Malware Analysis Report

2024-09-11 10:04

Sample ID 240511-rsnn3aee22
Target RobloxPlayerLauncher.exe
SHA256 93580834e65af2f5a83aacef47a1ec3ef45fc6ab9683ec4df771bbea713ab38f
Tags
cobaltstrike limerat zgrat adware backdoor discovery evasion persistence rat spyware stealer trojan
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

93580834e65af2f5a83aacef47a1ec3ef45fc6ab9683ec4df771bbea713ab38f

Threat Level: Known bad

The file RobloxPlayerLauncher.exe was found to be: Known bad.

Malicious Activity Summary

cobaltstrike limerat zgrat adware backdoor discovery evasion persistence rat spyware stealer trojan

Cobaltstrike

ZGRat

Suspicious use of NtCreateProcessExOtherParentProcess

LimeRAT

Cobalt Strike reflective loader

Detect ZGRat V1

Modifies Installed Components in the registry

Modifies Windows Firewall

Drops file in Drivers directory

Sets file execution options in registry

Contacts a large (762) amount of remote hosts

Downloads MZ/PE file

Executes dropped EXE

Checks BIOS information in registry

Registers COM server for autorun

Reads user/profile data of web browsers

Checks computer location settings

Loads dropped DLL

Accesses cryptocurrency files/wallets, possible credential harvesting

Maps connected drives based on registry

Legitimate hosting services abused for malware hosting/C2

Checks installed software on the system

Enumerates connected drives

Checks whether UAC is enabled

Checks for any installed AV software in registry

Adds Run key to start application

Installs/modifies Browser Helper Object

Creates a large amount of network flows

Modifies powershell logging option

Suspicious use of SetThreadContext

Checks system information in the registry

Drops file in System32 directory

AutoIT Executable

Drops file in Windows directory

Drops file in Program Files directory

Enumerates physical storage devices

Modifies data under HKEY_USERS

Kills process with taskkill

NTFS ADS

Uses Volume Shadow Copy service COM API

Suspicious use of SendNotifyMessage

Creates scheduled task(s)

Checks SCSI registry key(s)

Suspicious use of SetWindowsHookEx

Suspicious use of AdjustPrivilegeToken

Uses Task Scheduler COM API

Modifies system certificate store

Suspicious use of WriteProcessMemory

Suspicious behavior: EnumeratesProcesses

Checks processor information in registry

Suspicious behavior: LoadsDriver

Script User-Agent

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Enumerates system info in registry

Suspicious use of FindShellTrayWindow

Uses Volume Shadow Copy WMI provider

Suspicious behavior: AddClipboardFormatListener

Modifies Internet Explorer settings

Suspicious behavior: GetForegroundWindowSpam

System policy modification

Modifies registry class

MITRE ATT&CK Matrix V13

Initial Access
TA0001
Execution
TA0002
Scheduled Task/Job
T1053
Persistence
TA0003
Boot or Logon Autostart Execution
T1547
Registry Run Keys / Startup Folder
T1547.001
Create or Modify System Process
T1543
Windows Service
T1543.003
Browser Extensions
T1176
Scheduled Task/Job
T1053
Privilege Escalation
TA0004
Boot or Logon Autostart Execution
T1547
Registry Run Keys / Startup Folder
T1547.001
Create or Modify System Process
T1543
Windows Service
T1543.003
Scheduled Task/Job
T1053
Defense Evasion
TA0005
Modify Registry
T1112
Impair Defenses
T1562
Disable or Modify System Firewall
T1562.004
Subvert Trust Controls
T1553
Install Root Certificate
T1553.004
Credential Access
TA0006
Unsecured Credentials
T1552
Credentials In Files
T1552.001
Discovery
TA0007
Network Service Discovery
T1046
Query Registry
T1012
System Information Discovery
T1082
Software Discovery
T1518
Security Software Discovery
T1518.001
Peripheral Device Discovery
T1120
Lateral Movement
TA0008
Collection
TA0009
Data from Local System
T1005
Exfiltration
TA0010
Command and Control
TA0011
Web Service
T1102
Impact
TA0040
Resource Development
TA0042
Reconnaissance
TA0043

Analysis: static1

Detonation Overview

Reported

2024-05-11 14:27

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-11 14:27

Reported

2024-05-11 15:01

Platform

win10v2004-20240508-en

Max time kernel

1635s

Max time network

2029s

Command Line

"C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe"

Signatures

Cobalt Strike reflective loader

Description Indicator Process Target
N/A N/A N/A N/A

Cobaltstrike

trojan backdoor cobaltstrike

Detect ZGRat V1

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

LimeRAT

rat limerat

Suspicious use of NtCreateProcessExOtherParentProcess

Description Indicator Process Target
PID 3792 created 8388 N/A C:\Windows\system32\taskmgr.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3792 created 8388 N/A C:\Windows\system32\taskmgr.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3792 created 8008 N/A C:\Windows\system32\taskmgr.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3792 created 8008 N/A C:\Windows\system32\taskmgr.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

ZGRat

rat zgrat

Contacts a large (762) amount of remote hosts

discovery

Downloads MZ/PE file

Drops file in Drivers directory

Description Indicator Process Target
File created C:\Windows\system32\drivers\rsCamFilter020502.sys C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe N/A
File created C:\Windows\system32\drivers\rsKernelEngine.sys C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe N/A
File created C:\Windows\system32\drivers\rsElam.sys C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe N/A
File opened for modification C:\Windows\system32\drivers\rsElam.sys C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe N/A
File created C:\Windows\system32\drivers\rsDwf.sys C:\Users\Admin\AppData\Local\Temp\nsh252B.tmp\SaferWeb-installer.exe N/A
File opened for modification C:\Windows\system32\drivers\rsDwf.sys C:\Users\Admin\AppData\Local\Temp\nsh252B.tmp\SaferWeb-installer.exe N/A

Modifies Installed Components in the registry

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.80\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A

Modifies Windows Firewall

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A

Sets file execution options in registry

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU345.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU345.tmp\MicrosoftEdgeUpdate.exe N/A

Checks BIOS information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod0.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\7zO4C5A018A\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Windows\Temp\MUBSTemp\BCILauncher.EXE N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{05D726BC-F72F-454B-AD16-D78E42BA2953}\MicrosoftEdge_X64_124.0.2478.97.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{05D726BC-F72F-454B-AD16-D78E42BA2953}\EDGEMITMP_28E2D.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{05D726BC-F72F-454B-AD16-D78E42BA2953}\EDGEMITMP_28E2D.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C5A018A\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\system\Google.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C5ED5AA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C5A1ADA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C5409DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C5E08DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C580FDA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C536EDA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C5BBCDA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C5173DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C5862DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C5341DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C5DB7DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C54A6DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C512BCA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C597ACA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C5D18AB\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C545FAB\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zO4C5FBDAB\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Users\Admin\Downloads\Killer 7_L-x1Qr1.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-1T0RJ.tmp\Killer 7_L-x1Qr1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod0.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod1_extract\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\OperaSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\wwlattsq.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod1_extract\installer.exe N/A
N/A N/A C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\Assistant_109.0.5097.45_Setup.exe_sfx.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0374AC67-8791-49B1-B224-8E637682414C}\BGAUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Windows\Temp\MUBSTemp\BCILauncher.EXE N/A
N/A N/A C:\Windows\Temp\MUBSTemp\BingChatInstaller.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-1T0RJ.tmp\Killer 7_L-x1Qr1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-1T0RJ.tmp\Killer 7_L-x1Qr1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-1T0RJ.tmp\Killer 7_L-x1Qr1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\OperaSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\wwlattsq.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Windows\SYSTEM32\regsvr32.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\UIHost.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3mmcwwuu.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsc97E0.tmp\RAVVPN-installer.exe N/A
N/A N/A C:\Program Files\ReasonLabs\VPN\rsVPNSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Reads user/profile data of web browsers

spyware stealer

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.80\\notification_click_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}\InprocServer32 C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{117151a5-951b-477e-91a4-699c7d9d66a2}\InprocServer32 C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{117151a5-951b-477e-91a4-699c7d9d66a2}\InprocServer32\ThreadingModel = "Both" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.37\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.37\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4E50ED6A-8A46-4CB9-9E77-B99CBFED1E68}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\109.0.5097.80\\notification_helper.exe\"" C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4E50ED6A-8A46-4CB9-9E77-B99CBFED1E68}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.37\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4E50ED6A-8A46-4CB9-9E77-B99CBFED1E68}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.37\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4E50ED6A-8A46-4CB9-9E77-B99CBFED1E68}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.80\\notification_helper.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.80\\notification_click_helper.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4E50ED6A-8A46-4CB9-9E77-B99CBFED1E68}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.80\\notification_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32 C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4E50ED6A-8A46-4CB9-9E77-B99CBFED1E68}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.37\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}\InprocServer32\ThreadingModel = "Apartment" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4E50ED6A-8A46-4CB9-9E77-B99CBFED1E68}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.80\\PdfPreview\\PdfPreviewHandler.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\109.0.5097.80\\notification_helper.exe" C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A

Accesses cryptocurrency files/wallets, possible credential harvesting

spyware

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\GrpConv = "grpconv -o" \??\c:\windows\system32\rundll32.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\!BCILauncher = "C:\\Windows\\Temp\\MUBSTemp\\BCILauncher.exe bgaupmi=54CD468A37DE4FE691A9914214B4F423" C:\Windows\Temp\MUBSTemp\BingChatInstaller.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera Browser Assistant = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\assistant\\browser_assistant.exe" C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe" C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe" C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe" C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\!BCILauncher = "\"C:\\Windows\\Temp\\MUBSTemp\\BCILauncher.EXE\" bgaupmi=54CD468A37DE4FE691A9914214B4F423" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0374AC67-8791-49B1-B224-8E637682414C}\BGAUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\GrpConv = "grpconv -o" C:\Windows\system32\rundll32.exe N/A

Checks for any installed AV software in registry

Description Indicator Process Target
Key opened \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\AVG\AV\Dir C:\Users\Admin\AppData\Local\Temp\is-1T0RJ.tmp\Killer 7_L-x1Qr1.tmp N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast C:\Users\Admin\AppData\Local\Temp\is-1T0RJ.tmp\Killer 7_L-x1Qr1.tmp N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\AVAST Software\Avast C:\Users\Admin\AppData\Local\Temp\is-1T0RJ.tmp\Killer 7_L-x1Qr1.tmp N/A
Key opened \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\AVAST Software\Avast C:\Users\Admin\AppData\Local\Temp\is-1T0RJ.tmp\Killer 7_L-x1Qr1.tmp N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVG\AV\Dir C:\Users\Admin\AppData\Local\Temp\is-1T0RJ.tmp\Killer 7_L-x1Qr1.tmp N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\AVG\AV\Dir C:\Users\Admin\AppData\Local\Temp\is-1T0RJ.tmp\Killer 7_L-x1Qr1.tmp N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Creates a large amount of network flows

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\D: C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe N/A
File opened (read-only) \??\L: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\F: C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened (read-only) \??\B: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
File opened (read-only) \??\S: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\D: C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe N/A
File opened (read-only) \??\V: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\F: C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\D: C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
File opened (read-only) \??\M: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A

Installs/modifies Browser Helper Object

stealer adware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A pastebin.com N/A N/A
N/A pastebin.com N/A N/A

Maps connected drives based on registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum C:\Users\Admin\AppData\Local\Programs\Magic Inventor Factory Suite\AndroidAssistServer.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum\0 C:\Users\Admin\AppData\Local\Programs\Magic Inventor Factory Suite\AndroidAssistServer.exe N/A

Modifies powershell logging option

evasion

AutoIT Executable

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU345.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU345.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5080DC7A65DB6A5960ECD874088F3328_79CFD3DF2894C4BFDA2ADFD6675FA18B C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_0A36A03C09DCEEA388C024E3D20B14B7 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3AA0DCD5A74331FBD6F344550EC48B87_AD29AB0C5CE75CC82783A6DDDEF1E075 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FC68FB72D4FBC7E0F151BC2282D75E47_367FA2447481C3DB640CE44BE2E5A181 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07A7CCFBD28A674D95D3BF853C9007C6 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_56DB209C155B5A05FCBF555DF7E6D1BB C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8890A77645B73478F5B1DED18ACBF795_C090A8C88B266C6FF99A97210E92B44D C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\357F04AD41BCF5FE18FCB69F60C6680F_66F532634EB780F86B16CC279B9366A2 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\86844F70250DD8EF225D6B4178798C21_44AD5D0C299F1D4EE038B125B5E5863A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_56DB209C155B5A05FCBF555DF7E6D1BB C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FA0E447C3E79584EC91182C66BBD2DB7 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\303572DF538EDD8B1D606185F1D559B8 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\439F613B3D55693954E1B080DE3085B4_C4927E03400A4F6EDB9D613E6354F864 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_0A36A03C09DCEEA388C024E3D20B14B7 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_0343D08A98AFAA7CAA7068BD558BE887 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_FCC3094F2742476FF700A8833794D0E1 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\rsScanner_v3.9.1.exe.log C:\Program Files\ReasonLabs\rsScanner_v3.9.1.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DA3B6E45325D5FFF28CF6BAD6065C907_927B32810B2981070A638BBD38117305 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1B1401C7EC8E96BC79CBFD92F9DF762D_E35D496D1CD0B884BEBCAFED0FE61600 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3E3E9689537B6B136ECF210088069D55_A925FAB5FFC3CEDB8E62B2DCCBBBB4F2 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\303572DF538EDD8B1D606185F1D559B8 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\66AE3BFDF94A732B262342AD2154B86E_A89204531497D3661ACEDB6FB93ECB4C C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\66AE3BFDF94A732B262342AD2154B86E_A89204531497D3661ACEDB6FB93ECB4C C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FA0E447C3E79584EC91182C66BBD2DB7 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\86844F70250DD8EF225D6B4178798C21_1FB605FD2412C4F94AD934D8134A28AC C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\75CA58072B9926F763A91F0CC2798706_645BC4A49DCDC40FE5917FA45C6D4517 C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5F26A2159BA21EA573A1C5E3DE2CF211_E3375A509D9058F6A8FFB74D3B4E6F77 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894 C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_8280ADFA5CEF4E7A7D18EDB173D117BD C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49855FCDFA62840A2838AEF1EFAC3C9B C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8890A77645B73478F5B1DED18ACBF795_C090A8C88B266C6FF99A97210E92B44D C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94D97B1EC1F43DD6ED4FE7AB95E144BC_330B78668586CC1C5060B7886AA9A046 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\86844F70250DD8EF225D6B4178798C21_1FB605FD2412C4F94AD934D8134A28AC C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\38D10539991D1B84467F968981C3969D_3A58CFC115108405B8F1F6C1914449B7 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7850C7BAFAC9456B4B92328A61976502_6A5F08240159C584DE485971DE45D01F C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\75CA58072B9926F763A91F0CC2798706_645BC4A49DCDC40FE5917FA45C6D4517 C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_10534D407DF32865AC15C5208A74F233 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B039FEA45CB4CC4BBACFC013C7C55604_E3A0B2E345AA9F5A174687564C886046 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5F26A2159BA21EA573A1C5E3DE2CF211_E3375A509D9058F6A8FFB74D3B4E6F77 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\38D10539991D1B84467F968981C3969D_3A58CFC115108405B8F1F6C1914449B7 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\74FBF93595CFC8459196065CE54AD928 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3E3E9689537B6B136ECF210088069D55_A925FAB5FFC3CEDB8E62B2DCCBBBB4F2 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\42B9A473B4DAF01285A36B4D3C7B1662_38924EDF39D8802D6946FB22E5DD0835 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\206932163209AD483A44477E28192474 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77FBC64BA73370EC2F659BAD977FF2AD_9767A5403B067D539A02E2AD0F3C2C4A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\18E6B4A57A6BC7EC9B861CDF2D6D0D02_C3B142D2C5374581DC2FDFFDEDBDEDDB C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AEACCDA8653DD8D7B2EA32F21D15D44F_D5824721AFCD338CB437BB54334D6F98 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7850C7BAFAC9456B4B92328A61976502_6A5F08240159C584DE485971DE45D01F C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\117308CCCD9C93758827D7CC85BB135E C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\206932163209AD483A44477E28192474 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EA618097E393409AFA316F0F87E2C202_726B8EFFBCA6C6A70214A4BA651CA9C6 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1B1401C7EC8E96BC79CBFD92F9DF762D_E35D496D1CD0B884BEBCAFED0FE61600 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AEACCDA8653DD8D7B2EA32F21D15D44F_16AF0EAEDE417D2EF9B4FAE6020C5F20 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77003E887FC21E505B9E28CBA30E18ED_8ACE642DC0A43382FABA7AE806561A50 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\86844F70250DD8EF225D6B4178798C21_2CDE88B3CC9A35A2EA16DC0201366139 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94D97B1EC1F43DD6ED4FE7AB95E144BC_330B78668586CC1C5060B7886AA9A046 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A

Suspicious use of SetThreadContext

Description Indicator Process Target
PID 7156 set thread context of 9836 N/A C:\Users\Admin\AppData\Local\Temp\7zO0882D6CE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 10632 set thread context of 11116 N/A C:\Users\Admin\AppData\Local\Temp\7zO08893CBE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 5992 set thread context of 7056 N/A C:\Users\Admin\AppData\Local\Temp\7zO08870BBE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 2044 set thread context of 9632 N/A C:\Users\Admin\AppData\Local\Temp\7zO088896AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 1776 set thread context of 8092 N/A C:\Users\Admin\AppData\Local\Temp\7zO088488BE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 11252 set thread context of 7088 N/A C:\Users\Admin\AppData\Local\Temp\7zO088297AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 5032 set thread context of 4388 N/A C:\Users\Admin\AppData\Local\Temp\7zO0881D2AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 4348 set thread context of 6468 N/A C:\Users\Admin\AppData\Local\Temp\7zO088B61AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 1840 set thread context of 8932 N/A C:\Users\Admin\AppData\Local\Temp\7zO088320AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 4044 set thread context of 11208 N/A C:\Users\Admin\AppData\Local\Temp\7zO088CAFAE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 2956 set thread context of 6020 N/A C:\Users\Admin\AppData\Local\Temp\7zO0884BBAE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 9436 set thread context of 10096 N/A C:\Users\Admin\AppData\Local\Temp\7zO088C4AAE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 10236 set thread context of 2888 N/A C:\Users\Admin\AppData\Local\Temp\7zO088E2AAE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 10452 set thread context of 9808 N/A C:\Users\Admin\AppData\Local\Temp\7zO0887E8AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 732 set thread context of 776 N/A C:\Users\Admin\AppData\Local\Temp\7zO088E129E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 5452 set thread context of 2192 N/A C:\Users\Admin\AppData\Local\Temp\7zO0884619E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 10480 set thread context of 3500 N/A C:\Users\Admin\AppData\Local\Temp\7zO0880509E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 2508 set thread context of 10448 N/A C:\Users\Admin\AppData\Local\Temp\7zO08888C9E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 7716 set thread context of 2008 N/A C:\Users\Admin\AppData\Local\Temp\7zO0882489E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 10340 set thread context of 9468 N/A C:\Users\Admin\AppData\Local\Temp\7zO0882958E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
PID 4524 set thread context of 10548 N/A C:\Users\Admin\AppData\Local\Temp\7zO0886E38E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
PID 9476 set thread context of 9580 N/A C:\Users\Admin\AppData\Local\Temp\7zO08888F8E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 8600 set thread context of 2596 N/A C:\Users\Admin\AppData\Local\Temp\7zO08833E8E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 5392 set thread context of 9924 N/A C:\Users\Admin\AppData\Local\Temp\7zO0885BC8E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 5156 set thread context of 11240 N/A C:\Users\Admin\AppData\Local\Temp\7zO08896D8E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 4624 set thread context of 5996 N/A C:\Users\Admin\AppData\Local\Temp\7zO08827B8E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 8856 set thread context of 8096 N/A C:\Users\Admin\AppData\Local\Temp\7zO088D1ABE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\ExtraContent\textures\ui\LuaChat\9-slice\[email protected] C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\MFW\core\utils\stringutils.luc C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-dialog-balloon-es-ES.js C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\Emotes\TenFoot\SelectedLine.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\AnimationEditor\img_eventMarker_border.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\AnimationEditor\img_scalebar_arrows_border.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\Controls\DefaultController\[email protected] C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Locales\hu.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\MFW\packages_web_view\webadvisor\wa-dwtoast.html C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping3708_1535086814\json\i18n-mobile-hub\id\strings.json C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\DPadSheet.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\GuiImagePlaceholder.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\Controls\PlayStationController\PS4\[email protected] C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_sk.dll C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\ExtraContent\textures\ui\LuaChat\9-slice\[email protected] C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\MFW\packages_web_view\mwb\wa-mwb-checklist.html C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping8388_203762979\hyph-cy.hyb C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\Settings\Players\[email protected] C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\VoiceChat\MicDark\[email protected] C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\ExtraContent\textures\ui\LuaApp\icons\ic-more-help.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-ss-toast-variants-sv-SE.js C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\analyticsmanager.dll C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\configs\DateTimeLocaleConfigs\zh-tw.json C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\jslang\new-tab-res-toast-pt-PT.js C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
File opened for modification C:\Program Files\McAfee\Temp4134757966\lookupmanager.cab C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod1_extract\installer.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\LegacyRbxGui\M1Side.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.97\Trust Protection Lists\Mu\LICENSE C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{05D726BC-F72F-454B-AD16-D78E42BA2953}\EDGEMITMP_28E2D.tmp\setup.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-sstoast-bing-hu-HU.js C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\GameSettings\ScrollBarTop_Wide.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-overlay-nb-NO.js C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
File created C:\Program Files\ReasonLabs\EPP\EDR\System.Runtime.dll C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\ExtraContent\textures\ui\LuaChat\icons\[email protected] C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_ca.dll C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\telemetry\dimensions\handlers\bingpartnercode.luc C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
File created C:\Program Files\McAfee\Webadvisor\Analytics\Scripts\transport_mosaic_api_v2.js C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\configs\DateTimeLocaleConfigs\es-es.json C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\InspectMenu\[email protected] C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.80\Locales\ca-Es-VALENCIA.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\StudioSharedUI\DEPRECATED_pending_withbg.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\TerrainTools\mt_convert_part.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\VoiceChat\MicLight\Unmuted20.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\Controls\PlayStationController\[email protected] C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\VoiceChat\SpeakerDark\Muted.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.97\Locales\nb.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{05D726BC-F72F-454B-AD16-D78E42BA2953}\EDGEMITMP_28E2D.tmp\setup.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-webboost-sk-SK.js C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
File created C:\Program Files\ReasonLabs\Common\Client\v1.4.2\locales\et.pak C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\Controls\[email protected] C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\Controls\xboxX.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\ExtraContent\textures\ui\LuaApp\graphic\Auth\logo_white_luobu.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\particles\fire_color.dds C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\StudioToolbox\ArrowDownIconWhite.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files\ReasonLabs\EPP\EDR\System.Security.Cryptography.X509Certificates.dll C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\Controls\DefaultController\[email protected] C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files\ReasonLabs\EPP\EDR\System.Security.Cryptography.Csp.dll C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping3708_1932102521\Filtering Rules C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-sstoast-bing-cs-CZ.js C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\icudtl.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping3708_1535086814\json\i18n-hub\el\strings.json C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\fonts\GothamSSm-Bold.otf C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\content\textures\ui\scrollbuttonUp_ovr.png C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\NOTICE.TXT C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.97\Locales\ca.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{05D726BC-F72F-454B-AD16-D78E42BA2953}\EDGEMITMP_28E2D.tmp\setup.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\Installer\e6042ba.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\inprogressinstallinfo.ipi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\SourceHash{59C2C3AC-4B4D-49AC-8E31-C7DB8FD718B1} C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI767C.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e6042bc.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e6042ba.msi C:\Windows\system32\msiexec.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\UpperFilters C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Service C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\UpperFilters C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Service C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\DeviceDesc C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr C:\Windows\system32\vssvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 C:\Windows\system32\vssvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\DeviceDesc C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\LowerFilters C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000\LogConf C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\LowerFilters C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000\Control C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 00000000040000003f3ccc8c3b3921e10000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c01200000000ffffffff0000000027010100000800003f3ccc8c0000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d01200000000000020ed3a000000ffffffff0000000007000100006809003f3ccc8c000000000000d012000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff3a0000000000000005000000ffffffff000000000700010000f87f1d3f3ccc8c000000000000f0ff3a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000003f3ccc8c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 C:\Windows\system32\vssvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000\Control C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000\LogConf C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\system32\runonce.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key enumerated \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\system32\runonce.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\is-1T0RJ.tmp\Killer 7_L-x1Qr1.tmp N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\system32\runonce.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\system32\runonce.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\FeatureSet C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\Identifier C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ C:\Users\Admin\AppData\Local\Temp\is-1T0RJ.tmp\Killer 7_L-x1Qr1.tmp N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\VendorIdentifier C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\FeatureSet C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \Registry\Machine\Hardware\Description\System\CentralProcessor C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\taskmgr.exe N/A

Creates scheduled task(s)

persistence
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\schtasks.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\Taskkill.exe N/A
N/A N/A C:\Windows\system32\Taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\roblox-player C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\browser_assistant.exe = "9000" C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0" C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Software\Microsoft\Internet Explorer\GPU C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.80\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.80\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0" C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Internet Explorer\GPU C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0" C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\RestartManager\Session0000\SessionHash = 931f0304e78106b1d2e0526dbbda06e6a3bc212c1392a9a89cefd0d25673d078 C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix = "Visited:" C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" C:\Program Files\ReasonLabs\rsScanner_v3.9.1.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\My C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0" C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.80\\notification_click_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\image/svg+xml C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E}\ = "IAppWeb" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5F6A18BB-6231-424B-8242-19E5BB94F8ED} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\NumMethods\ = "41" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\ProxyStubClsid32\ = "{4E50ED6A-8A46-4CB9-9E77-B99CBFED1E68}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\CLASSES\MIME\Database C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\OperaStable\shell\open\ddeexec\Topic C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E421557C-0628-43FB-BF2B-7C9F8A4D067C}\Elevation C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\ie_to_edge_bho.IEToEdgeBHO\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1D3747B6-FED9-4795-BB56-E077C582FB69}\InprocHandler32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D1E8B1A6-32CE-443C-8E2E-EBA90C481353}\ = "Microsoft Edge Update Broker Class Factory" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\.html C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8}\ELEVATION C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5F6A18BB-6231-424B-8242-19E5BB94F8ED}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachine\CLSID\ = "{B5977F34-9264-4AC3-9B31-1224827FF6E8}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\APPID\MICROSOFTEDGEUPDATE.EXE C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\ = "IGoogleUpdate3" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E}\NumMethods\ = "17" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0}\NumMethods\ = "24" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\NumMethods\ = "24" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\OperaStable\DefaultIcon C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3COMClassService.1.0\CLSID\ = "{CECDDD22-2E72-4832-9606-A9B0E5E344B2}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\ = "IApp" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\ = "ICoCreateAsync" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E}\ProxyStubClsid32\ = "{4E50ED6A-8A46-4CB9-9E77-B99CBFED1E68}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell\open C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\magnet\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\is-BPOK5.tmp\\qbittorrent.exe\",1" C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusSvc\ = "Google Update Policy Status Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ = "IPolicyStatusValue" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\ProgID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C9C2B807-7731-4F34-81B7-44FF7779522B}\TypeLib\Version = "1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreClass\CurVer\ = "MicrosoftEdgeUpdate.CoreClass.1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4E50ED6A-8A46-4CB9-9E77-B99CBFED1E68}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2E1DD7EF-C12D-4F8E-8AD8-CF8CC265BAD0}\ProgID\ = "MicrosoftEdgeUpdate.CoreMachineClass.1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{E3D94CEB-EC11-46BE-8872-7DDCE37FABFA}\InprocHandler32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 1900000001000000100000005d1b8ff2c30f63f5b536edd400f7f9b40300000001000000140000004efc31460c619ecae59c1bce2c008036d94c84b809000000010000000c000000300a06082b060105050703031d00000001000000100000005467b0adde8d858e30ee517b1a19ecd91400000001000000140000001f00bf46800afc7839b7a5b443d95650bbce963b53000000010000001f000000301d301b060567810c010330123010060a2b0601040182373c0101030200c06200000001000000200000007b9d553e1c92cb6e8803e137f4f287d4363757f5d44b37d52f9fca22fb97df860b000000010000004200000047006c006f00620061006c005300690067006e00200043006f006400650020005300690067006e0069006e006700200052006f006f007400200052003400350000000f0000000100000030000000c130bba37b8b350e89fd5ed76b4f78777feee220d3b9e729042bef6af46e8e4c1b252e32b3080c681bc9a8a1afdd0a3c200000000100000076050000308205723082035aa00302010202107653feac75464893f5e5d74a483a4ef8300d06092a864886f70d01010c05003053310b300906035504061302424531193017060355040a1310476c6f62616c5369676e206e762d73613129302706035504031320476c6f62616c5369676e20436f6465205369676e696e6720526f6f7420523435301e170d3230303331383030303030305a170d3435303331383030303030305a3053310b300906035504061302424531193017060355040a1310476c6f62616c5369676e206e762d73613129302706035504031320476c6f62616c5369676e20436f6465205369676e696e6720526f6f742052343530820222300d06092a864886f70d01010105000382020f003082020a0282020100b62dc530dd7ae8ab903d0372b03a4b991661b2e5ffa5671d371ce57eec9383aa84f5a3439b98458ab863575d9b00880425e9f868924b82d84bc94a03f3a87f6a8f8a6127bda144d0fdf53f22c2a34f918db305b22882915dfb5988050b9706c298f82ca73324ee503a41ccf0a0b07b1d4dd2a8583896e9dff91b91bb8b102cd2c7431da20974a180af7be6330a0c596b8ebcf4ab5a977b7fae55fb84f080fe844cd7e2babdc475a16fbd61107444b29807e274abff68dc6c263ee91fe5e00487ad30d30c8d037c55b816705c24782025eb676788abba4e34986b7011de38cad4bea1c09ce1df1e0201d83be1674384b6cffc74b72f84a3bfba09373d676cb1455c1961ab4183f5ac1deb770d464773cebfbd9595ed9d2b8810fefa58e8a757e1b3cfa85ae907259b12c49e80723d93dc8c94df3b44e62680fcd2c303f08c0cd245d62ee78f989ee604ee426e677e42167162e704f960c664a1b69c81214e2bc66d689486c699747367317a91f2d48c796e7ca6bb7e466f4dc585122bcf9a224408a88537ce07615706171224c0c43173a1983557477e103a45d92da4519098a9a00737c4651aaa1c6b1677f7a797ec3f1930996f31fbea40b2e7d2c4fac9d0f050767459fa8d6d1732bef8e97e03f4e787759ad44a912c850313022b4280f2896a36cfc84ca0ce9ef8cb8dad16a7d3ded59b18a7c6923af18263f12e0e2464df0203010001a3423040300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e041604141f00bf46800afc7839b7a5b443d95650bbce963b300d06092a864886f70d01010c050003820201005e2bba749734445f764828408493ee016ee9a1b3d68025e67be4bc09913d0ffc76add7d43020bb8f60d091d61cf29cef781a2b943202c12496525202d0f3d1fcf29b396e99e11f8e43417d9a1e5bc95d9a84fc26e687f3747226ada41bd93d3b6a52a03c091e2f1e7bb333b445c7f7acb1af9360ad76aeb8b21578eb836aebffdb46ab24e5ee02fa901f59c02f5dd6b75da45c10b77253f8414eccfa781a254acafe85624361c3b437aa81d2f4d63a0fbd8d597e3047de2b6be72150335fd4679bd4b8679f3c279903ff85438e7312ca20cde861d5b166dc17d6396d0fdbcf2337a182894e1c6b3fd6a0cdaa079d3e4226aad70ceefa47bf1a527ed17581d3c98a62176d4f88a021a0263eaf6dd962301fe99828ae6e8dd58e4c726693808d2ae355c760679042565c22510fb3dc4e39ee4dddd91d7810543b6ed0976f03b51eb22373c612b29a64d0fc958524a8ffdfa1b0dc9140aedf0933abb9dd92b7f1cc91743b69eb67971b90bfe7c7a06f71bb57bfb78f5aed7a406a16cd80842d2fe102d4249443b315fc0c2b1bfd716ffccbbc75173a5e83d2c9b32f1bd59c8d7f54fe7e7ee456a387a79de1595294418f6d5bbe86959aff1a76dd40d2514a70b41f336323773fec271e59e40887ed34824a0f3ffea01dc1f56773458678f4aa29e92787c619dbc61314c33949874da097e06513f59d7756e9dab358c73af2c0cd82 C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod1_extract\saBSI.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 040000000100000010000000c5dfb849ca051355ee2dba1ac33eb0280f00000001000000200000005229ba15b31b0c6f4cca89c2985177974327d1b689a3b935a0bd975532af22ab090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b06010505070308530000000100000040000000303e301f06092b06010401a032010130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00b000000010000003000000047006c006f00620061006c005300690067006e00200052006f006f00740020004300410020002d002000520033000000620000000100000020000000cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b1400000001000000140000008ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc1d000000010000001000000001728e1ecf7a9d86fb3cec8948aba953030000000100000014000000d69b561148f01c77c54578c10926df5b856976ad190000000100000010000000d0fd3c9c380d7b65e26b9a3fedd39b8f2000000001000000630300003082035f30820247a003020102020b04000000000121585308a2300d06092a864886f70d01010b0500304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e301e170d3039303331383130303030305a170d3239303331383130303030305a304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e30820122300d06092a864886f70d01010105000382010f003082010a0282010100cc2576907906782216f5c083b684ca289efd057611c5ad8872fc460243c7b28a9d045f24cb2e4be1608246e152ab0c8147706cdd64d1ebf52ca30f823d0c2bae97d7b614861079bb3b1380778c08e149d26a622f1f5efa9668df892795389f06d73ec9cb26590d73deb0c8e9260e8315c6ef5b8bd20460ca49a628f6693bf6cbc82891e59d8a615737ac7414dc74e03aee722f2e9cfbd0bbbff53d00e10633e8822bae53a63a16738cdd410e203ac0b4a7a1e9b24f902e3260e957cbb904926868e538266075b29f77ff9114efae2049fcad401548d1023161195eb897efad77b7649a7abf5fc113ef9b62fb0d6ce0546916a903da6ee983937176c6698582170203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e041604148ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc300d06092a864886f70d01010b050003820101004b40dbc050aafec80ceff796544549bb96000941acb3138686280733ca6be674b9ba002daea40ad3f5f1f10f8abf73674a83c7447b78e0af6e6c6f03298e333945c38ee4b9576caafc1296ec53c62de4246cb99463fbdc536867563e83b8cf3521c3c968fecedac253aacc908ae9f05d468c95dd7a58281a2f1ddecd0037418fed446dd75328977ef367041e15d78a96b4d3de4c27a44c1b737376f41799c21f7a0ee32d08ad0a1c2cff3cab550e0f917e36ebc35749bee12e2d7c608bc3415113239dcef7326b9401a899e72c331f3a3b25d28640ce3b2c8678c9612f14baeedb556fdf84ee05094dbd28d872ced36250651eeb92978331d9b3b5ca47583f5f C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 5c000000010000000400000000100000190000000100000010000000ea6089055218053dd01e37e1d806eedf0300000001000000140000002b8f1b57330dbba2d07a6c51f70ee90ddab9ad8e0b00000001000000100000005300650063007400690067006f0000001d0000000100000010000000885010358d29a38f059b028559c95f901400000001000000140000005379bf5aaa2b4acf5480e1d89bc09df2b20366cb620000000100000020000000e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd253000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f000000010000003000000066b764a96581128168cf208e374dda479d54e311f32457f4aee0dbd2a6c8d171d531289e1cd22bfdbbd4cfd9796254830400000001000000100000001bfe69d191b71933a372a80fe155e5b52000000001000000e2050000308205de308203c6a003020102021001fd6d30fca3ca51a81bbc640e35032d300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3130303230313030303030305a170d3338303131383233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010080126517360ec3db08b3d0ac570d76edcd27d34cad508361e2aa204d092d6409dcce899fcc3da9ecf6cfc1dcf1d3b1d67b3728112b47da39c6bc3a19b45fa6bd7d9da36342b676f2a93b2b91f8e26fd0ec162090093ee2e874c918b491d46264db7fa306f188186a90223cbcfe13f087147bf6e41f8ed4e451c61167460851cb8614543fbc33fe7e6c9cff169d18bd518e35a6a766c87267db2166b1d49b7803c0503ae8ccf0dcbc9e4cfeaf0596351f575ab7ffcef93db72cb6f654ddc8e7123a4dae4c8ab75c9ab4b7203dca7f2234ae7e3b68660144e7014e46539b3360f794be5337907343f332c353efdbaafe744e69c76b8c6093dec4c70cdfe132aecc933b517895678bee3d56fe0cd0690f1b0ff325266b336df76e47fa7343e57e0ea566b1297c3284635589c40dc19354301913acd37d37a7eb5d3a6c355cdb41d712daa9490bdfd8808a0993628eb566cf2588cd84b8b13fa4390fd9029eeb124c957cf36b05a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe78b7fc6715e1c957841e0f63d6e962bad65f552eea5cc62808042539b80e2ba9f24c971c073f0d52f5edef2f820f0203010001a3423040301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff300d06092a864886f70d01010c050003820201005cd47c0dcff7017d4199650c73c5529fcbf8cf99067f1bda43159f9e0255579614f1523c27879428ed1f3a0137a276fc5350c0849bc66b4eba8c214fa28e556291f36915d8bc88e3c4aa0bfdefa8e94b552a06206d55782919ee5f305c4b241155ff249a6e5e2a2bee0b4d9f7ff70138941495430709fb60a9ee1cab128ca09a5ea7986a596d8b3f08fbc8d145af18156490120f73282ec5e2244efc58ecf0f445fe22b3eb2f8ed2d9456105c1976fa876728f8b8c36afbf0d05ce718de6a66f1f6ca67162c5d8d083720cf16711890c9c134c7234dfbcd571dfaa71dde1b96c8c3c125d65dabd5712b6436bffe5de4d661151cf99aeec17b6e871918cde49fedd3571a21527941ccf61e326bb6fa36725215de6dd1d0b2e681b3b82afec836785d4985174b1b9998089ff7f78195c794a602e9240ae4c372a2cc9c762c80e5df7365bcae0252501b4dd1a079c77003fd0dcd5ec3dd4fabb3fcc85d66f7fa92ddfb902f7f5979ab535dac367b0874aa9289e238eff5c276be1b04ff307ee002ed45987cb524195eaf447d7ee6441557c8d590295dd629dc2b9ee5a287484a59bb790c70c07dff589367432d628c1b0b00be09c4cc31cd6fce369b54746812fa282abd3634470c48dff2d33baad8f7bb57088ae3e19cf4028d8fcc890bb5d9922f552e658c51f883143ee881dd7c68e3c436a1da718de7d3d16f162f9ca90a8fd C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 040000000100000010000000be954f16012122448ca8bc279602acf50f000000010000003000000041ce925678dfe0ccaa8089263c242b897ca582089d14e5eb685fca967f36dbd334e97e81fd0e64815f851f914ade1a1e0b00000001000000800000004d006900630072006f0073006f006600740020004900640065006e007400690074007900200056006500720069006600690063006100740069006f006e00200052006f006f007400200043006500720074006900660069006300610074006500200041007500740068006f0072006900740079002000320030003200300000006200000001000000200000005367f20c7ade0e2bca790915056d086b720c33c1fa2a2661acf787e3292e1270090000000100000016000000301406082b0601050507030306082b06010505070308140000000100000014000000c87ed26a852a1bca1998040727cf50104f68a8a21d0000000100000010000000e78921f81cea4d4105d2b5f4afae0c78030000000100000014000000f40042e2e5f7e8ef8189fed15519aece42c3bfa21900000001000000100000009f687581f7ef744ecfc12b9cee6238f12000000001000000d0050000308205cc308203b4a00302010202105498d2d1d45b1995481379c811c08799300d06092a864886f70d01010c05003077310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e314830460603550403133f4d6963726f736f6674204964656e7469747920566572696669636174696f6e20526f6f7420436572746966696361746520417574686f726974792032303230301e170d3230303431363138333631365a170d3435303431363138343434305a3077310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e314830460603550403133f4d6963726f736f6674204964656e7469747920566572696669636174696f6e20526f6f7420436572746966696361746520417574686f72697479203230323030820222300d06092a864886f70d01010105000382020f003082020a0282020100b3912a07830667fd9e9de0c7c0b7a4e642047f0fa6db5ffbd55ad745a0fb770bf080f3a66d5a4d7953d8a08684574520c7a254fbc7a2bf8ac76e35f3a215c42f4ee34a8596490dffbe99d814f6bc2707ee429b2bf50b9206e4fd691365a89172f29884eb833d0ee4d771124821cb0dedf64749b79bf9c9c717b6844fffb8ac9ad773674985e386bd3740d02586d4deb5c26d626ad5a978bc2d6f49f9e56c1414fd14c7d3651637decb6ebc5e298dfd629b152cd605e6b9893233a362c7d7d6526708c42ef4562b9e0b87cceca7b4a6aaeb05cd1957a53a0b04271c91679e2d622d2f1ebedac020cb0419ca33fb89be98e272a07235be79e19c836fe46d176f90f33d008675388ed0e0499abbdbd3f830cad55788684d72d3bf6d7f71d8fdbd0dae926448b75b6f7926b5cd9b952184d1ef0f323d7b578cf345074c7ce05e180e35768b6d9ecb3674ab05f8e0735d3256946797250ac6353d9497e7c1448b80fdc1f8f47419e530f606fb21573e061c8b6b158627497b8293ca59e87547e83f38f4c75379a0b6b4e25c51efbd5f38c113e6780c955a2ec5405928cc0f24c0ecba0977239938a6b61cdac7ba20b6d737d87f37af08e33b71db6e731b7d9972b0e486335974b516007b506dc68613dafdc439823d24009a60daba94c005512c34ac50991387bbb30580b24d30025cb826835db46373efae23954f6028be37d55ba50203010001a3543052300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e04160414c87ed26a852a1bca1998040727cf50104f68a8a2301006092b06010401823715010403020100300d06092a864886f70d01010c05000382020100af6adde619e72d9443194ecbe9509564a50391028be236803b15a252c21619b66a5a5d744330f49bff607409b1211e90166dc5248f5c668863f44fcc7df2124c40108b019fdaa9c8aef2951bcf9d05eb493e74a0685be5562c651c827e53da56d94617799245c4103608522917cb2fa6f27ed469248a1e8fb0730dcc1c4aabb2aaeda79163016422a832b87e3228b367732d91b4dc31010bf7470aa6f1d74aed5660c42c08a37b40b0bc74275287d6be88dd378a896e67881df5c95da0feb6ab3a80d71a973c173622411eac4dd583e63c38bd4f30e954a9d3b604c3327661bbb018c52b18b3c080d5b795b05e514d22fcec58aae8d894b4a52eed92dee7187c2157dd5563f7bf6dcd1fd2a6772870c7e25b3a5b08d25b4ec80096b3e18336af860a655c74f6eaec7a6a74a0f04beeef94a3ac50f287edd73a3083c9fb7d57bee5e3f841cae564aeb3a3ec58ec859accefb9eaf35618b95c739aafc577178359db371a187254a541d2b62375a3439ae5777c9679b7418dbfecdc80a09fd17775585f3513e0251a670b7dce25fa070ae46121d8d41ce507c63699f496d0c615fe4ecdd7ae8b9ddb16fd04c692bdd488e6a9a3aabbf764383b5fcc0cd035be741903a6c5aa4ca26136823e1df32bbc975ddb4b783b2df53bef6023e8f5ec0b233695af9866bf53d37bb8694a2a966669c494c6f45f6eac98788880065ca2b2eda2 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 04000000010000001000000078f2fcaa601f2fb4ebc937ba532e7549030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e41d0000000100000010000000a86dc6a233eb339610f3ed414927c559140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac899880b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b06010505070308530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e19962000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8 C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod1_extract\saBSI.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod1_extract\saBSI.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 0f000000010000003000000066b764a96581128168cf208e374dda479d54e311f32457f4aee0dbd2a6c8d171d531289e1cd22bfdbbd4cfd979625483090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b0601050507030853000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0620000000100000020000000e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd21400000001000000140000005379bf5aaa2b4acf5480e1d89bc09df2b20366cb1d0000000100000010000000885010358d29a38f059b028559c95f900b00000001000000100000005300650063007400690067006f0000000300000001000000140000002b8f1b57330dbba2d07a6c51f70ee90ddab9ad8e2000000001000000e2050000308205de308203c6a003020102021001fd6d30fca3ca51a81bbc640e35032d300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3130303230313030303030305a170d3338303131383233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010080126517360ec3db08b3d0ac570d76edcd27d34cad508361e2aa204d092d6409dcce899fcc3da9ecf6cfc1dcf1d3b1d67b3728112b47da39c6bc3a19b45fa6bd7d9da36342b676f2a93b2b91f8e26fd0ec162090093ee2e874c918b491d46264db7fa306f188186a90223cbcfe13f087147bf6e41f8ed4e451c61167460851cb8614543fbc33fe7e6c9cff169d18bd518e35a6a766c87267db2166b1d49b7803c0503ae8ccf0dcbc9e4cfeaf0596351f575ab7ffcef93db72cb6f654ddc8e7123a4dae4c8ab75c9ab4b7203dca7f2234ae7e3b68660144e7014e46539b3360f794be5337907343f332c353efdbaafe744e69c76b8c6093dec4c70cdfe132aecc933b517895678bee3d56fe0cd0690f1b0ff325266b336df76e47fa7343e57e0ea566b1297c3284635589c40dc19354301913acd37d37a7eb5d3a6c355cdb41d712daa9490bdfd8808a0993628eb566cf2588cd84b8b13fa4390fd9029eeb124c957cf36b05a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe78b7fc6715e1c957841e0f63d6e962bad65f552eea5cc62808042539b80e2ba9f24c971c073f0d52f5edef2f820f0203010001a3423040301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff300d06092a864886f70d01010c050003820201005cd47c0dcff7017d4199650c73c5529fcbf8cf99067f1bda43159f9e0255579614f1523c27879428ed1f3a0137a276fc5350c0849bc66b4eba8c214fa28e556291f36915d8bc88e3c4aa0bfdefa8e94b552a06206d55782919ee5f305c4b241155ff249a6e5e2a2bee0b4d9f7ff70138941495430709fb60a9ee1cab128ca09a5ea7986a596d8b3f08fbc8d145af18156490120f73282ec5e2244efc58ecf0f445fe22b3eb2f8ed2d9456105c1976fa876728f8b8c36afbf0d05ce718de6a66f1f6ca67162c5d8d083720cf16711890c9c134c7234dfbcd571dfaa71dde1b96c8c3c125d65dabd5712b6436bffe5de4d661151cf99aeec17b6e871918cde49fedd3571a21527941ccf61e326bb6fa36725215de6dd1d0b2e681b3b82afec836785d4985174b1b9998089ff7f78195c794a602e9240ae4c372a2cc9c762c80e5df7365bcae0252501b4dd1a079c77003fd0dcd5ec3dd4fabb3fcc85d66f7fa92ddfb902f7f5979ab535dac367b0874aa9289e238eff5c276be1b04ff307ee002ed45987cb524195eaf447d7ee6441557c8d590295dd629dc2b9ee5a287484a59bb790c70c07dff589367432d628c1b0b00be09c4cc31cd6fce369b54746812fa282abd3634470c48dff2d33baad8f7bb57088ae3e19cf4028d8fcc890bb5d9922f552e658c51f883143ee881dd7c68e3c436a1da718de7d3d16f162f9ca90a8fd C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 0f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b060105050703080b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f1d0000000100000010000000a86dc6a233eb339610f3ed414927c559030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e42000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e C:\Program Files\McAfee\Temp4134757966\installer.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod1_extract\saBSI.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod1_extract\saBSI.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 C:\Program Files\McAfee\Temp4134757966\installer.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 571793.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 341525.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Script User-Agent

Description Indicator Process Target
HTTP User-Agent header Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) N/A N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A C:\Windows\SYSTEM32\fltmc.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: 35 N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\system\Google.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\system\Google.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod0.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe N/A
Token: 33 N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\Temp\MUBSTemp\BCILauncher.EXE N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\wevtutil.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\wevtutil.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\SYSTEM32\fltmc.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\wevtutil.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\wevtutil.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeBackupPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeBackupPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\nsc97E0.tmp\RAVVPN-installer.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\nsc97E0.tmp\RAVVPN-installer.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\nsc97E0.tmp\RAVVPN-installer.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\nsc97E0.tmp\RAVVPN-installer.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\VPN\rsVPNSvc.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\ReasonLabs\VPN\rsVPNSvc.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3032 wrote to memory of 4828 N/A C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe
PID 3032 wrote to memory of 4828 N/A C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe
PID 3032 wrote to memory of 4828 N/A C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe
PID 3032 wrote to memory of 4264 N/A C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe
PID 3032 wrote to memory of 4264 N/A C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe
PID 3032 wrote to memory of 4264 N/A C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe
PID 4264 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe
PID 4264 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe
PID 4264 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe
PID 4264 wrote to memory of 1672 N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
PID 4264 wrote to memory of 1672 N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
PID 4264 wrote to memory of 1672 N/A C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
PID 1672 wrote to memory of 5088 N/A C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe
PID 1672 wrote to memory of 5088 N/A C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe
PID 1672 wrote to memory of 5088 N/A C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe
PID 5088 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
PID 5088 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
PID 5088 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
PID 5088 wrote to memory of 4692 N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
PID 5088 wrote to memory of 4692 N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
PID 5088 wrote to memory of 4692 N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
PID 4692 wrote to memory of 4916 N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
PID 4692 wrote to memory of 4916 N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
PID 4692 wrote to memory of 4696 N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
PID 4692 wrote to memory of 4696 N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
PID 4692 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
PID 4692 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
PID 5088 wrote to memory of 4440 N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
PID 5088 wrote to memory of 4440 N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
PID 5088 wrote to memory of 4440 N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
PID 5088 wrote to memory of 1316 N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
PID 5088 wrote to memory of 1316 N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
PID 5088 wrote to memory of 1316 N/A C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
PID 1336 wrote to memory of 1532 N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
PID 1336 wrote to memory of 1532 N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
PID 1336 wrote to memory of 1532 N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
PID 4368 wrote to memory of 4268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 4268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4368 wrote to memory of 2264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

System policy modification

evasion
Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy WMI provider

ransomware

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe

C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe --crashpad --no-rate-limit --database=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --metrics-dir=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --url=https://upload.crashes.rbxinfra.com/post --annotation=RobloxChannel=production --annotation=RobloxGitHash=3b50cd7a1711a7bcc79000fcd87d819e29d4aca7 --annotation=UploadAttachmentKiloByteLimit=100 --annotation=UploadPercentage=100 --annotation=format=minidump --annotation=token=a2440b0bfdada85f34d79b43839f2b49ea6bba474bd7d126e844bc119271a1c3 --initial-client-data=0x6e4,0x634,0x7b8,0x774,0x7c0,0x32eff4,0x32f004,0x32f014

C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe

C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe --crashpad --no-rate-limit --database=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --metrics-dir=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --url=https://uploads.backtrace.rbx.com/post --annotation=RobloxChannel=production --annotation=RobloxGitHash=ce85e2d3116edeac8759c2321c39314dee13b8a2 --annotation=UploadAttachmentKiloByteLimit=100 --annotation=UploadPercentage=100 --annotation=format=minidump --annotation=token=a2440b0bfdada85f34d79b43839f2b49ea6bba474bd7d126e844bc119271a1c3 --initial-client-data=0x554,0x570,0x574,0x544,0x588,0xc86bfc,0xc86c0c,0xc86c1c

C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7M0Y4REEzQkUtNDc0Ny00MEE0LTk5MjItMDY5Q0M0NzZBRkQ2fSIgdXNlcmlkPSJ7MEY5MkYwMzMtRDIwNS00NEYxLTlBNzQtMkY0MzgyRDVDMkExfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InszNjFCMjc0Qi04QzcwLTQzRDEtQkI5QS0wNzEwMDVGQjRFMzF9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7RHhPYmpIR2ErblJhMmF0QzN3bytJRXBDNzgrWlllQVVia1hwREMyY2o3VT0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE4Ny4zNyIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjQ4NTM4NTY0NzIiIGluc3RhbGxfdGltZV9tcz0iNzkxIi8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{3F8DA3BE-4747-40A4-9922-069CC476AFD6}" /silent

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7M0Y4REEzQkUtNDc0Ny00MEE0LTk5MjItMDY5Q0M0NzZBRkQ2fSIgdXNlcmlkPSJ7MEY5MkYwMzMtRDIwNS00NEYxLTlBNzQtMkY0MzgyRDVDMkExfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins4REI1NjVBNC1ERjAyLTQwQjktOUVDRi0yOTlGRTNFNEQzN0J9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7cjQ1MnQxK2syVGdxL0hYemp2Rk5CUmhvcEJXUjlzYmpYeHFlVURIOXVYMD0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTEwLjAuNTQ4MS4xMDQiIG5leHR2ZXJzaW9uPSIxMTAuMC41NDgxLjEwNCIgbGFuZz0iZW4iIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjUiIHN5c3RlbV91cHRpbWVfdGlja3M9IjQ4NTc5NjY1MjciLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffbf7dc46f8,0x7ffbf7dc4708,0x7ffbf7dc4718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2944 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3440 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3448 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5008 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5116 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3520 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3520 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3488 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4048 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3540 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4884 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5720 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5308 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5748 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6400 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{05D726BC-F72F-454B-AD16-D78E42BA2953}\MicrosoftEdge_X64_124.0.2478.97.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{05D726BC-F72F-454B-AD16-D78E42BA2953}\MicrosoftEdge_X64_124.0.2478.97.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{05D726BC-F72F-454B-AD16-D78E42BA2953}\EDGEMITMP_28E2D.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{05D726BC-F72F-454B-AD16-D78E42BA2953}\EDGEMITMP_28E2D.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{05D726BC-F72F-454B-AD16-D78E42BA2953}\MicrosoftEdge_X64_124.0.2478.97.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{05D726BC-F72F-454B-AD16-D78E42BA2953}\EDGEMITMP_28E2D.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{05D726BC-F72F-454B-AD16-D78E42BA2953}\EDGEMITMP_28E2D.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.201 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{05D726BC-F72F-454B-AD16-D78E42BA2953}\EDGEMITMP_28E2D.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.97 --initial-client-data=0x22c,0x230,0x234,0x208,0x238,0x7ff72cd588c0,0x7ff72cd588cc,0x7ff72cd588d8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6260 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6612 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5964 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7M0Y4REEzQkUtNDc0Ny00MEE0LTk5MjItMDY5Q0M0NzZBRkQ2fSIgdXNlcmlkPSJ7MEY5MkYwMzMtRDIwNS00NEYxLTlBNzQtMkY0MzgyRDVDMkExfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntDQzNBODg5Qi00MTg3LTRFRUQtODUyNS01RUM1NjZEQTNCRDB9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7VlBRb1AxRitmcTE1d1J6aDFrUEw0UE1wV2g4T1JNQjVpenZyT0MvY2hqUT0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjMwMTcyMjYtRkUyQS00Mjk1LThCREYtMDBDM0E5QTdFNEM1fSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMTI0LjAuMjQ3OC45NyIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGluc3RhbGxhZ2U9Ii0xIiBpbnN0YWxsZGF0ZT0iLTEiPjx1cGRhdGVjaGVjay8-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_UDE9MTcxNjA0MjUwOCZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1IQTJLSGxSclQ4UlFNckxpenBjS1JoTTlJOE84M3hZc2lYSFhkQmJ4ejY5MnhFSVNDU0hDeiUyYnAweGlSNzY1MjdVdWhZY2RoN1BndEFpUGVWMDI5dmZ3JTNkJTNkIiBzZXJ2ZXJfaXBfaGludD0iIiBjZG5fY2lkPSItMSIgY2RuX2NjYz0iIiBjZG5fbXNlZGdlX3JlZj0iIiBjZG5fYXp1cmVfcmVmX29yaWdpbl9zaGllbGQ9IiIgY2RuX2NhY2hlPSIiIGNkbl9wM3A9IiIgZG93bmxvYWRlZD0iMTcyODIxMDY0IiB0b3RhbD0iMTcyODIxMDY0IiBkb3dubG9hZF90aW1lX21zPSIzMDc2NiIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjUyNTYwNTYyMTMiIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSI2IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1MjczODg2NTg0IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1NzM4NjA2NDg2IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iNzIzIiBkb3dubG9hZF90aW1lX21zPSIzODcwOCIgZG93bmxvYWRlZD0iMTcyODIxMDY0IiB0b3RhbD0iMTcyODIxMDY0IiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMCIgaW5zdGFsbF90aW1lX21zPSI0NjQ2NyIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6196 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6516 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5000 /prefetch:8

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.zip"

C:\Users\Admin\AppData\Local\Temp\7zO4C5A018A\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C5A018A\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Windows\SysWOW64\schtasks.exe

schtasks /create /f /sc ONLOGON /RL HIGHEST /tn LimeRAT-Admin /tr "'C:\Users\Admin\AppData\Local\Temp\system\Google.exe'"

C:\Users\Admin\AppData\Local\Temp\system\Google.exe

"C:\Users\Admin\AppData\Local\Temp\system\Google.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C5ED5AA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C5ED5AA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C5A1ADA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C5A1ADA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C5409DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C5409DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C5E08DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C5E08DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C580FDA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C580FDA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C536EDA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C536EDA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C5BBCDA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C5BBCDA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C5173DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C5173DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C5862DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C5862DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C5341DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C5341DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C5DB7DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C5DB7DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C54A6DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C54A6DA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C512BCA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C512BCA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C597ACA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C597ACA\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C5D18AB\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C5D18AB\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C545FAB\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C545FAB\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Users\Admin\AppData\Local\Temp\7zO4C5FBDAB\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

"C:\Users\Admin\AppData\Local\Temp\7zO4C5FBDAB\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2780 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2784 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=212 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6048 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7148 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5940 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7040 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6468 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4300 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1812 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6324 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2792 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7564 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6324 /prefetch:8

C:\Users\Admin\Downloads\Killer 7_L-x1Qr1.exe

"C:\Users\Admin\Downloads\Killer 7_L-x1Qr1.exe"

C:\Users\Admin\AppData\Local\Temp\is-1T0RJ.tmp\Killer 7_L-x1Qr1.tmp

"C:\Users\Admin\AppData\Local\Temp\is-1T0RJ.tmp\Killer 7_L-x1Qr1.tmp" /SL5="$100428,13603942,780800,C:\Users\Admin\Downloads\Killer 7_L-x1Qr1.exe"

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod0.exe

"C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod0.exe" -ip:"dui=310807ab-751f-4d81-ae09-b202eaf21e19&dit=20240511143343&is_silent=true&oc=ZB_RAV_Cross_Tri_NCB&p=d267&a=100&b=em&se=true" -vp:"dui=310807ab-751f-4d81-ae09-b202eaf21e19&dit=20240511143343&oc=ZB_RAV_Cross_Tri_NCB&p=d267&a=100&oip=26&ptl=7&dta=true" -dp:"dui=310807ab-751f-4d81-ae09-b202eaf21e19&dit=20240511143343&oc=ZB_RAV_Cross_Tri_NCB&p=d267&a=100" -i -v -d -se=true

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod1_extract\saBSI.exe

"C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod1_extract\saBSI.exe" /affid 91082 PaidDistribution=true CountryCode=GB

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe

"C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe" --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:opera_new_b

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.38 --initial-client-data=0x2c4,0x2c8,0x2cc,0x29c,0x2d0,0x6d96e1d0,0x6d96e1dc,0x6d96e1e8

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\OperaSetup.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\OperaSetup.exe" --version

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe

"C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe" --backend --install --import-browser-data=0 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=2672 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_20240511143356" --session-guid=f09fea7b-2c80-48b1-964c-1b6430511926 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=2C05000000000000

C:\Users\Admin\AppData\Local\Temp\wwlattsq.exe

"C:\Users\Admin\AppData\Local\Temp\wwlattsq.exe" /silent

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.38 --initial-client-data=0x2bc,0x2c0,0x2d0,0x298,0x2d4,0x6ce2e1d0,0x6ce2e1dc,0x6ce2e1e8

C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe

"C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\RAVEndPointProtection-installer.exe" "C:\Users\Admin\AppData\Local\Temp\wwlattsq.exe" /silent

C:\Windows\SysWOW64\netsh.exe

"netsh" firewall add allowedprogramC:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe "qBittorrent" ENABLE

C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe

"C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe" -i -bn:ReasonLabs -pn:EPP -lpn:rav_antivirus -url:https://update.reasonsecurity.com/v2/live -dt:10

C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe

"C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe" -pn:EPP -lpn:rav_antivirus -url:https://update.reasonsecurity.com/v2/live -bn:ReasonLabs -dt:10

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe

"C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\qbittorrent.exe" magnet:?xt=urn:btih:C8714B5F4799A6B30BADA30033FFF7F4FABF1FA1

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod1_extract\installer.exe

"C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod1_extract\\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade

C:\Program Files\McAfee\Temp4134757966\installer.exe

"C:\Program Files\McAfee\Temp4134757966\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\win32\WSSDep.dll"

C:\Windows\SysWOW64\regsvr32.exe

/s "C:\Program Files\McAfee\WebAdvisor\win32\WSSDep.dll"

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\x64\WSSDep.dll"

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\win32\DownloadScan.dll"

C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe

"C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"

C:\Windows\SysWOW64\regsvr32.exe

/s "C:\Program Files\McAfee\WebAdvisor\win32\DownloadScan.dll"

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\Assistant_109.0.5097.45_Setup.exe_sfx.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\Assistant_109.0.5097.45_Setup.exe_sfx.exe"

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\x64\DownloadScan.dll"

C:\Program Files\McAfee\WebAdvisor\UIHost.exe

"C:\Program Files\McAfee\WebAdvisor\UIHost.exe"

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe" --version

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.45 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x10f6038,0x10f6044,0x10f6050

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Program Files\McAfee\WebAdvisor\updater.exe

"C:\Program Files\McAfee\WebAdvisor\updater.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0374AC67-8791-49B1-B224-8E637682414C}\BGAUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0374AC67-8791-49B1-B224-8E637682414C}\BGAUpdate.exe" --edgeupdate-client --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MzVFRDAzMUYtM0NCQS00N0RCLUExOTktQUEzQ0QyNENFRjc2fSIgdXNlcmlkPSJ7MEY5MkYwMzMtRDIwNS00NEYxLTlBNzQtMkY0MzgyRDVDMkExfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntGMUYwRkM2QS0yODk3LTQwNkUtODU3Qi1BOUIxNkEwMTMyMTl9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7cjQ1MnQxK2syVGdxL0hYemp2Rk5CUmhvcEJXUjlzYmpYeHFlVURIOXVYMD0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7MUZBQjhDRkUtOTg2MC00MTVDLUE2Q0EtQUE3RDEyMDIxOTQwfSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMi4wLjAuMzQiIGxhbmc9IiIgYnJhbmQ9IkVVRkkiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgaW5zdGFsbGFnZT0iLTEiIGluc3RhbGxkYXRlPSItMSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI3ODUyMTk2NDQ1IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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_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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iODU2NzA4NjU3NSIgc291cmNlX3VybF9pbmRleD0iMCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjU5OCIgZG93bmxvYWRfdGltZV9tcz0iNjk2NzciIGRvd25sb2FkZWQ9IjE4MDQ0NDQ4IiB0b3RhbD0iMTgwNDQ0NDgiIHBhY2thZ2VfY2FjaGVfcmVzdWx0PSIwIiBpbnN0YWxsX3RpbWVfbXM9IjI4NiIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Windows\system32\rundll32.exe

"C:\Windows\system32\rundll32.exe" setupapi.dll,InstallHinfSection DefaultInstall 128 C:\Program Files\ReasonLabs\EPP\x64\rsKernelEngine.inf

C:\Windows\system32\runonce.exe

"C:\Windows\system32\runonce.exe" -r

C:\Windows\Temp\MUBSTemp\BCILauncher.EXE

"C:\Windows\Temp\MUBSTemp\BCILauncher.EXE" bgaupmi=54CD468A37DE4FE691A9914214B4F423

C:\Windows\Temp\MUBSTemp\BingChatInstaller.exe

"C:\Windows\Temp\MUBSTemp\BingChatInstaller.exe" BGAUPMI=54CD468A37DE4FE691A9914214B4F423

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7304 /prefetch:1

C:\Windows\System32\grpconv.exe

"C:\Windows\System32\grpconv.exe" -o

C:\Windows\system32\wevtutil.exe

"C:\Windows\system32\wevtutil.exe" im C:\Program Files\ReasonLabs\EPP\x64\rsKernelEngineEvents.xml

C:\Windows\SYSTEM32\fltmc.exe

"fltmc.exe" load rsKernelEngine

C:\Windows\system32\wevtutil.exe

"C:\Windows\system32\wevtutil.exe" im C:\Program Files\ReasonLabs\EPP\elam\evntdrv.xml

C:\Program Files\ReasonLabs\EPP\rsWSC.exe

"C:\Program Files\ReasonLabs\EPP\rsWSC.exe" -i -i

C:\Program Files\ReasonLabs\EPP\rsWSC.exe

"C:\Program Files\ReasonLabs\EPP\rsWSC.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4932 /prefetch:1

C:\Program Files\ReasonLabs\EPP\rsClientSvc.exe

"C:\Program Files\ReasonLabs\EPP\rsClientSvc.exe" -i -i

C:\Program Files\ReasonLabs\EPP\rsClientSvc.exe

"C:\Program Files\ReasonLabs\EPP\rsClientSvc.exe"

C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe

"C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe" -i -i

C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe

"C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe"

C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe

"C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe" -i -i

C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe

"C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe"

C:\Users\Admin\AppData\Local\Temp\3mmcwwuu.exe

"C:\Users\Admin\AppData\Local\Temp\3mmcwwuu.exe" /silent

C:\Users\Admin\AppData\Local\Temp\nsc97E0.tmp\RAVVPN-installer.exe

"C:\Users\Admin\AppData\Local\Temp\nsc97E0.tmp\RAVVPN-installer.exe" "C:\Users\Admin\AppData\Local\Temp\3mmcwwuu.exe" /silent

C:\Program Files\ReasonLabs\VPN\rsVPNClientSvc.exe

"C:\Program Files\ReasonLabs\VPN\rsVPNClientSvc.exe" -i -i

C:\Program Files\ReasonLabs\VPN\rsVPNClientSvc.exe

"C:\Program Files\ReasonLabs\VPN\rsVPNClientSvc.exe"

C:\Program Files\ReasonLabs\VPN\rsVPNSvc.exe

"C:\Program Files\ReasonLabs\VPN\rsVPNSvc.exe" -i -i

C:\Program Files\ReasonLabs\VPN\rsVPNSvc.exe

"C:\Program Files\ReasonLabs\VPN\rsVPNSvc.exe"

\??\c:\program files\reasonlabs\epp\rsHelper.exe

"c:\program files\reasonlabs\epp\rsHelper.exe"

\??\c:\program files\reasonlabs\VPN\ui\VPN.exe

"c:\program files\reasonlabs\VPN\ui\VPN.exe" --minimized --focused --first-run

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" "c:\program files\reasonlabs\VPN\ui\app.asar" --engine-path="c:\program files\reasonlabs\VPN" --minimized --focused --first-run

C:\Windows\system32\wbem\WmiApSrv.exe

C:\Windows\system32\wbem\WmiApSrv.exe

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

\??\c:\program files\reasonlabs\EPP\ui\EPP.exe

"c:\program files\reasonlabs\EPP\ui\EPP.exe" --minimized --first-run

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" "c:\program files\reasonlabs\EPP\ui\app.asar" --engine-path="c:\program files\reasonlabs\EPP" --minimized --first-run

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\VPN" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2212 --field-trial-handle=2216,i,7184140120074210723,10589574119823190043,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\VPN" --mojo-platform-channel-handle=2664 --field-trial-handle=2216,i,7184140120074210723,10589574119823190043,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\VPN" --app-user-model-id=com.reasonlabs.vpn --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2744 --field-trial-handle=2216,i,7184140120074210723,10589574119823190043,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Users\Admin\AppData\Local\Temp\rp5vokfk.exe

"C:\Users\Admin\AppData\Local\Temp\rp5vokfk.exe" /silent

C:\Users\Admin\AppData\Local\Temp\nsh252B.tmp\SaferWeb-installer.exe

"C:\Users\Admin\AppData\Local\Temp\nsh252B.tmp\SaferWeb-installer.exe" "C:\Users\Admin\AppData\Local\Temp\rp5vokfk.exe" /silent

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2256 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=2580 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2832 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\VPN" --app-user-model-id=com.reasonlabs.vpn --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3872 --field-trial-handle=2216,i,7184140120074210723,10589574119823190043,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3828 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

\??\c:\windows\system32\rundll32.exe

"c:\windows\system32\rundll32.exe" setupapi.dll,InstallHinfSection DefaultInstall 128 C:\Program Files\ReasonLabs\DNS\rsDwf.inf

C:\Windows\system32\runonce.exe

"C:\Windows\system32\runonce.exe" -r

C:\Windows\System32\grpconv.exe

"C:\Windows\System32\grpconv.exe" -o

C:\Program Files\ReasonLabs\DNS\rsDNSClientSvc.exe

"C:\Program Files\ReasonLabs\DNS\rsDNSClientSvc.exe" -i -i

C:\Program Files\ReasonLabs\DNS\rsDNSClientSvc.exe

"C:\Program Files\ReasonLabs\DNS\rsDNSClientSvc.exe"

C:\Program Files\ReasonLabs\DNS\rsDNSResolver.exe

"C:\Program Files\ReasonLabs\DNS\rsDNSResolver.exe" -i -service install

C:\Program Files\ReasonLabs\DNS\rsDNSResolver.exe

"C:\Program Files\ReasonLabs\DNS\rsDNSResolver.exe" -service install

C:\Program Files\ReasonLabs\DNS\rsDNSResolver.exe

"C:\Program Files\ReasonLabs\DNS\rsDNSResolver.exe"

C:\Program Files\ReasonLabs\DNS\rsDNSSvc.exe

"C:\Program Files\ReasonLabs\DNS\rsDNSSvc.exe" -i -i

C:\Program Files\ReasonLabs\DNS\rsDNSSvc.exe

"C:\Program Files\ReasonLabs\DNS\rsDNSSvc.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2224 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=7472 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6988 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=7660 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7108 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6860 /prefetch:8

\??\c:\program files\reasonlabs\DNS\ui\DNS.exe

"c:\program files\reasonlabs\DNS\ui\DNS.exe" --minimized --focused --first-run

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" "c:\program files\reasonlabs\DNS\ui\app.asar" --engine-path="c:\program files\reasonlabs\DNS" --minimized --focused --first-run

C:\Windows\system32\wbem\WmiApSrv.exe

C:\Windows\system32\wbem\WmiApSrv.exe

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\DNS" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2356 --field-trial-handle=2360,i,3597154175100690155,2448506014526648790,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\DNS" --mojo-platform-channel-handle=2580 --field-trial-handle=2360,i,3597154175100690155,2448506014526648790,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\DNS" --app-user-model-id=com.reasonlabs.dns --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2740 --field-trial-handle=2360,i,3597154175100690155,2448506014526648790,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Windows\system32\wbem\WmiApSrv.exe

C:\Windows\system32\wbem\WmiApSrv.exe

C:\program files\reasonlabs\epp\rsLitmus.A.exe

"C:\program files\reasonlabs\epp\rsLitmus.A.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{56E08843-1A17-4A86-A222-9629484928D6}\MicrosoftEdgeUpdateSetup_X86_1.3.187.37.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{56E08843-1A17-4A86-A222-9629484928D6}\MicrosoftEdgeUpdateSetup_X86_1.3.187.37.exe" /update /sessionid "{DA592171-D90D-4FCF-9055-C9B8E3F24A6D}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7REE1OTIxNzEtRDkwRC00RkNGLTkwNTUtQzlCOEUzRjI0QTZEfSIgdXNlcmlkPSJ7MEY5MkYwMzMtRDIwNS00NEYxLTlBNzQtMkY0MzgyRDVDMkExfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntDNUI4NDEyQy1FRkIxLTQxMTItQTJEMi0zQUJGNERDMzhFMkF9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-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-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-PHBpbmcgcj0iMyIgcmQ9IjYzMzciIHBpbmdfZnJlc2huZXNzPSJ7MkY4OTMxNEItMDVFRS00QjVBLThGNUUtMjBGNEQwMjJDMDFEfSIvPjwvYXBwPjxhcHAgYXBwaWQ9Ins1NkVCMThGOC1CMDA4LTRDQkQtQjZEMi04Qzk3RkU3RTkwNjJ9IiB2ZXJzaW9uPSI5Mi4wLjkwMi42NyIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJjb25zZW50PWZhbHNlIiBpbnN0YWxsYWdlPSIyIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1OTkxMTMyNTYzMTI0MjAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSIzIiByPSIzIiBhZD0iNjMzNyIgcmQ9IjYzMzciIHBpbmdfZnJlc2huZXNzPSJ7NjdDRTBDNjEtNTA5MC00NjAzLUEwODMtMUU5QUZCREExRTIyfSIvPjwvYXBwPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIxMjQuMC4yNDc4Ljk3IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iMCIgaW5zdGFsbGRhdGU9IjYzMzUiPjx1cGRhdGVjaGVjay8-PHBpbmcgcj0iLTEiIHJkPSItMSIgcGluZ19mcmVzaG5lc3M9Ins4QzU2QTAyMS0wOUMxLTQ4QTUtQkE1MS1DQUVBREE5RUQ0OUV9Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\Temp\EU345.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU345.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{DA592171-D90D-4FCF-9055-C9B8E3F24A6D}"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6636 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IjEuMy4xNzEuMzkiIG5leHR2ZXJzaW9uPSIxLjMuMTg3LjM3IiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iMiIgaW5zdGFsbGRhdGV0aW1lPSIxNzE1MTk1MzQ0Ij48ZXZlbnQgZXZlbnR0eXBlPSIzIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI5Njg2MTQxOTU3Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5412 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6392 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7656 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6444 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7044 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7392 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7132 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8360 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8496 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8808 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8584 /prefetch:1

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\44d9ca8ec43a253091b8994afd3fb22a78f892f201eaf7b21cc5252843b6326a.zip"

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\VPN" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=3428 --field-trial-handle=2216,i,7184140120074210723,10589574119823190043,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4348 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Windows\System32\msiexec.exe

"C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\7zO0B279E6F\44d9ca8ec43a253091b8994afd3fb22a78f892f201eaf7b21cc5252843b6326a.msi"

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\srtasks.exe

C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding DA435EC694A67F1DBC9E68581D5FF414

C:\Users\Admin\AppData\Local\Programs\GiliSoft AI Community\AndroidAssistServer.exe

"C:\Users\Admin\AppData\Local\Programs\GiliSoft AI Community\AndroidAssistServer.exe"

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x304 0x4a8

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\DNS" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=3836 --field-trial-handle=2360,i,3597154175100690155,2448506014526648790,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5868 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Magic Inventor Factory Suite\AndroidAssistServer.exe

"C:\Users\Admin\AppData\Local\Programs\Magic Inventor Factory Suite\AndroidAssistServer.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8416 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7316 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8704 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8520 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8140 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8508 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8024 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8012 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8744 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9140 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8764 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8040 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8552 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6284 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8560 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6716 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9280 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9208 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9296 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9364 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7984 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9472 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5540 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8084 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9388 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9260 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10188 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8128 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10196 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9944 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10024 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8128 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9644 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9640 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9840 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9736 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9368 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9472 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9888 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10112 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10120 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8760 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9260 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10212 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3524 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9556 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10284 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10736 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10416 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=10480 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10876 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10824 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10908 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11052 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8372 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8776 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10960 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4124 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PGFwcCBhcHBpZD0iezhBNjlEMzQ1LUQ1NjQtNDYzYy1BRkYxLUE2OUQ5RTUzMEY5Nn0iIHZlcnNpb249IjExMC4wLjU0ODEuMTA0IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIzIiBpbnN0YWxsZGF0ZXRpbWU9IjE3MTUxNzEyMzUiIG9vYmVfaW5zdGFsbF90aW1lPSIxMzM1OTY2ODkzOTQwNjc5MTAiIGZpcnN0X2ZyZV9zZWVuX3RpbWU9IjEzMzU5OTExNjE1Nzc1MjI5MCI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjIzMTA2NzYiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMDI5NzI2NDM3Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe

"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4724 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=160 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7452 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=161 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7024 /prefetch:1

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /7

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\MicrosoftEdge_X64_124.0.2478.80.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\MicrosoftEdge_X64_124.0.2478.80.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\MicrosoftEdge_X64_124.0.2478.80.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7ff7d26988c0,0x7ff7d26988cc,0x7ff7d26988d8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=164 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=165 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9920 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=166 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7720 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{29C062D3-8BA3-4E99-8034-30740342D7AA}\EDGEMITMP_F8C7D.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7ff7d26988c0,0x7ff7d26988cc,0x7ff7d26988d8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODcuMzciIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NDZEQzVFREYtMTc4OC00MjAzLTlCQzUtRjVENkQ1MEExOTFCfSIgdXNlcmlkPSJ7MEY5MkYwMzMtRDIwNS00NEYxLTlBNzQtMkY0MzgyRDVDMkExfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9InswNjEzMDQyQS01RTFDLTQwRjYtQjM1OC1DQjg1NTNFMDY5MUJ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7VlBRb1AxRitmcTE1d1J6aDFrUEw0UE1wV2g4T1JNQjVpenZyT0MvY2hqUT0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE4Ny4zNyIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJJc09uSW50ZXJ2YWxDb21tYW5kc0FsbG93ZWQ9LXRhcmdldF9kZXY7UHJvZHVjdHNUb1JlZ2lzdGVyPSU3QjFGQUI4Q0ZFLTk4NjAtNDE1Qy1BNkNBLUFBN0QxMjAyMTk0MCU3RCIgaW5zdGFsbGFnZT0iMiIgY29ob3J0PSJycmZAMC40MyI-PHVwZGF0ZWNoZWNrLz48cGluZyByZD0iNjM0MCIgcGluZ19mcmVzaG5lc3M9IntFOTIxMkI2MC00OTY5LTRDQUYtQkE4Qi03OTM0N0I1NkE4RjB9Ii8-PC9hcHA-PGFwcCBhcHBpZD0iezU2RUIxOEY4LUIwMDgtNENCRC1CNkQyLThDOTdGRTdFOTA2Mn0iIHZlcnNpb249IjkyLjAuOTAyLjY3IiBuZXh0dmVyc2lvbj0iMTI0LjAuMjQ3OC44MCIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJjb25zZW50PWZhbHNlIiBpbnN0YWxsYWdlPSIyIiBpc19waW5uZWRfc3lzdGVtPSJ0cnVlIiBsYXN0X2xhdW5jaF9jb3VudD0iMSIgbGFzdF9sYXVuY2hfdGltZT0iMTMzNTk5MTEzMjU2MzEyNDIwIj48dXBkYXRlY2hlY2svPjxldmVudCBldmVudHR5cGU9IjEyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxMzA0MjY1NjI2MyIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjEzIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxMzA0MjcwNjIzMyIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjE0IiBldmVudHJlc3VsdD0iMCIgZXJyb3Jjb2RlPSItMjE0NzAyMzgzOCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTM3MzYwOTEwOTAiIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiIGRvd25sb2FkZXI9ImRvIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy80NDRhZjMwZS1mMmU3LTQwYmQtYjQ1Yi01OGQ1OWQwMDA0NDk_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-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzNzM2MTUxMTMzIiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzNzUzNDYxMTMzIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjEyNC4wLjI0NzguOTciIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIwIiBpbnN0YWxsZGF0ZT0iNjMzNSIgY29ob3J0PSJycmZAMC43MCI-PHVwZGF0ZWNoZWNrLz48cGluZyByZD0iNjM0MCIgcGluZ19mcmVzaG5lc3M9Ins5QTBCQ0IxNy00OUYwLTRCN0MtOTY3Qy0wQkZFMjZGODZFOEN9Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files\McAfee\WebAdvisor\updater.exe

"C:\Program Files\McAfee\WebAdvisor\updater.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=168 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7988 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=169 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5216 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=11784 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3060 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2948 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6328 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6680 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=11796 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2072,3955852250848559712,15707686509428572347,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8900 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x108,0x10c,0x110,0xd8,0x114,0x7ffc074f46f8,0x7ffc074f4708,0x7ffc074f4718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2204,1312892284621434366,17649649688818728740,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2216 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2204,1312892284621434366,17649649688818728740,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe" --rename-msedge-exe --system-level --verbose-logging --msedge --channel=stable

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff716b788c0,0x7ff716b788cc,0x7ff716b788d8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe" --msedge --channel=stable --delete-old-versions --system-level --verbose-logging

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe" --msedge --channel=stable --register-package-identity --verbose-logging --system-level

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7ff716b788c0,0x7ff716b788cc,0x7ff716b788d8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x28c,0x290,0x294,0x268,0x298,0x7ff716b788c0,0x7ff716b788cc,0x7ff716b788d8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default --flag-switches-begin --flag-switches-end

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x23c,0x240,0x244,0x238,0x260,0x7ffbfa13ceb8,0x7ffbfa13cec4,0x7ffbfa13ced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2080,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1984,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2484,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3380,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3368,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=3408 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4680,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=4712 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3356,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=5408,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5712,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5892,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=6044,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=5556,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6424,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=1988,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=6568,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5620,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=5756,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=5336,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=7560,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=7676,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=7736 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7908,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=7892 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=8076,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=8096 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=8076,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=8096 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7856,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8340,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=8204 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5544,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=8180,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=8312,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=8748 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.dab7dfe128bdd3dc > \\.\pipe\chrome.nativeMessaging.out.dab7dfe128bdd3dc

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.ee8099232b4b3209 > \\.\pipe\chrome.nativeMessaging.out.ee8099232b4b3209

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8536,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=8940 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4812,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=8448 /prefetch:8

\??\c:\program files\reasonlabs\epp\rsExtensionHost.exe

"c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0

\??\c:\program files\reasonlabs\epp\rsExtensionHost.exe

"c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9068,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=7864 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8768,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=9108 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=3880,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=9248,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=9264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=9404,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=9424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=564,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=9560 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5008,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=9584 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9668,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=9672 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4976,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=7984 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5824,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=9940 /prefetch:8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.9a9080e28a51f474 > \\.\pipe\chrome.nativeMessaging.out.9a9080e28a51f474

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.860ee03475dbb8b5 > \\.\pipe\chrome.nativeMessaging.out.860ee03475dbb8b5

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=9908,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=9240 /prefetch:1

\??\c:\program files\reasonlabs\epp\rsExtensionHost.exe

"c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0

\??\c:\program files\reasonlabs\epp\rsExtensionHost.exe

"c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.a9dd139ddb1927a9 > \\.\pipe\chrome.nativeMessaging.out.a9dd139ddb1927a9

\??\c:\program files\reasonlabs\epp\rsExtensionHost.exe

"c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8644,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=8836 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=10228,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=8204 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=7756,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=7828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=7824,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=8336 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=7344,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=10404 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=10560,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=7336,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=10640 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=9444,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=10820 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=10268,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=10968 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.95093f524b04d840 > \\.\pipe\chrome.nativeMessaging.out.95093f524b04d840

\??\c:\program files\reasonlabs\epp\rsExtensionHost.exe

"c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.68f647ea907b707a > \\.\pipe\chrome.nativeMessaging.out.68f647ea907b707a

\??\c:\program files\reasonlabs\epp\rsExtensionHost.exe

"c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=8068,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=7912 /prefetch:1

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.6a9d67d86b36278a > \\.\pipe\chrome.nativeMessaging.out.6a9d67d86b36278a

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

\??\c:\program files\reasonlabs\epp\rsExtensionHost.exe

"c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7296,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=3184 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4004,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=3044 /prefetch:2

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.6ff9467c767ead48 > \\.\pipe\chrome.nativeMessaging.out.6ff9467c767ead48

\??\c:\program files\reasonlabs\epp\rsExtensionHost.exe

"c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c ""c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.7624873ea76a8573 > \\.\pipe\chrome.nativeMessaging.out.7624873ea76a8573

\??\c:\program files\reasonlabs\epp\rsExtensionHost.exe

"c:\program files\reasonlabs\epp\rsExtensionHost.exe" chrome-extension://jcpgbnbdnakoblgfkbgggankeidkfcdl/ --parent-window=0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --field-trial-handle=3928,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=3952 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4276,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=7052,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=7052,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=2052,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10688,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=10700 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=10744,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=10692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --no-appcompat-clear --field-trial-handle=10668,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=3452,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=7032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --field-trial-handle=9852,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=10100 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --field-trial-handle=10448,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --no-appcompat-clear --field-trial-handle=2200,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=4036 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --field-trial-handle=10232,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=8272 /prefetch:1

