286f2e020546d5a474
SHA512 4b3655b485dca25da709a19223e006db69644c6cea3fd64b52add0afcd00d15f697d1f157b0e399f683d5ec462bccd50a7f522704384af5ee1dea821f665736b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

MD5 8ce85f2d7709951a3ba5306bb66ed7b1
SHA1 8ec22d0e167cad01623fde36c17480ca65e73fd1
SHA256 d50624284b98bbbd6181ecd3419bf3ccf0b1788333fbf3535ee39e9eb42d6cbf
SHA512 ba2c24fcb5278f2e815422571c03f478233256867a60d20a99fb45eb92703dffb491c47b38180c9e5f310b30e9aa3bf27d42fccba57631136290aca1ec5b7ca3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003b

MD5 144854e84da83ffea974a51dc947756b
SHA1 50ad7fa26be4433392808f4e3f0f79ffc273cd78
SHA256 8c008eb45d08a7cdb74767dc72e2e47dd33264487749dfcac472f8d9e1311c12
SHA512 515d5343fd3da1fe397d6722bd6b1ef8fb5a971ba8f7ba351e5c022883f3f4a9b145c70e0e7c54e5b424047adaee997095667df62464781a9f684e74d752db11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 78250ce776b5dc2e5f49fab2ace506c4
SHA1 1ac8c056ff62da5d4ff9ac40219ee3c471493405
SHA256 028eb24eb98035c0ddd27f17314a659dad2b7c4a8070091a18e57b3b04ffc1f8
SHA512 2949bf621e85b83338dc9474b67f243a36ed7743270eb4449683299e4f073d68283e747cb32ba5f23e0123321c3e883688ef3a1f9331cd533d5a178c0fd22c22

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

MD5 73f1a15cdf82610874fbe89549bdef63
SHA1 7f4c0071eaf48d9346719bb1d08ebc1b87a5ad21
SHA256 7560b1a9ceb42bff8b32b44d7059af9b2be3d264542b35f7c7d6a20f98e4c4ec
SHA512 1b2bc1342bc6e5bb783e5dfd92aff50d2c26f7d843646eed6c35056b6279a3794ce6c1016df6e8ad9d90c496b84108cf4fa67f75b698abfa5bb0db860d8c87eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000040

MD5 ea83c8e7bb9d8933bb3aa443185b2060
SHA1 2843ea22dd4e044ec9fd6bb5da2a2339fdea9e3f
SHA256 9cf37f1d2974abfc579c0512693398197252f7775f717931dd1ae793b1333930
SHA512 dfbbd52f6d4d0d26fb0fa7f1bcf0569abf90311e0a15afdb3fa2842cd33230c58af8ccbf7be90c166853e951f6e72171fd27886f898c53a7ffc148d5e53e3c3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f

MD5 ee9652db75831282ef59f45e7564c622
SHA1 4fbc0fdfc3b37f1c52b699a7a6fa2a3896b28e9f
SHA256 4fe218d5dc936c2f35858b4859747f8cce41bea78fca67646272d303217d3896
SHA512 5ddde671e7eef0dd6233dc3c28b113764303a6e01e0f060787f9f44d1bf6f4c3172e4feab476eb9b9aa21a3789520810acaad9a991c623c782ec9d9b42619b4b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000067

MD5 eac452e929deaec2f3242dc527852917
SHA1 166af014f2405cda1ffa3bb6ae5f32502aaf5d9b
SHA256 6bb97e69821cbba97e9024fc492de4c4ec64a3c7bde124d7a1a15faec161ff4d
SHA512 348befec796337705477f4658f1ffe286bd0e1dcb71955eec6f1507e6f217f0dbc7528b5c56458c101b1ffa0d40f82ef5ce5449682f0db3ce4f250b835c4e1d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000050

