Malware Analysis Report

2025-01-18 00:10

Sample ID 240613-qqespsvdkp
Target https://www.mediafire.com/file/8flnjugjj8s12p5
Tags
score
6/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
6/10

Threat Level: Shows suspicious behavior

The file https://www.mediafire.com/file/8flnjugjj8s12p5 was found to be: Shows suspicious behavior.

Malicious Activity Summary


Looks up external IP address via web service

Drops file in System32 directory

Drops file in Windows directory

Suspicious use of SetWindowsHookEx

Enumerates system info in registry

Suspicious use of FindShellTrayWindow

Modifies registry class

Checks processor information in registry

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of AdjustPrivilegeToken

Suspicious use of SendNotifyMessage

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-13 13:27

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 13:27

Reported

2024-06-13 13:34

Platform

win10v2004-20240611-en

Max time kernel

398s

Max time network

403s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.mediafire.com/file/8flnjugjj8s12p5

Signatures

Looks up external IP address via web service

Description Indicator Process Target
N/A whatismyipaddress.com N/A N/A
N/A whatismyipaddress.com N/A N/A
N/A whatismyipaddress.com N/A N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\dll\combase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\dll\UnityPlayer_Win64_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\dll\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\exe\WindowsPlayer_Master_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\dll\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\dll\mswsock.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\dll\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\UnityPlayer_Win64_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\dll\UnityPlayer_Win64_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\dll\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\dll\fmodstudio.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\dll\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\dll\UnityPlayer_Win64_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\dll\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\WindowsPlayer_Master_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\dll\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\symbols\dll\combase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\dll\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\dll\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\dll\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\steam_api64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\dll\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\exe\WindowsPlayer_Master_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\dll\steam_api64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\dll\combase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\dll\mswsock.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\exe\WindowsPlayer_Master_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\dll\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\dll\mswsock.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\dll\combase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\dll\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\dll\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\dll\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\symbols\dll\fmodstudio.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\symbols\dll\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\symbols\exe\WindowsPlayer_Master_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\system32\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\system32\dll\combase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\dll\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\symbols\dll\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\UnityPlayer_Win64_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\combase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\dll\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\WindowsPlayer_Master_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\exe\WindowsPlayer_Master_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\symbols\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\dll\steam_api64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\dll\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\dll\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\dll\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\dll\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\dll\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\symbols\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\exe\WindowsPlayer_Master_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\dll\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\dll\UnityPlayer_Win64_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\dll\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\dll\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\dll\fmodstudio.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\WindowsPlayer_Master_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\dll\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\symbols\dll\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\dll\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\dll\mswsock.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\dll\fmodstudio.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\dll\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\mswsock.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\exe\WindowsPlayer_Master_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\combase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\dll\steam_api64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\dll\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\dll\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\dll\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\dll\mswsock.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\dll\UnityPlayer_Win64_mono_x64.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\mswsock.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\DLL\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\dll\fmodstudio.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\symbols\dll\kernelbase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\symbols\dll\combase.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\dll\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\kernel32.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\ntdll.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
File opened for modification C:\Windows\symbols\dll\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
File opened for modification C:\Windows\dll\mono-2.0-bdwgc.pdb C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key opened \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key opened \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key opened \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key opened \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4204450073-1267028356-951339405-1000\{824D40E6-92A8-4F6B-ACE3-61FFEE611910} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A
N/A N/A C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1308 wrote to memory of 2516 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 2516 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 5028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 748 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 748 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1308 wrote to memory of 4492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.mediafire.com/file/8flnjugjj8s12p5

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa228f46f8,0x7ffa228f4708,0x7ffa228f4718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2936 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6136 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6148 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6552 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6816 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5572 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5572 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6348 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6700 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6836 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6808 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6480 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7008 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7012 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7412 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6504 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8528 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8024 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8952 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9296 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9792 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9116 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7836 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7704 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4968 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9772 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=9508 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=10344 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10116 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7764 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9808 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6216 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9580 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8996 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10332 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5708 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x300 0x2fc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10076 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5544 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe"

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe" --attach 6744 2604587028480

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe" "6744" "2604587028480"

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe"

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe" --attach 6764 2096996683776

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe" "6764" "2096996683776"

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe"

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe" --attach 1792 1784463691776

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe" "1792" "1784463691776"

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe"