C:\Program Files\ReasonLabs\rsScanner_v3.9.1.exe

"C:\Program Files\ReasonLabs\Common\..\rsScanner_v3.9.1.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9976,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=7632 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=10936,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=10412 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=6508,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4596,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6004,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6192,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --field-trial-handle=6852,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --field-trial-handle=8720,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=8036 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --field-trial-handle=7500,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=8264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9316,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=9512 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=8272,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=9416 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=8272,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=9416 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1020,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1020,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --field-trial-handle=9424,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6936,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --field-trial-handle=6300,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=10884,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=10896 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x304 0x4a8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --field-trial-handle=5396,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --field-trial-handle=6836,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=8836 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --field-trial-handle=9968,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5332,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4100,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7728,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=1408 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=6868,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4688,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=10384 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=9860,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --field-trial-handle=8248,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=10748 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=5180,i,13087803623337944939,15898611259369040734,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:1

C:\Windows\system32\werfault.exe

werfault.exe /h /shared Global\67f6c2c8d96d4731a511cee690bd949e /t 6712 /p 8388

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x2f4,0x7ffbfa13ceb8,0x7ffbfa13cec4,0x7ffbfa13ced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2116,i,3417850608359384949,6552996127838558166,262144 --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2216,i,3417850608359384949,6552996127838558166,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2588,i,3417850608359384949,6552996127838558166,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3528,i,3417850608359384949,6552996127838558166,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3512,i,3417850608359384949,6552996127838558166,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4028,i,3417850608359384949,6552996127838558166,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5484,i,3417850608359384949,6552996127838558166,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5588,i,3417850608359384949,6552996127838558166,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=5628,i,3417850608359384949,6552996127838558166,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6064,i,3417850608359384949,6552996127838558166,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=5184,i,3417850608359384949,6552996127838558166,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=6436,i,3417850608359384949,6552996127838558166,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=6448,i,3417850608359384949,6552996127838558166,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7088,i,3417850608359384949,6552996127838558166,262144 --variations-seed-version --mojo-platform-channel-handle=7104 /prefetch:8

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C choice /C Y /N /D Y /T 3 & Del "C:\Program Files\ReasonLabs\rsScanner_v3.9.1.exe"

C:\Windows\system32\choice.exe

choice /C Y /N /D Y /T 3

C:\Windows\system32\werfault.exe

werfault.exe /h /shared Global\d7bf126171914a4fac9176d4e9061cfd /t 536 /p 8008

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2e0,0x7ffbfa13ceb8,0x7ffbfa13cec4,0x7ffbfa13ced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2816,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=2812 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1996,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2196,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3484,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3492,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5132,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=5216,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=5016,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5420,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5960,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5960,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6116,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6488,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=6456,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4788,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=6084,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=6224,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=7128,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6868 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=6900,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6440,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6996,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=7016,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7028,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --no-appcompat-clear --field-trial-handle=3580,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6836,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=5344,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5184,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6988,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --field-trial-handle=5896,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=7408,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7400,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7216 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6332,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7428 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3676,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7592 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6036,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7616 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3572,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7856 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7896,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7908 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7952,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7892 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7920,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7624 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=4688,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7592 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=7948,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7848 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --no-appcompat-clear --field-trial-handle=7644,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=7548,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7008 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7524,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7444 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7792,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7488 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8232,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=8244 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8400,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=8408 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8428,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=8540 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=864,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=8508 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7676,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7928 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5976,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7684 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6772,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=8412 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8100,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7988 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=8000,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=8552 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.FileUtilService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7596,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=7564 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=7488,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=8576 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=8224,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=8468 /prefetch:8

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.zip"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8088,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6724,i,4241828631124251315,2569731445076945135,262144 --variations-seed-version --mojo-platform-channel-handle=8308 /prefetch:8

C:\Users\Admin\AppData\Local\Temp\7zO0882D6CE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO0882D6CE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO08893CBE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO08893CBE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO08870BBE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO08870BBE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO088D1ABE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088D1ABE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO088488BE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088488BE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO088297AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088297AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Users\Admin\AppData\Local\Temp\7zO088896AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088896AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO0881D2AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO0881D2AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Users\Admin\AppData\Local\Temp\7zO088B61AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088B61AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Users\Admin\AppData\Local\Temp\7zO088320AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088320AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Users\Admin\AppData\Local\Temp\7zO088CAFAE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088CAFAE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO0884BBAE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO0884BBAE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Users\Admin\AppData\Local\Temp\7zO088C4AAE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088C4AAE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Users\Admin\AppData\Local\Temp\7zO088E2AAE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088E2AAE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Users\Admin\AppData\Local\Temp\7zO0887E8AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO0887E8AE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO088E129E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088E129E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO0884619E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO0884619E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Users\Admin\AppData\Local\Temp\7zO0880509E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO0880509E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO08888C9E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO08888C9E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO0882489E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO0882489E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Users\Admin\AppData\Local\Temp\7zO0882958E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO0882958E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Users\Admin\AppData\Local\Temp\7zO0886E38E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO0886E38E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO08888F8E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO08888F8E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Users\Admin\AppData\Local\Temp\7zO08833E8E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO08833E8E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Users\Admin\AppData\Local\Temp\7zO08896D8E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO08896D8E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Users\Admin\AppData\Local\Temp\7zO0885BC8E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO0885BC8E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Users\Admin\AppData\Local\Temp\7zO08827B8E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO08827B8E\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=3028 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe" --backend --initial-pid=2672 --install --import-browser-data=0 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561" --session-guid=f09fea7b-2c80-48b1-964c-1b6430511926 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=109.0.5097.80

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ffbeee47c80,0x7ffbeee47c8c,0x7ffbeee47c98

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\assistant\assistant_installer.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.45 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x666038,0x666044,0x666050

C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0

C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe

C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.45 --initial-client-data=0x244,0x248,0x24c,0x218,0x250,0xb86038,0xb86044,0xb86050

C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x28c,0x290,0x294,0x288,0x298,0x7ffbc5b7d650,0x7ffbc5b7d660,0x7ffbc5b7d670

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\be76331b95dfc399cd776d2fc68021e0db03cc4f.crx"

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x288,0x28c,0x290,0x284,0x294,0x7ffbc5b7d650,0x7ffbc5b7d660,0x7ffbc5b7d670

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-appcompat-clear --start-stack-profiler --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2000,i,6045522665134418991,12415803652984952630,262144 --variations-seed-version --mojo-platform-channel-handle=1996 /prefetch:2

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-appcompat-clear --start-stack-profiler --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=1956,i,6045522665134418991,12415803652984952630,262144 --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:3

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=2336,i,6045522665134418991,12415803652984952630,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:8

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=3024 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x288,0x28c,0x290,0x284,0x294,0x7ffbc5b7d650,0x7ffbc5b7d660,0x7ffbc5b7d670

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized --lowered-browser

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x284,0x288,0x28c,0x280,0x290,0x7ffbd5a7d650,0x7ffbd5a7d660,0x7ffbd5a7d670

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-appcompat-clear --start-stack-profiler --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2024,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=2020 /prefetch:2

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-appcompat-clear --start-stack-profiler --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=1892,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:3

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=2332,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=2820,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=3128 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3140,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=3192 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3152,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=3304 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3160,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3180,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=3832,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=3888 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=3840,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=3912 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x35c,0x7ffbf603ceb8,0x7ffbf603cec4,0x7ffbf603ced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2768,i,6932651959483782617,1065548772702371228,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1948,i,6932651959483782617,1065548772702371228,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2240,i,6932651959483782617,1065548772702371228,262144 --variations-seed-version --mojo-platform-channel-handle=3196 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3396,i,6932651959483782617,1065548772702371228,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3404,i,6932651959483782617,1065548772702371228,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4164,i,6932651959483782617,1065548772702371228,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_gx_splash.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_gx_splash.exe" --instance-name=dbff851fa759ccb33e726f883720ae50

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5396,i,6932651959483782617,1065548772702371228,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4784,i,6932651959483782617,1065548772702371228,262144 --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=4808,i,6932651959483782617,1065548772702371228,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5632,i,6932651959483782617,1065548772702371228,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4272,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4348,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:2

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4628,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --start-stack-profiler --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=4864,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --start-stack-profiler --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4936,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=5044,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:2

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3888,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=5688,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3740,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=5768,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=5772,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=3340 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=5760,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3412,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3728,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3704,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3692,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=4632,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=6912 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=6524,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=7100,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=7220 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=7120,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=7272,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=7404 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=7400,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=7536 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=5676,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --bypasslauncher --requesttype=automatic --scheduledtask --bypasslauncher --pipeid=oauc_task_pipedcbb8f53eff625f232ff45d764476217

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe" --fix-taskbar-pins

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=7920,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=6424,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=7960 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=7908,i,11457974177307041093,9627579593979233333,262144 --variations-seed-version --mojo-platform-channel-handle=8120 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --bypasslauncher --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe2906202b27b41e4bd66c9238c4b575c1

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0x7ff63eaae7f4,0x7ff63eaae800,0x7ff63eaae810

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\installer.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x260,0x264,0x268,0x23c,0x26c,0x7ffbeb657c80,0x7ffbeb657c8c,0x7ffbeb657c98

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files\McAfee\WebAdvisor\updater.exe

"C:\Program Files\McAfee\WebAdvisor\updater.exe"

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x288,0x28c,0x290,0x284,0x294,0x7ffbd5a7d650,0x7ffbd5a7d660,0x7ffbd5a7d670

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --lowered-browser

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x268,0x288,0x28c,0x26c,0x290,0x7ffbd5a7d650,0x7ffbd5a7d660,0x7ffbd5a7d670

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-appcompat-clear --start-stack-profiler --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1984,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=1980 /prefetch:2

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-appcompat-clear --start-stack-profiler --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=2044,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:3

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=2052,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3012,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3020,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3028,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=3184 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3036,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=3300 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3044,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=3416 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=3940,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3956,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=4052 /prefetch:2

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4712,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5236,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5392,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=5616,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=5968,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=6356,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:2

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --start-stack-profiler --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5920,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=6068,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=6136,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=6736,i,9322896584793246868,14952411170654774839,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --bypasslauncher --requesttype=automatic --scheduledtask --bypasslauncher --pipeid=oauc_task_pipedcbb8f53eff625f232ff45d764476217

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --bypasslauncher --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe2906202b27b41e4bd66c9238c4b575c1

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0x7ff63eaae7f4,0x7ff63eaae800,0x7ff63eaae810

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0x7ff63eaae7f4,0x7ff63eaae800,0x7ff63eaae810

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x284,0x288,0x28c,0x280,0x290,0x7ffbd5a7d650,0x7ffbd5a7d660,0x7ffbd5a7d670

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --lowered-browser

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x284,0x288,0x28c,0x280,0x290,0x7ffbd5a7d650,0x7ffbd5a7d660,0x7ffbd5a7d670

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-appcompat-clear --start-stack-profiler --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2028,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=2020 /prefetch:2

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-appcompat-clear --start-stack-profiler --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=1896,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:3

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=2372,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=2932,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=2980 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=2940,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=3004 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=2948,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=2956,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=3236 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=2964,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=3352 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=3824,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=3880 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3832,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=3904 /prefetch:2

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4940,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5236,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5392,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5624,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:2

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=5660,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=5964,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=6068,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=4444,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=6544,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=4464,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --bypasslauncher --requesttype=automatic --scheduledtask --bypasslauncher --pipeid=oauc_task_pipedcbb8f53eff625f232ff45d764476217

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --bypasslauncher --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe2906202b27b41e4bd66c9238c4b575c1

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0x7ff63eaae7f4,0x7ff63eaae800,0x7ff63eaae810

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0x7ff63eaae7f4,0x7ff63eaae800,0x7ff63eaae810

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=5628,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=6888 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x35c,0x7ffbeef0ceb8,0x7ffbeef0cec4,0x7ffbeef0ced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2828,i,6483785798898464579,12127226981874382166,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1904,i,6483785798898464579,12127226981874382166,262144 --variations-seed-version --mojo-platform-channel-handle=2880 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2268,i,6483785798898464579,12127226981874382166,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3436,i,6483785798898464579,12127226981874382166,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3448,i,6483785798898464579,12127226981874382166,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4192,i,6483785798898464579,12127226981874382166,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5176,i,6483785798898464579,12127226981874382166,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6396,i,8665498465400314202,12162585113193464044,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5480,i,6483785798898464579,12127226981874382166,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3760,i,6483785798898464579,12127226981874382166,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5764,i,6483785798898464579,12127226981874382166,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5096,i,6483785798898464579,12127226981874382166,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=5836,i,6483785798898464579,12127226981874382166,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=5824,i,6483785798898464579,12127226981874382166,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6184,i,6483785798898464579,12127226981874382166,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8

C:\Windows\system32\WerFault.exe

C:\Windows\system32\WerFault.exe -u -p 4564 -s 1280

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2f0,0x7ffbfa83ceb8,0x7ffbfa83cec4,0x7ffbfa83ced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2104,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1904,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2292,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3460,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3476,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4520,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5044,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5512,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=5688,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=5692,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5884,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6420,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6420,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6636,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6340,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6580,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=6968 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7108,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=7120 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6804,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7112,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=7396 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7404,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=7580 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4788,i,9002904495501501562,8842551080424846419,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2e8,0x7ffbfa83ceb8,0x7ffbfa83cec4,0x7ffbfa83ced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2276,i,11861655341552714800,16732799683776167159,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1976,i,11861655341552714800,16732799683776167159,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2532,i,11861655341552714800,16732799683776167159,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3392,i,11861655341552714800,16732799683776167159,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3400,i,11861655341552714800,16732799683776167159,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4284,i,11861655341552714800,16732799683776167159,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4424,i,11861655341552714800,16732799683776167159,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4148,i,11861655341552714800,16732799683776167159,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5308,i,11861655341552714800,16732799683776167159,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5480,i,11861655341552714800,16732799683776167159,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5532,i,11861655341552714800,16732799683776167159,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4152,i,11861655341552714800,16732799683776167159,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8

C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe

"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" "C:\Users\Admin\Downloads\Malwarebytes Premium v3.0.6.1469 Final + Keygen.torrent"

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x284,0x288,0x28c,0x280,0x290,0x7ffbd73ad650,0x7ffbd73ad660,0x7ffbd73ad670

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --lowered-browser "C:\Users\Admin\Downloads\Malwarebytes Premium v3.0.6.1469 Final + Keygen.torrent"

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\opera_crashreporter.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x284,0x288,0x28c,0x280,0x290,0x7ffbd73ad650,0x7ffbd73ad660,0x7ffbd73ad670

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-appcompat-clear --start-stack-profiler --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1996,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=1992 /prefetch:2

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-appcompat-clear --start-stack-profiler --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=1896,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:3

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=2312,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3132,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=3168 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3144,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3148,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=3304 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=3052,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=2716,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --start-stack-profiler --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=3904,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=4040 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3080,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=4072 /prefetch:2

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4936,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5328,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5356,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5636,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5828,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:2

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=5836,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=5772,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=6572,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=6768,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=5372,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --start-stack-profiler --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=6488,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=5488,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --bypasslauncher --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe2906202b27b41e4bd66c9238c4b575c1

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0x7ff63eaae7f4,0x7ff63eaae800,0x7ff63eaae810

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --bypasslauncher --requesttype=automatic --scheduledtask --bypasslauncher --pipeid=oauc_task_pipedcbb8f53eff625f232ff45d764476217

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=4840,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=6980 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=7256,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=7248 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/109.0.0.0 (Edition cdf)" --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=7280,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=7416 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe

"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-appcompat-clear --with-feature:cashback-assistant=on --with-feature:address-bar-dropdown-autocompleted-domains=off --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-keywords-monetization=on --with-feature:amazon-new-ids=on --with-feature:amp-requests-stats=on --with-feature:aria-command-line-in-extension=on --with-feature:aria-command-line-react=on --with-feature:campaigns-2024=on --with-feature:cashback-assistant=on --with-feature:continue-on-booking=on --with-feature:continue-on-shopping-via-amp=off --with-feature:continue-shopping=on --with-feature:continue-shopping-2=on --with-feature:continue-shopping-5=on --with-feature:continue-shopping-structured-partners=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:game-maker-studio-integration=on --with-feature:gaming-api=on --with-feature:lucid-mode-hide-text=on --with-feature:native-crypto-wallet=on --with-feature:opera-startpage-special=on --with-feature:password-generator=off --with-feature:premium-valve-in=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-attribution=on --with-feature:shopping-corner=on --with-feature:sitecheck-age=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:installer-experiment-test=off --with-feature:installer-bypass-launcher=on --ab_tests=GROW-2836-test-1:GROW-2836 --field-trial-handle=7564,i,12897920351215186906,1884431015808362254,262144 --variations-seed-version --mojo-platform-channel-handle=7584 /prefetch:8

C:\Windows\system32\backgroundTaskHost.exe

"C:\Windows\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppX3bn25b6f886wmg6twh46972vprk9tnbf.mca

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe

C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=109.0.5097.80 --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0x7ff63eaae7f4,0x7ff63eaae800,0x7ff63eaae810

C:\Windows\system32\BackgroundTaskHost.exe

"C:\Windows\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProvider

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2d4,0x7ffbfa8dceb8,0x7ffbfa8dcec4,0x7ffbfa8dced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2432,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1856,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2076,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3432,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3440,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4300,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5380,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=5540,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=5336,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5652,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6244,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6244,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6240,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6492,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6336,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6672,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=6820 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6344,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6480,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6468,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=7156 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6376,i,14902326805593260427,10288978023939084184,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:8

C:\Users\Admin\AppData\Local\Temp\7zO08804AD2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO08804AD2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Users\Admin\AppData\Local\Temp\7zO088E59D2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088E59D2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO088638D2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088638D2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO088536C2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088536C2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Users\Admin\AppData\Local\Temp\7zO088005C2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088005C2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO088AB3C2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088AB3C2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO088B01C2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO088B01C2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Users\Admin\AppData\Local\Temp\7zO0887B8C2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

"C:\Users\Admin\AppData\Local\Temp\7zO0887B8C2\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.zip"

C:\Users\Admin\AppData\Local\Temp\7zOC054F523\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC054F523\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4204 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Users\Admin\AppData\Local\Temp\7zOC0568E13\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC0568E13\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Users\Admin\AppData\Local\Temp\7zOC05F5C13\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC05F5C13\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4548 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3008 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3000 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=4888 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Users\Admin\AppData\Local\Temp\REASON~2.EXE

"C:\Users\Admin\AppData\Local\Temp\REASON~2.EXE" /silentwithprogressbar

C:\Users\Admin\AppData\Local\Temp\REASON~1.EXE

"C:\Users\Admin\AppData\Local\Temp\REASON~1.EXE" /silentwithprogressbar

C:\Users\Admin\AppData\Local\Temp\7zOC05B5DC3\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC05B5DC3\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Windows\TEMP\nsbFFB7.tmp\ReasonVpnInstaller.exe

"C:\Windows\TEMP\nsbFFB7.tmp\ReasonVpnInstaller.exe" /silentwithprogressbar

C:\Windows\TEMP\nsb5.tmp\ReasonSaferWebInstaller.exe

"C:\Windows\TEMP\nsb5.tmp\ReasonSaferWebInstaller.exe" /silentwithprogressbar

C:\Windows\TEMP\nsbEF.tmp\RAVVPN-installer.exe

"C:\Windows\TEMP\nsbEF.tmp\RAVVPN-installer.exe" "C:\Windows\TEMP\nsbFFB7.tmp\ReasonVpnInstaller.exe" /silentwithprogressbar

C:\Windows\TEMP\nsrFF.tmp\SaferWeb-installer.exe

"C:\Windows\TEMP\nsrFF.tmp\SaferWeb-installer.exe" "C:\Windows\TEMP\nsb5.tmp\ReasonSaferWebInstaller.exe" /silentwithprogressbar

C:\Users\Admin\AppData\Local\Temp\7zOC0588934\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC0588934\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Users\Admin\AppData\Local\Temp\7zOC05F4214\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC05F4214\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Users\Admin\AppData\Local\Temp\7zOC055E114\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC055E114\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Users\Admin\AppData\Local\Temp\7zOC05F3714\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC05F3714\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Users\Admin\AppData\Local\Temp\7zOC054C414\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC054C414\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Users\Admin\AppData\Local\Temp\7zOC05DF514\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC05DF514\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Users\Admin\AppData\Local\Temp\7zOC055BA14\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC055BA14\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Users\Admin\AppData\Local\Temp\7zOC055D914\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC055D914\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Users\Admin\AppData\Local\Temp\7zOC05B9F14\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC05B9F14\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Users\Admin\AppData\Local\Temp\7zOC056EC14\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC056EC14\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Users\Admin\AppData\Local\Temp\7zOC05CCD14\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC05CCD14\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Users\Admin\AppData\Local\Temp\7zOC05AC204\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC05AC204\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Users\Admin\AppData\Local\Temp\7zOC051D304\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC051D304\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Users\Admin\AppData\Local\Temp\7zOC0588004\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

"C:\Users\Admin\AppData\Local\Temp\7zOC0588004\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x35c,0x7ffbf6bfceb8,0x7ffbf6bfcec4,0x7ffbf6bfced0

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=4432 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=3020 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=2396 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2808,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=2804 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1972,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2232,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=3116 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3408,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3416,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4280,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=3948,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=4984 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4984,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5192,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5808,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5452,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:8

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=5196 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=6140,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=6132,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5440,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:8

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=5332 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=5488 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=4352 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=3888 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5004,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=3892 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5816,i,18438953253885579445,14194301242128232808,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:1

C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe

"C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP" --standard-schemes=mc --secure-schemes=mc --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-user-model-id=com.reasonlabs.epp --app-path="C:\Program Files\ReasonLabs\Common\Client\v1.4.2\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=5816 --field-trial-handle=2260,i,1833324760904124392,2941377732458146258,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe

"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca

C:\Windows\system32\dwm.exe

"dwm.exe"

C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe

"C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2f0,0x7ffbf6bfceb8,0x7ffbf6bfcec4,0x7ffbf6bfced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2660,i,17963410849461283090,13999716787790087904,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1860,i,17963410849461283090,13999716787790087904,262144 --variations-seed-version --mojo-platform-channel-handle=2940 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2276,i,17963410849461283090,13999716787790087904,262144 --variations-seed-version --mojo-platform-channel-handle=3044 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3376,i,17963410849461283090,13999716787790087904,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3384,i,17963410849461283090,13999716787790087904,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4208,i,17963410849461283090,13999716787790087904,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5520,i,17963410849461283090,13999716787790087904,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5376,i,17963410849461283090,13999716787790087904,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8