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004f

MD5 ab8cc1c8387ee0010a0314c315f4b15f
SHA1 ba70bd50e58c9ead36b5958ee3941957b13aab08
SHA256 95a311c8e8bed865592f12f133d7ad56ca60db39e095d4ddb2e7a8a6f04b95e7
SHA512 f15b360a15b5ffff61158d80bb67c7e4a99d9edf31b8dc774bad669fe8a3fcbac948609aaa632fc882b7cdc36fed0dcfd8ab71f4e77d7c84279d3be25cb97c89

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00010c

MD5 43c6baeedb28cf622c349edd94dc1650
SHA1 227c4aaafc07b02b75e14de41072116847893313
SHA256 1b2b1a9ecae31c5596cca778d9bac3858321bc19564281090d2e1f79a256fac2
SHA512 6827e214ce8891a7f9ec73f4afd487497127e9b056c45bb2f83ba096da154ccbb606799cb04a8b574dda802d3779eecb512fe8ccca25bce6cf61e4f3d7aea244

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000046

MD5 767e9bf2d26e4ac3a2e0649eaf5a9ec9
SHA1 8d293e0b8d8683649133ea5fd5c57e6f42d3eba5
SHA256 c615b707e986fe61a4058055dbe930887e6b069e7d77db2e2865994828698637
SHA512 ec26986a420ddb17835fced6fb8b481574b52b4d3fc806183c7e5327a72d29138cdf0b3faa11fb8b47b2756069d004e4e27168d78e3d547697b7b9164d17dd40

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000066

MD5 9c6b5ce6b3452e98573e6409c34dd73c
SHA1 de607fadef62e36945a409a838eb8fc36d819b42
SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 61d7830d087433e58672402efa26d76c
SHA1 8d77ea8246d947eb433cdcecded35a7db4a5166e
SHA256 8c8033955db4994abf94578d42751a299360424b6f6152e7eb7671d8697efb7e
SHA512 d23a790016c8ed987a6bdad739099f3a41cf9c6c87afa83178bc520ba944fa7e56f23c4366f0cb494d71691ddda2448524449f734dca8e8afc48470efe1aa6c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9aaf8255cf25ce8fb3c881e653a9654a
SHA1 5c87c4df2acc9a65a9acfd85216b10c396c6ae60
SHA256 7fc4e6ac177451b43455995927adcd197bddd757d3ddd5c77aa77b0577a2127f
SHA512 b3d7af5aecddad7ed95c9329f029b9d3bcfe605721bd1724200870e11f867a937b9c903fcfe1e6c4b0614968fcc0895fd2fbf7a8f4e5cc9e578372b0e57852cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 618000c080de9760a4b62e21781f2a12
SHA1 09a6f789138a0771aed76c20eba180cf213955b5
SHA256 3433c0b949c8bbedb41931bff0c214a5de41c8df59c6a6a62d0cd37e0caafe38
SHA512 d808d0ee32bc56588f99b62c23c1e8db9d019f4e10b9fa1e580094a6b2e953f07ba06eb29cdd8fe01c1422ff3b074deb4b1c6ad1176e628e5e1b74d68ef04095

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 fccb04f1b277af99a425109c826561af
SHA1 6c6afec1678257d5424e6891f82e7c61f0427b62
SHA256 a69a18c3b4dbc9d3474c3e0d0a6d9cc323e6f8cf8fc80c6d54007fc13a7e4b85
SHA512 7d82bef2ec737ba1ac0b2d31207d70d8abd5665a46c87b4c6272b63815d38121d5421d934ebe6db352b78f1f572617ece00dba3479e936a96111c0b2cb243db3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d3db1a224f0b6c805ffb0f46a03f4be3
SHA1 1c354667beba455c27bf28d3fd67f3e856ec31c3
SHA256 5d2abe5ba3fe6e302ff32ece38223a4573948c439319245197ae94c986c19a07
SHA512 e499b78df2ef52a9fa19480af33d686b3354f0c82ecef88b92dcfa29ffde7b3dc6aa8fd8be0963e62191611c9843a6a9429b6cea786b5b819616d1bc61219f63