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe"

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe"

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe" --attach 2480 2282906128384

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe" "2480" "2282906128384"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7532 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1748 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7544 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7736 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3708 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2016,3985738799924802008,8701280129194072712,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7776 /prefetch:8

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\worldbox.exe"

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe" --attach 6836 2174663397376

C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe

"C:\Users\Admin\Downloads\WorldBox.God.Simulator.Build.11538132\WorldBox.God.Simulator.Build.11538132\UnityCrashHandler64.exe" "6836" "2174663397376"

Network

Country Destination Domain Proto
US 8.8.8.8:53 www.mediafire.com udp
US 104.16.114.74:443 www.mediafire.com tcp
US 8.8.8.8:53 the.gatekeeperconsent.com udp
US 104.21.42.32:443 the.gatekeeperconsent.com tcp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 privacy.gatekeeperconsent.com udp
US 8.8.8.8:53 www.ezojs.com udp
US 8.8.8.8:53 translate.google.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 static.mediafire.com udp
US 104.22.75.216:443 btloader.com tcp
US 172.67.199.186:443 privacy.gatekeeperconsent.com tcp
US 104.21.63.106:443 www.ezojs.com tcp
GB 142.250.187.238:443 translate.google.com tcp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 cdn.amplitude.com udp
HR 65.9.189.44:443 cdn.amplitude.com tcp
US 8.8.8.8:53 66.242.123.52.in-addr.arpa udp
US 8.8.8.8:53 74.114.16.104.in-addr.arpa udp
US 8.8.8.8:53 14.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 249.197.17.2.in-addr.arpa udp
US 8.8.8.8:53 32.42.21.104.in-addr.arpa udp
US 8.8.8.8:53 106.63.21.104.in-addr.arpa udp
US 8.8.8.8:53 186.199.67.172.in-addr.arpa udp
US 8.8.8.8:53 216.75.22.104.in-addr.arpa udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 73.80.16.104.in-addr.arpa udp
US 8.8.8.8:53 g.ezoic.net udp
FR 35.181.89.222:443 g.ezoic.net tcp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 cdn.otnolatrnup.com udp
US 104.16.52.110:443 cdn.otnolatrnup.com tcp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 www.mediafiredls.com udp
US 8.8.8.8:53 go.ezodn.com udp
US 8.8.8.8:53 translate.googleapis.com udp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 130.211.23.194:443 api.btloader.com tcp
US 104.26.3.173:443 www.mediafiredls.com tcp
GB 216.58.201.106:443 translate.googleapis.com tcp
US 188.114.97.2:443 go.ezodn.com tcp
US 188.114.97.2:443 go.ezodn.com tcp
US 188.114.97.2:443 go.ezodn.com tcp
US 188.114.97.2:443 go.ezodn.com tcp
US 188.114.97.2:443 go.ezodn.com tcp
US 8.8.8.8:53 api.amplitude.com udp
US 34.215.76.252:443 api.amplitude.com tcp
US 188.114.97.2:443 go.ezodn.com tcp
US 8.8.8.8:53 apps.identrust.com udp
US 8.8.8.8:53 g.ezodn.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 44.189.9.65.in-addr.arpa udp
US 8.8.8.8:53 13.189.9.65.in-addr.arpa udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 222.89.181.35.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 110.52.16.104.in-addr.arpa udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 6.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 173.3.26.104.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 106.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 2.97.114.188.in-addr.arpa udp
BE 104.117.77.187:80 apps.identrust.com tcp
US 104.21.87.79:443 g.ezodn.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 130.211.23.194:443 api.btloader.com udp