C:\Windows\system32\Tskill.exe

"C:\Windows\system32\Tskill.exe" 8540

C:\Windows\system32\Taskkill.exe

"C:\Windows\system32\Taskkill.exe" /f /pid 8540

C:\Windows\system32\Tskill.exe

"C:\Windows\system32\Tskill.exe" 7980

C:\Windows\system32\Taskkill.exe

"C:\Windows\system32\Taskkill.exe" /f /pid 7980

C:\Program Files\ReasonLabs\VPN\rsVPNSvc.exe

"C:\Program Files\ReasonLabs\VPN\rsVPNSvc.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
US 8.8.8.8:53 233.69.68.104.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 ephemeralcounters.api.roblox.com udp
GB 128.116.119.4:443 ephemeralcounters.api.roblox.com tcp
US 8.8.8.8:53 setup.rbxcdn.qq.com udp
GB 128.116.119.4:443 ephemeralcounters.api.roblox.com tcp
US 8.8.8.8:53 clientsettingscdn.roblox.qq.com udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 4.119.116.128.in-addr.arpa udp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 134.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 setup.rbxcdn.com udp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
US 8.8.8.8:53 setup-ak.rbxcdn.com udp
US 8.8.8.8:53 setup-ll.rbxcdn.com udp
US 8.8.8.8:53 setup-cfly.rbxcdn.com udp
US 8.8.8.8:53 setup-hw.rbxcdn.com udp
US 8.8.8.8:53 www.roblox.com udp
GB 128.116.119.4:443 www.roblox.com tcp
NL 23.62.61.57:443 www.bing.com tcp
US 8.8.8.8:53 57.169.31.20.in-addr.arpa udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 setup.rbxcdn.com udp
US 2.18.190.81:443 setup.rbxcdn.com tcp
US 8.8.8.8:53 81.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 57.61.62.23.in-addr.arpa udp
GB 128.116.119.4:443 www.roblox.com tcp
GB 128.116.119.4:443 www.roblox.com tcp
US 2.18.190.81:443 setup.rbxcdn.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
US 8.8.8.8:53 183.59.114.20.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 msedge.api.cdp.microsoft.com udp
US 13.67.191.143:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 143.191.67.13.in-addr.arpa udp
US 8.8.8.8:53 139.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 msedge.f.tlu.dl.delivery.mp.microsoft.com udp
US 199.232.210.172:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
NL 23.62.61.113:443 www.bing.com tcp
US 8.8.8.8:53 113.61.62.23.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 79.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
NL 23.62.61.113:443 th.bing.com tcp
NL 23.62.61.113:443 th.bing.com tcp
NL 23.62.61.75:443 th.bing.com tcp
NL 23.62.61.75:443 th.bing.com tcp
US 8.8.8.8:53 75.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
IE 20.190.159.23:443 login.microsoftonline.com tcp
US 8.8.8.8:53 23.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
US 8.8.8.8:53 14.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 151.101.2.49:443 bazaar.abuse.ch tcp
US 151.101.2.49:443 bazaar.abuse.ch tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.178.4:443 www.google.com tcp
US 8.8.8.8:53 49.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 4.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 232.184.250.142.in-addr.arpa udp
US 8.8.8.8:53 131.185.250.142.in-addr.arpa udp
GB 142.250.178.4:443 www.google.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 89.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 227.185.250.142.in-addr.arpa udp
US 52.111.227.11:443 tcp
US 8.8.8.8:53 48.229.111.52.in-addr.arpa udp
GB 128.116.119.4:443 www.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
US 8.8.8.8:53 aefd.nelreports.net udp
US 2.17.251.5:443 aefd.nelreports.net tcp
US 2.17.251.5:443 aefd.nelreports.net udp
US 8.8.8.8:53 5.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 pastebin.com udp
US 104.20.3.235:443 pastebin.com tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 235.3.20.104.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 12.173.189.20.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
NL 23.62.61.72:443 www.bing.com tcp
US 8.8.8.8:53 72.61.62.23.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.160:443 r.bing.com tcp
NL 23.62.61.160:443 r.bing.com tcp
US 8.8.8.8:53 aefd.nelreports.net udp
US 2.17.251.10:443 aefd.nelreports.net udp
US 8.8.8.8:53 97.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 160.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 10.251.17.2.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 gamefabrique.com udp
US 172.67.210.149:443 gamefabrique.com tcp
US 172.67.210.149:443 gamefabrique.com tcp
US 8.8.8.8:53 149.210.67.172.in-addr.arpa udp
US 8.8.8.8:53 ajax.googleapis.com udp
US 8.8.8.8:53 stackpath.bootstrapcdn.com udp
GB 142.250.187.234:443 ajax.googleapis.com tcp
US 104.18.11.207:443 stackpath.bootstrapcdn.com tcp
US 104.18.11.207:443 stackpath.bootstrapcdn.com tcp
US 8.8.8.8:53 d1pdf4c3hchi80.cloudfront.net udp
GB 18.244.183.189:443 d1pdf4c3hchi80.cloudfront.net tcp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 216.239.34.36:443 region1.analytics.google.com tcp
BE 64.233.167.155:443 stats.g.doubleclick.net tcp
GB 216.58.204.67:443 www.google.co.uk tcp
US 8.8.8.8:53 yonatallcolum.info udp
US 8.8.8.8:53 forhavingartistic.info udp
US 8.8.8.8:53 getrunkhomuto.info udp
US 8.8.8.8:53 ghabovethec.info udp
GB 143.204.176.76:443 getrunkhomuto.info tcp
GB 18.244.183.189:443 d1pdf4c3hchi80.cloudfront.net tcp
US 8.8.8.8:53 pogothere.xyz udp
US 8.8.8.8:53 accounts.google.com udp
DE 108.138.26.86:443 ghabovethec.info tcp
US 172.67.189.235:443 forhavingartistic.info tcp
US 8.8.8.8:53 www.facebook.com udp
US 3.162.140.76:443 yonatallcolum.info tcp
US 8.8.8.8:53 234.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 207.11.18.104.in-addr.arpa udp
US 8.8.8.8:53 189.183.244.18.in-addr.arpa udp
US 8.8.8.8:53 43.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 155.167.233.64.in-addr.arpa udp
US 8.8.8.8:53 67.204.58.216.in-addr.arpa udp
NL 173.194.69.84:443 accounts.google.com tcp
NL 173.194.69.84:443 accounts.google.com tcp
US 172.67.220.203:443 pogothere.xyz tcp
US 172.67.220.203:443 pogothere.xyz tcp
GB 163.70.151.35:443 www.facebook.com tcp
NL 173.194.69.84:443 accounts.google.com udp
BE 64.233.167.155:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 76.176.204.143.in-addr.arpa udp
US 8.8.8.8:53 235.189.67.172.in-addr.arpa udp
US 8.8.8.8:53 203.220.67.172.in-addr.arpa udp
US 8.8.8.8:53 76.140.162.3.in-addr.arpa udp
US 8.8.8.8:53 86.26.138.108.in-addr.arpa udp
US 8.8.8.8:53 84.69.194.173.in-addr.arpa udp
US 8.8.8.8:53 35.151.70.163.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 172.67.210.149:443 gamefabrique.com tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 104.18.11.207:443 stackpath.bootstrapcdn.com tcp
GB 142.250.187.234:443 ajax.googleapis.com udp
N/A 127.0.0.1:4577 tcp
US 216.239.34.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 msedge.api.cdp.microsoft.com udp
US 20.7.47.135:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 135.47.7.20.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
US 152.199.19.161:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
GB 143.204.176.76:443 getrunkhomuto.info tcp
US 8.8.8.8:53 d1kxul2nvgzp3r.cloudfront.net udp
GB 18.154.80.156:443 d1kxul2nvgzp3r.cloudfront.net tcp
GB 18.154.80.156:443 d1kxul2nvgzp3r.cloudfront.net tcp
US 8.8.8.8:53 161.19.199.152.in-addr.arpa udp
US 8.8.8.8:53 dukirliaon.com udp
NL 139.45.197.239:443 dukirliaon.com tcp
US 8.8.8.8:53 156.80.154.18.in-addr.arpa udp
US 8.8.8.8:53 239.197.45.139.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 my.rtmark.net udp
NL 139.45.195.8:443 my.rtmark.net tcp
US 8.8.8.8:53 s.click.aliexpress.com udp
BE 104.68.85.7:443 s.click.aliexpress.com tcp
US 8.8.8.8:53 8.195.45.139.in-addr.arpa udp
US 8.8.8.8:53 best.aliexpress.com udp
US 8.8.8.8:53 sslcom.repository.certum.pl udp
NL 23.62.61.57:80 sslcom.repository.certum.pl tcp
US 8.8.8.8:53 assets.alicdn.com udp
US 8.8.8.8:53 ae01.alicdn.com udp
US 8.8.8.8:53 g.alicdn.com udp
BE 104.68.85.7:443 assets.alicdn.com tcp
BE 104.68.85.7:443 assets.alicdn.com tcp
BE 104.68.85.7:443 assets.alicdn.com tcp
US 8.8.8.8:53 acs.aliexpress.com udp
US 163.181.154.234:443 g.alicdn.com tcp
US 8.8.8.8:53 ae.mmstat.com udp
BE 104.68.85.7:443 assets.alicdn.com tcp
BE 104.68.85.7:443 assets.alicdn.com tcp
BE 104.68.85.7:443 assets.alicdn.com tcp
BE 23.55.96.49:443 ae01.alicdn.com tcp
BE 23.55.96.49:443 ae01.alicdn.com tcp
BE 23.55.96.49:443 ae01.alicdn.com tcp
BE 23.55.96.49:443 ae01.alicdn.com tcp
US 8.8.8.8:53 ae04.alicdn.com udp
US 8.8.8.8:53 time-ae.akamaized.net udp
US 2.18.190.70:443 time-ae.akamaized.net tcp
US 8.8.8.8:53 is.alicdn.com udp
US 8.8.8.8:53 aeis.alicdn.com udp
SG 47.246.110.42:443 ae.mmstat.com tcp
NL 23.62.61.58:443 ae04.alicdn.com tcp
US 8.8.8.8:53 7.85.68.104.in-addr.arpa udp
US 8.8.8.8:53 146.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 234.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 148.97.6.52.in-addr.arpa udp
US 8.8.8.8:53 49.96.55.23.in-addr.arpa udp
US 8.8.8.8:53 70.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 crls.ssl.com udp
DE 47.246.146.105:443 acs.aliexpress.com tcp
GB 108.138.233.97:80 crls.ssl.com tcp
US 163.181.154.234:443 g.alicdn.com tcp
US 163.181.154.234:443 g.alicdn.com tcp
US 8.8.8.8:53 fourier.taobao.com udp
US 8.8.8.8:53 97.233.138.108.in-addr.arpa udp
US 8.8.8.8:53 58.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 42.110.246.47.in-addr.arpa udp
US 8.8.8.8:53 105.146.246.47.in-addr.arpa udp
CN 123.183.232.34:443 fourier.taobao.com tcp
CN 123.183.232.34:443 fourier.taobao.com tcp
US 8.8.8.8:53 login.aliexpress.ru udp
US 8.8.8.8:53 login.aliexpress.us udp
RU 47.246.133.208:443 login.aliexpress.ru tcp
US 8.8.8.8:53 fourier.aliexpress.com udp
US 8.8.8.8:53 208.133.246.47.in-addr.arpa udp
DE 47.246.146.232:443 fourier.aliexpress.com tcp
US 8.8.8.8:53 wp.aliexpress.com udp
US 8.8.8.8:53 login.aliexpress.com udp
DE 47.246.146.200:443 wp.aliexpress.com tcp
US 8.8.8.8:53 us.ynuf.aliapp.org udp
US 8.8.8.8:53 de-wum.aliexpress.com udp
US 8.8.8.8:53 232.146.246.47.in-addr.arpa udp
US 8.8.8.8:53 200.146.246.47.in-addr.arpa udp
DE 47.246.146.55:443 us.ynuf.aliapp.org tcp
US 8.8.8.8:53 img.alicdn.com udp
US 163.181.154.234:443 img.alicdn.com tcp
US 163.181.154.234:443 img.alicdn.com tcp
CN 123.183.232.34:443 fourier.taobao.com tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 55.146.246.47.in-addr.arpa udp
US 8.8.8.8:53 8d08eh.tdum.alibaba.com udp
US 8.8.8.8:53 ynuf.aliapp.org udp
CN 124.239.14.253:443 ynuf.aliapp.org tcp
DE 47.254.175.252:443 8d08eh.tdum.alibaba.com tcp
DE 47.254.175.252:443 8d08eh.tdum.alibaba.com tcp
CN 124.239.14.253:443 ynuf.aliapp.org tcp
US 8.8.8.8:53 252.175.254.47.in-addr.arpa udp
US 8.8.8.8:53 d3st27td9yruau.cloudfront.net udp
GB 216.137.34.175:443 d3st27td9yruau.cloudfront.net tcp
US 8.8.8.8:53 175.34.137.216.in-addr.arpa udp
GB 216.137.34.175:443 d3st27td9yruau.cloudfront.net tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 shield.reasonsecurity.com udp
US 172.67.9.68:443 shield.reasonsecurity.com tcp
US 8.8.8.8:53 68.9.67.172.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 172.67.9.68:443 shield.reasonsecurity.com tcp
US 8.8.8.8:53 analytics.apis.mcafee.com udp
US 52.88.134.142:443 analytics.apis.mcafee.com tcp
US 8.8.8.8:53 142.134.88.52.in-addr.arpa udp
US 8.8.8.8:53 sadownload.mcafee.com udp
NL 96.16.53.155:443 sadownload.mcafee.com tcp
US 8.8.8.8:53 autoupdate.geo.opera.com udp
US 8.8.8.8:53 desktop-netinstaller-sub.osp.opera.software udp
NL 185.26.182.124:443 autoupdate.geo.opera.com tcp
NL 185.26.182.124:443 autoupdate.geo.opera.com tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
US 8.8.8.8:53 155.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 features.opera-api2.com udp
NL 82.145.216.16:443 features.opera-api2.com tcp
US 8.8.8.8:53 download.opera.com udp
NL 185.26.182.117:443 download.opera.com tcp
US 8.8.8.8:53 download5.operacdn.com udp
US 104.18.11.89:443 download5.operacdn.com tcp
US 8.8.8.8:53 124.182.26.185.in-addr.arpa udp
US 8.8.8.8:53 121.217.145.82.in-addr.arpa udp
US 8.8.8.8:53 16.216.145.82.in-addr.arpa udp
US 8.8.8.8:53 117.182.26.185.in-addr.arpa udp
US 8.8.8.8:53 89.11.18.104.in-addr.arpa udp
CN 124.239.14.252:443 ynuf.aliapp.org tcp
CN 124.239.14.252:443 ynuf.aliapp.org tcp
US 8.8.8.8:53 track.analytics-data.io udp
US 18.211.212.102:443 track.analytics-data.io tcp
US 18.211.212.102:443 track.analytics-data.io tcp
US 8.8.8.8:53 102.212.211.18.in-addr.arpa udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 18.211.212.102:443 track.analytics-data.io tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 18.211.212.102:443 track.analytics-data.io tcp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 dht.libtorrent.org udp
US 8.8.8.8:53 router.bittorrent.com udp
N/A 10.127.0.1:5351 udp
US 8.8.8.8:53 router.utorrent.com udp
US 8.8.8.8:53 dht.transmissionbt.com udp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
US 8.8.8.8:53 dht.aelitis.com udp
US 34.229.89.117:6881 dht.aelitis.com udp
US 67.215.246.10:6881 router.bittorrent.com udp
IS 82.221.103.244:6881 router.utorrent.com udp
FR 87.98.162.88:6881 dht.transmissionbt.com udp
SE 185.157.221.247:25401 dht.libtorrent.org udp
US 8.8.8.8:53 download.db-ip.com udp
US 104.26.5.15:443 download.db-ip.com tcp
BR 179.214.112.114:1877 udp
KR 182.237.72.249:32850 udp
ID 180.247.7.26:24538 udp
BD 37.111.211.38:44097 udp
IN 27.63.157.218:60062 udp
BR 181.191.34.41:41707 udp
MX 189.191.33.243:42179 udp
CL 45.232.32.59:47268 udp
CR 190.211.123.183:9251 udp
RU 95.26.113.205:46092 udp
AR 181.46.139.226:2732 udp
US 173.29.123.39:62651 udp
CA 96.54.173.50:48742 udp
RU 95.24.10.189:2370 udp
US 8.8.8.8:53 117.89.229.34.in-addr.arpa udp
US 8.8.8.8:53 10.246.215.67.in-addr.arpa udp
US 8.8.8.8:53 244.103.221.82.in-addr.arpa udp
US 8.8.8.8:53 88.162.98.87.in-addr.arpa udp
US 8.8.8.8:53 247.221.157.185.in-addr.arpa udp
US 8.8.8.8:53 15.5.26.104.in-addr.arpa udp
US 8.8.8.8:53 114.112.214.179.in-addr.arpa udp
US 8.8.8.8:53 249.72.237.182.in-addr.arpa udp
US 8.8.8.8:53 26.7.247.180.in-addr.arpa udp
US 8.8.8.8:53 38.211.111.37.in-addr.arpa udp
US 8.8.8.8:53 218.157.63.27.in-addr.arpa udp
US 8.8.8.8:53 41.34.191.181.in-addr.arpa udp
US 8.8.8.8:53 243.33.191.189.in-addr.arpa udp
US 8.8.8.8:53 59.32.232.45.in-addr.arpa udp
US 8.8.8.8:53 183.123.211.190.in-addr.arpa udp
US 8.8.8.8:53 226.139.46.181.in-addr.arpa udp
US 8.8.8.8:53 205.113.26.95.in-addr.arpa udp
US 8.8.8.8:53 39.123.29.173.in-addr.arpa udp
US 8.8.8.8:53 50.173.54.96.in-addr.arpa udp
US 8.8.8.8:53 189.10.24.95.in-addr.arpa udp
US 8.8.8.8:53 www.fosshub.com udp
US 104.20.226.61:443 www.fosshub.com tcp
US 8.8.8.8:53 61.226.20.104.in-addr.arpa udp
US 8.8.8.8:53 client-telemetry.roblox.com udp
GB 128.116.119.3:443 client-telemetry.roblox.com tcp
US 8.8.8.8:53 download3.operacdn.com udp
NL 95.100.96.33:443 download3.operacdn.com tcp
US 8.8.8.8:53 3.119.116.128.in-addr.arpa udp
US 8.8.8.8:53 33.96.100.95.in-addr.arpa udp
NL 96.16.53.155:443 sadownload.mcafee.com tcp
IM 37.18.136.17:6881 udp
N/A 239.192.152.143:6771 udp
RU 178.167.127.232:17267 udp
RU 95.27.243.93:28524 udp
RU 95.24.164.16:39491 udp
RU 95.24.171.28:14290 udp
RU 5.228.118.10:2315 udp
RU 95.31.13.76:51413 udp
RU 85.172.89.207:7474 udp
RU 31.8.37.229:6881 udp
RU 185.34.240.20:54886 udp
FI 65.21.141.112:6881 udp
CH 84.75.29.90:49001 udp
BG 78.83.144.23:53745 udp
IM 84.246.200.159:16881 udp
DE 157.90.211.197:30000 udp
RU 195.190.118.214:45191 udp
KR 211.107.2.93:40889 udp
UA 176.38.17.107:6881 udp
NL 83.149.84.137:30142 udp
NL 45.128.27.145:63220 udp
FI 84.249.54.177:65470 udp
RU 46.172.110.96:51413 udp
RU 5.18.85.27:10130 udp
BR 187.255.42.132:1373 udp
RU 46.188.37.87:23837 udp
RU 95.165.158.103:23394 udp
BR 177.67.146.94:18927 udp
RU 91.245.148.137:2114 udp
DO 181.36.25.1:48002 udp
RU 78.153.6.91:1657 udp
RU 78.153.6.91:1662 udp
RU 78.153.6.91:31674 udp
N/A 10.124.21.160:63024 udp
AT 152.53.34.217:57971 udp
DE 45.129.182.164:48086 udp
DE 45.142.112.53:32681 udp
DE 75.119.159.190:10240 udp
GB 194.29.101.83:10240 udp
RU 83.246.166.5:12581 udp
DE 49.12.86.202:6888 udp
FR 188.165.192.107:55453 udp
BO 181.115.210.94:6478 udp
CN 114.84.59.125:42962 udp
US 8.8.8.8:53 home.mcafee.com udp
RU 78.153.6.91:1659 udp
IN 49.42.35.94:44243 udp
BE 104.68.84.174:443 home.mcafee.com tcp
US 8.8.8.8:53 update.reasonsecurity.com udp
GB 18.154.84.124:443 update.reasonsecurity.com tcp
US 8.8.8.8:53 143.152.192.239.in-addr.arpa udp
US 8.8.8.8:53 17.136.18.37.in-addr.arpa udp
US 8.8.8.8:53 f.8.8.9.0.c.f.e.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.5.1.f.f.ip6.arpa udp
US 8.8.8.8:53 232.127.167.178.in-addr.arpa udp
US 8.8.8.8:53 93.243.27.95.in-addr.arpa udp
US 8.8.8.8:53 16.164.24.95.in-addr.arpa udp
US 8.8.8.8:53 28.171.24.95.in-addr.arpa udp
US 8.8.8.8:53 76.13.31.95.in-addr.arpa udp
US 8.8.8.8:53 10.118.228.5.in-addr.arpa udp
US 8.8.8.8:53 207.89.172.85.in-addr.arpa udp
US 8.8.8.8:53 229.37.8.31.in-addr.arpa udp
US 8.8.8.8:53 20.240.34.185.in-addr.arpa udp
US 8.8.8.8:53 112.141.21.65.in-addr.arpa udp
US 8.8.8.8:53 90.29.75.84.in-addr.arpa udp
US 8.8.8.8:53 23.144.83.78.in-addr.arpa udp
US 8.8.8.8:53 159.200.246.84.in-addr.arpa udp
US 8.8.8.8:53 197.211.90.157.in-addr.arpa udp
US 8.8.8.8:53 214.118.190.195.in-addr.arpa udp
US 8.8.8.8:53 93.2.107.211.in-addr.arpa udp
US 8.8.8.8:53 107.17.38.176.in-addr.arpa udp
US 8.8.8.8:53 137.84.149.83.in-addr.arpa udp
US 8.8.8.8:53 145.27.128.45.in-addr.arpa udp
US 8.8.8.8:53 177.54.249.84.in-addr.arpa udp
US 8.8.8.8:53 27.85.18.5.in-addr.arpa udp
US 8.8.8.8:53 96.110.172.46.in-addr.arpa udp
US 8.8.8.8:53 132.42.255.187.in-addr.arpa udp
US 8.8.8.8:53 87.37.188.46.in-addr.arpa udp
US 8.8.8.8:53 94.146.67.177.in-addr.arpa udp
US 8.8.8.8:53 103.158.165.95.in-addr.arpa udp
US 8.8.8.8:53 137.148.245.91.in-addr.arpa udp
US 8.8.8.8:53 1.25.36.181.in-addr.arpa udp
US 8.8.8.8:53 91.6.153.78.in-addr.arpa udp
US 8.8.8.8:53 160.21.124.10.in-addr.arpa udp
US 8.8.8.8:53 164.182.129.45.in-addr.arpa udp
US 8.8.8.8:53 217.34.53.152.in-addr.arpa udp
US 8.8.8.8:53 53.112.142.45.in-addr.arpa udp
US 8.8.8.8:53 190.159.119.75.in-addr.arpa udp
US 8.8.8.8:53 83.101.29.194.in-addr.arpa udp
US 8.8.8.8:53 5.166.246.83.in-addr.arpa udp
US 8.8.8.8:53 202.86.12.49.in-addr.arpa udp
US 8.8.8.8:53 107.192.165.188.in-addr.arpa udp
US 8.8.8.8:53 94.210.115.181.in-addr.arpa udp
US 8.8.8.8:53 125.59.84.114.in-addr.arpa udp
US 8.8.8.8:53 94.35.42.49.in-addr.arpa udp
US 8.8.8.8:53 174.84.68.104.in-addr.arpa udp
US 8.8.8.8:53 124.84.154.18.in-addr.arpa udp
US 8.8.8.8:53 analytics.apis.mcafee.com udp
US 18.211.212.102:443 track.analytics-data.io tcp
US 54.69.157.31:443 analytics.apis.mcafee.com tcp
US 18.211.212.102:443 track.analytics-data.io tcp
US 8.8.8.8:53 electron-shell.reasonsecurity.com udp
US 54.69.157.31:443 analytics.apis.mcafee.com tcp
GB 108.156.46.38:443 electron-shell.reasonsecurity.com tcp
US 8.8.8.8:53 38.46.156.108.in-addr.arpa udp
US 8.8.8.8:53 31.157.69.54.in-addr.arpa udp
CN 36.102.218.179:23685 udp
RO 5.12.254.145:6881 udp
MY 113.211.210.94:61262 udp
ES 85.51.18.94:37328 udp
SE 83.227.78.54:40791 udp
IL 109.186.97.90:19396 udp
US 8.8.8.8:53 179.218.102.36.in-addr.arpa udp
US 8.8.8.8:53 145.254.12.5.in-addr.arpa udp
US 8.8.8.8:53 94.210.211.113.in-addr.arpa udp
US 8.8.8.8:53 94.18.51.85.in-addr.arpa udp
US 8.8.8.8:53 54.78.227.83.in-addr.arpa udp
US 8.8.8.8:53 90.97.186.109.in-addr.arpa udp
RU 95.52.147.204:6881 udp
KG 5.59.230.31:44159 udp
RU 109.171.38.31:32802 udp
BR 189.11.166.31:53186 udp
RU 95.24.209.235:43023 udp
CN 117.42.234.85:44519 udp
CN 114.246.239.183:9055 udp
RU 93.171.102.31:4353 udp
PK 103.172.167.141:40200 udp
US 71.113.188.136:12581 udp
JP 115.162.13.156:12581 udp
RU 46.0.175.52:12581 udp
CN 36.102.218.179:27079 udp
US 8.8.8.8:53 204.147.52.95.in-addr.arpa udp
US 8.8.8.8:53 31.230.59.5.in-addr.arpa udp
US 8.8.8.8:53 31.38.171.109.in-addr.arpa udp
US 8.8.8.8:53 31.166.11.189.in-addr.arpa udp
US 8.8.8.8:53 235.209.24.95.in-addr.arpa udp
US 8.8.8.8:53 85.234.42.117.in-addr.arpa udp
US 8.8.8.8:53 183.239.246.114.in-addr.arpa udp
US 8.8.8.8:53 31.102.171.93.in-addr.arpa udp
US 8.8.8.8:53 141.167.172.103.in-addr.arpa udp
US 8.8.8.8:53 136.188.113.71.in-addr.arpa udp
US 8.8.8.8:53 156.13.162.115.in-addr.arpa udp
US 8.8.8.8:53 52.175.0.46.in-addr.arpa udp
GB 128.116.119.4:443 www.roblox.com tcp
KR 14.56.181.183:33181 udp
NL 83.149.84.137:15186 udp
N/A 10.255.255.1:15144 udp
US 8.8.8.8:53 1.255.255.10.in-addr.arpa udp
US 71.113.188.136:12581 tcp
RU 78.153.6.91:31674 tcp
US 18.211.212.102:443 track.analytics-data.io tcp
KR 125.131.230.249:12581 udp
JP 115.162.13.156:12581 tcp
RU 46.188.37.87:23837 tcp
RU 46.0.175.52:12581 tcp
US 8.8.8.8:53 249.230.131.125.in-addr.arpa udp
RU 37.75.206.46:12581 udp
RU 79.136.205.150:12581 udp
US 18.211.212.102:443 track.analytics-data.io tcp
US 8.8.8.8:53 46.206.75.37.in-addr.arpa udp
US 8.8.8.8:53 150.205.136.79.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
KR 121.159.189.187:40874 udp
AE 109.177.211.102:6881 udp
KR 221.149.94.60:17629 udp
NL 109.201.152.164:59927 udp
NL 213.227.129.3:51413 udp
SI 146.212.70.152:27184 udp
RU 94.141.171.115:51414 udp
RU 95.26.16.50:48002 udp
FR 51.159.54.53:54526 udp
RU 176.197.182.162:6881 udp
NL 185.149.91.175:51020 udp
RU 79.173.127.104:5215 udp
RU 46.138.43.116:2897 udp
KR 182.230.16.20:57367 udp
TH 182.232.218.40:48195 udp
FR 51.255.109.62:15671 udp
NL 89.149.200.93:28070 udp
BR 138.204.27.126:13607 udp
FR 82.64.144.187:6887 udp
KR 112.168.170.9:60528 udp
RU 185.199.162.69:12021 udp
US 13.59.176.186:6880 udp
RU 77.37.137.151:25773 udp
DE 23.158.56.120:16090 udp
RU 188.32.139.137:6881 udp
US 24.154.112.152:36529 udp
KR 58.126.188.3:33010 udp
FR 62.210.129.10:5370 udp
HU 86.101.27.131:48844 udp
KR 182.252.32.11:31215 udp
KR 118.34.197.87:41019 udp
RU 194.28.31.201:32000 udp
MY 180.73.147.18:9010 udp
GB 45.159.152.159:56263 udp
MD 92.115.2.92:8999 udp
ES 93.176.129.12:42253 udp
FR 37.187.114.206:53978 udp
RU 95.24.19.9:54026 udp
NL 95.211.110.228:28016 udp
GB 78.105.9.205:49441 udp
HU 62.165.218.187:16527 udp
KR 61.83.218.116:7777 udp
HU 78.92.45.180:20242 udp
NL 178.162.174.183:28015 udp
NL 45.136.230.197:51413 udp
CA 142.114.107.129:25792 udp
RU 178.140.208.214:63299 udp
UA 92.249.112.114:8621 udp
ES 37.230.93.99:52475 udp
RU 46.160.233.203:4865 udp
CO 181.71.190.219:50553 udp
US 173.62.236.22:40351 udp
KR 114.205.150.97:7695 udp
ES 84.236.211.157:30120 udp
NL 213.227.140.22:48234 udp
JP 27.82.184.76:10803 udp
PL 77.253.200.143:51413 udp
IN 27.62.4.125:21653 udp
ZA 105.245.168.95:46822 udp
AU 122.148.251.130:7785 udp
NL 86.87.204.93:27225 udp
TR 178.244.95.88:4167 udp
MO 60.246.57.23:9384 udp
RU 188.243.183.216:18177 udp
PH 180.191.40.180:23031 udp
RU 95.159.142.40:56293 udp
KR 112.187.123.164:62951 udp
DE 62.171.169.198:38166 udp
ID 182.1.198.68:55783 udp
SE 188.149.174.184:62606 udp
BD 37.111.245.246:6957 udp
IN 42.110.166.11:20158 udp
TH 49.228.42.229:41405 udp
MY 180.75.253.255:41750 udp
MM 117.18.229.130:60258 udp
GB 212.159.136.11:55944 udp
AO 105.172.191.141:40718 udp
IL 85.250.143.244:6881 udp
MA 196.121.71.68:45190 udp
BR 179.68.22.219:5145 udp
AR 181.94.25.243:44877 udp
JM 67.230.43.58:9296 udp
RU 5.18.252.8:24729 udp
RU 79.136.205.150:12581 tcp
RU 37.75.206.46:12581 tcp
KR 125.131.230.249:12581 tcp
US 54.69.157.31:443 analytics.apis.mcafee.com tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 187.189.159.121.in-addr.arpa udp
US 8.8.8.8:53 102.211.177.109.in-addr.arpa udp
US 8.8.8.8:53 60.94.149.221.in-addr.arpa udp
US 8.8.8.8:53 3.188.126.58.in-addr.arpa udp
US 8.8.8.8:53 3.129.227.213.in-addr.arpa udp
US 8.8.8.8:53 152.70.212.146.in-addr.arpa udp
US 8.8.8.8:53 203.233.160.46.in-addr.arpa udp
US 8.8.8.8:53 99.93.230.37.in-addr.arpa udp
US 8.8.8.8:53 114.112.249.92.in-addr.arpa udp
US 8.8.8.8:53 214.208.140.178.in-addr.arpa udp
US 8.8.8.8:53 129.107.114.142.in-addr.arpa udp
US 8.8.8.8:53 197.230.136.45.in-addr.arpa udp
US 8.8.8.8:53 183.174.162.178.in-addr.arpa udp
US 8.8.8.8:53 180.45.92.78.in-addr.arpa udp
US 8.8.8.8:53 116.218.83.61.in-addr.arpa udp
US 8.8.8.8:53 187.218.165.62.in-addr.arpa udp
US 8.8.8.8:53 205.9.105.78.in-addr.arpa udp
US 8.8.8.8:53 228.110.211.95.in-addr.arpa udp
US 8.8.8.8:53 9.19.24.95.in-addr.arpa udp
US 8.8.8.8:53 206.114.187.37.in-addr.arpa udp
US 8.8.8.8:53 12.129.176.93.in-addr.arpa udp
US 8.8.8.8:53 92.2.115.92.in-addr.arpa udp
US 8.8.8.8:53 159.152.159.45.in-addr.arpa udp
US 8.8.8.8:53 18.147.73.180.in-addr.arpa udp
US 8.8.8.8:53 201.31.28.194.in-addr.arpa udp
US 8.8.8.8:53 87.197.34.118.in-addr.arpa udp
US 8.8.8.8:53 11.32.252.182.in-addr.arpa udp
US 8.8.8.8:53 131.27.101.86.in-addr.arpa udp
US 8.8.8.8:53 10.129.210.62.in-addr.arpa udp
US 8.8.8.8:53 115.171.141.94.in-addr.arpa udp
US 8.8.8.8:53 50.16.26.95.in-addr.arpa udp
US 8.8.8.8:53 53.54.159.51.in-addr.arpa udp
US 8.8.8.8:53 162.182.197.176.in-addr.arpa udp
US 8.8.8.8:53 175.91.149.185.in-addr.arpa udp
US 8.8.8.8:53 104.127.173.79.in-addr.arpa udp
US 8.8.8.8:53 116.43.138.46.in-addr.arpa udp
US 8.8.8.8:53 20.16.230.182.in-addr.arpa udp
US 8.8.8.8:53 62.109.255.51.in-addr.arpa udp
US 8.8.8.8:53 40.218.232.182.in-addr.arpa udp
US 8.8.8.8:53 93.200.149.89.in-addr.arpa udp
US 8.8.8.8:53 126.27.204.138.in-addr.arpa udp
US 8.8.8.8:53 9.170.168.112.in-addr.arpa udp
US 8.8.8.8:53 151.137.37.77.in-addr.arpa udp
US 8.8.8.8:53 152.112.154.24.in-addr.arpa udp
US 8.8.8.8:53 219.190.71.181.in-addr.arpa udp
US 8.8.8.8:53 22.236.62.173.in-addr.arpa udp
US 8.8.8.8:53 187.144.64.82.in-addr.arpa udp
US 8.8.8.8:53 69.162.199.185.in-addr.arpa udp
US 8.8.8.8:53 97.150.205.114.in-addr.arpa udp
US 8.8.8.8:53 186.176.59.13.in-addr.arpa udp
US 8.8.8.8:53 157.211.236.84.in-addr.arpa udp
US 8.8.8.8:53 22.140.227.213.in-addr.arpa udp
US 8.8.8.8:53 120.56.158.23.in-addr.arpa udp
US 8.8.8.8:53 137.139.32.188.in-addr.arpa udp
US 8.8.8.8:53 76.184.82.27.in-addr.arpa udp
US 8.8.8.8:53 143.200.253.77.in-addr.arpa udp
US 8.8.8.8:53 164.152.201.109.in-addr.arpa udp
US 8.8.8.8:53 125.4.62.27.in-addr.arpa udp
US 8.8.8.8:53 95.168.245.105.in-addr.arpa udp
US 8.8.8.8:53 130.251.148.122.in-addr.arpa udp
US 8.8.8.8:53 93.204.87.86.in-addr.arpa udp
US 8.8.8.8:53 88.95.244.178.in-addr.arpa udp
US 8.8.8.8:53 23.57.246.60.in-addr.arpa udp
US 8.8.8.8:53 216.183.243.188.in-addr.arpa udp
US 8.8.8.8:53 180.40.191.180.in-addr.arpa udp
US 8.8.8.8:53 40.142.159.95.in-addr.arpa udp
US 8.8.8.8:53 164.123.187.112.in-addr.arpa udp
US 8.8.8.8:53 198.169.171.62.in-addr.arpa udp
US 8.8.8.8:53 68.198.1.182.in-addr.arpa udp
US 8.8.8.8:53 184.174.149.188.in-addr.arpa udp
US 8.8.8.8:53 246.245.111.37.in-addr.arpa udp
US 8.8.8.8:53 11.166.110.42.in-addr.arpa udp
US 8.8.8.8:53 229.42.228.49.in-addr.arpa udp
US 8.8.8.8:53 255.253.75.180.in-addr.arpa udp
US 8.8.8.8:53 130.229.18.117.in-addr.arpa udp
US 8.8.8.8:53 11.136.159.212.in-addr.arpa udp
US 8.8.8.8:53 141.191.172.105.in-addr.arpa udp
US 8.8.8.8:53 244.143.250.85.in-addr.arpa udp
US 8.8.8.8:53 68.71.121.196.in-addr.arpa udp
US 8.8.8.8:53 219.22.68.179.in-addr.arpa udp
US 8.8.8.8:53 243.25.94.181.in-addr.arpa udp
US 8.8.8.8:53 58.43.230.67.in-addr.arpa udp
US 8.8.8.8:53 8.252.18.5.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:58912 tcp
US 18.211.212.102:443 track.analytics-data.io tcp
US 8.8.8.8:53 cdn.reasonsecurity.com udp
US 18.211.212.102:443 track.analytics-data.io tcp
GB 99.84.9.18:443 cdn.reasonsecurity.com tcp
US 8.8.8.8:53 18.9.84.99.in-addr.arpa udp
JP 81.181.58.59:24652 udp
US 8.8.8.8:53 59.58.181.81.in-addr.arpa udp
US 18.211.212.102:443 track.analytics-data.io tcp
US 18.211.212.102:443 track.analytics-data.io tcp
US 8.8.8.8:53 sadownload.mcafee.com udp
NL 96.16.53.155:443 sadownload.mcafee.com tcp
US 18.211.212.102:443 track.analytics-data.io tcp
US 18.211.212.102:443 track.analytics-data.io tcp
KR 120.50.66.121:40846 udp
US 8.8.8.8:53 121.66.50.120.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
KR 114.29.119.122:33197 udp
US 8.8.8.8:53 122.119.29.114.in-addr.arpa udp
N/A 239.192.152.143:6771 udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 www.microsoft.com udp
BE 2.21.17.194:80 www.microsoft.com tcp
US 8.8.8.8:53 194.17.21.2.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
BG 213.169.62.220:41460 udp
US 8.8.8.8:53 220.62.169.213.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 18.211.212.102:443 track.analytics-data.io tcp
US 18.211.212.102:443 track.analytics-data.io tcp
US 8.8.8.8:53 track.analytics-data.io udp
US 18.211.212.102:443 track.analytics-data.io tcp
US 18.211.212.102:443 track.analytics-data.io tcp
KR 220.121.162.175:40887 udp
US 8.8.8.8:53 175.162.121.220.in-addr.arpa udp
US 18.211.212.102:443 track.analytics-data.io tcp
US 18.211.212.102:443 track.analytics-data.io tcp
BE 2.21.17.194:80 www.microsoft.com tcp
KR 221.139.119.182:41120 udp
US 8.8.8.8:53 182.119.139.221.in-addr.arpa udp
GB 18.154.84.124:443 update.reasonsecurity.com tcp
US 18.211.212.102:443 track.analytics-data.io tcp
US 18.211.212.102:443 track.analytics-data.io tcp
GB 99.84.9.18:443 cdn.reasonsecurity.com tcp
N/A 127.0.0.1:4577 tcp
KR 210.180.105.129:40812 udp
US 8.8.8.8:53 129.105.180.210.in-addr.arpa udp
US 18.211.212.102:443 track.analytics-data.io tcp
US 18.211.212.102:443 track.analytics-data.io tcp
US 18.211.212.102:443 track.analytics-data.io tcp
US 18.211.212.102:443 track.analytics-data.io tcp
US 8.8.8.8:53 www.microsoft.com udp
BE 2.21.17.194:80 www.microsoft.com tcp
KR 14.36.228.231:7722 udp
US 8.8.8.8:53 231.228.36.14.in-addr.arpa udp
US 8.8.8.8:53 config.reasonsecurity.com udp
GB 99.86.114.64:443 config.reasonsecurity.com tcp
US 8.8.8.8:53 64.114.86.99.in-addr.arpa udp
KR 125.134.138.123:25519 udp
US 8.8.8.8:53 123.138.134.125.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 18.211.212.102:443 track.analytics-data.io tcp
KR 218.233.138.183:40780 udp
US 8.8.8.8:53 183.138.233.218.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
GB 99.86.114.64:443 config.reasonsecurity.com tcp
KR 106.249.222.13:7866 udp
US 8.8.8.8:53 13.222.249.106.in-addr.arpa udp
US 8.8.8.8:53 track.analytics-data.io udp
US 18.234.5.234:443 track.analytics-data.io tcp
US 8.8.8.8:53 api.reasonsecurity.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 234.5.234.18.in-addr.arpa udp
US 18.211.212.102:443 track.analytics-data.io tcp
US 18.211.212.102:443 track.analytics-data.io tcp
KR 221.162.119.89:40866 udp
US 8.8.8.8:53 89.119.162.221.in-addr.arpa udp
US 8.8.8.8:53 170.185.250.142.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 mc6.reasonsecurity.com udp
US 18.234.5.234:443 track.analytics-data.io tcp
US 18.234.5.234:443 track.analytics-data.io tcp
US 52.34.150.127:443 mc6.reasonsecurity.com tcp
US 8.8.8.8:53 127.150.34.52.in-addr.arpa udp
KR 211.206.102.45:59117 udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:53 45.102.206.211.in-addr.arpa udp
US 18.234.5.234:443 track.analytics-data.io tcp
US 20.7.47.135:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 18.234.5.234:443 track.analytics-data.io tcp
US 18.234.5.234:443 track.analytics-data.io tcp
US 18.234.5.234:443 track.analytics-data.io tcp
US 18.234.5.234:443 track.analytics-data.io tcp
US 18.234.5.234:443 track.analytics-data.io tcp
US 18.234.5.234:443 track.analytics-data.io tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 18.234.5.234:443 track.analytics-data.io tcp
N/A 127.0.0.1:4577 tcp
KR 210.119.81.110:8010 udp
US 8.8.8.8:53 110.81.119.210.in-addr.arpa udp
US 18.234.5.234:443 track.analytics-data.io tcp
US 8.8.8.8:53 update.reasonsecurity.com udp
GB 18.154.84.54:443 update.reasonsecurity.com tcp
US 18.234.5.234:443 track.analytics-data.io tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 cdn.reasonsecurity.com udp
US 18.234.5.234:443 track.analytics-data.io tcp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
GB 99.84.9.4:443 cdn.reasonsecurity.com tcp
US 8.8.8.8:53 54.84.154.18.in-addr.arpa udp
US 8.8.8.8:53 4.9.84.99.in-addr.arpa udp
US 18.234.5.234:443 track.analytics-data.io tcp
US 18.234.5.234:443 track.analytics-data.io tcp
US 18.234.5.234:443 track.analytics-data.io tcp
US 18.234.5.234:443 track.analytics-data.io tcp
KR 59.10.186.104:40829 udp
US 8.8.8.8:53 104.186.10.59.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 www.microsoft.com udp
BE 2.21.17.194:80 www.microsoft.com tcp
RU 5.187.75.38:56191 udp
US 8.8.8.8:53 38.75.187.5.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 edr-api.reasonlabsapi.com udp
GB 143.204.194.48:443 edr-api.reasonlabsapi.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 48.194.204.143.in-addr.arpa udp
US 18.211.212.102:443 track.analytics-data.io tcp
RU 185.3.182.102:4742 udp
US 8.8.8.8:53 102.182.3.185.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
RU 195.239.56.66:41873 udp
US 8.8.8.8:53 66.56.239.195.in-addr.arpa udp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 msedgeextensions.b.tlu.dl.delivery.mp.microsoft.com udp
US 152.199.19.161:80 msedgeextensions.b.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 239.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 bazaar.abuse.ch udp
RU 95.191.33.211:62944 udp
US 8.8.8.8:53 211.33.191.95.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
RU 95.24.202.31:45377 udp
US 8.8.8.8:53 31.202.24.95.in-addr.arpa udp
US 8.8.8.8:53 config.reasonsecurity.com udp
GB 99.86.114.69:443 config.reasonsecurity.com tcp
US 8.8.8.8:53 69.114.86.99.in-addr.arpa udp
US 8.8.8.8:53 ud.reasonsecurity.com udp
GB 18.245.218.48:443 ud.reasonsecurity.com tcp
US 8.8.8.8:53 48.218.245.18.in-addr.arpa udp
US 8.8.8.8:53 safer-web.reasonsecurity.com udp
US 18.234.5.234:443 track.analytics-data.io tcp
US 18.234.5.234:443 track.analytics-data.io tcp
RU 94.180.96.69:40711 udp
US 8.8.8.8:53 www.microsoft.com udp
BE 2.21.17.194:80 www.microsoft.com tcp
US 8.8.8.8:53 69.96.180.94.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
N/A 127.0.0.1:4577 tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
NL 45.87.250.98:54413 udp
US 18.234.5.234:443 track.analytics-data.io tcp
US 8.8.8.8:53 98.250.87.45.in-addr.arpa udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
GB 143.204.68.68:443 safer-web.reasonsecurity.com tcp
US 8.8.8.8:53 68.68.204.143.in-addr.arpa udp
US 8.8.8.8:53 track.analytics-data.io udp
US 107.22.175.110:443 track.analytics-data.io tcp
US 8.8.8.8:53 110.175.22.107.in-addr.arpa udp
RU 89.185.93.22:51413 udp
US 8.8.8.8:53 22.93.185.89.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
JP 115.162.13.156:12581 tcp
RU 78.153.6.91:31674 tcp
RU 37.20.226.162:4862 udp
US 8.8.8.8:53 162.226.20.37.in-addr.arpa udp
NL 23.62.61.97:443 www.bing.com tcp
IE 86.45.162.164:25509 udp
US 8.8.8.8:53 164.162.45.86.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
HU 91.147.215.156:51413 udp
US 8.8.8.8:53 156.215.147.91.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 71.113.188.136:12581 tcp
RU 46.0.175.52:12581 tcp
US 8.8.8.8:53 xnescat.info udp
US 199.59.243.225:80 xnescat.info tcp
US 199.59.243.225:80 xnescat.info tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.178.4:443 www.google.com udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
GB 172.217.16.238:443 www.adsensecustomsearchads.com tcp
US 8.8.8.8:53 partner.googleadservices.com udp
DE 142.250.186.34:443 partner.googleadservices.com tcp
GB 172.217.16.238:443 www.adsensecustomsearchads.com tcp
GB 172.217.16.238:443 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 34.186.250.142.in-addr.arpa udp
US 8.8.8.8:53 238.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 afs.googleusercontent.com udp
GB 142.250.200.33:443 afs.googleusercontent.com tcp
GB 142.250.200.33:443 afs.googleusercontent.com tcp
BE 91.177.59.29:6881 udp
RU 79.136.205.150:12581 tcp
RU 37.75.206.46:12581 tcp
KR 125.131.230.249:12581 tcp
US 8.8.8.8:53 33.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 29.59.177.91.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
KR 59.9.176.158:8212 udp
US 8.8.8.8:53 158.176.9.59.in-addr.arpa udp
US 8.8.8.8:53 syndicatedsearch.goog udp
DE 142.250.186.78:443 syndicatedsearch.goog tcp
DE 142.250.186.78:443 syndicatedsearch.goog tcp
US 8.8.8.8:53 click-euw1.bodis.com udp
US 8.8.8.8:53 78.186.250.142.in-addr.arpa udp
US 8.8.8.8:53 buy.norton.com udp
BE 104.68.89.179:443 buy.norton.com tcp
US 199.59.243.206:443 click-euw1.bodis.com tcp
US 199.59.243.206:443 click-euw1.bodis.com tcp
US 8.8.8.8:53 buy-static.norton.com udp
BE 104.90.25.116:80 buy-static.norton.com tcp
US 8.8.8.8:53 102.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 179.89.68.104.in-addr.arpa udp
US 8.8.8.8:53 206.243.59.199.in-addr.arpa udp
BE 104.90.25.237:80 uk.norton.com tcp
BE 104.90.25.237:80 uk.norton.com tcp
BE 23.55.96.141:443 s.go-mpulse.net tcp
BE 104.90.25.237:443 uk.norton.com tcp
US 8.8.8.8:53 c.go-mpulse.net udp
BE 23.55.96.141:443 c.go-mpulse.net tcp
BE 23.55.96.141:443 c.go-mpulse.net tcp
US 8.8.8.8:53 684dd331.akstat.io udp
US 8.8.8.8:53 116.25.90.104.in-addr.arpa udp
US 8.8.8.8:53 237.25.90.104.in-addr.arpa udp
US 8.8.8.8:53 trial-eum-clientnsv4-s.akamaihd.net udp
US 8.8.8.8:53 trial-eum-clienttons-s.akamaihd.net udp
US 2.18.190.82:443 trial-eum-clientnsv4-s.akamaihd.net tcp
US 2.18.190.68:443 trial-eum-clienttons-s.akamaihd.net tcp
US 8.8.8.8:53 x5s5cjycck7fezr7qkba-pk4a6a-d8bbedd41-clientnsv4-s.akamaihd.net udp
US 8.8.8.8:53 191-101-209-39_s-2-18-190-68_ts-1715438210-clienttons-s.akamaihd.net udp
US 2.18.190.75:443 x5s5cjycck7fezr7qkba-pk4a6a-d8bbedd41-clientnsv4-s.akamaihd.net tcp
US 2.18.190.68:443 191-101-209-39_s-2-18-190-68_ts-1715438210-clienttons-s.akamaihd.net tcp
US 8.8.8.8:53 www.nortonlifelock.com udp
US 8.8.8.8:53 ensighten.norton.com udp
US 8.8.8.8:53 assets.adobedtm.com udp
BE 104.90.25.237:443 www.nortonlifelock.com tcp
US 23.53.113.19:443 assets.adobedtm.com tcp
IE 34.242.179.188:443 ensighten.norton.com tcp
US 8.8.8.8:53 68.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 82.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 75.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 19.113.53.23.in-addr.arpa udp
US 8.8.8.8:53 188.179.242.34.in-addr.arpa udp
US 8.8.8.8:53 www.youtube-nocookie.com udp
GB 172.217.169.78:443 www.youtube-nocookie.com tcp
BE 104.68.89.179:443 buy.norton.com tcp
PL 89.75.33.82:44624 udp
US 8.8.8.8:53 www.youtube.com udp
GB 172.217.169.78:443 www.youtube.com tcp
GB 172.217.169.78:443 www.youtube.com udp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 dpm.demdex.net udp
GB 142.250.187.214:443 i.ytimg.com tcp
IE 54.74.194.229:443 dpm.demdex.net tcp
IE 54.74.194.229:443 dpm.demdex.net tcp
US 8.8.8.8:53 oms.norton.com udp
IE 66.235.152.225:443 oms.norton.com tcp
US 8.8.8.8:53 symantec.tt.omtrdc.net udp
US 8.8.8.8:53 78.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 82.33.75.89.in-addr.arpa udp
US 8.8.8.8:53 214.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 229.194.74.54.in-addr.arpa udp
IE 66.235.152.225:443 symantec.tt.omtrdc.net tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 142.250.180.10:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 yt3.ggpht.com udp
GB 142.250.187.225:443 yt3.ggpht.com tcp
GB 142.250.180.10:443 jnn-pa.googleapis.com tcp
GB 142.250.180.10:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 225.152.235.66.in-addr.arpa udp
US 8.8.8.8:53 10.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 225.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 d.impactradius-event.com udp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 cdn.quantummetric.com udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 d34r8q7sht0t9k.cloudfront.net udp
US 8.8.8.8:53 www.redditstatic.com udp
US 8.8.8.8:53 www.tag4arm.com udp
US 8.8.8.8:53 tags.creativecdn.com udp
US 8.8.8.8:53 s.yimg.com udp
US 35.186.249.72:443 d.impactradius-event.com tcp
US 204.79.197.237:443 bat.bing.com tcp
GB 163.70.151.21:443 connect.facebook.net tcp
US 172.67.20.158:443 cdn.quantummetric.com tcp
GB 13.43.62.196:443 www.tag4arm.com tcp
US 151.101.1.140:443 www.redditstatic.com tcp
GB 87.248.114.11:443 s.yimg.com tcp
NL 23.62.61.96:443 analytics.tiktok.com tcp
GB 18.164.66.77:443 d34r8q7sht0t9k.cloudfront.net tcp
GB 195.181.164.17:443 tags.creativecdn.com tcp
US 8.8.8.8:53 zn7ngvh48sidro926-gendigital.siteintercept.qualtrics.com udp
US 8.8.8.8:53 pixel.byspotify.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 34.117.162.98:443 pixel.byspotify.com tcp
US 151.101.1.140:443 www.redditstatic.com tcp
US 8.8.8.8:53 tag.bounceexchange.com udp
US 8.8.8.8:53 websdk.ujet.co udp
IE 67.220.224.150:443 aax-eu.amazon-adsystem.com tcp
GB 13.224.132.66:443 websdk.ujet.co tcp
US 8.8.8.8:53 ams.creativecdn.com udp
US 151.101.1.44:443 cdn.taboola.com tcp
US 104.17.208.240:443 zn7ngvh48sidro926-gendigital.siteintercept.qualtrics.com tcp
US 8.8.8.8:53 alb.reddit.com udp
NL 185.184.8.90:443 ams.creativecdn.com tcp
US 8.8.8.8:53 sp.analytics.yahoo.com udp
US 8.8.8.8:53 72.249.186.35.in-addr.arpa udp
US 8.8.8.8:53 norton.ow5a.net udp
US 8.8.8.8:53 158.20.67.172.in-addr.arpa udp
US 8.8.8.8:53 140.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 11.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 196.62.43.13.in-addr.arpa udp
US 8.8.8.8:53 77.66.164.18.in-addr.arpa udp
US 8.8.8.8:53 96.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 17.164.181.195.in-addr.arpa udp
US 8.8.8.8:53 150.224.220.67.in-addr.arpa udp
US 8.8.8.8:53 44.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 240.208.17.104.in-addr.arpa udp
US 8.8.8.8:53 66.132.224.13.in-addr.arpa udp
US 151.101.1.140:443 alb.reddit.com tcp
US 34.120.253.250:443 tag.bounceexchange.com tcp
IE 3.255.41.64:443 sp.analytics.yahoo.com tcp
IE 3.255.41.64:443 sp.analytics.yahoo.com tcp
IE 52.31.43.153:443 norton.ow5a.net tcp
NL 185.184.8.90:443 ams.creativecdn.com tcp
US 8.8.8.8:53 siteintercept.qualtrics.com udp
US 8.8.8.8:53 trc.taboola.com udp
US 8.8.8.8:53 evnt.byspotify.com udp
US 34.111.186.1:443 evnt.byspotify.com tcp
US 151.101.1.140:443 alb.reddit.com tcp
US 8.8.8.8:53 assets.bounceexchange.com udp
US 8.8.8.8:53 events.bouncex.net udp
US 8.8.8.8:53 www.ojrq.net udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 ipv4.podscribe.com udp
US 34.98.72.95:443 assets.bounceexchange.com tcp
US 34.95.127.121:443 www.ojrq.net tcp
US 3.234.93.15:443 ipv4.podscribe.com tcp
GB 157.240.221.35:443 www.facebook.com tcp
US 34.111.8.32:443 events.bouncex.net tcp
US 34.111.186.1:443 evnt.byspotify.com udp
US 34.98.72.95:443 assets.bounceexchange.com udp
US 8.8.8.8:53 250.253.120.34.in-addr.arpa udp
US 8.8.8.8:53 153.43.31.52.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 1.186.111.34.in-addr.arpa udp
US 8.8.8.8:53 121.127.95.34.in-addr.arpa udp
US 8.8.8.8:53 95.72.98.34.in-addr.arpa udp
US 8.8.8.8:53 35.221.240.157.in-addr.arpa udp
US 8.8.8.8:53 32.8.111.34.in-addr.arpa udp
US 8.8.8.8:53 15.93.234.3.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 verifi.podscribe.com udp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 44.218.21.29:443 verifi.podscribe.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
NL 185.89.210.212:443 ib.adnxs.com tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
GB 142.250.179.230:443 8843044.fls.doubleclick.net tcp
US 216.239.34.36:443 region1.analytics.google.com udp
BE 64.233.167.155:443 stats.g.doubleclick.net udp
US 173.53.7.32:43125 udp
GB 142.250.179.230:443 8843044.fls.doubleclick.net udp
US 8.8.8.8:53 ingest.quantummetric.com udp
US 34.70.83.251:443 ingest.quantummetric.com tcp
US 34.111.8.32:443 events.bouncex.net tcp
US 34.111.8.32:443 events.bouncex.net tcp
US 8.8.8.8:53 trc-events.taboola.com udp
NL 141.226.228.48:443 trc-events.taboola.com tcp
US 34.111.8.32:443 events.bouncex.net udp
GB 216.58.204.67:443 www.google.co.uk udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 212.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 29.21.218.44.in-addr.arpa udp
US 8.8.8.8:53 230.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 32.7.53.173.in-addr.arpa udp
US 8.8.8.8:53 2.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 251.83.70.34.in-addr.arpa udp
US 8.8.8.8:53 48.228.226.141.in-addr.arpa udp
GB 13.224.132.66:443 websdk.ujet.co tcp
US 8.8.8.8:53 support.norton.com udp
US 23.53.112.35:443 support.norton.com tcp
US 8.8.8.8:53 nlok-prod-4l9eze7.uw1.ccaiplatform.com udp
US 34.149.99.248:443 nlok-prod-4l9eze7.uw1.ccaiplatform.com tcp
US 23.53.112.35:443 support.norton.com tcp
US 34.149.99.248:443 nlok-prod-4l9eze7.uw1.ccaiplatform.com udp
NL 141.226.228.48:443 trc-events.taboola.com tcp
US 8.8.8.8:53 248.99.149.34.in-addr.arpa udp
US 8.8.8.8:53 35.112.53.23.in-addr.arpa udp
DE 51.38.122.220:6881 udp
US 8.8.8.8:53 220.122.38.51.in-addr.arpa udp
US 8.8.8.8:53 w3-reporting-nel.reddit.com udp
US 151.101.1.140:443 w3-reporting-nel.reddit.com tcp
US 151.101.1.140:443 w3-reporting-nel.reddit.com tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
BR 187.101.17.39:39734 udp
US 8.8.8.8:53 39.17.101.187.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
ES 89.35.151.240:43716 udp
US 8.8.8.8:53 240.151.35.89.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
IE 34.242.179.188:443 ensighten.norton.com tcp
MD 217.19.215.240:22093 udp
US 8.8.8.8:53 240.215.19.217.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
RU 164.215.49.75:6881 udp
US 8.8.8.8:53 75.49.215.164.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.187.206:443 play.google.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
N/A 127.0.0.1:4577 tcp
FI 185.148.1.100:24581 udp
US 8.8.8.8:53 100.1.148.185.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
N/A 127.0.0.1:4577 tcp
NL 169.150.223.208:53165 udp
US 8.8.8.8:53 208.223.150.169.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
HK 221.127.167.155:8761 udp
US 8.8.8.8:53 155.167.127.221.in-addr.arpa udp
GB 191.101.209.39:12581 udp
RU 5.165.145.152:6881 udp
US 8.8.8.8:53 152.145.165.5.in-addr.arpa udp
US 8.8.8.8:53 159.113.53.23.in-addr.arpa udp
US 8.8.8.8:53 178.223.142.52.in-addr.arpa udp
GB 191.101.209.39:12581 tcp
RU 176.212.146.195:6881 udp
US 8.8.8.8:53 195.146.212.176.in-addr.arpa udp
US 34.70.83.251:443 ingest.quantummetric.com tcp
RU 37.192.114.171:6882 udp
US 8.8.8.8:53 171.114.192.37.in-addr.arpa udp
GB 172.217.169.78:443 www.youtube-nocookie.com udp
RU 95.24.61.180:22984 udp
US 8.8.8.8:53 180.61.24.95.in-addr.arpa udp
BR 189.100.69.110:18238 udp
US 8.8.8.8:53 110.69.100.189.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 74.19.199.152.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
NZ 115.188.34.35:46511 udp
US 8.8.8.8:53 35.34.188.115.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
RU 195.93.165.102:1044 udp
US 8.8.8.8:53 102.165.93.195.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 submit.reasonsecurity.com udp
US 104.22.0.235:443 submit.reasonsecurity.com tcp
US 8.8.8.8:53 235.0.22.104.in-addr.arpa udp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
CN 112.46.73.149:51413 udp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 8.8.8.8:53 149.73.46.112.in-addr.arpa udp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 34.70.83.251:443 ingest.quantummetric.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
NL 23.62.61.106:443 www.bing.com tcp
US 8.8.8.8:53 106.61.62.23.in-addr.arpa udp
US 34.70.83.251:443 ingest.quantummetric.com tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
NL 23.62.61.155:443 th.bing.com tcp
NL 23.62.61.155:443 th.bing.com tcp
NL 23.62.61.155:443 th.bing.com tcp
NL 23.62.61.155:443 th.bing.com tcp
IN 157.51.87.240:1024 udp
US 8.8.8.8:53 155.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 240.87.51.157.in-addr.arpa udp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
BR 177.131.23.240:31101 udp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 8.8.8.8:53 240.23.131.177.in-addr.arpa udp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 8.8.8.8:53 167.154.64.172.in-addr.arpa udp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 34.70.83.251:443 ingest.quantummetric.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 54.70.28.180:6881 udp
US 8.8.8.8:53 180.28.70.54.in-addr.arpa udp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 8.8.8.8:53 events.bouncex.net udp
US 8.8.8.8:53 pd.cdnwidget.com udp
US 34.111.8.32:443 events.bouncex.net udp
US 34.111.8.32:443 events.bouncex.net udp
US 34.149.130.207:443 pd.cdnwidget.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 8.8.8.8:53 207.130.149.34.in-addr.arpa udp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 8.8.8.8:53 ensighten.norton.com udp
IE 34.242.179.188:443 ensighten.norton.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
IE 54.194.135.233:6992 udp
US 8.8.8.8:53 233.135.194.54.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
GB 172.217.169.78:443 www.youtube-nocookie.com udp
US 34.70.83.251:443 ingest.quantummetric.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
NL 195.170.172.38:10240 udp
NL 141.226.228.48:443 trc-events.taboola.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 8.8.8.8:53 38.172.170.195.in-addr.arpa udp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
IE 34.242.179.188:443 ensighten.norton.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 s.go-mpulse.net udp
BE 23.55.96.141:443 s.go-mpulse.net tcp
BE 104.90.25.237:443 uk.norton.com tcp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 204.79.197.237:443 bat.bing.com tcp
US 8.8.8.8:53 www.nortonlifelock.com udp
US 8.8.8.8:53 assets.adobedtm.com udp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
BE 104.90.25.237:443 www.nortonlifelock.com tcp
US 23.53.113.19:443 assets.adobedtm.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 8.8.8.8:53 symantec.tt.omtrdc.net udp
IE 66.235.152.156:443 symantec.tt.omtrdc.net tcp
US 8.8.8.8:53 156.152.235.66.in-addr.arpa udp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
IE 66.235.152.225:443 symantec.tt.omtrdc.net tcp
US 172.67.20.158:443 cdn.quantummetric.com tcp
US 8.8.8.8:53 buy.norton.com udp
US 8.8.8.8:53 analytics.tiktok.com udp
US 8.8.8.8:53 www.redditstatic.com udp
BE 104.68.89.179:443 buy.norton.com tcp
US 151.101.1.140:443 www.redditstatic.com tcp
NL 23.62.61.98:443 analytics.tiktok.com tcp
US 104.17.208.240:443 siteintercept.qualtrics.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 pixel.mathtag.com udp
US 8.8.8.8:53 c.go-mpulse.net udp
US 8.8.8.8:53 tag.bounceexchange.com udp
US 216.200.232.249:443 pixel.mathtag.com tcp
US 34.120.253.250:443 tag.bounceexchange.com udp
BE 23.55.96.141:443 c.go-mpulse.net tcp
US 8.8.8.8:53 websdk.ujet.co udp
IE 52.95.126.138:443 aax-eu.amazon-adsystem.com tcp
GB 13.43.62.196:443 www.tag4arm.com tcp
GB 13.224.132.66:443 websdk.ujet.co tcp
US 8.8.8.8:53 s.yimg.com udp
GB 87.248.114.11:443 s.yimg.com tcp
US 8.8.8.8:53 98.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 249.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 138.126.95.52.in-addr.arpa udp
US 34.111.8.32:443 events.bouncex.net udp
US 8.8.8.8:53 assets.bounceexchange.com udp
US 8.8.8.8:53 evnt.byspotify.com udp
NL 185.184.8.90:443 ams.creativecdn.com tcp
US 8.8.8.8:53 trc.taboola.com udp
US 8.8.8.8:53 sp.analytics.yahoo.com udp
US 34.111.186.1:443 evnt.byspotify.com udp
US 8.8.8.8:53 ipv4.podscribe.com udp
US 34.111.186.1:443 evnt.byspotify.com tcp
US 34.200.177.66:443 ipv4.podscribe.com tcp
IE 3.255.41.64:443 sp.analytics.yahoo.com tcp
US 151.101.1.44:443 trc.taboola.com tcp
GB 142.250.179.230:443 8843044.fls.doubleclick.net udp
US 8.8.8.8:53 norton.ow5a.net udp
IE 54.228.83.179:443 norton.ow5a.net tcp
US 8.8.8.8:53 alb.reddit.com udp
US 151.101.1.140:443 alb.reddit.com tcp
KR 175.199.223.173:8202 udp
US 8.8.8.8:53 www.facebook.com udp
GB 163.70.151.35:443 www.facebook.com tcp
US 8.8.8.8:53 66.177.200.34.in-addr.arpa udp
US 8.8.8.8:53 179.83.228.54.in-addr.arpa udp
US 8.8.8.8:53 173.223.199.175.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 siteintercept.qualtrics.com udp
GB 142.250.178.4:443 www.google.com udp
GB 216.58.204.67:443 www.google.co.uk udp
NL 185.89.210.212:443 ib.adnxs.com tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
DE 216.58.212.162:443 cm.g.doubleclick.net tcp
US 8.8.8.8:53 verifi.podscribe.com udp
US 44.216.4.181:443 verifi.podscribe.com tcp
US 8.8.8.8:53 684dd327.akstat.io udp
DE 216.58.212.162:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 trial-eum-clienttons-s.akamaihd.net udp
US 2.18.190.79:443 trial-eum-clienttons-s.akamaihd.net tcp
US 8.8.8.8:53 162.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 181.4.216.44.in-addr.arpa udp
US 2.18.190.75:443 x5s5cjycck7fezr7qkba-pk4a6a-d8bbedd41-clientnsv4-s.akamaihd.net tcp
US 8.8.8.8:53 cm.creativecdn.com udp
NL 185.184.8.90:443 cm.creativecdn.com tcp
US 8.8.8.8:53 191-101-209-39_s-2-18-190-79_ts-1715438333-clienttons-s.akamaihd.net udp
US 8.8.8.8:53 x5s5cjycck7ewzr7ql6q-pkmd27-eaac0075f-clientnsv4-s.akamaihd.net udp
US 2.18.190.82:443 x5s5cjycck7ewzr7ql6q-pkmd27-eaac0075f-clientnsv4-s.akamaihd.net tcp
US 2.18.190.68:443 191-101-209-39_s-2-18-190-79_ts-1715438333-clienttons-s.akamaihd.net tcp
US 34.70.83.251:443 ingest.quantummetric.com tcp
IE 3.255.41.64:443 sp.analytics.yahoo.com tcp
GB 13.224.132.66:443 websdk.ujet.co tcp
IE 34.242.179.188:443 ensighten.norton.com tcp
BE 104.90.25.237:443 www.nortonlifelock.com tcp
US 8.8.8.8:53 rl.quantummetric.com udp
US 34.66.3.160:443 rl.quantummetric.com tcp
US 8.8.8.8:53 nlok-prod-4l9eze7.uw1.ccaiplatform.com udp
US 34.149.99.248:443 nlok-prod-4l9eze7.uw1.ccaiplatform.com udp
US 34.66.3.160:443 rl.quantummetric.com tcp
US 8.8.8.8:53 160.3.66.34.in-addr.arpa udp
BE 23.55.96.141:443 684dd327.akstat.io tcp
US 8.8.8.8:53 buy-static.norton.com udp
US 204.79.197.237:443 bat.bing.com tcp
US 23.53.113.19:443 assets.adobedtm.com tcp
BE 104.90.25.237:443 www.nortonlifelock.com tcp
IE 66.235.152.156:443 symantec.tt.omtrdc.net tcp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.187.214:443 i.ytimg.com udp
IE 66.235.152.225:443 symantec.tt.omtrdc.net tcp
BE 23.55.96.141:443 684dd327.akstat.io tcp
GB 172.217.169.78:443 www.youtube-nocookie.com udp
IE 34.242.179.188:443 ensighten.norton.com tcp
BE 104.68.89.179:443 buy.norton.com tcp
NL 23.62.61.98:443 analytics.tiktok.com tcp
IE 52.95.126.138:443 aax-eu.amazon-adsystem.com tcp
US 204.79.197.237:443 bat.bing.com tcp
GB 13.43.62.196:443 www.tag4arm.com tcp
GB 87.248.114.11:443 s.yimg.com tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 142.250.179.234:443 jnn-pa.googleapis.com udp
NL 185.184.8.90:443 cm.creativecdn.com tcp
IE 54.228.83.179:443 norton.ow5a.net tcp
US 151.101.1.140:443 alb.reddit.com tcp
US 34.200.177.66:443 ipv4.podscribe.com tcp
US 151.101.1.44:443 trc.taboola.com tcp
US 104.17.208.240:443 siteintercept.qualtrics.com tcp
US 8.8.8.8:53 234.179.250.142.in-addr.arpa udp
IE 3.255.41.64:443 sp.analytics.yahoo.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
US 44.216.4.181:443 verifi.podscribe.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 34.70.83.251:443 ingest.quantummetric.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
TR 85.98.16.181:53477 udp
US 8.8.8.8:53 181.16.98.85.in-addr.arpa udp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
BE 104.90.25.237:443 www.nortonlifelock.com tcp
US 172.67.9.68:443 submit.reasonsecurity.com tcp
IE 34.242.179.188:443 ensighten.norton.com tcp
US 34.70.83.251:443 ingest.quantummetric.com tcp
US 73.194.80.181:48994 udp
US 8.8.8.8:53 181.80.194.73.in-addr.arpa udp
CN 123.184.152.82:31027 udp
US 8.8.8.8:53 82.152.184.123.in-addr.arpa udp
IE 34.242.179.188:443 ensighten.norton.com tcp
US 34.70.83.251:443 ingest.quantummetric.com tcp
PL 89.64.94.63:62898 udp
NL 23.62.61.106:443 th.bing.com tcp
US 8.8.8.8:53 63.94.64.89.in-addr.arpa udp
PT 213.13.233.225:6881 udp
US 8.8.8.8:53 225.233.13.213.in-addr.arpa udp
CN 183.157.255.101:11272 udp
US 8.8.8.8:53 101.255.157.183.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.187.206:443 play.google.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
JP 115.162.13.156:12581 tcp
NL 23.62.61.185:443 th.bing.com tcp
NL 23.62.61.137:443 th.bing.com tcp
NL 23.62.61.137:443 th.bing.com tcp
NL 23.62.61.185:443 th.bing.com tcp
US 8.8.8.8:53 137.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 185.61.62.23.in-addr.arpa udp
US 185.174.102.0:443 tcp
US 8.8.8.8:53 0.102.174.185.in-addr.arpa udp
RU 78.153.6.91:31674 tcp
US 8.8.8.8:53 1337x.to udp
US 104.31.16.11:443 1337x.to tcp
US 104.31.16.11:443 1337x.to tcp
US 8.8.8.8:53 apps.identrust.com udp
US 2.18.190.80:80 apps.identrust.com tcp
NL 23.62.61.163:443 th.bing.com tcp
US 8.8.8.8:53 11.16.31.104.in-addr.arpa udp
US 8.8.8.8:53 80.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 163.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 intrustedzone.site udp
US 172.67.150.129:443 intrustedzone.site tcp
US 8.8.8.8:53 ghabovethec.info udp
US 8.8.8.8:53 forhavingartistic.info udp
FR 18.155.129.123:443 ghabovethec.info tcp
US 3.160.150.43:443 getrunkhomuto.info tcp
US 104.21.10.43:443 forhavingartistic.info tcp
US 8.8.8.8:53 129.150.67.172.in-addr.arpa udp
US 8.8.8.8:53 43.10.21.104.in-addr.arpa udp
US 8.8.8.8:53 43.150.160.3.in-addr.arpa udp
US 8.8.8.8:53 123.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 pogothere.xyz udp
US 104.21.24.208:443 pogothere.xyz tcp
GB 163.70.151.35:443 www.facebook.com tcp
US 8.8.8.8:53 accounts.google.com udp
NL 173.194.69.84:443 accounts.google.com udp
NL 173.194.69.84:443 accounts.google.com tcp
US 8.8.8.8:53 208.24.21.104.in-addr.arpa udp
US 8.8.8.8:53 yonatallcolum.info udp
US 3.162.140.15:443 yonatallcolum.info tcp
US 8.8.8.8:53 d31uxzurj3z4fa.cloudfront.net udp
US 8.8.8.8:53 15.140.162.3.in-addr.arpa udp
GB 13.32.172.9:443 d31uxzurj3z4fa.cloudfront.net tcp
GB 13.32.172.9:443 d31uxzurj3z4fa.cloudfront.net tcp
GB 13.32.172.9:443 d31uxzurj3z4fa.cloudfront.net tcp
US 8.8.8.8:53 loaksandtheir.info udp
GB 54.192.137.82:443 loaksandtheir.info tcp
US 8.8.8.8:53 82.137.192.54.in-addr.arpa udp
GB 54.192.137.82:443 loaksandtheir.info tcp
US 8.8.8.8:53 dukirliaon.com udp
NL 139.45.197.239:443 dukirliaon.com tcp
NL 139.45.197.239:443 dukirliaon.com tcp
US 8.8.8.8:53 my.rtmark.net udp
US 8.8.8.8:53 yonmewon.com udp
US 8.8.8.8:53 s.click.aliexpress.com udp
NL 139.45.195.8:443 my.rtmark.net tcp
NL 139.45.197.236:443 yonmewon.com tcp
US 8.8.8.8:53 sr7pv7n5x.com udp
NL 212.117.190.201:443 sr7pv7n5x.com tcp
US 8.8.8.8:53 236.197.45.139.in-addr.arpa udp
US 8.8.8.8:53 201.190.117.212.in-addr.arpa udp
BE 104.68.85.7:443 s.click.aliexpress.com tcp
US 8.8.8.8:53 best.aliexpress.com udp
US 8.8.8.8:53 ae01.alicdn.com udp
US 8.8.8.8:53 assets.alicdn.com udp
US 8.8.8.8:53 g.alicdn.com udp
US 163.181.154.233:443 g.alicdn.com tcp
US 8.8.8.8:53 acs.aliexpress.com udp
BE 104.68.85.7:443 assets.alicdn.com tcp
US 8.8.8.8:53 ae.mmstat.com udp
US 8.8.8.8:53 is.alicdn.com udp
US 8.8.8.8:53 233.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 ae04.alicdn.com udp
BE 23.55.96.49:443 ae01.alicdn.com tcp
US 8.8.8.8:53 time-ae.akamaized.net udp
US 2.18.190.70:443 time-ae.akamaized.net tcp
SG 47.246.110.42:443 ae.mmstat.com tcp
DE 47.246.146.12:443 acs.aliexpress.com tcp
NL 23.62.61.58:443 ae04.alicdn.com tcp
US 8.8.8.8:53 fourier.taobao.com udp
US 8.8.8.8:53 12.146.246.47.in-addr.arpa udp
US 8.8.8.8:53 login.aliexpress.us udp
US 8.8.8.8:53 login.aliexpress.ru udp
CN 123.183.232.34:443 fourier.taobao.com tcp
CN 123.183.232.34:443 fourier.taobao.com tcp
RU 47.246.133.204:443 login.aliexpress.ru tcp
RU 47.246.133.204:443 login.aliexpress.ru tcp
US 69.120.106.126:32858 udp
US 8.8.8.8:53 204.133.246.47.in-addr.arpa udp
US 8.8.8.8:53 126.106.120.69.in-addr.arpa udp
US 8.8.8.8:53 wp.aliexpress.com udp
US 104.21.10.43:443 forhavingartistic.info tcp
GB 54.192.137.82:443 loaksandtheir.info tcp
DE 47.246.146.12:443 wp.aliexpress.com tcp
NL 139.45.197.239:443 dukirliaon.com tcp
NL 23.62.61.163:443 www.bing.com tcp
NL 139.45.197.236:443 yonmewon.com tcp
NL 139.45.195.8:443 my.rtmark.net tcp
BE 104.68.85.7:443 login.aliexpress.us tcp
NL 212.117.190.201:443 sr7pv7n5x.com tcp
US 8.8.8.8:53 login.aliexpress.com udp
SG 47.246.110.42:443 ae.mmstat.com tcp
SG 47.246.110.42:443 ae.mmstat.com tcp
US 163.181.154.233:443 g.alicdn.com tcp
BE 104.68.85.7:443 login.aliexpress.com tcp
BE 23.55.96.49:443 ae01.alicdn.com tcp
NL 23.62.61.58:443 ae04.alicdn.com tcp
US 2.18.190.70:443 time-ae.akamaized.net tcp
US 8.8.8.8:53 us.ynuf.aliapp.org udp
SG 47.246.110.42:443 ae.mmstat.com tcp
SG 47.246.110.42:443 ae.mmstat.com tcp
SG 47.246.110.42:443 ae.mmstat.com tcp
SG 47.246.110.42:443 ae.mmstat.com tcp
DE 47.246.146.55:443 us.ynuf.aliapp.org tcp
CN 123.183.232.34:443 fourier.taobao.com tcp
RU 47.246.133.204:443 login.aliexpress.ru tcp
US 34.70.83.251:443 ingest.quantummetric.com tcp
CN 117.182.68.139:38169 udp
CN 123.183.232.34:443 fourier.taobao.com tcp
US 8.8.8.8:53 139.68.182.117.in-addr.arpa udp
US 8.8.8.8:53 fourier.aliexpress.com udp
CN 123.183.232.34:443 fourier.taobao.com tcp
BE 23.55.96.49:443 ae01.alicdn.com tcp
DE 47.246.146.223:443 fourier.aliexpress.com tcp
US 8.8.8.8:53 223.146.246.47.in-addr.arpa udp
US 104.21.10.43:443 forhavingartistic.info tcp
US 3.160.150.43:443 getrunkhomuto.info tcp
BE 104.68.85.7:443 login.aliexpress.com tcp
NL 139.45.197.239:443 dukirliaon.com tcp
NL 139.45.197.236:443 yonmewon.com tcp
NL 139.45.195.8:443 my.rtmark.net tcp
BE 104.68.85.7:443 login.aliexpress.com tcp
NL 212.117.190.201:443 sr7pv7n5x.com tcp
US 163.181.154.233:443 g.alicdn.com tcp
BE 104.68.85.7:443 login.aliexpress.com tcp
NL 23.62.61.58:443 ae04.alicdn.com tcp
US 2.18.190.70:443 time-ae.akamaized.net tcp
DE 47.246.146.12:443 wp.aliexpress.com tcp
CN 123.183.232.34:443 fourier.taobao.com tcp
RU 47.246.133.204:443 login.aliexpress.ru tcp
DE 47.246.146.12:443 wp.aliexpress.com tcp
SG 47.246.110.42:443 ae.mmstat.com tcp
BE 104.68.85.7:443 login.aliexpress.com tcp
SG 47.246.110.42:443 ae.mmstat.com tcp
SG 47.246.110.42:443 ae.mmstat.com tcp
BE 23.55.96.49:443 ae01.alicdn.com tcp
US 34.70.83.251:443 ingest.quantummetric.com tcp
DE 47.246.146.223:443 fourier.aliexpress.com tcp
DE 47.246.146.55:443 us.ynuf.aliapp.org tcp
US 8.8.8.8:53 d9ua8i.tdum.alibaba.com udp
IE 54.77.218.23:6892 udp
DE 47.254.175.252:443 d9ua8i.tdum.alibaba.com tcp
US 8.8.8.8:53 23.218.77.54.in-addr.arpa udp
US 8.8.8.8:53 ynuf.aliapp.org udp
US 71.113.188.136:12581 tcp
RU 46.0.175.52:12581 tcp
CN 124.239.14.253:443 ynuf.aliapp.org tcp
US 8.8.8.8:53 1337x.vpnonly.site udp
US 172.67.146.34:443 1337x.vpnonly.site tcp
US 172.67.146.34:443 1337x.vpnonly.site tcp
CN 124.239.14.253:443 ynuf.aliapp.org tcp
US 8.8.8.8:53 34.146.67.172.in-addr.arpa udp
GB 191.101.209.39:12581 tcp
RU 79.136.205.150:12581 tcp
RU 37.75.206.46:12581 tcp
KR 125.131.230.249:12581 tcp
US 8.8.8.8:53 tzvpn.site udp
US 172.67.148.210:443 tzvpn.site tcp
US 8.8.8.8:53 210.148.67.172.in-addr.arpa udp
US 8.8.8.8:53 trust.zone udp
US 104.20.54.95:443 trust.zone tcp
US 104.20.54.95:443 trust.zone tcp
CN 1.180.24.49:26301 udp
SG 47.246.110.42:443 ae.mmstat.com tcp
BE 23.55.96.49:443 ae01.alicdn.com tcp
US 8.8.8.8:53 95.54.20.104.in-addr.arpa udp
US 8.8.8.8:53 49.24.180.1.in-addr.arpa udp
SG 47.246.110.42:443 ae.mmstat.com tcp
US 8.8.8.8:53 get-vpn.site udp
US 104.21.81.38:443 get-vpn.site tcp
US 104.21.81.38:443 get-vpn.site tcp
US 104.21.81.38:443 get-vpn.site tcp
US 104.21.81.38:443 get-vpn.site tcp
US 104.21.81.38:443 get-vpn.site tcp
US 104.21.81.38:443 get-vpn.site tcp
NL 23.62.61.163:443 www.bing.com tcp
US 8.8.8.8:53 38.81.21.104.in-addr.arpa udp
BE 104.68.85.7:443 login.aliexpress.com tcp
GB 172.217.169.78:443 www.youtube-nocookie.com udp
US 104.21.81.38:443 get-vpn.site tcp
JP 113.147.89.203:51413 udp
US 8.8.8.8:53 203.89.147.113.in-addr.arpa udp
US 104.21.81.38:443 get-vpn.site tcp
IN 49.37.130.43:52593 udp
US 8.8.8.8:53 43.130.37.49.in-addr.arpa udp
CN 116.8.233.235:1024 udp
BE 23.55.96.49:443 ae01.alicdn.com tcp
NL 23.62.61.163:443 www.bing.com tcp
US 8.8.8.8:53 235.233.8.116.in-addr.arpa udp
NL 23.62.61.163:443 www.bing.com tcp
CN 124.239.14.252:443 ynuf.aliapp.org tcp
CN 124.239.14.252:443 ynuf.aliapp.org tcp
UA 31.202.117.27:49211 udp
US 8.8.8.8:53 27.117.202.31.in-addr.arpa udp
US 34.70.83.251:443 ingest.quantummetric.com tcp
US 8.8.8.8:53 archive.org udp
US 207.241.224.2:443 archive.org tcp
US 207.241.224.2:443 archive.org tcp
US 8.8.8.8:53 polyfill.archive.org udp
US 207.241.239.241:443 polyfill.archive.org tcp
US 8.8.8.8:53 2.224.241.207.in-addr.arpa udp
US 8.8.8.8:53 analytics.archive.org udp
US 207.241.225.195:443 analytics.archive.org tcp
US 8.8.8.8:53 241.239.241.207.in-addr.arpa udp
US 8.8.8.8:53 195.225.241.207.in-addr.arpa udp
PL 79.186.247.248:6881 udp
US 8.8.8.8:53 248.247.186.79.in-addr.arpa udp
US 34.70.83.251:443 ingest.quantummetric.com tcp
IT 93.144.222.63:47802 udp
US 8.8.8.8:53 63.222.144.93.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 207.241.224.2:443 archive.org tcp
US 207.241.239.241:443 polyfill.archive.org tcp
US 8.8.8.8:53 ia800308.us.archive.org udp
US 207.241.228.18:443 ia800308.us.archive.org tcp
MY 115.164.52.37:62582 udp
US 8.8.8.8:53 18.228.241.207.in-addr.arpa udp
US 8.8.8.8:53 37.52.164.115.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
CA 99.224.4.198:51413 udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 198.4.224.99.in-addr.arpa udp
US 207.241.224.2:443 archive.org tcp
US 207.241.239.241:443 polyfill.archive.org tcp
US 207.241.225.195:443 analytics.archive.org tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 api.reasonsecurity.com udp
US 104.22.0.235:443 api.reasonsecurity.com tcp
NL 45.87.251.132:28040 udp
US 8.8.8.8:53 132.251.87.45.in-addr.arpa udp
US 8.8.8.8:53 ia600308.us.archive.org udp
US 207.241.227.238:443 ia600308.us.archive.org tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 238.227.241.207.in-addr.arpa udp
RU 37.77.108.125:1329 udp
US 207.241.224.2:443 archive.org tcp
US 207.241.225.195:443 analytics.archive.org tcp
US 8.8.8.8:53 125.108.77.37.in-addr.arpa udp
BG 77.76.179.204:24302 udp
US 8.8.8.8:53 204.179.76.77.in-addr.arpa udp
US 8.8.8.8:53 dns.google tcp
N/A 127.0.0.1:4577 tcp
CN 120.231.120.27:20796 udp
US 207.241.224.2:443 archive.org tcp
US 207.241.225.195:443 analytics.archive.org tcp
NL 23.62.61.99:443 www.bing.com tcp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.161:443 r.bing.com tcp
NL 23.62.61.161:443 r.bing.com tcp
US 207.241.225.195:443 analytics.archive.org tcp
US 8.8.8.8:53 99.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 161.61.62.23.in-addr.arpa udp
US 34.70.83.251:443 ingest.quantummetric.com tcp
US 8.8.8.8:53 fpt.microsoft.com udp
US 52.167.30.171:443 fpt.microsoft.com tcp
US 8.8.8.8:53 fpt2.microsoft.com udp
US 8.8.8.8:53 71.31.126.40.in-addr.arpa udp
NL 23.62.61.99:443 www.bing.com tcp
US 8.8.8.8:53 filehippo.com udp
US 34.49.208.186:443 filehippo.com tcp
US 34.49.208.186:443 filehippo.com tcp
GB 172.217.169.78:443 www.youtube-nocookie.com udp
US 8.8.8.8:53 sc.filehippo.net udp
US 8.8.8.8:53 cache-05.filehippo.net udp
US 34.49.208.186:443 filehippo.com udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 151.101.1.91:443 cache-05.filehippo.net tcp
US 151.101.1.91:443 cache-05.filehippo.net tcp
US 151.101.1.91:443 cache-05.filehippo.net tcp
US 151.101.1.91:443 cache-05.filehippo.net tcp
BE 104.68.82.93:443 sc.filehippo.net tcp
BE 104.68.82.93:443 sc.filehippo.net tcp
US 151.101.1.91:443 cache-05.filehippo.net tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 151.101.1.91:443 cache-05.filehippo.net tcp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 widgets.outbrain.com udp
GB 18.244.155.86:443 sdk.privacy-center.org tcp
US 23.53.113.140:443 widgets.outbrain.com tcp
GB 54.192.139.162:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 www.datadoghq-browser-agent.com udp
GB 18.172.152.36:443 www.datadoghq-browser-agent.com tcp
US 8.8.8.8:53 186.208.49.34.in-addr.arpa udp
US 8.8.8.8:53 91.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 93.82.68.104.in-addr.arpa udp
US 8.8.8.8:53 86.155.244.18.in-addr.arpa udp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 140.113.53.23.in-addr.arpa udp
GB 54.192.139.162:443 c.amazon-adsystem.com tcp
US 151.101.1.91:443 cache-05.filehippo.net udp
US 8.8.8.8:53 c.aaxads.com udp
US 172.67.4.231:443 c.aaxads.com tcp
US 8.8.8.8:53 d3div1mtym39ic.cloudfront.net udp
US 8.8.8.8:53 contributor.google.com udp
US 8.8.8.8:53 push-sdk.com udp
DE 157.90.33.72:443 push-sdk.com tcp
GB 18.245.253.93:443 d3div1mtym39ic.cloudfront.net tcp
GB 172.217.16.238:443 contributor.google.com tcp
US 8.8.8.8:53 tcheck.outbrainimg.com udp
US 23.220.113.254:443 tcheck.outbrainimg.com tcp
US 8.8.8.8:53 widget-pixels.outbrain.com udp
US 8.8.8.8:53 btloader.com udp
US 104.22.74.216:443 btloader.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 172.67.74.173:443 wct.filehippo.com tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 storage.googleapis.com udp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 log.outbrainimg.com udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 36.152.172.18.in-addr.arpa udp
US 8.8.8.8:53 231.4.67.172.in-addr.arpa udp
US 8.8.8.8:53 93.253.245.18.in-addr.arpa udp
US 8.8.8.8:53 72.33.90.157.in-addr.arpa udp
US 8.8.8.8:53 254.113.220.23.in-addr.arpa udp
US 8.8.8.8:53 173.74.67.172.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
GB 18.244.138.116:443 aax.amazon-adsystem.com tcp
GB 108.156.39.15:443 config.aps.amazon-adsystem.com tcp
US 64.74.236.223:443 log.outbrainimg.com tcp
GB 172.217.16.251:443 storage.googleapis.com tcp
NL 216.58.206.78:443 fundingchoicesmessages.google.com tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
CN 117.148.66.151:8463 udp
GB 146.75.74.132:443 mv.outbrain.com tcp
US 8.8.8.8:53 stats.g.doubleclick.net udp
BE 64.233.167.156:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 130.211.23.194:443 api.btloader.com tcp
US 172.67.74.173:443 wct.filehippo.com tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
GB 142.250.178.4:443 www.google.com udp
GB 216.58.204.67:443 www.google.co.uk udp
US 8.8.8.8:53 uidsync.net udp
DE 157.90.33.121:443 uidsync.net tcp
US 8.8.8.8:53 mcdp-chidc2.outbrain.com udp
US 50.31.142.95:443 mcdp-chidc2.outbrain.com tcp
US 130.211.23.194:443 api.btloader.com udp
DE 157.90.33.121:443 uidsync.net tcp
US 50.31.142.95:443 mcdp-chidc2.outbrain.com tcp
US 8.8.8.8:53 rock.defybrick.com udp
GB 18.244.140.120:443 rock.defybrick.com tcp
US 8.8.8.8:53 116.138.244.18.in-addr.arpa udp
US 8.8.8.8:53 15.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 251.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 151.66.148.117.in-addr.arpa udp
US 8.8.8.8:53 78.206.58.216.in-addr.arpa udp
US 8.8.8.8:53 86.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 223.236.74.64.in-addr.arpa udp
US 8.8.8.8:53 132.74.75.146.in-addr.arpa udp
US 8.8.8.8:53 156.167.233.64.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 19.69.67.172.in-addr.arpa udp
US 8.8.8.8:53 121.33.90.157.in-addr.arpa udp
US 8.8.8.8:53 120.140.244.18.in-addr.arpa udp
US 8.8.8.8:53 95.142.31.50.in-addr.arpa udp
US 8.8.8.8:53 flint.defybrick.com udp
NL 216.58.206.78:443 fundingchoicesmessages.google.com udp
US 34.199.234.25:443 flint.defybrick.com tcp
US 151.101.1.91:443 cache-05.filehippo.net udp
US 8.8.8.8:53 25.234.199.34.in-addr.arpa udp
US 8.8.8.8:53 6e70cefd1823677261cd0b2198a4b28b.safeframe.googlesyndication.com udp
US 8.8.8.8:53 api.privacy-center.org udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
US 8.8.8.8:53 id5-sync.com udp
DE 142.250.185.129:443 6e70cefd1823677261cd0b2198a4b28b.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 cdn-ima.33across.com udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
GB 108.138.217.66:443 hb.yellowblue.io tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
GB 108.138.233.67:443 api.privacy-center.org tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
IE 54.75.186.234:443 ad.360yield.com tcp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
US 172.64.152.89:443 cdn-ima.33across.com tcp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 129.185.250.142.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 66.217.138.108.in-addr.arpa udp
US 8.8.8.8:53 82.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 234.186.75.54.in-addr.arpa udp
US 8.8.8.8:53 89.152.64.172.in-addr.arpa udp
US 8.8.8.8:53 176.168.78.3.in-addr.arpa udp
US 8.8.8.8:53 65.98.95.141.in-addr.arpa udp
US 8.8.8.8:53 82.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 139.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 cdn.ampproject.org udp
GB 172.217.16.225:443 cdn.ampproject.org tcp
GB 172.217.16.225:443 cdn.ampproject.org tcp
GB 172.217.16.225:443 cdn.ampproject.org tcp
GB 172.217.16.225:443 cdn.ampproject.org tcp
GB 172.217.16.225:443 cdn.ampproject.org tcp
NL 86.82.242.216:6881 udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 216.242.82.86.in-addr.arpa udp
US 8.8.8.8:53 bits.avcdn.net udp
DE 184.30.215.79:443 bits.avcdn.net tcp
DE 184.30.215.79:443 bits.avcdn.net tcp
US 8.8.8.8:53 79.215.30.184.in-addr.arpa udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 ms-cookie-sync.presage.io udp
US 151.101.1.108:443 acdn.adnxs.com tcp
BE 2.21.18.175:443 eus.rubiconproject.com tcp
US 13.248.245.213:443 eb2.3lift.com tcp
US 172.64.149.180:443 js-sec.indexww.com tcp
IE 34.253.77.234:443 ms-cookie-sync.presage.io tcp
IE 34.253.77.234:443 ms-cookie-sync.presage.io tcp
US 23.53.112.234:443 ads.pubmatic.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
US 8.8.8.8:53 token.rubiconproject.com udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 108.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 175.18.21.2.in-addr.arpa udp
US 8.8.8.8:53 213.245.248.13.in-addr.arpa udp
US 8.8.8.8:53 180.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 234.77.253.34.in-addr.arpa udp
US 8.8.8.8:53 234.112.53.23.in-addr.arpa udp
SE 5.150.207.34:8130 udp
BE 104.68.82.93:443 images.sftcdn.net tcp
US 216.239.32.36:443 region1.google-analytics.com udp
US 73.89.43.30:41090 udp
US 8.8.8.8:53 30.43.89.73.in-addr.arpa udp
US 172.67.74.173:443 wct.filehippo.com tcp
NL 23.62.61.99:443 www.bing.com tcp
FR 176.31.251.220:51413 udp
US 8.8.8.8:53 220.251.31.176.in-addr.arpa udp
NL 23.62.61.99:443 www.bing.com tcp
US 34.70.83.251:443 ingest.quantummetric.com tcp
CN 49.67.187.195:59766 udp
US 8.8.8.8:53 195.187.67.49.in-addr.arpa udp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.161:443 r.bing.com tcp
NL 23.62.61.161:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.161:443 r.bing.com tcp
KR 61.79.250.3:40932 udp
NL 23.62.61.99:443 www.bing.com tcp
US 8.8.8.8:53 www.virustotal.com udp
US 74.125.34.46:443 www.virustotal.com tcp
US 74.125.34.46:443 www.virustotal.com tcp
US 8.8.8.8:53 46.34.125.74.in-addr.arpa udp
US 8.8.8.8:53 www.recaptcha.net udp
DE 172.217.16.195:443 www.recaptcha.net tcp
US 8.8.8.8:53 3.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 195.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 recaptcha.net udp
GB 142.250.187.227:443 recaptcha.net tcp
GB 142.250.187.227:443 recaptcha.net udp
NL 178.162.173.94:28001 udp
US 74.125.34.46:443 www.virustotal.com tcp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 94.173.162.178.in-addr.arpa udp
IT 93.47.56.224:46661 udp
US 8.8.8.8:53 224.56.47.93.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
RU 79.165.201.166:15691 udp
US 8.8.8.8:53 166.201.165.79.in-addr.arpa udp
RU 5.18.146.86:3124 udp
US 8.8.8.8:53 86.146.18.5.in-addr.arpa udp
US 8.8.8.8:53 msedge.api.cdp.microsoft.com udp
US 13.67.191.143:443 msedge.api.cdp.microsoft.com tcp
HU 91.228.212.129:50069 udp
US 8.8.8.8:53 129.212.228.91.in-addr.arpa udp
US 34.70.83.251:443 ingest.quantummetric.com tcp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
NL 96.16.53.139:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
IN 47.15.41.15:49985 udp
US 8.8.8.8:53 15.41.15.47.in-addr.arpa udp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
NO 92.221.2.77:63202 udp
US 8.8.8.8:53 77.2.221.92.in-addr.arpa udp
BR 177.131.209.213:53664 udp
US 8.8.8.8:53 213.209.131.177.in-addr.arpa udp
RU 95.165.158.103:8 udp
RU 5.138.166.23:15190 udp
US 8.8.8.8:53 23.166.138.5.in-addr.arpa udp
PH 103.225.138.118:14989 udp
US 8.8.8.8:53 118.138.225.103.in-addr.arpa udp
RU 5.142.30.235:49001 udp
RU 95.165.158.103:16384 udp
US 8.8.8.8:53 235.30.142.5.in-addr.arpa udp
US 34.70.83.251:443 ingest.quantummetric.com tcp
AU 143.238.101.60:53125 udp
US 8.8.8.8:53 60.101.238.143.in-addr.arpa udp
NL 5.79.77.77:53436 udp
US 8.8.8.8:53 77.77.79.5.in-addr.arpa udp
NL 185.21.217.60:50274 udp
US 8.8.8.8:53 60.217.21.185.in-addr.arpa udp
SE 81.234.110.155:40733 udp
US 8.8.8.8:53 155.110.234.81.in-addr.arpa udp
RU 46.147.222.186:39361 udp
US 8.8.8.8:53 186.222.147.46.in-addr.arpa udp
RU 31.131.79.159:32757 udp
US 8.8.8.8:53 159.79.131.31.in-addr.arpa udp
US 104.22.0.235:443 api.reasonsecurity.com tcp
CA 159.2.137.214:32372 udp
US 8.8.8.8:53 214.137.2.159.in-addr.arpa udp
US 34.70.83.251:443 ingest.quantummetric.com tcp
BR 191.37.151.2:37377 udp
US 8.8.8.8:53 2.151.37.191.in-addr.arpa udp
GB 191.101.209.39:12581 tcp
LT 31.177.14.176:25519 udp
US 8.8.8.8:53 176.14.177.31.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
HU 31.46.104.111:8222 udp
US 8.8.8.8:53 111.104.46.31.in-addr.arpa udp
CN 59.173.132.133:51413 udp
US 8.8.8.8:53 133.132.173.59.in-addr.arpa udp
SE 213.204.232.219:23579 udp
US 8.8.8.8:53 219.232.204.213.in-addr.arpa udp
HK 49.131.81.213:14082 udp
US 8.8.8.8:53 213.81.131.49.in-addr.arpa udp
RU 185.137.161.113:8192 udp
US 8.8.8.8:53 113.161.137.185.in-addr.arpa udp
US 34.70.83.251:443 ingest.quantummetric.com tcp
RU 193.233.107.30:16429 udp
US 8.8.8.8:53 30.107.233.193.in-addr.arpa udp
DE 93.240.80.150:43749 udp
US 8.8.8.8:53 150.80.240.93.in-addr.arpa udp
BR 45.166.205.193:31616 udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 193.205.166.45.in-addr.arpa udp
US 104.22.0.235:443 api.reasonsecurity.com tcp
KR 121.176.203.129:32940 udp
RU 95.24.159.21:4381 udp
DE 75.119.138.164:6881 udp
DE 185.248.143.11:57854 udp
FI 185.148.3.162:11161 udp
US 8.8.8.8:53 21.159.24.95.in-addr.arpa udp
US 8.8.8.8:53 164.138.119.75.in-addr.arpa udp
US 8.8.8.8:53 11.143.248.185.in-addr.arpa udp
US 8.8.8.8:53 162.3.148.185.in-addr.arpa udp
US 34.70.83.251:443 ingest.quantummetric.com tcp
US 149.248.14.249:38358 udp
FR 163.172.32.21:20142 udp
FR 51.159.185.117:49001 udp
IT 188.228.177.179:6881 udp
ES 149.74.101.116:49126 udp
GB 81.99.208.85:60847 udp
US 8.8.8.8:53 21.32.172.163.in-addr.arpa udp
US 8.8.8.8:53 179.177.228.188.in-addr.arpa udp
US 8.8.8.8:53 116.101.74.149.in-addr.arpa udp
US 8.8.8.8:53 85.208.99.81.in-addr.arpa udp
US 8.8.8.8:53 c.go-mpulse.net udp
BE 2.21.16.148:443 c.go-mpulse.net tcp
US 8.8.8.8:53 148.16.21.2.in-addr.arpa udp
US 8.8.8.8:53 ensighten.norton.com udp
IE 34.242.179.188:443 ensighten.norton.com tcp
KR 211.178.80.34:32928 udp
US 8.8.8.8:53 34.80.178.211.in-addr.arpa udp
CA 205.173.167.18:26126 udp
US 8.8.8.8:53 18.167.173.205.in-addr.arpa udp
RU 5.183.29.12:11987 udp
US 8.8.8.8:53 12.29.183.5.in-addr.arpa udp
NL 23.62.61.161:443 www.bing.com tcp
NL 23.62.61.161:443 www.bing.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.178.4:443 www.google.com udp
US 216.239.32.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
HU 176.63.5.240:58267 udp
US 8.8.8.8:53 sadownload.mcafee.com udp
NL 96.16.53.155:443 sadownload.mcafee.com tcp
US 8.8.8.8:53 240.5.63.176.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
FR 88.160.110.144:6881 udp
US 8.8.8.8:53 144.110.160.88.in-addr.arpa udp
NL 23.62.61.161:443 www.bing.com tcp
US 64.185.227.98:60020 udp
US 8.8.8.8:53 98.227.185.64.in-addr.arpa udp
US 34.70.83.251:443 ingest.quantummetric.com tcp
RU 95.165.158.103:64 udp
RU 95.24.31.68:31199 udp
US 8.8.8.8:53 aefd.nelreports.net udp
US 2.17.251.10:443 aefd.nelreports.net udp
US 2.17.251.10:443 aefd.nelreports.net tcp
US 8.8.8.8:53 68.31.24.95.in-addr.arpa udp
AU 159.196.240.84:62603 udp
US 8.8.8.8:53 84.240.196.159.in-addr.arpa udp
US 73.153.201.238:6881 udp
US 8.8.8.8:53 238.201.153.73.in-addr.arpa udp
BR 201.89.148.220:42258 udp
HU 188.143.77.160:6881 udp
US 8.8.8.8:53 160.77.143.188.in-addr.arpa udp
RU 95.165.158.103:3334 udp
BR 187.36.167.9:1129 udp
US 8.8.8.8:53 9.167.36.187.in-addr.arpa udp
US 8.8.8.8:53 track.analytics-data.io udp
US 18.211.212.102:443 track.analytics-data.io tcp
US 18.211.212.102:443 track.analytics-data.io tcp
US 18.211.212.102:443 track.analytics-data.io tcp
US 18.211.212.102:443 track.analytics-data.io tcp
FR 195.191.244.11:1101 udp
US 8.8.8.8:53 11.244.191.195.in-addr.arpa udp
CN 112.87.174.59:6891 udp
US 8.8.8.8:53 59.174.87.112.in-addr.arpa udp
US 216.239.32.36:443 region1.google-analytics.com udp
RU 185.229.122.85:54305 udp
US 8.8.8.8:53 85.122.229.185.in-addr.arpa udp
TW 1.170.109.124:15321 udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
JM 67.230.43.96:49086 udp
US 8.8.8.8:53 96.43.230.67.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
AU 1.156.222.87:6881 udp
US 8.8.8.8:53 87.222.156.1.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
ES 92.178.1.61:39211 udp
US 8.8.8.8:53 61.1.178.92.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
SE 92.34.92.15:50364 udp
US 8.8.8.8:53 15.92.34.92.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
RO 92.114.82.166:9850 udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 166.82.114.92.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
BG 188.254.187.147:12403 udp
US 8.8.8.8:53 147.187.254.188.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
CL 190.95.22.108:56119 udp
US 8.8.8.8:53 108.22.95.190.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
JP 133.32.235.174:2869 udp
US 8.8.8.8:53 174.235.32.133.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
CA 149.36.49.212:56899 udp
US 8.8.8.8:53 212.49.36.149.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
VC 204.152.80.157:49617 udp
US 8.8.8.8:53 157.80.152.204.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 www.microsoft.com udp
BE 2.21.17.194:443 www.microsoft.com tcp
NL 23.62.61.57:443 www.bing.com tcp
N/A 127.0.0.1:4577 tcp
JP 126.60.173.109:56046 udp
US 8.8.8.8:53 109.173.60.126.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
PK 182.176.162.110:54003 udp
US 8.8.8.8:53 110.162.176.182.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 bgappservices.microsoft.com udp
US 52.173.134.115:443 bgappservices.microsoft.com tcp
US 8.8.8.8:53 115.134.173.52.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 34.70.83.251:443 ingest.quantummetric.com tcp
US 34.70.83.251:443 ingest.quantummetric.com tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 clients2.google.com udp
US 8.8.8.8:53 clients2.google.com udp
US 8.8.8.8:53 edge-mobile-static.azureedge.net udp
US 8.8.8.8:53 edge-mobile-static.azureedge.net udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
GB 172.217.16.238:443 clients2.google.com tcp
US 13.107.246.64:443 edge-mobile-static.azureedge.net tcp
GB 172.165.69.228:443 nav-edge.smartscreen.microsoft.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 13.107.6.158:443 business.bing.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 8.8.8.8:53 data-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 data-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 assets.msn.com udp
US 2.16.106.135:443 assets.msn.com tcp
US 8.8.8.8:53 clients2.googleusercontent.com udp
US 8.8.8.8:53 clients2.googleusercontent.com udp
US 13.107.6.158:443 business.bing.com tcp
GB 142.250.200.33:443 clients2.googleusercontent.com tcp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 2.16.106.135:443 assets.msn.com tcp
NL 96.16.53.149:443 bzib.nelreports.net tcp
US 8.8.8.8:53 c.msn.com udp
NL 23.62.61.163:443 www.bing.com tcp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 c.bing.com udp
IE 68.219.88.97:443 c.msn.com tcp
US 204.79.197.237:443 c.bing.com tcp
NL 23.62.61.185:443 www.bing.com tcp
GB 108.156.39.76:443 sb.scorecardresearch.com tcp
US 2.17.251.42:443 img-s-msn-com.akamaized.net tcp
US 8.8.8.8:53 228.69.165.172.in-addr.arpa udp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 135.106.16.2.in-addr.arpa udp
US 8.8.8.8:53 158.6.107.13.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com udp
US 8.8.8.8:53 msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com udp
NL 96.16.53.156:443 msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 149.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 97.88.219.68.in-addr.arpa udp
US 8.8.8.8:53 76.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 42.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 156.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 20.189.173.11:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 11.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 srtb.msn.com udp
US 8.8.8.8:53 srtb.msn.com udp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
US 8.8.8.8:53 dcdn.adnxs.com udp
US 8.8.8.8:53 dcdn.adnxs.com udp
NL 185.89.210.122:443 ams3-ib.adnxs.com tcp
US 151.101.1.108:443 dcdn.adnxs.com tcp
NL 23.62.61.163:443 www.bing.com udp
US 8.8.8.8:53 14.251.17.2.in-addr.arpa udp
NL 23.62.61.106:443 www.bing.com tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.msftstatic.com udp
NL 23.62.61.99:443 r.bing.com tcp
NL 23.62.61.99:443 r.bing.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
NL 23.62.61.163:443 www.bing.com udp
US 8.8.8.8:53 122.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 219.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 ecn.dev.virtualearth.net udp
US 8.8.8.8:53 ecn.dev.virtualearth.net udp
US 23.220.112.155:443 ecn.dev.virtualearth.net tcp
US 8.8.8.8:53 www.virustotal.com udp
US 8.8.8.8:53 www.virustotal.com udp
US 8.8.8.8:53 www.virustotal.com udp
US 8.8.8.8:53 www.virustotal.com udp
US 74.125.34.46:443 www.virustotal.com tcp
US 74.125.34.46:443 www.virustotal.com tcp
US 8.8.8.8:53 155.112.220.23.in-addr.arpa udp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 uk.norton.com udp
BE 23.55.96.68:443 uk.norton.com tcp
BE 23.55.96.68:443 uk.norton.com tcp
US 8.8.8.8:53 www.recaptcha.net udp
US 8.8.8.8:53 www.recaptcha.net udp
GB 216.58.201.99:443 www.recaptcha.net tcp
US 8.8.8.8:53 68.96.55.23.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 xnescat.info udp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 xnescat.info udp
US 8.8.8.8:53 xnescat.info udp
US 8.8.8.8:53 xnescat.info udp
US 8.8.8.8:53 xnescat.info udp
US 8.8.8.8:53 xnescat.info udp
US 199.59.243.225:80 xnescat.info tcp
US 199.59.243.225:80 xnescat.info tcp
US 199.59.243.225:443 xnescat.info tcp
US 199.59.243.225:443 xnescat.info tcp
US 199.59.243.225:443 xnescat.info tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 199.59.243.225:443 xnescat.info tcp
GB 142.250.178.4:443 www.google.com udp
US 199.59.243.225:443 xnescat.info tcp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 xnescat.info udp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 xnescat.info udp
US 8.8.8.8:53 xnescat.info udp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 partner.googleadservices.com udp
US 8.8.8.8:53 partner.googleadservices.com udp
GB 172.217.16.238:443 www.adsensecustomsearchads.com tcp
GB 172.217.16.238:443 www.adsensecustomsearchads.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 edgeassetservice.azureedge.net udp
US 8.8.8.8:53 edgeassetservice.azureedge.net udp
GB 172.217.16.238:443 www.adsensecustomsearchads.com udp
US 13.107.246.64:443 edgeassetservice.azureedge.net tcp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
GB 172.217.16.238:443 www.adsensecustomsearchads.com tcp
N/A 127.0.0.1:4577 tcp
US 20.189.173.11:443 browser.events.data.msn.com tcp
US 20.189.173.11:443 browser.events.data.msn.com tcp
US 74.125.34.46:443 www.virustotal.com tcp
NL 23.62.61.106:443 www.bing.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 recaptcha.net udp
US 8.8.8.8:53 recaptcha.net udp
NL 23.62.61.106:443 www.bing.com tcp
DE 142.250.184.195:443 recaptcha.net tcp
DE 142.250.184.195:443 recaptcha.net tcp
US 8.8.8.8:53 recaptcha.net udp
US 8.8.8.8:53 www.virustotal.com udp
US 8.8.8.8:53 recaptcha.net udp
US 8.8.8.8:53 recaptcha.net udp
GB 142.250.187.227:443 recaptcha.net tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 syndicatedsearch.goog udp
US 8.8.8.8:53 syndicatedsearch.goog udp
GB 142.250.200.46:443 syndicatedsearch.goog tcp
US 8.8.8.8:53 syndicatedsearch.goog udp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 195.184.250.142.in-addr.arpa udp
US 8.8.8.8:53 46.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 syndicatedsearch.goog udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 click-euw1.bodis.com udp
US 8.8.8.8:53 click-euw1.bodis.com udp
US 199.59.243.206:443 click-euw1.bodis.com tcp
US 8.8.8.8:53 buy.norton.com udp
US 8.8.8.8:53 buy.norton.com udp
US 8.8.8.8:53 buy.norton.com udp
BE 104.68.89.179:443 buy.norton.com tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 2.16.106.135:443 assets.msn.com tcp
US 8.8.8.8:53 buy-static.norton.com udp
US 8.8.8.8:53 buy-static.norton.com udp
US 8.8.8.8:53 buy-static.norton.com udp
US 8.8.8.8:53 buy-static.norton.com udp
BE 23.55.98.96:443 buy-static.norton.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.178.4:443 www.google.com udp
GB 142.250.187.227:443 recaptcha.net udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 74.125.34.46:443 www.virustotal.com tcp
GB 172.217.16.238:443 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 buy-static.norton.com udp
US 8.8.8.8:53 s.go-mpulse.net udp
US 8.8.8.8:53 s.go-mpulse.net udp
BE 23.55.96.68:443 uk.norton.com tcp
US 74.125.34.46:443 www.virustotal.com tcp
BE 23.55.96.141:443 s.go-mpulse.net tcp
US 8.8.8.8:53 96.98.55.23.in-addr.arpa udp
US 8.8.8.8:53 c.go-mpulse.net udp
US 8.8.8.8:53 c.go-mpulse.net udp
BE 23.55.96.141:443 c.go-mpulse.net tcp
US 8.8.8.8:53 assets.adobedtm.com udp
US 8.8.8.8:53 assets.adobedtm.com udp
US 8.8.8.8:53 ensighten.norton.com udp
US 8.8.8.8:53 ensighten.norton.com udp
US 8.8.8.8:53 www.nortonlifelock.com udp
US 8.8.8.8:53 0217991d.akstat.io udp
US 8.8.8.8:53 0217991d.akstat.io udp
IE 34.242.179.188:443 ensighten.norton.com tcp
US 23.53.113.19:443 assets.adobedtm.com tcp
BE 23.55.96.68:443 www.nortonlifelock.com tcp
US 8.8.8.8:53 dpm.demdex.net udp
US 8.8.8.8:53 dpm.demdex.net udp
US 8.8.8.8:53 dpm.demdex.net udp
IE 63.32.153.161:443 dpm.demdex.net tcp
US 8.8.8.8:53 www.youtube-nocookie.com udp
US 8.8.8.8:53 uk.norton.com udp
BE 104.68.89.179:443 buy.norton.com tcp
US 8.8.8.8:53 www.youtube-nocookie.com udp
US 8.8.8.8:53 www.youtube-nocookie.com udp
US 8.8.8.8:53 uk.norton.com udp
IE 34.242.179.188:443 ensighten.norton.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
GB 172.217.169.78:443 www.youtube-nocookie.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 uk.norton.com udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 161.153.32.63.in-addr.arpa udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 o1271931.ingest.sentry.io udp
US 2.17.251.42:443 img-s-msn-com.akamaized.net tcp
US 34.120.195.249:443 o1271931.ingest.sentry.io tcp
US 34.120.195.249:443 o1271931.ingest.sentry.io tcp
US 34.120.195.249:443 o1271931.ingest.sentry.io tcp
US 8.8.8.8:53 comipass.reasonsecurity.com udp
US 8.8.8.8:53 comipass.reasonsecurity.com udp
GB 18.165.227.49:443 comipass.reasonsecurity.com tcp
GB 172.217.169.78:443 www.youtube-nocookie.com udp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.187.214:443 i.ytimg.com tcp
US 8.8.8.8:53 249.195.120.34.in-addr.arpa udp
US 8.8.8.8:53 49.227.165.18.in-addr.arpa udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 yt3.ggpht.com udp
US 8.8.8.8:53 yt3.ggpht.com udp
GB 142.250.178.4:443 www.google.com udp
DE 216.58.212.138:443 jnn-pa.googleapis.com tcp
GB 142.250.187.225:443 yt3.ggpht.com tcp
US 8.8.8.8:53 symantec.tt.omtrdc.net udp
US 8.8.8.8:53 symantec.tt.omtrdc.net udp
IE 66.235.152.221:443 symantec.tt.omtrdc.net tcp
DE 216.58.212.138:443 jnn-pa.googleapis.com tcp
DE 216.58.212.138:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 oms.norton.com udp
US 8.8.8.8:53 oms.norton.com udp
IE 66.235.152.156:443 oms.norton.com tcp
BE 104.68.89.179:443 buy.norton.com tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 221.152.235.66.in-addr.arpa udp
US 2.16.106.135:443 assets.msn.com tcp
IE 34.242.179.188:443 ensighten.norton.com tcp
US 8.8.8.8:53 api.reasonsecurity.com udp
US 104.22.1.235:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 235.1.22.104.in-addr.arpa udp
US 8.8.8.8:53 cdn.quantummetric.com udp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 d.impactradius-event.com udp
US 8.8.8.8:53 d.impactradius-event.com udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 analytics.tiktok.com udp
US 8.8.8.8:53 analytics.tiktok.com udp
US 8.8.8.8:53 www.redditstatic.com udp
US 8.8.8.8:53 www.redditstatic.com udp
US 8.8.8.8:53 d34r8q7sht0t9k.cloudfront.net udp
US 8.8.8.8:53 d34r8q7sht0t9k.cloudfront.net udp
US 204.79.197.237:443 bat.bing.com tcp
US 35.186.249.72:443 d.impactradius-event.com tcp
US 104.22.52.252:443 cdn.quantummetric.com udp
GB 163.70.151.21:443 connect.facebook.net tcp
US 151.101.1.140:443 www.redditstatic.com tcp
GB 18.164.66.18:443 d34r8q7sht0t9k.cloudfront.net tcp
NL 23.62.61.98:443 analytics.tiktok.com tcp
NL 23.62.61.106:443 www.bing.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 35.186.249.72:443 d.impactradius-event.com tcp
GB 163.70.151.21:443 connect.facebook.net tcp
US 8.8.8.8:53 www.tag4arm.com udp
US 8.8.8.8:53 www.tag4arm.com udp
US 104.22.52.252:443 cdn.quantummetric.com tcp
GB 13.43.62.196:443 www.tag4arm.com tcp
US 8.8.8.8:53 s.yimg.com udp
US 8.8.8.8:53 tags.creativecdn.com udp
US 8.8.8.8:53 tags.creativecdn.com udp
US 8.8.8.8:53 zn7ngvh48sidro926-gendigital.siteintercept.qualtrics.com udp
US 8.8.8.8:53 zn7ngvh48sidro926-gendigital.siteintercept.qualtrics.com udp
US 8.8.8.8:53 ipv4.podscribe.com udp
US 8.8.8.8:53 ipv4.podscribe.com udp
US 8.8.8.8:53 pixel.byspotify.com udp
US 8.8.8.8:53 pixel.byspotify.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 cdn.taboola.com udp
GB 87.248.114.11:443 s.yimg.com tcp
US 3.234.93.15:443 ipv4.podscribe.com tcp
GB 195.181.164.14:443 tags.creativecdn.com tcp
US 34.117.162.98:443 pixel.byspotify.com tcp
US 104.17.208.240:443 zn7ngvh48sidro926-gendigital.siteintercept.qualtrics.com tcp
IE 67.220.224.144:443 aax-eu.amazon-adsystem.com tcp
US 151.101.1.44:443 trc.taboola.com tcp
US 8.8.8.8:53 tag.bounceexchange.com udp
US 8.8.8.8:53 tag.bounceexchange.com udp
US 34.120.253.250:443 tag.bounceexchange.com tcp
US 8.8.8.8:53 252.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 18.66.164.18.in-addr.arpa udp
US 13.107.246.64:443 edgeassetservice.azureedge.net tcp
US 104.22.52.252:443 cdn.quantummetric.com tcp
GB 195.181.164.14:443 tags.creativecdn.com tcp
US 34.117.162.98:443 pixel.byspotify.com tcp
US 104.17.208.240:443 zn7ngvh48sidro926-gendigital.siteintercept.qualtrics.com tcp
IE 67.220.224.144:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 8843044.fls.doubleclick.net udp
US 8.8.8.8:53 uk.norton.com udp
US 151.101.1.140:443 www.redditstatic.com tcp
US 8.8.8.8:53 websdk.ujet.co udp
US 8.8.8.8:53 websdk.ujet.co udp
US 8.8.8.8:53 norton.ow5a.net udp
US 8.8.8.8:53 norton.ow5a.net udp
US 8.8.8.8:53 8843044.fls.doubleclick.net udp
US 8.8.8.8:53 8843044.fls.doubleclick.net udp
GB 13.224.132.51:443 websdk.ujet.co tcp
IE 52.31.43.153:443 norton.ow5a.net tcp
GB 142.250.179.230:443 8843044.fls.doubleclick.net tcp
US 104.22.1.235:443 api.reasonsecurity.com tcp
GB 163.70.151.21:443 connect.facebook.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 alb.reddit.com udp
US 8.8.8.8:53 alb.reddit.com udp
GB 87.248.114.11:443 s.yimg.com tcp
US 8.8.8.8:53 assets.bounceexchange.com udp
US 8.8.8.8:53 events.bouncex.net udp
US 8.8.8.8:53 api.bounceexchange.com udp
US 8.8.8.8:53 api.bounceexchange.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 151.101.1.140:443 alb.reddit.com tcp
US 34.111.8.32:443 api.bounceexchange.com tcp
US 8.8.8.8:53 trc.taboola.com udp
US 8.8.8.8:53 trc.taboola.com udp
US 34.98.72.95:443 assets.bounceexchange.com tcp
US 8.8.8.8:53 ams.creativecdn.com udp
US 8.8.8.8:53 ams.creativecdn.com udp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.179.230:443 8843044.fls.doubleclick.net udp
GB 172.217.169.78:443 www.youtube.com tcp
US 8.8.8.8:53 siteintercept.qualtrics.com udp
US 8.8.8.8:53 siteintercept.qualtrics.com udp
US 8.8.8.8:53 ams.creativecdn.com udp
US 8.8.8.8:53 ams.creativecdn.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
NL 185.184.8.90:443 ams.creativecdn.com tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
BE 64.233.167.156:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 evnt.byspotify.com udp
US 8.8.8.8:53 evnt.byspotify.com udp
US 8.8.8.8:53 evnt.byspotify.com udp
US 8.8.8.8:53 evnt.byspotify.com udp
US 34.111.186.1:443 evnt.byspotify.com tcp
US 8.8.8.8:53 www.ojrq.net udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 www.facebook.com udp
US 34.111.186.1:443 evnt.byspotify.com udp
US 34.95.127.121:443 www.ojrq.net tcp
US 8.8.8.8:53 sp.analytics.yahoo.com udp
US 8.8.8.8:53 sp.analytics.yahoo.com udp
US 34.98.72.95:443 assets.bounceexchange.com udp
GB 163.70.151.35:443 www.facebook.com tcp
NL 185.184.8.90:443 ams.creativecdn.com tcp
IE 34.252.40.201:443 sp.analytics.yahoo.com tcp
IE 34.252.40.201:443 sp.analytics.yahoo.com tcp
US 8.8.8.8:53 14.164.181.195.in-addr.arpa udp
US 8.8.8.8:53 144.224.220.67.in-addr.arpa udp
US 8.8.8.8:53 51.132.224.13.in-addr.arpa udp
US 8.8.8.8:53 ingest.quantummetric.com udp
US 8.8.8.8:53 ingest.quantummetric.com udp
US 8.8.8.8:53 ingest.quantummetric.com udp
GB 172.217.169.78:443 www.youtube.com udp
US 8.8.8.8:53 verifi.podscribe.com udp
US 8.8.8.8:53 verifi.podscribe.com udp
US 34.135.178.72:443 ingest.quantummetric.com tcp
US 34.135.178.72:443 ingest.quantummetric.com tcp
US 34.98.72.95:443 assets.bounceexchange.com udp
US 44.218.21.29:443 verifi.podscribe.com tcp
US 34.98.72.95:443 assets.bounceexchange.com udp
US 8.8.8.8:53 assets.bounceexchange.com udp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 assets.bounceexchange.com udp
US 8.8.8.8:53 assets.bounceexchange.com udp
US 8.8.8.8:53 ams.creativecdn.com udp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 ams.creativecdn.com udp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 ams.creativecdn.com udp
US 8.8.8.8:53 ams.creativecdn.com udp
US 34.98.72.95:443 assets.bounceexchange.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 ib.adnxs.com udp
NL 185.184.8.90:443 ams.creativecdn.com tcp
NL 185.184.8.90:443 ams.creativecdn.com tcp
NL 185.89.210.141:443 ib.adnxs.com tcp
NL 185.89.210.141:443 ib.adnxs.com tcp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 201.40.252.34.in-addr.arpa udp
US 8.8.8.8:53 72.178.135.34.in-addr.arpa udp
US 8.8.8.8:53 141.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 edge-consumer-static.azureedge.net udp
US 8.8.8.8:53 edge-consumer-static.azureedge.net udp
US 13.107.246.64:443 edge-consumer-static.azureedge.net tcp
GB 163.70.151.35:443 www.facebook.com udp
US 104.22.1.235:443 api.reasonsecurity.com tcp
US 34.111.8.32:443 api.bounceexchange.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.google.co.uk udp
GB 216.58.204.67:443 www.google.co.uk tcp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 websdk.ujet.co udp
US 8.8.8.8:53 websdk.ujet.co udp
US 8.8.8.8:53 support.norton.com udp
US 8.8.8.8:53 support.norton.com udp
GB 172.165.69.228:443 data-edge.smartscreen.microsoft.com tcp
GB 13.224.132.51:443 websdk.ujet.co tcp
US 23.53.112.35:443 support.norton.com tcp
US 104.22.1.235:443 api.reasonsecurity.com tcp
US 34.111.8.32:443 api.bounceexchange.com udp
US 8.8.8.8:53 config.reasonsecurity.com udp
US 8.8.8.8:53 config.reasonsecurity.com udp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 uk.norton.com udp
BE 23.55.96.141:443 0217991d.akstat.io tcp
GB 99.86.114.49:443 config.reasonsecurity.com tcp
US 8.8.8.8:53 nlok-prod-4l9eze7.uw1.ccaiplatform.com udp
US 8.8.8.8:53 nlok-prod-4l9eze7.uw1.ccaiplatform.com udp
US 34.149.99.248:443 nlok-prod-4l9eze7.uw1.ccaiplatform.com tcp
US 8.8.8.8:53 extservices.rlbronz.com udp
US 8.8.8.8:53 extservices.rlbronz.com udp
GB 18.164.68.127:443 extservices.rlbronz.com tcp
US 34.149.99.248:443 nlok-prod-4l9eze7.uw1.ccaiplatform.com udp
US 8.8.8.8:53 pa.rlpaservices.com udp
US 8.8.8.8:53 pa.rlpaservices.com udp
GB 54.192.137.41:443 pa.rlpaservices.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 49.114.86.99.in-addr.arpa udp
US 8.8.8.8:53 127.68.164.18.in-addr.arpa udp
US 8.8.8.8:53 41.137.192.54.in-addr.arpa udp
US 204.79.197.237:443 bat.bing.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
US 23.53.113.19:443 assets.adobedtm.com tcp
IE 34.242.179.188:443 ensighten.norton.com tcp
IE 66.235.152.221:443 oms.norton.com tcp
BE 23.55.96.141:443 0217991d.akstat.io udp
IE 66.235.152.156:443 oms.norton.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 x5s5cjyxg5qeizr7quoa-f-cbc51d4a3-clientnsv4-s.akamaihd.net udp
US 8.8.8.8:53 x5s5cjyxg5qeizr7quoa-f-cbc51d4a3-clientnsv4-s.akamaihd.net udp
US 8.8.8.8:53 02179916.akstat.io udp
BE 104.68.89.179:443 buy.norton.com tcp
NL 23.62.61.98:443 analytics.tiktok.com tcp
IE 67.220.224.144:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 pixel.mathtag.com udp
US 8.8.8.8:53 pixel.mathtag.com udp
US 104.17.208.240:443 siteintercept.qualtrics.com tcp
GB 13.224.132.51:443 websdk.ujet.co tcp
US 34.111.8.32:443 api.bounceexchange.com udp
US 74.121.140.211:443 pixel.mathtag.com tcp
BE 23.55.96.141:443 02179916.akstat.io tcp
GB 13.43.62.196:443 www.tag4arm.com tcp
NL 185.184.8.90:443 ams.creativecdn.com tcp
US 8.8.8.8:53 8136487.fls.doubleclick.net udp
US 8.8.8.8:53 uk.norton.com udp
US 151.101.1.44:443 trc.taboola.com tcp
US 8.8.8.8:53 8136487.fls.doubleclick.net udp
US 8.8.8.8:53 8136487.fls.doubleclick.net udp
GB 87.248.114.11:443 s.yimg.com tcp
IE 52.31.43.153:443 norton.ow5a.net tcp
US 8.8.8.8:53 8136487.fls.doubleclick.net udp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 8136487.fls.doubleclick.net udp
US 8.8.8.8:53 8136487.fls.doubleclick.net udp
US 8.8.8.8:53 8843044.fls.doubleclick.net udp
US 8.8.8.8:53 uk.norton.com udp
US 34.135.178.72:443 ingest.quantummetric.com tcp
GB 142.250.179.230:443 8843044.fls.doubleclick.net tcp
US 151.101.1.140:443 alb.reddit.com tcp
US 3.234.93.15:443 ipv4.podscribe.com tcp
US 8.8.8.8:53 ams.creativecdn.com udp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 ams.creativecdn.com udp
US 8.8.8.8:53 uk.norton.com udp
IE 34.252.40.201:443 sp.analytics.yahoo.com tcp
NL 185.89.210.141:443 ib.adnxs.com tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
DE 142.250.186.66:443 cm.g.doubleclick.net tcp
US 8.8.8.8:53 211.140.121.74.in-addr.arpa udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 urldefense.proofpoint.com udp
US 8.8.8.8:53 urldefense.proofpoint.com udp
US 8.8.8.8:53 gwmtracking.com udp
US 8.8.8.8:53 gwmtracking.com udp
US 8.8.8.8:53 s.yimg.com udp
US 8.8.8.8:53 s.yimg.com udp
GB 87.248.114.12:443 s.yimg.com tcp
DE 37.252.172.123:443 secure.adnxs.com tcp
DE 37.252.172.123:443 secure.adnxs.com tcp
US 216.200.122.11:443 gwmtracking.com tcp
US 52.6.56.188:443 urldefense.proofpoint.com tcp
US 52.6.56.188:443 urldefense.proofpoint.com tcp
GB 216.58.204.67:443 www.google.co.uk udp
GB 87.248.114.12:443 s.yimg.com tcp
DE 142.250.186.66:443 cm.g.doubleclick.net udp
US 44.218.21.29:443 verifi.podscribe.com tcp
US 8.8.8.8:53 assets.bounceexchange.com udp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 cm.creativecdn.com udp
US 8.8.8.8:53 cm.creativecdn.com udp
US 8.8.8.8:53 66.186.250.142.in-addr.arpa udp
US 8.8.8.8:53 12.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 123.172.252.37.in-addr.arpa udp
US 8.8.8.8:53 134.186.250.142.in-addr.arpa udp
US 8.8.8.8:53 11.122.200.216.in-addr.arpa udp
US 8.8.8.8:53 188.56.6.52.in-addr.arpa udp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 buy-static.norton.com udp
BE 23.55.96.141:443 02179916.akstat.io tcp
BE 23.55.96.141:443 02179916.akstat.io udp
US 8.8.8.8:53 www.youtube-nocookie.com udp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 www.youtube-nocookie.com udp
US 8.8.8.8:53 uk.norton.com udp
GB 142.250.187.214:443 i.ytimg.com udp
US 8.8.8.8:53 x5s5cjyxg5qeizr7quia-f-334a2c83a-clientnsv4-s.akamaihd.net udp
US 8.8.8.8:53 x5s5cjyxg5qeizr7quia-f-334a2c83a-clientnsv4-s.akamaihd.net udp
US 8.8.8.8:53 ams.creativecdn.com udp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 ams.creativecdn.com udp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 8843044.fls.doubleclick.net udp
US 8.8.8.8:53 uk.norton.com udp
US 8.8.8.8:53 assets.bounceexchange.com udp
US 8.8.8.8:53 uk.norton.com udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 rl.quantummetric.com udp
US 8.8.8.8:53 rl.quantummetric.com udp
US 34.66.3.160:443 rl.quantummetric.com tcp
GB 54.192.137.41:443 pa.rlpaservices.com tcp
US 34.66.3.160:443 rl.quantummetric.com tcp
GB 18.164.68.127:443 extservices.rlbronz.com tcp
US 8.8.8.8:53 onlinesecurityext.com udp
US 8.8.8.8:53 onlinesecurityext.com udp
US 8.8.8.8:53 onlinesecurityext.com udp
GB 172.165.69.228:443 data-edge.smartscreen.microsoft.com tcp
US 76.76.21.21:443 onlinesecurityext.com tcp
US 76.76.21.21:443 onlinesecurityext.com tcp
US 8.8.8.8:53 o1271931.ingest.sentry.io udp
US 8.8.8.8:53 o1271931.ingest.sentry.io udp
US 34.120.195.249:443 o1271931.ingest.sentry.io tcp
US 8.8.8.8:53 static.hotjar.com udp
US 8.8.8.8:53 static.hotjar.com udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 connect.facebook.net udp
GB 163.70.151.21:443 connect.facebook.net tcp
GB 13.224.245.27:443 static.hotjar.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 pa.rlpaservices.com udp
US 8.8.8.8:53 pa.rlpaservices.com udp
US 8.8.8.8:53 21.21.76.76.in-addr.arpa udp
US 216.239.32.36:443 region1.google-analytics.com tcp
GB 54.192.137.110:443 pa.rlpaservices.com tcp
US 8.8.8.8:53 script.hotjar.com udp
US 8.8.8.8:53 script.hotjar.com udp
GB 18.245.253.79:443 script.hotjar.com tcp
GB 163.70.151.21:443 connect.facebook.net udp
US 8.8.8.8:53 www.facebook.com udp
GB 163.70.151.35:443 www.facebook.com tcp
US 8.8.8.8:53 surveystats.hotjar.io udp
US 8.8.8.8:53 surveystats.hotjar.io udp
GB 18.165.227.89:443 surveystats.hotjar.io tcp
US 8.8.8.8:53 postnav-edge.smartscreen.microsoft.com udp
GB 13.87.96.169:443 postnav-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 27.245.224.13.in-addr.arpa udp
US 8.8.8.8:53 110.137.192.54.in-addr.arpa udp
US 8.8.8.8:53 79.253.245.18.in-addr.arpa udp
US 8.8.8.8:53 89.227.165.18.in-addr.arpa udp
US 8.8.8.8:53 169.96.87.13.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
GB 54.192.137.110:443 pa.rlpaservices.com tcp
US 8.8.8.8:53 extservices.rlbronz.com udp
GB 18.164.68.28:443 extservices.rlbronz.com tcp
US 8.8.8.8:53 28.68.164.18.in-addr.arpa udp
US 216.239.32.36:443 region1.google-analytics.com udp
US 34.66.3.160:443 rl.quantummetric.com tcp
US 8.8.8.8:53 websdk.ujet.co udp
US 8.8.8.8:53 uk.norton.com udp
US 34.135.178.72:443 ingest.quantummetric.com tcp
US 34.66.3.160:443 rl.quantummetric.com tcp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 accounts.google.com udp
NL 173.194.69.84:443 accounts.google.com tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 www.virustotal.com udp
US 8.8.8.8:53 www.virustotal.com udp
US 74.125.34.46:443 www.virustotal.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 34.120.195.249:443 o1271931.ingest.sentry.io udp
IE 34.242.179.188:443 ensighten.norton.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 deff.nelreports.net udp
US 8.8.8.8:53 deff.nelreports.net udp
US 8.8.8.8:53 w3-reporting-nel.reddit.com udp
US 8.8.8.8:53 w3-reporting-nel.reddit.com udp
US 151.101.1.140:443 w3-reporting-nel.reddit.com tcp
NL 96.16.53.160:443 deff.nelreports.net tcp
NL 96.16.53.160:443 deff.nelreports.net tcp
US 204.79.197.237:443 bat.bing.com tcp
NL 96.16.53.160:443 deff.nelreports.net tcp
US 8.8.8.8:53 160.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 assets.msn.com udp
US 8.8.8.8:53 assets.msn.com udp
US 8.8.8.8:53 apis.reasonsecurity.com udp
US 8.8.8.8:53 apis.reasonsecurity.com udp
US 2.16.106.135:443 assets.msn.com tcp
GB 108.138.217.112:443 apis.reasonsecurity.com tcp
GB 108.138.217.112:443 apis.reasonsecurity.com tcp
US 8.8.8.8:53 api.reasonsecurity.com udp
US 8.8.8.8:53 api.reasonsecurity.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 112.217.138.108.in-addr.arpa udp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
NL 23.62.61.106:443 www.bing.com udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
NL 96.16.53.152:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 152.53.16.96.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 nleditor.osi.office.net udp
US 8.8.8.8:53 nleditor.osi.office.net udp
FR 52.111.231.25:443 nleditor.osi.office.net tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 25.231.111.52.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 nw-umwatson.events.data.microsoft.com udp
US 20.189.173.20:443 nw-umwatson.events.data.microsoft.com tcp
GB 163.70.151.35:443 www.facebook.com udp
GB 18.164.68.28:443 extservices.rlbronz.com tcp
US 76.76.21.21:443 onlinesecurityext.com tcp
US 8.8.8.8:53 dwm-api.reasonlabs.com udp
GB 54.192.137.110:443 pa.rlpaservices.com tcp
GB 54.192.137.115:443 dwm-api.reasonlabs.com tcp
US 8.8.8.8:53 20.173.189.20.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
GB 108.138.217.112:443 apis.reasonsecurity.com tcp
US 8.8.8.8:53 115.137.192.54.in-addr.arpa udp
GB 18.164.68.127:443 extservices.rlbronz.com tcp
US 8.8.8.8:53 www.virustotal.com udp
US 8.8.8.8:53 www.virustotal.com udp
US 74.125.34.46:443 www.virustotal.com tcp
GB 18.164.68.28:443 extservices.rlbronz.com tcp
GB 54.192.137.110:443 pa.rlpaservices.com tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.google.co.uk udp
DE 142.250.186.163:443 www.google.co.uk udp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 163.186.250.142.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 picart.reasonlabs.com udp
US 8.8.8.8:53 onlinesecurityext.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
GB 13.87.96.169:443 nav-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 picart.reasonlabs.com udp
US 8.8.8.8:53 picart.reasonlabs.com udp
US 76.76.21.98:443 picart.reasonlabs.com tcp
US 8.8.8.8:53 98.21.76.76.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 track.analytics-data.io udp
US 8.8.8.8:53 track.analytics-data.io udp
US 8.8.8.8:53 pa-wservices.rlproton.com udp
US 8.8.8.8:53 pa-wservices.rlproton.com udp
US 8.8.8.8:53 js.stripe.com udp
US 8.8.8.8:53 js.stripe.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 connect.facebook.net udp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 107.22.175.110:443 track.analytics-data.io tcp
GB 13.224.132.106:443 pa-wservices.rlproton.com tcp
GB 13.224.132.106:443 pa-wservices.rlproton.com tcp
GB 54.192.137.37:443 js.stripe.com tcp
GB 163.70.151.21:443 connect.facebook.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net udp
US 8.8.8.8:53 js.stripe.com udp
US 8.8.8.8:53 picart.reasonlabs.com udp
GB 163.70.151.21:443 connect.facebook.net udp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 106.132.224.13.in-addr.arpa udp
US 8.8.8.8:53 js.stripe.com udp
US 8.8.8.8:53 picart.reasonlabs.com udp
US 8.8.8.8:53 picart.reasonlabs.com udp
US 8.8.8.8:53 js.stripe.com udp
US 8.8.8.8:53 picart.reasonlabs.com udp
US 8.8.8.8:53 api.stripe.com udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 www.facebook.com udp
IE 34.241.59.225:443 api.stripe.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
GB 54.192.137.37:443 js.stripe.com tcp
US 8.8.8.8:53 225.59.241.34.in-addr.arpa udp
US 8.8.8.8:53 xpaycdn.azureedge.net udp
US 8.8.8.8:53 xpayeccdn.azureedge.net udp
US 8.8.8.8:53 xpayeccdn.azureedge.net udp
US 13.107.246.64:443 xpayeccdn.azureedge.net tcp
US 13.107.246.64:443 xpayeccdn.azureedge.net tcp
US 13.107.246.64:443 xpayeccdn.azureedge.net tcp
US 8.8.8.8:53 merchant-ui-api.stripe.com udp
US 8.8.8.8:53 merchant-ui-api.stripe.com udp
US 198.202.176.201:443 merchant-ui-api.stripe.com tcp
US 8.8.8.8:53 r.stripe.com udp
US 8.8.8.8:53 r.stripe.com udp
US 8.8.8.8:53 js.stripe.com udp
US 8.8.8.8:53 picart.reasonlabs.com udp
GB 18.164.68.28:443 extservices.rlbronz.com tcp
US 54.187.119.242:443 r.stripe.com tcp
US 54.187.119.242:443 r.stripe.com tcp
US 54.187.119.242:443 r.stripe.com tcp
US 54.187.119.242:443 r.stripe.com tcp
US 54.187.119.242:443 r.stripe.com tcp
US 54.187.119.242:443 r.stripe.com tcp
US 76.76.21.98:443 picart.reasonlabs.com tcp
US 8.8.8.8:53 m.stripe.network udp
US 8.8.8.8:53 js.stripe.com udp
US 8.8.8.8:53 m.stripe.network udp
US 8.8.8.8:53 m.stripe.network udp
US 151.101.0.176:443 m.stripe.network tcp
GB 54.192.137.110:443 pa.rlpaservices.com tcp
US 8.8.8.8:53 js.stripe.com udp
US 8.8.8.8:53 js.stripe.com udp
US 8.8.8.8:53 picart.reasonlabs.com udp
US 8.8.8.8:53 js.stripe.com udp
US 8.8.8.8:53 picart.reasonlabs.com udp
US 8.8.8.8:53 picart.reasonlabs.com udp
US 8.8.8.8:53 b.stripecdn.com udp
US 8.8.8.8:53 js.stripe.com udp
US 8.8.8.8:53 b.stripecdn.com udp
US 8.8.8.8:53 b.stripecdn.com udp
GB 13.87.96.169:443 nav-edge.smartscreen.microsoft.com tcp
GB 18.244.155.7:443 b.stripecdn.com tcp
US 8.8.8.8:53 201.176.202.198.in-addr.arpa udp
US 8.8.8.8:53 242.119.187.54.in-addr.arpa udp
US 8.8.8.8:53 176.0.101.151.in-addr.arpa udp
US 8.8.8.8:53 hcaptcha.com udp
US 8.8.8.8:53 hcaptcha.com udp
US 104.18.125.91:443 hcaptcha.com udp
US 8.8.8.8:53 newassets.hcaptcha.com udp
US 8.8.8.8:53 b.stripecdn.com udp
US 8.8.8.8:53 newassets.hcaptcha.com udp
US 8.8.8.8:53 newassets.hcaptcha.com udp
US 8.8.8.8:53 7.155.244.18.in-addr.arpa udp
US 8.8.8.8:53 91.125.18.104.in-addr.arpa udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 api.hcaptcha.com udp
US 8.8.8.8:53 api.hcaptcha.com udp
US 8.8.8.8:53 edgeassetservice.azureedge.net udp
US 8.8.8.8:53 edgeassetservice.azureedge.net udp
US 13.107.246.64:443 edgeassetservice.azureedge.net tcp
US 8.8.8.8:53 m.stripe.com udp
US 8.8.8.8:53 m.stripe.com udp
US 44.237.131.121:443 m.stripe.com tcp
US 216.239.32.36:443 region1.google-analytics.com udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 121.131.237.44.in-addr.arpa udp
US 8.8.8.8:53 pa.rlpaservices.com udp
US 8.8.8.8:53 pa.rlpaservices.com udp
US 8.8.8.8:53 extservices.rlbronz.com udp
US 8.8.8.8:53 extservices.rlbronz.com udp
GB 54.192.137.117:443 pa.rlpaservices.com tcp
GB 18.164.68.28:443 extservices.rlbronz.com tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 117.137.192.54.in-addr.arpa udp
US 54.187.119.242:443 r.stripe.com tcp
US 8.8.8.8:53 update.reasonsecurity.com udp
GB 18.154.84.26:443 update.reasonsecurity.com tcp
GB 99.84.9.78:443 cdn.reasonsecurity.com tcp
US 8.8.8.8:53 26.84.154.18.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 78.9.84.99.in-addr.arpa udp
US 8.8.8.8:53 12.178.204.143.in-addr.arpa udp
US 8.8.8.8:53 113.216.138.108.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 76.76.21.21:443 onlinesecurityext.com tcp
US 8.8.8.8:53 pa.rlpaservices.com udp
US 8.8.8.8:53 pa.rlpaservices.com udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 extservices.rlbronz.com udp
US 8.8.8.8:53 extservices.rlbronz.com udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 104.208.16.92:443 browser.events.data.msn.com tcp
US 204.79.197.237:443 c.bing.com tcp
NL 23.62.61.88:443 www.bing.com udp
US 2.16.106.135:443 assets.msn.com tcp
IE 68.219.88.97:443 c.msn.com tcp
US 2.16.106.135:443 assets.msn.com tcp
NL 23.62.61.99:443 www.bing.com udp
GB 108.156.39.64:443 sb.scorecardresearch.com tcp
US 2.17.251.42:443 img-s-msn-com.akamaized.net tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 104.208.16.92:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 srtb.msn.com udp
US 8.8.8.8:53 srtb.msn.com udp
US 8.8.8.8:53 88.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 64.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 92.16.208.104.in-addr.arpa udp
US 8.8.8.8:53 px.ads.linkedin.com udp
US 8.8.8.8:53 px.ads.linkedin.com udp
US 13.107.42.14:443 px.ads.linkedin.com tcp
US 8.8.8.8:53 trc.taboola.com udp
US 8.8.8.8:53 trc.taboola.com udp
US 8.8.8.8:53 sync.outbrain.com udp
US 8.8.8.8:53 sync.outbrain.com udp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
US 8.8.8.8:53 hbx.media.net udp
US 8.8.8.8:53 hbx.media.net udp
US 8.8.8.8:53 cm.mgid.com udp
US 8.8.8.8:53 cm.mgid.com udp
US 151.101.1.44:443 trc.taboola.com tcp
IE 52.31.50.141:443 pr-bh.ybp.yahoo.com tcp
US 23.220.112.27:443 hbx.media.net tcp
US 50.31.142.223:443 sync.outbrain.com tcp
US 104.19.129.76:443 cm.mgid.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 code.yengo.com udp
US 8.8.8.8:53 code.yengo.com udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 trace.mediago.io udp
US 8.8.8.8:53 trace.mediago.io udp
US 13.248.245.213:443 eb2.3lift.com tcp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
SG 172.241.51.69:443 code.yengo.com tcp
US 35.208.249.213:443 trace.mediago.io tcp
US 8.8.8.8:53 trace.popin.cc udp
US 8.8.8.8:53 trace.popin.cc udp
NL 96.16.53.160:443 deff.nelreports.net tcp
JP 35.213.89.133:443 trace.popin.cc tcp
N/A 127.0.0.1:4577 tcp
SG 172.241.51.69:443 code.yengo.com tcp
US 8.8.8.8:53 14.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 48.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 76.129.19.104.in-addr.arpa udp
US 8.8.8.8:53 141.50.31.52.in-addr.arpa udp
US 8.8.8.8:53 m.adnxs.com udp
US 8.8.8.8:53 m.adnxs.com udp
NL 23.62.61.106:443 th.bing.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 sync.inmobi.com udp
US 8.8.8.8:53 sync.inmobi.com udp
NL 185.89.210.180:443 ib.adnxs.com tcp
NL 23.62.61.106:443 th.bing.com tcp
NL 185.89.210.141:443 ib.adnxs.com tcp
US 20.253.0.30:443 sync.inmobi.com tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.msftstatic.com udp
US 8.8.8.8:53 r.msftstatic.com udp
NL 23.62.61.56:443 r.bing.com tcp
NL 23.62.61.56:443 r.bing.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
US 8.8.8.8:53 deff.nelreports.net udp
US 8.8.8.8:53 deff.nelreports.net udp
NL 23.62.61.88:443 r.bing.com udp
NL 96.16.53.160:443 deff.nelreports.net tcp
NL 23.62.61.88:443 r.bing.com tcp
US 8.8.8.8:53 apps.identrust.com udp
US 8.8.8.8:53 apps.identrust.com udp
US 8.8.8.8:53 27.112.220.23.in-addr.arpa udp
US 8.8.8.8:53 153.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 223.142.31.50.in-addr.arpa udp
US 8.8.8.8:53 213.249.208.35.in-addr.arpa udp
US 8.8.8.8:53 133.89.213.35.in-addr.arpa udp
US 8.8.8.8:53 69.51.241.172.in-addr.arpa udp
US 8.8.8.8:53 180.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 56.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 30.0.253.20.in-addr.arpa udp
US 2.18.190.80:80 apps.identrust.com tcp
US 8.8.8.8:53 apis.reasonsecurity.com udp
GB 108.138.217.112:443 apis.reasonsecurity.com tcp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 assets.msn.com udp
US 8.8.8.8:53 assets.msn.com udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 11.97.55.23.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 2.17.251.42:443 img-s-msn-com.akamaized.net tcp
N/A 127.0.0.1:4577 tcp
US 2.16.106.140:443 assets.msn.com tcp
US 8.8.8.8:53 youareanidiot.org udp
US 8.8.8.8:53 youareanidiot.org udp
US 8.8.8.8:53 youareanidiot.org udp
US 8.8.8.8:53 youareanidiot.org udp
US 50.28.56.190:443 youareanidiot.org tcp
US 50.28.56.190:443 youareanidiot.org tcp
GB 13.87.96.169:443 nav-edge.smartscreen.microsoft.com tcp
US 104.208.16.92:443 browser.events.data.msn.com tcp
US 104.208.16.92:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 ww12.youareanidiot.org udp
US 8.8.8.8:53 ww12.youareanidiot.org udp
US 8.8.8.8:53 ww12.youareanidiot.org udp
US 8.8.8.8:53 ww12.youareanidiot.org udp
US 75.2.81.221:443 ww12.youareanidiot.org tcp
US 8.8.8.8:53 ww12.youareanidiot.org udp
US 75.2.81.221:443 ww12.youareanidiot.org tcp
US 8.8.8.8:53 ecn.dev.virtualearth.net udp
US 8.8.8.8:53 ecn.dev.virtualearth.net udp
US 23.220.112.155:443 ecn.dev.virtualearth.net tcp
US 8.8.8.8:53 youareanidiot.org udp
US 8.8.8.8:53 youareanidiot.org udp
US 8.8.8.8:53 youareanidiot.org udp
US 50.28.56.190:80 youareanidiot.org tcp
US 50.28.56.190:80 youareanidiot.org tcp
US 8.8.8.8:53 ww12.youareanidiot.org udp
US 75.2.81.221:443 ww12.youareanidiot.org tcp
US 2.16.106.140:443 assets.msn.com tcp
US 8.8.8.8:53 ww12.youareanidiot.org udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 ww12.youareanidiot.org udp
US 8.8.8.8:53 ww12.youareanidiot.org udp
US 75.2.81.221:80 ww12.youareanidiot.org tcp
US 8.8.8.8:53 parking.parklogic.com udp
US 8.8.8.8:53 parking.parklogic.com udp
US 67.225.218.50:80 parking.parklogic.com tcp
US 8.8.8.8:53 221.81.2.75.in-addr.arpa udp
US 104.208.16.92:443 browser.events.data.msn.com tcp
US 67.225.218.50:80 parking.parklogic.com tcp
US 8.8.8.8:53 d38psrni17bvxu.cloudfront.net udp
US 8.8.8.8:53 d38psrni17bvxu.cloudfront.net udp
US 8.8.8.8:53 www.google.com udp
GB 54.192.137.117:443 pa.rlpaservices.com tcp
GB 18.164.68.28:443 extservices.rlbronz.com tcp
GB 108.138.217.112:443 apis.reasonsecurity.com tcp
GB 99.86.249.190:80 d38psrni17bvxu.cloudfront.net tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
GB 172.217.16.238:443 www.adsensecustomsearchads.com tcp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 ww12.youareanidiot.org udp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 partner.googleadservices.com udp
US 8.8.8.8:53 partner.googleadservices.com udp
GB 172.217.16.238:443 www.adsensecustomsearchads.com tcp
US 8.8.8.8:53 50.218.225.67.in-addr.arpa udp
US 8.8.8.8:53 190.249.86.99.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
GB 54.192.137.117:443 pa.rlpaservices.com tcp
GB 18.164.68.28:443 extservices.rlbronz.com tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 reasonlabs.com udp
US 8.8.8.8:53 reasonlabs.com udp
US 8.8.8.8:53 reasonlabs.com udp
US 8.8.8.8:53 reasonlabs.com udp
US 76.76.21.21:443 reasonlabs.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 76.76.21.21:443 reasonlabs.com tcp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
GB 172.165.61.93:443 nav-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 cookie-cdn.cookiepro.com udp
US 8.8.8.8:53 static-cf.cleverbridge.com udp
US 8.8.8.8:53 static-cf.cleverbridge.com udp
US 104.18.40.148:443 cookie-cdn.cookiepro.com tcp
US 104.16.242.229:443 static-cf.cleverbridge.com tcp
US 8.8.8.8:53 track.analytics-data.io udp
US 8.8.8.8:53 track.analytics-data.io udp
US 104.18.40.148:443 cookie-cdn.cookiepro.com tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 18.211.212.102:443 track.analytics-data.io tcp
US 204.79.197.239:443 edge.microsoft.com tcp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 static.ads-twitter.com udp
US 8.8.8.8:53 static.ads-twitter.com udp
US 8.8.8.8:53 cdn.equalweb.com udp
US 8.8.8.8:53 cdn.equalweb.com udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 analytics.tiktok.com udp
GB 199.232.56.157:443 static.ads-twitter.com tcp
GB 163.70.151.21:443 connect.facebook.net tcp
NL 23.62.61.96:443 analytics.tiktok.com tcp
US 104.26.13.95:443 cdn.equalweb.com tcp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 172.64.155.119:443 geolocation.onetrust.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 pa-wservices.rlproton.com udp
US 216.239.34.36:443 region1.analytics.google.com tcp
BE 64.233.167.156:443 stats.g.doubleclick.net tcp
GB 13.224.132.106:443 pa-wservices.rlproton.com tcp
GB 13.224.132.106:443 pa-wservices.rlproton.com tcp
US 8.8.8.8:53 t.co udp
US 8.8.8.8:53 t.co udp
US 8.8.8.8:53 analytics.twitter.com udp
US 8.8.8.8:53 analytics.twitter.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.google.co.uk udp
US 104.244.42.197:443 t.co tcp
GB 216.58.204.67:443 www.google.co.uk udp
US 104.244.42.131:443 analytics.twitter.com tcp
GB 163.70.151.21:443 connect.facebook.net udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 reasonlabs.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 www.facebook.com udp
GB 163.70.151.35:443 www.facebook.com tcp
US 8.8.8.8:53 148.40.18.104.in-addr.arpa udp
US 8.8.8.8:53 229.242.16.104.in-addr.arpa udp
US 8.8.8.8:53 157.56.232.199.in-addr.arpa udp
US 8.8.8.8:53 95.13.26.104.in-addr.arpa udp
US 8.8.8.8:53 119.155.64.172.in-addr.arpa udp
US 8.8.8.8:53 197.42.244.104.in-addr.arpa udp
US 8.8.8.8:53 131.42.244.104.in-addr.arpa udp
US 8.8.8.8:53 reasonlabs.com udp
US 8.8.8.8:53 reasonlabs.com udp
GB 142.250.178.4:443 www.google.com udp
GB 199.232.56.157:443 static.ads-twitter.com tcp
NL 23.62.61.96:443 analytics.tiktok.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
US 18.211.212.102:443 track.analytics-data.io tcp
US 8.8.8.8:53 static.zdassets.com udp
US 104.244.42.197:443 t.co tcp
US 104.244.42.131:443 analytics.twitter.com tcp
GB 163.70.151.35:443 www.facebook.com udp
US 172.64.155.119:443 geolocation.onetrust.com tcp
US 104.18.72.113:443 static.zdassets.com tcp
US 76.76.21.21:443 reasonlabs.com tcp
GB 13.224.132.106:443 pa-wservices.rlproton.com tcp
US 8.8.8.8:53 reasonlabs.com udp
US 8.8.8.8:53 ekr.zdassets.com udp
US 8.8.8.8:53 ekr.zdassets.com udp
US 104.18.72.113:443 ekr.zdassets.com tcp
US 8.8.8.8:53 reasonsecurity.zendesk.com udp
US 8.8.8.8:53 reasonsecurity.zendesk.com udp
US 104.16.51.111:443 reasonsecurity.zendesk.com tcp
US 8.8.8.8:53 widget-mediator.zopim.com udp
IE 54.247.47.54:443 widget-mediator.zopim.com tcp
IE 54.247.47.54:443 widget-mediator.zopim.com tcp
US 8.8.8.8:53 111.51.16.104.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 54.47.247.54.in-addr.arpa udp
NL 23.62.61.56:443 www.bing.com tcp
NL 23.62.61.56:443 www.bing.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
NL 23.62.61.88:443 www.bing.com udp
US 104.208.16.92:443 browser.events.data.msn.com tcp
US 104.208.16.92:443 browser.events.data.msn.com tcp
US 104.208.16.92:443 browser.events.data.msn.com tcp
IE 68.219.88.97:443 c.msn.com tcp
GB 108.156.39.64:443 sb.scorecardresearch.com tcp
US 2.16.106.140:443 assets.msn.com tcp
NL 23.62.61.88:443 www.bing.com udp
NL 23.62.61.152:443 www.bing.com udp
US 104.208.16.92:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
US 8.8.8.8:53 dcdn.adnxs.com udp
US 8.8.8.8:53 dcdn.adnxs.com udp
US 2.17.251.42:443 img-s-msn-com.akamaized.net tcp
NL 23.62.61.99:443 www.bing.com udp
US 8.8.8.8:53 youareanidiot.org udp
NL 23.62.61.99:443 www.bing.com tcp
US 50.28.56.190:443 youareanidiot.org tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
US 23.53.112.216:443 dcdn.adnxs.com tcp
US 50.28.56.190:443 youareanidiot.org tcp
US 204.79.197.237:443 c.bing.com tcp
US 8.8.8.8:53 ww12.youareanidiot.org udp
US 75.2.81.221:80 ww12.youareanidiot.org tcp
GB 172.165.61.93:443 nav-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 216.112.53.23.in-addr.arpa udp
US 23.220.112.155:443 ecn.dev.virtualearth.net tcp
US 2.16.106.140:443 assets.msn.com tcp
US 67.225.218.50:80 parking.parklogic.com tcp
US 67.225.218.50:80 parking.parklogic.com tcp
N/A 127.0.0.1:4577 tcp
GB 172.217.16.238:443 www.adsensecustomsearchads.com tcp
GB 172.217.16.238:443 www.adsensecustomsearchads.com tcp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 ww12.youareanidiot.org udp
GB 172.217.16.238:443 www.adsensecustomsearchads.com udp
US 75.2.81.221:80 ww12.youareanidiot.org tcp
US 8.8.8.8:53 afs.googleusercontent.com udp
GB 142.250.200.33:443 afs.googleusercontent.com tcp
GB 142.250.200.33:443 afs.googleusercontent.com tcp
US 2.16.106.140:443 assets.msn.com tcp
US 2.16.106.140:443 assets.msn.com tcp
N/A 127.0.0.1:4577 tcp
GB 172.217.16.238:443 www.adsensecustomsearchads.com tcp
GB 172.217.16.238:443 www.adsensecustomsearchads.com udp
US 104.208.16.92:443 browser.events.data.msn.com tcp
US 2.17.251.42:443 img-s-msn-com.akamaized.net tcp
IE 68.219.88.97:443 c.msn.com tcp
GB 108.156.39.64:443 sb.scorecardresearch.com tcp
NL 23.62.61.56:443 www.bing.com tcp
NL 23.62.61.56:443 www.bing.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 c.bing.com udp
US 204.79.197.237:443 c.bing.com tcp
US 23.220.112.155:443 ecn.dev.virtualearth.net tcp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 20.189.173.4:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 4.173.189.20.in-addr.arpa udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 edgeassetservice.azureedge.net udp
US 8.8.8.8:53 edgeassetservice.azureedge.net udp
US 13.107.246.64:443 edgeassetservice.azureedge.net tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 assets.msn.com udp
US 8.8.8.8:53 assets.msn.com udp
NL 96.16.53.152:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
US 20.189.173.4:443 browser.events.data.msn.com tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
NL 23.62.61.56:443 th.bing.com tcp
NL 23.62.61.56:443 th.bing.com tcp
NL 23.62.61.56:443 th.bing.com tcp
NL 23.62.61.56:443 th.bing.com tcp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
NL 23.62.61.56:443 th.bing.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 172.67.143.125:443 youareanidiot.cc udp
GB 172.165.61.93:443 nav-edge.smartscreen.microsoft.com tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 125.143.67.172.in-addr.arpa udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 ntp.msn.com udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
NL 96.16.53.162:443 bzib.nelreports.net tcp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 52.168.112.67:443 browser.events.data.msn.com tcp
US 204.79.197.237:443 c.bing.com tcp
IE 68.219.88.97:443 c.msn.com tcp
US 8.8.8.8:53 assets.msn.com udp
US 8.8.8.8:53 assets.msn.com udp
NL 23.62.61.152:443 www.bing.com tcp
US 2.16.106.135:443 assets.msn.com tcp
US 2.16.106.135:443 assets.msn.com tcp
NL 23.62.61.160:443 www.bing.com tcp
GB 108.156.39.114:443 sb.scorecardresearch.com tcp
US 2.17.251.12:443 img-s-msn-com.akamaized.net tcp
NL 23.62.61.160:443 www.bing.com udp
US 8.8.8.8:53 dcdn.adnxs.com udp
US 8.8.8.8:53 dcdn.adnxs.com udp
US 8.8.8.8:53 162.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 12.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 67.112.168.52.in-addr.arpa udp
US 151.101.1.108:443 dcdn.adnxs.com tcp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 172.67.143.125:443 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
NL 23.62.61.88:443 www.bing.com tcp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 youareanidiot.cc udp
US 8.8.8.8:53 submit.reasonsecurity.com udp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 8.8.8.8:53 ntp.msn.com udp
US 2.16.106.135:443 assets.msn.com tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 13.107.6.158:443 business.bing.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
NL 96.16.53.149:443 bzib.nelreports.net tcp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 c.bing.com udp
US 20.42.65.85:443 browser.events.data.msn.com tcp
IE 68.219.88.97:443 c.msn.com tcp
US 8.8.8.8:53 assets.msn.com udp
US 8.8.8.8:53 assets.msn.com udp
NL 23.62.61.160:443 www.bing.com tcp
US 204.79.197.237:443 c.bing.com tcp
US 2.16.106.140:443 assets.msn.com tcp
US 2.16.106.140:443 assets.msn.com tcp
NL 23.62.61.160:443 www.bing.com tcp
GB 108.156.39.114:443 sb.scorecardresearch.com tcp
US 2.17.251.12:443 img-s-msn-com.akamaized.net tcp
NL 23.62.61.160:443 www.bing.com udp
US 8.8.8.8:53 85.65.42.20.in-addr.arpa udp
US 8.8.8.8:53 srtb.msn.com udp
US 8.8.8.8:53 srtb.msn.com udp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
NL 185.89.210.141:443 ams3-ib.adnxs.com tcp
NL 185.89.210.141:443 ams3-ib.adnxs.com tcp
NL 23.62.61.160:443 www.bing.com tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.msftstatic.com udp
US 8.8.8.8:53 r.msftstatic.com udp
NL 23.62.61.106:443 r.bing.com tcp
NL 23.62.61.106:443 r.bing.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
US 8.8.8.8:53 fra1-ib.adnxs.com udp
US 8.8.8.8:53 fra1-ib.adnxs.com udp
DE 37.252.173.215:443 fra1-ib.adnxs.com tcp
NL 23.62.61.160:443 r.bing.com udp
DE 37.252.173.215:443 fra1-ib.adnxs.com tcp
US 8.8.8.8:53 215.173.252.37.in-addr.arpa udp
NL 23.62.61.57:443 www.bing.com udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 ntp.msn.com udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 dcdn.adnxs.com udp
US 8.8.8.8:53 dcdn.adnxs.com udp
US 151.101.1.108:443 dcdn.adnxs.com tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
NL 23.62.61.129:443 th.bing.com udp
NL 23.62.61.129:443 th.bing.com udp
NL 23.62.61.97:443 th.bing.com udp
NL 23.62.61.97:443 th.bing.com udp
US 8.8.8.8:53 129.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 74.32.126.40.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 17.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.8.8:53 edge-consumer-static.azureedge.net udp
US 8.8.8.8:53 edge-consumer-static.azureedge.net udp
US 13.107.246.64:443 edge-consumer-static.azureedge.net tcp
US 20.42.65.85:443 browser.events.data.msn.com tcp
IE 68.219.88.97:443 c.msn.com tcp
GB 108.156.39.114:443 sb.scorecardresearch.com tcp
US 2.16.106.140:443 assets.msn.com tcp
NL 23.62.61.106:443 www.bing.com tcp
NL 23.62.61.106:443 www.bing.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
NL 23.62.61.160:443 www.bing.com udp
DE 37.252.173.215:443 fra1-ib.adnxs.com tcp
US 20.42.65.85:443 browser.events.data.msn.com tcp
US 2.17.251.12:443 img-s-msn-com.akamaized.net tcp
US 2.16.106.140:443 assets.msn.com tcp
N/A 127.0.0.1:4577 tcp
US 20.42.65.85:443 browser.events.data.msn.com tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 2.16.106.140:443 assets.msn.com tcp
US 8.8.8.8:53 ntp.msn.com udp
IE 68.219.88.97:443 c.msn.com tcp
US 204.79.197.237:443 c.bing.com tcp
US 2.16.106.140:443 assets.msn.com tcp
GB 108.156.39.114:443 sb.scorecardresearch.com tcp
US 2.17.251.12:443 img-s-msn-com.akamaized.net tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 2.16.106.140:443 assets.msn.com tcp
US 2.16.106.140:443 assets.msn.com tcp
US 8.8.8.8:53 aefd.nelreports.net udp
US 8.8.8.8:53 aefd.nelreports.net udp
US 2.17.251.10:443 aefd.nelreports.net tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
NL 96.16.53.152:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
US 2.17.251.10:443 aefd.nelreports.net udp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 104.208.16.89:443 browser.events.data.msn.com tcp
NL 23.62.61.129:443 www.bing.com udp
NL 23.62.61.129:443 www.bing.com udp
NL 23.62.61.97:443 www.bing.com udp
NL 23.62.61.97:443 www.bing.com udp
US 8.8.8.8:53 89.16.208.104.in-addr.arpa udp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
N/A 127.0.0.1:4577 tcp
US 172.64.154.167:443 www2.bing.com udp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
N/A 127.0.0.1:4577 tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 151.101.2.49:443 bazaar.abuse.ch tcp
US 151.101.2.49:443 bazaar.abuse.ch tcp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
GB 51.140.244.186:443 nav-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 186.244.140.51.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 bazaar.abuse.ch udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 xpaywalletcdn.azureedge.net udp
US 8.8.8.8:53 xpaywalletcdn.azureedge.net udp
US 13.107.246.64:443 xpaywalletcdn.azureedge.net tcp
US 13.107.246.64:443 xpaywalletcdn.azureedge.net tcp
US 13.107.246.64:443 xpaywalletcdn.azureedge.net tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 bazaar.abuse.ch udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
N/A 127.0.0.1:4577 tcp
US 151.101.2.49:443 bazaar.abuse.ch tcp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
N/A 127.0.0.1:4577 tcp
US 151.101.2.49:443 bazaar.abuse.ch tcp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 bazaar.abuse.ch udp
GB 51.140.244.186:443 nav-edge.smartscreen.microsoft.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
N/A 127.0.0.1:4577 tcp
US 151.101.2.49:443 bazaar.abuse.ch tcp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 bazaar.abuse.ch udp
GB 51.140.244.186:443 nav-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 postnav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 postnav-edge.smartscreen.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 dl-edge.smartscreen.microsoft.com udp
GB 51.140.242.104:443 dl-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 104.242.140.51.in-addr.arpa udp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
NL 23.62.61.106:443 www.bing.com udp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
DE 185.172.128.33:8970 tcp
US 8.8.8.8:53 33.128.172.185.in-addr.arpa udp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
DE 185.172.128.33:8970 tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
DE 185.172.128.33:8970 tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
NL 95.100.96.33:443 download3.operacdn.com tcp
US 8.8.8.8:53 addons.opera.com udp
NL 185.26.182.112:443 addons.opera.com tcp
US 8.8.8.8:53 112.182.26.185.in-addr.arpa udp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
US 8.8.8.8:53 addons-extensions.operacdn.com udp
NL 23.62.61.75:443 addons-extensions.operacdn.com tcp
DE 185.172.128.33:8970 tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
NL 185.26.182.124:443 autoupdate.geo.opera.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
DE 185.172.128.33:8970 tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
DE 185.172.128.33:8970 tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
DE 185.172.128.33:8970 tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 104.22.1.235:443 submit.reasonsecurity.com tcp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 business.bing.com udp
US 13.107.6.158:443 business.bing.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
NL 96.16.53.162:443 bzib.nelreports.net tcp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 c.bing.com udp
NL 23.62.61.152:443 www.bing.com tcp
US 8.8.8.8:53 assets.msn.com udp
US 8.8.8.8:53 assets.msn.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 204.79.197.237:443 c.bing.com tcp
IE 68.219.88.97:443 c.msn.com tcp
US 2.16.106.135:443 assets.msn.com tcp
US 20.189.173.15:443 browser.events.data.msn.com tcp
US 2.16.106.135:443 assets.msn.com tcp
NL 23.62.61.88:443 www.bing.com tcp
GB 108.156.39.76:443 sb.scorecardresearch.com tcp
US 2.17.251.12:443 img-s-msn-com.akamaized.net tcp
NL 23.62.61.160:443 www.bing.com tcp
US 8.8.8.8:53 srtb.msn.com udp
NL 23.62.61.88:443 www.bing.com udp
US 8.8.8.8:53 15.173.189.20.in-addr.arpa udp
NL 23.62.61.160:443 www.bing.com udp
US 2.16.106.135:443 assets.msn.com tcp
US 2.16.106.135:443 assets.msn.com tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.msftstatic.com udp
NL 23.62.61.152:443 r.bing.com udp
US 204.79.197.219:443 r.msftstatic.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
NL 23.62.61.88:443 r.bing.com tcp
NL 23.62.61.88:443 r.bing.com tcp
US 20.189.173.15:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
NL 185.89.210.82:443 ams3-ib.adnxs.com tcp
NL 185.89.210.82:443 ams3-ib.adnxs.com tcp
US 8.8.8.8:53 api.reasonsecurity.com udp
US 104.22.1.235:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
DE 185.172.128.33:8970 tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 ntp.msn.com udp
IE 68.219.88.97:443 c.msn.com tcp
US 204.79.197.237:443 c.bing.com tcp
GB 108.156.39.76:443 sb.scorecardresearch.com tcp
US 2.17.251.12:443 img-s-msn-com.akamaized.net tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 autoupdate.geo.opera.com udp
US 8.8.8.8:53 autoupdate.geo.opera.com udp
US 8.8.8.8:53 features.opera-api2.com udp
US 8.8.8.8:53 features.opera-api2.com udp
US 8.8.8.8:53 sitecheck.opera.com udp
US 8.8.8.8:53 sitecheck.opera.com udp
US 8.8.8.8:53 exchange.opera.com udp
US 8.8.8.8:53 speeddials.opera.com udp
US 8.8.8.8:53 speeddials.opera.com udp
US 8.8.8.8:53 redir.opera.com udp
US 8.8.8.8:53 redir.opera.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 merchandise.opera-api2.com udp
US 8.8.8.8:53 sd-images.operacdn.com udp
US 8.8.8.8:53 sd-images.operacdn.com udp
US 8.8.8.8:53 speeddials.opera.com udp
US 8.8.8.8:53 speeddials.opera.com udp
US 8.8.8.8:53 t-cf.bstatic.com udp
US 8.8.8.8:53 t-cf.bstatic.com udp
US 8.8.8.8:53 www.google.com udp
NL 185.26.182.106:443 redir.opera.com tcp
NL 185.26.182.106:443 redir.opera.com tcp
NL 82.145.216.15:443 speeddials.opera.com tcp
NL 82.145.216.15:443 speeddials.opera.com tcp
NL 82.145.216.15:443 speeddials.opera.com tcp
NL 82.145.216.15:443 speeddials.opera.com tcp
NL 185.26.182.111:443 speeddials.opera.com tcp
NL 185.26.182.106:443 redir.opera.com tcp
NL 82.145.216.19:443 autoupdate.geo.opera.com tcp
GB 142.250.178.4:443 www.google.com udp
GB 142.250.178.4:443 www.google.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
GB 108.138.233.93:443 t-cf.bstatic.com tcp
NL 23.62.61.163:443 www.bing.com tcp
NL 185.26.182.112:443 speeddials.opera.com tcp
NL 23.62.61.105:443 sd-images.operacdn.com tcp
NL 23.62.61.105:443 sd-images.operacdn.com tcp
NL 23.62.61.105:443 sd-images.operacdn.com tcp
NL 23.62.61.105:443 sd-images.operacdn.com tcp
NL 23.62.61.105:443 sd-images.operacdn.com tcp
NL 23.62.61.105:443 sd-images.operacdn.com tcp
NL 185.26.182.111:443 speeddials.opera.com tcp
NL 185.26.182.111:443 speeddials.opera.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 sd-suggestions.operacdn.com udp
NL 23.62.61.75:443 www.bing.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 15.216.145.82.in-addr.arpa udp
US 8.8.8.8:53 106.182.26.185.in-addr.arpa udp
US 8.8.8.8:53 111.182.26.185.in-addr.arpa udp
US 8.8.8.8:53 19.216.145.82.in-addr.arpa udp
US 8.8.8.8:53 93.233.138.108.in-addr.arpa udp
US 8.8.8.8:53 105.61.62.23.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 20.189.173.15:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 extension-updates.opera.com udp
US 8.8.8.8:53 extension-updates.opera.com udp
NL 185.26.182.94:443 extension-updates.opera.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 2.17.251.12:443 img-s-msn-com.akamaized.net tcp
US 8.8.8.8:53 download3.operacdn.com udp
US 8.8.8.8:53 download3.operacdn.com udp
US 2.16.106.162:443 download3.operacdn.com tcp
US 8.8.8.8:53 94.182.26.185.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 2.16.106.162:443 download3.operacdn.com tcp
US 2.16.106.135:443 assets.msn.com tcp
US 8.8.8.8:53 162.106.16.2.in-addr.arpa udp
US 2.16.106.135:443 assets.msn.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 addons-extensions.operacdn.com udp
US 8.8.8.8:53 addons-extensions.operacdn.com udp
NL 23.62.61.75:443 addons-extensions.operacdn.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
NL 185.26.182.94:443 extension-updates.opera.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 20.189.173.15:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 autoupdate.geo.opera.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
NL 185.26.182.124:443 autoupdate.geo.opera.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
N/A 127.0.0.1:4577 tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 merchandise.opera-api2.com udp
US 8.8.8.8:53 merchandise.opera-api2.com udp
US 8.8.8.8:53 autoupdate.geo.opera.com udp
US 8.8.8.8:53 autoupdate.geo.opera.com udp
NL 185.26.182.124:443 autoupdate.geo.opera.com tcp
NL 185.26.182.112:443 merchandise.opera-api2.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 weather.opera-api2.com udp
US 8.8.8.8:53 weather.opera-api2.com udp
NL 23.62.61.97:443 www.bing.com tcp
NL 185.26.182.118:443 weather.opera-api2.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
DE 185.172.128.33:8970 tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 extension-updates.opera.com udp
US 8.8.8.8:53 extension-updates.opera.com udp
NL 185.26.182.94:443 extension-updates.opera.com tcp
US 8.8.8.8:53 118.182.26.185.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 download3.operacdn.com udp
US 8.8.8.8:53 download3.operacdn.com udp
US 2.16.106.162:443 download3.operacdn.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 merchandise.opera-api2.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
NL 185.26.182.111:443 merchandise.opera-api2.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 features.opera-api2.com udp
US 8.8.8.8:53 exchange.opera.com udp
NL 185.26.182.111:443 exchange.opera.com tcp
NL 185.26.182.111:443 exchange.opera.com tcp
NL 185.26.182.111:443 exchange.opera.com tcp
NL 82.145.216.15:443 speeddials.opera.com tcp
NL 185.26.182.124:443 autoupdate.geo.opera.com tcp
NL 185.26.182.124:443 autoupdate.geo.opera.com tcp
US 8.8.8.8:53 sadownload.mcafee.com udp
NL 96.16.53.143:443 sadownload.mcafee.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
NL 185.26.182.118:443 exchange.opera.com tcp
US 8.8.8.8:53 143.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 234.212.58.216.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
DE 185.172.128.33:8970 tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 autoupdate.geo.opera.com udp
US 8.8.8.8:53 autoupdate.geo.opera.com udp
US 8.8.8.8:53 merchandise.opera-api2.com udp
US 8.8.8.8:53 merchandise.opera-api2.com udp
NL 185.26.182.111:443 merchandise.opera-api2.com tcp
NL 82.145.216.19:443 autoupdate.geo.opera.com tcp
US 8.8.8.8:53 weather.opera-api2.com udp
US 8.8.8.8:53 weather.opera-api2.com udp
NL 185.26.182.118:443 weather.opera-api2.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 extension-updates.opera.com udp
US 8.8.8.8:53 extension-updates.opera.com udp
NL 185.26.182.94:443 extension-updates.opera.com tcp
US 8.8.8.8:53 download3.operacdn.com udp
US 8.8.8.8:53 download3.operacdn.com udp
US 2.16.106.156:443 download3.operacdn.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 addons-extensions.operacdn.com udp
NL 23.62.61.75:443 addons-extensions.operacdn.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 156.106.16.2.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 api.bing.com udp
US 8.8.8.8:53 api.bing.com udp
US 13.107.5.80:443 api.bing.com tcp
US 8.8.8.8:53 weather.opera-api2.com udp
NL 185.26.182.118:443 weather.opera-api2.com tcp
US 13.107.5.80:443 api.bing.com tcp
NL 185.26.182.118:443 weather.opera-api2.com tcp
US 13.107.5.80:443 api.bing.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 features.opera-api2.com udp
US 8.8.8.8:53 features.opera-api2.com udp
US 8.8.8.8:53 exchange.opera.com udp
NL 185.26.182.93:443 features.opera-api2.com tcp
NL 185.26.182.93:443 features.opera-api2.com tcp
NL 185.26.182.93:443 features.opera-api2.com tcp
NL 185.26.182.112:443 features.opera-api2.com tcp
NL 185.26.182.93:443 features.opera-api2.com tcp
US 8.8.8.8:53 93.182.26.185.in-addr.arpa udp
US 8.8.8.8:53 autoupdate.geo.opera.com udp
NL 185.26.182.124:443 autoupdate.geo.opera.com tcp
US 8.8.8.8:53 desktop-dna.osp.opera.software udp
US 8.8.8.8:53 desktop-dna.osp.opera.software udp
NL 82.145.217.121:443 desktop-dna.osp.opera.software tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
NL 185.26.182.124:443 autoupdate.geo.opera.com tcp
US 8.8.8.8:53 sitecheck.opera.com udp
NL 23.62.61.97:443 www.bing.com tcp
NL 23.62.61.97:443 www.bing.com tcp
NL 185.26.182.112:443 sitecheck.opera.com tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
NL 23.62.61.56:443 th.bing.com tcp
NL 23.62.61.56:443 th.bing.com tcp
NL 23.62.61.160:443 r.bing.com tcp
NL 23.62.61.160:443 r.bing.com tcp
NL 23.62.61.97:443 th.bing.com udp
US 8.8.8.8:53 speeddials.opera.com udp
US 8.8.8.8:53 speeddials.opera.com udp
NL 185.26.182.93:443 speeddials.opera.com tcp
US 8.8.8.8:53 sd-images.operacdn.com udp
US 8.8.8.8:53 sd-images.operacdn.com udp
NL 23.62.61.105:443 sd-images.operacdn.com tcp
NL 23.62.61.160:443 r.bing.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 services.bingapis.com udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 bzib.nelreports.net udp
NL 96.16.53.149:443 bzib.nelreports.net tcp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
NL 23.62.61.97:443 www.bing.com tcp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 assets.msn.com udp
US 8.8.8.8:53 assets.msn.com udp
IE 68.219.88.97:443 c.msn.com tcp
US 20.42.73.25:443 browser.events.data.msn.com tcp
US 204.79.197.237:443 c.bing.com tcp
US 2.16.106.140:443 assets.msn.com tcp
US 2.16.106.140:443 assets.msn.com tcp
NL 23.62.61.56:443 th.bing.com tcp
GB 108.156.39.64:443 sb.scorecardresearch.com tcp
US 2.17.251.42:443 img-s-msn-com.akamaized.net tcp
NL 23.62.61.75:443 www.bing.com tcp
NL 23.62.61.56:443 www.bing.com udp
US 8.8.8.8:53 srtb.msn.com udp
NL 23.62.61.97:443 www.bing.com udp
US 8.8.8.8:53 25.73.42.20.in-addr.arpa udp
NL 23.62.61.75:443 www.bing.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 20.42.73.25:443 browser.events.data.msn.com tcp
US 20.42.73.25:443 browser.events.data.msn.com tcp
US 20.42.73.25:443 browser.events.data.msn.com tcp
US 20.42.73.25:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.msftstatic.com udp
NL 23.62.61.97:443 www.bing.com udp
NL 185.89.211.84:443 ams3-ib.adnxs.com tcp
NL 23.62.61.97:443 www.bing.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
NL 23.62.61.56:443 r.bing.com tcp
NL 23.62.61.56:443 r.bing.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
NL 185.26.182.112:443 speeddials.opera.com tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
NL 23.62.61.56:443 th.bing.com tcp
NL 23.62.61.56:443 th.bing.com tcp
NL 23.62.61.160:443 th.bing.com tcp
NL 23.62.61.160:443 th.bing.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 84.211.89.185.in-addr.arpa udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 nw-umwatson.events.data.microsoft.com udp
US 104.208.16.94:443 nw-umwatson.events.data.microsoft.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 94.16.208.104.in-addr.arpa udp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
DE 185.172.128.33:8970 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 13.107.6.158:443 business.bing.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
NL 96.16.53.149:443 bzib.nelreports.net tcp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
NL 23.62.61.163:443 www.bing.com udp
US 8.8.8.8:53 assets.msn.com udp
US 8.8.8.8:53 assets.msn.com udp
US 204.79.197.237:443 c.bing.com tcp
US 13.89.179.10:443 browser.events.data.msn.com tcp
IE 68.219.88.97:443 c.msn.com tcp
US 2.16.106.135:443 assets.msn.com tcp
US 2.16.106.135:443 assets.msn.com tcp
GB 108.156.39.114:443 sb.scorecardresearch.com tcp
US 2.17.251.42:443 img-s-msn-com.akamaized.net tcp
US 8.8.8.8:53 10.179.89.13.in-addr.arpa udp
US 8.8.8.8:53 srtb.msn.com udp
US 8.8.8.8:53 srtb.msn.com udp
NL 23.62.61.185:443 www.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.msftstatic.com udp
US 8.8.8.8:53 r.msftstatic.com udp
NL 23.62.61.163:443 www.bing.com udp
US 204.79.197.219:443 r.msftstatic.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
NL 23.62.61.129:443 www.bing.com tcp
NL 23.62.61.129:443 www.bing.com tcp
US 8.8.8.8:53 fra1-ib.adnxs.com udp
US 8.8.8.8:53 fra1-ib.adnxs.com udp
DE 37.252.171.53:443 fra1-ib.adnxs.com tcp
US 8.8.8.8:53 53.171.252.37.in-addr.arpa udp
US 13.89.179.10:443 browser.events.data.msn.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 2.16.106.135:443 assets.msn.com tcp
US 8.8.8.8:53 ntp.msn.com udp
IE 68.219.88.97:443 c.msn.com tcp
US 204.79.197.237:443 c.bing.com tcp
US 2.16.106.135:443 assets.msn.com tcp
GB 108.156.39.114:443 sb.scorecardresearch.com tcp
US 2.17.251.42:443 img-s-msn-com.akamaized.net tcp
DE 185.172.128.33:8970 tcp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
NL 96.16.53.162:443 bzib.nelreports.net tcp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.msn.com udp
US 20.189.173.28:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 c.bing.com udp
NL 23.62.61.160:443 www.bing.com tcp
US 8.8.8.8:53 assets.msn.com udp
US 8.8.8.8:53 assets.msn.com udp
US 2.16.106.140:443 assets.msn.com tcp
US 204.79.197.237:443 c.bing.com tcp
IE 68.219.88.97:443 c.msn.com tcp
US 2.16.106.140:443 assets.msn.com tcp
NL 23.62.61.88:443 th.bing.com tcp
GB 108.156.39.114:443 sb.scorecardresearch.com tcp
US 2.17.251.12:443 img-s-msn-com.akamaized.net tcp
NL 23.62.61.88:443 th.bing.com udp
NL 23.62.61.160:443 www.bing.com udp
US 8.8.8.8:53 srtb.msn.com udp
US 8.8.8.8:53 srtb.msn.com udp
NL 23.62.61.185:443 th.bing.com udp
US 8.8.8.8:53 28.173.189.20.in-addr.arpa udp
NL 23.62.61.160:443 www.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.msftstatic.com udp
NL 23.62.61.129:443 r.bing.com tcp
NL 23.62.61.129:443 r.bing.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
NL 185.89.210.122:443 ams3-ib.adnxs.com tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
NL 23.62.61.160:443 r.bing.com udp
NL 23.62.61.160:443 r.bing.com udp
NL 23.62.61.88:443 th.bing.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
DE 185.172.128.33:8970 tcp
N/A 127.0.0.1:4577 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
N/A 127.0.0.1:4577 tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 autoupdate.geo.opera.com udp
US 8.8.8.8:53 autoupdate.geo.opera.com udp
US 8.8.8.8:53 sitecheck.opera.com udp
US 8.8.8.8:53 sitecheck.opera.com udp
US 8.8.8.8:53 merchandise.opera-api2.com udp
US 8.8.8.8:53 merchandise.opera-api2.com udp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 extension-updates.opera.com udp
US 8.8.8.8:53 extension-updates.opera.com udp
NL 23.62.61.97:443 www.bing.com tcp
NL 185.26.182.111:443 merchandise.opera-api2.com tcp
NL 185.26.182.93:443 extension-updates.opera.com tcp
NL 185.26.182.124:443 autoupdate.geo.opera.com tcp
NL 185.26.182.94:443 extension-updates.opera.com tcp
US 8.8.8.8:53 download3.operacdn.com udp
US 8.8.8.8:53 download3.operacdn.com udp
US 2.16.106.162:443 download3.operacdn.com tcp
US 8.8.8.8:53 speeddials.opera.com udp
NL 185.26.182.94:443 extension-updates.opera.com tcp
US 8.8.8.8:53 sd-images.operacdn.com udp
US 8.8.8.8:53 sd-images.operacdn.com udp
NL 23.62.61.75:443 sd-images.operacdn.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 addons-extensions.operacdn.com udp
US 8.8.8.8:53 addons-extensions.operacdn.com udp
NL 23.62.61.75:443 addons-extensions.operacdn.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
NL 23.62.61.97:443 th.bing.com tcp
NL 23.62.61.97:443 th.bing.com tcp
NL 23.62.61.97:443 th.bing.com tcp
NL 23.62.61.97:443 th.bing.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
NL 23.62.61.129:443 www.bing.com tcp
US 8.8.8.8:53 weather.opera-api2.com udp
US 8.8.8.8:53 weather.opera-api2.com udp
NL 185.26.182.106:443 weather.opera-api2.com tcp
US 2.16.106.162:443 download3.operacdn.com tcp
NL 23.62.61.97:443 www.bing.com udp
US 8.8.8.8:53 features.opera-api2.com udp
US 8.8.8.8:53 exchange.opera.com udp
US 8.8.8.8:53 exchange.opera.com udp
NL 185.26.182.118:443 exchange.opera.com tcp
NL 185.26.182.93:443 exchange.opera.com tcp
NL 185.26.182.93:443 exchange.opera.com tcp
NL 185.26.182.93:443 exchange.opera.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
NL 40.126.32.140:443 login.microsoftonline.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
NL 185.26.182.93:443 exchange.opera.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
NL 185.26.182.94:443 exchange.opera.com tcp
US 2.16.106.162:443 download3.operacdn.com tcp
NL 23.62.61.97:443 www.bing.com tcp
NL 23.62.61.97:443 www.bing.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 autoupdate.geo.opera.com udp
NL 185.26.182.124:443 autoupdate.geo.opera.com tcp
NL 185.26.182.124:443 autoupdate.geo.opera.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
DE 185.172.128.33:8970 tcp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
NL 96.16.53.149:443 bzib.nelreports.net tcp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.bing.com udp
NL 23.62.61.97:443 th.bing.com udp
US 8.8.8.8:53 assets.msn.com udp
US 204.79.197.237:443 c.bing.com tcp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
IE 68.219.88.97:443 c.msn.com tcp
US 2.16.106.135:443 assets.msn.com tcp
US 2.16.106.135:443 assets.msn.com tcp
NL 23.62.61.75:443 th.bing.com udp
US 20.189.173.18:443 browser.events.data.msn.com tcp
GB 18.154.84.63:443 sb.scorecardresearch.com tcp
US 2.17.251.12:443 img-s-msn-com.akamaized.net tcp
US 8.8.8.8:53 35.242.123.52.in-addr.arpa udp
US 8.8.8.8:53 63.84.154.18.in-addr.arpa udp
US 8.8.8.8:53 srtb.msn.com udp
US 8.8.8.8:53 fra1-ib.adnxs.com udp
US 8.8.8.8:53 fra1-ib.adnxs.com udp
DE 37.252.173.215:443 fra1-ib.adnxs.com tcp
US 8.8.8.8:53 18.173.189.20.in-addr.arpa udp
NL 23.62.61.97:443 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.msftstatic.com udp
US 8.8.8.8:53 r.msftstatic.com udp
US 204.79.197.219:443 r.msftstatic.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
NL 185.89.210.244:443 ams3-ib.adnxs.com tcp
NL 23.62.61.99:443 www.bing.com udp
US 20.189.173.18:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 ntp.msn.com udp
IE 68.219.88.97:443 c.msn.com tcp
US 204.79.197.237:443 c.bing.com tcp
US 2.16.106.135:443 assets.msn.com tcp
US 2.16.106.135:443 assets.msn.com tcp
GB 18.154.84.63:443 sb.scorecardresearch.com tcp
US 2.17.251.12:443 img-s-msn-com.akamaized.net tcp
US 8.8.8.8:53 dcdn.adnxs.com udp
US 8.8.8.8:53 dcdn.adnxs.com udp
US 151.101.1.108:443 dcdn.adnxs.com tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
DE 185.172.128.33:8970 tcp
N/A 127.0.0.1:4577 tcp
DE 185.172.128.33:8970 tcp
US 172.67.9.68:443 api.reasonsecurity.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
US 8.8.4.4:443 dns.google tcp
GB 18.244.114.54:443 tcp
GB 18.244.114.54:443 tcp
US 76.76.21.9:443 picart.reasonlabs.com tcp
US 76.76.21.9:443 picart.reasonlabs.com tcp
US 8.8.8.8:53 9.21.76.76.in-addr.arpa udp
GB 13.224.132.39:443 pa-wservices.rlproton.com tcp
GB 13.224.132.39:443 pa-wservices.rlproton.com tcp
US 8.8.8.8:53 39.132.224.13.in-addr.arpa udp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 107.22.175.110:443 track.analytics-data.io tcp
GB 163.70.151.21:443 connect.facebook.net tcp
GB 163.70.151.21:443 connect.facebook.net udp
GB 163.70.151.35:443 www.facebook.com tcp
DE 185.172.128.33:8970 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
DE 185.172.128.33:8970 tcp
N/A 127.0.0.1:4577 tcp
DE 185.172.128.33:8970 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 shield.reasonsecurity.com udp
US 104.22.1.235:443 shield.reasonsecurity.com tcp
US 104.22.1.235:443 shield.reasonsecurity.com tcp
N/A 127.0.0.1:4577 tcp
US 172.67.9.68:443 shield.reasonsecurity.com tcp
US 172.67.9.68:443 shield.reasonsecurity.com tcp
US 172.67.9.68:443 shield.reasonsecurity.com tcp
US 8.8.8.8:53 track.analytics-data.io udp
US 18.234.5.234:443 track.analytics-data.io tcp
US 18.234.5.234:443 track.analytics-data.io tcp
US 18.234.5.234:443 track.analytics-data.io tcp
US 18.234.5.234:443 track.analytics-data.io tcp
US 18.234.5.234:443 track.analytics-data.io tcp
US 18.234.5.234:443 track.analytics-data.io tcp
N/A 127.0.0.1:4577 tcp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 13.107.6.158:443 business.bing.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
NL 96.16.53.162:443 bzib.nelreports.net tcp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
GB 51.104.15.252:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 c.msn.com udp
NL 23.62.61.160:443 www.bing.com tcp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 assets.msn.com udp
US 8.8.8.8:53 assets.msn.com udp
US 204.79.197.237:443 c.bing.com tcp
US 2.16.106.135:443 assets.msn.com tcp
US 2.16.106.135:443 assets.msn.com tcp
IE 68.219.88.97:443 c.msn.com tcp
NL 23.62.61.99:443 www.bing.com tcp
GB 108.156.39.76:443 sb.scorecardresearch.com tcp
US 2.17.251.12:443 img-s-msn-com.akamaized.net tcp
US 8.8.8.8:53 srtb.msn.com udp
NL 23.62.61.160:443 www.bing.com udp
US 8.8.8.8:53 252.15.104.51.in-addr.arpa udp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 151.101.2.49:443 bazaar.abuse.ch tcp
US 8.8.8.8:53 postnav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 postnav-edge.smartscreen.microsoft.com udp
GB 51.11.108.188:443 postnav-edge.smartscreen.microsoft.com tcp
GB 51.11.108.188:443 postnav-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 188.108.11.51.in-addr.arpa udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
GB 172.165.61.93:443 nav-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 bazaar.abuse.ch udp
NL 23.62.61.97:443 www.bing.com udp
GB 172.165.61.93:443 nav-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 bazaar.abuse.ch udp
DE 185.172.128.33:8970 tcp
US 151.101.2.49:443 bazaar.abuse.ch tcp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 bazaar.abuse.ch udp
US 8.8.8.8:53 edge.microsoft.com udp
US 204.79.197.239:443 edge.microsoft.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 172.67.9.68:443 shield.reasonsecurity.com tcp
US 172.67.9.68:443 shield.reasonsecurity.com tcp
DE 185.172.128.33:8970 tcp
US 8.8.8.8:53 update.reasonsecurity.com udp
GB 18.154.84.124:443 update.reasonsecurity.com tcp
US 8.8.8.8:53 track.analytics-data.io udp
US 107.22.175.110:443 track.analytics-data.io tcp
N/A 127.0.0.1:4577 tcp
GB 18.154.84.124:443 update.reasonsecurity.com tcp
N/A 127.0.0.1:65478 tcp
N/A 127.0.0.1:4577 tcp
DE 185.172.128.33:8970 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:4577 tcp
N/A 127.0.0.1:49594 tcp
DE 185.172.128.33:8970 tcp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 ntp.msn.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 edge.microsoft.com udp
US 8.8.8.8:53 business.bing.com udp
US 13.107.6.158:443 business.bing.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 204.79.197.239:443 edge.microsoft.com tcp
US 8.8.8.8:53 bzib.nelreports.net udp
NL 96.16.53.149:443 bzib.nelreports.net tcp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 img-s-msn-com.akamaized.net udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 c.msn.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 20.42.73.31:443 browser.events.data.msn.com tcp
NL 23.62.61.99:443 www.bing.com tcp
US 204.79.197.237:443 c.bing.com tcp
IE 68.219.88.97:443 c.msn.com tcp
US 8.8.8.8:53 assets.msn.com udp
US 8.8.8.8:53 assets.msn.com udp
US 20.42.73.31:443 browser.events.data.msn.com tcp
NL 95.100.96.8:443 assets.msn.com tcp
NL 95.100.96.8:443 assets.msn.com tcp
NL 23.62.61.75:443 www.bing.com tcp
GB 108.156.39.64:443 sb.scorecardresearch.com tcp
US 2.17.251.12:443 img-s-msn-com.akamaized.net tcp
NL 23.62.61.97:443 www.bing.com tcp
US 8.8.8.8:53 31.73.42.20.in-addr.arpa udp
NL 23.62.61.97:443 www.bing.com tcp
NL 23.62.61.75:443 www.bing.com udp
NL 23.62.61.75:443 www.bing.com tcp
NL 23.62.61.99:443 www.bing.com tcp
US 8.8.8.8:53 srtb.msn.com udp
US 8.8.8.8:53 srtb.msn.com udp
NL 23.62.61.99:443 www.bing.com tcp
US 8.8.8.8:53 8.96.100.95.in-addr.arpa udp
NL 95.100.96.8:443 assets.msn.com tcp
NL 95.100.96.8:443 assets.msn.com tcp
NL 23.62.61.99:443 www.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.msftstatic.com udp
NL 23.62.61.99:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
US 20.42.73.31:443 browser.events.data.msn.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
US 20.42.73.31:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
NL 185.89.211.116:443 ams3-ib.adnxs.com tcp
NL 185.89.211.116:443 ams3-ib.adnxs.com tcp
IE 68.219.88.97:443 c.msn.com tcp
US 204.79.197.237:443 c.bing.com tcp
GB 108.156.39.64:443 sb.scorecardresearch.com tcp
US 2.17.251.12:443 img-s-msn-com.akamaized.net tcp
NL 23.62.61.97:443 r.bing.com udp
NL 95.100.96.8:443 assets.msn.com tcp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
US 204.79.197.219:443 r.msftstatic.com tcp
US 20.42.73.31:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 fra1-ib.adnxs.com udp
US 8.8.8.8:53 fra1-ib.adnxs.com udp
DE 37.252.171.149:443 fra1-ib.adnxs.com tcp
US 8.8.8.8:53 149.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 cdn.reasonsecurity.com udp
GB 99.84.9.78:443 cdn.reasonsecurity.com tcp
US 107.22.175.110:443 track.analytics-data.io tcp
N/A 127.0.0.1:4577 tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
DE 185.172.128.33:8970 tcp
US 8.8.8.8:53 track.analytics-data.io udp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
GB 99.86.114.92:443 logziop.reasonsecurity.com tcp
US 8.8.8.8:53 92.114.86.99.in-addr.arpa udp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp
US 107.22.175.110:443 track.analytics-data.io tcp

Files

C:\Users\Admin\AppData\Local\Temp\crashpad_roblox\settings.dat

MD5 0fa4b9044c469414e5b0bd60eccd7fb6
SHA1 fb0b24dbc8647f4586c2606343d0d9c09b71a677
SHA256 d086946a3feb6b0c5b62540d9e135d68ca07dce81f4bf4c4b31f63875e9e8a97
SHA512 99d641ba203a5ca68e1b915b6aad621d6303bfea0d9c2f4610804b253aa3541eac98978d6905f9e7c3c78c525ac294e43d839aac418002af30c135ce4169abc1

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\2IX84YPE\PCClientBootstrapper[1].json

MD5 d00d41647ae523afe66aede26614b9e6
SHA1 5f12131f85c225666b4158fe179aa5e4d8ba8e76
SHA256 90c4b0b14a47f68e24b87c9b102f0142b2eee737ccd7b8c5a64733d6475647ba
SHA512 0a1019d35c0a28d9891c04787fac1a924bc65396fd2942917baa040b9f6f2cd61a9ff25171404406516e1e09fe130be44a777ec7fc5209f86769355644be5902

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

MD5 a26045c60badc3ea12344117b7bc4403
SHA1 e042d0cb3844ca44869d5e01a2e427144b458556
SHA256 69872c2a3c0bdca24598431943ea06f46d2a28bee615698ae09ba335b1cfa925
SHA512 7b0e7562480066d929e4dce2201ced8be9e7d309d28ada04d7779a9ab232ee4bf5a8ba89317865eb382250f8f529c0c0b95d8eb80cff800e595280f2f395d7bb

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

MD5 db225070d364cb79d63c82797c70f346
SHA1 496e703e2c4c45c662a22be4c38f9a7002d0dbad
SHA256 a876e20c614b6ab5be77e5175309cf8098450285d5ebf321ddb4999263a9fffe
SHA512 3e51ab25dcd48fd7a875b2b556ab90852c913e26e526013efb0240ea0b09ebe46d3de12ecc01fe79f8b481905fd0ea106e3d6ec37c84ac315b32d3e320ab7ee7

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_BACC6CD2B29F18349081C9FD2343833B

MD5 194ed61537032c4b07d54342829fff87
SHA1 5f8647ac3c9f5930a5ce33d804992ba2f5e6d882
SHA256 bf64d48c901fb3e87cc6cdccc3a03420ba207309fa76efe47ac65f81adf313a1
SHA512 61ff7aad065d0632955a40922ea2c83dc9ef29ec63a203ee87eefb92931375a069ec7d259baf840b7ed30f49b544feeeae7cb2cd4bb07bf68dd9759d742656ab

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_BACC6CD2B29F18349081C9FD2343833B

MD5 dc6292626ebae9261042d46d8e4c9e2a
SHA1 e9aa857681418344e17a2fa4a78aaaa457917eae
SHA256 435bbe0c8350272bb4f7b66c78944f09c5a84fab1c559c2d5814bc06b96417dc
SHA512 5422630d7cc3b044583eb5a7f4353fd7e2c2d8d46a2e093caa3e2e41150a9ec73a348cb9241422d1e90eac9b836632b222266c3285fe38fbdb96335995967901

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\D5DFSS0T\BatchIncrement[1].json

MD5 bedbf7d7d69748886e9b48f45c75fbbe
SHA1 aa0789d89bfbd44ca1bffe83851af95b6afb012c
SHA256 b4a55cfd050f4a62b1c4831ca0ab6ffadde1fe1c3f583917eade12f8c6726f61
SHA512 7dde268af9a2c678be8ec818ea4f12619ecc010cba39b4998d833602b42de505d36371393f33709c2eca788bc8c93634a4fd6bec29452098dbb2317f4c8847f6

C:\Users\Admin\AppData\Local\Temp\RBX-CD3A33AD\RobloxPlayerLauncher.exe

MD5 84ebaa7c95efeca73a5c0f2deab6a455
SHA1 c072da28301354bb4c94f14bb7a70f48552a7f7e
SHA256 c626055a1bde4c4a28ded2d8830f8060633cae35b224903ade01c7227d74ff11
SHA512 500c7aa69d1b81f23c85f1f5d289958910954937d132179a71b5d0fb17d5bed64a3bc0c2c2bdfbcd739b5a290ae2fc5fe0c7ee2b91597450eddcbf92744edbdc

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_BACC6CD2B29F18349081C9FD2343833B

MD5 836632ed250ff475e6406959df1c1ee2
SHA1 1abdeae747e75f7c9d3c85add1ea521754be47b1
SHA256 d8821d17ba17b9884bb107bb29aef1d5d5036859cd5005ef1e7cff30e395b632
SHA512 116b1773c9a59648277d7fa4f8d8a170ad9ab391382ce9f901b7359e93288ac0a2aacca26e325628863768653fe23d7ca23f0d092c24de40ee28f5474de6a5dc

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

MD5 97c5e7651dc2a52235d277bb0681d94b
SHA1 b9876c20fbea293e3a868ac1e27c2bb001381ea5
SHA256 cebacc3b2b73bf374d0ce58614fb64b920b88d610608b47ad0e2d92275e28132
SHA512 97aa1e26373d7f957a0d76938ad666359dd74821ab2636da4b79ea6e59226ad9b29ede34023831b69c7bed312ace161612471f0b291d07f2d052b1628ce7c596

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\VLW1SL5J\WindowsPlayer[1].json

MD5 47fdcd015cc921ad16be93557700fa54
SHA1 aec51d6e7432c8a056603793b0f8ef1a065052cf
SHA256 54702e7c60dbd8f81ab48d22509c9029df209ace9ea65eb8b8074e65d02b3e7a
SHA512 d7cf7f720d3cc3e80634a016e9100cacc7948788a2bcd82fb66f067a08944b2b66dbf1de61dbbb96438bead4fdcd77664057fc6c64cc4d7848d85869e6ea1d02

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\D5DFSS0T\version-5e534e6db34e447e-rbxPkgManifest[1].txt

MD5 6eb3fbaee1016d3b6991b0080ad9a26d
SHA1 6c20d96eb53c3506c54719ea5a065a4a103dfe38
SHA256 b15308fc266caf21c4136358ee249e69a529365787133c625ff6bb7cf1d3cc57
SHA512 8e8bdfedd81f5daadd368f795f4266c09f7ba5a1f1f0531cc865bca6e0fca0ca49a386dabeed4553f634777404f1c84e4a9abaa6624f804fdb25d5fd50e95053

C:\Program Files (x86)\Roblox\Versions\RobloxStudioLauncherBeta.exe

MD5 fdee8211f69dce1343ca0dbd2a8ed61e
SHA1 4b255d87aeb3ccb381208631edc77ab97c8825d6
SHA256 2bbcf80c909a561a790584f25219afa8e3f4b7f2ed57b4de453185f1f267dfb9
SHA512 fecd0fc36e622744f7aa8035d8f1cfa98dda119745e3407a6f62483a891274f78cf8e48b4576c0954c16d63a1d23bf998784f1d7db23091e0ef309efd0273f90

C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\RobloxPlayerInstaller.exe

MD5 5760bad46664c1c9079d37bdbc4bbbad
SHA1 a67cf6f0c1a164940c1562be1f066e85415dfe32
SHA256 70be452d5ca4dfaeec5fd02652dc8c4d3c76ac329148c2bbf358ae8c829d4d73
SHA512 b75c8095cc7f9d092edaf32b51bcd5c4ce98315d73a4f8f244a0cc42edf091509a17db02bf7e8fe81a0975b0b008e2b6c44cdbcc48ac7d0dacf02514f353d2f7

C:\Program Files (x86)\Roblox\Versions\version-5e534e6db34e447e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MD5 610b1b60dc8729bad759c92f82ee2804
SHA1 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552
SHA256 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08
SHA512 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdate.exe

MD5 4dc57ab56e37cd05e81f0d8aaafc5179
SHA1 494a90728d7680f979b0ad87f09b5b58f16d1cd5
SHA256 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718
SHA512 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdate.dll

MD5 965b3af7886e7bf6584488658c050ca2
SHA1 72daabdde7cd500c483d0eeecb1bd19708f8e4a5
SHA256 d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19
SHA512 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_en.dll

MD5 4a1e3cf488e998ef4d22ac25ccc520a5
SHA1 dc568a6e3c9465474ef0d761581c733b3371b1cd
SHA256 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011
SHA512 ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\EdgeUpdate.dat

MD5 369bbc37cff290adb8963dc5e518b9b8
SHA1 de0ef569f7ef55032e4b18d3a03542cc2bbac191
SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
SHA512 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\NOTICE.TXT

MD5 6dd5bf0743f2366a0bdd37e302783bcd
SHA1 e5ff6e044c40c02b1fc78304804fe1f993fed2e6
SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
SHA512 f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeComRegisterShellARM64.exe

MD5 7a160c6016922713345454265807f08d
SHA1 e36ee184edd449252eb2dfd3016d5b0d2edad3c6
SHA256 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9
SHA512 c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe

MD5 60dba9b06b56e58f5aea1a4149c743d2
SHA1 a7e456acf64dd99ca30259cf45b88cf2515a69b3
SHA256 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112
SHA512 e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\MicrosoftEdgeUpdateCore.exe

MD5 c044dcfa4d518df8fc9d4a161d49cece
SHA1 91bd4e933b22c010454fd6d3e3b042ab6e8b2149
SHA256 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2
SHA512 f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_af.dll

MD5 567aec2d42d02675eb515bbd852be7db
SHA1 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37
SHA256 a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c
SHA512 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_am.dll

MD5 f6c1324070b6c4e2a8f8921652bfbdfa
SHA1 988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf
SHA256 986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717
SHA512 63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_ar.dll

MD5 570efe7aa117a1f98c7a682f8112cb6d
SHA1 536e7c49e24e9aa068a021a8f258e3e4e69fa64f
SHA256 e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01
SHA512 5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_bn.dll

MD5 7dc58c4e27eaf84ae9984cff2cc16235
SHA1 3f53499ddc487658932a8c2bcf562ba32afd3bda
SHA256 e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98
SHA512 bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_bs.dll

MD5 e338dccaa43962697db9f67e0265a3fc
SHA1 4c6c327efc12d21c4299df7b97bf2c45840e0d83
SHA256 99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04
SHA512 e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_ca.dll

MD5 39551d8d284c108a17dc5f74a7084bb5
SHA1 6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884
SHA256 8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07
SHA512 6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_bn-IN.dll

MD5 a94cf5e8b1708a43393263a33e739edd
SHA1 1068868bdc271a52aaae6f749028ed3170b09cce
SHA256 5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c
SHA512 920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_bg.dll

MD5 8375b1b756b2a74a12def575351e6bbd
SHA1 802ec096425dc1cab723d4cf2fd1a868315d3727
SHA256 a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105
SHA512 aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_as.dll

MD5 a8d3210e34bf6f63a35590245c16bc1b
SHA1 f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693
SHA256 3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766
SHA512 6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_az.dll

MD5 7937c407ebe21170daf0975779f1aa49
SHA1 4c2a40e76209abd2492dfaaf65ef24de72291346
SHA256 5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9
SHA512 8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_cy.dll

MD5 34d991980016595b803d212dc356d765
SHA1 e3a35df6488c3463c2a7adf89029e1dd8308f816
SHA256 252b6f9bf5a9cb59ad1c072e289cc9695c0040b363d4bfbcc9618a12df77d18e
SHA512 8a6cbcf812af37e3ead789fbec6cba9c4e1829dbeea6200f0abbdae15efd1eda38c3a2576e819d95ed2df0aafd2370480daa24a3fe6aeb8081a936d5e1f8d8ed

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_cs.dll

MD5 16c84ad1222284f40968a851f541d6bb
SHA1 bc26d50e15ccaed6a5fbe801943117269b3b8e6b
SHA256 e0f0026ddcbeafc6c991da6ba7c52927d050f928dba4a7153552efcea893a35b
SHA512 d3018619469ed25d84713bd6b6515c9a27528810765ed41741ac92caf0a3f72345c465a5bda825041df69e1264aada322b62e10c7ed20b3d1bcde82c7e146b7e

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_ca-Es-VALENCIA.dll

MD5 2929e8d496d95739f207b9f59b13f925
SHA1 7c1c574194d9e31ca91e2a21a5c671e5e95c734c
SHA256 2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df
SHA512 ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_iw.dll

MD5 45e971cdc476b8ea951613dbd96e8943
SHA1 8d87b4edfce31dfa4eebdcc319268e81c1e01356
SHA256 fd5ba39c8b319c6ba2febf896c6947a0a7bae6aa0b4957bd124d55589f41849d
SHA512 f1c9fccf742fa450be249dbbf7e551a426c050ae4af3d2e909f9750068a2bdc801f618eb77a6a82d13421d27949c9f2a9681a44bcb410ccdeec66b24a70f6a9a

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_it.dll

MD5 497ca0a8950ae5c8c31c46eb91819f58
SHA1 01e7e61c04de64d2df73322c22208a87d6331fc8
SHA256 abe2360a585b6671ec3a69d14077b43ae8f9e92b6077b80a147dfe36792bb1b7
SHA512 070398af980f193ff90b4afaecb3822534ef3171eca7228bce395af11ca38364bc47cab7df1e71187ef291f90978bdc37a8611d2992b1800cd1de6aa7fda09d9

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_is.dll

MD5 5664c7a059ceb096d4cdaae6e2b96b8f
SHA1 bf0095cd7470bf4d7c9566ba0fd3b75c8b9e57ec
SHA256 a3a2947064267d17474c168d3189b0d372e36e53bf0efb9c228d314fc802d98e
SHA512 015dcb17b297a0aaad41c7b0b2199187e435855fd3977d16402be774622cc4f6b55d04ba9159a89e26e350c5602928c76dd9386be3974437b41888a0cfdddfa8

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_id.dll

MD5 03d4c35b188204f62fc1c46320e80802
SHA1 07efb737c8b072f71b3892b807df8c895b20868c
SHA256 192585d7f4a8a0cd95e338863c14233cdd8150f9f6f7dd8a405da0670110ee95
SHA512 7e67ea953ea58ff43e049ce519ae077eec631325604896479526627d688f2fa3bfc855a55ac23a76b1c9ef8cd75274265b8238423b95a2437be7250db0db31b1

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_hu.dll

MD5 f4976c580ba37fc9079693ebf5234fea
SHA1 7326d2aa8f6109084728323d44a7fb975fc1ed3f
SHA256 b16755fdbcc796ef4eb937759fe2c3518c694f5d186970d55a5a5e5d906cb791
SHA512 e43636d8c947e981258e649712ad43f37c1aab01916539b93c082959fb5c6764c9c44979650092202839e812e6f252c6c3eaf66d3d195c1efd39c74c81ad1981

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_hr.dll

MD5 0b475965c311203bf3a592be2f5d5e00
SHA1 b5ff1957c0903a93737666dee0920b1043ddaf70
SHA256 65915ad11b9457d145795a1e8d151f898ec2dcb8b136967e6592884699867eb0
SHA512 bec513125f272c24477b9ddbaa5706d1e1bb958babac46829b28df99fa1dd82f3f1e3c7066dc2fe3e59118c536675a22fc2128de916ca4c478950b9992372007

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_hi.dll

MD5 34cbaeb5ec7984362a3dabe5c14a08ec
SHA1 d88ec7ac1997b7355e81226444ec4740b69670d7
SHA256 024c5eae16e45abe2237c2a5d868563550ac596f1f7d777e25234c17d9461dd9
SHA512 008c8443a3e93c4643a9e8735a1c59c24ba2f7a789606a86da54c921c34cbc0cb11c88594544d8509a8e71b6a287c043b1ffe2d39b90af53b4cde3847d891ba8

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_gu.dll

MD5 f9646357cf6ce93d7ba9cfb3fa362928
SHA1 a072cc350ea8ea6d8a01af335691057132b04025
SHA256 838ccd8243caa1a5d9e72eb1179ac8ae59d2acb453ed86be01e0722a8e917150
SHA512 654c4a5200f20411c56c59dbb30a63bfe2da27781c081e2049b31f0371a31d679e3c9378c7eb9cf0fb9166a3f0fba33a58c3268193119b06f91bebe164a82528

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_gl.dll

MD5 84a1cea9a31be831155aa1e12518e446
SHA1 670f4edd4dc8df97af8925f56241375757afb3da
SHA256 e4eb716f1041160fd323b0f229b88851e153025d5d79f49b7d6ecb7eb2442c57
SHA512 5f1318119102fcee1c828565737ce914493ff86e2a18a94f5ff2b6b394d584ace75c37258d589cce1d5afd8e37d617168a7d7372cfd68dd6a2afcd4577a0bc51

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_gd.dll

MD5 c90f33303c5bd706776e90c12aefabee
SHA1 1965550fe34b68ea37a24c8708eef1a0d561fb11
SHA256 e3acc61d06942408369c85365ac0d731c5f3c9bc26e3f1e3bb24226d0879ad9c
SHA512 b0c1a9d7df57d68e5daf527703f0b6154a2ef72af1a3933bda2804408f6684b5b09b822522193243fd0756f80f13d3ab0647c90d2bed1a57b4a9fea933b0aa9a

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_ga.dll

MD5 3b8a5301c4cf21b439953c97bd3c441c
SHA1 8a7b48bb3d75279de5f5eb88b5a83437c9a2014a
SHA256 abc9822ee193c9a98a21202648a48ecd69b0cb19ff31c9bbf0c79dab5f9609b0
SHA512 068166cfdf879caf4e54fe43c5265a692fcaf6a9dcbf151335fd054bbec06260bc5ed489de6d46ca3fc0044bc61fa1468fea85373c6c66349620618ee869383a

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_fr-CA.dll

MD5 b534e068001e8729faf212ad3c0da16c
SHA1 999fa33c5ea856d305cc359c18ea8e994a83f7a9
SHA256 445051ef15c6c872bed6d904169793837e41029a8578eaf81d78a4641ef53511
SHA512 e937d2e0f43ade3f4a5e9cdeb6dd8c8ad8b5b50a7b6b779bda727a4fe1ced93abd06720395cc69a274ce3b0f7c6b65e1eba1ecf069db64edb80d007fbb4eedbb

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_fr.dll

MD5 64c47a66830992f0bdfd05036a290498
SHA1 88b1b8faa511ee9f4a0e944a0289db48a8680640
SHA256 a9b72fcb3bdb5e021b8d23b2de0caeca80ddc50420088b988a5b7503f2d7c961
SHA512 426546310c12aeb80d56e6b40973a5f4dffef72e14d1ac79e3f267e4df2a0022b89e08bba8ab2ffa24f90b0c035a009bed3066201e30fe961d84ed854e48f9c5

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_fil.dll

MD5 7c66526dc65de144f3444556c3dba7b8
SHA1 6721a1f45ac779e82eecc9a584bcf4bcee365940
SHA256 e622823096fc656f63d5a7bbdf3744745ef389c92ec1b804d3b874578e18c89d
SHA512 dbc803c593ae0b18fd989fdc5e9e6aee8f16b893ae8d17e9d88436e2cd8cae23d06e32e4c8a8bf67fc5311b6f2a184c4e6795fed6d15b3d766ef5affc8923e2f

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_fi.dll

MD5 d45f2d476ed78fa3e30f16e11c1c61ea
SHA1 8c8c5d5f77cd8764c4ca0c389daee89e658dfd5e
SHA256 acf42b90190110ccf30bcfb2626dd999a14e42a72a3983928cba98d44f0a72e2
SHA512 2a876e0313a03e75b837d43e9c5bb10fcec385fbb0638faa984ee4bb68b485b04d14c59cd4ed561aaa7f746975e459954e276e73fc3f5f4605ae7f333ce85f1b

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_fa.dll

MD5 cbe3454843ce2f36201460e316af1404
SHA1 0883394c28cb60be8276cb690496318fcabea424
SHA256 c66c4024847d353e9985eb9b2f060b2d84f12cc77fb6479df5ffc55dbda97e59
SHA512 f39e660f3bfab288871d3ec40135c16d31c6eb1a84136e065b54ff306f6f8016a788c713d4d8e46ad62e459f9073d2307a6ed650919b2dd00577bbfd04e5bd73

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_eu.dll

MD5 a7e1f4f482522a647311735699bec186
SHA1 3b4b4b6e6a5e0c1981c62b6b33a0ca78f82b7bbd
SHA256 e5615c838a71b533b26d308509954907bcc0eb4032cdbaa3db621eede5e6bfa4
SHA512 22131600bbac8d9c2dab358e244ec85315a1aaebfc0fb62aaa1493c418c8832c3a6fbf24a6f8cf4704fdc4bc10a66c88839a719116b4a3d85264b7ad93c54d57

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_et.dll

MD5 b78cba3088ecdc571412955742ea560b
SHA1 bc04cf9014cec5b9f240235b5ff0f29dbdb22926
SHA256 f0a4cfd96c85f2d98a3c9ecfadd41c0c139fdb20470c8004f4c112dd3d69e085
SHA512 04c8ab8e62017df63e411a49fb6218c341672f348cb9950b1f0d2b2a48016036f395b4568da70989f038e8e28efea65ddd284dfd490e93b6731d9e3e0e0813cf

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_es-419.dll

MD5 28fefc59008ef0325682a0611f8dba70
SHA1 f528803c731c11d8d92c5660cb4125c26bb75265
SHA256 55a69ce2d6fc4109d16172ba6d9edb59dbadbc8af6746cc71dc4045aa549022d
SHA512 2ec71244303beac7d5ce0905001fe5b0fb996ad1d1c35e63eecd4d9b87751f0633a281554b3f0aa02ee44b8ceaad85a671ef6c34589055797912324e48cc23ed

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_es.dll

MD5 9db7f66f9dc417ebba021bc45af5d34b
SHA1 6815318b05019f521d65f6046cf340ad88e40971
SHA256 e652159a75cbab76217ecbb4340020f277175838b316b32cf71e18d83da4a819
SHA512 943d8fc0d308c5ccd5ab068fc10e799b92465a22841ce700c636e7ae1c12995d99c0a93ab85c1ae27fefce869eabadbeafee0f2f5f010ad3b35fa4f748b54952

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_en-GB.dll

MD5 d749e093f263244d276b6ffcf4ef4b42
SHA1 69f024c769632cdbb019943552bac5281d4cbe05
SHA256 fd90699e7f29b6028a2e8e6f3ae82d26cdc6942bd39c4f07b221d87c5dbbfe1e
SHA512 48d51b006ce0cd903154fa03d17e76591db739c4bfb64243725d21d4aa17db57a852077be00b9a51815d09664d18f9e6ad61d9bc41b3d013ed24aaec8f477ad9

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_el.dll

MD5 ac275b6e825c3bd87d96b52eac36c0f6
SHA1 29e537d81f5d997285b62cd2efea088c3284d18f
SHA256 223d2db0bc2cc82bda04a0a2cd2b7f6cb589e2fa5c0471a2d5eb04d2ffcfcfa0
SHA512 bba581412c4297c4daf245550a2656cdc2923f77158b171e0eacf6e933c174eac84580864813cf6d75d73d1a58e0caf46170aee3cee9d84dc468379252b16679

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_de.dll

MD5 aab01f0d7bdc51b190f27ce58701c1da
SHA1 1a21aabab0875651efd974100a81cda52c462997
SHA256 061a7cdaff9867ddb0bd3de2c0760d6919d8d2ca7c7f889ec2d32265d7e7a75c
SHA512 5edbda45205b61ac48ea6e874411bb1031989001539650de6e424528f72ec8071bd709c037c956450bb0558ee37d026c26fdb966efceb990ed1219f135b09e6e

C:\Program Files (x86)\Microsoft\Temp\EUB3DF.tmp\msedgeupdateres_da.dll

MD5 d34380d302b16eab40d5b63cfb4ed0fe
SHA1 1d3047119e353a55dc215666f2b7b69f0ede775b
SHA256 fd98159338d1f3b03814af31440d37d15ab183c1a230e6261fbb90e402f85d5f
SHA512 45ce58f4343755e392037a9c6fc301ad9392e280a72b9d4b6d328866fe26877b2988c39e05c4e7f1d5b046c0864714b897d35285e222fd668f0d71b7b10e6538

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

MD5 85d06a8a7ce1b9b486ca5d966f63eebb
SHA1 e163788dca7e480a17990cd63413c1169c477ea4
SHA256 4f6e5f6eaf996ea3c9de6a634c4f07ce2d9b08b47e0f47b3f9d3e7577e91df00
SHA512 8db580fe3c679cd4bd0e7ffbce9e0f48a677698a880e4e23f55a4d5e4583f3ec924abf96fada49ee8f4fbe9ba26e9a200a0e6037ac50ac39853c0728b418a33a

memory/5088-382-0x0000000000820000-0x0000000000855000-memory.dmp

memory/5088-383-0x0000000072FB0000-0x00000000731C0000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 439b5e04ca18c7fb02cf406e6eb24167
SHA1 e0c5bb6216903934726e3570b7d63295b9d28987
SHA256 247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654
SHA512 d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 a8e767fd33edd97d306efb6905f93252
SHA1 a6f80ace2b57599f64b0ae3c7381f34e9456f9d3
SHA256 c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb
SHA512 07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e3d9e6edc626e72fd7a4fd66bb0b3864
SHA1 291ed464fc65f0cb1d224ab4b9792d97a85e67d3
SHA256 c4d05da5d08021d703e38272ff719bb18203443161a3209feb92d84374058969
SHA512 b22668a46d176315106ef2863a47dfb41f47a37867b3af699bb36b9d9094805a48a762d75d84c66ba3debde753af74a34949e5eb406d81da794bfb4f05591e40

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 e654edf99e0cbf35ee0b372f8c0e3f74
SHA1 c2a612eff0a10a2c09769125065113ba5d0891bf
SHA256 12ee6442691cabb27f7e8cb68625989042767cd71bb00c466fd5a6270dbeb931
SHA512 e572c04791e304beba57527df29caa3aa06d924f3e9cb9c8e3d64ea58aaf2544cb3fcaac372ced3553209f2ea8fd13ab1c451f789860b36c74c475187a60d5e6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5c2c6d7763da75a9e24d3c1136a97521
SHA1 982f44f65c87724181b7a8d38fc0b45acc5cba4f
SHA256 9a66c371b150dcc6535c55f657e439b8f7960b3f656fea09c574c22932f96301
SHA512 4fe90a8e31a1fa7200f93d2b18d9ac8fb18d34dfe6d221be7e5f3cb24df4f20383bccd4f2165f7e295c5280e16e30ebc96f5b3468cbc7ae1694c1b9a781ec5c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

MD5 585ac11a4e8628c13c32de68f89f98d6
SHA1 bcea01f9deb8d6711088cb5c344ebd57997839db
SHA256 d692f27c385520c3b4078c35d78cdf154c424d09421dece6de73708659c7e2a6
SHA512 76d2ed3f41df567fe4d04060d9871684244764fc59b81cd574a521bb013a6d61955a6aedf390a1701e3bfc24f82d92fd062ca9e461086f762a3087c142211c19

memory/5088-606-0x0000000072FB0000-0x00000000731C0000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 554eb3edae640c075ad0d8acc98fdcee
SHA1 d8ac8592c981a594dd61b5c6da60722f624b6e23
SHA256 8c2f50dab0f6b9503e87ac273066cba05c5c3e53a52db40dfbce00a62d994a7b
SHA512 c009f818415855b74de3d5c764351f40151e156e47d214f08af2f690eece9c3a0eedf0f914027135598ea09c3472bfbefe2f0983f5fa29dfed7500a2393423ad

C:\Program Files\MsEdgeCrashpad\settings.dat

MD5 eb2daf6d1c0619ef9803d66483db3eb0
SHA1 e52e93c51c92d261e2d4878e9f8cb6ac7eec8a2e
SHA256 86bbd10aa5514bdf1d5b3e82f33c2646f251122b7a0d9f8267f9d5f9c01b1bf4
SHA512 2448bb2b92ec808b4de2ae6bf22fd9630616e569d8fb3255088d9684d847ec2128ffdb44991d737c6a59a1d85b94f83f73b86bff81527fcbcf131c102414558e

C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.97\Installer\setup.exe

MD5 7171f56da52529073c2bda6dad0fdcfa
SHA1 f29fb1d1182e46895bb3ccc38e05220087e92e93
SHA256 32c87af491ca80fc5c5594aa995669161b466957d7b444f3c388ece97b730aee
SHA512 8c81a87f1f77cbed95eff3986d14d7c05b919cdaeabfba0a1335331adadc1e97495332cb6d3969242a9d19f48aa9eb890f22b81f504af615ea5ff64b27c13c73

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5716510a3c10286c0d95e3ca8a4442fe
SHA1 0bc3c05837b52d63818d52c9cfe1d0326837cce1
SHA256 31912ee5b1edb7ebc055720bfdfa50795d46a68d65e8ae1af1ef7390cd7ecd27
SHA512 f008087231a50939e8d130dc01098b7d3fb4e3d7ef4851c84237128637ca91820b5d9ecffc26533b0fb2fb010b9b7abd29e0d5517bfbb071faccfc7b0216651a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe589d06.TMP

MD5 29f189a06d8dbb830ea702d480e1fe62
SHA1 9ce2efa5afe1434bd93d0563e0c2412977fa1ae2
SHA256 748598c125e5bcbe597a022e3741f8d1d472c17dee31f6db647add14d0214b61
SHA512 33efa8a681e0f6ea4282139984470886d7df4046af7c9e176a7452f2f8af5100262aca22f3f4eafc2f602445d24f3e5aadbc69f364265724e14c2b9ac1685658

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1761faeba7b88e9808137619804be4ce
SHA1 7562e3cc5948af973b97e6c6108ab5e3800d0c63
SHA256 2bdc6452a8a41f9672b61127f0dcc2eb3ba38d3c5ed89674f8d8bb5ee7fc5964
SHA512 aa9ad7662543e373f6d577709d1f60529c66ef66b25724e913001013521ce66161895ba0eba14e8ad8b76edd089091d66cad4f14e3214c546bb0879694197341

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 3b5537dce96f57098998e410b0202920
SHA1 7732b57e4e3bbc122d63f67078efa7cf5f975448
SHA256 a1c54426705d6cef00e0ae98f5ad1615735a31a4e200c3a5835b44266a4a3f88
SHA512 c038c334db3a467a710c624704eb5884fd40314cd57bd2fd154806a59c0be954c414727628d50e41cdfd86f5334ceefcf1363d641b2681c1137651cbbb4fd55d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

MD5 a65ecf7ff96b372459e2e0bcb1ec3613
SHA1 436df866225b1ffd45666579908ddc8b83f184c6
SHA256 40aff49d184a907b47aa3d0a7fe4ceaced1a2ce158fb9e4b3f39a67932847dec
SHA512 853490892d3112ceb3c4e8e538258ec315c40818e90e80da758fec2fc86a6b3dec28623b802af667b94bff9e587dfeb637f91cc97b6b410c8c897d2ffad1c628

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c876f96de84012f796b0d84bc3dfcd11
SHA1 b56d11a7e4276e95e0244fefc0910007b8959703
SHA256 0e183207bdd04931960f6f2f3258a4343285e11d5461146f42ca874d38a08b5d
SHA512 f0978e005920ef56b417fdd3adb4b5b4f8d4dc1db3d435709544428a43397a5e748ef47579fc1777d6a3465a5d19723308452975cfcb3f7f639a6713f95eafcd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 66e12a9dffae774bf2a3058dac8c5327
SHA1 9aea8bcd5cc74a83f54d5fa0e30e71ada0e42302
SHA256 ac2a1596d53466179669656e11839ceb219f520503d0d84c6f6fbaf245c28f6c
SHA512 634378d2630c4d1c17b9bfd1951e13d1f41266d4d7f440b91038db271d501ef5c94891b13bc2e29483e93081321eb4710cfc99f939fe01e5798064e0f463edb1

C:\Users\Admin\Downloads\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.zip