BE 108.177.15.156:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 otnolatrnup.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
BE 2.17.196.177:443 www.bing.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 216.239.32.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 www.google.co.uk udp
GB 142.250.200.3:443 www.google.co.uk tcp
GB 142.250.200.3:443 www.google.co.uk tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 translate-pa.googleapis.com udp
US 8.8.8.8:53 bshr.ezodn.com udp
GB 142.250.187.196:443 www.google.com tcp
US 104.21.87.79:443 bshr.ezodn.com tcp
US 8.8.8.8:53 download2391.mediafire.com udp
US 199.91.155.132:443 download2391.mediafire.com tcp
US 199.91.155.132:443 download2391.mediafire.com tcp
US 8.8.8.8:53 tags.crwdcntrl.net udp
HR 65.9.189.58:443 tags.crwdcntrl.net tcp
US 8.8.8.8:53 187.77.117.104.in-addr.arpa udp
US 8.8.8.8:53 79.87.21.104.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 252.76.215.34.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 156.15.177.108.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 177.196.17.2.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 ad.crwdcntrl.net udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
IE 54.72.245.162:443 bcp.crwdcntrl.net tcp
IE 52.215.133.162:443 bcp.crwdcntrl.net tcp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 132.155.91.199.in-addr.arpa udp
US 8.8.8.8:53 58.189.9.65.in-addr.arpa udp
US 8.8.8.8:53 162.245.72.54.in-addr.arpa udp
US 8.8.8.8:53 162.133.215.52.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 104.16.53.110:80 otnolatrnup.com tcp
US 104.16.53.110:80 otnolatrnup.com tcp
US 8.8.8.8:53 110.53.16.104.in-addr.arpa udp
US 8.8.8.8:53 woreppercomming.com udp
HR 65.9.189.24:443 woreppercomming.com tcp
US 8.8.8.8:53 www.ovardu.com udp
US 172.67.174.4:443 www.ovardu.com tcp
US 8.8.8.8:53 24.189.9.65.in-addr.arpa udp
US 8.8.8.8:53 www.opera.com udp
DE 3.76.232.217:443 www.opera.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 4.174.67.172.in-addr.arpa udp
US 8.8.8.8:53 217.232.76.3.in-addr.arpa udp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 cdn-production-opera-website.operacdn.com udp
US 8.8.8.8:53 www.googleoptimize.com udp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
GB 172.217.16.238:443 www.googleoptimize.com tcp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 120.66.68.104.in-addr.arpa udp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
GB 216.58.201.106:443 translate-pa.googleapis.com udp
FR 35.181.89.222:443 g.ezoic.net tcp
US 8.8.8.8:53 47dadb4c5217a34e83a8c815424e6dd2.safeframe.googlesyndication.com udp
US 8.8.8.8:53 ghb.adtelligent.com udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 htlb.casalemedia.com udp
GB 172.217.169.65:443 47dadb4c5217a34e83a8c815424e6dd2.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 cdn.prod.uidapi.com udp
US 8.8.8.8:53 cdn-ima.33across.com udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 oa.openxcdn.net udp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
NL 147.75.84.158:443 prebid.a-mo.net tcp
HR 65.9.189.89:443 hb.yellowblue.io tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 23.227.151.242:443 ghb.adtelligent.com tcp
DE 51.89.9.254:443 onetag-sys.com tcp
US 104.22.31.209:443 prebid.smilewanted.com tcp
US 104.22.31.209:443 prebid.smilewanted.com tcp
US 104.22.31.209:443 prebid.smilewanted.com tcp
US 104.22.31.209:443 prebid.smilewanted.com tcp
US 104.22.31.209:443 prebid.smilewanted.com tcp
US 104.26.9.169:443 script.4dex.io tcp
HR 65.9.28.71:443 cdn.prod.uidapi.com tcp
US 34.102.146.192:443 oa.openxcdn.net tcp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 104.22.52.86:443 cdn.id5-sync.com tcp
US 104.18.35.167:443 cdn-ima.33across.com tcp
US 151.101.193.229:443 cdn.jsdelivr.net tcp
NL 178.250.1.3:443 static.criteo.net tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 cadmus.script.ac udp