MD5 3efad2b9aa26c79a459d42aa9a1f6700
SHA1 918375ad488a446ff41c01beff95ade8e2270c0c
SHA256 65e5e3734278851e1a014050c720ad104c4f5c79634da72a6f81f9cd85e2bc63
SHA512 66fd7fefd2d823332fb70c383c7c8f7826518798716824535b6675a8feb863ecca8087aa2e8777f82944ec1e2533aa17be5f923d390c9002f05ebc2b86cc42b6

memory/5088-792-0x0000000000820000-0x0000000000855000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c278bc5b242888741b20c1c174786ab9
SHA1 674efd6bbcaded796ada57401c47d8c1a95356f0
SHA256 c1bf68e8f864147ab0dd0f4dc0ebe1146f8c004a8bfad76d0e64dfd62dacddd6
SHA512 1d2131fd10c1019eef602e59c9676d76dcbd894cd196dcec45bc3672a60312b8d67ff07fd9a1bc1b2185ad0eb01b3ab8c34bda993e0ee10c5cfff797167c7ae1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 56d7b8516b7a873d604955be5c1248c0
SHA1 435a7c8504a4bf2172a543e756822e26902b096b
SHA256 73d3ac75571fae9262dfc1dfab658e22ff8e29604509f9721425fee3a7573ee3
SHA512 3c1dbf31c359f314000e3f3b4e1dd51f0ff106570e0d8ac5bf5949e456ef072823775271d972d20c510b97c289cb9e132dc487ead4ce2b76f9067af6736d5265

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 1af5daebae206f822e122ea6c041624a
SHA1 a6d18a04599952ed10a40b2095dae48fdcc5cdca
SHA256 6cfbb50692b57c34ad4fb3bfbf5593715830cadcdbe5411fe6918c18c1b6c5ca
SHA512 1b1e62aef42f5ca3f75ff0ade13569f747be90665d076fa54f5b2d81ba8474836ab51c553102235aa19591709cfc910a3353c6fb47c28297644bb9aad6b8133e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b161dbabe4d46cf8859e8e9b58b61bc8
SHA1 fcf93d0df18a371cf5327fecb1b7755da33a72ce
SHA256 cf45bbb76922d9a156b5b9ed60ed41f3e77339d68c3c26323595d00a16553a3e
SHA512 25db86784a16c41cf62a1885a10641e33a9d15f925439654f9b8f76caa7fa6c6348deaa0d5feb09f26a29f591650ea853ae8beb72bd2f92238dd422dfba53ae9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a910ad834210298343ab7f80a225afde
SHA1 58f4d6e64d0ab029be5fd80fa265e60777dce8da
SHA256 f16b99c4594d626ffc6d139c1b79315a08707ab2cbe5fe3f3adae7df5b4053f8
SHA512 92cfc54f05f5ddb92f2f4c187a18e35f44118cdb587809c61b4e22c183d453a15491621e0aaef5c968bf39ee64475030986daf3986f3bf88dbe345de787e2c7a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 6545403da9cca8394e1bb93d8d96b4bc
SHA1 f82ac894228e0f801367186c5961b212e14b0cbb
SHA256 cd6faefa67171c1dde5391bfd19fcde9d2ee2084bbce529a256ba3b6b7e4a539
SHA512 1dda57ce942173f992f682fa00d16023eb41d17950cd21bdfc3ffda1fb34b08221b116da44aa281bed33fbf3ad55d5229c388cfa095769665e878ad23eaf7ba2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\08d95242ebd53caf_0

MD5 baf08230181cb865db34e17a329d15cc
SHA1 ea391a0916e33c95f70dd7ccd8d4175c5030798a
SHA256 641c6adf250ba5bd8d325c946d08ed5e06234b002757a048c4678f7d3e86bcba
SHA512 eabf9a55ecfb5cab1647a9ec6f710f61c7067205b38e096ab4640a232e2d33811eeb4869d30e090fb070164c0091f33d2290549e678894b33b993e32337fa022

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\41a4ebffd069515d_0

MD5 9cf7c5609bc27e243c8b2a6333e2cbea
SHA1 16107bc66c3eea050971ece3647b8e8fb3a856d4
SHA256 3ea94c7b5e0b1b6ee573c748bd47ea8ae369acb93479367d3efda7adb4599c80
SHA512 b1f5f58a41598d41c330dbda8efedd1fe523e953b54fbc05259c637dd9b6c055a2904c13a5c721ffab08374b11987e895f9970aaf45cc23bcd87069e3d012023

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 05fed2a33e45b5ff357ed2f7e1a0fa13
SHA1 2aca572e6071cbe2061649d409368cf52cd34548
SHA256 3d192aac8d67bc8265ad939522964816e3c8b9047c75f148b126b81faac50a19
SHA512 3bec4be125d11d6230049f23b97e836c44313f476c0afb17818b39a13a632fcf57f1d6355a006933cec498422020758a3b7a14cd548a55b5d8409bf4d5f1deee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 dc3e144200ab104231d4c01dbed117bf
SHA1 ef380363b465702297b86c097739d995a4d6da76
SHA256 469a546f363259d4efdc3fb90ea5038558bc1fbdca3040daac50acc063934c26
SHA512 8337e3b1a782a6cb3ec0f8d388c3728d4a9de767810b84b03c33b4e452bf66a5d0798ebdb6bcd4568455eba3f1e3dab1569c7052c84b9249353afe476d5b95e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7fc1dba4a37d11961cababe42fab8e4b
SHA1 ac10c992839243fe59b8c4531f81e42ac73403f4
SHA256 f01da63869d9d9fb414dc9c4a01697ecb89f39e4e20d64c3bd132079ed94e2d9
SHA512 9a309b93e902fd67dc6285652d2fdd7a07d8bf3d9624dd7cdeff46710224d6d8d6ef52c866d50d03be7f9b9454424c78e7e808c96b39e4cea5321d9a76304892

C:\Users\Admin\Downloads\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.zip

MD5 53bde34cadf0f870d0418c9164c6d156
SHA1 9b8d827883e89d027bcad0d51b86461c67651f7b
SHA256 834e90dba3a3a82944143a0ade922e2a402a2310a6bb3ea883cfc290d81eb38c
SHA512 7e85d1b22185b23f09d4e4e066ce78a86a7993d1daf69a70b2309890a9c75fe3e697d12c44695d40dc74f3bc060f41187fcd5e0859766dbfc7822ba5f2e4f674

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 e6c2348fecca16975f65e2478c3a1685
SHA1 462ccf4d5be4559fbf90577e50e257857ca09d54
SHA256 3fccb93658e49755cda0f8cc43720da55bdccf37ecb749fddea74ebc812091e1
SHA512 ad98e329f53138d520ca4eea5680f3d9c71de8318a871df8cbfe9e00d81ba803d452e84bf938081c438f84fe9bcadafc6c1a3a21394d64991c1d78144da652f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 678b1933644bb758e8f78039b4483f7e
SHA1 3935ed835a6e1ea67e0b07f73ccdd5a842fbbd06
SHA256 6d92d737227410805bfc7f9c54cfa6d768c8d6cd9d8b0012c35c903cd8a6c75d
SHA512 d934ebf2fab2160f064b3640dd73eb9dca644a2e899398f1a5108617ecf503bb984eb550d80708382257f42e3c6e2120ede9526d28188b5cdac52428cd5d1f1d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 09fd1250d15a5536350e17e5ca620390
SHA1 b2a7c38d138f3a320a38a115fcc1c38a6ffd94ac
SHA256 96c8fed2516a49c7c2629161042a2b82551d11f651e080f9ef3045539482b55d
SHA512 4f97fe27608dbe92a95445418faf8248dc712c7bd60c066e31fe6533e511d414e4b3e92b0f3b1ebca2b2f1e1adf144acfbe7a2335d08acd5d73d6726740f01c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 7b8df456ed0febd643a08dafd110be81
SHA1 0e7497309d76e5107ee705a1e2c149151ef6cc88
SHA256 7cb1945aaadacd0a5149787bf0d741a1b099bb7c4112fd5bcb1af90e108f14cb
SHA512 4e168db4ca1add57bc19571b7dbaf7af127855024cddd28e4bceda40b6d15d3b414670d089e2e13ae5c5d8641f3245ed48d301ac05a8f95e7ea678a7bf008aac

C:\Users\Admin\AppData\Local\Temp\7zO4C5A018A\369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a.exe

MD5 cc893a8b514d6874965dd29c0c473732
SHA1 69f56d454e6facba1eadffbdc7c2bf826b01ceaf
SHA256 369caea879ce15a7146b74e59ac7e172faa742d053634bfa436637c150c0c85a
SHA512 9ce978051ec948e2178a2cbbaf3b72d8367b0b711772ab7c903c34362c0ad848d152fd73babdeca5b86a775460075f526e42ddd4a0062b7b0330b45d495ac9e9

memory/2648-1037-0x0000000000320000-0x000000000032E000-memory.dmp

memory/2648-1038-0x0000000004CA0000-0x0000000004D3C000-memory.dmp

memory/2648-1039-0x0000000004DA0000-0x0000000004E06000-memory.dmp

memory/2648-1040-0x0000000005990000-0x0000000005F34000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 01985f17ed44125a819b3e9afd47255d
SHA1 e52056db5c7e96ad359f0932ecd0b9b4187d0f78
SHA256 df73e6cee05b456a72c18965343a171307d2a6e82ec95c884be59b61722b527c
SHA512 2d980059e74bc84cc20a9901e9eb5d45d1b00057b2189ff2a58a245a8cdf5d13517c5d6a1289cb972d60b8464902aa393b69391c42c718d88df87815f3a0c599

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 8facf4d1ac6ff2520d3f9536ec0ba688
SHA1 05a661afe1d0f83e9566498cb4b895f1c90beae7
SHA256 a7d8fbd8a9794a97d9ea3752e450a700c2e295a681b4fa7a21affedc4fdb1a9c
SHA512 2cf271954eae3bc8766c3e19215732ee46591cbc3492b24d96cd26376be64dedb711c5d4962377b559b37c097aa267992ef380ad02bd5706435679076805a1d8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 aac57f6f587f163486628b8860aa3637
SHA1 b1b51e14672caae2361f0e2c54b72d1107cfce54
SHA256 0cda72f2d9b6f196897f58d5de1fe1b43424ce55701eac625e591a0fd4ce7486
SHA512 0622796aab85764434e30cbe78b4e80e129443744dd13bc376f7a124ed04863c86bb1dcd5222bb1814f6599accbd45c9ee2b983da6c461b68670ae59141a6c1a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1 386ba241790252df01a6a028b3238de2f995a559
SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

MD5 b48651b8cbab85d2ab3057cb428b6015
SHA1 3aa11a74bb7e54b624362b1743702468dbdc0166
SHA256 f9d6aaf6c090d0775c569cbbef7352c2a895f8050fa1daea56eed32ae66dbb42
SHA512 ce1dab9c2dd5fcc43a09aa5ef6a43133aa015476196763ae810722bf5b191597dc54f1b3fcba9e225cf4053c936b988cb330a6c199ed8b357511d5e5566e8037

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031

MD5 d9306ce36315a193530e5f312c86607a
SHA1 55924de5f3a8f4222259ae3493c0df633a4cfa29
SHA256 4e25ffc3cf72ed5fafb68380c4e27da38b7f64dc9d4bec5162d010dfc4faf83b
SHA512 c6a4e627b84f104da9921fca2d942bb23e9772af05feb9f99da26044c2387efd2abaad39a3b263f6cb9255c80a3413a6a28065dabffec6ef71d60df44f073cd0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005d

MD5 7120a92101f715c571c8defa2670bed2
SHA1 ee36fcc35a0d6919ab2f7b1a6138c2b33be37a3d
SHA256 ffdfab06030723242bcddc956de6ebbc1f774e1c944969cb05f4ab9acfba7c99
SHA512 431030134d1f0980b24ae4770e6e77c1b05df6a72c67a7772a99a3f868dc1d2cb93bef6f38dbae9c3d7de9b13379d248e7691313039cda379e541e26d3852e80

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

MD5 046aa7e156dee615b1f1906d2a9b229c
SHA1 44fb4ab90a9d91bce05924876452d4082970ff38
SHA256 ff391caa02195704afe12e0b339af4f1c6c2fc524b00fdc897ceebf648e72c5c
SHA512 83b9ad869636c5d6f11d43f302f4b9eeb557b3a630f40230bd3eae04d5cea0dd3bfab6a0822e73ea584d2551e8f312396f8d50eb600909e2ee54e546b15f7c1d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00009c

MD5 09f5d6efa1be16eb1e3f9685e56efc24
SHA1 b713343bc0cb9820c8244a149c934815d3420235
SHA256 285efc13c91dc05bddde281f01e374059e3c52def935e18ac405cef0d072a4d9
SHA512 b230249e2cec40db9e764971e2d443d96b58db854872be305c989e277ff4757ade26b49f14c005db58df68e8b57f4a23a919f9fb80ce2f96bc419e594041b36c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000098

MD5 78f76538d6311abfb8090787446155cc
SHA1 10888e14597d3810decf913c1c40bece92c765af
SHA256 2cf65cbcfbe983e300dc4197333544461ce0c6004092832d74c46b977e3d06b9
SHA512 46a9103ee27592bf20e7e4272f1d9fdfca0b28e1cf439849637d521983823cf869e9b116bc09e788a057f5eaa11b2f5b4ba9e00e935d0dcb27d6026f181e01ca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000093

MD5 099e4aa84d0afada615dd48b28797ecd
SHA1 1a33dfbb5ade855907dee6335125cac682fd03fe
SHA256 93658c19fc7f10933b93523dd87e3e00e15437e76f85acf374be890411c84331
SHA512 b6c7dc1969ecda1564ac722677b291868951024f19c5037f06598d4304003b4af02f2e98ca102ced7b2af895068a241119302e59e645853d657b4b6a96edec18

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000089

MD5 46f6ff90b2d88b6e04673903de7bfd20
SHA1 3a028cc5dc58ba3d17a06c47741878ff68bff183
SHA256 ef079a1af1e4614a51e4ab93871b3686167e3f0fa5ae713e5e7d5f4c1bed47b7
SHA512 7532cd3dfa302b86e65bc302e993af4ea793884a686f244a181258accb6fe6e9785c40b455fa8cd83cfc4812f8457e1abfd0f34b4dc810aa0df170f29d9c334e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9c65ea0f7b6fd312ed80dab83310e439
SHA1 8d1a40c1f65f8d774cbfd6738a60a556cc4975f0
SHA256 746f0aeb474d73fdce4e144a3cfead3d5cbde3b6a8ef5f13bc905cbb586d8bd0
SHA512 203107cc0a1b390f0378cf63cd63644cd17a9330359e494ce8102d1ae61b18484bae584b2fc98edfe7b92276cbd12fd668d99aa631500cfbf771c9596a86c80d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ee372c5c93c92eb9fea921c8d5b5d10e
SHA1 5ef9aca6b784a610ef0e6c43529c2b4543b4a017
SHA256 18269c760f85be0b4750cda2f05aa93d3dc5f86736b9b5ff8ef9a71cd7098496
SHA512 c830bee2f0624ce196a46649ee4f13d005d4f61f96695fe456fa942ffa334179634488730ef981391bd98a70abc06c85e68a90c68516691d7285842af79921e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a9

MD5 b9a4e725a313c37c4d672c35f6a02b2b
SHA1 8664cb3a7ffdb535b8d23e9bae3682a1410448f0
SHA256 f851998f6d208f5a4687cafda0f2132059007886fc34741cc1c786b4d8624cc7
SHA512 6fb805e8e71b5e13d9704187f8957abe7767bff7c5b254e13b2f31308541bc6959ac44e2784f7ece713871af771dd86d15331a2885dc95d21dd6b51b01fcf4c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e2c32304c81549a3cd7f47e4b9472074
SHA1 2d56c37d01b7088a455f9d6778cd41a857e673fd
SHA256 eca0cc7ae0a5212d799b64f6bc7a7395fecb7199d20d3327f8ac4a22b034e67c
SHA512 2a637c8d9aaa44427535c2432d90052000823bb8993055f55ab8ab3fcdc2eaf32d2bce730f1f6d1b5056e9325281bf64c5676de079f73c0620d8a26f0be24e40

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e2

MD5 727b059a422125bae66dfec9a8687201
SHA1 20bdedc8efed5a128ed83cea25ac87aa7b946175
SHA256 4f21e360be774db9ed664d7d7b28e7e37b432e3307c19962a1179f1bad4308bb
SHA512 64ed68a14649cca178cd8205b982bf1c64dd38cf7312a0730641aa9ccffd7737d7b42f2e973399e95598369a648d5057f048544e611d00d7b3678df6edfd5530

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e355a5c294bb64eb37c3c8ccd684be49
SHA1 a22bf0ca9b52448be79cae226765f707d341c8c6
SHA256 4862062de05bd31cf03640e7c9c3c30d58bffc1c8217641219780f9c5348e605
SHA512 b74be3ac4ec62348fb61cf72cd263dbc7c4d0974c66a6283d04fc0474f34560ce19d739fac9710ab3a7f0758c658748d1fe59ae80bcb1665e461bcbda30d46d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f9692b584355d8d3be99ffa540f92b11
SHA1 0702ec2733296819989dbb33af746fd503d26c58
SHA256 e56a9703da5780cd86ea0ff815dab2b9646ef28f6fecf4727a5bfc8d347d9cf6
SHA512 d050c3663f3abb3cce164f97c897bb2c76768acd8ee0a1d66cb1c3a765ed11a1af72bbd7ab0f306c20fca7e62616394f23f1fa020e073dafd352fc96d5e8a5ab

C:\Users\Admin\Downloads\Unconfirmed 571793.crdownload

MD5 36f8adb499e6f6f9318f7bdb1d2bbd75
SHA1 709296223ebc2a31c0f0d37b535b62431c4e5991
SHA256 a7d9bb906fbff13c6d394325e32a77d6286711e74611bfc993fc9a48507906dd
SHA512 46c41a5300231aa83cc2445e1310d8ae878c590f06d1fc78b0d56e5370acff207fcb3e468666cb920308c9c0966119427f5a940d2849d4babee3806493ad1152

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_best.aliexpress.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

memory/5424-2169-0x0000000000400000-0x00000000004CC000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 2e57b2731711c369d3dac4627d841960
SHA1 5fb9823083e7ee390e68e7a23d4e071b08332e0f
SHA256 298af47c48c0b2ca97c2ae12121c3fa9ed900fd8b5177b6081add17f0502da6c
SHA512 c5aa6a24c4d7307a4660efa608081c8f7e2cbb8331d81599f988ea7bd9e857c1429b3dff8450316bf0c85a2d197da90fb724a0f317d02abc5307969cd2a436cd

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\zbShieldUtils.dll

MD5 c79e3df659cdee033a447a8f372760ce
SHA1 f402273e29a6fa39572163e4595e72bde3d9330a
SHA256 7d09715c4e0735a0832bf81d92d84600df1815a2ba451586bd25eb16f7c450a5
SHA512 490cc30ccfac209f1f5332ce4168b0dc849d7e4d86f3c198ddd23b39ddc950001928a1e071c2ace74c4710508265c0872adb02e3f068e521d28ed8b19ea36492

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 81761ea940313ca003a3c44c9a30a7bc
SHA1 3f5f1b62eb99b0b62458107e3ecb1143a682ad52
SHA256 8464b80a160e36ef78559a2a48b19b3e24334642c4754173831cc690124dab46
SHA512 4945b2203ad2d7742d91e500f66d59254c1ddf8b41e613d228f04a8fa74345e60a28ec0dfa7a1e999fbd857bc7412223289124f23e0ea2b1efabe5bfa1b02287

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 18a8e4714031ba0732c5901d502d3d8f
SHA1 c668d0fd15197bc3b4ab56a65e5b32543cebf5a1
SHA256 9f19cd31932273a3ac63bdcb1c2256adca4d3af0271383506494e664c56a1a04
SHA512 05bda9bde21b0e958a6651dd5f7528d2628fb1984b90e9eba2b8ddfd1890fadc2ad4f2714f1d45fe195630e055515e70d12cc5aecaff3e5083ad563479b247a5

memory/5456-2221-0x00000000037C0000-0x00000000037CF000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\botva2.dll

MD5 67965a5957a61867d661f05ae1f4773e
SHA1 f14c0a4f154dc685bb7c65b2d804a02a0fb2360d
SHA256 450b9b0ba25bf068afbc2b23d252585a19e282939bf38326384ea9112dfd0105
SHA512 c6942818b9026dc5db2d62999d32cf99fe7289f79a28b8345af17acf9d13b2229a5e917a48ff1f6d59715bdbcb00c1625e0302abcfe10ca7e0475762e0a3f41b

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\RAV_Cross.png

MD5 cd09f361286d1ad2622ba8a57b7613bd
SHA1 4cd3e5d4063b3517a950b9d030841f51f3c5f1b1
SHA256 b92a31d4853d1b2c4e5b9d9624f40b439856d0c6a517e100978cbde8d3c47dc8
SHA512 f73d60c92644e0478107e0402d1c7b4dfa1674f69b41856f74f937a7b57ceaa2b3be9242f2b59f1fcf71063aac6cbe16c594618d1a8cdd181510de3240f31dff

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\WebAdvisor.png

MD5 db6c259cd7b58f2f7a3cca0c38834d0e
SHA1 046fd119fe163298324ddcd47df62fa8abcae169
SHA256 494169cdd9c79eb4668378f770bfa55d4b140f23a682ff424441427dfab0ced2
SHA512 a5e8bb6dc4cae51d4ebbe5454d1b11bc511c69031db64eff089fb2f8f68665f4004f0f215b503f7630a56c995bbe9cf72e8744177e92447901773cc7e2d9fdbb

memory/5456-2236-0x00000000037C0000-0x00000000037CF000-memory.dmp

memory/5424-2234-0x0000000000400000-0x00000000004CC000-memory.dmp

memory/5456-2235-0x0000000000400000-0x00000000006EE000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\Opera_new.png

MD5 b3a9a687108aa8afed729061f8381aba
SHA1 9b415d9c128a08f62c3aa9ba580d39256711519a
SHA256 194b65c682a76dc04ce9b675c5ace45df2586cc5b76664263170b56af51c8aeb
SHA512 14d10df29a3bb575c40581949d7c00312de08bb42578b7335792c057b83ab2878d44c87042bbdb6ec8ceaf763b4fbd8f080a27866fe92a1baf81c4f06705a0c4

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod0.exe

MD5 6e331872b76530558ddf5b0a58571b2e
SHA1 4f3ef98c954066bebad0187636b3a05a75b6e4f6
SHA256 24c5e78f661ed3f4b6290c472cd992e49b6781bb3ce88baae5aac1fc86388dbf
SHA512 978ceebf5edba0a93af5b275d6dd3602a012edb7269c7404e5a422ec1cca132c247715af0f2a8df0fd533d5d3550a3416a91a61b5695dcf5d1bb6638023c430a

memory/3620-2258-0x000001E88F130000-0x000001E88F138000-memory.dmp

memory/3620-2259-0x000001E8A9A70000-0x000001E8A9F98000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod1.zip

MD5 f68008b70822bd28c82d13a289deb418
SHA1 06abbe109ba6dfd4153d76cd65bfffae129c41d8
SHA256 cc6f4faf4e8a9f4d2269d1d69a69ea326f789620fb98078cc98597f3cb998589
SHA512 fa482942e32e14011ae3c6762c638ccb0a0e8ec0055d2327c3acc381dddf1400de79e4e9321a39a418800d072e59c36b94b13b7eb62751d3aec990fb38ce9253

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod1_extract\saBSI.exe

MD5 143255618462a577de27286a272584e1
SHA1 efc032a6822bc57bcd0c9662a6a062be45f11acb
SHA256 f5aa950381fbcea7d730aa794974ca9e3310384a95d6cf4d015fbdbd9797b3e4
SHA512 c0a084d5c0b645e6a6479b234fa73c405f56310119dd7c8b061334544c47622fdd5139db9781b339bb3d3e17ac59fddb7d7860834ecfe8aad6d2ae8c869e1cb9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 c505fadbe974007394a14e8ab4843e5c
SHA1 e175851ccaa2686ff60bd070636d098ae915d8ac
SHA256 33d40d95cdbb542d12e592ef1e188d74d75f101be0436b7e3cec6228410f4021
SHA512 d7dcac3dd4f018aedfeb956569a5b2c292021eb27b06a191e8f7f0970df4cd56acb628f2561c3be9c219b7bacd4ab09c35558e3b7ffb9867be4451b3c997459d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5cc6a3.TMP

MD5 8cc88ba4f3d36ec7cb094705862c7d42
SHA1 def40b64ed5fe865ede0d1b62d1cf17b1a0ac6d6
SHA256 548f4a0aa49a67c8571c8b62e1c23873002dde5570a95d546456c8b7e4527ef7
SHA512 733249af7dd8ffb96cea632c10db345ffe2b6b503003346ec0dbd518366d7bdd5acd272bacd4a41412bfc54d7e0c114094d976c9002bc7339f2bd577a374a59e

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2.zip

MD5 f743314bda8fb2a98ae14316c4d0d3a2
SHA1 5d8f007bd38a0b20d5c5ed5aa20b77623a856297
SHA256 2113c6d5ef32e3ded8b4b070a6d0da8b1c11a1ba5e7d7fbfb61deeeafc9d451c
SHA512 f30af84df2eb2ddf3ed414c069f0edbcf42110f14e0aed61c0f28d6bca0f1c7785db1d53f90686ffe1f543d610b0f5f223c79160f7245924c38d99e6ffe2321d

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod2_extract\OperaSetup.exe

MD5 472dea5069dd8ba24cd0379d70a78f4f
SHA1 b543293dd4cf909eb0ad3477e718bcdcbf0dadef
SHA256 80640139d8a69161417b01b1e21618921096ec5ea25658e1a56de9a6b7941395
SHA512 fa85babaa4a7ac60759da659ef22348569cf7c653d6c865b3c8277dc1a4a9d7edb356a621b218a9c1f39b48ac7f01dee902a046a57b2bc8b9ce6f424051bf6e4

C:\Users\Admin\AppData\Local\Temp\Opera_installer_2405111433566655108.dll

MD5 2a3159d6fef1100348d64bf9c72d15ee
SHA1 52a08f06f6baaa12163b92f3c6509e6f1e003130
SHA256 668bf8a7f3e53953dd6789fc6146a205c6c7330832c5d20b439eedb7c52ed303
SHA512 251c0d3cdd0597b962d4e32cf588a82454c42067cbe5e35b41b0548eea742ea25815e5d6830b63c1992b5730a4e6d7c005fb0019aa4c389549b06fff9a74b38c

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\finish.png

MD5 7afaf9e0e99fd80fa1023a77524f5587
SHA1 e20c9c27691810b388c73d2ca3e67e109c2b69b6
SHA256 760b70612bb9bd967c2d15a5133a50ccce8c0bd46a6464d76875298dcc45dea0
SHA512 a090626e7b7f67fb5aa207aae0cf65c3a27e1b85e22c9728eee7475bd9bb7375ca93baaecc662473f9a427b4f505d55f2c61ba36bda460e4e6947fe22eedb044

C:\Users\Admin\AppData\Local\Temp\wwlattsq.exe

MD5 06bb4a5bde8c907dbf05c277a15d270f
SHA1 10d9673a173ab666a464529797e20d1dd2eaebe0
SHA256 1724f1617f764f55b460bd9bca707b0184b76097f32fdc745a7d9ab5a5e09b73
SHA512 509e711d5d97fc0fed07f40c4c3a9c48530c4954dd9c5e4f0f6808437cd2ba501dda5f8ab40059d8199f6cefe3e1a0a994dc05c5234459c4b30ca79eab2c2ccc

memory/2892-2426-0x00000196DD7C0000-0x00000196DD848000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ce1352577fc1c43938cb30f957c459c7
SHA1 ee04def9dfdf99fa93021c1044c041df96f784b6
SHA256 504795db0fd53cb4afbb922db4820d254299009941238893683d1b4f17ad970c
SHA512 72f2a85b96fa6bd15d7f38fe1630997cd2e4fa12523ed123d8b5271681e26f311b76470bc2d22f9472479fad8a5551173e7508fd001167680e0ef666eb0caf1e

memory/2892-2439-0x00000196DDC50000-0x00000196DDC90000-memory.dmp

memory/2892-2443-0x00000196DDC90000-0x00000196DDCC0000-memory.dmp

memory/2892-2454-0x00000196DF570000-0x00000196DF5AA000-memory.dmp

memory/2892-2455-0x00000196DF5B0000-0x00000196DF5DA000-memory.dmp

memory/2892-2458-0x00000196F8840000-0x00000196F8898000-memory.dmp

C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe

MD5 ded746a9d2d7b7afcb3abe1a24dd3163
SHA1 a074c9e981491ff566cd45b912e743bd1266c4ae
SHA256 c113072678d5fa03b02d750a5911848ab0e247c4b28cf7b152a858c4b24901b3
SHA512 2c273bf79988df13f9da4019f8071cf3b4480ecd814d3df44b83958f52f49bb668dd2f568293c29ef3545018fea15c9d5902ef88e0ecfebaf60458333fcaa91b

memory/5456-2488-0x0000000000400000-0x00000000006EE000-memory.dmp

memory/5424-2491-0x0000000000400000-0x00000000004CC000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-BPOK5.tmp\prod1_extract\installer.exe

MD5 d2272f3869d5b634f656047968c25ae6
SHA1 453c6ffa6ec3a0a25ae59a1b58a0d18b023edb16
SHA256 d89a2423da3704108861f190e1633d2100ecc30b4c40bd835ce54a6934887bc9
SHA512 41072ef6f382cf6d4d97ebc2a49a50a9bd41b53508a8586fd8d018e86aed135e8ac2cdd16bbf725e4f74f14ecfcf49789d3af8924b6d5dfa6b94dc6bf79a0785

C:\Users\Admin\AppData\Roaming\qBittorrent\watched_folders.json

MD5 5b76b0eef9af8a2300673e0553f609f9
SHA1 0b56d40c0630a74abec5398e01c6cd83263feddc
SHA256 d914176fd50bd7f565700006a31aa97b79d3ad17cee20c8e5ff2061d5cb74817
SHA512 cf06a50de1bf63b7052c19ad53766fa0d99a4d88db76a7cbc672e33276e3d423e4c5f5cb4a8ae188c5c0e17d93bb740eaab6f25753f0d26501c5f84aeded075d

memory/2312-2645-0x00007FF827900000-0x00007FF827910000-memory.dmp

memory/2312-2657-0x00007FF827900000-0x00007FF827910000-memory.dmp

memory/2312-2750-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2723-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2771-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-2763-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-2780-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-2889-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2993-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-3037-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-3030-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-3019-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-3005-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-2986-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2969-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2964-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2932-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2925-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2911-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2903-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2900-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2880-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2865-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-2829-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-2821-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-2817-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-2811-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-2808-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-2792-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-2779-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-2760-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-2713-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2695-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2671-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2739-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2712-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2706-0x00007FF828D40000-0x00007FF828D50000-memory.dmp

memory/2312-2663-0x00007FF811240000-0x00007FF811250000-memory.dmp

memory/2312-2661-0x00007FF811240000-0x00007FF811250000-memory.dmp

C:\ProgramData\McAfee\MCLOGS\AnalyticsManager\AnalyticsManager\AnalyticsManager000.log

MD5 bc9ad2740adac2c7538a79512cc82ed3
SHA1 d9eccae7a5f764783cf24d1b99261a11916acc5d
SHA256 4cc249edb3766c0785b0a6988860e976fba32f171190f77a61591dbe9b99f6e5
SHA512 98a0638ecc793fbfa15cdc8358e4698f7a1adefd0acb0dc14a70bf3d7a2e2968d22408dbbd31543a9d02c597fe20b4ec9055f49cf04d4b636e6959d50c825a2e

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\additional_file0.tmp

MD5 15d8c8f36cef095a67d156969ecdb896
SHA1 a1435deb5866cd341c09e56b65cdda33620fcc95
SHA256 1521c69f478e9ced2f64b8714b9e19724e747cd8166e0f7ab5db1151a523dda8
SHA512 d6f48180d4dcb5ba83a9c0166870ac00ea67b615e749edf5994bc50277bf97ca87f582ac6f374c5351df252db73ee1231c943b53432dbb7563e12bbaf5bb393a

C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt

MD5 4bcf600532796fd8666d2efa9f440948
SHA1 5f5194bed841251d668d63e7b2b0151a6d203111
SHA256 297efbbb7eb632f19e4d4a6d1579ee94bb8b2f8f317d0fd371cd236da4bbce05
SHA512 4fd5e3c87e6d817ee1a8a315d6b374b9bb3ca5fd2c0e9bea94cbc523bd2947b2884c238f954069a1c88e58db231114feb1a094ec2b1d4a06e00083f33f4eadaa

C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt

MD5 7bad020181231450bccbdd028bcdf1db
SHA1 20eccc604326598a7d1f00575a40720ce28aaf78
SHA256 0e9a5783d7388e0ea9847d81a4270ed4ea06fb2d15614c9a337090336e1d0065
SHA512 e8d71ee9348fe6e534b99e7694b13b9fb1c7d97db3126a93ff00a3d1ac63043bab9940efdfbc1f264be424682c634e22e7e58dee7548eb61a4d2147af402b747

C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt

MD5 6e4a780e1278568d87011e4fed4ef142
SHA1 62eb3727e23fccc57010fb9bf286028770b95c21
SHA256 7a666745a440d20f0e5a8203421770ceb7e7276a90dab41b772854b5aeef5eee
SHA512 794915765cab00aac1e0e59a0dd2d84808f815fcc9aef3be654c29ff8e33161933152fb64a532e5b27d68a1ee48d5024cafe57d1853f76d3bb0583f16e9762d0

C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt

MD5 170db61895e146501a69d45b3235949f
SHA1 6c79043d7196711b276591a7fc0015b971bd40c3
SHA256 c22f0794774de173b94b60f08da9862480357777a863b7122cd28d6c6b3084ae
SHA512 ba8f91a7b660feca735b00e79ba37edae0ddde4d949eae6ae4fe81571933123a1f70c50f2842f5510bb0d6f5007d04a0b9c4c4b5903784c43793e3e2ee05c011

C:\ProgramData\McAfee\WebAdvisor\UIManager.dll\log_00200057003F001D0006.txt

MD5 d44179c38bd746e520cf16174305d72f
SHA1 d2956d852508e9a172fd6dae12d3cf09de8e118c
SHA256 571e846ba3555f75b4aa6271bb75309c9715a59685bdbeb7986cd46464ec9ddc
SHA512 d29e76021a8fbb41dd09c6a4ae12393a52caf219435c804d439cc33a15fb169050845be248061471537ab45cdc8235014447b98bc2aeb4fe745b9bd4b8772f79

C:\Program Files\McAfee\WebAdvisor\Analytics\dataConfig.cab

MD5 6f97cb1b2d3fcf88513e2c349232216a
SHA1 846110d3bf8b8d7a720f646435909ef80bbcaa0c
SHA256 6a031052be1737bc2767c3ea65430d8d7ffd1c9115e174d7dfb64ad510011272
SHA512 2919176296b953c9ef232006783068d255109257653ac5ccd64a3452159108890a1e8e7d6c030990982816166517f878f6032946a5558f8ae3510bc044809b07

C:\ProgramData\McAfee\MCLOGS\AnalyticsManager\AnalyticsManager\AnalyticsManager000.log

MD5 a8a5d8011c0fba767fdb65e310d9d981
SHA1 d38c43a3a4176d8847547d90c9b8be478a62ecbb
SHA256 ec84d7f7829890d6b63ddeb85e964be66d9813aee6890f6510ac63ce4da66fba
SHA512 ff800d2bc1a4d29908fd005d79ffbfa8a28f0415fc8502b10372800392f758ea8f84d5bf1049a9c999618deb9d7b2d774f2166853aded08a3feacaae5da5876d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 a42b58741b86394bd9cdc5778da22c86
SHA1 7da27aad856a1232847452031a85a6c12ea7ad0f
SHA256 28eca447825d9ab0e85e089022dfd3417ee66a5e64922842ee9eabb03421e93e
SHA512 22137568a57d9e45cf20cf5b01dfab94ae53fc777b8b51a0807e4ac7524fd6d7f7016f93cf70882487b35e11b294bb24eb1a93116b8818e774529302b22212ec

C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt

MD5 ceed1a1b0978a87f21ce3551f6096603
SHA1 bfec504a97710bee5549c3ce23e52fd79ae07e1c
SHA256 03ffa863265d11e50f71e219eadee522536e150362b9281ac3d6a65c977b737f
SHA512 5a7ed526c05f3abd787fe205cc8fbb0409c872d977be5fb05c1dbf1984219f6209779e0a1dcfd55515737703bb55096008ed2c55575d4b7ccd789cdc79bcfed5

C:\ProgramData\McAfee\WebAdvisor\WATaskManager.dll\log_00200057003F001D0006.txt

MD5 1bc4fba9328415e1505c7a59f3d723b5
SHA1 c8fe0898e5f8dd8eb73df0fa3b52362bf47eb048
SHA256 644ac41847d77bdea58cfb6a4ea8ca4e83371ac06c6beb2f606b4172ae4b10b6
SHA512 8833bb43a010c96b0d0de7a825a6cc8b35d78cbafbc6826dcd5b7c6780429d9b1896ee82c36b410c748ed416fd64b5f61010e791456ccb29a6a30164b7730aee

C:\Users\Admin\AppData\Roaming\qBittorrent\qBittorrent.ini

MD5 142ec3542caca05cc9b56a269f8b3fcb
SHA1 8086a849472f848622b17a91405aa7a9bb1b7650
SHA256 ec57a60035daaccedfa8a9ecc3a0df2f49ecff71c185eda8c4f6b4c313da09d4
SHA512 e8cb6e4ed1dbf118fc544c29e7b5cab329704b9c0e0e9185593e7e8366eecd608d11d00879a8c10b357901d3e19b244aa962264510ab6b1e3d6b21b61639d260

C:\Program Files\ReasonLabs\EPP\mc.dll

MD5 79a3316d934da771d43a0eb38b43b411
SHA1 f4df6d0423d63f7e0792d1d55af6b36a94c7449a
SHA256 2a96c5474735e92836286f33218d8338591c15b3441faf8672d3b687411f01af
SHA512 b597cc7018ad0a9695c6ffeb3370e3c04e9d35d7090de176aa40531a6720e2bd0cb9f1ab1a8304ed17e0987982028a91b2d8d5cf3229a62c5d0fcd4ab1c6b700

C:\Program Files\ReasonLabs\EPP\rsEngine.Core.dll

MD5 b8f08b5a671b1d91bc615a1be333d037
SHA1 2d17004a8635d9c349b43aec7996384cc7b17a95
SHA256 c5f855c4e6f7aac4547f4dfae4ec03b1d3ec51b18c69ae94d3402b27a32b562c
SHA512 c0f75d936196b65fb2eea75de1d97b9cd6d9a6777553bbcd706e1c3a29248543cc6aa2f47b46142155482613f9106e84e5b8036c0fa46893600272043fc20335

C:\Program Files\ReasonLabs\EPP\ui\EPP.exe

MD5 c128d7b407d111298c6fd54b5d1d30dc
SHA1 f1b0a405660ddcef6a37155759f08b1bc50f27d3
SHA256 60bb746a55444c32b1dd73555e4ed4e3d21a792c818279d4952f302553393a9d
SHA512 17f4a4923166da9229bff98dacecb5d9824d435847c4d371d7eb441b6e836d36b92c187fba08666d3c26ce61eeeb7bd5ab675983d793ba9315c47d8d6ca8bce7

C:\Program Files\ReasonLabs\EPP\InstallerLib.dll

MD5 8556afbb1722951ddc64e7642ee7ac9c
SHA1 f25a52b068eb3898dc1d018fd481af000ac9cc7d
SHA256 325870bc55b57f0f018c6a572cddec8b339540a0b337ea5efd97014e8c00ad10
SHA512 57d3c271752f6cd44edb43c2d79e7188b57561678057f05bcb145f23e2729715645f3c520eef8106221d7a981bb0f65b80e51a92f86c1f0de11932a92147a962

C:\ProgramData\McAfee\WebAdvisor\WATaskManager.dll\log_00200057003F001D0006.txt

MD5 cba7c80b9a170e284d00cbd026d8ba3b
SHA1 08bbf621cd7884b29768257adf81777c579f2617
SHA256 36fc7477473536f51b3186bb9283b70c73e64b25bd261a79b8b2c409b7db446f
SHA512 c9a659a5e9ac3600b9976e466aefef7ba7974f9890f8e41397c642ac4da47a7b3b10ffd18b0d9e1773f346d83d15c6c3d9e6db50c42130a489165a62233d9d1b

memory/2892-5589-0x00000196F8720000-0x00000196F8776000-memory.dmp

C:\ProgramData\McAfee\WebAdvisor\updater.exe\log_00200057003F001D0006.txt

MD5 6960239f9f404e3f9167f1a23a18a70c
SHA1 fd59111f461a2219de6061044a44b6cf0bbb14cb
SHA256 2441d1467d740e9984dc8b99ca943c028d6b513170012bfcd0d1d489e210839f
SHA512 7eee72c2fcd253f6eac7e5a672540ffe9a75ab4c057397f0d42ce64d9fa3d5de790abbbaf24d0f6e5cd3a2a8c040395ecf112e749836f2c9d587ad804d26d462

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{1FAB8CFE-9860-415C-A6CA-AA7D12021940}\2.0.0.34\BGAUpdate.exe

MD5 3f208f4e0dacb8661d7659d2a030f36e
SHA1 07fe69fd12637b63f6ae44e60fdf80e5e3e933ff
SHA256 d3c12e642d4b032e2592c2ba6e0ed703a7e43fb424b7c3ab5b2e51b53d1d433b
SHA512 6c8fce43d04dd7e7f5c8bf275ba01e24a76531e89cc02f4b2f23ab2086f7cf70f485c4240c5ea41bf61cb7ceee471df7e7bdc1b17dfdd54c22e4b02ff4e14740

memory/2892-7549-0x00000196F87C0000-0x00000196F87FA000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\tmp\RAVEndPointProtection-installer.exe\assembly\dl3\deaac72c\527fec56_b0a3da01\rsJSON.DLL

MD5 bd772c48f94ad1012dc608a4b7b55ce1
SHA1 4593870deb85c3ea9d54f1f260e2ab96effb6ee1
SHA256 59733e01120fa4d5cb1e765babf8fefc15d98f7d484cb1902e0d07c4f3c0dcca
SHA512 534b4005c4d7647a42da6489a6c6852d95ef0156d0f76bc76b5c6765e035fa86a46e2ce823962b06b4f74c74623155302974d0dc0cdac7fbfb00fbc3579bc286

memory/2892-7659-0x00000196F8790000-0x00000196F87C0000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\tmp\RAVEndPointProtection-installer.exe\assembly\dl3\5894593c\f2f4ec56_b0a3da01\rsLogger.DLL

MD5 3c4180b83cca1278afa4e8f6a3bb0847
SHA1 61988cb6bf9700e517a4344a793025ed175ab9ac
SHA256 4149bd4b31e147776a9b7881b3e40644fc583c4c25e40edc480c996dcb7090c8
SHA512 7a2e8f2664573115c9268726abd90b91bc19664e317a7b5afa001ce3d31b0537c9524066a2dc2fb831e3dd34b8c98f1405699701b3e990dcca175f1bfd40d54d

C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\tmp\RAVEndPointProtection-installer.exe\assembly\dl3\9f50aae3\abb7e456_b0a3da01\rsAtom.DLL

MD5 e5e1626c36117bc60e810c132b99c249
SHA1 753c35e07b1453a80ce2260d3c37387ab457c91f
SHA256 abddc3de4f7320698394f16406cf59b2cc147f903c5afb8535025ef7ea696000
SHA512 145d37fd59b90da9656ff96a2f50db185efe791eafb67d492e9bae3869271c71e493019c08a2390f4aa251f8611c78fa66bca93a8925e3f8f0fa98f4b5278800

memory/2892-7704-0x00000196F88A0000-0x00000196F88CA000-memory.dmp

C:\Program Files\ReasonLabs\EPP\rsEngine.config

MD5 517330c5959e0ea014cfb2ddadfae354
SHA1 82b72327a6d7304443e543d8bfb98f0849899a49
SHA256 f30d03e6f8b8b8e1f4a1cb93507629e465b0dcc6c9e68982816d92b5819de6fd
SHA512 2e1f95f16ff2a45e492f03a7df8a96cc984ec8965746320bac255861609a4759ab82d6b99935235dddd3c11c7e7001e495c16650be406b75fca726488f603dff

C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\tmp\RAVEndPointProtection-installer.exe\assembly\dl3\af7f1a46\6b6aed56_b0a3da01\rsServiceController.DLL

MD5 3aef2746ab8bf491c50d946f271d8461
SHA1 e89d4c3822f0d2c58bc6114f9e35d99271b2f82a
SHA256 7927338f12e8d1835e97fb342874b26d4f068da95bb582fe0ccfde364e769969
SHA512 6649901243600f82e481408ed95c2471de50c5266cfd42892a526225de0cb0f9469433d8d87d72f33d0d0c8d31f4f245eaa041fdb45f839433f995763c314f02

memory/2892-7848-0x00000196F89C0000-0x00000196F89EE000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 48229c5c0fb51556c79e867860c12e53
SHA1 d78e481c48060d5f21e41b245350461716c7c28d
SHA256 f9926b839cc2a92769a7af7e8a69764801d87f64071c974278e37d2b722dbf35
SHA512 4e6849018cff9ec5077ad7c6afb264d6ff3c9c88e37b853387c2e1142c625a73f1385f874c315e207438e28cc178d00f912320f542a23a73e57fc65752e1d61c

memory/6496-7996-0x0000000000800000-0x0000000000808000-memory.dmp

memory/7200-8027-0x0000000000F50000-0x000000000205E000-memory.dmp

C:\Program Files\ReasonLabs\EPP\elam\rsElam.sys

MD5 8129c96d6ebdaebbe771ee034555bf8f
SHA1 9b41fb541a273086d3eef0ba4149f88022efbaff
SHA256 8bcc210669bc5931a3a69fc63ed288cb74013a92c84ca0aba89e3f4e56e3ae51
SHA512 ccd92987da4bda7a0f6386308611afb7951395158fc6d10a0596b0a0db4a61df202120460e2383d2d2f34cbb4d4e33e4f2e091a717d2fc1859ed7f58db3b7a18

memory/3912-8243-0x00000284C7BC0000-0x00000284C7BEE000-memory.dmp

memory/3912-8257-0x00000284C7BC0000-0x00000284C7BEE000-memory.dmp

C:\Program Files\ReasonLabs\EPP\rsWSC.InstallLog

MD5 1264314190d1e81276dde796c5a3537c
SHA1 ab1c69efd9358b161ec31d7701d26c39ee708d57
SHA256 8341a3cae0acb500b9f494bdec870cb8eb8e915174370d41c57dcdae622342c5
SHA512 a3f36574dce70997943d93a8d5bebe1b44be7b4aae05ed5a791aee8c3aab908c2eca3275f7ce636a230a585d40896dc637be1fb597b10380d0c258afe4e720e9

memory/3912-8271-0x00000284C9790000-0x00000284C97A2000-memory.dmp

memory/3912-8273-0x00000284C97F0000-0x00000284C982C000-memory.dmp

C:\Program Files\ReasonLabs\EPP\rsWSC.InstallLog

MD5 43fbbd79c6a85b1dfb782c199ff1f0e7
SHA1 cad46a3de56cd064e32b79c07ced5abec6bc1543
SHA256 19537ccffeb8552c0d4a8e0f22a859b4465de1723d6db139c73c885c00bd03e0
SHA512 79b4f5dccd4f45d9b42623ebc7ee58f67a8386ce69e804f8f11441a04b941da9395aa791806bbc8b6ce9a9aa04127e93f6e720823445de9740a11a52370a92ea

memory/5264-8423-0x000002165D280000-0x000002165D5E6000-memory.dmp

memory/5264-8447-0x000002165CF10000-0x000002165D08C000-memory.dmp

memory/5264-8452-0x0000021644690000-0x00000216446B2000-memory.dmp

memory/5264-8451-0x0000021644620000-0x000002164463A000-memory.dmp

memory/4992-8544-0x000001D56A460000-0x000001D56A4BC000-memory.dmp

memory/4992-8547-0x000001D56C1A0000-0x000001D56C1C8000-memory.dmp

memory/4992-8552-0x000001D56CA60000-0x000001D56CABA000-memory.dmp

memory/4992-8570-0x000001D56A460000-0x000001D56A4BC000-memory.dmp

C:\Program Files\ReasonLabs\EPP\rsEngineSvc.InstallLog

MD5 2afb72ff4eb694325bc55e2b0b2d5592
SHA1 ba1d4f70eaa44ce0e1856b9b43487279286f76c9
SHA256 41fb029d215775c361d561b02c482c485cc8fd220e6b62762bff15fd5f3fb91e
SHA512 5b5179b5495195e9988e0b48767e8781812292c207f8ae0551167976c630398433e8cc04fdbf0a57ef6a256e95db8715a0b89104d3ca343173812b233f078b6e

memory/4992-8586-0x000001D56C9E0000-0x000001D56CA12000-memory.dmp

memory/4992-8595-0x000001D56D0E0000-0x000001D56D6F8000-memory.dmp

memory/4992-8647-0x000001D56D960000-0x000001D56DBBE000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4219ec36276171eaf5b66e32f621e48d
SHA1 8e4e6f989250114cc5a1c6b92163546157c920f4
SHA256 6730c62d6b0060dd64913bc85f5879c3b9b2232838eaffd50855ed48f1a8a95d
SHA512 9f7eb7723b657b56a56cced93d913840608cf4c417489a2d8a99af6541e88cbeadb701e1aaa4a5201ee8daca9025c1355406b0bd16e9a1e6416bd8141dbf0b45

memory/3636-8774-0x0000010EC8190000-0x0000010EC81C0000-memory.dmp

memory/3636-8780-0x0000010EE0960000-0x0000010EE0998000-memory.dmp

memory/3636-8781-0x0000010EE08A0000-0x0000010EE08C4000-memory.dmp

memory/8480-8985-0x000001D0DA640000-0x000001D0DA668000-memory.dmp

memory/3636-8989-0x0000010EE1230000-0x0000010EE14D4000-memory.dmp

memory/3636-9000-0x0000010EE08D0000-0x0000010EE08F8000-memory.dmp

memory/8480-9001-0x000001D0F4DD0000-0x000001D0F4F64000-memory.dmp

memory/3636-9009-0x0000010EE0BA0000-0x0000010EE0BFC000-memory.dmp

memory/3636-9024-0x0000010EE1010000-0x0000010EE1096000-memory.dmp

memory/3636-9025-0x0000010EE09E0000-0x0000010EE0A12000-memory.dmp

memory/8480-9036-0x000001D0DA640000-0x000001D0DA668000-memory.dmp

C:\Program Files\ReasonLabs\EDR\rsEDRSvc.InstallLog

MD5 1068bade1997666697dc1bd5b3481755
SHA1 4e530b9b09d01240d6800714640f45f8ec87a343
SHA256 3e9b9f8ed00c5197cb2c251eb0943013f58dca44e6219a1f9767d596b4aa2a51
SHA512 35dfd91771fd7930889ff466b45731404066c280c94494e1d51127cc60b342c638f333caa901429ad812e7ccee7530af15057e871ed5f1d3730454836337b329

C:\Program Files\ReasonLabs\EDR\InstallUtil.InstallLog

MD5 789f18acca221d7c91dcb6b0fb1f145f
SHA1 204cc55cd64b6b630746f0d71218ecd8d6ff84ce
SHA256 a5ff0b9a9832b3f5957c9290f83552174b201aeb636964e061273f3a2d502b63
SHA512 eae74f326f7d71a228cae02e4455557ad5ca81e1e28a186bbc4797075d5c79bcb91b5e605ad1d82f3d27e16d0cf172835112ffced2dc84d15281c0185fa4fa62

memory/3636-9133-0x0000010EE09A0000-0x0000010EE09CA000-memory.dmp

C:\Program Files\ReasonLabs\EDR\rsEDRSvc.InstallLog

MD5 6895e7ce1a11e92604b53b2f6503564e
SHA1 6a69c00679d2afdaf56fe50d50d6036ccb1e570f
SHA256 3c609771f2c736a7ce540fec633886378426f30f0ef4b51c20b57d46e201f177
SHA512 314d74972ef00635edfc82406b4514d7806e26cec36da9b617036df0e0c2448a9250b0239af33129e11a9a49455aab00407619ba56ea808b4539549fd86715a2

C:\Program Files\ReasonLabs\EDR\rsEDRSvc.InstallState

MD5 362ce475f5d1e84641bad999c16727a0
SHA1 6b613c73acb58d259c6379bd820cca6f785cc812
SHA256 1f78f1056761c6ebd8965ed2c06295bafa704b253aff56c492b93151ab642899
SHA512 7630e1629cf4abecd9d3ddea58227b232d5c775cb480967762a6a6466be872e1d57123b08a6179fe1cfbc09403117d0f81bc13724f259a1d25c1325f1eac645b

memory/3636-9137-0x0000010EE0FB0000-0x0000010EE0FD6000-memory.dmp

memory/3636-9138-0x0000010EE0FE0000-0x0000010EE100C000-memory.dmp

memory/6616-9273-0x000001CB794E0000-0x000001CB7950E000-memory.dmp

memory/6616-9270-0x000001CB79B10000-0x000001CB79E00000-memory.dmp

memory/3636-9285-0x0000010EE10E0000-0x0000010EE110E000-memory.dmp

memory/6616-9293-0x000001CB79550000-0x000001CB79588000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nswCC52.tmp\tmp\RAVEndPointProtection-installer.exe\assembly\dl3\6de1f56a\008c8f6e_1700da01\rsStubLib.dll

MD5 a16602aad0a611d228af718448ed7cbd
SHA1 ddd9b80306860ae0b126d3e834828091c3720ac5
SHA256 a1f4ba5bb347045d36dcaac3a917236b924c0341c7278f261109bf137dcef95a
SHA512 305a3790a231b4c93b8b4e189e18cb6a06d20b424fd6237d32183c91e2a5c1e863096f4d1b30b73ff15c4c60af269c4faaadaf42687101b1b219795abc70f511

memory/3636-9326-0x0000010EE1170000-0x0000010EE11CE000-memory.dmp

memory/3636-9328-0x0000010EE19A0000-0x0000010EE1D09000-memory.dmp

memory/3636-9332-0x0000010EE1110000-0x0000010EE115F000-memory.dmp

memory/3636-9441-0x0000010EE2270000-0x0000010EE24F6000-memory.dmp

memory/3636-9529-0x0000010EE1550000-0x0000010EE15B6000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nswCC51.tmp\System.dll

MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

memory/6616-9551-0x000001CB79960000-0x000001CB799BE000-memory.dmp

memory/6616-9572-0x000001CB79630000-0x000001CB79656000-memory.dmp

memory/6616-9571-0x000001CB799C0000-0x000001CB799FA000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\3mmcwwuu.exe

MD5 7b4df4e24457545b1ff42f4cec035263
SHA1 30a77cc37c2e448be188dde0544732ad882ede64
SHA256 59ff890b16157ea154f671e651847ca11acc03196b1c71c656e6e8276aa5c3cc
SHA512 40ed42dde14e18b7cbd3b49def74a95d76b60e8214835fe3b6f606b1121201cddbb347a991d4a87ebe56db758e65913a49df06fa0d7574f3bfc0c839ae83b355

memory/6616-9579-0x000001CB79A20000-0x000001CB79A36000-memory.dmp

memory/6616-9580-0x000001CB79A60000-0x000001CB79A6A000-memory.dmp

memory/2272-9620-0x000002462BAB0000-0x000002462BAF4000-memory.dmp

memory/6616-9621-0x000001CB7ADB0000-0x000001CB7ADB8000-memory.dmp

memory/6616-9622-0x000001CB7ADD0000-0x000001CB7ADDA000-memory.dmp

memory/6616-9695-0x000001CB7AE90000-0x000001CB7AEE0000-memory.dmp

memory/3636-9694-0x0000010EE1640000-0x0000010EE1674000-memory.dmp

memory/6616-9710-0x000001CB7B0B0000-0x000001CB7B0D2000-memory.dmp

memory/3636-9716-0x0000010EE1680000-0x0000010EE16E6000-memory.dmp

memory/3636-9741-0x0000010EE3780000-0x0000010EE3D24000-memory.dmp

memory/6616-10004-0x000001CB7C7B0000-0x000001CB7C7B8000-memory.dmp

C:\Program Files\ReasonLabs\VPN\ui\VPN.exe

MD5 4d7d8dc78eed50395016b872bb421fc4
SHA1 e546044133dfdc426fd4901e80cf0dea1d1d7ab7
SHA256 b20d4193fdf0fe9df463c9573791b9b8a79056812bb1bba2db1cf00dd2df4719
SHA512 6c0991c3902645a513bdee7288ad30c34e33fca69e2f2f45c07711f7b2fdc341336d6f07652e0d9e40fbac39c35940eda0715e19ef9dfa552a46e09e23f56fdf

C:\Program Files\ReasonLabs\VPN\rsEngine.Core.dll

MD5 96cbdd0c761ad32e9d5822743665fe27
SHA1 c0a914d4aa6729fb8206220f84695d2f8f3a82ce
SHA256 cc3f60b37fec578938ee12f11a6357c45e5a97bd3bccdeb8e5efb90b1649a50b
SHA512 4dde7e5fb64ee253e07a40aaf8cbc4ddaaeeeafc6aeb33e96bc76c8110f26e2c3809a47266cb7503cbc981c6cb895f3eaae8743d07d6434997684e8d6a3d8eb0

C:\Program Files\ReasonLabs\VPN\InstallerLib.dll

MD5 babb847fc7125748264243a0a5dd9158
SHA1 78430deab4dfd87b398d549baf8e94e8e0dd734e
SHA256 bd331dd781d8aed921b0be562ddec309400f0f4731d0fd0b0e8c33b0584650cd
SHA512 2a452da179298555c6f661cb0446a3ec2357a99281acae6f1dbe0cc883da0c2f4b1157affb31c12ec4f6f476075f3cac975ec6e3a29af46d2e9f4afbd09c8755

memory/2272-11082-0x0000024646600000-0x0000024646648000-memory.dmp

memory/2272-11599-0x0000024646650000-0x0000024646688000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsc97E0.tmp\tmp\RAVVPN-installer.exe\assembly\dl3\fafffd26\456d3168_b0a3da01\rsJSON.DLL

MD5 8528610b4650860d253ad1d5854597cb
SHA1 def3dc107616a2fe332cbd2bf5c8ce713e0e76a1
SHA256 727557ec407cadd21aa26353d04e6831a98d1fa52b8d37d48e422d3206f9a9c4
SHA512 dd4ff4b6d8bc37771416ceb8bd2f30d8d3d3f16ef85562e8485a847a356f3644d995942e9b1d3f9854c5b56993d9488e38f5175f3f430e032e4091d97d4d1f7d

memory/2272-11616-0x00000246466D0000-0x0000024646700000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsc97E0.tmp\tmp\RAVVPN-installer.exe\assembly\dl3\a3956736\c5bb3168_b0a3da01\rsLogger.DLL

MD5 148dc2ce0edbf59f10ca54ef105354c3
SHA1 153457a9247c98a50d08ca89fad177090249d358
SHA256 efe944c3ae3ad02011e6341aa9c2aab25fb8a17755ea2596058d70f8018122a4
SHA512 10630bd996e9526147b0e01b16279e96a6f1080a95317629ecb61b83f9ebee192c08201873ff5df2de82d977558b2eeb0e4808667083cd0f3bf9f195db4890d5

memory/2272-11647-0x0000024646730000-0x000002464675A000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsc97E0.tmp\tmp\RAVVPN-installer.exe\assembly\dl3\41e4b240\51ae2e68_b0a3da01\rsAtom.DLL

MD5 3ae6f007b30db9507cc775122f9fc1d7
SHA1 ada34eebb84a83964e2d484e8b447dca8214e8b7
SHA256 892a7ee985715c474a878f0f27f6832b9782d343533e68ae405cd3f20d303507
SHA512 5dd37e9f2ac9b2e03e0d3fd6861c5a7dcb71af232672083ac869fc7fae34ac1e1344bdfabe21c98b252edd8df641f041c95ea669dc4ebb495bf269d161b63e5f

C:\Program Files\ReasonLabs\VPN\rsEngine.config

MD5 04be4fc4d204aaad225849c5ab422a95
SHA1 37ad9bf6c1fb129e6a5e44ddbf12c277d5021c91
SHA256 6f8a17b8c96e6c748ebea988c26f6bcaad138d1fe99b9f828cd9ff13ae6a1446
SHA512 4e3455a4693646cdab43aef34e67dd785fa90048390003fa798a5bfcde118abda09d8688214cb973d7bbdd7c6aefc87201dceda989010b28c5fffc5da00dfc26

C:\Users\Admin\AppData\Local\Temp\nsc97E0.tmp\tmp\RAVVPN-installer.exe\assembly\dl3\758fb99c\a2e33168_b0a3da01\rsServiceController.DLL

MD5 8e10c436653b3354707e3e1d8f1d3ca0
SHA1 25027e364ff242cf39de1d93fad86967b9fe55d8
SHA256 2e55bb3a9cdef38134455aaa1ef71e69e1355197e2003432e4a86c0331b34e53
SHA512 9bd2a1ae49b2b3c0f47cfefd65499133072d50628fec7da4e86358c34cf45d1fdb436388b2dd2af0094a9b6f7a071fb8453cf291cf64733953412fdf2457d98e

memory/2272-11685-0x0000024646810000-0x000002464683E000-memory.dmp

memory/9128-11787-0x000001F818CB0000-0x000001F818CE8000-memory.dmp

memory/9128-11797-0x000001F81AA40000-0x000001F81AA94000-memory.dmp

memory/9128-11807-0x000001F81AA10000-0x000001F81AA3C000-memory.dmp

memory/9128-11820-0x000001F818CB0000-0x000001F818CE8000-memory.dmp

C:\Program Files\ReasonLabs\VPN\InstallUtil.InstallLog

MD5 b34182c090a30fe01d5c34f8da5b6f94
SHA1 86e92eeb33edd250cf34e7d407cdaae090bc8077
SHA256 657f5512ee52e5e84a34dd5726d8235591a74ac7e8e60a6a3940258d20f9df9d
SHA512 b416a728ab5fe7b5fa0d44f0fb39c00b205872f6716d13ab406cf0143f4e092ceb48a9997032c9e55e13cb6a618626890300f3bfd0550006907181df93fd7221

memory/9128-11835-0x000001F81AAE0000-0x000001F81AB18000-memory.dmp

C:\Program Files\ReasonLabs\VPN\rsVPNSvc.InstallLog

MD5 5f2d345efb0c3d39c0fde00cf8c78b55
SHA1 12acf8cc19178ce63ac8628d07c4ff4046b2264c
SHA256 bf5f767443e238cf7c314eae04b4466fb7e19601780791dd649b960765432e97
SHA512 d44b5f9859f4f34123f376254c7ad3ba8e0716973d340d0826520b6f5d391e0b4d2773cc165ef82c385c3922d8e56d2599a75e5dc2b92c10dad9d970dce2a18b

memory/9128-11836-0x000001F81AB20000-0x000001F81AB52000-memory.dmp

memory/9128-11840-0x000001F81AAA0000-0x000001F81AAC4000-memory.dmp

C:\Program Files\ReasonLabs\VPN\rsVPNSvc.InstallLog

MD5 db3e60d6fe6416cd77607c8b156de86d
SHA1 47a2051fda09c6df7c393d1a13ee4804c7cf2477
SHA256 d6cafeaaf75a3d2742cd28f8fc7045f2a703823cdc7acb116fa6df68361efccd
SHA512 aec90d563d8f54ac1dbb9e629a63d65f9df91eadc741e78ba22591ca3f47b7a5ff5a105af584d3a644280ff95074a066781e6a86e3eb7b7507a5532801eb52ee

memory/9128-11972-0x000001F834030000-0x000001F83423E000-memory.dmp

memory/3636-12010-0x0000010EE16F0000-0x0000010EE1732000-memory.dmp

memory/3636-12087-0x0000010EE3450000-0x0000010EE36D0000-memory.dmp

memory/3456-12113-0x00000255BDA20000-0x00000255BDA60000-memory.dmp

memory/3456-12114-0x00000255BDA60000-0x00000255BDAA0000-memory.dmp

memory/3456-12128-0x00000255BDAA0000-0x00000255BDAD4000-memory.dmp

memory/3456-12138-0x00000255BDAE0000-0x00000255BDB0C000-memory.dmp

memory/3456-12219-0x00000255BDB40000-0x00000255BDB64000-memory.dmp

memory/3636-12223-0x0000010EE1E50000-0x0000010EE1E80000-memory.dmp

memory/3636-12231-0x0000010EE1E80000-0x0000010EE1EA6000-memory.dmp

memory/3636-12230-0x0000010EE1510000-0x0000010EE1518000-memory.dmp

memory/3456-12232-0x00000255BDB70000-0x00000255BDB96000-memory.dmp

memory/3636-12245-0x0000010EE1EB0000-0x0000010EE1ED8000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e7666cf9-aa5f-444e-ad7a-2dfd6d17db79.tmp

MD5 b618809cb7ddc8d2f397ebb5df46dd67
SHA1 be3c80daceb20d905850bc6a699745489e0452b1
SHA256 533d1926481305e079c78721edd82b503c612151ad0fba069688ac5ca4e33511
SHA512 980650cb25d17f76f425106182c5c8a79f74ed9a9c1aecb55c1aefc9137dd331d4dc1f47a9048e20c33cc11be244b04039bbd43b4fbeb5d7fd9d758959f46cba

C:\ProgramData\ReasonLabs\EPP\SignaturesYF.dat.tmp

MD5 d13bddae18c3ee69e044ccf845e92116
SHA1 31129f1e8074a4259f38641d4f74f02ca980ec60
SHA256 1fac07374505f68520aa60852e3a3a656449fceacb7476df7414c73f394ad9e0
SHA512 70b2b752c2a61dcf52f0aadcd0ab0fdf4d06dc140aee6520a8c9d428379deb9fdcc101140c37029d2bac65a6cfcf5ed4216db45e4a162acbc7c8c8b666cd15dd

C:\ProgramData\ReasonLabs\EPP\SignaturesYFS.dat.tmp

MD5 10a8f2f82452e5aaf2484d7230ec5758
SHA1 1bf814ddace7c3915547c2085f14e361bbd91959
SHA256 97bffb5fc024494f5b4ad1e50fdb8fad37559c05e5d177107895de0a1741b50b
SHA512 6df8953699e8f5ccff900074fd302d5eb7cad9a55d257ac1ef2cb3b60ba1c54afe74aee62dc4b06b3f6edf14617c2d236749357c5e80c5a13d4f9afcb4efa097

C:\ProgramData\ReasonLabs\EPP\SignaturesYS.dat.tmp

MD5 afb68bc4ae0b7040878a0b0c2a5177de
SHA1 ed4cac2f19b504a8fe27ad05805dd03aa552654e
SHA256 76e6f11076cc48eb453abbdbd616c1c46f280d2b4c521c906adf12bb3129067b
SHA512 ebc4c1f2da977d359791859495f9e37b05491e47d39e88a001cb6f2b7b1836b1470b6904c026142c2b1b4fe835560017641d6810a7e8a5c89766e55dd26e8c43

C:\Users\Admin\AppData\Local\Temp\rp5vokfk.exe

MD5 3a71552f16fd8c2192db0f8972f0671b
SHA1 1c0c2f0c7b87eddf1f8d63e07298aac8270d206a
SHA256 f00d82efe7732b292b97befc844bf98c8c01e975efef7c9b0826a224dcd8fac6
SHA512 f558c87b92ab42345ef5ada85ffb8444e9265e643c0167250911802ac60afef25a678bef93a17b0476c56790c294bc0eb9cd783bafcacb6d220eef2c0df684f5

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Temp\nsh252B.tmp\System.ValueTuple.dll

MD5 29e6ae1a1af7fc943752a097ec59c59c
SHA1 6d5c910c0b9a3e0876e2e2bbbce9b663f9edc436
SHA256 cc9bf1feeab1d76221508d6cc98e8bdc1603d5c600c5ed09c108e31b8bd3a6a2
SHA512 cc6d55e5fd23c89d73ecbddfa92c102f47f8fb93f2f6a41d2e79708e6a8d7c13c1961dcd07810db3135d2f8ddcbf3535fb3ea3d1fc31c617ca9b10f6b867f9a5

C:\Users\Admin\AppData\Local\Temp\nsh252B.tmp\rsDatabase.dll

MD5 d9cd9c6486fa53d41949420d429c59f4
SHA1 784ac204d01b442eae48d732e2f8c901346bc310
SHA256 c82540979384cdcadf878a2bd5cbe70b79c279182e2896dbdf6999ba88a342c1
SHA512 b37e365b233727b8eb11eb0520091d2ecd631d43a5969eaeb9120ebd9bef68c224e1891dd3bac5ec51feb2aee6bec4b0736f90571b33f4af59e73ddee7d1e2ad

C:\Users\Admin\AppData\Local\Temp\nsh252B.tmp\rsTime.dll

MD5 f1e592a7636df187e89b2139922c609e
SHA1 301a6e257fefaa69e41c590785222f74fdb344f8
SHA256 13ca35c619e64a912b972eb89433087cb5b44e947b22a392972d99084f214041
SHA512 e5d79a08ea2df8d7df0ad94362fda692a9b91f6eda1e769bc20088ef3c0799aeabf7eb8bd64b4813716962175e6e178b803124dc11cc7c451b6da7f406f38815

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Code Cache\wasm\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Local Storage\leveldb\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Temp\nsh252B.tmp\System.Data.SQLite.dll

MD5 42e6e9081edd7a49c4103292725b68e2
SHA1 62f73c44ee1aba1f7684b684108fe3b0332e6e66
SHA256 788450452b0459c83e13da4dd32f6217bfb53a83bd5f04b539000b61d24fd049
SHA512 99eab89bf6297fda549c0b882c097cd4b59fd0595ff2d0c40d1767f66fa45172ca5b9693dbf650d7103353f1e1fb8e5259bbcde3dfa286dee098533a4a776e8b

C:\Users\Admin\AppData\Local\Temp\9e369a9f-90b8-432d-b051-cfe9b01955f8.tmp.ico

MD5 85d49a7f82ddbde5598829b755b84261
SHA1 c87770057fc05f5e3088f2d5c0f38f4aeae7d516
SHA256 b79838b15a988ea1aaaead3ba1353d54085cc76008489fb42f614e96f8b46aab
SHA512 cde6caf5817b5a47abdcf89448209b14b28b4e69f5968fa52dbca65a89ee8aebbd786c465ad0683a0fcb5613cd41649cf6c34f550a1b5e63c86ec1f250fd47a6

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\DawnCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\DawnCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Roaming\ReasonLabs\VPN\Partitions\plan-picker_2.15.1\GPUCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

C:\Users\Admin\AppData\Roaming\ReasonLabs\VPN\Partitions\plan-picker_2.15.1\GPUCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Roaming\ReasonLabs\VPN\Partitions\plan-picker_2.15.1\d03ad198-dac1-4019-bc1a-d1e415c1154c.tmp

MD5 d11dedf80b85d8d9be3fec6bb292f64b
SHA1 aab8783454819cd66ddf7871e887abdba138aef3
SHA256 8029940de92ae596278912bbbd6387d65f4e849d3c136287a1233f525d189c67
SHA512 6b7ec1ca5189124e0d136f561ca7f12a4653633e2d9452d290e658dfe545acf6600cc9496794757a43f95c91705e9549ef681d4cc9e035738b03a18bdc2e25f0

C:\Program Files\ReasonLabs\DNS\uninstall.ico

MD5 beae67e827c1c0edaa3c93af485bfcc5
SHA1 ccbbfabb2018cd3fa43ad03927bfb96c47536df1
SHA256 d47b3ddddc6aadd7d31c63f41c7a91c91e66cbeae4c02dac60a8e991112d70c5
SHA512 29b8d46c6f0c8ddb20cb90e0d7bd2f1a9d9970db9d9594f32b9997de708b0b1ae749ce043e73c77315e8801fd9ea239596e6b891ef4555535bac3fe00df04b92

C:\Users\Admin\AppData\Local\Temp\nsh252B.tmp\tmp\SaferWeb-installer.exe\assembly\dl3\9a0ce265\dd361b7f_b0a3da01\rsJSON.DLL

MD5 fc1389953c0615649a6dbd09ebfb5f4f
SHA1 dee3fd5cb018b18b5bdc58c4963d636cfde9b5cc
SHA256 cb817aa3c98f725c01ec58621415df56bb8c699aaed8665929800efb9593fcc0
SHA512 7f5a61dd1f621a539ed99b68da00552e0cda5ad24b61e7dbf223a3697e73e18970e263fda889c08c3c61252c844a49c54c4705e1f3232274cbe787a3dbd34542

C:\Users\Admin\AppData\Local\Temp\nsh252B.tmp\tmp\SaferWeb-installer.exe\assembly\dl3\1fc629ac\ad5d1b7f_b0a3da01\rsLogger.DLL

MD5 dbdd8bcc83aa68150bf39107907349ad
SHA1 6029e3c9964de440555c33776e211508d9138646
SHA256 c43fea57ecd078518639dc2446a857d0c2594e526b5e14ee111a9c95beddf61e
SHA512 508cb9b3834f7da9aa18b4eb48dd931b3526f7419463c1f0c5283b155efbe9c255213ae1074d0dbe2de5b2f89d0dba77f59b729490d47d940b5967969aaf1f19

C:\Users\Admin\AppData\Local\Temp\nsh252B.tmp\tmp\SaferWeb-installer.exe\assembly\dl3\a4a5473f\cf2c167f_b0a3da01\rsAtom.DLL

MD5 1b29492a6f717d23faaaa049a74e3d6e
SHA1 7d918a8379444f99092fe407d4ddf53f4e58feb5
SHA256 01c8197b9ca584e01e2532fad161c98b5bde7e90c33003c8d8a95128b68929c0
SHA512 25c07f3d66287ff0dfb9a358abb790cadbabe583d591c0976ea7f6d44e135be72605fa911cc4871b1bd26f17e13d366d2b78ce01e004263cbe0e6717f822c4e1

C:\Users\Admin\AppData\Local\Temp\nsh252B.tmp\tmp\SaferWeb-installer.exe\assembly\dl3\867c184a\ad5d1b7f_b0a3da01\rsServiceController.DLL

MD5 860ced15986dbdc0a45faf99543b32f8
SHA1 060f41386085062592aed9c856278096180208de
SHA256 6113bd5364af85fd4251e6fa416a190a7636ac300618af74876200f21249e58a
SHA512 d84a94673a8aa84f35efb1242e20775f6e099f860a8f1fe53ba8d3aebffd842499c7ac4d0088a4cded14bd45dad8534d824c5282668ca4a151ac28617334a823

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Partitions\plan-picker_5.29.2\Network\260fdd53-5b14-4367-8be1-d815958844c3.tmp

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Program Files\ReasonLabs\DNS\rsDNSSvc.InstallLog

MD5 6002495610dcf0b794670f59c4aa44c6
SHA1 f521313456e9d7cf8302b8235f7ccb1c2266758f
SHA256 982a41364a7567fe149d4d720749927b2295f1f617df3eba4f52a15c7a4829ad
SHA512 dfc2e0184436ffe8fb80a6e0a27378a8085c3aa096bbf0402a39fb766775624b3f1041845cf772d3647e4e4cde34a45500891a05642e52bae4a397bd4f323d67

C:\Program Files\ReasonLabs\DNS\rsDNSSvc.InstallLog

MD5 c80d4a697b5eb7632bc25265e35a4807
SHA1 9117401d6830908d82cbf154aa95976de0d31317
SHA256 afe1e50cc967c3bb284847a996181c22963c3c02db9559174e0a1e4ba503cce4
SHA512 8076b64e126d0a15f6cbde31cee3d6ebf570492e36a178fa581aaa50aa0c1e35f294fef135fa3a3462eedd6f1c4eaa49c373b98ee5a833e9f863fbe6495aa036

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b10cf6aea94092059598c4b7084e89d3
SHA1 b1f82ee88c5283d1d362ae5f62d2f43f52a611ca
SHA256 29354e6ffadded8c03974a5afeb183e49723d450c8a1774af490a0934a4e1b4f
SHA512 6d8c5180fdc0d8711e693ba6021fe553554cd44248cc7f61b0bc9e23da4c001364e4a0b9d86d5d740f9d75e1d2e99508bab2b7ed95de47267bbcc4f3a146b450

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\fonts\segoe-ui-bold.woff

MD5 52382539737f4e9913e4bf6b9966bee3
SHA1 d58d3dc5ff86fe8ff594134df53ea9b8074f6bc6
SHA256 d711a54cb4822ccf7926b1a95b7a43107fcfe8ef99a817e6906a1063657c7b28
SHA512 55f1767cfb589eca775f2849b975d8311295951f8e457be58de34983531961ce4fada3a856daed8d7cd712bd8b5fad53ceecf438949deaafb7d5cb87114ecb4d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\fonts\segoe-ui.woff

MD5 9a2931180d6b1dc7b33052657eef554b
SHA1 77b8f3cb5410c779206782a310990c19af2b02ca
SHA256 f424915a692bc5a458d6e7d9c99e4fe0cf5cb8883bd3516b01d4fef5da8d3663
SHA512 e839eb6fa727c6a604da142e7c823c5d8b7d8e33b3d19937da7bc1948c32893b08f0ace35c020e391ab0a9694b479b28282024c3518dac995eb87fd7aa18c631

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\fonts\noto-sans.woff

MD5 0a66f097fb9215e828bc0ada73d19e45
SHA1 f962197011fa900ec29b4bd14f624a3309854626
SHA256 8e5f3060067847d71c398a897b8f8aecadbacadec3324b41d6eec5b3014fed89
SHA512 060d79916429b617f950a86ef6783198ceb844f26e65b7d26fd667a37c577c5913ba4ef183d2ca0e7f46b3d6e13c128a5bf8c4ae7e0f543c53c051bf13a92fd4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\fonts\noto-sans-bold.woff

MD5 a65fc7725f81daa832e2ac5d4820c2b1
SHA1 a5602a3cb911cdb6ed538c22f451763d884092f0
SHA256 5adee3972bb1a6f74b582f79a5d3b4735e665c00b2e49938a4fb68755e56d9df
SHA512 f8b07d9d46733c8820cf2466a14203710f10ceba789f80fb700b00ff950e5c1f30fb035939911e4d1a4e7ab92f37ce8f6fb47f5d9ab58f5eb5031804e4ad96a9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\icons\icon-upgrade.png

MD5 8f0dbfccb36007d663b552bb84db01d5
SHA1 709b15810f26fe075d1037b7d90e196f4471d574
SHA256 07b43077658e1bbc63ac5c7431fd1940f74e8231a532a055de9e2fa0ae79b0be
SHA512 064962f997821ab44b523dc6a7524b6ff21352d90fb9e13281a72ad4d09d3431173d96c71277c92cae023f91d435700169113f14171446d52e65e48b1a44f719

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\icons\icon-threat.png

MD5 d7be3dbfb6c292dc440d4f72d073715e
SHA1 cae4a585577f6521e1931d09457694e57b9389b6
SHA256 cdd148cc2f8b3d7f008e2827367ef48a2be499ae34dbd22263854cbfeba903f9
SHA512 14a80c3602ec6a50b15baa23d74e894021a733eb14f541534ce51e1b847e4c25835591a6ec821deca093d384b849491866a340de832d6fb138e51330dc833f50

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\icons\icon-34.png

MD5 15b14e66c46e0a83449fea81f4d0e59c
SHA1 c3512dc47f25eb700e21a04f0925aa9d6996f08f
SHA256 10a9008f1b5e61a13f2fc225e9444f17a30036f76855826ff0f881de880db15e
SHA512 c0296a9252e9ea8336a28a73fdeb6d90a3fbd13cb5699f9b90e8b2e3858f041509e8886d056b402c5444e9b36a5950fdb8dc93dd46c15a79d84e1e579b5cd887

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\icons\icon-128.png

MD5 a3c4a97b3abf5c40532df4c73b6a0aed
SHA1 487bcc26a31f4545cada98e13532510784f3d9e4
SHA256 dc9ab4985526d23074e9cf2ee176e68dd7a5cd282c147df32733da083b7ce8a6
SHA512 71c82630413b7d9e8f2541bb036b1884c2e88ba5abee2e6abf79744951f1f2e65f7a3d82fb59c274ad7f02b3e49ee5fa2f20973410db3cc2ca92e6bb3dd42fbf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\images\no-scan-notify-icon.svg

MD5 85be03700bee78ba5dffd47c18f5f796
SHA1 49dd78d61b39a013b4759b8789fff70e720d48bd
SHA256 c289ac227906cd11b2178abc616f7c12ce72e70b089ab86043b857bf44f434f4
SHA512 8e440d8e060cd8c080ed45364e84e124b30ed72878e7563c7ffc5813aec7fd6487dfeac4e237674cdfd7f798da9d1b3e2c7b2a23ac888fa890176606c312eb93

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\images\logo_with_name.svg

MD5 7077be1629422619bbe5057dea2afcf6
SHA1 dccf730b9bd0ba9fb7c505f350aa2428457bc952
SHA256 0d28843ed45447345a2437b02ac99a6426de73143015d70bf2eb43ccd4fc75fa
SHA512 48da879c4223098c02814106279abcd6e5cd4a4379baf4cfeffa2fa7a961c4d8791ce10bb79a6643c1fc63d9b57e969f4fa2e5a2dc47e2ac60a1970b2f67f24f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\images\logo-blue.svg

MD5 acc37544364375fc67b44f027773c94f
SHA1 3ea1628a0c300ddafa885e6252e76cd18a952355
SHA256 8c05fe44d139e67155501cfa73c8ec7d683dc0fc42d17869eb8c2e28c8072d5f
SHA512 178a6bd3a043546175468957aa14dd81f2fa8928d6fcd787eb4a5bcc590557bd2a0cf376f5b0aedc7f5215337d5d9ce2dc8b9e4d6bfa66361a2cdabe815fb2d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\images\info.svg

MD5 59e2f9e145b1500bf20fe634eacdb14f
SHA1 8b30ef06bec1cbd4704e156f2a7fb01803d9cd8c
SHA256 69739b12cc11ac6e4b417061d3fb46f63cb070a756fa55463ef018ac684248a5
SHA512 fa125384590c831b85f4454a80ffa60fa9dc70d2c95ae4083e045a0cb8ba64a5bf7d3093e8a29fbf1c798ecf777e08824704d9f52523e2453451c8877042b9fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\images\crown.svg

MD5 0f77ada07f818277112ef9ea68d42851
SHA1 8dff529ff78faf8724400c3a99290794f5be411c
SHA256 c9899b5a377fb16bfd7e641092dd1d6d986ce80300d14b1eb8107d78029865e1
SHA512 ccf41cfb6b96d33ac64123482b0794632a8ddda983e03fe9ba012ae6920fa80205549e828619d95059aa2eda7379dfeb722e480b9a961b7bc57b6302a4fb15fd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\images\close-icon.svg

MD5 af135c5a307c0929934ab179965e9e53
SHA1 7798a6f73e13fa7226363db06ffded4644028524
SHA256 947325c209b02cbf029b7197985fbf55740d1b4f65242757889827699f646cc3
SHA512 e83c06bbf1a253235c681b9bb29244891b0d8449e809231e5adb2251bf0fad6a1ec8333e1d31803d5104d45c10e72621ab68d1dd4666e7d0b75c316c2c3f3b11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\images\breach-notify-icon.svg

MD5 e37aed44ee55c3e7be7f983a83449078
SHA1 070bd086accd4bd04146a32ece09252bcab4387a
SHA256 371c49b23b1602f3e3e79b98428641f5a316de0ed3ecb2eb73cf9d7e12a01cee
SHA512 3d45277cfe5644db11598c3a6665f7b6b0eab38eeceb5846129c43bed568b3b2fdcaae0175103eec840697caee659d0f998b66a6f3fbf2b5e5353fcc922ae6f1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\images\attention-icon.svg

MD5 42783644ebb2a199b3618c043b46f0fe
SHA1 c372cc134ab0970a6aaa15f529363aa3a5cb9aec
SHA256 ec38ff640365f6003f28fc3cc54d78c9883147610ca3c395edf4adcb2af91594
SHA512 7eb2e91b12eb1398d22391480574079f22a3928640be3f0d7c4e5230db5f2ef1c48977c1a7e6877f1f4e9a3a236c4410f875fb0f8006a312cb30189d6bb9e9d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\assets\images\arrow.svg

MD5 098267b50a118f33b7492712af4fa9d3
SHA1 5662445b9138d268cced9ab71670ea69506e52a5
SHA256 0ec47a14edaf377afdf77304c710ca0021201cb4d815c2883fb06b0253a0286b
SHA512 15300c0637c00480416ce5ad6191015df45686393bb3bd3c75243ae60a2572b1a4d2c5d411628aeb271b73880d4f091558f39c9a68800523a77ce9f5f86266eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\_metadata\generated_indexed_rulesets\_ruleset1

MD5 d7a63ccfe52eeb58faa0f0aa441ab878
SHA1 050ad45533af7c85a5369c48e0ce49634ed62d65
SHA256 3a68db4a7ef75fa420da4db273d62feadf29e863800b584f97460cc6584d1f56
SHA512 583c464b95d9abe2ca9504f44bc3030c0698913470cf7a3890f1f9ae79b2477989b27b4f16cc9e61a991ca1af8b507eb9d4b812d766d6f1f0d2200a32d41c80e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\_metadata\verified_contents.json

MD5 8f8eabb9959c83cfd07d7841cdcd10c5
SHA1 d449886a11b7ff45d77db5dae7d64527f603165b
SHA256 4cb304a1266975c2623e4d0ffe33122685da6ee7f6903b96b972606200ffb9a6
SHA512 a135df22dc5be56cc998313138be00b00634fb1bf294e2427bae369b8f19dfaa18b61398c906701b57cf8a59941ea9831319cd999b34b0f30a9484ee2e5cb699

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\rules.json

MD5 5736d36e31b7bc0d59788d30260281ea
SHA1 c2810c0335d1760d2ab337db349c362596df06be
SHA256 79ecc25acaf4d184958e339a9e48a1f0d187f82a676843dc6a40ff907e1853f3
SHA512 046686a280f60d50791ff8bd13989ba4bf058f402bc3d45c3688bc60e8ea91e6e44ec3ae8bf66f1e47b66b336ea8b0f70f20ff1279f6dfb377d662d633296c7e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\manifest.json

MD5 2b78987aa8cb637c48dbbe1fbb7beeaf
SHA1 2794737ad07bc86ca3b97e1128e510732b02efee
SHA256 b3a3eded16fb28ef7d5cbd8a4419ef8d31543fcea3e49d5a4334874317ab7468
SHA512 63728ecef75fcc63a4eabb1fe14411e82a95afe2a7373884b60bcabadb3fd8697c2946fc307b2d7a99ee31a4fa2117f7bd0b0eceb05924a94a2e652988417323

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\index.html

MD5 336fd61de62addda84cc9e5c283b7e67
SHA1 6b5985b920c40c61fb320f70be5f89233754699c
SHA256 6476c7b35152cbbe4906e94dada4e68faf052744cb0da74589679b86d49edd15
SHA512 2f641a563c6283ee3582c597c10be2336a18cf5e4a1e0c1a3c8b661e1ef49774145f15630b90cb5c1f9bd9439c6d64dc2bfc160763ae3d949eb0eca805bfbad6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\index.bundle.js

MD5 f1c97f2132c11fcb682bc12d314d1445
SHA1 244eeef80eb528f668b0d41bed6c4922ce15d065
SHA256 4549a2db13a3e2200752e94e2d7890f67b39f7d3cba1a6d00294d3f369ec8a69
SHA512 db0019e0798c00c01400fb0f8dbf456d4cb7379b4268bd79fe8d896f5b72c20dbbd1eee8c2b51c7cf9d490d4f2ce7f4dab0755a0b081d9d3c1eac338a9c260f5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\contentScript.bundle.js

MD5 883885fc1d090cbc70af72d2fc335a36
SHA1 fe0d38738d5c3b6700efcd668567bc0ec766e61d
SHA256 f401990b49aabdfc551a7479fea53e5231451e5afe2f0c73cface57d53b20998
SHA512 07d04b85f9cb0f56732d85e3c7f5043c1ae58379b30465f4b0d82f3d7ee29c97dba1f6349322f3254627b7770cbdbd462cbba086e5ec425170851df471e8fa8e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4368_1018656658\CRX_INSTALL\background.bundle.js

MD5 b6b00d4310fd23fa3e1d94af5bcdd4c2
SHA1 88e3dbc145cb0b65795508136c921bc77dc90f06
SHA256 abc1fab0200c29a94e1301a7eef2823640b82e521893bef0bc868272382a40f8
SHA512 251fd4b1c975e06c490e8dfadefa3207eba94d39bbf80ab9a565efb6d5124a99aebe4c03e041f2de6cdb34f45d9b252d132249526314abc997aa4f4d07f6420b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

MD5 2115f1067afc19d2045c7652f671712d
SHA1 db393a68560156cf9ffe1129a74f13f7e6a078a2
SHA256 4500506907e383f19ba0544ec94fa4d87b0aedeb5a0532b94709f8a425b31920
SHA512 8792a39cf7a47051b1f660fbec268cd94a0c2c0717143f7a15a83d897de48fbaedf0690a6178e5f6f7205d6780ea36072dcd307de66bd83eb61176eb6baedaaf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

MD5 fef291823f143f0b6ab87ee2a459746b
SHA1 6f670fb5615157e3b857c1af70e3c80449c021aa
SHA256 2ccc2b4c56b1bc0813719c2ded1ef59cff91e7aeb5d1f3a62058bb33772b24be
SHA512 cf28068cc1c1da29583c39d06f21ffa67f2b9a9c4a23e22cbfe98aacae6ddc3dde1f8dab7eaef371dc0a2230d21cc8fd41653fc5d812b14c389e07f5ef7fd5c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

MD5 c6334512044b038e1299c4edd3654bb7
SHA1 490f7cd5c7fdd875227c49344de31a2ca58f9335
SHA256 3724e559397032d8851ed76802b57fe479e56925d63e5d760aff536b9249df47
SHA512 b4c9d98a802525ee82dd8a0de6f07fc77c0243f7d001aca5d54b2ec71325119be45aa4e1ef5d1d035d6237ea9dcf2c976fa170550942c50b568326157d7bfd7e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

MD5 924dfba2b59731f1c700d79bc712b98d
SHA1 50b3e3f43f5a03488250f20f3efd751da25e6029
SHA256 80ec28061393b3f0c4d607a9a05c6c475cd898ad025c06439890b0a3291e60e1
SHA512 0a18372a9c6674cb2d4f7c8031dccc87aee1b2b0392e6b776aa630a85cc5563ff25719719fbd3171838e11eb6848ee3efd73a662477ce5342be08a066d248671

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

MD5 531b945c783da57a8e6169a179367ed2
SHA1 9b76921414abaf64e4f4f7d7eeeaee45090f8712
SHA256 f1f68df4fe7f8d1febbccd47b5b14d4d5a00b008e1d5a8ecf07f874c75d35cc9
SHA512 a21dac2a2d3d2f8694e55fb920ca9fd15b8fb3b58255e2729f7fb88e0cb7aa153f5e667237b4ad4a4d9a402c226fde539194bbbcd57e9229857d8e5278dd6041

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

MD5 f3dc9a2ae81a580a6378c5371082fc1d
SHA1 70f02e7dd9342dbc47583d11ad99c2e5f487c27d
SHA256 230189617bfed9ee9f2ac01d11855b9a784d0b6481d3411693db7e1c10ade132
SHA512 b1266043a310a5fe5834df6991537b61803ab14b737546a87dd422d2bce7277307973963a6cf4cac4a2a6030831611be9333f8ea4e56ec3d11b70313d30dc3d3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

MD5 10af61f5da70af50291cb1a6d159893c
SHA1 73cfb407c74c452a49f5023105f4638ffff6cf4c
SHA256 6de20b76ba67700793c9c659a9b9de37a7522e6775269974ab5c9d8e5ec8d89d
SHA512 7bfa0747e91726c24db109db24fa7510835a8db62b61b7d3e4219ffb50461ac4f4e6d4b47c92f1e58f5302d5e2449b9e1806c6e3eafaf32943adb7662cd4bac2

C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0E663C78920A8217B4CBE3D45E3E6236_75C1BD04B8F3DBF3882A89F51074A729

MD5 cb8f440aace270105aaed793e624e945
SHA1 27ae36ae32c2c38c6c353f326c94d771b4d552a0
SHA256 9b590079183833750e49b9a517218f62d9f92ad08ee84c17e71df1c090f1a001
SHA512 45d68a8c8d2541be202def7a456ce608053ae1090c2da2fa0f0941cd6a9bb2ac16503822a8c6d32bb775b019348ed112bdb0973cc3f44d290f6ce12ff24822bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

MD5 e9b35d1e7db792b279d14107f5d87ed9
SHA1 8af997d462164c6236fd8d1225e65ad224ca77d1
SHA256 d086a427c8bb08bca95b032da71dda45b3302944f37f0d1fde21d583d37c90f8
SHA512 435e4a3eac1ab8f0ca95e953dee1aff33319a11c317d60427d3e4d38e624e774ead9ef217db775bb51552276d52d0a377dcc55892866bbfe9799d44c3d3d3b91

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3936a2cb24cef5d2c877cc058c1cd2cd
SHA1 c9c0593a2d15330e208ff5e8aa4bc00ae382c348
SHA256 77f04e969e47e6b1f19d25f651e333568c59170c60c20bf0f6a1a61df9e468e8
SHA512 75f657cf1dde1ec16c15e82bdeef43518a99ccee799f47f020878d9f317ced703d8a76253d8dcde396a36cae42988453cefdf9be2b6f01423db7d64fd9c7d771

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f7ea393904d35bb3d360519fd0c0c686
SHA1 a6a820e838cf9e8d66161908b2d118a79924c91d
SHA256 b97550b8c8537d001e9910fced83f909b0c07b3e2e56c003ab843fc45acf89b3
SHA512 ea516ae877587041fc3d065f2c6392d87277afd720229ea60b8a81a1b0de6f954c52bc9e8e5d54b8d54be63b4b787aa8ce8ac1293610e967f00ccccbdd49d1d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3e2b9865d98742c93da6af822adfeb12
SHA1 883abe498e89fc046acef68dc397ff1b7f81dee2
SHA256 357e785eb8c82a281329809a541be8db2433f768fb8e40028fe66999810bbd95
SHA512 12de1ce3398f43fbb3d4f7e4ca2d23dad511b4e22778f6f415486e8046b8e91ef725d51a7412790d6675c39ecd8a34b4a5f5e0e425b4af613949a8b7dc59b6a1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bc19792ac44af608e4aafc3d8c4a2839
SHA1 fbda855b3858551fd37af1df08a3fad363cbe553
SHA256 8cd20d9b5e09657709b860f036b20a8b2398029142b0a1774a08f3d8df26b651
SHA512 b29fdab76911755828553030734869f85876524d248605773f2b077fcf61d1b06a225078a729bfdd2e1149a076e9ac9ef4a2b9b1f3165550097f233908375d67

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8198c1522b0f113fc2935a14f2acadc4
SHA1 a25276af446ae33c320e6e4e6a9fcdd6bc1b9770
SHA256 3dca1ab8972063a50bda879c45a6ad83c8dfcda4c282cb5d666927ac7d79d26b
SHA512 2ea431780a2001c3e014920d787eca7047aef528ceb137c540327555cff5ed1148eb574240a816554bce84348d42d0c4f1d7d57b4006cd0b9d31d53d070f80e3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e1329d6d98cf41a407e2cb5e3ef70f98
SHA1 9b954c3c450e74558cae9c4607631cf2c64901f7
SHA256 2db09069042faab5146d0084979c405984bf4e732a11c1678552bb1bb373c4f8
SHA512 415e34d35de94d13196570d174b4ebb1c02a115571b952d207bc32f3ede3543ebf5959c1b870f4cf446330b795d91a48d43880d471d424d2fbb6985355ff5153

C:\Users\Admin\AppData\Roaming\ReasonLabs\VPN\Network\Network Persistent State

MD5 d8d2c3f204a88ace3e2db8a944876020
SHA1 2ee4f71986a9b551d7b95074430bbfd632d22802
SHA256 710f9e2e69da3820bdf86f9b234d69c518a28c2de158172a6aa2eb41648dd534
SHA512 ad2df744696bfca6512b9e4237cf039251143f93adfa6e81d44bd9e0559209816db686e28fd3ed1f1b041183680bb019d21df139b3eaa4a4800a336d47386f57

C:\Users\Admin\AppData\Roaming\ReasonLabs\VPN\Partitions\plan-picker_2.15.1\Network\Network Persistent State

MD5 d393bc80091e630516e0b0f0e4d09c22
SHA1 47c4e4f15e0be14914ab6d312a4ae19db1a1668a
SHA256 d333988dc8070dab01b329d0c768e0fd0e3d341d5f92a17b2ff4d2d50aeb547a
SHA512 632862e61038833e95dead7a83ecaedbac584f75ce268e8af16d637d3d986866f1d395c9bb90932bad6fa7ab621214a257e627f1195ba149b37c6ea061fa48bb

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Network\Network Persistent State

MD5 6cfe10055599de73f0b37e05d69a9454
SHA1 718c057dc9f0d6288e5c28ef655d12d6b801fac6
SHA256 2c73a989c1ef2761f45b0a4ca3e50b69387e6dc71c10de66fc4228c5f232f900
SHA512 76b98c31d634db9c5760be82996c8b98ee67b97bc1402a0e5ea0989a270d74aedbdbdf16eadd4bfad9cccfa5ffdcb1df475bd9df9738342ddfcf3523922f2219

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Partitions\plan-picker_5.29.2\Network\Network Persistent State

MD5 9fd17f6a35daeac7919590dfa21f9b22
SHA1 d6c6d456f69587361aab4ee5ab38989175f578c5
SHA256 1edef53e487ea26620e65c234093ee6a9fb4858abf57013b12dcc9d09598d785
SHA512 4afa88a00b2393e007a8a9b58cce712576577a0690de9599578e67475cce9bfaed4a712657a3e3fc07782aea85b743feda262756f38ccb21ffe4e5cabb125d7c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000140

MD5 62fd1704573f0a1ae4c7db83f9f5b470
SHA1 09d03a37492cfd0580ed3b819386bbc4ff64d960
SHA256 3b14ad4d4df0e681fd5aba556473e39e52b31ab98f51dc3db4937bb641a6d667
SHA512 c8108393f8bb91c018ee06ad51d746a33e24ad9041d5cd84792e4c59fb55639b8042ed5c1a424b47263652182ceafe516d0b6adab147e33bbf261d6aee1d3f84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt~RFe5f746e.TMP

MD5 14fc49fbd46664ee60bdca7c914a2dc0
SHA1 1c762dbc359fba7fca73f786f04ceac7b8193709
SHA256 c5e5c446f0c93dd3bf436941e6de354c269443d205678016a9b2f571319c9799
SHA512 688ac29750764989df624b51474125dc5fa194b4e243c1ec479cb979eb4eb6db0ca1d585f9978089a7bdf76af99d91fe1ac54860b8583791a687600e502593e6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt

MD5 343859b4ad03856a60d076c8cd8f22c3
SHA1 7954a27de3329b4c5eefd4bdcb8450823881aad6
SHA256 8c79b653c087618aa7395d5e75198da7d3b04c08654c39e56b1027f9ef269c2f
SHA512 58014a4e7f2b4b0d446fae3570196b8fb95d0d1b70bdab0dd34a74d6c62cd8d7ca494a486f19c1a829988a3af83a08d401f18d1769ce1799a02ee09807234254

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_uk.norton.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e1342f6648ac238960472fc6982238b7
SHA1 86c62c6c0d8d759bf4c925e12fe4bb657f7adf45
SHA256 36753cca39c7df7c79ff9d4658c26c853b78e6d9321cf497cf139af5b9d92dfb
SHA512 4ccd2c221409dd167beccb8f7fa0c8e2a0f3ac69877eb2de6961438ac1b9ecdb3411f2a4d30f70436e4b602960cef80cd60f4a9195a72f76d9ba24212f6083cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 c1c228e7569fc1ca47ed9a2d7cda30e3
SHA1 5c4353044f81cb6dab362a481adaef7ea52240a6
SHA256 5523303934d89a3229c60eb3585bdc703fbe2570be91989af54e3dbed4697a41
SHA512 4d16e0428dfe7179156d0d2f60260af5cc9b223a86e56635284db41f18c8c93f4a998cc0be6d5958745cecf9ef07fdcd09b2175298315c1c09a2578b79f35d6a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e059361faf0ad75723641de7c40e3b52
SHA1 d57be7e7b840559294f81bdcccfe40a5ccba739e
SHA256 998139866171ebb84ba41cf9669a6329ddf89ebe16977e01e4afbfd47470f33b
SHA512 f5c88e358ea6111e270c7d6b66a8f8aece77405bcc46465de4eda5a0bc44edf01ddfac1dda9adbd523c5ac5ada7f6038de11271b426c9cbae07f82217c4f1ccc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 08a9713a4f8cca7f9e7e983be48e1552
SHA1 bbf8dd244ade3ecf115e04bbab7400ce8ebe970b
SHA256 e8b22cb636be21a03150ab13332d30d424725549a8c8f8cf07178474f0f2905d
SHA512 12873c0e1a34037a10907ef43a34d22166c3749e3efd2f95aa40f1afb169a5b41bb69aa881461eb03af9dfe68cc6880e31aaa81330c1eb7060b10dabd91bae73

C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt

MD5 90bddbfa03f8a8932441184ef6f11117
SHA1 8bb1a36efb23a05631b06e590114ea68d7053c5a
SHA256 2c2b7029fd8cbb88571d0b5cc876f538ab5c7dada9da9dffdbd144f69b730f83
SHA512 2a1d74d4913d6ebd69831322e49d1673bc8f770fc48f543ad52234f0c3c6823395a0bf723c42b68ef2f8b9e99cd51dad9227967387b42f7baa9fbddf1709ed54

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b22d5a48f7a330cc4142b12963501d9b
SHA1 dd3d831c5b36de8d37ca0bf06a072ab5419de5d4
SHA256 c91ace28adccb640e6d30fbe837a1a8fe46e8d61ba045b6189606eeac1398e0b
SHA512 b89c540670b8a326c254795e83b8d72cb34cf81f0b3dd2c030caf6d4cb09ee00ee050fe12a4e16d24b74ed030a145ff86b70cce1bbe8b0fd3370de10f383c033

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 b827e06620533567cb95dcb589588b97
SHA1 08d3a38c96b5904a6ae7383822cfaeddf9142c6b
SHA256 777372278516793a4805834bf1e48e59008d1ad21f3c08f4885cbb5c5a0db3a3
SHA512 305e3e74725f623df89bd787236dd6c41743d9cfb84cdb73a2cfe321db8738ceb3bb88b9386e306d795ac3728d8d6d74b58a8d408a24ecfd37351b0acbe16621

C:\Users\Admin\AppData\Roaming\ReasonLabs\DNS\Network\Network Persistent State

MD5 1ae146c50ad18b67546b0e9c19cd5df9
SHA1 3015f948a823f21607fd5932e35623491c2d3790
SHA256 e9267c50e4c566b7e751edc276735d79fd68d14f2694132c3f63f7f592df8540
SHA512 8f75a1957e69039941208c003e630f10c63042a7fe20e8ac151fa45fb11733d87ede7c0f5af8175538807a9d615c8398c38cbb258d92284c67566fbc9aad5659

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7fecda30-4189-45dd-9613-9b53c9561603.tmp

MD5 a6eac6182953f29141ad12c7a6888fd9
SHA1 aaf3525fc2ea315d5b98765ae62e00a01aba2cd1
SHA256 fa9b83ef6c9d476901108598df99ba71f1932e9b59140dc4bd53c3a04bd0ff21
SHA512 9b3b87ab04dec4e4f68a01053993c717442f79fa2b92727b6822a99fc74c25b05f334c54675ddfa6247de97247cc3b5f584a5ddee8dfb976dea94e3c5f85f591

C:\Users\Admin\AppData\Local\Programs\GiliSoft AI Community\skins\graphics\16x16_File.png

MD5 55747b2a6091286eae423c27860dcf7c
SHA1 bb0b2a0bbbadfac9896cb889ec93e1bf16f816dd
SHA256 de241bf7f38b17b404c69402fd5b7eb361c665ee5ffd19945a0d3ebedd656942
SHA512 fad1990ffbee2334299735d34878e28e2585fd466635bab85759c89f5f3c8dcf144b00a1e9abc5c3b91e46adb6b9d96cb89d89ed8d9e6550c6ee8db1018dd917

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 2310d18643b92487b56304c5a7fbf590
SHA1 5cbebcfd54ebee6bc95a85f283b95eb5358b8d75
SHA256 265400d8caaa01745369809024c6f177f7a63a804859c79d5204ae669bba47ea
SHA512 3a0128fe937eeab844d5ad9033569b1512c5f3e657f302014e6145242e9d8f5945be68b0d07084195dcb544d226cfdd193bc7ed4af91b9e3c52003c9539badfa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

MD5 b76a36f694fd69b229872393bd33b65c
SHA1 710ebf0e68bb65f2faa4356abe17f3d164e8b943
SHA256 1942ea4d2f0b066d0bbf102d25490e01e3843a204b2cc3cf2b721a7f7ddb9712
SHA512 8e4172f38b9b32658717de15c38f5b0c4dfcdbeb73424e6ba4f08981c868fdc240eb5776452f0a71395df2d0bc441f3f88ffaead5860fa672d992a94fb868a26

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9ea4b4644fe9a34a935860796d8594fa
SHA1 cb1932dd39af863e161febf08dc32e586b8fccdf
SHA256 cda8e975b2cfeeeca861f666d502a27618c2091197e32fa57638d55d9a34cd54
SHA512 07a13fb6b131902492f645efe1b73caef5a7747dc321bc033b2bdc2c0444e93942991e9344f20d6287746fa20ae4ae8779b63c5f2ab3d95146283269528ee4ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 cf989be758e8dab43e0a5bc0798c71e0
SHA1 97537516ffd3621ffdd0219ede2a0771a9d1e01d
SHA256 beeca69af7bea038faf8f688bf2f10fda22dee6d9d9429306d379a7a4be0c615
SHA512 f8a88edb6bcd029ad02cba25cae57fdf9bbc7fa17c26e7d03f09040eb0559bc27bd4db11025706190ae548363a1d3b3f95519b9740e562bb9531c4d51e3ca2b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 3cd0f2f60ab620c7be0c2c3dbf2cda97
SHA1 47fad82bfa9a32d578c0c84aed2840c55bd27bfb
SHA256 29a3b99e23b07099e1d2a3c0b4cff458a2eba2519f4654c26cf22d03f149e36b
SHA512 ef6e3bbd7e03be8e514936bcb0b5a59b4cf4e677ad24d6d2dfca8c1ec95f134ae37f2042d8bf9a0e343b68bff98a0fd748503f35d5e9d42cdaa1dc283dec89fb

C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77FBC64BA73370EC2F659BAD977FF2AD_9767A5403B067D539A02E2AD0F3C2C4A

MD5 5bfa51f3a417b98e7443eca90fc94703
SHA1 8c015d80b8a23f780bdd215dc842b0f5551f63bd
SHA256 bebe2853a3485d1c2e5c5be4249183e0ddaff9f87de71652371700a89d937128
SHA512 4cd03686254bb28754cbaa635ae1264723e2be80ce1dd0f78d1ab7aee72232f5b285f79e488e9c5c49ff343015bd07bb8433d6cee08ae3cea8c317303e3ac399

C:\Users\Admin\AppData\Local\Programs\Magic Inventor Factory Suite\skins\ash_inet\v3\img\menu\menu_16,1.ico

MD5 9b2c538f181be487694e414bf449c573
SHA1 c19c887d5d0e313cfd9411cc9bce5ed2f93e76e2
SHA256 63741d0229235f082509da28502af894dca2640577ceae618b289fbb0e5a6a4f
SHA512 bbe2e05961f7cf92e8ef6f70ca2db90d301a7cb22263b53fbcd3aec127b0e5a539fe159c7759c8928b58f7b7c31c9f8ba926ad7e3da15896e110d3ce5f71efc3

C:\Users\Admin\AppData\Local\Programs\Magic Inventor Factory Suite\skins\ash_inet\v3\img\menu\menu_13,1.png

MD5 4440fc54b2dc99ad935f93eb82f0a610
SHA1 c548ec4d47a043b2ce053479d1a5ca026cb10873
SHA256 fcd8e155dcf9876051c3220878c56c7cb1081bfcb77e396ea11ac9e03db03bd9
SHA512 ff3c0d3ffb40139544d8e1fc2a367b585410602774fe6ed42dcabce715eec2a1760fa910d9a9e4e3c4c3342a5e6b156a45ead8680bbad275af848bb8e962dbdc

C:\Users\Admin\AppData\Local\Programs\Magic Inventor Factory Suite\skins\ash_inet\v3\img\menu\menu_13,1.ico

MD5 68bc7228549981845d235bf4f98cd384
SHA1 a006dd97a6d9e8f279f7feb2bd4cc094e35fafa3
SHA256 82e70076db0ad6104d4ae9400aa89d7066783f88615bca86bb3f9d18f25b5f36
SHA512 a37bf0f26aaabfddd70dcf65f7d96dec8732df34f1184fb06f48b6176ea7aa6efa7d92a2eb7a9ba84f097e5f730345a665240f7cf901a2d2929b271f1f9f45f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 58f529a789191f18290e7f2405041272
SHA1 0af4b8e88a4945a0dd5201d4c40da7353ae3a659
SHA256 3fa541dc7f72618893780af4afe3983fa86bfc5d491acdc230f2bb3ff8dfd7e6
SHA512 025422bd136d494bbeefbecdf21fa2fa7c0b61dc43fe382fdef6b3e4302bf8bea2dfac0fd1e02c00c9bd9f1582ab28c6b8934caaa611484a70b84005ac5c0438

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt

MD5 580dc1a53e34a57ae8278765350fe56f
SHA1 9c3e2ede80dec9eca65856da8423a72db8f8e9b0
SHA256 0402f55c26bf19205706e3aac1cbb864ef06eb20729962ae063ae03f025a912f
SHA512 fc55d0e5c85f0bf00561d5b95f8a4c948c6b848f514cf93e76e4b310743a3e982119bfc94ca82e67fc760f9ad904843a0141b3a7df66096b2c8e4633bab4c9af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b050d6359ffff1f8048abe0837cf6a0d
SHA1 0b8a6c1325212dab545f61b45a28990d7a525d55
SHA256 d8ab959837db230215687060519e8b8e4f1b1b6e2119f6eb94385253dfdf58ff
SHA512 9d64e58ffb66b0f261d055b60d0b0f54f3673ec4d466e627b15d6274d90d78b38aa23ec4d15173864eb21431a8bc27a1132569fa6ab3ad8176099207a627ef24

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d1c5ac003236ceb93fbfbf1c968254b3
SHA1 c9ce822ea0ce13dff77f93cc844134ed6a5960e2
SHA256 1eea0db436746eea4dde078216993d312832c5ea0569e3068232954c2a408760
SHA512 2337504d8f70a025ad86c7ff1a91840ee1b9f464252ce330da5e325c35cc1dd3d6c702d81dc395749ccc3c58ca72236c1acbd7b5254ad7b0459ed5c668828f40

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1f0ea88d44957ffc7ad6c83bd145e1f4
SHA1 c6aeb662ea9e34ea3b16e36158805ff5cf43ff83
SHA256 064d33fd4187381684950c4a289087f94bec76b00e40643ecc352d782a141a42
SHA512 6b44b416795fce242303198c271832dfa17bc5018d95f1d97c2d10bf1941d0a4bc11b3125cafebeeb74546961b7bf266678e242136da17226b75f459f56f7ac3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 8e6cabf7a56f71e6b68ce26187ae2b24
SHA1 332c3b7c359f155e0b5134a07e6e64cf411d5038
SHA256 fb67f7f94e436f1da2d70336821e90faa78f16fce9d62de26865b4efd7febba0
SHA512 29af39dd29396fb99e8139dd32d167cd09795d3cf91a8dbc47cf2f10ae7c566d394cca87f197ba2762ff96b9dc4913d921e455cef71df52bf4b107c324edaee3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1d881ca406458993f8643dd544e349ef
SHA1 d0251fa265c74c1fe2ea4a146df6cbc536d90c3b
SHA256 709338c3e754d7876453927f9ac35859021e8f83a2b7a4a3e055ab31c99afb1c
SHA512 a971d8beec75914263d05be7753e9925802817e8c574d72e7d6fdabd211475323f755f28f294db39151804223d541cfdae45ff789b8d3af2f826ee7264b9d8e6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 1a39e5eb7e769d98b4428f402e75eb61
SHA1 1c490dd2f15c3ef06b16fcaa8fedccb5029f3701
SHA256 0082b13c11a76855996fe56aed568869ada6ed2df19c922f665791399f83d092
SHA512 ac2106ead3de8717d88b5b2d2cf6ec8cbeb982af91f597d670278d1d5edca733f90b40d059a0ddda081e92092e86064324fb9ee2b03dab3b81dba150c946701f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 db01ad36630339ca78214deb9b5dfc83
SHA1 d62067d9b8f2e1d1388436b44fe6c9b276334ae6
SHA256 8aae5e5aa95b5ec8c8e37a99d66102f5db5b1dc6bcf33ebb96390a26497771ce
SHA512 1b1248dbd298e0b38805bf10d55ad5a4a8fa9f8ce748f09177adaa39133ac07cbd23278bf249f21409cd285e2626052d90de4f2463da9f6f91178662e2e2c86a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

MD5 3051c1e179d84292d3f84a1a0a112c80
SHA1 c11a63236373abfe574f2935a0e7024688b71ccb
SHA256 992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3
SHA512 df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

MD5 68f0a51fa86985999964ee43de12cdd5
SHA1 bbfc7666be00c560b7394fa0b82b864237a99d8c
SHA256 f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f
SHA512 3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e89f65d585ed8c0811c65c3aa1fb180e
SHA1 fe0b40419639fe039675b811afbb941436301546
SHA256 c13db9b2d468fa904b41d376ff26d2c73dd29f6e7ab7ec02f367c6dc6b3e261b
SHA512 fb1749197ba96e93f3d0cfb106435e69eb13618408fda30df21b09cf9cc6417bc26005b8abe80bd447ba2c9f254bb51ac3a84ad9226c77cfbfef4b1c5c0db0bb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000fa

MD5 953a69f789c0f1f43ab87cbbb78d2613
SHA1 14a56a9ea8b2c9f9fa8cc64cdfa438b6e739181c
SHA256 88e2a75fc6d3f46ad4c48b5e23ba3229facdf36a71bc15e70f0b89161dad4ebb
SHA512 3ac5368f0c0917fe1ef0e4efa1aef46f986d4f1ba41231f95f0ebc7580671bc45ebde5ac0ec9c1105772d975c9df46696510dd65f6f50c7b71cbf9f90690f3a1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000101

MD5 9ec41a95a527b31ebc55f9bf8d113509
SHA1 fc92a7c1bf7aa3fc2a1b88d68b1a9841d4a5ecc1
SHA256 4089a5d5027d9cbeb66ad4ff2e1c29580424c2fe28b585907393cc8ef06e86b2
SHA512 95ebaa6222bd1586ea353793b4403fbd68baeec8a532404a3c644828576c939cf0468de19d75d8baa7f01a5fee2baa4280dddea332347f1f8cd00731f4b7133f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000102

MD5 008d0ae10f41631bb124d78799baf5bb
SHA1 cd5956db2574b3e718d8e87f3e4af79e2a3b5e0b
SHA256 a0aee1664677fce87357ff299c236f12803be313c1838a312d779ccf1ce0e590
SHA512 e4c1c5a8d88b6e0caa60b3c6ce02c05b0b2653c478a788d9d6c330d34439a5f91acecd67dc6baa4f40cf8f4cf21a684a13162562df8e2406cd06ac3145c6216e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000106

MD5 ebefb5a4b7753a36e45d54ab5331a771
SHA1 e7b2ed71f9ff7c673e97d1f8b24e068ccd95e7bd
SHA256 7a7df6c930705ab43fc7d6ae0d983f00231709f95a9d71e1a5302a4fd91a8cfe
SHA512 48ecb72583a7fe1ac1b6206057f7466a3fdde31ee84ac7d6dba8d181947d1f15fbb2de83017a6b1c6b93c96ae35cabf88bb65e464fed32021aa87af41a13c707

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00010b

MD5 1219177d3815725847eb1fa7775a1d5f
SHA1 8ab97b7e97ef4c58c34d62fd5d4b5bfb30a3df08
SHA256 8a76ac6ceea5b702a27bd36f729306fd2ec082d9273e692a822ec69a6b6e890d
SHA512 3ff456f93c5ec920d33f4ef8a9b200c117e0f8ec531f107ac08ad88184c57e2c0fc20a9b4244e7cdd86a4cc788a7fcf8710d426914ab5b10ebdbad0ca7e954df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000113

MD5 bf948b22881b1663b11d7afd24c2545b
SHA1 ef88ea05816e34f3dd1369d2e173f5e1db054278
SHA256 3f81c53c9c052b68f0fbea948153dd35d777c7073c396744a3722e5fe53226e2
SHA512 86e4512dbd64d59c3f2419c8d3fe787f02ba5aef57e6539eda7cce0ee6871a7ce6fedc6ec31202efcb20dff3212f95902e115c7b3aff44608163f273772e5234

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000114

MD5 4ae1a5ccd387503d2c9e7855172b89f4
SHA1 17f4a353132224a4640f0a13dd2e4781fd7e7920
SHA256 0e65471c761bd50aea9e6b54ddee55c3d8c20b46c0153662cfc56f9441c4ca2d
SHA512 2421021323ad35ba34a5e56ebf8f0cc0b0378da6a04cd5d1a230a8f52ca6fc4507087c1d724b44099c41f7ea9d7b7bab9bc2bd4909e8877b1e6eacf9dcfaa5c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000117

MD5 81b5ce9be4006be6dae38e785b511ecc
SHA1 94e042d5a241f1fcc7477c73331b9fda04ea98d3
SHA256 40829b8e2dfb4be7948d5280b00953733abd1a8e545d528883354bb6b11e1d8e
SHA512 e6859ca84d44d48b75c2e1abb73806a3f58fc2b852703f1a1cdbf681ba40c3d4e83870bb43c371f83204b6fe8a4d80e693cbf3f83c87b61760ba6ffabee2627b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000118

MD5 fd4e69761fac6ba888aeb1cc6118c50f
SHA1 cfe3a006ff4bf410e61208e2b8f423a4afc40498
SHA256 8c0886979b62d205ab8bfc4bd95498d003ef9a2d10969f79ddae23727c60dd82
SHA512 3b997c287125de674617cb74d90d681c9b74333174b56c379c3e314ba0d1de92d0d176d12802656eb445c62d5a15bab5c2c3fd54d68800fc138772121332f204

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000119

MD5 6fc5ac37b2f15c2fd15c57c9f8901831
SHA1 0bb76db03a7c479c1bbc0fe9fb73ae4d80fe0a56
SHA256 1f288a6e8688f0eca9c627fdcf478cca76aa9276762ba2ed928a25d08b152916
SHA512 11b1092e91029e72599b746eea5cfce3df87c10750fcb61dbe4c658c04f83f20cacfd4ecd4e4691041ea9f875d5c5415fdf2dc30b4bdac722bb13b044fe93f17

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000116

MD5 a93d15bb25db40af1c1064a1a1b9ef49
SHA1 b4eda56b0f22082252b92376d0003280caa5fad4
SHA256 d3448f7b8e4f90e35b8f7c4a3b585b096f262aad0f5098ac4edfb73f61c14260
SHA512 f984573ba2298a13745c2d3d9c098459329c3a67683c6d0bee1b3e77259202a43f95f3d31f472f7bca2365ba9b8d1431d41a9dd9f13b1ac3f5539d2c0c5317ab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000115

MD5 829dca755fabf0e153d9f9260901815f
SHA1 e68320a61506551e7ddf946746c34e761e2e3faf
SHA256 e65823c0201aa28460a9926f4062545d5ff14eb7987696096b3f472edcb263dc
SHA512 7472deab3b633fbfbf032babe6520f1081b7c51fed0701874e3fdd37cf19440da9dc594258e9c493dd2f05ad58641d606969974bfabc0d1f3f08877ccb3d20b6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00011c

MD5 9bfc767ca4314006689ce473f56957c0
SHA1 57c0ffd00434d5a7d7de89dd76ab91206ed08800
SHA256 2d580fcb389878f1de5a031c85f743a9134201213e75b06f8e4ba59186b68a6f
SHA512 bc5b3fde3e9adb97cf1ca007382bf82f4bc71aba617a9a74470e380e515378d8006924d35704cd445afeb447e5316469181f5ed925c754e2b93d015a8b328c49

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bef2b46a18fc4d1bbea48d83d69aed60
SHA1 63ad7fed6752f74366bdf53816a5d0a97ba1d496
SHA256 079693c6a240cf8f814b4364aa5ce4c631939953d66db8247292b4f1b5bc8649
SHA512 5f733454fd0e73f8c0fac2ec29b895c4b38edd16e7f984e8239efd26f491fe6567f381bce3848195da76d365fc837f4592b45cf99d003cccc8b84ba40abb030d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000fe

MD5 e6e260f516e4924afb6dccd078c49237
SHA1 dfd227b0ea4c445329dbf2adbb224bb0bd1fa0d1
SHA256 a6d74ddec36b586a5ebb0fa884635feb512e5b3a3a73dfceb930a2a6be4a20d5
SHA512 193d9ce12564c1821542fc041f4f862819a8a3757e0903e5419889071a57c43a9e7a3e7f8c718aefcd0c45d60565cb3aa9d97bb6bc3ac8512e99cb20b0091f5c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000fd

MD5 be87ba7e57b063801210196bd07e078b
SHA1 0384f8cff41132e206882fde73a6d530e4345b6b
SHA256 1c57b06c205d185ac807bb12d1962caf6c29bf331b852543bf2a6a80b2c341c8
SHA512 42dcebe61edc9fe52ee8c863ce36e00132ab2f3e85a48f98440055996e0446d16d4034b68c2f60f3f7ec242bd455354f406c8e26f0e1ee380a0df79163f0f7dd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000fb

MD5 164be23d7264175ad016a13a0bcaf957
SHA1 c35ce3510b46a12a5ad3f73edc9ac18eb1e8018c
SHA256 4bb1ef87d7b93cb72976e936bca7f607d5dee5517dfa739fcf403a2cd130f6d7
SHA512 7dcfeb8007467dec38af535e1240cbd15e951735720e66e5887d7c69404edc2b2737fce054a369726b46b5a2038bc296b136615dc981d56cad7a8d674cb88aba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ff

MD5 314fd6de476c090fb3a460db973c13ae
SHA1 73bac1af55a9e3a8c4bddcb6f47dd33fba2883b1
SHA256 470a893939ed6bfd9e81dfb23aae63d75bd5b46b0874bc3b887a4d73745230dc
SHA512 ae7b2d51f39722e16a704008bc36d3bab206998bfb504da25ff70e228eddcf94f2a47e183ef8a60d46ef143aad648f83a49c8b0c377c7692dc6a9a4b1e93f784

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000fc

MD5 60bbffe154f32000fc62a2f69ddf86e5
SHA1 2bdbb79b9f673cc0cc480f2fe43422bc5a9aeeb1
SHA256 4b0b29693eb602f23ada1e0ab452e07d16a3e137871810cca47afd9f9ccad62b
SHA512 5d6a6270edfca675f6eae1a85d33efaab262e2be7dbbf4e0cf5bb72aff7c6ed71307bb6ef64a944e127b17d12d7f830ed97a994862a5591cd7cd57046853294c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000100

MD5 9613249e347fb8c6080d52265ab84391
SHA1 5a505c09ee94af6e709ac4d7e67c66f1149f9b6d
SHA256 8d040aac44597212f97f4a2967e5f6659f4678d01c85bee4762e575661f82d05
SHA512 8cb9f3416c0703e31595b4f1b175110299b198d83be44671404cff458caeeeb749a3d66728f038a0b584111b8e14bc354b7db2e8ff6ec405bcc2ab391a73b10c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000103

MD5 e4945413184d65f94f64c59e9e43f686
SHA1 51bd126ccbd5e693c1441ffef1b3b51f6e46fe93
SHA256 4eb24dc9c5191b3973b26d0677b18e0181a7b64507dc3ea80f4b960d4e3bdbaf
SHA512 3bfadc9543769c21312a8e4542faf97cb41b7d1b2c6b5c8380d19adadb8a2c52d22a206479549ca4c929c02dfa08d6be6479860c5afb855dfed87ce3bc83b1b6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000104

MD5 b4470ee179a4eddbb46805af908179b7
SHA1 b261ee502f6ea6d00f16f5f504b6c80196791315
SHA256 3b07d11331f77d30696cbfb8f32deea6d640836475b0cb552538803acdc20c5f
SHA512 0ab09da443ebd063bad886e97c4acac9606ee8e6b3f96fceb19bad0f7f6eb1ab5a7f0985452a159f1f5baf162f24299ee28082092db587f4dfdc9b9f32bb2572

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000105

MD5 376f24bf1b83ee27257beb0235512fc4
SHA1 da427c76c2df1072e82ca726d6112d418fb95454
SHA256 aac40055a5812234bd6792432ce3cf84bf1004ec81c806374ec1c8947a9eb0b5
SHA512 1f55bfc1af830b2c99d20b8adcf5bd9ba8f7c3e0593681567029e87c1778ed4b03284b6ba8e3bf2c71a378522a06d099610d6a37f71d0c244ae66646a473bd74

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000107

MD5 fbb5185e91ca51ec15d59d9524ed242c
SHA1 ed58ff0d711bcf05e4f9d35a000fbc27be9f2aed
SHA256 c7605d715d771a53528de2f398c87c0af017fdd67c3944ee909a48ce1cfd2055
SHA512 0d8957646da75b8de9ef77b7181f5295608794bc49e3d7331455733ed5096f2a92e3427f2f2b286a48023bd282d310ca162c5eb9d3f6a54ef0de9ba8b8f92f8d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00010d

MD5 0be899fab3070c69b1e576bb685a7086
SHA1 25d792078d5c89bab25329834d3f559f4c769d07
SHA256 0ad796781ce215ed8bc7c87f83726d369103b255017ee33d6ef8e2204b9d7490
SHA512 b810f036a709784a7414dd6c34e3e026af995a70d6510580534dec78e12dcaf1cfdc32a9693c964ab1dee08a4bfd099b9bb2f4e588f0ed30cf4dee4452ca018d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000112

MD5 e0b6332f49714161447ee4e96fd0eef8
SHA1 ca162a539c36e4f2af86dfa431618cd7c979d7ad
SHA256 93b289bc1767fd9fb88b93dcc1023989d406c5fb79be49f351fbfc324e875e12
SHA512 547f0c90016e81c8d22672c91bf8a03587028b1d937e8fcf92398e1d0c06782a7e19b976f0ba8ff766df7ef242374d9ca7721040168bf9b4e59d316d347adc96

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00010e

MD5 f03605bb149a9f361da89ef3db06b6f3
SHA1 b2e4480b34fe96eca38268027c16c573ad1d5b19
SHA256 f6d42a493c1b84f36f4d7d08a7f8d6fab60f0582a6fee521457c3b18720c9641
SHA512 767ea419a38dec1e4222061b5cda5130e6149d194b36f023fae172e795fb2733355884813421a4ff44376079515bc5c411476127e83a13b88324a9a0d4bf2e97

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00010c

MD5 bae9ee6f38404ed97011ece8806029bc
SHA1 a5d1ec3d13b667e4ff172e4857197c402401aaaf
SHA256 92269531a729f71b989072ee93cd2e3a92a58387c1eda7de49ae94d3dbf9624f
SHA512 bbf41a7b7314a53659894c6ef5288a0548d88018a09395e54001d6d7a5e896146e10adef1b676754a1453efcf64bff5abbf770450f434b5060cb65d11d9231a1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000109

MD5 ae90c799b3d116e1ca694cde8ad91790
SHA1 2b63c5008c026344e1a4b6956670c551c5308e32
SHA256 a10b1c84adbf445db32b50be41805583948e37844589081fefae071e940aef7a
SHA512 c7aaf6050f0751761af89e274fbf17283dafb5061bbffd28e4cbaff49a8e263a062cc4227e6c8f557a2775b64a2791c77f355e01745a9e022dcd0f2f71255956

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000111

MD5 b7d67666791a53606efdddbef1f1f9fe
SHA1 f8ffb91fa4e1dd9f77fb6ee84815e36f08d3b2af
SHA256 6088fdcafc23144745b43968c6fbeb339fd8b0d0be20bbdacf690ae4147ee0ef
SHA512 667bf2c5b9d57beefd99a5077bc75b35413abedae5ac440f3ac837ddf95e08a56133f9a2ce1c41ddad748e05fe881bf629259c33ac8465a2e2b2c8bb7a261e65

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00010f

MD5 0696550978ea13d31ed1beb375dd8fb8
SHA1 5f34673d5e1b019ab13de31b27d27cafd760b63b
SHA256 afa48264dfe6a552fd98e3d4980a9cf400ac38410d70220486c17a963356e5b9
SHA512 a393039cff49792617da6851d98968fc4001c0fe20bf2df4e5c685e04f98fb2f7ea6f562803b0063242096f4d71cf137a08caf23a01b7b13d94b784205c724cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 969b78aac2efa5039ab978c99f07f18d
SHA1 3129211f13a50c9431fb2ed64664793c9336280d
SHA256 1d353f0b86b6f7e4460942566389ef1987b9558d09d2392134697e6b81d86ae5
SHA512 b5e5851772092df7c5c56bcc4bb9319e59398ecb508dc6ed770bb10653cacb18bfa10fea66806aca1953f708d214896dab6e9669f9a6f9473c4a28b303356e23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00012e

MD5 ffa065921211d2eb9ad6f5f973ec5b55
SHA1 1e1ee43801a43cdeb4896c2a590741e19d0bdeb8
SHA256 95505c68116154b7a13efe4f80e5f26d44181fca34065124fd7700426a23e9b9
SHA512 3c80cb34cd2837c46df90482dca7385c0423ecec756418d64aa70a8122b4d40c59582917dd88ad8edff9340ba9d94c9e7a63be704ae42a56978307a181805ad7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8d7156ed20c0678859db9bb5d554e04a
SHA1 e5ddaec18a7be47c20c52d6c480be42414e54de2
SHA256 a24b9f594148ebdc3bbf9914df90aa9183380c0150b08b983d34505a29e09e6a
SHA512 7d7a34b1397da6d7076ae5662c7b0c5fc3183d9b85b3fa19ba2db0808881d2de7e26d8351351b1a572ca65c18e77642f84d38f19a43a304d73962313f507ebe4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00011a

MD5 6ed920e0f3a6447c3e5d86c552438db3
SHA1 4bd9cd1b552e1879e596c57e47b3813bd95dcafc
SHA256 e513c909d83dcbbbb9ba1b54f1cc8e6d6044ed212d04583d1629afef46eacad6
SHA512 ccd98e921f910e736fa59855a4aae6b170fed4fe359fc3790f92608b5f0ec03f2e92243fad55f51c8cb301003a4115d37c1ec4b7652e4109258b156744f3b1cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_0

MD5 9b88fa4237b0422bec98246bb4c5a16e
SHA1 3e80b45f1718da0237cc33fd83a62ae663a2ad38
SHA256 f7217f0bdff10790a9fcdfca92dcbf88d36a4b094949ae19447d9a49ede4fde2
SHA512 140047baf21f528c96a32e1a001eab9d3e5a87ef98126719f27715ab5a70709b5b38a26106954a0f3b0faf1ba55773828f6b9308cea0d112ae5c023a308291f1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\013888a1cda32b90_0

MD5 011094ce6f6c9f702e432525e4c55a3d
SHA1 b9bf0ea1d2077561ef6702319fb96dbc4e850ac9
SHA256 b413f9970437c17437257927605d22adc3e67ec97672e0b8ad63fd2a11e8c282
SHA512 0080e966bc69cf24e43d629acab1cfc1d22ee1bc77a607211019d5faf6ec8d974af62f70eb579fb5faf5faee07bd14f2fe601677f94511275e6a9d32abe9ac70

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_0

MD5 ee8d6a2ade1b4fcc37799e697f0f8f46
SHA1 b9eea88ef66ee39f22c34f20ae2a3137288f1f49
SHA256 b709839323c78b8afb020f60283c3c46ea963d7cdb3954aeb0aad2a47a2686a8
SHA512 2af8accaf7f024ee9f1e5c17d2df4995fe6839f253a3de67b8b8492e5512b7096ad71985fe99f0c821ed8181c497ef14dc1668b470e93cdc4704a6a4c81ad3cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0

MD5 0310dcda7fb70a2186049e3aa0af37ae
SHA1 58a165533843b5ebd11300a6079856fcbab2ac43
SHA256 c40028b2bb4b7b25190536709ada3bbd0c864a33d3d698fb0601fbd80bfeb17a
SHA512 478a5e22fd61e0227f9ebb91d32675156c7ed8ee0e201ecf49385ffaec411ad923ad8bda1fd3a8a1bd2af07fff87cd0bc1a6b153d2201f2039fe3dbfb5c3ffad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0

MD5 bd2c3e978d2e35a46959181ee1ff7d27
SHA1 2a0e9e5ee6da3b7e5252ad2199dd71228de5c419
SHA256 d769aaeaef763533d466fbefc8405e652cff00eeaef9afc0af1907fed2c7311c
SHA512 7fa1dcb1206f1730088e9256e120694bb9773f70aed3f9e6e17623edb8eefce55c864476ba9391a73e51f7d6fda64f3b322eee077e8e59eaf79fd7e50c03d45b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0

MD5 2499b60c5a8e0919bb9f3dfcbd7ea0c9
SHA1 05a35307f31df8fb3b8fef92b013219de6dc2402
SHA256 42440b30b12292cd9842cf60b28cdeccc33479474c7eae41bebc8f6e35132663
SHA512 3e1db547faf37eddfefce87043b81492f58abafdd05118085a1d533f169825420c131bd7b8aabe57b452163a74f17a3fe3679d396656af1cc5c757aaee5b75e8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a172a64babf1bf817f1eb49f83cec664
SHA1 2a3639c59745a00fdf366d673d263ce235623724
SHA256 1fab9a5d3b6d46cccc26d523c9a07e27138bf60394d71e6794c93272e85e9b83
SHA512 13f05cca02adb42a34901295c45d068130e4bf2a9a6b67ee416d6fe7f9fe84f35264cb3d182967f1b167e30e7ef10e7e4ae1635b96a39902a76d1f4e9f4cdb65

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f10f61b35a60e6f2eebec2c48919cb3d
SHA1 b3b9cea7fab759ff1ff8a6aa43f182c004267bc1
SHA256 2a4e8008d08de6b7012909f25454b7dedb210239a40015051ef75c90f551ad28
SHA512 e357bf12853a96f90645984057be9e0643988e5828d64d9c89b44045183b5f35d19acd6f591784adc938d6726bacc250465a1b15269c078c3ac0c376712625e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0121cd453316fa1a3969272f39f4f92d
SHA1 2fc4909917545ec15ddb251a0b0a60b14a5d23ca
SHA256 69b1cec15cd63c1c3dce9f01e6e2cd3c35bf5352724af7825d399711c91189cf
SHA512 130302dd34e09eeff2e5d8f51ce62e4615fcff891a9125446f76f59e10253f64a9a372fe12705705337d4a02c5f273b211164018f4a9a8095b7fa046e2cb203d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4278e0ef121a48b41f193c8cbd2d8a91
SHA1 a04b6eb2ad37ab16bb675e45445f684719630f9b
SHA256 7a116455bec7c3efe3d4dce70545f9d0b8d2e46c375c8db98effc24ef0e52ffa
SHA512 b6bbbb8d4a33a822e9a8c0c4907489aaf125dbf2192f770773fca5290c8be9c961f273fe986b3c8d8d89e03e18b1ec5985053840834c6c0adb8f034f015698b0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 e4924cb3c150843c2933a61ac1c9a62b
SHA1 869445cd5746214be22e5ce62503acdf51b9b064
SHA256 7168a60eaf78529bbb873e39323f19efd99207eee46a9ceb7dfbca0cba4f0346
SHA512 a8f9af595669f26f4ad2271eaf01691a701e7cc169c7b3cfeb531464c2cfeef9477840111c3a39464e37db8ac024a72b4d647eb9772909d360ba810cfe85821a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6b3adf4309b203f4a58b166738157eb2
SHA1 d133ec8ead41e0f92dc485023f2786a2bb57cbca
SHA256 0885627265753e08c0bd92d88216906e7567bc769f79ca34bb9c7712aa5ad655
SHA512 4cd0919b530ef3ff8eb07e7c4734d7db66c84b1db42e69acbee2552c7892f06cd56a74f6350ac439cddcc274f1fd8fcf5c61cce3d0ae465cc0f327b9c2fd1be7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 41338c81fcd948971cb379ed21005945
SHA1 e4196597c6a505865f705a003818b617c525c63b
SHA256 39f06b83d4dc85575ac9bc715ca8d0611adc54e84455f3a27392611f240fcadd
SHA512 ff20271ac10d91b0e01bf147169b6dcb7de2de354e714b6189defaa688a5aeb500593cb9d13a84dfe5ce44938838a2c210fb9f42c63a6880a1a9de177fbfd0c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6a9ca22212444fe8207a4e82f4f38a4c
SHA1 144353f3003d49309d46071df4a2fc83f5f93867
SHA256 a5840f0b62dc084e73c805c478ac07e26ddea60477641ec449ada0595dec731f
SHA512 ef680283b5d5532263129ce3f9f64b710fa02f83e368a06cd54194d35dfe643c2830f89728130d787da1afe5ab7bd0c448bd470ce4b128515c3f9adf909a27ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\695c42f61090a800_0

MD5 d7dfb5500277163237efbe2a1489e875
SHA1 72f6c3388fafb22d401a0d0f3932a130ab2404d5
SHA256 ec72f5f907ea7eaf363656c45e2e654921da3fb99cc84e049be4f03b1cdc5e23
SHA512 dccbe6915556146d696e4894032f18be4159f43f2a66e3dcac151d1baa00fa65d8a67fb90da71077bbf9674612b665586eecbb9ce7f9b01fdb858555e960ab1f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af48edbd3578ee3b_0

MD5 163767f9f7f2e9a4af9efb5000c11683
SHA1 fee96ac7182631fccc18dd9766443a9ebaf67b5b
SHA256 03dff0afb656553fda1a34a8b9e96cb2d013c73a557bb19b65edc291af9ca7eb
SHA512 42c3c50fb4be8e281e4fc706dbaaa4eed40632f4c05c41cd039a9e5d3748b6d19551b2665b715eeef17c20397304f777d65be21a1b2796df615e947d38e8fce9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f89251fac2b69325_0

MD5 473dbdf9ebba375b23e5fc93d68d12d1
SHA1 549fefb5dae7c8762a04b746ed990f51f1958254
SHA256 d5026b543a97dea8a1950d5832e3fa521b9f0ed94024157bdbf94b7a7e54a168
SHA512 c7c83d21ea718b1e2fe0dd612f4075de9d7de426a301dd96c201b9cdcfc993b48f947d9ef38281d93a16e8d00483e6905d723e73067548fb1e98e939535d0f8f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ed26cd2dcd561670_0

MD5 1ed792b4d6d4438c4a091d6a9ed6a343
SHA1 bb6db060b2ab3de1309a24563473b5a9f4479678
SHA256 2c0b427e2823e92b5481bdc37e068bb389c0b382a1994ed60b2539a5fad96ab4
SHA512 d4eb5b5e8f513ed9a67bbd7b59c00918c23a202a9224b89b302148c730e9c96e7be91804738bb397602c7eaf076627f1556f98d9f3562533d1ed736fdc34d09b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

MD5 70add45707241e67d5894758cc6fb363
SHA1 9c1f89094d8e5d3a2df7634b612c4fd46fcbb16b
SHA256 926932a54ba2bea6544fa9a209ee7f94970e3a2594d0c4dcdc8604aef1f1ac12
SHA512 fc8ef6f60f7a9eac2f149c2ccb57e28a83e30b11fcb5aff36a0eeb114242cdfc4eb6e2c2333fc1fdffd6bb197ce12dfba343c2085244f02102f44f23b20bb6d8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06450eb6a7b09545_0

MD5 15248a4591674ed2ff9ff90d5e82ea4e
SHA1 a408aa9373af5132d8a037c76c193b9097bfe638
SHA256 e44737f49e6d5e7432a136a2cffd0d984a4022700716e4521d3bb9c37a5906ef
SHA512 907f072089a11e50b1bec13086d2990d2d505f5ef96bcbbf797bac6e937006059dc7797e07d999b553000a51f6c840ac29d46f41a0124d87c125a6abfacaebdf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2e4bbad99a372cc_0

MD5 a0687e2aeaa07a037f29c31dd9daaab6
SHA1 c08c2954d3ed429c96c2ad701256db78fa8715c8
SHA256 14b90591160aa2900e80a1b41a4e0dab9ce8df19199c410880300079fdd44f55
SHA512 436772e6c8a6c59802b0db51e9cd18f9ca5b236980eb300c9afab53d2b24cc1a2f03547da44fa856cf4554bfd66e7b864ddc52b05610c8d95fd5860a7da9d4e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\14de625fe39027b4_0

MD5 a1d769317914539bc25d1e00cb43406a
SHA1 285b6a6cf9dd2b93898d8a86543a3d33ea213fb8
SHA256 b0681a63e91c52e1e5cf7c987263a2b887e52f149826590191871196e90ee29a
SHA512 7172b150fb934da20dabbbd80e46752a7b803623eed9eaf56cfccba16d32002c019e6df01e3a7c18b2b6fca005e676b1851cbe4e5b39174a54b7ff72eee6e462

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d00019f29c31fea5_0

MD5 35f14294498fc00b5ed4c7c27ee0e636
SHA1 312c07cbf6b436de8273c9a97d856b834fed3496
SHA256 e3cc2fbd2b7af3fd04793306152de63bc83117d877ee09668390f08b2b3bcdbc
SHA512 6c3bea9d3b86af23d24cf7c0615faf0206ef0500a1d18f87f4047c23e7dc1c80e91171ad1c3eaae543e57d60ed6f85cdcd7055f275fcf055a85bb66b28a4334e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\81764cdb356c9506_0

MD5 3b1c0c72881ea30415fe5c9915b2250c
SHA1 8d9671594efcce81e335be0d91973525e7255f15
SHA256 58045d0a29bb686a73f54c03ed339f1f8afa881e3f819b5d7521ea6a61049d54
SHA512 bee3995abfe6c14b95f321658be111e1cfb800b9947c41b4d55ba3e041fcf7f5230741c8d01fb814950dd7235bd8bfcc3dff4a65d6984a471786b7f23a560db7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e5987d08f7b6e11_0

MD5 c9f5088d7f28071011365f41d1062eee
SHA1 7a17a0d889c390d1b039aad21240ea393186240b
SHA256 ab3b2ad554cec341d31e6332dc913c0b39acf72790ee7f2e19079a5212dd0308
SHA512 e1844a38287620938fa948309271ebb648c12fefbbb2fe6efb59a3cfc605720d6e1680409130f88b2b88c4e83f5e29309de59fd166c3d1ecc9af2f860fac8758

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\48b1105b4c2874b5_0

MD5 0a65d42d6e9bb5fe86cf83c7cc9a74fe
SHA1 d68acc8c888209274c8e02cf81cad39144deae54
SHA256 f809b4265494b93e85a26cd4a1dabcdb0aad8e5890df48096c8f64c4019c13e7
SHA512 827407d2f958992f7b08a2c5799c9e1bf742bfd61132ffe10cecfff1bda3695debdc1ad3761fb2287683c82fe02452ed34f91b566f27c3cf9e6f5ec157887c9a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\02735674612cbc52_0

MD5 5d9393ff0e1fcb6182ed607497cd7e32
SHA1 7f8c55b6039e1695f0a1877ed053d1ff19b232e1
SHA256 3ff11329ff456b0d4a47405ce1021d576fd33a9f128800d5ef4ece22d53ac326
SHA512 ab40678fe545540a92164e7441be38fe7caf7218a82dc18b2545a2d4390108ef9633b27b821be4668ae4714bb5900a3df5160c0b0461d20cf554e114cb0bc87d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0503effc8bf0d7f8_0

MD5 16b61cdbb39772c27ff9b9e8c8aab83a
SHA1 45e66580fe702a91652dc650fd2f231d00c15156
SHA256 9d665d079bc5c43c854ba00ff1dcd28d98d14b573584b7ef165230d590a6801a
SHA512 e3a23ec4f7cddc9852470c27aecc65720ad772f6b3bfb98d789c2440e8cbcdf903449dc612f824382814040a67df371830c4909f510df333672866b0bc2617a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af2cfcaf6d9b18bc_0

MD5 26393865d0fc8eeba607d2220044329e
SHA1 bc225f59c8fdd2dd893aa1f5f16707c74ea38e5a
SHA256 2b778fb691aad187cf4bf9b625c953f846c0437743dbcdbdf5389069c4d71141
SHA512 07627eaa325e3a7e53176611622c056fc5b0dd38959b02daa729d44baad84fb87d82242f07c5c85976b5b021e8029a2343ceee9b35f2e3fb1b4ebbf55f7758fb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0001a7

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5cb92698b65c481c190b22def4058736
SHA1 24ed508f97ab39ba051d4477d0f81960670722d3
SHA256 8910c581f839387bbc64504bdb29d01c58d0c0269089b2b8a23722147c47ec06
SHA512 56003bfade8cbffa160dbf9120c175883c56d7168bc2ffe45f2ed3d52e46aa66eded1d0db0c9866e215b1cb9b9588ac37f20eb3b9adf0f2bfa63201f4e174945

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d46e04dcff4aa86cc708e843a2b95c21
SHA1 9d0c6038c6690fc46226f084ce70113bf3b603a9
SHA256 cbbe72fdd65e115e235726fb5ef7e377966432ff3dfa69e79d6694e604530262
SHA512 064f8f92bddda3add1e23aeb7e6499f2cdcdb35385865bc31dc5bdf0dea116864b385704be368c9691c5e8589e7b8ace6573fef35afd024557d519bc7f6c8bf2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9f331e6ed2e2939e0fcb01d993575723
SHA1 ed0174e39d10adf6ea5ef218f018fb09ce7ff6f3
SHA256 b9342cf3aeeafde663c995807dcbc06f8f34c8f930087f1c9e34b961c103a46b
SHA512 66dc4805d51d9a1e6cae59257b8babe5bdbbdd511b91f5eb58f5ac2b2c34b990dc9aff2baefce5c5742e72ca021c1ce6b5f28e813df4bb815bd7261681e97523

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 ec0bc1c3a0ca933d0ab5a7665b1e9fd0
SHA1 00862ba1bffa3649986c664c9a18ca8b69ae700f
SHA256 82a2f2365705ddca5b7fd278f8afc0500e31884cdf794d0de0c66154e5714554
SHA512 42cf11a14c61bca257fdeca28a6540944feb2003d3d622e7d152af7ae975096660d75b3960503156922bd54d48b90c00e5b9ba46b589bc5324e067b385fe4ee7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c458a78cc1dc23f5_0

MD5 ff46314cd631a1f933ee8868931d29a1
SHA1 f6db2110e4dfbb33ff3e63674f229e0bc6b34bcb
SHA256 6fa9c1393b7d1d689b1a5850e6bc838c30388554f40913c860be2f1d321cabe4
SHA512 d3ce5aeaec23fef05a6252e03ff612d1d3a612bf3c3a3cb02875ff53082a54bbcec11292dd8a25589a507b7df987d76d2969bfc2d370c9cd84a3379ae4147da0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\168251be7271d371_0

MD5 8f38e4485a83d27776334ebfa9b6c1f3
SHA1 3942827b5ecc61de655b15f1abb01fe81abb2d7a
SHA256 5ba6731b513d5179626de4299772d9cdd89a217f758ec6f0ba87c46271fac2c9
SHA512 ab7d90a5d55843fc327df56d8dc386a922d4ae084ef5a34ab25b09ac0ddd66d184d021834473c5cb692fda9856b81e4479d945f2e806d1530718ca721168e7ab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\295f5e2112efe00a_0

MD5 44ef861dfaa2847270f6c6f6774f36f0
SHA1 aabe0610405e59c2037725db2a3e37efffc8723c
SHA256 9aa652339848f192ce062e9122aed8f5a5fabae5216d101b8b01eed2d23e60b0
SHA512 1cc3b8778ab3e5a12ef8494e89f1266f9760b4b084628fdaa48c945242be5af0ed8fd386a3d7b5e102f81ab2591f160bb8478ff9927b128ab0bddc3bd096bcdd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0580a8e1646d7bcd_0

MD5 30b3d12df335a139112387050816e487
SHA1 e2f4a16fff590a9cce2f6bce75449bfcc6f30508
SHA256 3f4c03ae88acfbf9ccf87b00437bb72c8ad6a72f55c3e35b8285b65577d03424
SHA512 cb45bbad62270db5b74c3f80213eb3258d9297ede8c2972cf516ec6d150f0300168a19cecb44966a78729f35899f6b3f13a75bcbc5b5f36f71e6aab004adaa7f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1218900ce2516d6c_0

MD5 f860a5eb157189819c3ca8d5351e4d49
SHA1 cf528dc271948f06f7df1fce0ac8556f216f01b3
SHA256 8b1221bf935683e3b5a625697bbc2127bdc19b3c0c4728e38755900fe0db7810
SHA512 4ad89e589deb71ec8ef9f82ef8623e65226b946851a6d96a0714563b6af78c9787c9eda7aaba731e43c52283cc6f79929a11b605a21a233e5bcfab9b8c28c431

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7a29efad91a1117_0

MD5 6bc3ce28eb18423de4f4244331b9d37e
SHA1 a7cfb877326a55db32a5bb4ce630c61841949156
SHA256 e559de149e638fdcd6ae3680a26b56a57230d0bc2a0e07086901d428272d560a
SHA512 f0674ccf453c7604440a8d0d0e8c0bce46046bd8b71d31666c2275794b5248a5071d4f2eabe5c7c929c99df83033757cdd74920644be8d449daa0f855e2a3e8c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7f05d59e6df9a390_0

MD5 2a34d9eb59815fff07bad3b7f5ea5ffe
SHA1 1ecb6e703990c723cb155d000766958ff2f64cd4
SHA256 febaae27646a51d94891c0eddddf7cb56119bfbe167d9c25b102ac1408fcacbb
SHA512 d921ccea008b10f4e26ba178ec60756da23afde1b1ef4d0ac26c861f3199d9b956d938d5db0c50b51ac771953a29e2f811945dc0e264bc6a7560ca2672758c6f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\94ebe1630900d094_0

MD5 6c39461a7604452ca254c12c0c4c67f9
SHA1 9a71a4188bc49458cfc87d91f30496882fe8f71a
SHA256 906e91846a412fe8031c5fa8218358f535b1f2871ed09d7babcd27e1923c8281
SHA512 4d14a42997eeba57d8090417ad2bc835bd3e03732b746050d86a85298655d88ba330c5e46321f52b75676639c3b2058f2217667947fe24a33a2d163994ae9402

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6f5b1229228fb737_0

MD5 0f86617f9b07b5995140b46ad39234e8
SHA1 ee6881937eade8697a0689fca5a1dc29f73c1cbe
SHA256 15e3f86463c78d00816a001e6553e66d1988ea4c31c6c7c6d6b2730e74c43c96
SHA512 696baca6981be6fe6ab98e685d6a0660b9ae2fa8c9088a42cff5026916438454c549198cedcd41a48c9f005921ac9e5ea4023adcf16716a57f652665bfae291c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bf0c3222b48cb44a_0

MD5 f8444834172fa84fc03aabc8c2c2e117
SHA1 db2361937dbb3fca48cc647a49a75740c3e13c87
SHA256 7f226a79e176724c466d512e5e1db33430de9d1d059cda41fb1d682b204354a3
SHA512 b2995750ac3ea027b363baac845f7304d8eebd072aea2e6fefb07e61c2ae718d6a16bbdab2a92e55a7c3e22244fb172283e6fc978c8619bf7f8f69f9e711380f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\02b1a637dfc4493e_0

MD5 2d5981121ec5c1382363fd71df9d888f
SHA1 169d0735460697bc5abc0fb7eb87025b008fb881
SHA256 1e511a4a168eb0729f48e16137b79b5f0c6b26deee18fac2098f5baf95a0d6d9
SHA512 5d465c6f2ecece6e2cee9e60b8617e113922f6e16eb5d3f60abacf97cce219b0dd121c1d72788c4c995658df0fa889fbf151db894de37b91f0722b8114b22a06

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

MD5 e928246126cf48b5deb8c1a410a9bfdf
SHA1 6f69a9034f0540b527407a621fc0012fe14b3b60
SHA256 59d0d2a7ac6999f20dc6b9fb65509ea774d3679d348cb1e7b3a52a616e037c59
SHA512 e21a9a823479ec4043685d2e6e565e842d2f83cfc6a6ab9d62e18fd2650e284165be964f3b72b245045895b891de74c5a4af83f93d5014d4ecb4dfa7a7610743

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

MD5 fe137fd30da42522e120cab803b4f074
SHA1 b362f363f1db03953432081b41ff10b47803a47f
SHA256 7b688cc1eb3c275e317d16a23b2e009c00b61b7cfaae28345c0a4b96e1d86264
SHA512 2aa018bfc7be8633c7f9afde1c7fb2d8edc8a6da5716d133bc4bbd40b1f0202848432f6d7e579d50b027048e0d62c0fabfc3437a86153f4b1bed1d138f52d172

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9412c8b664751f90_0

MD5 6de4017a772a138f7e58c9ad624c793e
SHA1 e9b9f732d1e75e8517ad7d1d35a74c92603db3d3
SHA256 110baee9faf08ad77b9ad3faf573a8e83c2ac2d82b0ffc0401b97f81800551e9
SHA512 8334ebbe1f1eb3164f9a007d32f9d5d8eb62a1be6f27b7a1743a8082d5e33f329918b8334871bed0b312ad4c40c28da34e6ba7eadd1f961394ec690344bda066

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

MD5 e2cf5fb12d8d3dbb72ac07b475c24fb6
SHA1 e7e5798b1b294ec18e0521793e768dfd5c6ec5e2
SHA256 0942a8a240481367aac22cdb9d761ec6ee8f995e7f7cb06596ab6d2ad7e90f5f
SHA512 ca0adbffe1fdfbca7c71faa10b148cb5a50592acb050b5d92a37ec1243dbf6c43739f3da2a8629fbda2239ad2de194ae66ef31850d96dc2b4afa3729dbf548b2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5c2185040c52246c_0

MD5 115cd9482a2fa3191211591fd15fdc16
SHA1 3547016f544ae18836790814d070ec9d951d789b
SHA256 f9fffd35180fc9d377d63123761378de0d5b4ab082f7e5011f5b481e6e17e3f6
SHA512 017142b6ab750b9a3fd24049ae20611fc31b63d3f21bd7f25bf600da329ee0f4fa5eb7d64b742a89c488bd5e7a993640423fa66012fd51051c391fd1b1dca709

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e55f0a6d1b533c66_0

MD5 ef04a668bf38535829e3e4c93c786a7f
SHA1 156e17c75fa50103d59bef570837ddfa35ecb07f
SHA256 0be1918a279aa533c65ce95482aad1632ca8171d6dab5f93e9b747138fe08449
SHA512 d9493084e7f35a6679aa2cd6d9009beda6bf90b80551dc366cf6e5bf37b631ec520f407c3911c91c88720b4fa2aec21620d617cb9975af71c96d96358b2d4cf3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a267b7c21d8b8c9c_0

MD5 5926e52be59275eb4bc0e2bec5567667
SHA1 4dc5b8cb2fc8fc8b3ed9a5f4058a67be83337807
SHA256 1bd746b05abc894fc951c281c2158a520e4eb4d969e4c228161fcad05a04157b
SHA512 4a168839412d8a4711b40253b4f77f6e4c5ef141e62650de06b006f26d93c2c409cb98b98af4f704c431eb600c20b71eeb8f0648045fdb55e3bc62d23a20b9ee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d475108ef7a016a0_0

MD5 11886e5f8b41789f94b87e488511f816
SHA1 45a30d31635f5cf069464b213b3e9fe88f36182a
SHA256 47febc3d879dc00db3fc4f9dd41f6ddbc549bc1634991c6b7bc6d65c27d6f913
SHA512 89ff7f94279bc9359914ab42ef8fe3050793fd73a8d0b92befeea13ade47af4804ac91db9e5ec579572c4d765a1d21590ff49ef9b65c15e2350a1a2176685e06

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3dbb3008455b523_0

MD5 6c9421c79cb7b15a5c4833bbb6f009e9
SHA1 e6444319c3710968eb54204a91546891a369dd67
SHA256 6c5d85bc587b90b65495535b3ce9ce4d868aa2e799ae20ef2c266ce5bd5bcde4
SHA512 fee9fabd4f83fa2e0a45e6c5db656017231d41dca40c2575efd6f651d3413f4fb41d575d31f0e2f5f0751ca0f2190715c23b630e37f658558f1f352dc2a3b026

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a09f6271ad0c4092_0

MD5 2c0e35873ae8b5a18b0f25da37a07859
SHA1 6dea8b3c1392f80e10e5c1e4821a55bd77a7d917
SHA256 769acf9555c1fe16578e4d918c2e56b98bddbb00b822f3eafc3fc84bf973dae4
SHA512 02802280601f0493a267f38fc85b92d81ede1b146f2d578d76b271396216a5d6827ab743459a92bef8be1f8d8416f9b37a1106b0c6e825b63d7eb513e1b2ecb7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9aee5cd509922cea_0

MD5 d92bb231eada2e533eb62f91fbf0dc8b
SHA1 3a16f1953d7f3ab73c31f0645725d0e1e38ae9c5
SHA256 f70b1fd200100af1de2b27503a53105a0d4ac0742a54c635181a513cc51c0194
SHA512 718b6cef9f15be1555420d7f5d73a2eac2d2b7c778a9314a111f8462e7f07449f765299b74971891680332d592466e63b15d1fa2982b1d2c919e06b29f0ce666

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac9b40a0411376f7_0

MD5 133d5360e3c71ac3cb893b144a7869f4
SHA1 0579e2bb08dc0d328b8b43533215ddd099c31426
SHA256 ea9e5373cd31b937bd1491e5664805a506b93f1f67beeee9cb971c0afa9888e5
SHA512 d43c46ec89befdfbd39bf8f59fdd03086be140aab3aba94c4b097b4ac3481d896b56f87e8ab08c187603fc0bfa7b2548b1cb7e04aa4d9793ac2320a293d3f856

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b0285107134e229d_0

MD5 ea5bde7c17a4be1de62daa3e45883343
SHA1 98b7354e3e544c24ce2bc38228b18aabeaa2163d
SHA256 c681a12ea898d294a7f0ae505ad35570d326f52695fa91f7d87417c08e038abd
SHA512 8e0fe7a0f40f89ff8100fc2804184fdb3f6c5731189d208392ade09c0d8b48894340bbe5eb218fd104f6c370580b9824c33ecfcc0310ca88181cd9ee317f8090

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a474456156bbb663_0

MD5 a4a93594ef28c4d3d70d48b016319451
SHA1 276de1ac7957da2013dd29d2bc79e47b5a9dbaf3
SHA256 4e62b6b394d3f5e26b13157dc0f61cd4bc32c693a2afb569d81fa120956671b2
SHA512 87d78bae02b0e985b772ece33c32356196d421befd299f6c8e3c074e63aa32a3d304bb08f13326528b106f5a5042931de159b09fbed8ce77c89daebfa925d3d1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0b6beae182cb6bcc_0

MD5 a71ed346cc01fe1edc5b693166d100ac
SHA1 d9a22d95c939e0dc49082a734838d83015d1d4e9
SHA256 29751b42549d4574097e380b448012d8d817c117dcd4586d8cbcdce40ef17c87
SHA512 a92eab60d6a86bdd420453391d58851d6b185de3fcb288a8e7e5e4b1908ad7eb78f55b0123a1f2fb6deb8bbc488887464991fc0e992dfa7d80f54a0312cafb10

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47d4e623e47f5bdd_0

MD5 2bb92ba6c014eead1286551f6c654bb6
SHA1 d6e7e24b5ef59ee8dd832b6089b483a9c2a3b4e8
SHA256 12daf70c27953e533d431715a83f824d0def6cba6b18a018c6e2cdf0660e8b58
SHA512 16609274b0f35e6c9b262b0a38b0708cfbc5c2743918a279f278e9dddf9dc4b7f09643a012b15deb68dc17d245862097bb1f76cfdeddcb3ff19b4ab29be34329

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ba208775fb5fe09_0

MD5 3446f779b89a17d7a3fb87e0678c46ed
SHA1 e7e911137d1ce64f4267910f1b8aebd4cff7cef7
SHA256 cfc8e44c07efebdbb8191f7f468dabff7d2373fc65aec076cfee49e1207e596a
SHA512 0ed49b13db4f1b94acad65d48b3a060e2079e7b5f85f552295c7c5967efc835b5eddfb67fe8602a8df62da55d97b8373ba32a15f94d97e9232e74c568b154498

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aa20c296787a3f88_0

MD5 49c558620992022a6246d3f9932c6652
SHA1 7b36a914ad3136714b1a0a938d711c34ed869075
SHA256 911e42cbb3db4531d526dd13f0614f9057b57143b0cf0740fdd39485ac1a93dc
SHA512 edb0caeaa52e0759bc6092c489c98e647fcfeedd7467bafa592b792be2fe9aafd941bdc8595ca9bde98e7e11fc9aeca0849d21ffabadbd2869b36e956319f440

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b307ac3667e47b4a_0

MD5 b26716f33ee9e71ddb3f5fc0f9cf07be
SHA1 563d545a21b99505d7fde9ed17c965179f8f45cd
SHA256 8ae8db25d32734d7807dddf89f6066fa2f1211e1c0aeb234e3feeb0bbf2fe2a9
SHA512 e7eb98f1d890c538477aa0745237b14f13e948a4bddcbdec650d473a41ed76df830fc114ca30d222eef309ba712ddbed0e87f5b69ee2805b803a708e49fd4bda

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f5947e5ab7d1d762_0

MD5 23ec747ba10b77f3536fda8af6e6d2c3
SHA1 8c5590c55782a419e3006efc88472987ea975482
SHA256 f3b804e3cd994e0455770609de6d3e441142a2c4d187011bdf91e3d4bcbfbdb7
SHA512 568d07b29119d34d9ddf019c480f8e823e3f6aed7571e9b7b05b3e80ff7a357ac68443884d2e6efc4f954f62a76abd0f0c8023a5430f4474700c199b3906cdd4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e52ae3fb759a78f0_0

MD5 2f480613d6358a8f27b61e756b726e41
SHA1 df18ceccd0d43a429c297364db160ea259be3fad
SHA256 f5d08f5557760c591494b5b23c9da0c919ea5a8cb8c5777cbbbfb9b4e792df14
SHA512 d6fbc8d3e53d8d201dfc9805340ea35f3d29f8f605cf019e771f3311de6f4e62e61f2900c72fce5c29aabfc728e97979d11226595af110642189281de6315ddc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2ed5123638b24a2b_0

MD5 5171484ef8127a09bd2a06557b944c6f
SHA1 0feabd96401fa4be847a78fa5e33193a82c5479f
SHA256 46d33d2f06e91f8f54109c4d62047c2cc28d45b8f9c44c259b4c1b8d09265518
SHA512 7d6fc0774e62b444ba2dbacff9f703dfee3f722fc1dcc7904299ef048e33d91c406ea913315c6fbda337894e4d929844d16c668617e6d9c7311669792175c0ab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9eb49b832d016644_0

MD5 f72794d20e41a4e9794d5f0fa18ce888
SHA1 a0725bb43baeb475f1ec1050125e43e38b98fc6e
SHA256 baf78c9951e0ef8343373f5cab76128e7e192f95d5a4e60727c9e557431c1bbb
SHA512 f283af64e0da0af0f527da0f7261f8b4302667956243cb427bf2cb75be1fb45e8411ef12a18fad8ef24433287d614564ff6694c022755cba5d5f924124b16824

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b1d7d09e2437e8ee_0

MD5 6d547aff2188cc826c8646b3738ac0aa
SHA1 a324ecc06515eb23cacdcbd0ea4fcf5d8351335f
SHA256 f4b1a32c686a385a17125a6859b291dd9a98146313da5a26e12cca04695dcaf2
SHA512 bc188e2b1eeb76713e76c2164806a198ac15105b5572bc1e30a288538727c9b44b935af3b9e9b2bc3391e03add352c948a62d38c79b7283401a49f84e99fa607

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f078f5fb70fd150f_0

MD5 9ba25cefb9f57ee837a564b63799bc7c
SHA1 faf1bdbd8aed27521187562e4add1095d0462d51
SHA256 a9728b838743296334d0c2665b82b0e8bf6c1fc3bca629834cdd5e4472971503
SHA512 5b5c85f23445e9b749563b0c010c616d653b8594af90c3b7514210d7f0ba4aa69d78e11a2a44d7b5a1f15288da5ecf3c62476d7d7b831a8f375aeaea0d3dbd15

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 7aec5924c24231cfc08f91d85547f25d
SHA1 53a5740f806bfff31a9c339950828938059be686
SHA256 400021fd095d62de91e54df0793c68da515f7b328786b2ffc82effc51eacc415
SHA512 9985d58e18361d3940e8ecdc9787f54628997e0262318c54698e79d9bc7fa91bae76f79e150f5d208eb560cb80f3c6ea85c1feaca065f3acee3de2394c6c613b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a66a1246c4f29f4_0

MD5 597c3f63c6387302d8db74a7ad10664a
SHA1 a4317109bee527c223845252328822dd554a30d3
SHA256 638a4c35c987f1cf44a80227cdf031fe10c9e236e11b8fd5c110257e5d7db807
SHA512 36c0bf639db3b771623388ff9feba35b56e84c3dc204e2e4e060497717ac485cb5891fd9f76ee24d4fba533a70d83b6c33a632c57dbab702cb765212b86fe571

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\edb3b6840a8ddc0a_0

MD5 391ba24b6add58eeebfe70e6df82c6f9
SHA1 394486f0dfdafe75cb152ce9322d108ede6f7913
SHA256 7b9dde37bb89dbd1b542df57071b524901b9e9f47cefa65561e5bf99b71436c3
SHA512 cfada2ec95342b027678b4e6f41f6022475c38df62fb64c495c23f9ebfeb2bf798b68e4787fdc5085450d925899c5e0d82e50bfa975efdce3b773cff8396df17

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fbbc3b076556d40d_0

MD5 275064cf006917b7d73e3e5098f58c07
SHA1 b2eccee6592e8c62dd9299c4338c97545714927e
SHA256 0e608a564000f93f18beb23279702ef84198145df070aec679ba557f72d3cee6
SHA512 71fc2814aac66879f0df1e80584c8f2ab382e98f64b670c6bb1c870d754644c6907bba75f1a1a81986b03a36ddc10ab5c6ece8dd1da6a421b42a93eb7f067b58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\da3d92cc343f4ba1_0

MD5 c1f60df682901aff4b3b85c55bd899d4
SHA1 83e1a6271ecd95a6d64e0aa529c5cd6ff1e9e9bc
SHA256 5a4923e1f63983ccfbf46d687c9ad019d354be253c1bcbc832267e9fa8b10beb
SHA512 2e992973739db293917e5a8f91db867019c23cfb3383ef0ec938ec12b33bd41797ea58346a3e314edbb5144e4fbecba43286b5d2309ead73ffc3198aa4ad13a3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\68d07aabfc3db202_0

MD5 149f67ba0648adcb14fa7ef0c6d02c29
SHA1 06062dd3a7138507fa352779145f2e24c3118d0d
SHA256 2b93be819da7c1d181ea4d584e9cd2fc48dc86e840849c268852cc7800416780
SHA512 781620b9d33c8fc33463caeef529c2a2cfa64a300e0f9aabb7356da587038c32235bac5d4b8fae3d2f425dff07bc08022cd5c71e7dfa0a1b50add42f89e5336b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a6537dab24e365f9_0

MD5 e7ca6a363ede2a588750dffbd8515493
SHA1 837ba88e24f3bda5a654364905303c5bce20206d
SHA256 7c1b3b55c005d6eb44e8767bcc78fc986c05dac2316c3e2719dcf866a705ae28
SHA512 745c0bc553ef54e3a87efee950ae1b2828665a28a3f523bacff135d0d8d766406d6593f97038019c12c56ef70c689aeef38813f274f86701b49f0afd115cb96c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1927a26afb9a8b4a_0

MD5 7e12a2c1544139e6188574cf7ce67f6c
SHA1 6def282b7b4297ccc9ef9a5dfcc4e68200632620
SHA256 1d4cd58a9cd2945432ad50881aaa5c8a07593a428b45846d877d1b9ad9429bf7
SHA512 9b415b490689cdcb9fd534ef489b3670173044b8ad5b46987e66ece4f8ca9eca8c6f6d8d51046ed9129ac039ce90b842c3f9b4f66c29c591bdd0a9eae2c88973