DE 51.89.9.254:443 onetag-sys.com udp
US 8.8.8.8:53 ghb1.adtelligent.com udp
US 104.18.22.145:443 cadmus.script.ac tcp
US 8.8.8.8:53 oajs.openx.net udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 id5-sync.com udp
GB 185.83.69.58:443 ghb1.adtelligent.com tcp
US 34.120.107.143:443 oajs.openx.net tcp
DE 141.95.98.64:443 id5-sync.com tcp
US 188.114.97.2:443 go.ezodn.com tcp
US 8.8.8.8:53 cdn.ampproject.org udp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
US 34.120.107.143:443 oajs.openx.net udp
US 8.8.8.8:53 65.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 158.84.75.147.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 169.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 209.31.22.104.in-addr.arpa udp
US 8.8.8.8:53 254.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 89.189.9.65.in-addr.arpa udp
US 8.8.8.8:53 229.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 192.146.102.34.in-addr.arpa udp
US 8.8.8.8:53 87.70.96.34.in-addr.arpa udp
US 8.8.8.8:53 167.35.18.104.in-addr.arpa udp
US 8.8.8.8:53 86.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 71.28.9.65.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 242.151.227.23.in-addr.arpa udp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 145.22.18.104.in-addr.arpa udp
US 8.8.8.8:53 58.69.83.185.in-addr.arpa udp
US 8.8.8.8:53 143.107.120.34.in-addr.arpa udp
US 8.8.8.8:53 64.98.95.141.in-addr.arpa udp
US 8.8.8.8:53 193.187.250.142.in-addr.arpa udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 google-bidout-d.openx.net udp
US 35.244.159.8:443 google-bidout-d.openx.net tcp
US 8.8.8.8:53 ajax.googleapis.com udp
US 8.8.8.8:53 s0.2mdn.net udp
GB 216.58.204.70:443 s0.2mdn.net tcp
GB 216.58.204.70:443 s0.2mdn.net tcp
GB 216.58.213.10:443 ajax.googleapis.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 gum.criteo.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
FR 185.235.86.169:443 ag.gbc.criteo.com tcp
NL 185.235.87.195:443 gem.gbc.criteo.com tcp
NL 178.250.1.11:443 dnacdn.net tcp
US 8.8.8.8:53 70.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 10.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 169.86.235.185.in-addr.arpa udp
US 8.8.8.8:53 195.87.235.185.in-addr.arpa udp
US 8.8.8.8:53 id.a-mx.com udp
US 8.8.8.8:53 hbx.media.net udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 csync.smilewanted.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 s.console.adtarget.com.tr udp
NL 79.127.227.46:443 id.a-mx.com tcp
DE 142.132.249.186:443 s.console.adtarget.com.tr tcp
US 172.64.149.180:443 js-sec.indexww.com tcp
SE 23.34.232.19:443 hbx.media.net tcp
SE 23.34.232.193:443 ads.pubmatic.com tcp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 id.crwdcntrl.net udp
SE 23.34.232.19:443 hbx.media.net tcp
SE 23.34.232.193:443 ads.pubmatic.com tcp
US 52.223.40.198:443 match.adsrvr.org tcp
US 104.22.4.69:443 id.hadron.ad.gt tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 104.22.4.69:443 id.hadron.ad.gt tcp
DE 162.19.138.118:443 lb.eu-1-id5-sync.com tcp
DE 3.75.62.37:443 ups.analytics.yahoo.com tcp
US 8.8.8.8:53 46.227.127.79.in-addr.arpa udp
US 8.8.8.8:53 sync.adtelligent.com udp
US 8.8.8.8:53 assets.a-mo.net udp
GB 185.83.71.234:443 sync.adtelligent.com tcp
US 104.19.159.19:443 assets.a-mo.net tcp
US 8.8.8.8:53 186.249.132.142.in-addr.arpa udp
US 8.8.8.8:53 19.232.34.23.in-addr.arpa udp
US 8.8.8.8:53 193.232.34.23.in-addr.arpa udp
US 8.8.8.8:53 198.40.223.52.in-addr.arpa udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 118.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 37.62.75.3.in-addr.arpa udp
US 8.8.8.8:53 234.71.83.185.in-addr.arpa udp
US 8.8.8.8:53 ib.adnxs.com udp
NL 185.89.210.46:443 ib.adnxs.com tcp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 sync.a-mo.net udp