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d3b0ad57bdf7db9_0

MD5 d6b507c7756c4a0e82321a5b8e06ebeb
SHA1 b43b058e6c466ba3a799dc10b667a3e89fe71292
SHA256 20c9dbb8658f19e4fdb9fb958f36dc58cb314f224688de6474c770fb1d8a1211
SHA512 476b04e21af81bc5106eba3a6e99c2e013c2faecaa99f00a2687b14bb5adec0a7e2b6a6b2c02d543ddc2a13793fdf830bcee63ef108e7cff1becc9b124e2efe0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daea348421cbc209_0

MD5 ea7522a27dcbee81f905f5347df36464
SHA1 7c5a5a1d8149a8efb1f7b716f656fdcdf79562e9
SHA256 4dca79c70260ca0c8dc5f60845f4f28f266f5b1a3a1025f4bb2402800e96cb2e
SHA512 9f29cdaf0a82a3a5a168fd38ebae462c0c0bf8fc07d361238975d019efd663e3d9858985252ab75f0a79d63585b04949cddfc1671017e97b4b4d00670757738c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e932f76063258ddc2dbd66e722d9351c
SHA1 24a732927d74e98eb287c1fe153fe486110e87d0
SHA256 9fd9685355ad379446c30e80fe1efa81024e5829c38695f9b48c862c20a6f866
SHA512 b33b33c3038acda5b63018685acffb98ced0773623a3351c2c67070151bf5109585df8cce854cc919df419e09fd2e0cdb3292718e248e3564c809dbcbd16b52f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 565acd52a7bc417cdcbc11c4cba81a8a
SHA1 21a6c6d51a5a6ad4af6b19cc26bf04867abef9a3
SHA256 b6d376ab32f7dd64843504976d2bd95b903c049471d9947c8394276410890f15
SHA512 32d94e654b04d11b618c4ff9f254361e27f4ca9deabe1b8e4785913c9ac2bb67614458041f54cb44e10f6be7cf0791594ec783ee0dfe8923464fef9dac6b27df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d88363c96a26fe8aa472f4cb6f60c642
SHA1 20ba4cd58520fedc862555858eba6ae20a8ceb65
SHA256 e7e63144db8cacecee97f0cb584e6739ccde3148be6385ea31ed53433ca153c1
SHA512 3d7e32398f591387ced8b0e51ae7db0adf2231df08458089bd03761d6587132ea147bf91575314800def9ce52c88acbbf57b2e0c770d77361eb1334b710000e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e2e2fc02d82a0d32688cccf4e3945beb
SHA1 a246a8351e184f0457cbeb7c1bb2e01641434ab1
SHA256 b75f0a86605d7ef5b6262a6a260b82e96d52a3954e0249e8bfa2ff8070de24fd
SHA512 23f1b9df45f2903c909c193d2d995ef36bfb5997e5d8efd57237f2c0d3cb75c4220cdf4244b726cf8fc2a86213a2d3884190df90b6d551790551c9693ef38f4a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 1b5200f124fca5a6e53c639b6ee60127
SHA1 4986925e529fcab0a570f07a717729482d22fdb6
SHA256 8c6d4493bf0f046bc76dd34198caf7f904eb213203ce6a77fdf09674d150b840
SHA512 822f201198229d87d8537f12f3c7c454a41ea0a33dbc95de88f74ae21dabb21f19ba71f31f01104c842dcaad79e93156f3ab820c4a687583486e01f0e8e3cb3a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 9e1c0c84727ca8b5f00db21d6b4f3d0b
SHA1 963312531b842bbbb37a6934eac75bb2df5b539d
SHA256 6e58c6585eb36dbb3342245b889b7d0b8bb2b781127488c79f0675d9ea6b58c2
SHA512 8505156056a7be373bbd1950fd24cc10a76943b508518bc73e3ebdcfb3a873a470893b712bddd03a2a0b4602b76335110f56a65882bb1d8ce4c9e59d9b7291b0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 0dc9774233c0499f3ed4e521e258ec3a
SHA1 a6a0d781f66dedfc3e1f6ae76955cb23e8c5bd3c
SHA256 fbb6eec16c802a86b3ce5ce09414f960fd8afba8913b89615ab227a28e2b2dc2
SHA512 952e3a8ebf8fbbb2a4ea5b804c5ba188fdf3f299c83d7accc44cfad2f5f316a8ac467cc1a52dd93daa54d219cf916071befaa52f324bf6c8e04146ea7b3cc524

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 2461e9b60ead8a622fe128391775ab24
SHA1 b42e50d7c0b74d5f900c2e5f6e3be43859152d10
SHA256 c7285032dbc6cea26b0478bfdb1d2645b42c974092df0215086db82c347b823f
SHA512 23bafe8cdd0b0fe1d43531ecd276d7eaee48c40a99d519ecd5d8e7be978eb0ee09f2a4f1efbb346b747fa2b7efb48e311a3bb974f24f2b497257fb7f04bf7a80

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133599121607488854.txt

MD5 c833b3b1bc6f5e4c4520b846bf9ef9d4
SHA1 9fee9cb5a46933f641533246d44480b7d20e9728
SHA256 21cb7efca7cc64a1a1d80801a9395d141fb27328ed9439d867f55056a244164d
SHA512 e25a47ed72430cf4cd0c7a0290e6cc25df41994127aa5645ccb202199ab843129e3469e41206066b3ab70c073a40c422811f17a6898178c85a2f346869dd4ed7

C:\ProgramData\McAfee\WebAdvisor\updater.exe\log_00200057003F001D0006.txt

MD5 bc7bdb5ad6a025e6711e4cbe6f8d15db
SHA1 1dd4a8bef40897fdd81ff8f2e00282a820cc4f6e
SHA256 f540a721388dac50ab4beb759484b0e7f7809c5bdac8472249198f90210b4f6a
SHA512 a9d1b8dd97a1e0a260eb433dbcb0cd742ec7b4e11f0df1c09fdc3dc6115fd552764b3e951732be158e746cf484a5fde4bd1ab2eaa34c11d5416badb9c6907fc7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 cfcb6069409d2cc1aabbdd9a04b5f03b
SHA1 faa0b124d70949ee801ef6219536267d1e390457
SHA256 e0515ef884efe04558c912ae8840c5c2a3ed5cde552ab3ef3e54b5a3e9feaf9b
SHA512 a7a11bf67b36dbee049c4269a48ca8fee7988949336ada1ae29088f8f134db0ca0b160dcdc86093a718aadf2f3cb80771349bc47fceebf6a535ff205145ae5d1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 793fb824c73de805bc37c963277ae2af
SHA1 9dd231e02aa9889880ba93b5d71c63c367a56569
SHA256 6a5d260e5273f2c8162b2504f0fb1486f555fac2c852da19abfb68b167f3da8b
SHA512 88cf1ee31166fc0440eeaa5750da1fcac1e5f0360063edf0420494639fa7c8307e2f373a3864a5e77c640f422714a098dd81a7bb167dc37619661407684859e6

C:\Users\Admin\AppData\Roaming\qBittorrent\qBittorrent.ini

MD5 db319b5adf02e7105f7a0f9064ac4506
SHA1 f4554f9ce5f02ef0deb4ee8a1482d5d5fd474b4b
SHA256 dd8b1d1f96e1308946cc7d0a69e04cceabec239cbd171f9c549cb3848e1c57a6
SHA512 9abc02b0b9aabb537c560cbd8c8cdc0569aa5730e21c54d8e5c7de549bb6c2937625aa188ead854eaa2f17c47a5b724fcec4f2e12362c1f721ba0f873cec345f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 fbfa701c416ac069c3828196ad2f1b49
SHA1 3531f0c5d31c45cf8bb2fffdd037817ea31344e0
SHA256 8263224824c62ef1a866cd9313586745128ae022318dedb8ef725b9c3e934529
SHA512 513b2fd8982a10521cf71701334562ba1ec1e47cc5cb51effedb73e093d1fafa834c91f7bd2a02b875cf32ca2e86a59a8676ac55927756e930d310d89a288f02

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 5259634e4cbcd128d8c75d4d82a90212
SHA1 c808bb1194462bce7fc7d80bdc0677f92f64b465
SHA256 31a9f7c90d82cbb62cc5fc4ea63b60f823864834792f1f02ed35b4bca832cf95
SHA512 72c1fb23571984f2d42b946188e572cf95e77842f143c73d222792db5d632259a901c7b4f097ad188718669d4d4f4646c39ca5c0fb9b6b42c51798ec3bb2ca86

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 c282b1a5ba9e4b9efda9ddb245096d0f
SHA1 5d8c3ef1ce4804a59d31f5362e2d004751dadeb1
SHA256 320a5726d2157c571946ef1215917cda58c26c45ed3004fa305722837399dd87
SHA512 9a7a2f6f418b1e8d112a84968b62fd3566030c8e406f804895fdce30ef5237162859158f3920be2d1c208e97423fbe5c74a0aed70ac6b032b17c1f7c7e11bb71

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8e3ba647ad239e86e1a3116f7f61d86b
SHA1 d2df55b31f85d3335c2f9ca1f26e9e8484790e55
SHA256 3fd0fcb4437e6331f304e76fda901420a3198dafa7c8812f2088faf31ce1d65f
SHA512 957ea306ada1548b69ca406537855d009bf2337bdbaa380101420af46451b7be91eb4e031d595932381c7560157c16167671ad241b30221aa4d109f5dc7d9ea0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 70445f6f531fa44fe68e040da14e9b6c
SHA1 bc21ebaaec97cb8777d3dc81848385b82675ef60
SHA256 b5ad071c121e87abdf95e20a248e943ab8d7cb74f9bfcbc92a508fdb1d57ba23
SHA512 ef4cdf59cac37f54904b6945394d63e8bb243f713a26ec63ffbd111c2a45bf15d106e3b5304afb76628f03a2e6a1f21f11ab858b1ff412635fbb107dcbe28c3a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 bc47cc87b4cf6b564f1021f2c9f827ea
SHA1 c9895dc35a7ef59b7b1fec98b52d63975673fbc1
SHA256 327bc4e8ccfab5768ecf108c1885c688f900dc11485cef77bebc91087b3fb50f
SHA512 478f3e7453ff72aab6ab6ddded8be511b6094e77d1eebe10bd7271ef0c7798db466f546599069336ec7ae3137c3c629895ede85b2fbb6dfc8a6186e190f87dab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 6484a4e2f08e36c1de18535c40fff044
SHA1 c13ed7324864b9304be6542851d96c26a39b3a42
SHA256 1f47112a4496a1626941f2250fdc8cf6d2f400b4a9afc4827a9b73497a5f0d0a
SHA512 ab0d0b87cc221b6659f224caff8ec450400d4c540635fb313add720523c8b1931e1a6938867eb73aebdd9601b1030ceab682395e915a0b893d4d3647da0ab8b2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\95092e0e-1c34-46c7-8836-fe7a7c4ac02b.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\ProgramData\McAfee\WebAdvisor\UIManager.dll\log_00200057003F001D0006.txt

MD5 01b67a368041d42382ddd775fdc85cf2
SHA1 0083f6967a77edac9c01f9e5ef83845f0d9bbb87
SHA256 f7c6971e321a1173614060ae9be24ccb8b6039fea616a219c0313d611a7b6f3f
SHA512 bca3909e66c371db5b7ec1dc8578283af49ab529f8cb5ea75d4a375a030821827e9c3fc01ba2d4446d11b5284f0356dbf192788cf8186a7b54df7a765acd2b04

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt

MD5 80d5b96641b839bdf3b754fb90a88e93
SHA1 4ded5db63eeee9064a96354180c91c073869bbf2
SHA256 f65dc1008a76cc9bf0d3ac047fc647a3559ce3879eab1dcc122c1f261d524178
SHA512 d45b9d7e19d846b3a95f4cc64658675e93b6c7f14d420525cb6f0b7c8c44d42f9b6ac817567f33426054bc527bd53aecfb570f0076dc6b6b5d72e6bbd15adbca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache_

MD5 47d41a980668e9bfae197488d6d56feb
SHA1 8acd8919b112d637a18e4c2f79f61fd62d2a1e6d
SHA256 87c1ba0f3a75480bef554b38abd51d7858bbe2cff07d4fd29162b4468d2b6c43
SHA512 165cf9913129bab36c22399c3636960cff235313256262439bea6a1ed78cf80d65690254cc63148e7e13bb515b513037ab6be7d20efdfb12b07985339ada36fb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

MD5 a0882a7e7a9002061c59085bd132e326
SHA1 82f5dd72fe047efc6a2fad02329ab3070781a7de
SHA256 e81bb0664df9646c2ef47d26f44ca5ec1270e6109e125953f761f362433f8db5
SHA512 9af890c4b7dadec2a49a63b951012fe15e9512bbadb354d088fa418a6fadb412d27780a0efed0f6252e77a083c32808ee7ad59dd1b07bc4f5cede052a844c3e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt~RFe692785.TMP

MD5 46351db487a1c6a364233c6ff6d0ee5b
SHA1 89c727d0f0f0b44f81389347cacabc1c9cbf11a1
SHA256 37b894558997601e8a1a01f18a69d92b68aca3fd6fa48b94a4c014453461a365
SHA512 b3072286291dadfc6b35df49b283fa731fe69b9dd5c527f6cd9ce16da34856034a879c59b2521a23626fd7bcad5e7d7390d6f599bafc7aefc627104cab26b79b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

MD5 743d50b8e8f38a2b9402ce4beb059a7a
SHA1 ee7a75eee334ad8d5af4e36bf6fd68d7351bc65a
SHA256 2adebf6b289022a4785eed131aae018e900da34bbf8e44d5ae136c1302d406ef
SHA512 1cea23b7ac860f9eeed101b8d1e6f02d829868dedc207828942b19e13b3d18cc69deb6d3a5894a7e8684e6f645f08907eca805327cc64ed8af929d03b5295c52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 0c6ad5a44d0f0c91f5ef3d40637fc0a8
SHA1 75b8aebf57a74030662c577da33e495ef3d4cdc3
SHA256 29b066c1faf1541c6263fd332df72772b99163deda189161d69e46618840d1e7
SHA512 9d92cab421be36326471df5127f5563c3e44b5a6ff1d1eb184f32b30de927b9ac6fbef6b71dd81265ecb5f336469f99a4fce45ea841eb4774442e5df18187660

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

MD5 a8d1eedc07fed2d17d58220d73c090c2
SHA1 9c1ddfeef71a068994c899996dec11ed5249b49e
SHA256 442ef1a0c97cb798988bb60dadaf5abd6d9062553d524df82beec4ec3567f587
SHA512 b090396ca6bd112109ef811cf348af80d9380d3414f825120340dbc257ecf543903a91e613bfe671f6604bb45535906ae95fd485b4b63340dfb3cbd4046a80a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 13a66837e49c190ab93b86f58fba1d9b
SHA1 efb1f2dea1eabbbe8c3e15da5cac7e13a04cceda
SHA256 d31a6dd71a75576b0174e83180bb92c365364a040fe2863cbdc864c156010ae8
SHA512 c69916edac2f68b86b29fbc35212124f4156a900af98d1da43416764ee8ec20622ca90170e50c32fef7e72c99a5082fdfdc5df2573c01df616cf564adc80a571

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache

MD5 b6f7a6b03164d4bf8e3531a5cf721d30
SHA1 a2134120d4712c7c629cdceef9de6d6e48ca13fa
SHA256 3d6f3f8f1456d7ce78dd9dfa8187318b38e731a658e513f561ee178766e74d39
SHA512 4b473f45a5d45d420483ea1d9e93047794884f26781bbfe5370a554d260e80ad462e7eeb74d16025774935c3a80cbb2fd1293941ee3d7b64045b791b365f2b63

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f2e7539d-3ec2-4cdd-91d7-bb0fd5b766b6.tmp

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003d

MD5 f48baec69cc4dc0852d118259eff2d56
SHA1 e64c6e4423421da5b35700154810cb67160bc32b
SHA256 463d99ca5448f815a05b2d946ddae9eed3e21c335c0f4cfe7a16944e3512f76c
SHA512 06fdccb5d9536ab7c68355dbf49ac02ebccad5a4ea01cb62200fd67728a6d05c276403e588a5bdceacf5e671913fc65b63e8b92456ca5493dae5b5a70e4a8b37

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 f57a6192aaf39b10ede3760e8053f672
SHA1 37397e9f23893bd80a2edc7dd7a1520c05908c41
SHA256 2bae6459208424d757aec0368e5874f3daa5b8a006c22dd4c06014c77daae80d
SHA512 6084e1757db6d8aba63c02c087fcb1d28703a8644b5d389d70762437dc912b8f7ff40880d3f4aef6c5ed8f1afbbdef25337f351cdf4fddb714040055bad606ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 e923902f9900dfc41f6608c5cdf29a01
SHA1 8fa13e1ce4b860de60890c20ea2c44749384cd5c
SHA256 3f48f2ad69ea98a6c196f24b62ca054d06dddd30080eb4edd69fc6161344af40
SHA512 14a95cd7ffe5cd3c429c2453b1182a495f000267c2568945e4252e7e20b92ad9031c5ae3773e7a41b42356aa321315195779f7a7391ad9e885e582d0fd8e223b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 568644d080c0c1234e9b81734ac22409
SHA1 0d3f2d0e3b9d9956d5072b3e623d10f24585503f
SHA256 5fd78fed0aa5e0051739c883693b23116206246f8381f07aa5471767bba32b6c
SHA512 aa652ef5297387633315054f37df05ab3b72ee7851da025efc62a4c98ebd64233a66581e8cee239f6c62e9b0e0545dc1542f3b50bc94cd61a96fb9329e31d041

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000046

MD5 f782de7f00a1e90076b6b77a05fa908a
SHA1 4ed15dad2baa61e9627bf2179aa7b9188ce7d4e1
SHA256 d0b96d69ee7f70f041f493592de3805bfb338e50babdee522fcf145cb98fc968
SHA512 78ec6f253e876d8f0812a9570f6079903d63dd000458f4f517ec44c8dd7468e51703ea17ecce2658d9ea1fdb5246c8db5887a16be80115bbf71fe53f439d8766

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\720dc2c1-5369-4a08-bae2-4839c83ca7ee.tmp

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 370339e80c2f601e511a4c1f74a07dec
SHA1 92492337411fa9c0e7ee4e6e45082270752af16d
SHA256 ef73efc7da7738257584b8e1f993ed1a4bbc470f4d78518a9d19ba2a5449a6bc
SHA512 fda547e0f94dd99c2933d72581bf081e423785a7bcc53ac4ab0d7b4438d25f7b5417962e113cd95f59459d10bc29425a11e6154abe8205a69b391cb1357dcd43

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\8\CacheStorage\index.txt

MD5 a3d525ccdd57293f8c55dbfbab403c35
SHA1 3d404b5f1c0d4d52a3988e6377e6d5d7aa35d770
SHA256 3ea45f19f79e1f8b4754493931142c90bb661ee5a4f36d93165331172e3ca967
SHA512 d63cfaf145886161f0ed889c2d8ef26b230dcac97aa659811e3e00f9d4e3c627c64e0a4422d4d052f3841324b1af75b9985f423e6a85a258b303804ca0390257

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\8\CacheStorage\index.txt~RFe697363.TMP

MD5 27eb88d4ec7dec093e3c406bb5184ce8
SHA1 90f6ad85f691f7df55430a74e59091f0666af184
SHA256 a287e0e70232b6e416b8e42e7ffa832b27e0d3b4751311152cb5e25aee1290d9
SHA512 9fcfbe335224494155ea98497fd681d9d6253356aefd203127f8d5488c1ca11aa62f30427e60b70d73440139a897abe562f3501f11bbd3329059b8a1de986ebe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\282f05fa-8d2c-4265-969b-065e8ff784cf\index-dir\the-real-index

MD5 9f28abd8c593fadbc84dc24621fb3f49
SHA1 7e74f209c59d68a8f21e8597681e047114983dc9
SHA256 ad23d98b2f910591cedb7ebaa46b89396489e9616ad071aef30a8aa55ba37829
SHA512 af705e80cfbf9e0ebc112d0f3549872d9ca382dd39d51b19599880139472023c71d49540c344b6fe07151a62a196c08e5187db21e082c6acb9de8c09f4e9dfce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 7be8dc03c210569aba6db956baff3178
SHA1 3bb79ab0c623d54cdcaa4ef069cb9c6ff6cce838
SHA256 a45f6ea4551f249aa78cb4c6e560a1d2fba391d93df5524e69ebe07df7fc3dba
SHA512 186c753a38cbd685b6233e12df52fb4f5633da4e6e2af5a710f58a4c10f9e158a8425f4d6abc6e745de5d2fa0ccfd649332d8f253ea480584a65c26a82514ec6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 a6c24394521b79df4c319d49871eda17
SHA1 9a9fe2ea9555aefbb7c792b4b63d6132a4b71b64
SHA256 a4d19a806fc2a4b31d1d8d0a9f25cc00ae59a7cfc2562f7de71dcc6c31735a64
SHA512 0ecb3177914ef35a06d9f636c849eaa144b462f23bd2e2b8a8e7209f7ee047601cf0ac81b202d46a949fab252cbde31c74c845f56d33bc98cd48c646fbbf1c47

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

MD5 c2e24364c730843fe52ba9590da94210
SHA1 48aa02c2db2067deb3a2cc95b50ac9f237c38ba7
SHA256 a2d0dc53586a9fa3dcc9fcd8339b877b0460f1fca994402ca3eb8abbd2243ede
SHA512 5c341743f44b328eab2ddd312c9322cce76d6ae1197e977e916476aa25ac9f3c4dc3de561d1af5ffea89565073dab23f0fcc94b6dc31280eec0957390b45ffda

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\8\CacheStorage\index.txt

MD5 b711f60a451a478d62397fc96d645ca9
SHA1 d3959d6479f32b451f58c60f93dffab98d5ca9c0
SHA256 fe9c2391ee493c1fa9513bce8bc054a78903ba912a7e398169845be9d56b8b98
SHA512 7f6ee6e86f37132a07aedd313a1a577eea8f25d3a12af4a20042a66e45acb94a31314412f346d9e905ac213e13a3428c54775d09276985ffbc1baaaa8139c7fc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 1479d4aff3e397e13b09400f53194c65
SHA1 1f3c81d96743eca66bbb861f6605716d83cbaf57
SHA256 1bce32fd29a51ce66d906642e27fd3daa3c7df4374537531737d336928c33711
SHA512 1cde178f26511907191f46854edc55be9b5ec6b2d318917c8941558e0c97fd7160f467e5d05ef11b3d45518c4ef08d66308b9aa6088a8fb2b5b658744583cc16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081

MD5 78c2b586d013f22c00a7fba84f1b17dd
SHA1 297e8185e03b95dc9ac1d3bd61d7fa6870af5e22
SHA256 296967c3f68bf40c880602e4f9332488b55e6b901d7f9abb0190d391e2c1895e
SHA512 6904ac1bc42db7d8e0b7470369dbd2de6936f90af3e00c247d773ef2b8c20cd4ba54ca6fd3983f37052f8d74faed449d14d790ba500ad0ac72a3d72dca82a077

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 d53d5070201eaa2351eff2d5d5784701
SHA1 aa54b503ffd4cbb6c44d7593b23581ba06eeccfa
SHA256 73ab57c112641bccc98652ff7dc1d5ceea80fa0606a73ef34fc6b985707a0625
SHA512 24d7a48690e90bbb028ff7047633a67305e55d40cb8c4c0b9a420fc0a4ae477f01b9eda9c21354498667cc1300d98bcda23768150c15f0bd92e0ef2a7b34624f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5b571cf5-c472-41da-848d-ea067fb7589b\index-dir\the-real-index

MD5 56a8ee50e47ca66dd6153bdde58266bf
SHA1 e917d8b4eeccd9258e78a2d04b6bf497e3877f69
SHA256 910da57e88da26422d89fd62bd1e091a69da094ab375ec3cfcf5d2c2e78f7f9f
SHA512 aa984c4fa9e88def7213246ea8a06729b42aaaeaf1fa312fc10cdadd12cced99ad77c0825453a3e749c8614b188e4ebc3dfdee426a79731c91c8af9048b4acc6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

MD5 40fa8244214b7546a8ab948775be9657
SHA1 f64ed6d05bff19415f0b3e06d15536120483f9ea
SHA256 039b0305c5e636aee1b474b4a608b0f06aa4d20661e94de2243360c5b3d1d7b0
SHA512 de54f43c8ae909680f2d4caf20cb5fad21538fa8960320ac8e1624eae15f41eebe48042cb1499d902fcc902cc067dead34f80951c9e6f69b3e063cdf9ea9eb99

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 9f81df15da18a3203ade754d4a99df34
SHA1 2306720a581bc432fa22076c28306e6cbda1d1fe
SHA256 880d9818935f9fbd0188c55c0e5c1f4ca56047913a09cc1dbff82cb2bc6058b5
SHA512 2336b41226d5bde81d835ea766e531484c0394917dd3b24e873b31ce64520643211c6762058820c6fd299188b22f2665ff3a52c64de92b93846bbd478dff4953

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 19ae6d7a3b3f247b3f9a064db5013f7b
SHA1 33d78ca21d1a7da464490f4175b14840a8f29153
SHA256 741ed27b4549ffd4eb785a0dfdcc2997a462051f5b74be1b60bb41414d2962a6
SHA512 30518ffcbbe23e0be2008205347b3dd79df0f880c3a81045f8e391539b708288c760a08a703511e90e63ce8d5f3db7031ee0c052ff0fde3cabc1342d4f4140e8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 5a0cfc624cceda9c3bf4ab855f62c3ea
SHA1 a54f54f9cfc8c2d4407a7ca16012160df23cfd74
SHA256 d557fd9d16e3e0a271a3b24fcb21eff581c146eabe3b2469e739b76bf3971b2b
SHA512 cc8f6cd927207706b33a560f9de079a231abf9af3882c9e9509abcf2dcd415a9eb785e7403190e1f2df0b5fbc649b95c55f2fa05bc081a634b2275bb2698501f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bd11ef397aff6f74d4ac1cd3d55f42cf
SHA1 8838c2012de6a99f40c3e648c058542446a7a166
SHA256 b7a7fc671cd7755f9ac2f315a40b30cd6d9f273ceb9815f7b1b3d43a9ec88210
SHA512 1575ea66d23673ae688f71f795c6d2eb83fece43f531ce820839fe5f87e889ead6fe4b4ddd2547d3129d0b2bcd80be2fc446dde9990ff3f6ec4427dda1a47c6f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 0c3b253df537ef89b782053a92e6b2a4
SHA1 069f1736e097261c51dfa9467ad2249ddf9378fe
SHA256 f6e51795b5d56489ea914bdb1b2045a84b7042626e2b99aa0b63816013db7978
SHA512 2c6dc6fa76975e9dcc86af9069fde162f87e8397e3e0c88590533875b426dadcbb88fc4de0fde72363bdd7f1a0314b36e14639bd36b74c6bb1a226eb96abf1a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 9dda31523947e6b38cea843f38f07b71
SHA1 5f91f3c1175389da3b9e3e976b9cb9e3319f2ad8
SHA256 a7ed383c512fae8c6ce20c37f5f446350238bfbd01b74dbcfed4ccd9dfc53ef5
SHA512 328ae6130b758b4b2d53b19ce412ff63653046f046c6fa47e358a0fc498391d115cf9ca6f66987ddb85f9a87d39fd6e3dae2cd919c712b1984611be2e6a31148

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5b571cf5-c472-41da-848d-ea067fb7589b\index-dir\the-real-index

MD5 a2a0a728da875f40f296e6f2ad6abb99
SHA1 5a86c3df238ecf0767c2d683018aea4f3d4379e9
SHA256 ccfd03389d16cf9c6655953401b6e69783d2fad1123b3f8087ecdd72039e0562
SHA512 70e496de0c670fa18dadfbe240e15ec196102ad9dad37740e6c924032b1e6de70a491885ecfc50f5b34ce5f9eb70719648c16ca6b69014e2db13aff77049be8a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

MD5 6c74b139e45a3a4bfdebbac50c79f6e2
SHA1 00e06d9106d5d93ce7d75be2aa854f2c2d577570
SHA256 5b1ff260fed3eb0e891fb592bc47eed1087c4938113493610701f47ea517e230
SHA512 d0bb1e43679a08f3215ee0aea6cf80d9c30059c1bc726ffcc54e04034a6f5fc70599777b16b9f0de834e36e99090cf0393ef14b1a10453caea8787ef497a8382

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 06fcaae4d187f795f00a69bde0147d29
SHA1 5ad77cd235f6ac453967d5f2a74cc5a268c8ba1c
SHA256 9d8d20b2effbe403925f1fc0ec1ca0d12deb7f3013a4fe8e8c899ab177606707
SHA512 ba442f74c956b99f336f7558736f397570bb3d2c0b1cd5fb98b68001b1a055911e955278296d4858dca32282de11c304cd911ff1a397fc36064f1a9232e4ac8c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_uk.norton.com_0.indexeddb.leveldb\000003.log

MD5 15c0615852c2cb8084679ef3260fcd93
SHA1 040ca028a5c54a72ee73907dd9de373ee604c4c6
SHA256 d941e00db5d99cf567dea86d861d869577e3a3bf4b74b386525d3a33b260163e
SHA512 bb37f20517cd89201964d63a939275cffff4d680170acf1d6ee865b4d183bbc3924be640e917a75aa9a966c03ad78e1b7c9e9b27312da27188cde11b1f5dbf23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_uk.norton.com_0.indexeddb.leveldb\LOG

MD5 3b15ea45a51b7fac231271aec3a52114
SHA1 8f6005e72d11d4283ea3be570f3954c33b42a459
SHA256 17f013510bf006eecd7c4c4e83092dccf04d2f0787408e0013c281296c3667df
SHA512 a95bbab99adfce2911a6a53488d7a224389ecd8b5c9a275753a18848839b215fed7b978964bc97e3aaffdf75a9d8b39e5055b84e4cc657335e06778da945717c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 3340fd8a552301bb220bc280f1264645
SHA1 ff67fb92ebbf269a1e7ce4173908fabe182cdd5c
SHA256 8bf4fe750fd7bf20985a31546bd17ef88808f1da771f0a36cd234468a9ba3d26
SHA512 e934a197811d96df4f3a917ccfdef959727400d13b4f284ac89fb24b28a12d70e980eb556d9d9b5628e1a6a5214aa6b720185097d720d68fea6fc428a23e2025

C:\Program Files\ReasonLabs\rsScanner_v3.9.1.exe

MD5 7f014da8687ccd59759c8a984c1e7356
SHA1 9a0ce7660a23eccd645a41a5ee2973818d0cc35e
SHA256 6c1a7887dda10eb8409c8d131e6b0a88ce7290f4c5aa9784d9dc35a51000f340
SHA512 a4a15a141b64f5549d120ad8e09686448554c6c670ba56746c23abd58a71a7e8051d534d00255af973e974c084123b114027991be48f645acd7ec2ccb123107e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 1279775b7055a99208af7ddd44a42465
SHA1 6408748b9cc581b1ca80b61d331bf1eb2e77f666
SHA256 2d27980cfe926e7b4b4b315d5f1f6b3007ccd747e55127f99f5304d7256aa695
SHA512 c9924feff93ed9b2261a7113d2105582817508e86cbc6f5b89b7f032f1be9883567890fef9b0cb94449556ee3f5326068bc53518080049ba2e25bb9339f8d919

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 06f842377785d7215c792e6ce682f191
SHA1 3041cca6beb599c08f5947be1924c389a6eaba51
SHA256 ce19ed33fa660b14c37dd66acdcbed25f293036817e27e796447fc914a3dac98
SHA512 0f13eb9f1a4e2015c9eb8a34327637296c0ba26d7eeb61c26e673a184baae121ac9862ff450447c647e8fbcb852d9066eb1499a9856b62333b7d4ae89e4fa72e

C:\Users\Admin\AppData\Local\D3DSCache\f4d41c5d09ae781\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 220cba87343ff707f47f576341b71791
SHA1 42b7f633af8e6a39e57fb2dee469677fa48f8f49
SHA256 d7cffbf01368e75190aaf611ea40cca4e0943f70a7314bffb59382ad904d3053
SHA512 00527023ef8de688e2d89dd89584cfb04e1b6aa0cbb2490e60a822faf6b59cc2fc6e357ad705e59aa5b37b8243c07f57e7fcf4ea8eeef34c8042ba51c0cf0f5e

C:\Program Files\chrome_Unpacker_BeginUnzipping8388_203762979\hyph-nb.hyb

MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff

C:\Program Files\chrome_Unpacker_BeginUnzipping8388_203762979\hyph-hi.hyb

MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-bn.hyb

MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

MD5 b89a716d4dd5e25c6da42c481678b0bf
SHA1 10a526f4237bb4739434d20f4ba112ed9e13f19f
SHA256 e80aa70aebba0b2e2934cef3d0e975da7f5c5f6ca57c53c7fa32595a3d6b672a
SHA512 890f000ba51d2b5972618892b2dcaafb1dc85ceb957d29bcc7df1cef410fd04f7d70317c3981e583ce41ce8edd70eaf5ed2065350e346c3fd2a58a182e80550a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 f4641018077e32a0d626daaf6331c95c
SHA1 dabf0266b368de81d7fd8f7e4c2a9c685f79b3f8
SHA256 8c64bca8303b5ca66d2f6c923ba205452efd5b3360f49db6ee96efa78cb28c70
SHA512 395d09285c2328cbf55b9b6195a374d1531cf48c912084d6db82b1576a9098f8abfbe3a78d464c58a746416261e3cd8437defc739ba779fd4d5868a0fd34c774

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 150c2d38d23e2ff3bcc00d2227a4f517
SHA1 b208df641094641e736f9c3aa5dd5119ffeeff55
SHA256 7e6b6d44d2a05a032ef4e832b27dbff2a2f1303726f012043c31bc231f07f29a
SHA512 2d55b723da8b59021a7f8ffd67db54cb31d25ff68accebffb35cc4ce47f7fd33d69b3140697581ed19924e5276bb6f96579367ac26c059b3fa8d168bd8e46189

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b5b68f8f-49f1-493a-92d5-fa44875adc8d\index-dir\the-real-index

MD5 87cc2c6edef1d4dd6f14f0dbe74b5064
SHA1 4ec5539b3ea4a5c26d325d8df1478ef1e9e59a50
SHA256 d1120980ff61fbc8fc087856b2113ec0d0fc941f747e3c35d72ab78a6e1fde56
SHA512 6e07119c119456223a66dd1ee453ba774ed94a1a610d438121b05c651b09e1b12be9f45b25768e130427b680e8f9b4774b216c1916ac68e9549f48d54e1a053f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\426d6ef5-c056-46af-855d-d57dce151a49\index-dir\the-real-index

MD5 5de6b18a3f31fcd7403b43ac5f4c6afb
SHA1 8d419e62b9ba38beef5f3d3f106737ff5a639d89
SHA256 c981eb678c524c3761b07f2f0122b382e7d0e4446ed6e310afa50ab86767ef13
SHA512 ae7957852695202f0162b2a925568b1a5edf70c519767637539decc48340425dfe60d5c4a6248c68fff259ba1df467bffabbe159c9dd1d31993e000e990d3985

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

MD5 accd949b12db7c733992ae9015fcf6cb
SHA1 1cc6e7f3aacd755012e811c59addd4eb37755a89
SHA256 2ef7fb1fe8a2d176a8cc53a4d7e66731362615491663e8200b72be0acec3fee0
SHA512 a09a9393a539c7c624f426a9070aea090a5c7015539a74d409f62df7e04f7d01e1345a297cd726adf897bfc3f214ee687475fa36497d85af143866496274e4e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eded6e2a-b936-4bcf-b519-4aef2e4053b0.tmp

MD5 bc3683b1dc0876cf2a17a3083fb71002
SHA1 15b2ec4dcd943c3298a5f11f9a80036d5084e662
SHA256 fd1e3e0b5b59e8f4eb28cbc0ae33a6aa91b05a3e87495fe190201f1f190a7101
SHA512 65dc199a4e31f76132dbe54ff217f68f624a3a4ad2460dc8f9ff435851b7df10765220285f23d21fe63d5f7b03a035a730ac1a10a031bb28b7693c712a82957e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 fedc156958801190069b1477f2c1de1a
SHA1 953eecbb3e2975027e606e9b5acf6ae8f355ea60
SHA256 e53d31386c274434cc63917e31875a1d4d2eadc3aa9bec92f9d8c7ec0c7e4edd
SHA512 a07687e63f64bafa7f55aebe8d8deebf976be87abc8bf1ad1fbb84881faec206a3a13de28e3f1f6a9775737f5f366cbc4e70b0c7bb6a3f6badec20f7ca814242

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log

MD5 e417327a19e2d356b88a8fac5e22129e
SHA1 f077026d53bc4e8c5fd1aec1806e438d5d5ecf39
SHA256 163277a90ab36f281db1c16192b7b4cc1f00fef18bd748de94d7b7e333c1b9e4
SHA512 890bbca0e6a7547c45684c55a4e2ae258785acc80dfbb7ed0ab2aa89693c4be92d17ddeb9072fc050061819259bc1a8ee01aa0224ef3448146aba98a75a19f5f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 1bd90049e285ef4dbc9bd0b8764a1615
SHA1 985bd6c544a36c4fee0a72c9d9169f57fb940844
SHA256 0393f2abed514391bbfdc70d00de8d32d0df191152cee7ee663c892785760110
SHA512 32a6ec6c77591a2c996dc41078d6e23f4984cadbde98b3d65fc47aab8ca9f32b56b80aad9cebf58633149ef1dba49aca90a1d97039a198e43d821d7b5ae69792

C:\Program Files\chrome_Unpacker_BeginUnzipping8388_95886719\manifest.json

MD5 55cf847309615667a4165f3796268958
SHA1 097d7d123cb0658c6de187e42c653ad7d5bbf527
SHA256 54f5c87c918f69861d93ed21544aac7d38645d10a890fc5b903730eb16d9a877
SHA512 53c71b860711561015c09c5000804f3713651ba2db57ccf434aebee07c56e5a162bdf317ce8de55926e34899812b42c994c3ce50870487bfa1803033db9452b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\282f05fa-8d2c-4265-969b-065e8ff784cf\index-dir\the-real-index

MD5 323a3597555dbd2351cd60b1bdbf7076
SHA1 8a21b7f3907ce4f2d59e0a962ec91349a266f97d
SHA256 ba79e59f12f7cd1bc44ddfafd7f6e6afbe4b10a804eac17819352e86ba33fc4e
SHA512 c9dc28637d03dd8bf2135f540257685bb64c87accc537f7e193ad8d15811ed93b606f45ff94480f0ea5bfeac22f34cd72a2b782ffb6de46b25a8adb169504cc8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b5b68f8f-49f1-493a-92d5-fa44875adc8d\index-dir\the-real-index

MD5 622e00403350eae7613145a5cf34de93
SHA1 a3d4e544aed7b2e9834e1e6de69b08e507b402ec
SHA256 0b85839b197a5326c76ff83ac6a448a6221c77a6bd428dfeeccde76aea369f07
SHA512 6e810b941b8859d5d0c4ba0cbdb1c2bb94473a8ce7a46ebbd824426746406adae6997fe11352499acb5b1717258b3572e9361710f52dcdff756a4c4334d8b87b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 20c6d10a26241b2de6597cf1220c00f4
SHA1 96d308bc905fea9e3abfd111ad5c325b493fa0d3
SHA256 e4db3febf4bed092730c84907ecc932c98a9d8234ed6b1df91c000f088654b9a
SHA512 471372dd9d1da7be106295097057c81cf3ebb868fe8af4982f2a3655bf6982d9a5b90196263644bc827017ca43e992294389472a43101f684537e42a30074d0e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\426d6ef5-c056-46af-855d-d57dce151a49\index-dir\the-real-index

MD5 42ec187eaa01fb8e3edd9208c00ee0c0
SHA1 9961ebf547e3e8294c9d4f7cc29cca2383506f3c
SHA256 bfa413c8b0833186a7c1c9bfefe3fb1ef5cbe2f3c209747525ec981d7583e02b
SHA512 4bcad35a0f5a038ceb1cf390786363b0811745d3bfe6fb148a67d4bffb64f3332c76c0ad5979c7db6d852f0b542a33698eb58394dd238d645e70a0c3255ffd85

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

MD5 e9600fe845710f89372fb07e6e2b4f1d
SHA1 3fd0982a3bdfbcb36abcfbbb625afb3bc2b4802e
SHA256 50bdb39de390b268f00fccb4aca7b1e2fdf9af70788570294b696aaffc0f4554
SHA512 2504d316234e2d07c5c6b1205f2678342a35865c3314a6c97f6ca6072627a83e5e2d7dd56731a6d7da855c97656b7e704aee24008e76a267f9f7ac12e9373925

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 c1c9b9d785c937a174592ea6e0e87a66
SHA1 b33ecb1dce12380f8f225052813491c0014e6f6d
SHA256 9b5977de3d7ad63215ce56cf67ec36c8daa3e02ac6a9682698d29dec9f4563a3
SHA512 cb3dca9c64a1dcf0a9434ef1e60aceb24ec1a772b34f9b9f9d8be3e624912f528b8af7e3125026f73c665f68c40738a5df76d5a0a3121d75b79bf6c6af4fe52f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

MD5 32f9c6736adc4a8201ea2444a4742300
SHA1 13d491fdf5ccefd26655810a395727fc50f3886d
SHA256 39f72f5c8dbb984d8b91bbd8893a772f9484bed03aa5b2c250b8cd5b6f9eed38
SHA512 8c87671ee34c36ea3f5764246914f3f0f100c495ab4798456d316d065a376cbed218f4ecdf77502d30a38416577119c9c820f3be010fb44789f30d604acc3d3f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG

MD5 4a36c10bacb4eb608e9fe42b3ce6da4e
SHA1 7ba5dbf5145f5253137f6c86056f22f538f62234
SHA256 cc4c2a6dfd72b80fa6b213b80098bc1046f7db4fb0dc57cd4f3545f9f02ae547
SHA512 d4d6f0e9f1d241eb7a902efa656290f23c2fbbab635094fa9afcfb5df660c0097a700a5c67f190ec163f81619165344c6e67d4d27a7d72fbf4545689ad240453

C:\ProgramData\McAfee\WebAdvisor\UIManager.dll\log_00200057003F001D0006.txt

MD5 81960cba68a62eda718f40cdf1c66dd9
SHA1 dc30b93321338c24e38d3aaafd34c325bc7a13f8
SHA256 4fc06b4a372000bc289a4368d06938d4f3ea9690742e87d0e1da84626a7689ec
SHA512 7ce8b70d46b64f46b4eedb60b67ed9fde5e43c1bd0356112f7fefaedeaf4ff63df128eac058eb04b9e9540b39e80a238942614fd0bfd746d9ecd62cbcb20b7dc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 7ea7ef07083d45d88aa453080aea4fd9
SHA1 2641c096f170de35f5688c129d5628020eb694a3
SHA256 0898265e7ee9cbbf40b2f5bff483e6e943dfbc999cae11551a00511c3d57524f
SHA512 15a7e872f610030562fe52e1d6609116a1f78ed58d35b222fd02d3ec0741c9503731ec3cfa49c310b4de7b3c9c83e7dd87a663e1a1c2a2cc791219838d1eba02

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b5b68f8f-49f1-493a-92d5-fa44875adc8d\index-dir\the-real-index

MD5 031c8cc0d5fe7dc2a42e3d78639c1d43
SHA1 94ca4c28078228c0cdef9863546a5339bc819a12
SHA256 a4eb9a9b38ed2db569641ddce54f3f697bea0fa9370ee7ea0ab0bad8e756c6a7
SHA512 79a3fa28c8ddc3d58723d1cbdf23546ffa21f5a1f9a7d15355c5820ff0a5b1d8364918507e4da65eff3e71eb40759a4f40667ce33bfdcafbe24d1e24ee038a91

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\331bed41-2f2b-4f10-9192-8789cfcd70dc.tmp

MD5 7f28d5632a4cb70ba739caa2f57e26bb
SHA1 864eaaeedce498b91f5904f5c9ba1de5dafc2935
SHA256 b53af04f170a2abe8bf4ebbf97669f3d814668e87067151d72beec402c81d14b
SHA512 e46de59c572095acea559193c4a22e8c57d643db800f28f7e1f1e1761b2491dfcb1a3b54de7accf9451f0b1813c938c92564a9f4a9c5033212b33c5bf629d8f1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 853021048cdea863e16ceb2d86435161
SHA1 cfba679a9153b5c18ceaa8c3f37de43911099bdc
SHA256 a06f597f7b6964b988e4af3541a3cac5637d7d758c2ca7c256e42b22a7219276
SHA512 0bb593698740d8ae3cc2f471c2e9cd63650d9ebebbfc8c5787a56ee0bb6aaa688262befb2b2e4fed4f21d60afab304e9ca8558a9fc3beab121f1163543f1fc50

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 e1c121b1242c7c010b601eb2e38d5d54
SHA1 80a7f703cea5bd30a07ecf8d86346377302eebe0
SHA256 e4e89ad6642d6445b6bfa62598a17f7b6d6a492f7d46d9c03218a015535e4d90
SHA512 dcbc3ef0465412daf7d6314e7440e4ceae6d235a10244b54c51074e602eb302972affd44ba649bb2bc79fdde2d632c7af300b48014e80abf8267aa416b1914d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\282f05fa-8d2c-4265-969b-065e8ff784cf\index-dir\the-real-index

MD5 35befe44f3f808a38ff342efddad4355
SHA1 3456a7b37704a9db9de9bfd83e9c6ade8df082dd
SHA256 3135b2b9eb1aafe2a5f8b05b494406d1a74528f0172cb860c5b01652121f5266
SHA512 d86ddc96c0eb843509b0e181e4594cf6e0a04f03ca3db2bee7d7e683873bb3a76ffc129e48aab5ab89914e99f53f1bbc684cb254dbeb8a323cf5967041761a83

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

MD5 cbe1209c1525065d9aa876b049fa6b4e
SHA1 d26109cec2d9bf11a24fae02c673a0fa5cf9cf58
SHA256 ee5e1650f76c030d639f28fe42c0edde3c749b6d573615a0ca7e48aee78dad5b
SHA512 a376b0019cbb3f9310742fe6f37ac7cce5177314a28e8a8bf233e56fce456e778330cc040c5758fe82730157fccd59d5641b40b296c60fa9ad19102fd0e88d93

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b5b68f8f-49f1-493a-92d5-fa44875adc8d\index-dir\the-real-index

MD5 8ce956c852aac85390ead081043da44a
SHA1 dc08e35731144b996d532f4e33489fa7f0fcce5f
SHA256 fce5a10bc1969e672032a9e9b27bccb6239c4fc431ad0680a7ea652cdd38b676
SHA512 5390760bfc8282f031c8618ee8990f7fc32952442b993cbb783345d8225d24acc334db878c74779105712132822ceca53e3a87c83a5e4a1ab17534ca3b05dc9b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\426d6ef5-c056-46af-855d-d57dce151a49\index-dir\the-real-index

MD5 644705cb054bf46da8ccc945e9903e86
SHA1 cfaaf8d3432ca07427400a69c14b7865bbaba00a
SHA256 b023ed0a2b2158396fe5cac92905c5e33cb3ccb2b024a82ae1d1826d865c1304
SHA512 eca7e4d8cc4456f18aa770202e3f0eb9a698c65587ce7adef552185efc273e5affee86a1b3e7624ac97bfdbcf80f423d261b153731d8867ab6646c42948ff3c7

C:\Users\Admin\Downloads\bb528906-d673-425b-b8cc-89a48a2c2a78.tmp

MD5 53aefc398dab88e18fd4304261514605
SHA1 700b5c7c0b634f727fbf2a7995eb7989cc64ff28
SHA256 8059000382390906529dc627a9c2d6aa260740910c5db51c357e203430b48f75
SHA512 bf7a7eab64fc3e3e43fcfe54451c127807b435a19dcb425392f510a4935ac889b4be30cf51204c3d6c03c8030bfff548f7e0a2e52964f8f29456145e3e84238a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 5b8c41f643a74e035d7d5dc7cc9a8eb6
SHA1 e1123a3318509d328df0a77204f14eca69794871
SHA256 4950e8d0a0906768a1d8ed0af083cd2dd00fbdaa9c12075c71d3391fa7eeb5c5
SHA512 8b478fa7cde8387d724c0eec61ac194dee100630300251693b19cc518692d6d188d91ccf03096f2ada702dd57476dd8e6841aaebeb28c4dddaca7d03e0b9c98a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 474077e4e2bf4c583909fd9b658a6b44
SHA1 64704b938e9875159a493ca4e04704a46fb084a4
SHA256 3307f70c04047d87d6ba2eaf324877fc66c7913d32e79de4937b14546a91abb9
SHA512 30c07beb67d4dc2ead52886cf49c74d567822949dd91a8dfb62a335d7f3576822a36071aa0aaca57b1ae7ed729ea35f8544fb14f8eb68c7b14409e66f2c51453

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\282f05fa-8d2c-4265-969b-065e8ff784cf\index-dir\the-real-index

MD5 1000cb27dc0ff492228e1c33826e748a
SHA1 0f868674405aa2226c2b0709687e438426bb136d
SHA256 5cdb9d3253fdc3b4b0641e3032a5e3d8aabf8a06462ef8da3354de5be5f31a6a
SHA512 b0afeca682f6924020d2f2f1400d72d85fae5a366fad43f489870b51f83826ceef1edabdb052ed6e6bbd0abae5f29305f17073b1619ce1addd0ee0e2948f6381

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 df86b3ee4543a8d9fab92da8762cee91
SHA1 87b316f77daaffb7551c71772b70fc63208a7eee
SHA256 f576d588025b58f30321c471725323428fb606d1ad22717d9fa9c3e48c03606b
SHA512 bccc8739ff6701d86046db6aa2f0e3d450cdcb7ec182d50f0e7700a7afca8fe11300bc8c8a90df785c24c5c25357770fa685d5d0e00c92d21cb41de6dde870dd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 7d079f8382c3777b471b0cb8a2b79635
SHA1 2b4e7ffdd75476397ea42b902989eb8d66dffd75
SHA256 b298fd0502f8285ff7606672a9004ad17f094cfd85d9830e7c977de785fb9d58
SHA512 cd703f7a073ff7283dfe4ac16b2d8b7da6ba3c992f1de7d177af049469cc591a067db86381a1a59ff277d1c091385761694adfcce0a913aaf826a89060d989da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

MD5 7ae081c7166973f6e7759868ec6043dc
SHA1 455359ab9b478adc4fab530181a398fd64a7978f
SHA256 31ffeb0dfe1d3730c6344a5ae2ea3985df289dc7b24e65d5e697f29412e458c2
SHA512 9d92cfe2a8a3673952fcce518a0c3f78f69d2616054f38abb6616ea7b452a9a880ec939342b4b836bb9e8caa5a7935baa8645d1e92762351d80c8af25b611fa9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 c02ddeb6fffab907aaf6016ce05e75a3
SHA1 252e8665f74c2378566195bf293325bdfcd9c938
SHA256 6b9ba3188c06c989957bc1ed7e00d33c5e23d095204e40b00ad1bbc3f7fa8cba
SHA512 c4e51eb85834df00ea7158bad547e53b522d636ea29b8877dab1b634454a43896612b639c53dc2bde021b674c32fdc48079010e1ba6b14e5db915d4a31afc25f

C:\Program Files\chrome_Unpacker_BeginUnzipping3708_66751059\manifest.json

MD5 faae08d055ed123742bc415108373af6
SHA1 26f07cc260dce6c856c55c9da82c46795672c04e
SHA256 7bc64209a8d58605fcb372c5c9a486a08102dce7a711f1c03368727c37448751
SHA512 8c4ad38651a2bbc03427f6bab02a1fb4f4c18303457763c4d676ab7e5f767c11e03c92fd22ef6ed393a49164b7e73ca3eb2215d67a1e6b868b93ab6d65091880

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\426d6ef5-c056-46af-855d-d57dce151a49\index-dir\the-real-index

MD5 09ac3606ca6602206280fe662611f8b0
SHA1 47457721ff05bdf8b919181aeb02d5bd7be6899c
SHA256 429d430a635f39f7273b31361be146821d48b9b76347d96b45fdbbef29e643d1
SHA512 2379c03816f5ad787d9b5faa8c8bb772567b7ed422eb31d39b564c5adbbfd9159cbdf353ed0e94bf6ab0d748f168301e449318550cecae6018a46758ba826533

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

MD5 590c34248d2ad08d12c89ba37413b3a1
SHA1 f7887d55951b9e9153fabe1c301c00fc1c8555a5
SHA256 769b48f89ce09bd80a059467ef4eb99e10ee5fb14d89feb544703c5bae75024d
SHA512 4b6787c9077e290b29e9a775a79761de670cbf8955c25c048f9983670a92b63b678643d0d251671cab19579b4d7de01409946f04a534537e4cb610527a650104

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000134

MD5 b15db15f746f29ffa02638cb455b8ec0
SHA1 75a88815c47a249eadb5f0edc1675957f860cca7
SHA256 7f4d3fd0a705dbf8403298aad91d5de6972e6b5d536068eba8b24954a5a0a8c7
SHA512 84e621ac534c416cf13880059d76ce842fa74bb433a274aa5d106adbda20354fa5ed751ed1d13d0c393d54ceb37fe8dbd2f653e4cb791e9f9d3d2a50a250b05f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5cc2365d-b8a3-4acf-9993-6563c3fb6453.tmp

MD5 18aacb90203ebb75039cca11a041bef2
SHA1 88e2c9636580cda6034d373845f2e61eae08fd5f
SHA256 577ad27acddf39ab77d155bb557931e3062d789377c7b0073b1f482d2781f3b6
SHA512 462153c075795065d683aac8df58a8589b2e2c7065494d953719f90449fc3f7dca0ef03bb2757d1dd1ef6e535ca3efeb6bc029946d89837c3fbff01ea3130ed4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000142

MD5 a06da7f0950f9dd366fc9db9d56d618a
SHA1 509988477da79c146cb93fb728405f18e923c2de
SHA256 5d9190292acdd48ba0fc35080f7e7448f3cdf0d79199a4d23f0f49b5341fdf29
SHA512 b53d839c5464f7a2904cabcd1e7d6456e2ed1702254450833fc586f4b3a4e6dc07c24f443415a2710e241af8d2dda1b9c17f050045e76501e9b5aa2cb4801ea8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9350731016b2fe1f839819595ec73ad5
SHA1 b49e0b99be2054ad6a4f0578db3d829a329814aa
SHA256 d741724742e460547d4d471f15e9a35f56d615613babff3e3ea85b111b9e03aa
SHA512 c270dca4e64bcc213bf1e3b80f667ee8a1d6b48482ae99973b020e4a42ef54bdbacbe409c72f5fe7df4b914a315d710c9565c87198fc1683714ab31769967ee3

C:\Program Files\chrome_Unpacker_BeginUnzipping3708_218210723\manifest.json

MD5 fddb71f74816a6f4db6527559a0907e6
SHA1 d78672ec9ed9f0eabd8def8618f61eef3ef63839
SHA256 d44c624400e6d1802e878d69ff2ac38ac8d2ba73da60b45dd3e46bb1dd545717
SHA512 e7739a7e9324a3a2a04b03502e0f562e3eaf70ee1607d0e3adddb3f4eb83adc2999dc2d5ca6cef79f47a65c5c1e1b0cc9c62c08edadbf9a06d7fd8a929c65f0e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\201c5651-018c-476c-b90b-674c0fe50f21.tmp

MD5 fe8ab06231b2b205e4b3e45e0cefc1db
SHA1 6e43cc598dd2f8d8e4189d2c89fc9484e3ed82b6
SHA256 b45604c7c3b213d07fba35a406482ceac67c9b7aeb295eed6751149a3f01015c
SHA512 787849d391bc8c805ebdb9a3e2fa935d44734167e6e882d5c97e58012991c3fff006ca3ba5d00fe9e7b1a681ea4cb84ff30feffada4e8d88981c8de29238759d

C:\Program Files\chrome_Unpacker_BeginUnzipping3708_1556966995\manifest.json

MD5 ba4567388c38cd975fe4288633763434
SHA1 0cfdb35b199cac669fd61d4231657ed095b1e9bf
SHA256 dd4f941794a9bf67fbdaba16e50b061fda3e08bf3128e9eda9c36fba7f1d7bef
SHA512 d5bd2d0bdcf1f9225f4ae4047d97dbe29860bb432af61d907c8a60875bfe1735564d2df41a9101c80bc0b329f3b18f208756a3d86b8e35eb9b09548cfe7536fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 387a9a77bb593381e03c3564dc3d5c90
SHA1 384deedc464a96d584132b59674931fc66d27eed
SHA256 1d53b98cb8415c49120db12b3eac59b9853ca52abf06fe396d45f29a118fb750
SHA512 66c22697439ab61c7fa11232f02daf8888b563fc85d4410f97b23b0c695da8e93f7bbe5359d4be57e47fa6e5bcc879204c0292e0c56693babdb2b3c78e442290

C:\Users\Admin\AppData\Local\Temp\7zO08870BBE\63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14.exe

MD5 796cbba02beaae7cdffd1e5afa234fcb
SHA1 a8fc08c44f9e2fc4e292f6c143ebde916b5f8d17
SHA256 63211b9c4a6b331834b5fae7091f8cc38477d5cdb64d95027b3dc33e84e07d14
SHA512 3afc9fd9f4c96b84546cedd3e36287d08955e0988a0dd386355285b644c5ee2f0d3e7c4ded70c8fce75ab2fdff2ae6c87d92a6064f4e307f5179309d74611cfd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 713440c61ee19bbac7575da89a8fa03a
SHA1 b5dd058399eb8ddc139d65f6d159978b7ab0c968
SHA256 3dc8b0f0a86cc96bc757782f6429f1295f6f7956305f4052749e884bb2fc89c1
SHA512 a9fe9ddfd391da2383284cf4e56054e53d87cfac60ede1adb38b48344224e1a2af3507d2056c315fcfe1fe793f980227422d90fcb2f092059e81ec4b528dcb28

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\installer_prefs_include.json

MD5 da0bd7417305735cb9d30f3aa2d36ff8
SHA1 50f9fcb246e35fb791f9e609e41b0e6943fa8636
SHA256 0dcd968bb79dc07e84e17d2321662a148f5553789c2efe4aba1eddff4aa2f979
SHA512 0a17effea9f14755f8baf081e2c43a8fcdc23f1708cd69176aa2012da4f7015621e04ea940c5226c761b8b6114e2355dcbcf0a83cf5bcbe833ed08c6463abaee

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\installer_prefs_include.json.backup

MD5 e96310fd8b32428f87574cda56d8533b
SHA1 9946400c2e67043e74e0451972a9dcdeb1c8b7cc
SHA256 09a87934c362a94bc2dcacbf1f8bf03cf7098fba46c5fc61bd6e7caecbdbce48
SHA512 30ac9909d451ad44ba3746a8138180189a3b71aa830d794003ef493b4b9a8450fd023e902287775ae278225b248c85202fb9392a8033507d47331c86986e37a7

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\opera_package_202405111433561\2f0623b3-b6c0-4abe-8bc7-6ed6cdd462d8.tmp

MD5 02c14014cb9542c62b4e539309c6d8d6
SHA1 1a86cbc6cda0d0b28e01a9293af3ff81e0a244da
SHA256 ded3521dac90e0a986083ce947fccce0404ec871a9ac189b6ac04d817ff223c3
SHA512 99cb782267483ff21b2d037aba3e15e27aca096afb977afdbbcad3139f4e722ef7260aa678cbffedb1511170f97c2040510fc2bbb8eb967e2af9ddc753faa69e

C:\Users\Admin\AppData\Local\Temp\Opera_installer_2405111454096315240.dll

MD5 265b2e341a0245c17c11b615d1c5a9c3
SHA1 4e005128286d453209ca9e27ed449804f9ef2f42
SHA256 919982000f557525e38476fac219e8c26c5414c1226479480e861f9539589d9f
SHA512 42228afe979f51aaad864e0a8faefcc83e2272e7d66b71a40215ef50b70f9ab2785aced0a679b911e89bb0d94f5676d04503e2df39389e2abe5929cb0e0bbc68

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat

MD5 a392ad99b91a29fe973cd824e365a0c6
SHA1 59faf4dd7041a1e7c6ecf28f8c8e21cf380dad46
SHA256 977dd9b2431cfd67367e446989de68eab82f13f517a9474892fdf1cfb6bdfc2f
SHA512 75812c49e6fbe526ef4116203b4aab107b7a8640a1763f4ff9cdf990ead8d9a4b41385b4fd779fa5f175386f00b24c226d8d01a49df50bc6b029e055906aec07

C:\Users\Admin\AppData\Local\Programs\Opera\109.0.5097.80\resources\custom_partner_content.json

MD5 e7e09cdee0ac28c06701a758b434f7e9
SHA1 7e707725a9a6d13c3c952379d40dd0b5e5c2839e
SHA256 ef1bb51608b73217228b47d898e3e3f6cd2eb4363a96465a7b7b607d48fec1ef
SHA512 cec21ac74db9b4c03b1315208a0a078deefb90c4fddd255840c766157d690e0fed8ed8cf110a6749ca07febcf17873eceb5ee969fa627955f903ec1f9eefca0b

C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera Browser.lnk

MD5 63876d016987d3d5905c4cf1f77bcee2
SHA1 9e1429c38c4737c33ba193252a28572dd684c97b
SHA256 d6a30d8cf7067a3856eb645a1d35f776f5bb8fdf600e4c6541302243a86db91c
SHA512 17cf9c86ca73b2ee1fde59e316bc30f3edf7b55aeb340480f39600983bd6b1045c0a788d9453a7a180afdf6f4c1802b924942d08d0a42ee9af1549b00ce6747e

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State

MD5 a68a5029a4e750fbe8fb66771c7d4598
SHA1 4f74739585464cc382d1778c42997efb8c918be6
SHA256 93a3f214b77e0f42504f95a3be0ca9f9165b61215c43f6523e1a3919c9523c53
SHA512 4cfb8c09a697af069b403028741a9ef7440198beaf58eacd9f6579f8949045655129606db5a8c491b2069dadb84b55207d61ef7646afe1ec0b646ac49e7ca2d9

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State~RFe6f7078.TMP

MD5 4360c7280e04fd9ca8814968df9f94c8
SHA1 05076673a8d3708b0ab26be3a4a186faa5dd7bd1
SHA256 59658b9c7cf27f6770ce88bcc8a975ef644f07d798d6cc889a96cb0892da183c
SHA512 2a25e7a2fe420481fc50d9352b92e5a3b07d7d47351ef51cd73bad3cf34b2689f2ff6391c90e2cac62b460304f8f34b682985bbf8fb53c352fb6d3886a3e88ce

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences

MD5 679a01ad9f688edfc3dbd633dbd2d302
SHA1 87682828ec15905ccc41bfec2ce5e56560e231eb
SHA256 f7ad7f0eda7535c0f14fec27c20ef38a09a94da21377e5a1cffa3d339f478b65
SHA512 84fb5ca1ec48b73f635957189bfcf7624bd27e50c95e967eb7386da2051dd01584219a661dd81b732b5fa6ab81b30e4ef35aaccf3a6796b0924bd7df5da5ed7b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 1a1d1588801eee3986550a34ee34b573
SHA1 7b4b33ee049d93ec1ded34f9ce40ec34176c5ab5
SHA256 2be833e7f36ce9178f72ca162e8b4567ccaa44161d76e9d173d6a460c5b60560
SHA512 6f0b5f18e66f90030f975ed1b745f707345c4fe8fd9e9559bb3685579f089a0e26f82af9877dbe5474fc02a674093548f519bb54e6cbe9ceb53bb512b4d25c0f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d9bf03220f32377f6ca8800ed8fc8d14
SHA1 b923bb88f2a840f3b7854326273993a68117ee61
SHA256 e33816ae5660a1495a15deb343a237fc1e3efe22ba0e78d3bc6bb86bb76d8e2f
SHA512 c7bcc7eea86b63d98f4d385f7dc2782b9fb711ab861a46c972f81501174a3768f794fdb3d6fadc17739fee3519f75ba4cee14d01c1d0eec8aec921f0d0c06a57

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences

MD5 5ec7b3b827ad98007c8b46dc4a53f860
SHA1 4fcb26f3fbed1d49726ed0446292a1873cef93d6
SHA256 6c6348da98fee8113c2026f096316a6bc8a38ae2d52a3588f7959c6221d71359
SHA512 b444592e51e3f61f1083ab515f3698c168fc6fa0a72c735cf8593899d0271305697be596b2c7d4b2784d51810c62d48abc498538bc229ee124645220a520cdc4

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State

MD5 7ecd205b5b5222bb95778affaf4c2ba1
SHA1 032a6a40efc23e029f8e029fdac02f535052af9a
SHA256 95304a4a4bc878149c56895c92f6f5db4fd556c61dbb7c0dcc62bb1112cc0cc0
SHA512 68970bb9810d553404f354cc51f556da06997c1f64ec4e3737257e6ad3a149d2633206d035b0c24842477b43c7fb503f491ebc6451178e682de947bc72037b2c

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences

MD5 6f1b44c800be719a263c5d30b2380de5
SHA1 bb6db112db36dd054cb30f732e69fb9d09196a53
SHA256 11fe7ad1f26e4dc817296d25b100821cdcebefe904e8cf2f06c61f2faf267787
SHA512 3665e5ef190e7e949e3e398766d943a540924c0dc916a52592ee321fb7896830f4e27f04fe7bf70a8f054f0ba7b1ff2235c91e6ad9a71f362a91436d6b07e4eb

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 12f9e872926aa09a790ff831b2f2826c
SHA1 01d1dce46ff21c3e519aa108fdf0f14ca36facdc
SHA256 ff651e8e1950d06b07c6d51812b482f3edc843fc3e18ed4bf03453b9ff7b6b8b
SHA512 dce13e8e816a5ab275799fc13e5343b156ed99db7472260aa084319ff914c452bb767a25f5dd07d23c4f5d1d4656f53c22f1c8f3f43d4d2fff1b54c9e7b78003

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 133d28dfeb71812a5cc0b55f16fba518
SHA1 0e0db74a54031eb932d7f62392a4dada4b370dda
SHA256 909b7d90f11c065db8b3facb66a45532235a6fe55c2e25ae3d3dc5d54a5dffcf
SHA512 ade89016fdf28989df27f15053ab043e8d3b7f0c8a9290d8bfe221df1294c4aeaddc4fdc79bd5dbe1adc90b36b79fb11feb49d4b7980dbdd979d2e396c29037c

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 efd62317c8c039a2145defd9c7389afe
SHA1 ffe06dd333166b1d573e43d8abe51af98a58a69c
SHA256 c148fefe28e8a8fd91c6a60a810da1801240f2cb0350b0c607768487854ec376
SHA512 3beef0583e50dbe8c7a9c2f801b8595be18f63b4f496224c5d77abc86bc6d357d27f7b740ecb966793b3d4d6b408bc15151c63bd508c20a15d502edb4f406fb1

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 6d6a85ed9ef4f8df6d854b31eaa7aeab
SHA1 fb7a6ed60d5a94114d0128395bf543ba9e897f0c
SHA256 8ce5ceb65a46f95dd69524973394377f8443529ca8314cdd848f48a798db54a1
SHA512 8e17afc989f25187cae167974807d8ee4ee100472353750a871b670be7ba62f5a2a00059a860a8ead400d24357ce3ad61aee95049899c94b5604d991fe913056

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 e178e40e5f4ee52155066e75910f6310
SHA1 5938a9ac1aaef1ed386584f91799c888f8cf6cf1
SHA256 734b74c3e12bdc75217a6538a63b89e76683324b51691958a41d2c2d71d6aab3
SHA512 7487d39a3e2fd1a81f1959311312f2d7786760c2293632ad7348e79d9a706d2dd39601bd06f2815504ad402db0aca2c75d7cef79393b67289ffd573027845982

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 f09253a8d345dcbfeffc9911f124a961
SHA1 44a90a5dbc2c5780971553c47a6d15634f317794
SHA256 5230cc2f3c058511d1fb250c7a420a72f71a7d1ef69431500b9469dcdfd4ce6a
SHA512 bccb025bf2697fa91ca3ed9292faf78e2ed8cef53dfd7ebe03d71ec1b7f3996f9c317018130a758b0d86147728c4b13b26967d6a2b0d5783278afa015c595de1

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 64c0d975bd4f2f41e6fd31a05cb374d2
SHA1 028b48a1a01726c9a0002b3561ff12b5189b9e14
SHA256 22d4ed4fdd05d83aa9796bdb94b0fa8dc9dec4be03abc356ce74049e75331495
SHA512 65aeb5ef41457c97ac6949191c61cea0f4b81b1e5c9159bb64fa821e0b21efd325ca66214f48d9546d98647381a0b6508d6c285ae82e468e9a70d1be52e244b8

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 f62da833970cc75c62f810cf50943ed1
SHA1 152fd04140b9f5ac81fc43a583148dae337c1e6a
SHA256 02c36e751796fea9b9feab835adb445e1e287ffef4a8607b6b4269f401fd30bf
SHA512 82f63155147915d56c66e14532b5bb2fab63885917a31bb138faf2eb7906722e9641d36b39db04931f3219b5423c849a72cc7baafb48cddb8fad9ccd375a74c6

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 9887298048778b7331c91ebf9bd1fc94
SHA1 2e87b4fd26b8bf39e32146c02d5b3c225775d961
SHA256 a7492d0f3ab7ee031e1282f27b1d4f75dd3b1f4075fdf99f77f7b71a7dbc96d3
SHA512 2e4a914c0777f5b512a29a2673047905e278aa502e47e67fc6d78d7f49bf5faf281879569b5acb1338b60c69ba0361ca3e76105e0719019f88c3ae0609274e90

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 f30dd2881d11749e4c462463fd4b5422
SHA1 3e6c1c331a05a96bb891d003fb3e1c5cd6c123f2
SHA256 fa9a1675dfb9ac0469c2d62f40e5a1be3ad4fd629f332c38b6b62469b0c67386
SHA512 cd0df0abfea7aa7e5aabefd7ed429feed57464a03ea367c20bafb9d55d4c374dbe986ba7dbc0843d20f43ef5c91063cb1c996076bf2b30dc5015276df2386dd4

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 c1576ae25fad4852eefa02cd024427d2
SHA1 a01b5ca4810790aaf67d267a3ac5d7c789da62b2
SHA256 6ad2c2687b82b68a02cb446784b30431b546e50d81b6a2f67ee2249438941e17
SHA512 32828f40e5b170af5a345fdf4f449638d9dbec750ac0efd01ffbdcd08996a0fa0e0fcdf4fd5e9947b6d78996ec2a567664e2c54ed0bce1652e03d3e7428f5b0c

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 7d555a650244a24f9f01efff326d2bb6
SHA1 e06688ad9b8556ee577763c7a93711d3c9968b00
SHA256 aa6cc86fc1e0b1137bb30566e9c859ee9a359aa0a8e4d3b7d452602b20651b85
SHA512 8e233fd9bbef5eb90d7f15f53d47e147780b2dc25613ca74eda0fffc7b3914c97e55703e8b931bfc4957ce315f90f2a5634330f456b75151f0395db22ab93c8e

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 7f8f7eb6d62cc674545593ae3a60c0c8
SHA1 c2e1272439ccb3647ec4c1b5ee141786721a8c7b
SHA256 522cfcaceb92154c7ae57b0a4dcda57e931b75e89d5e6c0754561eede36e4efc
SHA512 99cebc246efd87fb74182d7525f039d4e935dea2742030f29805c22270cf9a725709210e0f544010509a75e775a4918c2b61bde05ddc961cf321d7a1b6525799

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 1a824b19d83fcf88f2423b4a8adf7abb
SHA1 9a6b1694cb6a4942cb4cf9a7c90356e4b25837c6
SHA256 cdcc72a00ca30f794900b978f74c318ceda5d0947d0fb829877b685739a79b56
SHA512 56c0e8d8c6b46e56a6e9b6bd9220bcf81a1b9103b27c97f29f57cfbe0625cc507b05948165ec03599938c73a5ae3a00572f05fd2ffdf7c58c0598c1efad279b6

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 18da8fee2c2e07b00a1f418a48b0039b
SHA1 0dc36561dc688622ee65a327e82c17e84b8b73e1
SHA256 cd0afa8f04914732cab11a76f251fddfb8ebe70707f7e4213514637ebe3cb62a
SHA512 9b005212d553bff1ee9041bd0c3fad8cdf8da25a2d27c343ad0c0ad27d13e080581431f6e69dd439770dfa261e8d060e1b1725e4b3e4918e0969b860926137d4

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 7e033f25cbbcea695e35670b8d561ffe
SHA1 69e3540a700449a28398e5edf1b938dcb66c79b0
SHA256 52051badb659c9d24b9b61395d0d2b3391f7f29d236015c2423a418bd7ffddc3
SHA512 d9322238dfac94a368478e293d02afc69f887cea08366c6762d04a39874ec9a587c87fc7edfc85b154dc1cd70bb29efbde7e6329665c7a70f673522c22e82ee7

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw~RFe6fbcc3.TMP

MD5 9f39bc1b5d7d3c63ade1c3aa4d6f27ff
SHA1 81f173fa9d3b05a97782a8b1083ae514f8a7e946
SHA256 7b9420d38f7a8dbbe5204bac842eb9879072f0bb2d674eefe8553d570926114a
SHA512 9c344291ecd0603ad60abc0a373bed10b2d9d2e90d4a78641d0a3ad61d013e59531d7312501c76672f302aa29ff027cabb2dd4661e63a7349489677a959ac525

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 bc12934f67442ee267932d6a4a89d4e8
SHA1 4fe102023405b2416a8dfd3a661e905e9b3944ad
SHA256 689ad6fefa4a229b4dad93c3e94d366f44e1444b51b7c60bf60f01720364d472
SHA512 a7fd6d532341a6266464ed279d6d96809a91b48d2c8db21d183635a990633a39bc145176f441b2c7b5aab2251bc024fbdc01e143ea36f73e403faeb88c4e4e2e

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.0.150115340

MD5 a096c4dbe75cfffeb5be6f8b63901da1
SHA1 e717cb1d47c36b595b28e410cc818aca40e6e82f
SHA256 3e879f3ece238cb7613cd212cdc9c247d093dc3ae0250bade0666f2eb811fffa
SHA512 a1b54c9017ee3de32edf552eb92c19a59d9f438707bbd8a1837fb58bdf28d89af9002ab600c3e868f3c4897f9faf46efb182c10d1df1479f4e5548f93cf7fdef

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.0.150115340

MD5 9633601b9e89b1a941ef412d5bca77bd
SHA1 d67dc9d0e8f9222bf2fb7919e4b45e20c4746676
SHA256 15b57b91ad494ae2decfd0382faf7b42b6f3d4d48e4351439e6fef9658ebab83
SHA512 a275bc0403f8e46b45ceaff0b940990cc52c5ec8f86f837bae9268022e0c7157a62eadaefa46f2bbd7011abc23f3ecf87051b021664bdfbae691abb0c3106ff3

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.0.150115340

MD5 02f369eb4201903c985e978257160204
SHA1 5f36956b7e712deb08ed61067594a490d01388c1
SHA256 e1d04936f18a297026a741cfd2c52fac6ca9969f4a8f5b422937b2fe9ea6730e
SHA512 6bff040866476e6ee37bf5c15b4b79edf9f1e2b87e082d180a1a496077fcc5eb0d9b9d7650f8b70407abd875851e062712871390f9ee825c45aec5157c4384f0

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.0.150115340

MD5 daab7d671bd4041e6e26552126143f3f
SHA1 bcd1329b2549b0754979bfcc395d26b014318cba
SHA256 4c6bbf3d91d5c41a3907ce5073a64f25dbcd7df5f0896a8f127b38f638595c7f
SHA512 f55a22dddd5d18946169f036ac9dbbeac58ccdaba92dbf09e4440be363a8a996ff1cb6a7c84c246e73fdb246d70491b43ad29eab4befa5a3316d10341dfc43d1

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.0.150115340

MD5 07da3a68909ab14c2d176b39d13104f3
SHA1 dfd2daeb3bc6ca6c8327173affe4c7599acd72f8
SHA256 001bd4108248389f41785fe5fed3859072de2adf1b290e063a85b291864caf10
SHA512 148633190d58365a1327f0c1365560d62a02c8a7570f914c98542cb6ee33f9f3d81901529ad2a9567929cf9a85100065794327171489aac3a3443fc4a279b8de

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 4acc00a04789d43d70a5852a4a08a530
SHA1 0d204ff4343deba88c4a1dcc27fd5437128c37fd
SHA256 96b385c780cd70640381f1b2c6db4e248dd33f1abe8b31793acbf90fddbc933e
SHA512 06d8d6e89348f01b844beb4829931d666b7b0d1b35575c2ac95f22c78ecc44db5f27a2749cb74964c855abd4494e99cfb7eb3a1b677747698d9f7f74a4038e81

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.1.1264549414

MD5 e281b451446988d700c8688149be9814
SHA1 de5f629a7926699083ba4bbfae7a7e80865a448e
SHA256 7096901af9557bc56dfb1169b9ded9b91d5da5ebfdef7d3e6096ac09b7883486
SHA512 3772c48389ec5da7447d92bb2769c8040b9456707832844c96ae67ad3690f6bf114e705af8731ac8ec28db849d4cfa8c1c606f2d3d0973c1da4794a90f0e9928

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.1.1264549414~RFe6fc82d.TMP

MD5 68bb1c744f6d643dedca4ae12af7c7f0
SHA1 15675fe016788b72659fdc71baf592821df75397
SHA256 c2d01c02fddf3b5a0699024cdc75f2c234b4003ee16baf72a9c2906d926af581
SHA512 e4259938029bb8b3c96f4c1a8a6db73a1cf2ad3434f3f5b20a5bce868ff82f5b9eaf58cdf43773f9ebd0265fb1421deda9fba0f0af6c3cc3bfe41e1c50f86dd9

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 ba6cb58165be29fa75b3dc3cd6cc7634
SHA1 2a4fdf332056d4d538809ea3a4c142a45994be75
SHA256 11999bd1d12fedefe6b583f1838fc9ceb511b562d40dc8ebac65a463075c14a9
SHA512 1daccf24fb80ff3b6cd3301595e6f3886e00fca40b861cdfb4980c3658af3e7b881f272e41771dbaf25b7df1fcf125818a0155b2da247af946ebeeccfc8a1e1e

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.0.150115340

MD5 9d8100d7d23d4ec387635d1dbba54539
SHA1 a5f40b7af5793b0c3feed648f35215f574a76c20
SHA256 b713e9e779ef90716ce2606b532227647f50fb5c09c60ea86d28c273a1aa45c1
SHA512 0d9c18165009f0dae23d6846b3139bd6f9e10538ea92ed573f5048a86ec7c45d01d4172bd90526ebfd13f0d2439fc9cd0a0c6e9574fe69927c7e335b15403ec0

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.0.150115340

MD5 12afb15190a8ca6c3742edba409808f4
SHA1 762ea14092f8db4bc7906a8627aded1f9f7fe588
SHA256 d0ec1b7501b8c8bcb0b52845b89112dfe7d715b295fb9264523a108a122450c4
SHA512 a98f948cdf97dbbf35dca7cd48bb31e8b7407ceea3251216b4415c433977887880e49a1410fe38547a0e3295da9a910288403a04925f9b6a41b17c997291af58

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.0.150115340

MD5 760bcc77b6d1c4c070506552a3e8b2de
SHA1 3a5409e8c3eed995877b719aaec5b497eed182db
SHA256 3c6c7769451bc24e1bf92b03d0321e46ab8fb28c96295f7a9c3c2933c04b072f
SHA512 96f54cf3a34de4a2845ffe45cb152eb95a013de259a34a4d5dd6f4c2b6dffe3397ac0cb079bb71ff0d77a8d48a98d74786ff809d141cf2bf3efc82018db3a206

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_249ae4e2-afbe-4b2f-b9c0-08245804b18a.raw

MD5 0128405c8cf6b8c80112999f1b03fc63
SHA1 f288fd21509a0d695df896bf3cda5fe724cb54a3
SHA256 b8a4be3b8e93183ad648277fe074a35a6b67e26319c7265cc096a981e2f39676
SHA512 66d1de3ddfecae117afa47b44e4fad78897d4a34fbf0dcba517fa50cfded739e501234a3e862f769d5a248c2a17274594ad80a0caff38e73891820fd7457a005

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.0.150115340

MD5 c17afaf34bb0cdd205ec621331779e94
SHA1 d07aef7aa2c52a721ba1b1c7ee79b73a0206a473
SHA256 082e14353b79436ba9e9c2b1c9dfedd798147963a25b98e79473ee1b3c1c400c
SHA512 2e38be115ebba6380fcd606c0be4eb2ac9d380b87d9914bf09291c3489dbb0492819e440af9411d4270d69d29ab9593252e66eb92cbb65b21654673adfd24a33

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.0.150115340

MD5 186d30fe570fcc2cc5e11dc3be61e3e1
SHA1 0cc72ebc813c4b3484f7c01526d852dd573323a4
SHA256 12075dc059cc23f7bcaf3d2ed0c860cf5da95bdfbdc0077ad702a7cbda7ad685
SHA512 e579a9b43ce8b1b2ea2d0dd43b5a7857bc7692c6fd84d49007234f72d169eb6388dfb73f41d044184a679319e2f74fb6446683f159116b639ddf2451a46f74e2

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.0.150115340

MD5 ba242ac2c6bf51b66aecfb3b0ae63ee4
SHA1 f64089e93ae561ca39af54aebabd14341b0963f1
SHA256 4f6c5c14a04349edc295e9e7facdfae21f5f9f08093050ec8340bbd3a3806fae
SHA512 1adc8c65c3e5ff3ad0e052985c40b5580a6cf3064a52085f14698f0871e550deb222043c0e15c432d31ede11e7c563e8d77f51c55dc9fbca57bf842f17275a3a

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.0.150115340

MD5 bd92bc75591896431fbbc02768f7e44f
SHA1 b2c391dd98889ed5558032e971936e7ad3072c5f
SHA256 911190f41e7d57e98ac715918ae14ea55ed3914ae67ac09c6cf330015ba10a3e
SHA512 23770175fc500e33c99141d2a25b88078b285a6b9bc307e9daa03998b0b7fe03d8f6788777ef6fd4bcf84cdf87eb3783ce300beca505ad9da9f364fd6a567764

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.0.150115340~RFe6fc38a.TMP

MD5 b0c8fa7f7d2b236c04e706299650a8e6
SHA1 c729bb79b56c6196d1b1fa8dc88556746f1aa3ae
SHA256 5e2794901689d9bda51c2fed902a8100185ce7b8f209e40c26fb8d6ca4e6006c
SHA512 18612f79b5016d925f603b0c896bec5c0e23888f1f1a50c5bdf4680190a191ca4fdd272eaa62e10a13d6f581d3138c42a7fbfe97e9a89d83192e25c8804be363

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4548.1.1264549414

MD5 2f487be09bb8fdd6a06570ba09801cc9
SHA1 1970b13a01b2d8b9e1e06cccc5ecfa762e88e9ba
SHA256 0bebd38103af24eab868fe902aba0fb978271ae64f69228ad17d3b80ac25d75a
SHA512 6062ab337ebb2f6818981550f7b88d5ce9adf972869384c7db284fbd502781a55799a2e03660c2a897495638060f3f07e3c8c30f7d9c400695ddf72bd2927f92

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences

MD5 97f84f55bdf9145e508faf83fd1ee1ef
SHA1 f24764671dd4d94ffdcaaed8b355189e17bbbaba
SHA256 3e98a50b933e1c6e5466fd49d98f13a9adedf689c372ce2b823f09b638439099
SHA512 e23f903200e5f935c8052b03578616e07c23dfa1583526d63f4816baca40846a847eff67337cbe927f6f53ff34a1a5fb0beb48e5454d97bd73c9edf3b64f1544

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State

MD5 56a9b93c4ae3664873ac11c6264b3edb
SHA1 3722e496eec06dbece3b4be8d938bb5146b6c33c
SHA256 892dc8e498283976a1c6ed4b2b2e943d3efad4d5b9850063654b2f31113eb525
SHA512 22e2a00565ef4aeb152fd3bd333b506534efc1365d6ad1b92399d053a58b61af132b6b675b94a43b5471bbbd1c3c2468391f7006cdb902c63f74fea79678c983