NL 145.40.97.67:443 sync.a-mo.net tcp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 sync.mathtag.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 t.adx.opera.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 spl.zeotap.com udp
US 216.200.232.253:443 sync.mathtag.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 145.40.97.67:443 sync.a-mo.net tcp
NL 198.47.127.18:443 image8.pubmatic.com tcp
US 172.67.40.173:443 spl.zeotap.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
FR 217.182.178.228:443 ssbsync-global.smartadserver.com tcp
FR 154.54.250.81:443 ads.stickyadstv.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 static.smilewanted.com udp
DE 35.156.10.230:443 rtb.mfadsrvr.com tcp
US 8.8.8.8:53 cdn.indexww.com udp
US 52.46.155.104:443 s.amazon-adsystem.com tcp
GB 142.250.178.2:443 cm.g.doubleclick.net tcp
GB 142.250.178.2:443 cm.g.doubleclick.net tcp
US 8.8.8.8:53 x.bidswitch.net udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 id.rtb.mx udp
US 8.8.8.8:53 ow.pubmatic.com udp
US 8.8.8.8:53 sync.smartadserver.com udp
DE 79.127.216.47:443 id.rtb.mx tcp
GB 185.64.190.84:443 ow.pubmatic.com tcp
NL 89.149.193.121:443 sync.smartadserver.com tcp
US 8.8.8.8:53 19.159.19.104.in-addr.arpa udp
US 8.8.8.8:53 46.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 67.97.40.145.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 18.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 81.250.54.154.in-addr.arpa udp
US 8.8.8.8:53 228.178.182.217.in-addr.arpa udp
US 8.8.8.8:53 173.40.67.172.in-addr.arpa udp
US 8.8.8.8:53 253.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 230.10.156.35.in-addr.arpa udp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 104.155.46.52.in-addr.arpa udp
US 8.8.8.8:53 secure.adnxs.com udp
GB 142.250.178.2:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 ice.360yield.com udp
IE 34.253.100.199:443 ice.360yield.com tcp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 ap.lijit.com udp
IE 63.35.80.10:443 ap.lijit.com tcp
US 34.98.64.218:443 u.openx.net udp
US 8.8.8.8:53 cm.adform.net udp
DK 37.157.6.243:443 cm.adform.net tcp
US 8.8.8.8:53 us.shb-sync.com udp
US 8.2.110.33:443 us.shb-sync.com tcp
US 8.8.8.8:53 s.ad.smaato.net udp
HR 65.9.189.112:443 s.ad.smaato.net tcp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 84.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 121.193.149.89.in-addr.arpa udp
US 8.8.8.8:53 199.100.253.34.in-addr.arpa udp
US 8.8.8.8:53 47.216.127.79.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 10.80.35.63.in-addr.arpa udp
US 8.8.8.8:53 243.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 33.110.2.8.in-addr.arpa udp
US 8.8.8.8:53 112.189.9.65.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 8.8.8.8:53 240.221.184.93.in-addr.arpa udp
US 8.8.8.8:53 ghb2.adtelligent.com udp
GB 185.83.69.58:443 ghb2.adtelligent.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 23.227.151.242:443 ghb2.adtelligent.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 185.83.69.58:443 ghb2.adtelligent.com tcp
GB 216.58.204.70:443 s0.2mdn.net udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
GB 185.83.69.58:443 ghb2.adtelligent.com tcp
US 23.227.151.242:443 ghb2.adtelligent.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 185.83.69.58:443 ghb2.adtelligent.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.200.3:443 www.google.co.uk udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 185.83.69.58:443 ghb2.adtelligent.com tcp
US 23.227.151.242:443 ghb2.adtelligent.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 185.83.69.58:443 ghb2.adtelligent.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 216.239.32.36:443 region1.analytics.google.com udp
BE 2.17.196.160:443 www.bing.com tcp
US 8.8.8.8:53 160.196.17.2.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
BE 2.17.196.98:443 r.bing.com tcp
BE 2.17.196.98:443 r.bing.com tcp
BE 2.17.196.176:443 th.bing.com tcp