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 bd8a63f82364efc6b179d4126952704b
SHA1 6bfb149b884450d2b4e8c91b3f2bd9934ead9864
SHA256 df66e01e6648b26369201b80df87d67d88258c896ca5266bdf1116454a5d9caa
SHA512 46505e63f130f60203bb942bab673aa7fec85032d1f89625c1448dee9eb4616bf6e4313ef1fee5583bfe28e1393a9f9d4bf8b119f31c58326639857ef4890ff9

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 dfc452b4d93d98e88af90f9a6fbd8ae4
SHA1 f23fdc0657015a2a98d31df839addca0b51e095c
SHA256 a10265b1dbe89434b5a2c8167f1220a889b64fd524429298c914977d513b82f4
SHA512 8fd55678cf1078ebdecd711c27fc8f158f3623e60dea1674882a88e941f4c310c4e0912b03e906ff55a539d96e8a0c53864cf23ed53475ea80fcfc8d10dcde0a

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 a0c0a77e38f23c7d6f2bdbd05d7632f2
SHA1 25cdb6af02f280e91b85873ef7d57419cc65577a
SHA256 b4669e3e4032b891ae9a5df93a2db6e638f5c4340b099934524f162db036c436
SHA512 61f024bf6076b29d27802983d933f4d45bcdcecd540ce2da4261096b6059bf06f15f84317e360bd6f07990ca5c068a806f41825ae87c7f4778b444c0b27ab5f9

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 f4077cb1e8f67407f17d495efef3016a
SHA1 063d07267691c799975952d05c0a2aad95fc517d
SHA256 85fae37ad7934a44156979ff9af1980f6b3d151d079fa0fd18b6e057e4f5b08f
SHA512 d4bd32bb5d2266ffc05c57a6ab37b2921ec68e102639bb51fcb1b3af22537fb01447f4d3025e747bf200ef7e75620542517aa91dc1d2e7094ced93cea8a1875c

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 1b4f8fbaa08a50eb552a23f9a83cd9b1
SHA1 ac5578e2f9a8ca8a950f05cc5c772be15f683166
SHA256 1af7f6b298b8c0c0fd8f34be188e796223c21b2db5c4605ab9639e43af32f34f
SHA512 bacc26868fa3c8c97d89d21486c3c3bca3407c591f275a145edc5a56052f38e65c9b21af1e2a30151374dd39c06e1c8190a105d6c5ae8ee143aec5c4fbdac863

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 442a322a619dd2e74ba39e078936903f
SHA1 02daa68bc4006c31317938f58ba9a5a8098aeeeb
SHA256 c4072d268ce8008b7c938bf8e7d6c8b2c2ed607e577c473f810aba0b838d4017
SHA512 9bacad13a00a1ee048d6085fbf43b786381ca3c7d878762a2f54659f8119fb3f69a00e6fb384b1e7d1c0459b7b6557240424ff4c1c140971de8bafe8c4329f5d

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw~RFe700267.TMP

MD5 092495b81962ae7f9d3a85fcc1d04594
SHA1 54e68e756baf5154214a2b6c2e225afd94c25125
SHA256 2911764a6aa7d543076733415c76b050a89726273ef8239fdc41d2ac49285cef
SHA512 6a86050aa9088d08165eb34d60ffbffdb489ea3a65af8a9d1159a8ce18d4ecf46f0a7a156dd55c0d633b034b5ded25f614ef11d4f9abb9c781845ee9e61170fd

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 eb7061e68d5323826f6c4f02ceaca391
SHA1 510caa2a3b9d47e2b6c9f589154b7e82470315ce
SHA256 8bf43536ff52ea93945aba8ba0af44041754c7343f31354db22586892d77ef47
SHA512 9dba8cbd444cc4ad069083d2e8e7c21b0bf3a787f78df1838d0b1c6fb504be95795e945a2addb5df1d53af01e3ab5ae8bb5d889f1ef0f78c63d55e914b2f779b

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 a2af42e2e465fae8bbafe2285c3a6208
SHA1 df5e7eb7eb78343bc9abec5e45fe90f9d853dbdd
SHA256 dc300174e7b27fc98ed8582301ae3e422fe9a4e44398de594d8aae3750e79969
SHA512 11c3c0553d02dacc4d90eca8dfc163cdaa46af04e33b7e8566e83f72cd86b0d38a121ac1ba9ecafade7c6734738fd6fc5055759b77af5670f39a73030dc15c51

C:\Program Files\scoped_dir1620_1969533706\persona.ini

MD5 a2294db65c800d2e518ec4943a2dd187
SHA1 02e293150a096b6342d1c39ab57b27d5c0c8cd7a
SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
SHA512 115c2d5573795136eaf70cd9c89478d3b1c4dd95aa7189cfdf59319cbafc7f90a01e57c34050bfb24095bada13db3bae26515a1d4c2479f646ae52851dc41f53

C:\Program Files\scoped_dir1620_722617367\opera-one-dark.jpg

MD5 fc3dafe25d5bc30a830ab92aefe52634
SHA1 2e1bda9bebb1539aadf6a2c6ca33c3b9ac8865fc
SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
SHA512 d9ec9ad58ef765de7fb1cf737e9d287453005edbb5c47524e19938161c14b16b59084e9b91a2b40389c43fe9204fb9fd41698aee68968fb2fb046a4cbeb73829

C:\Program Files\scoped_dir1620_1969533706\opera-one.jpg

MD5 c18898ca5a97bc5807f3be336fb1338c
SHA1 83fbeaa1c4a4b69599cc6eb08f8958a6908f6b32
SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
SHA512 f7163299688c9fdaae8882c38e5992cd23d90f48a6d36a307e756794c6c0541afbebf12b584c2e03464008e2e4927e775e57e3f982e412206b7d9db271976a93

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 2b970a78e2922350dfd668b5035d430b
SHA1 757c90fcad85272d1302ab10606220bb1cd70124
SHA256 a02112081dc0d21fc2dc1fce6669021d7b57a0ece4794aa18c918af08b64a257
SHA512 2bc81f332a9f55d231b0118f9a3a3ca4a3cf0d72624c91a9f454c0e72b1a8a7de9ff0e3eec8e8b8bd9ed5359c02d32eb2bb31cfa1c7b79221f96743bffbdd8d9

C:\Program Files\scoped_dir1620_722617367\persona.ini

MD5 8fc4f4bf76a946d682606a6be94a822d
SHA1 3248c1d836e9eab63f0b647ed3249af2dc0e342f
SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
SHA512 5301c9918ed28c51ffa1d06796f897d7d7df3954a339718647aff9d11c7c96fb27fe1cb0fc7438c5ae1e86cc9a7322fea7b41b646ae03a4d51f70aa4bef6f488

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 f7571f928e417b0cd64ed9df0082841f
SHA1 1d2cb9c8cdbe227f66948582f98ca1e88ee79b6d
SHA256 a8a75cdb4ff1344d4474ad363b68d01d99da1b601824e1b1a5f4d8e420cce0a8
SHA512 f4eb56ae1e6dfaebbce57b3fb2a747af6b11c4b130dffae57cb6b643a8055aa9551dbe35736246b84fe65b77006ea1722a0a8873a77a54f489fec278edb4e1d0

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 1d8181670ec359108dd4024563fd9cd3
SHA1 77d80ffc760a3eaa9b02a20dc75bedc5a80a4aed
SHA256 5165419222f361239acc0b0a28b7db0ff20d16451a0d2f3e69cb192bba106d43
SHA512 fac6f0601790ec5a6162de6358c844618870d886acbd2294b923167b90ef9ea5ce148dd86eecd78e2089896b9c67d0423a07843f3301e16c0b575667e1ba09e2

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 c578fb3ed5724096d115c6eb074a3708
SHA1 bdcccb551388910787d23c8c1427a26cc9180508
SHA256 2a88ab8aac2bba398db99031879953aea73943096a99b1568cefec9e3db15b09
SHA512 de0155024747ce9a2bce5c22eaedf14c7d538b69961ff1f61a491cfdb3729c3d4c255e74e42f3f5c7540a8da074ead1e39a02d17c5a0feca3b01e001e158cf70

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 6462ccc4a63ac80522b2ca31429c43df
SHA1 02e9da616ceaff5cda6ebb747b485e4f16c97ca2
SHA256 5c1b79283f35b6cda2e8a89906689f433e84606dd3c737810f9c1b616f25963d
SHA512 9817e9e24149ab072101bd99dd0a76f9cbffed4d1d1adc3b99490ad27584780a27e4f11b049e0759a31393d457847e0a7db37bf406813f031833f85666d5e7a2

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 a070708012eacf3af9920f1df80f4f08
SHA1 6b30e17dd5c781584798f88e8a77b9dcb0db2819
SHA256 56f96650074809d8e5f0c10cd0cbaaf1179ef2adbd32d0f7da227f9217b1506a
SHA512 1c6d62e4d42b376ac6a4d02ee461e2a1928780463a3dd8c2a46ac544187ab22763b566d5274ea7494754ccc3f76dd87b22d5ca5e81506dcdc1326e8538b7d2aa

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1620.0.1863536174

MD5 16b6dd78281ae44b1be0678dba207518
SHA1 f356d97f6b965e1beb685bb998c2b978599ae26f
SHA256 44308e7e9a5bb5255265bd874b6ee830fab0b126759e5529a1dd43628d3e18cc
SHA512 164d7d48094873dd5d49af56ebfae697a0e04d15fee2b51793e14628243c9bfb849ba0f41b931a31815beb453a7a542799eb8bf9c39ff09587697a825b5d095e

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1620.0.1863536174

MD5 840f68c797064c4afadfd9a2d94bf086
SHA1 743c381e4afb23ffdb578410d1c098faafc94144
SHA256 eac1d87ac3e0762ac2222e61967895be9b1edac70683496ce20b4c50e97e4406
SHA512 4e505948ef40459f020ed757df0986c20bf4640478bf859b2d08a0b1b40fbf2b06e3e56bbaf94b22b680c65aa8a3eb2aa733ee4fe67f0fdd5026f8730b2afc9e

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1620.0.1863536174

MD5 609f2f9bc4cf541f74afc4f80d6632ce
SHA1 a75da71345533dae437ad922f6f45cf7c28b3dad
SHA256 f4cfdaef93a615009fdd2ac9e4703c3b2ddad4252e6345512773de7d3b32bd52
SHA512 08a780147165e23239c4c99c8f5c773089b3d2df48f7655a032958273029f53d53e367c8a243fbe97b4f87dda0be034b306378aa652974822462f3b85a078f8e

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1620.0.1863536174

MD5 cb56f6a02cbb2d5658f10de9c4a5a0fd
SHA1 3aff90742b10e95019a809f2636b4c26eb449bf2
SHA256 c34023e870414297dfbd118b5f8faeef4c1d5f0fae177d89a2b0ccfa753aef93
SHA512 1ea667d882c4c3032caa51500ae271ccec338dbb6fd318f92760b197ccc702ba219c11ae77a2c02d7d39163f5f964df6b138b324ad32ef3d756457508a3a83d5

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1620.0.1863536174

MD5 e359006ea2d123ac1ad5c365a1bd4c92
SHA1 46041e50ac640d4b61c21f3e3c23f0291e8284dd
SHA256 03ca6b188f955e7001c885951252a29478753a3a5e0d932e7a95dd7fd0127f3a
SHA512 f4e6980637837cd872efab569532df0c89deb0df9f21c9b744e1927f75c0ed4869df3b410a4ce855fed4d2ad8fb27ec3620bd6acecd8496ca3e5491a24adf3ec

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1620.0.1863536174

MD5 ad7226c16f8f69f4113d2ba0c72eb901
SHA1 6246574174cfbb443a3760521179e3395e9d2315
SHA256 8ef9060b927e4958a7f3e54aae15b615cc97746cfab1b88d8884f0860de73648
SHA512 f153b351572b5252d44b47d42c6376f8b4896a67e15199287aac0e71a07a99be675637f292c7321731304554bbf8544354d3e8db6d49b4fba5601bce8a7ebe29

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1620.0.1863536174

MD5 fca27372b7f447ac210a798619cd84bc
SHA1 d52154257a03e2d3e796eddb50a74648fa3b9e3c
SHA256 365e286a356eada0645c74b8a100559efc6dbd2b16caa2aaf049d57ea394f4e4
SHA512 a14818e0a9b5d7e41d1dad7baeb606c8ee8a39e202b48cea2edbc045791623d8af0e525e7af98b474b6e8737796c8d91aade38f1eda7e835dfa0d4925800f935

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1620.1.1985495870

MD5 12ce5223afa786bb6c99bb02c16484b9
SHA1 a9ac6e4ac661b3d2f736ef6d6165f56d7b28394b
SHA256 5825549d9412e598939ed41af2f5d09a21f0cf885b115b6f07ac6703abd8158d
SHA512 d9699f710fe6961817ce7dd36180b60b7c1a574b637b8becdbebab7e4238bce5c66251d54ce18e6b937431373b3648490c67e101548aa582039643b90c1f7883

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1620.1.1985495870~RFe700f87.TMP

MD5 6e1f084a2bfc384ed1913dffeecc8417
SHA1 511d8a18f20aafa7fe274bc3a53fee7366f172a9
SHA256 bbf02c23b101732a61e68203e7e7759a880e1295b6800c53dc53aebee0e9078e
SHA512 e0a5799516852d5f0d7a221903a5be9356d4f2a8b238249a81e55a0c4d23995ee821ce939ffc28a2efd302be501254a9ffab04789656d1b31e6796d4940d9708

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1620.0.1863536174

MD5 0b16a3cc9d2fb441b68cf549f73300ca
SHA1 463f629cde2d603f80e9bb7d39e053384bfbc89a
SHA256 de1f80bd987b812821ffe624ea0585afbb7dd699bcc6a0ca69435c7744df9900
SHA512 5ac14c8f1ae3c19a64539c83ef1c7a44ab4041d978275523f685b88110249fa04e261d6f567a0609fc6649a07aa1b62acc0a04aae13c0b93bebe24a0ca1a8057

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 b3d0fefc561e9083ab7a22072450688f
SHA1 cf22ca808bc11645f24464a085222575aff2da79
SHA256 88f3f13204bde0e911ff5dc506720bb5ff0488adcf3b5146bd05e1354e822e8c
SHA512 bdc1e2183b8dc3e7cd1d1198ffa0d3c44753698ce84c30322971a43cd78d1c3a5bd69d4ce2cff06795efea829b6a34eb57462fb9644e4948751af19084fd270b

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1620.0.1863536174

MD5 998499a4e5120b5230078b06ac298d51
SHA1 65d29df71a35367d6408e4c7c581deacdfd041c0
SHA256 c34c9115f7b02575cc5d69a4d112666ba2d71562acfaf94d9653c8f2355c4a49
SHA512 434813958eec25e1f2ae89fa40a678b0680deb8737ed442ffb79a102f291428dd709e9f0e1379d2bc1f2b2aa3238a14ce8434a9ffcf68d011e5b65b377135eb8

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1620.0.1863536174

MD5 65183f17af4fa87223fb6d76ae05d5c7
SHA1 39ae1d12e03655728cee9ddb0dad29c8c8aef1d8
SHA256 f50316605c2256f6398e0b12c3cbb428f6ea91b96364b44a491323817a546d90
SHA512 0588a6c888a8b1380f86b117b1b2fca57f5f63a6b3bf7bc7b23c98dd7935190ee20a4bd87b3211a4df06f8713ad00c2a18e969b3aa63d2c5c8ddfa8a7f9d4a05

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1620.0.1863536174

MD5 dd0a94f8f093da730a25868a9d34fd75
SHA1 f56069e163b88f1ddf18837392d67510e89db96b
SHA256 e8346891c92a42a5ffba450c6dab3fd8c20189da11bc377942bdd0c8ed13aa1a
SHA512 2382869eedfb3a2f9de8f766b39b1d6e04715e83325cac362d89ae92a99480a2278ef65df8bb3e0dd0ab16c616278807c4beacd14c0967c09193fd5eceab15c4

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1620.0.1863536174

MD5 eec2dbb938c273895849c5274071f4b6
SHA1 7a51a7bd11f87d18c41b03610b545fafc5bb41a6
SHA256 2a6a0426039497427b689e2a48fdd13b5312c5b522c4e640da90a6729e833d7b
SHA512 b2cb8f968ebe77343944eeeedbb6e617bcd10db53bd374bacd06344455fcf45d93a699fae5a0e2bc96ae1aac90dfd8e12af2cebcc1da0ec1280006632436dcef

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 05f9e4da750c47eab79592bf52fd7989
SHA1 fcc72c52631f83ddb7a4b3d5607963e911607ee6
SHA256 376624263a96d98b4a1581fc8ab9fcf0ca839f025a4d81b77c89d30f33997629
SHA512 40cb5bdc298a767363bcc7795f8c605e34b1e5c046250da661d3f11e1e4ed77fe37fb90e6907761c0b72ed4d39cd23bc015222b63dc24b4ed5639948f4d6038d

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 2f139036238645774e4c742f3398deb8
SHA1 3d0be55bb481d6691e10cd7cf34625716a7c3bf3
SHA256 b1d43602d389122ccab1929e4933fd04e3ee39ce824474076b2a0804545c8de0
SHA512 80352b5d5f843a15f47708152f500adcfb25fe72a6724e6355ed9b65426d397d9f4963aa950e733963788a43f5375ff60e613d458678d28edfd822002fa0394b

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c2db57c5-e79d-4045-9971-63cc7418f88d.raw

MD5 0e644376ce7739d7fdb2806c10f22b64
SHA1 004305b18c4349e02f439afb38113e4d951f7c71
SHA256 497b032d576d2e3fd97cba3de0aee662db422df2698f36bedad97595e65d0568
SHA512 482f74f2b138bb0f8bac1cf44c278e273550f478bbe43fda1561a03431b210d1531354e55d371a3c9542fa8017f3efc90f236fd4b9d4488ae8db6fd549f4e018

C:\ProgramData\McAfee\WebAdvisor\updater.exe\log_00200057003F001D0006.txt

MD5 84963c1f3e75af6cafa8ef6e75af7165
SHA1 dd3657a715e249d1d332a224e16df7d4604f3eb7
SHA256 48005cb3f84f9fcdc6b3e29eff44e72685a19206813716b456df19d044ce6752
SHA512 b40d1465f88196fd205d9f08894d929b0fed6afb99dcc39bb1831d1a95046b41c324eefa69891ef58fa4e92f420423d6502d13fb3edc74b7c54d83fd985bafe3

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State

MD5 cc01d388889e66b5f0d02585ed9c431f
SHA1 8402d35d2afc5daca39fe9479a42cf670f2779a8
SHA256 f94c40c7911b168c574c55ce72c0a6313112d3f3b1c42f7189f674158cc02889
SHA512 3b635e2762e9f4ba18ea0fc1de92363e489e615aa3dee6a75c58a493d8d485f34fc33f340056877df26cfce54272270ed4cc04b48d77891fe7f9fe6dc1925f22

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences

MD5 e01d575687b931653980dfb4439b74f1
SHA1 88eb094324eddef3a80584ad24099c5546f2b01c
SHA256 42f567763a293f303114fcde0cbd24e19d6eae9e68cdeb9bf5c1efe1e37bdbe9
SHA512 12601174b070b1bdb8b140cd9a8ad3dd716f1d0c6b560d348b1f2f621ab0eed9d8b2dc30bd3b2d4ca185c6df3b532150bdf6a8754bd17579db957081b0dd3c16

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences

MD5 c7fe846ab3d7643e35e7ca51568f0557
SHA1 cb72202d0ece92349acb20b1802f6dcc8960984c
SHA256 2e81596f7158defee7ca7e2a7ecb4d9d9a65a7e1742a041095bdb42e4b035de8
SHA512 1041f71c58a45843b41c0d64e4c1ea475b5846e8df4172a3b4143aa8e13b1f43c04fcd31bf0158f8e4d9d82be672dfee41bfc391db1dd538f0eba48892c46857

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 ce37cbf6009f43386476714b5c73a123
SHA1 4ed2498cb8e66011abe0f5950b00f35093c26fa9
SHA256 aa39385f9d5298bf1508be239bae9cfa64d197c3b3e4a0254108b898052556d6
SHA512 aa9a35a430340872e81eef9aff87d2d71edd740b64a374cda1e378e3562283e7f189303083c249d6b2f40c8a6516082d600ce285c2a4dfbe8eda9e38674a28a8

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 d614116f414d7e24be99497e9ef692b0
SHA1 5d40ddc19b5863e4dba6abcc23a2c6eba28ba96a
SHA256 eed092a39ccda86972e5dba6dced9fc59962525196ca490c76a885207db4897b
SHA512 4bdc126c8949a40752896135d1f97a264fd28a231a74fa2d3b50082ac8f145c6f804998340b2479e3a59541ace5eed9c814d1bfe041e0adb17f2cc7768e7d9a0

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 073c74d5635712d7733ea22fa5bc7972
SHA1 7bbc36751092cc12b8edb2f9e53d2c2e760f9585
SHA256 4d2ad794302dc2bfed8e3cf1e5adc2cef9c2c20f45e5140d08931524b1747e06
SHA512 a38c2ea3dda48faceab3ff46ea72ab24951d23e58ca28c05bf2f1bbe5dfe590cad005a08a5d1f7acd177e88a86f42d32dfcd7febadd3f47c9b3fb004416d00d3

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 7a7ce9f8c046d06ad766d8b9419e8709
SHA1 96f2dc7585c70a4486b4149c9a5368fe5b6f4986
SHA256 f73889b60b6b9e7dd321d4bc93ef4d89082395b4e00798d74caf61981f582427
SHA512 1461eef1130cded236423d4d3bcace9df58e74276886c1e34ac209f1f5468eff328f68d5fecee844ddb328635664547cba96e114a2576873a561fa42e82b4f72

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 d13f1f369b8e49563eb1374f89d3e240
SHA1 cc5b240080c87a6ee7ad7939f3fd3a3510e70163
SHA256 6e155aff58a3f5c3f8732bc82e8755eea4aa57608ba1cdd0c08136a2640a11df
SHA512 c6793e97a43fb1fc012a187ef81fb9aed5cbb24a29ce132beffb21416194221fdb89337ffc161d64c1b7d50d5e1589f257539077cdcbd31cecc4cbe88e528352

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 3f5472c8b1df717cdec500ada0f0d731
SHA1 4fdf3ddc41e21583d01af82acb7e81776005af7b
SHA256 1be4ffee3191a50717bbe926da72f7084d79bb8a189bc8a2cbf1b2128ff1fe63
SHA512 9c626a7d010c8bf9e0003320a54c00d8337b82b8ba5dbf349709ee7fdd906d4bc5a675d20c5e1b3de6b5b3510c2eb5d1e118f9b1c74309bb55b10c47d69e34b0

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 ab78a7aaa9c1f3115a26ff2e4dba5660
SHA1 ef185a2253d58d7d557a87e0235a736ad5891704
SHA256 87b665d213de6fa00e54c9a6135946ce2f17907fccab0135571150e449b8e6f4
SHA512 1cf37ac90071f001c2e2196f4ebff47c60506e827b9faedcc7de5e4bbdca0d7459bbc947f001de5a987807f4a180c507dda2830ad6a1f92a0b4317a90e932b44

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 c16766b885272f4ab3a980dbf91e216a
SHA1 3b555b916cc9ea1176cd871bbd48b687900716e8
SHA256 ddab93c26ff6dc26178847fb5aa42a42ba88c26e270edac4cdac3b2dfa5ae06f
SHA512 a6fe0cb2a7b9fcd82d653f4776a5727dc827a05a605074fe483fd610488c6efbed1892f83633e239464c6befe7919c5d3fd760d3dd6a071912100c60538c35b9

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 d364e4a1e4853531cdfd7fb230b47c7c
SHA1 9758e4fe80b96529d3d105268384973e6012a9c0
SHA256 8e3892ec563c49b0b2bf886003a454ed32d29a8d86d283e3f04b618261547036
SHA512 03841a68a29bd7e14602c1d3307c1df9090c2f08464f0cf9ac75a0e5dec26927e0113650a497271a4260ebd77c5e522c9ebddcc6a6ffa36d4868ea05edac7555

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 5ba277493b48923ae2c8293028802905
SHA1 c1dfefcb5c401e63b3ca4eeb962e83b4fa2a7458
SHA256 c090b00a562fa10875b13c795beaa0180394ac3426d1c6b12e5b299392a3e87f
SHA512 610d9cae69692beaf5b571ff6586f6ea1849af4dc221e172c314822ac8f3b224b263ec7a48d2cd648e9ceb66884914a7d2e8ffb612e314a24f2e1e5f62bddc4f

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 e9dbc6aabbf2c3d663b027e6b7dc67f7
SHA1 cddeda14db37536377980b31410ce26c13bce979
SHA256 86bc373de647af00ac4d7922bc732df7852f03540ef610230ebb893e7bc6b051
SHA512 a4aff6e7c12d8539201706009d0ab9c498ce5c9117f633fd66612e904e98e300df7100ad8d47f64d57d8e618b4f51c97b7ece6672ecf1b1a6efe703bccd1bc1a

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 cc059a8cd79604e21b41ccd4b2368b95
SHA1 f972ad29ec3c13fbf0fcef43396b523401b0d9e7
SHA256 f5001c85b05ecb0860c30e4e7d58b0c07d2fce1ce3765739e71ecb67f866bdc8
SHA512 3b58f8b9584351fb5a7a7dc601053d7207c842d9e81211061f7f18f7a59fd7b1de696c5feaa6350cf019d582bcd3dc7e54dd3e741d9bb4a3168902de3c90e4d6

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw~RFe704378.TMP

MD5 91fedbca3f277e545205c78e6644e8eb
SHA1 74fd34ef0173803f271d666293a3d5f7a7ff458f
SHA256 f877945a84ff9382f3e8add15fb00168ee889faf85ded17112705006eb89e072
SHA512 6248f44cd5bf068fa8d3fb17dee219b57c2e004848110beb4be5921212825f1cf054e903adea4c952bc9ecfad4596f18ff3c3de1ef25f683f2b1a7fbb0258e41

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 451a04ea8754fcb228df63b5cf8e922c
SHA1 7f3990fb37d61fc7b0e3fbdbe60dbd6f846ac211
SHA256 65a002bb74b38e50e42f4ea327c81f45e0bd997d774c3ec1a94071386e08771e
SHA512 504fc5c776dabda1cd1c2147f2d07b381f442bce20be95a6aa828ff4bba0412dc0d6219b07b916ab3d9e4a082b7612be35b86f946975622b06762a15c4a63328

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp752.0.1069387324

MD5 3b82ec3efde5433806b1dedb2f3ccbe7
SHA1 ee290d076fba774d3cb039165215a36e745371e5
SHA256 2a33080597c75aced76a06280394755a0f785a3751f8dfc122fcce9b2f398a6f
SHA512 34f7070e1ab7994f90f7ebae5847176d2da5b591464d774c5a59ca0bdc07313e8846aae17ad37c6f41239966ee9ffd786fadd2e08e9f50a20cb0d048ebac6da8

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp752.0.1069387324~RFe704f5f.TMP

MD5 e2e1c52553aadbb620f9ef4f1783ccf7
SHA1 1bee44c1b95fea03efe79f3eeda4d1811b68e81a
SHA256 fd71fc5e4b683f81b895c1d06950114ac9aaaa81e729ed0f7745e30ff4caed1b
SHA512 1381118493c7550ded05d9a989ac956d1af1a216b4efdd8b0a46e5d54bfd5c019ce92fc8fd5d6724caee095987f33440b057c8f78f21174a1532414cd434ee5d

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 33a9dbe336c0f895aab94a397b2014b4
SHA1 a51690e3757ef70e0b644da2960f7e9f8cad35b2
SHA256 e6ed40ef877f578513000c9baf21fb7d3eaeec1dbddc2eb78932f91418245977
SHA512 1c8faa02e33cd03ee8a74b2054bd209ab4bcff51e81a62e5258a92d28f6ccec217130ff3786453deb199f56e0a142d851255303ae585ed006c7e07b9da737596

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp752.0.1069387324

MD5 78d7ad4d45ca765f92c8ac1defdfee44
SHA1 4d802dfe7789147d0cae8a5178a910cb014f30ed
SHA256 323fc2e47992beb26616234b66d39d12ef94e715de6d965c7bfe0504aa99a26a
SHA512 229d46a8e8644362f5d3fe77eb4bb02a8dc42291ac838ee9bf36582ebb8e02a56c4a6137c2ff14bb65d135c4e8d37457f8e92bb1582aa86c2e4b044b858f6f57

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp752.0.1069387324

MD5 bfbbe954926d609b97e1862781b4ab41
SHA1 285905cd0cc8faf38791891c7a300402225d2ac3
SHA256 3cd8eee2785e287b5140148a0a94e70299498b69f0df5f2a6e60a2c0366ff8d4
SHA512 d060b4beee2c3587f30353b94c76c4996fa633f2fec1851842acc860fd684d5a55aa39ca950b62ec8877b2694b6fb120a8da5a2f2c799fe739ea3a5486154dd2

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp752.1.929696602

MD5 21cbff4c0c9f03d9efcdf7c0931d6bd2
SHA1 87485d8cc2a6714fc80a9ba64a941db7567ba27b
SHA256 e330169894ee7da0d6c90df8a24fb5acfa20e77c9dd7a68733f90764c4f59973
SHA512 2f93346b8290a05716e35924e47322d83d09f0d0f3bab20835318bd831ea5e93fa3a5cbd1d787445f97f267ef909544ba38afe4bd6aff9861247c77f74f03e40

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp752.1.929696602~RFe704f9d.TMP

MD5 3b97a8a3ac47a2f4956526a598f58160
SHA1 de39eade96d24c607bce743f106c0483dbfc46db
SHA256 72176a63467f9350434c7ddb67da1b47cc5e2016f3cf1f3e8dca1f570b9de2ec
SHA512 6624f5288e4919beeec4b66e58f0f4318e0c715e01f3c77d38c599fbe756809e53f748ba5dedfca6e8f84486b2b11a3c82442f54a70198d737ae43d200c0425d

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp752.0.1069387324

MD5 ab0073abfd38fc2e7a42b33869680751
SHA1 15683e3c7d8c94eb5ec9a8e6ef1afcb1bf9dc925
SHA256 80acea1102a04e12534f78eaa48fe066d69177057ea4bb6bcc1fbb8a0f93501a
SHA512 9172efd93c18a63b861af481234c8e4669858f5dc27d1c066d59ca63894d33841e39a2eb39acc66e5ea5b7f9a00f85e98f31a67c429ef907bbc89daaf22b9f04

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp752.0.1069387324

MD5 c64d8b1e2033817c7f1856d59e806fc8
SHA1 767eb21dc85a53e594674b02cd4877235fb2b755
SHA256 53d8dd3bb8b1f5846f3541e6a94d8b733a516d9c2ccb77bd597e2c0cc975b719
SHA512 b44e04ac83f27cac384b869c81408d1f1fb57a58197fbbf178a251cc8d36bef75b94db33ef1076312b0475d71e9ab199eaf4482b09c7faabeeb4e78746558d97

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp752.0.1069387324

MD5 7a038d67a9dcea8364409793e079f523
SHA1 6d20df1c8356473e9f94f2629057b357441bdfce
SHA256 6d69143dad8e271d9f7ab8aa6df898af401ef6cf4f2909dbaaea61efc15b1ddc
SHA512 0d165929c7d17a13ed11f4aef187de09263e379cbedb11881c8351e6e974762eef630cce280355563ae53f570eb265ded598c3bfd8b83209f9157e5933f41f35

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp752.0.1069387324

MD5 33418280d43cf1b1d04aea2d9ff0b368
SHA1 f57bbd06ef45494ba1a560ca41fb58c748ab678e
SHA256 64761a0670456f621a12c057c41cf57a7fb5a0d6fe7a7c94cc97d012c1977517
SHA512 7328ca275afa73cd68cb346e8b1421daa5cbc00ff811b689abaaaa19e393da228fb2944daeae5bcd9754e99945d435f6102ae5a0e6531d50eecbdccb3198b6c4

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp752.0.1069387324

MD5 6286b5da029d966409ef5bcd06bb2ff2
SHA1 c37d5ae47cbde4c817000bd1bd855ef17f47d09c
SHA256 7747bce5be2af8a7382d37e5e889a1923eca70ad15b449857d2556f9b50b5afd
SHA512 1792a670bf063a6002eecc825b520ace09a84063c0c748db4753efd8f91a5c4b0dfe0654237f258c99894d8359bd20b15d7803d14b9c08a766980cb3fc17d6db

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 92973c5d42ed615bcdf091dbac04a443
SHA1 8678f0df1006cea7e0e28f43916188a775c0da38
SHA256 4a305d3ec1d6c46fa26cc6a6870987f390e5732d7498e90d3a38ccc5d549c86a
SHA512 a8b0b90077d20feca63a96fd2f993b882f421a77250ff033577d7b04fee2d499fef302c4a672d27a425b6b485dc7114f676594d57555bb1b9c17be8fdc5d7db9

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp752.0.1069387324

MD5 92dd5eadc3f927cb3799c7d4548328fb
SHA1 e099e9ba261112c076b1ad6eb661d4d990f917ea
SHA256 44fd8f69c8a9bc352103b04e75c15e70ab0bc71d0b8dd6429d3a767e12066d6c
SHA512 2391dc3195f2221f28b62840a4bcabadba22cb4ed9e7bdb77a0f36204e29c17d8877a895f8aaf8777cdf4c4ee1d6660b881371119922126314fe0ea2062742bf

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp752.0.1069387324

MD5 635a08619ad36ee5dd1954ddaba24352
SHA1 70c6ccc8528052fc5a460f0fbbc39aeefc43ffab
SHA256 18f3c6e11446f1a1cee3973d8f8bba6d4d87933e273f97d14bb72cec8a9e392b
SHA512 003d7466169ad6893f5bd6f31883bb65c81c1694828f7c5b070864d6e8cfd1c601389c1a4251718f38c407fe975cd711fc429dd4c66dc86d692a3a724cee9175

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp752.0.1069387324

MD5 68575191f7f61b629e4cbbf00bb7c7ad
SHA1 7dc5ee958f16f1ccd8a20c9a134fa6c7fefe23d0
SHA256 ae8500d99d93e5985972166120bb52a6f538f940d4cac8299c4c068196fa0a7b
SHA512 4a5a4033f51658a959b4d545fc4a320b9b7b2355f968a915c21f6fcf372db02282a7cb4526dab679278fcadb05773f2cd48eab40da52bd2821eca2601593a3dc

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\c0da5b1d-52e8-4bbb-943e-e75ecfdd0ebc.tmp

MD5 581e3956bc54255640882c83cb7ff651
SHA1 7ee62523f6b7b2383468676917093dad19030320
SHA256 011133418b52e79baff8f38f4c58de4bcab216d1bb929ce6ff36407f0e05bec2
SHA512 77bfe9629cb70e8ba7552ab4ccc570aaeff7cec166124ffb99c3e1d81401ff9765b649a2e30d003e7b80053456706afc073d01fbeddcf23e15f180f4942791c9

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 569e7c41ef92dda2048e9b8d34d39c33
SHA1 9b70b8e25c9b8722cb1734a18fc798fa55b39f25
SHA256 2bda62fd212f489d5fe4a4a55d0dbeeff7e799b6e5409e66d3acf877632d539d
SHA512 5c4468874a8232fd07d6b15cdf989db5a82352147dbfddc65d9c263721ee59dff21e211f4d2914f47c0bfbdd8da9df64194d638981ef5f7f3892ab25f72a125b

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 eaf8cdf064b05467b2850ac49556bc3a
SHA1 5f16b7d16796cad08aeccad76cba5eb94ae874c1
SHA256 c86719ec5c6320349999547585e151b5b3fca52fdd7fb8518a1cd1c1faae9569
SHA512 9bd6582d2aa0321e98f78add84cd202d9b432cee6c3e087ff95b246a1c453dd3ec63460f2a01938655cca12c5417bc06fc94ea33781326c73d0ce92119d15c73

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 fecb26df46e10454920510c364f31750
SHA1 e0792595077c734e7655a05b946a001035b6b038
SHA256 6f5e4a0ecb8e4952f69159f2cfd8093757e98b86013a147047f168e1454d4d2d
SHA512 eeebd8ba49c925ee40aace06fd6aa276389f7e0b0cdbe3652f24304338eb735e922cd83ea15df63a99c1c67af46c25ccfdcd687ee939e8ae62edb695d5a6e1bb

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 b6beadf66843f26a57e526d2a8acc3b7
SHA1 840bd2e03957526e31cd433cc2e4db1283a61d69
SHA256 a5d88197776d0ec879affb121dacd73f8f7cf00da3f61772164ffd12cf27a1ab
SHA512 16d0d8ec7a5eea7b0224980b403b6ae2ed55933450c16c3f759ebd6c8a09f709c313525248e11858717a378ca96a75f17b9a300f8b473f951f55520677bb4876

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 fbe5600cae6da7dbdd82dc576646f21e
SHA1 1d23402f406b10ba3d6ecca52fab4e671e921391
SHA256 1cd8542378a394b6005b790a31b46794487eec3599764207fc3b464c6270eb18
SHA512 366da09b4b6f5b6683bd948249d82cddca51f94bc5f0504c34f132fac29217f474a81ba3cedbf688de95fc21dc106b88eb211d6419809ce442019b3cc9aa39e4

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_76bf96ff-1dfd-4826-b981-c1375d02f138.raw

MD5 563f4b1e3eb55ce5ef41ad7da5bb2cc1
SHA1 edad689df59c9e1f383ea36396af177261da68f2
SHA256 2d83538dae2946b0f420ebd16870971c50cda68d32bcc6189ab544c6082e0771
SHA512 68e5686126e6d56aaa53ed5225a9c92acdd666ac5778048c59b7cac8d047b16ff654fed9c8ddb2241140b3fb827a3801dcef143a95cd8214438cd3f073eea49e

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp752.1.929696602

MD5 3524056ffbed0127b228330aad657624
SHA1 a9b1c7fb662b181fa9861746bc26bdddae4c350c
SHA256 c38004f4e6a38618b54bd23955489f7cf701825153c118b8acb8aa4e35343b63
SHA512 c6cbf5112f9103d7e9118949a6f1cc85a9dd1ea5470bd9608db2ee4e5e9531236e3dc6c2cd9182fa4aa9f306a7bc4975a904a18e6d66970a111fc37ddce98907

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State

MD5 a7137e892b712b617fd56088d271b3ff
SHA1 8eaac92513361142e2a8f4086b5b852ab2e5e63a
SHA256 a9f68d82ddb7cf93ca4dd36ec258da9d4498ecf5e1e96fb6759538e81bd3677d
SHA512 fae6b4187a8efb5eebbc7e284321d3ac2e8e7e46507263246387b131092ac657be86dbfbb2dc1316453e0c06460f79534eb80cde3cdc99304b1a2ae9eefe4ff3

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences

MD5 06b99a9f8aaaf7fdf8d41a96f123d1a6
SHA1 be5811364bbdbb47f205d00a1a97a5ab68a5c1f5
SHA256 e3e5f8b162d028391b8b3dfa7dadbb16a09ca6f6a19832d14a7e805da6d489c1
SHA512 6970cbf39de9b1b2619a4bd2fa43ca78e1e69f37d934e29749b3894419fad9528b97262ad3d9a7989309929f29f4f6d364764b434df90095503f221cd6b218a8

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences

MD5 490a9d58fd3530cd9ba49d51f876fcac
SHA1 073890e51ca08693565b56089e9eaf4aa74b4536
SHA256 3773034479eb9ff146610cc3623180ed1c22cee828517a76081f19e7521ad3c0
SHA512 cab60fc30abe306b139f252c98813d3c642037d4fcf081bcddb8da65dcdbe78a72cc75da3a1188f6d140a0dcef00867b39b292ebc8bfb985a4e940e5616c3894

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

MD5 ccfdb3683885194694814921ac4cd280
SHA1 97e37b300cec836cf1d71a273d417fe15676211f
SHA256 1232cd46a3a396999ad60d837e67fcd15a48257fe1d5da5d6d60dbf24f4d32ac
SHA512 e918d6d7d26978478715a55d9ba0b7796d8d001c06d5a4d5edadbeeb57dc4a702a783830db5b38858e7d085fda2db0f2e9231371bedc0c70d8b2ab88627c6ae5

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\TransportSecurity

MD5 4bf803a985cfb7cc723b0eefc962290d
SHA1 ec682c1007816c6cec2b6e638e4ffa3b815fa4c2
SHA256 9914b226f3c8da503b299c0597eab40a186942fe6de72596a55de2c8e4baf151
SHA512 000e3011c8e648b994eaea31e5fcda4e7e05a17802ffb890c2d56541fca72dbed38cf2148afc1579879a54bb159790564a22f1d94f3ae0be52445d1b4ebcbc6d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 722d02ca2fe6725165fc0abfb2ceb41c
SHA1 5aae4b64b80edeeea1790f099cc0e20232b5dacb
SHA256 55a576e87a9e18e26cd5006bd8ac1e468ac9a0f836a11f5ef2c0da07418771c2
SHA512 a74137ee20ff485566c824234ec9a3cf42f52e09c57b6b08b1a2bdbf1753bfaa09d1e8b931a3e63c8b243038a10a3c15b021c146ed7fae45216ed1360949fcd4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json

MD5 57568101acebec0d0b6da71cae750ffe
SHA1 fef13f40e93641a18401b572d2004a0d88c4cabf
SHA256 ed8dd56e4b9f5b0a5cd21bce41b3dc5a863e7960e0880dc454124ad84bdf5660
SHA512 9a3422a013c8941d7c14ba079e7c871ed23884cefe9d5ccb498acc2503c4745c5cc8ed6588fdc3d51260f7c3bc14f1d47b9747e27def3d40b842f41b2436c796

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State

MD5 78bfcecb05ed1904edce3b60cb5c7e62
SHA1 bf77a7461de9d41d12aa88fba056ba758793d9ce
SHA256 c257f929cff0e4380bf08d9f36f310753f7b1ccb5cb2ab811b52760dd8cb9572
SHA512 2420dff6eb853f5e1856cdab99561a896ea0743fcff3e04b37cb87eddf063770608a30c6ffb0319e5d353b0132c5f8135b7082488e425666b2c22b753a6a4d73

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences

MD5 0c51d4d0f7671954d28aef5de5b5a28e
SHA1 2d646d3080630716ef61ccb817399338cbf16306
SHA256 11ff0f03c6c2c75ce4d12c924ec2ef49de9d49fe2beb0f0ad95099b2756d3d4e
SHA512 9a786bd78009058a3556425c65899092bc1feb40f44c9692bf190a8354d324077e8399be6034c1fb861a65f05e8cd43cf392b2af59e9cd145bc071f0ffee4383

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences

MD5 f7439c4375e48bf33c724f9487c83f49
SHA1 b7d701880e8f452f476bba1daa1aae6b42ac1056
SHA256 93fb7d7250912f203d747a121ce7a431c5472afa9272d4722acb272641cc5e16
SHA512 ffd41b606f4e469df366ac6be2278ecc4000896e04d25583dfaa3a576eb3937b3725f0ad94ce45add5abd0e4092c9be1f5b61c204f8936f1464df21c22d884f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

MD5 87d6f81de9d5e4cc386c69b6f168e96f
SHA1 b52701694844b82a285d8dc4447c0cb33f26fd59
SHA256 391f39a2995f0451f6f7459aa3b70f1636287c67b68c5f329330ae7de290ce14
SHA512 78ef1d0aafb6861c84d8e1442367370256ae859a5995f193a7bc6f717da7901c14068bbcc8a756674d74c4f38ab291ae21cc223a653787c8cd0edd8edc0ee4e8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 8ae0976d01968e8f89a9712f1b9230ee
SHA1 a2ea019e555010466d29fac76c08398b258afd75
SHA256 a1e965f3bda9c77b6c25656ee5056e08b90fb09cf4126ef23a4b859a576d0de0
SHA512 b49f6ea120346025dce65fbccb6ad6dc6017baa4a70ce439c74fc9a6a7227c7d8f2e6fac28cda31cfddcc888ee8bb5e9ed2c3d722b05f869868b45403bf82867

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 983bff20d77e80e51c45a97d8c863c04
SHA1 4e21e775ca13c16920efe354e5c8fac13618e389
SHA256 2648fa860500ee4ce3459e2d1fac01ee8b8b32e6164a262b4ae453698491e460
SHA512 89ce898914175d38e9816de5f7797bd5ddc7e91ad09efbdb12cf310093cbac00058cff1bb9cd311c31d8f22114ec324e0abd41a616796da8b9d28a67c2fa543c

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\U23Z080G\microsoft.windows[1].xml

MD5 292a283bdecf4cd89c3ad863a28bc72f
SHA1 18e896fec5f8b3ea2963d0a5cb45a244050c35c1
SHA256 09794c6006f357000111d7d13c1c20075eaea58f68df78e118d14b4547835ec2
SHA512 71349774dcf41cd9e72c881cd374ffaf2527b2156a616cc064f10f34e7bbf0ea6174916acb2b8b06428f2b2f29315359e66dde317965463ea1eb70fef52beaaa

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 cfcaf0cf48e45254f39fdf974a2eb16f
SHA1 d5a836c526c17c94176f96901fbab14c69a3a611
SHA256 9cba5c509743088571810376da57cee8e9f37af59ccaaff193b70112adc748c0
SHA512 529075713ef0286b0a4c3685328c76bebcac824bdc2e9bfd217188e358d0809f312f9334c4c4d2ed0692b7f1ba019862886f92538150d913c786769d2fc360ce

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 81bedf95c205f45e6e6deba4b7e9dbbe
SHA1 96e934f8dd05202ec26e0485fd03aa5d7156ec26
SHA256 a394705fba2f0b7614a98ec76a4c899d760aae249258954423eed9e57a9ec741
SHA512 f268e11e1d40f9ecd994f85aa81b26e16d0e1deabb8ec9f22036cdded0f5c7417eaf929549c7403e81424bb5d0c28927e77504aca5c087db4f97c5d69c841be7

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 41c80eb83d463486fffd590be3500980
SHA1 f7a38ff88ecf7df7752d002e6a8ab15345ac1944
SHA256 3a2ca7244990f4d2657931d47a3402fdfe254e6ae13cc8d8d5a9ff140b9e9cb8
SHA512 66122bfbc23e22b767e4840f1cf122ad118c0c4415141f7a1eda200f55e6e986607f3b635e25f986ca7641e1c63d3e2b9495a648bc16d08c37b0b682ab24cd6a

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 499ee3a908cbd7fc2003978bbfcd4ec7
SHA1 b993eabe2281c92cac4d37345454afd8648942b2
SHA256 8a57bbf09a649280eb685459b57571b9511f6108bc146c6dbd168a84fce56a8b
SHA512 93c39ea0e433c276dd9066f59e4b7ec52de44475b6a3e4ca57810d1ba3ed81768a5d3122b4eff4c64ca4e7c2ab75b4ed53a25bb0e97d0bdf3a0d89d3d7b1b584

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 53c000b4e3c856a1f4edf569cbe9ce4e
SHA1 1b934724ab69b03e1334fd930b52d4e9092d81c7
SHA256 6a96c749fb798e205b15e2b0d082615d74a32ab06db4cdd08486d08e88723301
SHA512 7f0d18e61549601079efac1dc7973f33c2dd523a16e18529925322f9d0e4bfc1716a1be518110b75ae685b7d9091109a4017ff8efbed992d286ebea2805b66ce

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 b457263aceed96cac256b42b4f8b0467
SHA1 f0d7d7762df10bb98f563442ee000f347e90063f
SHA256 36924a74c65f895ae5a722bebe42b19331c2d37b7253b31e674bfcb577820e7f
SHA512 c5fe91b1811db2045cf07a9b460ddb2a54cee63260618190d7f889a6512c3db0989ee5aa536cb2b96b7ebfab74c1aeca6b3de5f5dbed937d2d778faec0d7b391

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 27a7de270fbfcf2ac6b2dd0c5262fedb
SHA1 47b2c7af4ef99ca7a5ef444791d3c722eec7b7f8
SHA256 188a7ec7ce7901db494f545347db9c9954f4652ef805305c9cf3872c553d2119
SHA512 5163544460323dce608bc3c2becd4e4e76c588be4733e2fb3cca815010949580b98f7d0a204dab666a0f1abf82a979d00ddbcacb596c194eb03159ed7f44dd11

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 6f2c16f05ecfca537d2189ca2c1bf6c1
SHA1 398c2a4bce08c0070660b53a5825a0fe3517b527
SHA256 3c1d588131e82eebaf4348147719b47835c7ad09b1d03041c2b3253101aa23d9
SHA512 6a172c79ff4738c86e1680efec64e3b0660a0ff6bb274e8985275d850b484c59c9073f8376cd25717bf1eaf1c3f4f1286db5629c7de10d1aae977f921fa4faaf

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 a455162b676e22ab0ddb5777e3a4b05a
SHA1 f38e59627020ff76e7ce0276cb454a4b3353f6ae
SHA256 39983b16e23a08d35b05679f5dc34578680245a0446b2f028fe9ee0614e964ca
SHA512 eb6b456e580d886a84928bd9c1f3dd3ae836da02bd9b7e91900de74f15df9bfb1b9cf6d8056c46547abd32b07b033df96bb8bd789a3253df026103d5ca461110

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 22783a107f6a055b73b9a13719b68aa8
SHA1 9fab603c20e0a8552d640026dd816a53938a6caa
SHA256 9867e25c989ba31af540ab9db9de1904e7a5dc70b9013d0e078db070a4e59b0a
SHA512 c6f512b80dc3c4d719877b929e960524fb971a108d80ae6344ccb0b1297406f6d8b5dd6057f7c18fd995c0485f0b9febbd30711b68f571c721b297504162d6ee

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 3285a6a6eb6139448c01787de0fbb1b9
SHA1 3e21f1eb54cf9ae3dfc3ccd306f187b92532019b
SHA256 818684e140c8269bf19fad8ccf48363128ec4f0e28ee3501543980668c1a1a47
SHA512 a76e9037eb263c9f76bf58d2286b9784d3029ec8e8b3e3fe90e697c2016362ba2cf5cbbd0a84c03066a685bb44cfbc2c84a2ac5b57b7072619b1ace9883915e1

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw~RFe71f0f9.TMP

MD5 17cfb4f64ac93ad849793b955f33e342
SHA1 9b13a6e995626f710fac390aa0514ba05a0d061f
SHA256 c2d36fa5f5d845b4017346eba9f5cba8adb900a8490aeabf685d04a9283a32ef
SHA512 ed4b3b240173cb15f3f4b795e53b2a590644d9cdba3650661ade1de34dd0419562d4024fde73b883fad473946465936e1d0637b5ad547e7a4b1766ceae4ae976

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 47c1ebadddca288d8de73ae712e1aedb
SHA1 906f581fee35711f1d5224141fe31b59bcc61fea
SHA256 c6bda48ab92463ea7533a16147686eec2afa0474d633dab985386070818c1611
SHA512 06dfa9bf601f05b2bc89270b7103e954cef36eadf4d0da311d612630e57906b9e12438a73d06589bb7e7bc60e1fa88e83376e9656f9e8c263cea5ff01a73c525

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 e776ebe797ba6596cb1ab78b28811ed0
SHA1 dd559cd7503a2ca0a06467af24d258269307a95b
SHA256 3601dc31e8d6a488888fcd470e3c414f229453b3cc8c75a95c3f17f95d1346aa
SHA512 084de9e1c41351af3529f711b8bc027c8a6833cbbf4c1bf31eda41a4dbed68e2fbc9f61c9f8523b9ccf61645324881a40ea116efcb5875651b467ce87687dfbc

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 829dda399cb8b7b7378073f5aa90c8ff
SHA1 9522b7a0ddea27dc70d579160a397140eb6b74da
SHA256 9be46f3088b4c48585b5cd4fc43cbf39f8fe75c6b20421360ecf413db1bddc1b
SHA512 cd0aeb145e8a1bc50e2288327ebdd203a78abfb64d7e797f760c536b754682dbb70eb20a226f158acc2ba3193cdf8db01ba2f2e44291b63cb6d22dad636585ac

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.0.493259228

MD5 eebfab174e85b4aadda869afafd461a6
SHA1 1f7b399221e337590130a6ab0baa7ca597f8ebae
SHA256 062a7295613037bf003d13a383517dede722848c2e730cd1f5e88fcf5ef5b9ee
SHA512 3430eff35350139820d11c7176464b8345ce2d738228e1527765800b73d3dee72bddada9f89871ddf8232d8353ac1d6c9c6cbdcb17d00d6a70ae83a7893c1e3d

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.0.493259228

MD5 c6f67b05bdd7ab49bf02a680acb83526
SHA1 fd93d11d6b77bc69874c05657d87c0111a77e969
SHA256 2483e22a0e23ac89a5bf521668619be6e84b7ac0fcd44cc8431a7813a3f35b8a
SHA512 4855b8f02a4826c4fa9b3a35e4b6a5472bf3d1beb2308160958312918e269534dbf8fe51edbfe2bdebdcceb7c28a5d8950e05733874e2242f9a994f64ecea4de

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.0.493259228

MD5 5098135136231f94e854c009fa02f9e8
SHA1 b71418d6ca8efa9e669047b1689b7419017e334d
SHA256 4af6ccd6467a365713def79ea291fcbbba6435933702f1c484b0686111aa5dd0
SHA512 cb98220c176ca5aa0a448ffa3018d2011bad8fb78f208dbf224fbf393325d1f763bb1040c111477f3c7b6ce395a7f84d602dfd26320947d52cf6d766667d9c96

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.0.493259228

MD5 2c9166fb2cb7e3882d99541d6179965e
SHA1 5d479533ab8f6ad571be4d0b22416d1f39f5a798
SHA256 8c266aff6185099266ab10d1d86e91c84b17d6d59f16f133fe4db972796f399e
SHA512 fc4f6ce5a88544a3b43c1fb09fef5e57e01e799cdd69069b10961e4fdc6e3fbdfe005373ec5f0157cb6c0e2dd21b5134c2f025560fd02c2468afb0f083350930

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.0.493259228

MD5 e7c30804c9cce993e7c84c0482835682
SHA1 d6ec7e1cbd5e20dcf6d2377b959b412394bf794a
SHA256 d56dd4fab5910705b3e1bea6367686bab3e73ed48ad2734234ca518a20df6974
SHA512 0cc3f9d8c15e6e9a57ee1f43899d89725cc18da141d32288d11f81acd58b62933eb9dea1d2e293ea9134a6f2e357fc74c17d7cf296c471742b5d60087efc6702

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.0.493259228

MD5 7818e9bcaebb1acfb61882f55dd0ecbf
SHA1 772609ff6715aa69f69d2556206c110e05657db3
SHA256 56801154ec14099ebb5ae615bf8b7948bfdf029438eaa8a9bbb409599fc6423e
SHA512 8ed10449892eeac5d68edc57566eb96df92ffcf17e58b6d7fef8f1a05ff357f2fafe21d8aca17cceef042c3da2c3b0b3887d8f3391234ca0040f056b187988d2

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 6371bd893ab182834b90a05781e8b4b1
SHA1 46a052be8de1c937d1c1c776cb27d855ef78a1df
SHA256 767bd9cc16aedc927928f30273ed8f8e0c35f0ee270c58f2499b67379079f1b0
SHA512 86e240e3700f881ea0de96cfc7e0ab1e29924dc33ebbc71e186ad2984b5e081eaf8c450cd65329da637eebf04bff2fa071413ed44ba7e0c0925b150bf4283e8f

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.1.1111072529

MD5 ace171b01e3f669797a8fe9cf00968c2
SHA1 f504dad607918ced490aa271080e13ef738d694d
SHA256 6d0859f2ab653701742c669b780c5afd4c65ec6b7dd93ad6c96a8990141befe1
SHA512 3ab70b32cc4fa41ef8990cf94956350733b0ad21a5823e15af2108dccf887346a9e49bc179aef629a6ba5555fe7aa028dcd0898f6b0df1d34012f5f0a61d4969

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.1.1111072529~RFe71fe57.TMP

MD5 64c36765a7263ac30b349a625147f889
SHA1 5906a0f3cf1eef2ba4dca8152444654e8ba2a64d
SHA256 648c9cd98702eba53f667e7c649a83a9bcaa11e46ee3ee14ebd9a940f2edce5a
SHA512 a1bd43a5b242688d3ad69cb40d0536463dc61d3b45dae88e617793860726f241b55d5f58f608bd787d727b7c1d1a96bbc6e58434ef97e8e17426132caaf59d0d

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 7098db745cb7b59f83fd94af770dae8b
SHA1 e03a87ec13066d89e3233d73da0b8af160aa07d0
SHA256 8ae4376f5fa721429a73d8ebf58941ba5f28dc7cf434c47f08b70a75024149d3
SHA512 7b0e3ecb3f97df9dc459a4c5a81d9896c2d52347e183e97330c943080cf5b74b889e7c94ab6bef12ecab4a39fa527c2a829d6e924f687f3c861ad3a6869d7cf6

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.0.493259228

MD5 3c33affd5edb3fbfa33bc6aa5f15ad44
SHA1 5e83734913e325531e2b35a99b3511a7e67b5325
SHA256 f8b065db02bb48a156e826f2e0223b1f2bd2abb7176eab00241ca010381c5a75
SHA512 74bd15119870ee0ade8eba2a6dd59fe5b48e24cef67e240230186ff7525cb153fd9dccb01c480d41a74fbd14703f9aa4c201f2cc3b3b4b20fd3ab6cda33e7b69

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports\settings.dat

MD5 2f43da9cc10c07d89df2d34fbe326c3c
SHA1 37c4830f434e807765e55349e3c2de876aded68e
SHA256 09318438823fdedd05554c8b800366b8f6ba1d3c6790e8512ab8b508cae26134
SHA512 9a816ce3c36934ce67c09903336a5d0091a041de778f416e8894f85e97b4d640f9e456ffbd49f32e97471658372dfb304300758113d3459c4efa6c9b7552a9b8

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.0.493259228

MD5 c9280cb083922da36694f3b2a8db3c17
SHA1 a70c6e7b8785ff8a4e94a81571f23add7510cea2
SHA256 48682689001c3902adcc5d6f98e2a287f3b847276716b8f89f9733f0d430dfbb
SHA512 fe8f7260b7c6f9cd57c8fad702c9ebb59b8689c0c2068b0edebdac2e6405129227c2c75cd822c75bc84e4f5e7fde2b8ee4f7c8b0df5636c8ef0e353530693570

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.0.493259228

MD5 efdf7fceb179eda618498636f8aa14bf
SHA1 10908181b7e175bebbf0d523b88f8397e80419be
SHA256 195d09a6682dd63b25277a710cdb25ce13bbaec5805ffced4fe28cfb8163ac58
SHA512 a5def27ce979c9fcf43e4d0c3d297f5f22b2e9653a183a5b9e9b122b69368dfc2032c27474a892aaedf41232d0285bba95de86b529b32132c86f0a9d9481d487

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.0.493259228

MD5 be4b3019707a9597c1d03a42dac53441
SHA1 31b5605a127b2c975b1e2405b7c7c042d3b4b8e6
SHA256 212804b4af3d6c6e9c07e86052c82bdbb613da052e180e294a5f0db2d4608c78
SHA512 7084f75901cb3899d4b67390ef999017bbb9003537c84f64bfcbad504a4e8e1e80fe8e55b91a25749cfe65e468eb5705abaa403a82d87eadb854b0d2098e9992

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.0.493259228

MD5 0d3889b3687cea90d75940068436d474
SHA1 c6b4cd298c7751bd20a29d175ca5d51524bea67b
SHA256 2b2a9e09aa7754736f07420cae175a40014d829b9e92054675e5fcb62176f5db
SHA512 58b0de8429940f802a833c26af3ba9b8322826bb4b4e227a0f4466b02c2443a2478b2b26caabe7f0a17b5b83961cba50dcfdd4678ece6d30820f876065c0c476

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.0.493259228

MD5 3119dce3e0fa92e1130fe30cf9346ab9
SHA1 c581908e647b4773d03800c3fe10b697aa7fbbb1
SHA256 f0e0dfd6aa2879f9c23d048affe28e8f6190bf450514bc683d56b5a682ae22e5
SHA512 8516679b2334cec286d07a65fe8ab0bb0ccdf1197b7a504a2b98776cccb323c2a9b2decccb83a898105a1e9ae560a0ef2a2bcc3486606cba5ed4557c2d2cc1b4

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.0.493259228

MD5 484985acde11f2df9b1f350bbd6ca5dc
SHA1 4f03a3e37da29d8ea63e1cf3c7ca783e55f315d1
SHA256 83d499735471ec6de4d657b701249ab03c171a6dcd835c88633386e877fe110f
SHA512 de6db5e7f1c36e0017d22063a610d80d1be59f32df7a670d65029752a0debc22c9374f2585c030b7c373bbc3309dae70c6230317f327c9958588bfaa89a7a34e

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4832.1.1111072529

MD5 f215c0ca7442647009325f6378602ae2
SHA1 29d4389f8957e473769dce815168c4212cefc085
SHA256 26767f1a529f5c01c3a2eae13d1f9c2556320fc194ccf4fb7b47a623942e1b41
SHA512 b978efaeb27c3fb28e9b31fe140876cde6c4b830c163b75f584c815224977a7338487908b23bd23b86d6adbbdf2c5553170bd613c04c63c4fcecb6ec108598b9

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_72ba1e7b-6d88-4923-9fc3-964428da6e3e.raw

MD5 abb5e58223b9b9b481c76f8d491a3395
SHA1 9354ac92fce68a8f1e48ff316d439e666e7491f1
SHA256 7a89e22b5517f4b175bb3826dc8462cca03a33d8ab8ff00a62ee01ca05d8b8c7
SHA512 88397226ccd4e2491e03628efbeac6c70273310eea16a17f699133799ac9728788e9e6af50555dae20f3c305cd929b621fe0ffe5c8ac382acf9367718f0cf9e2

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State

MD5 80f7cd3eef546dfac2761c751a01cfb6
SHA1 d86a346f7508300f8bfeef2ffc2c2d1c6ebaaf67
SHA256 93a3850900dfaad2bdd4b4de5b69f29490da69f606104a46a6423d3adee3c6c1
SHA512 1f25de69a4b9aa1e31416f9457ba770fd9c9506c8a3ff2fca7165851505e3a552443dd1e877bf727d38f25a935b412dc869fe7204a84791639191405cb2e656b

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences

MD5 21aa31a7a055d3a87a8e9064df6094ab
SHA1 158b3d8d8aeaa987d8c32f3b23bf6bc744216fcf
SHA256 5cd4309d912b4a01b50e72ccc957323cc115c2c9db285d6cc2be0d447c67e5d3
SHA512 3c9afcbd4f6433ee94f0a06456a4b15ed01d0265796adfb93c4963506946f5af58c27a1640e4cbefa76d042e973d5d95857b663dc05822cfc1e12d5caf12ab48

C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences

MD5 2470774b5090bc74af9a2236def64b53
SHA1 6b6497a9a75e230802d7c8e2b8d1c3ca9d930b10
SHA256 4a7e189978f0e8fef041b96c9f82619750d3bf4ecea9d8927cb150d82f0ee150
SHA512 82148ff430ff6c159625a22d4b8781e4146f5aefe21aa6865a7e7d9aa87c10afc2e9747365f32054eabe6af141e6b104c439868ea03ccf2a0b0c1aaf15b37940

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 f2f878fa6483a891934bb9fdcae78904
SHA1 11c4ca8411052f323f751493203f1890205a8d5e
SHA256 44d8eaf91b1210947fc05190d0135a006a6dd9c6acec03139d057ae1b56402c7
SHA512 86b27ca91f5c7963e11e9f414c4e54a15e845f5f0887357727c1b70b53ff1b7d24bd83304f230e14e7bc676c0682ae9a6a881910b3b8bf69364a27fb3cdf2acb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 9c266ba153239dec3dc66bab30e1661c
SHA1 a88c62e90f222e176ba3b7e5fee884edfdcff889
SHA256 f8db074b3c0556ab7caed6c1c86730782404ce82d393c8429094749f84e60bfb
SHA512 2e23db7688e61e75bec328cda225e1f66cfb2cbd4210ee9f1e5a50785ee643a8e58fbe5595419de9cabe61a5d2603f40506dedc49f2843cce31b6ddc804c8c89

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser

MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 d3c99d504429dc0b58cf09bf390c3ded
SHA1 611edda1bef9ad62e19d16e467c89f8564e20b9d
SHA256 cb077d638d5f431ba69b4a3522c365ca50717e8854066986a4a05f1739b58edb
SHA512 39038ff5402b6735847811f468a36ad81182726254c39dff5633918364bfac2891df6854fe8fbd80c81d6af06030f499f53a17d2b6efa86e0d0616be6cfdd29d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 bf175d08ea4030451b328f7765771850
SHA1 e0ad385025a3c46b1cabef0360525a6dac604da5
SHA256 42e396c9853e21c7cb3ff33409013072fbce66f9a7c50f5adcba55f96228cc60
SHA512 be46b87c72783a4c458182609c0c122714f5b2d26eba27e2470df706658d7b438227fe910660a6c330b806cd27bc1bf467a61b9de639e3f97e14b081ed4e6bfa

C:\Users\Admin\AppData\Local\Temp\7zOC05F5C13\a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c.exe

MD5 395eefdc1a4acdca0e2fe54424c7b804
SHA1 be9feab5b3e29e776a711ba0498b44150a3cbc8d
SHA256 a16a15300a60c9f0d62caa4c57c03fd1b14a416b317b092e72e46cbc3933f47c
SHA512 e2de13ae4149ef9fd2c11d1560cee19df33fc684477d91ce183083c93632cbe7e755e24cbdc0bf3f418d3099f011ab933fcbb99ebe5124e4e9f275bf0298b2a0

C:\ProgramData\ReasonLabs\EPP\Quarantine.dat

MD5 8b785b636b6bff459eced726772235bb
SHA1 9e92fcb97d7e1f87fcc60245bfb0c0ca926e51f6
SHA256 be30dc37b1597354526ced5f120b5a8ddfb109df3bdb63488910b6d740c00311
SHA512 d0b190a46520c3f3befdd97deb45593128c5d10de0bdd2b093aa170711ca82f4dd023b83ff048c701eb6e41ab922da8cc5375058f629b7128a3d74d4a836a340

C:\ProgramData\ReasonLabs\EPP\Quarantine\c16cdf37-d711-46c1-8c4c-8b9c839f0073

MD5 781e128f2ac706d99235e322e706a834
SHA1 32b38a3f138d02abaa9c6c942622c76d7de8ef4d
SHA256 d7f27f231bb7dd4c2a50ef3ed37643f920fa2f48f5fe4f97e68f714ed0c10ed8
SHA512 f501800739974f14451c2371748053519d9b9d7544e71d914b082eb33fefd0f3db6e1aa4198fcc1f4f5e42515dfc18b1c985709631dd5036db892031b91e2ab3

C:\ProgramData\ReasonLabs\EPP\Quarantine.dat

MD5 9184cc84aba972c1901db92e2f6ce9b1
SHA1 d85b2f3529cd1cccc52657dffdfa0dec5cf859e8
SHA256 08ee78a858834e0d9af5d82f979f3f7af514d13e82c4dd1181566dc80ad9110c
SHA512 80c83ccc8949ec383580104a4b8a3c866544b4f28e1075674e587e811c1581803b92aa30c2c7a86935895f15444d91c7bba985956c7ee0e02375f9ee38c8bf6d

C:\ProgramData\ReasonLabs\EPP\Quarantine.dat

MD5 120d7e46e0fc01c23852c3bc3ce4e4c2
SHA1 e5fa5ec8007e03ff8de66bbacd2e17448518ad2e
SHA256 76211212b7b7751977ef062e01bf96819e2701dfb13cf42fcb95828a91d0d945
SHA512 b86cf908f0cba3ed1d52a0a4b698e859dc1d7b0543aa37681d43ed17ed92e2c947b28dabe13ad222d327fa78234aa03b9f818e296391d6e8a15bc8f9ad9275b5

C:\ProgramData\ReasonLabs\EPP\Removals.dat

MD5 8cc9f2b12e5f84e9632ab0062869095c
SHA1 e1a079d7506e448050c11a4ef5cfd1f8526d8258
SHA256 0e4dbbef087cf014242885cfbf3225000c2d10c0c59d238a6a3ae93dda12a7b8
SHA512 b74f2aca0588e2f31ea4891c1be1cfedb1bd4f53b94636ad5f4aca847a816435e4f37b495cd2ae73da2895a134e7fc0f86875efc94986881fbf7ba5e7dea0a87

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Code Cache\js\index-dir\the-real-index

MD5 e9ac4d59c7b4bdec3d0aaee83fefc0f5
SHA1 82a54eb93beff2056860bb1002aae773b20e33a7
SHA256 620b86b4051de5f6c18d967fce26f192d01a17635852828aa3d4b329a13e367c
SHA512 0e5c89ce8b8c21b9289d8bc0355fc3340c27eb79ab2397697ef247ebe5f9b1c2fb57c59f038e42bccbbff4000c02d9e3be70a4234d7a2f1bee4d376c100b59be

C:\Windows\Temp\nsrFF.tmp\rsAtom.dll

MD5 9deba7281d8eceefd760874434bd4e91
SHA1 553e6c86efdda04beacee98bcee48a0b0dba6e75
SHA256 02a42d2403f0a61c3a52138c407b41883fa27d9128ecc885cf1d35e4edd6d6b9
SHA512 7a82fbac4ade3a9a29cb877cc716bc8f51b821b533f31f5e0979f0e9aca365b0353e93cc5352a21fbd29df8fc0f9a2025351453032942d580b532ab16acaa306

C:\Windows\Temp\nsrFF.tmp\Microsoft.Win32.TaskScheduler.dll

MD5 a09decc59b2c2f715563bb035ee4241e
SHA1 c84f5e2e0f71feef437cf173afeb13fe525a0fea
SHA256 6b8f51508240af3b07a8d0b2dc873cedc3d5d9cb25e57ea1d55626742d1f9149
SHA512 1992c8e1f7e37a58bbf486f76d1320da8e1757d6296c8a7631f35ba2e376de215c65000612364c91508aa3ddf72841f6b823fa60a2b29415a07c74c2e830212b

C:\Windows\Temp\nsrFF.tmp\ArchiveUtilityx64.dll

MD5 3351152f6ee87e97682a0a7c459ef614
SHA1 5312f9da67fcfd573dc5e45f6a7cc35fa463af89
SHA256 6e2673687ba029074657f0d1c4410691ee013eff2223d0c7695dfe4f70c62f1c
SHA512 2b7ecb22746bf907ae4da891e170226da4f180ade27e41a16e1ef9e11f39e5e35b9eac3fcfff520dbb8a8888a1dbd1ca2459ab58ce8dc44a424c5de7b8132de6

C:\Windows\Temp\nsrFF.tmp\rsJSON.dll

MD5 f8978087767d0006680c2ec43bda6f34
SHA1 755f1357795cb833f0f271c7c87109e719aa4f32
SHA256 221bb12d3f9b2aa40ee21d2d141a8d12e893a8eabc97a04d159aa46aecfa5d3e
SHA512 54f48c6f94659c88d947a366691fbaef3258ed9d63858e64ae007c6f8782f90ede5c9ab423328062c746bc4ba1e8d30887c97015a5e3e52a432a9caa02bb6955

C:\Windows\Temp\nsbEF.tmp\uninstall-vpn.ico

MD5 3f3a7bcb9a3b11a26aa8822dbc58ab8b
SHA1 8f8385cd1342977f1262740ce486684b83168cb0
SHA256 b40d8dcd7b774574e22626b035a27c574e7d718b84574319b7ada371e2f8993f
SHA512 db5baae8c1ad679bd11829f24bdc1e4c3bcb236c317184c1219cdd85770930c9360f5d6aea52e57650770e9b1aab3f6611237cbbbdac53dbee2d6586f7f04fbc

C:\Windows\Temp\nsrFF.tmp\rsLogger.dll

MD5 83ad54079827e94479963ba4465a85d7
SHA1 d33efd0f5e59d1ef30c59d74772b4c43162dc6b7
SHA256 ec0a8c14a12fdf8d637408f55e6346da1c64efdd00cc8921f423b1a2c63d3312
SHA512 c294fb8ac2a90c6125f8674ca06593b73b884523737692af3ccaa920851fc283a43c9e2dc928884f97b08fc8974919ec603d1afb5c178acd0c2ebd6746a737e1

C:\ProgramData\ReasonLabs\EPP\Errors.dat

MD5 8fec3065ac07278d437813d3c7927c7e
SHA1 acec832dcfd6a6bb2901cebd6796c9af1171e284
SHA256 acecd6594bca4115afe4a0c88562879563dab9f1fd018391d7cf7b40b9b2fe54
SHA512 c8b3f310ca18f150493415aa1f14b8704c4a2c31af5c060323769e724fcf898d8326909804d93ca09b83abf48fc9d956d0ffc5c0d49a3b5aa585669c21ff7bc7

C:\ProgramData\ReasonLabs\EPP\Quarantine.dat

MD5 f6f6d831d560c82e90c3825a948eb0cb
SHA1 0bb2d90881b336c78fb575c85c86fe0a0b43a659
SHA256 16c7db01b5549c863804499192d2053bc04feeb031c2bed9d8effb790d1a5689
SHA512 2d128bf6146f5c05c23604ea4c67995ecd43be75632715ab13bdd83e270fd5726ec8eb752043f9604c7050ba99d2148d62b277bf03f580bad668b194d5c0c6a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 4224e4590cb0f8020274597ca08a96c5
SHA1 dff0809a5abe0fc46bedb8c8d6d75013c9374101
SHA256 cac321f8109cbbe3c2a8c2e83eb46fb4a130146787d756887d69eabea5e228f8
SHA512 ddadd6c849f47f71b2d51004a37abc3aa725edef1dcdb3dad1d4986eb243c6c172e06c3da3f4861cd0439327d0dfbf601a302589c1451c4ac7acc96095fa023b

C:\ProgramData\ReasonLabs\EPP\Quarantine.dat

MD5 d9b00cb104aa54d5ef76f9c45a61e799
SHA1 41171a72ba101b8dfd07813fffbc25760aa8ef09
SHA256 561f177acc08fe10503e16afdee9fd9f17310bdbc729777eeb3c1212e4433da3
SHA512 2f7fb601b64cc44a4c6d31ff00db2438b50c1f5aeb011f3fb800368a38d96b64f10f7ffc847c1211af6135576d584f38682c515d3525b3d3529a2091d85897fc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\f_000053

MD5 5e7dd49773ddb70acc3ffd499662fdc9
SHA1 e5753fab4e2aa4ada17336ad0d81acbec887a3c1
SHA256 30ce27be7179edad8d9dcc9614427f3376888d3c616f6e684982ec64c0850aeb
SHA512 6c101b128392cef739f25e10a7c867d8a32ec818e6d44964b73b5e6fa4e39acaa41eda564a5dc790cc834053257ab1b82030b15eb7d4cbbafec122f265422484

C:\ProgramData\ReasonLabs\EPP\Quarantine.dat

MD5 c4e14980c7f03b0c170aeb8cdf27b0ac
SHA1 56f05454e5ebd96b838c9ada36eaba9b286fa5ee
SHA256 bad677e58704db3466d665923c1cc1ac73f6c3652ff18cfd7b58acc256c3264c
SHA512 211a4f32609cb4179a6b7e478080032d4e6b866811e36606745e3ff68ed25f4f662308d8f5373be900ccb185812f5eab42a97bac15e5b5624d441893730c0771

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

MD5 ad06981ec0be2f9be17317667e7fbd06
SHA1 1edf9350f59bb5df5838a71225a5fb9e9aa0de27
SHA256 0f206292dde9fb9c3dc7c27d50f71d63085db5041ee5db6ea5298886daf38449
SHA512 4a31cb3a68e49fdd44d869b4023ff48239b9dff39d1644333a957a34d83bc8e42c22a11ce6ef94cf113fd594f7d9b31a60bc96c2facbe317c2a713e2accee822

C:\Users\Admin\AppData\Roaming\ReasonLabs\EPP\Network\Network Persistent State

MD5 b324dab28eba376f8391bc345feb019e
SHA1 3ea4f7ced3497f0dcc95905872b28c861be81aaf
SHA256 33aa786aed7925d4bb6369a19ea3637cf590704071af26f79f6e83fec1b37aa2
SHA512 712974b72b69c5c76c3a689a8259995afa38225f8f21647412107e9b97fa04879ceeaff5eec6031574f7c1b2fa4d89e1ad70f56f7c20add6519494a5a576cef4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 c793b25e510abc926281ccc819635adb
SHA1 01df34a3a438066a4662296fb9f4d012d990738e
SHA256 fe545ecceb416ab60509981b2005669aff6f9095f25511737b92b4b2bda1ec9c
SHA512 90f6bf146b4532ea11a50bd62bf35d2267ee332654d88e841eab27b86c782e6d329e0a0d45ff2e14a12df36cfaa88ddaa5d6ce6537501e8d3ada55adfca5ccdb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 a27faeb8fee93fd71e23840f9a54cfb2
SHA1 77fa16e7a3614e8533664770e3924ee9613c8d55
SHA256 5ce135879e76bde83926e0ccbe19a8671ffe35313d6c8270c81285ff78a81e34
SHA512 5d140619a011f9d5e7deb959390d91c3dc4b08ed55637b33edfaa77fcb3af7ed2360f199df3a0a7887ec86623f854f70a8d59917a9df4f2c1520a84886ee9e95

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\282f05fa-8d2c-4265-969b-065e8ff784cf\d73e05b3c7588927_0

MD5 5a6a6765f7d971b88d3b9aadcd0c3cae
SHA1 5ed8ffb3ecfb8344cc2808e5eadeb1efb902365a
SHA256 34f29547d78635bcff5b6c272a1818fdc11649c205b9c3f12a5c25455809023d
SHA512 b698515e20dc7666ed64f13cfba2e852bb2164b2ed991060714a25febb5fb524912a1de7528e6c07e2ae3cb8ba245b0cc061add0a02496142edfa5e81c5fc425

C:\ProgramData\ReasonLabs\EPP\SignaturesYSS.dat

MD5 f1ebaaed07561200badff25c9eea5010
SHA1 ed1a95703b6dc80668307e1efe3b93bf00dc55c6
SHA256 70ca8aef3c32361a376e9687f2876cc166dbc5c429b70a1d01801c5a51e0ba78
SHA512 f8b71d8658ac74a6b1830f1cb74a07636b26055585d178df35a4b76926bafd16d2cbfc3ce96da3f8fd6bfd93daa053d867b9023c0ffebe9955e980ff5d224318

C:\ProgramData\ReasonLabs\EPP\SignaturesYS.dat

MD5 8de77a5ac1a0cb41f096b46ce93f86aa
SHA1 0f247215053bbe9799c18b5e2429d3e1f3f17c36
SHA256 b8a4ec881932f0387aee3b5fdb50bcef6c28c1952e99e06ca6136cb8bc978a72
SHA512 644bc1ce3ac4431dbc1efb67de09ed370d0dba488181ca334077f422c9493b8f1dd5006bb6dcbd02d4712998f6777b15d41e62ca429d2e4ffc3b24376b106fc1

C:\ProgramData\ReasonLabs\EPP\SignaturesYFS.dat

MD5 973a460ffffaa07b9591ce64f3301328
SHA1 e3427ccb5682afdbe67fa22a77886b2204031af6
SHA256 a2048698e2d32f61bf51b0b5c83d9bedb4013e2eccda047c6c249e0a82e70150
SHA512 2ebb052fb0d18e06f422cd1e5e1d526aea77fb0f95bb2c9724210dc4ba6c79f6f156b2b5e5cc7e4934c072a83b20eed838de4324de3771915e5e0e690672a5cd

C:\ProgramData\ReasonLabs\EPP\SignaturesYF.dat

MD5 6c954a0c7d0d28beea1cac4c65632253
SHA1 008957f6d1f4a65f21713eb84203825f1b82b789
SHA256 68cbb1d6ee0dc57072e6d5c29a6f30ef2d2373a8fb6a5f17a1e860886267aad7
SHA512 527dda878c68878e9570431d824c2a7bcb3bb56087576488e7a881012b6f5b1d5818779e5c5087aea4e262e57932c5bd9afec198fc7ce9a077a66c659c17cdf3

C:\ProgramData\ReasonLabs\EPP\SignaturesYSS.dat.tmp

MD5 f371cf8dbadd17e03393aa21f3963401
SHA1 8b7a906b5d6ab57a3bf7b32401a286e812327813
SHA256 287e1aed9f449999e9852477960f8b67b2b77869463e1baabe63bec75142130a
SHA512 d910f4d48f4f34c0d9a68a89fc846e9c776081975c8d0bb14478c7978d8be43e4e2666f957deca1ea411032d08b9b2bed19849fe284e4a2ef91806c730cc570a

C:\Windows\Temp\nsbEF.tmp\tmp\RAVVPN-installer.exe\assembly\dl3\10ba56ca\a8a6c903_b4a3da01\rsTime.DLL

MD5 dca214827f4635b07f6f0de3f54bed0a
SHA1 23c1ef65b4da7545ac200bab6c9da4e98e167c20
SHA256 d1b0cb36f2edbc587e943d855da3d9ada334d438bfdf0aaad99c12efebf040df
SHA512 1c665e52f976e5288320b9de4ed5e5c25c97c6517283ef8a7ab74e35816f4408e680417e00282c3590c6b7c77cb4f477f0f89805355a5c1087a7fa1c2d173f41

C:\Program Files\ReasonLabs\VPN\OpenVPN\legacy\i386\tap0901.sys

MD5 f49967c396969b71c3a72537db03a68b
SHA1 f59d3a5d2afd85fbb9fb36f1411c767be2bf96cf
SHA256 3b1ff5252012d6e8a7dd6e4621ec43812510dca1a25a9a2e07288800f445dd41
SHA512 cda4269b5a13e573469b3e3a75432117079c65279e06322519af704a80862e43bceb4cc9d6352dd19db00bb10d10f64b02eee6c5dc29f56fa5f99c89823a62e3

C:\Program Files\ReasonLabs\VPN\OpenVPN\legacy\i386\tap0901.cat

MD5 ad8a5cbec4f83ae4f850c793713ee770
SHA1 bee00a5037d4f1232837d27bca21658efcff1750
SHA256 878c1b205887b61906f6f4f8da5783d2bb8756d0a39359288d09f65f983b27c2
SHA512 5e88ce1ba2c1dc17e04d26d9afaa97987e61d1c57c97bb1e8a07561b33f763052d0e4bddd184e11ac19e514c7041f9750a6dc576f27161a136765fd1240e5327

C:\Program Files\ReasonLabs\VPN\OpenVPN\legacy\i386\OemVista.inf

MD5 41884571579f88540326252b81d0a9f8
SHA1 cfd0ba5db827d21e4fa71663c045b5676d303d6e
SHA256 a461b764e248d3e59a1a730ff94af7e61121f5a02004e02b3b866ac8fd1689be
SHA512 3eeeffc02998c73a11d4a0988fe3823b52ce560f8cb40c76ab810d5ea78dd42811cf30ae35bf11d55f17b3804154ddb483acff2f11261bfc382b5e18eb42688b

C:\Program Files\ReasonLabs\VPN\OpenVPN\legacy\amd64\tap0901.sys

MD5 d765f43cbea72d14c04af3d2b9c8e54b
SHA1 daebe266073616e5fc931c319470fcf42a06867a
SHA256 89c5ca1440df186497ce158eb71c0c6bf570a75b6bc1880eac7c87a0250201c0
SHA512 ff83225ed348aa8558fb3055ceb43863bad5cf775e410ed8acda7316b56cd5c9360e63ed71abbc8929f7dcf51fd9a948b16d58242a7a2b16108e696c11d548b2

C:\Program Files\ReasonLabs\VPN\OpenVPN\legacy\amd64\tap0901.cat

MD5 c757503bc0c5a6679e07fe15b93324d6
SHA1 6a81aa87e4b07c7fea176c8adf1b27ddcdd44573
SHA256 91ebea8ad199e97832cf91ea77328ed7ff49a1b5c06ddaacb0e420097a9b079e
SHA512 efd1507bc7aa0cd335b0e82cddde5f75c4d1e35490608d32f24a2bed0d0fbcac88919728e3b3312665bd1e60d3f13a325bdcef4acfddab0f8c2d9f4fb2454d99

C:\Program Files\ReasonLabs\VPN\OpenVPN\legacy\amd64\OemVista.inf

MD5 87868193626dc756d10885f46d76f42e
SHA1 94a5ce8ed7633ed77531b6cb14ceb1927c5cae1f
SHA256 b5728e42ea12c67577cb9188b472005ee74399b6ac976e7f72b48409baee3b41
SHA512 79751330bed5c16d66baf3e5212be0950f312ffd5b80b78be66eaea3cc7115f8a9472d2a43b5ce702aa044f3b45fd572775ff86572150df91cc27866f88f8277