BE 2.17.196.176:443 th.bing.com tcp
US 8.8.8.8:53 98.196.17.2.in-addr.arpa udp
US 8.8.8.8:53 176.196.17.2.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
NL 40.126.32.140:443 login.microsoftonline.com tcp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 140.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
US 8.8.8.8:53 20.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 whatismyipaddress.com udp
US 104.19.222.79:443 whatismyipaddress.com tcp
US 104.19.222.79:443 whatismyipaddress.com tcp
US 8.8.8.8:53 ds6.whatismyipaddress.com udp
US 8.8.8.8:53 app.fusebox.fm udp
US 8.8.8.8:53 cmp.inmobi.com udp
US 8.8.8.8:53 a.omappapi.com udp
US 8.8.8.8:53 a.pub.network udp
US 104.26.12.133:443 app.fusebox.fm tcp
US 8.8.8.8:53 79.222.19.104.in-addr.arpa udp
HR 65.9.189.112:443 cmp.inmobi.com tcp
US 104.18.21.206:443 a.pub.network tcp
US 8.8.8.8:53 maps.whatismyipaddress.info udp
GB 143.244.38.136:443 a.omappapi.com tcp
US 104.26.4.215:443 maps.whatismyipaddress.info tcp
US 104.26.4.215:443 maps.whatismyipaddress.info tcp
US 104.26.4.215:443 maps.whatismyipaddress.info tcp
US 104.26.4.215:443 maps.whatismyipaddress.info tcp
US 8.8.8.8:53 optimise.net udp
US 8.8.8.8:53 api.floors.dev udp
US 34.160.128.112:443 api.floors.dev tcp
US 34.111.152.239:443 optimise.net tcp
US 8.8.8.8:53 d.pub.network udp
US 104.26.12.133:443 app.fusebox.fm tcp
US 34.160.152.31:443 d.pub.network tcp
US 8.8.8.8:53 api.omappapi.com udp
US 172.66.42.248:443 api.omappapi.com tcp
US 8.8.8.8:53 onesignal.com udp
US 8.8.8.8:53 static.libsyn.com udp
US 34.111.152.239:443 optimise.net tcp
HR 65.9.189.107:443 static.libsyn.com tcp
US 8.8.8.8:53 133.12.26.104.in-addr.arpa udp
US 8.8.8.8:53 206.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 145.160.16.104.in-addr.arpa udp
US 8.8.8.8:53 136.38.244.143.in-addr.arpa udp
US 8.8.8.8:53 215.4.26.104.in-addr.arpa udp
US 8.8.8.8:53 89.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 112.128.160.34.in-addr.arpa udp
US 8.8.8.8:53 239.152.111.34.in-addr.arpa udp
US 8.8.8.8:53 31.152.160.34.in-addr.arpa udp
US 8.8.8.8:53 248.42.66.172.in-addr.arpa udp
US 34.111.152.239:443 optimise.net udp
GB 142.250.200.3:443 www.google.co.uk udp
BE 108.177.15.156:443 bid.g.doubleclick.net udp
US 8.8.8.8:53 cdn.whatismyipaddress.com udp
US 8.8.8.8:53 api.cmp.inmobi.com udp
DE 18.184.88.93:443 api.cmp.inmobi.com tcp
US 8.8.8.8:53 freestar-io.videoplayerhub.com udp
US 8.8.8.8:53 cdn.confiant-integrations.net udp
US 172.64.144.166:443 cdn.confiant-integrations.net tcp
US 104.26.9.50:443 freestar-io.videoplayerhub.com tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
NL 178.250.1.11:443 dnacdn.net tcp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 lexicon.33across.com udp
US 8.8.8.8:53 pb-rtd.ccgateway.net udp
US 8.8.8.8:53 fid.agkn.com udp
US 8.8.8.8:53 api.rlcdn.com udp
US 52.223.40.198:443 match.adsrvr.org tcp
US 8.8.8.8:53 idx.liadm.com udp
US 8.8.8.8:53 secure.quantserve.com udp
US 35.244.193.51:443 lexicon.33across.com tcp
US 8.8.8.8:53 pb-ing.ccgateway.net udp
US 54.166.147.213:443 idx.liadm.com tcp
US 104.22.75.216:443 btloader.com tcp
US 130.211.23.194:443 api.btloader.com udp
HR 65.9.19.123:443 c.amazon-adsystem.com tcp
US 35.94.16.34:443 pb-ing.ccgateway.net tcp
US 34.120.133.55:443 api.rlcdn.com tcp
US 104.22.52.173:443 cdn.hadronid.net tcp
US 35.94.16.34:443 pb-ing.ccgateway.net tcp
US 34.160.46.1:443 fid.agkn.com tcp
DE 91.228.74.200:443 secure.quantserve.com tcp
US 8.8.8.8:53 107.189.9.65.in-addr.arpa udp
US 8.8.8.8:53 93.88.184.18.in-addr.arpa udp
US 8.8.8.8:53 166.144.64.172.in-addr.arpa udp
US 8.8.8.8:53 50.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 51.193.244.35.in-addr.arpa udp
US 8.8.8.8:53 55.133.120.34.in-addr.arpa udp
US 8.8.8.8:53 173.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 200.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 213.147.166.54.in-addr.arpa udp
US 8.8.8.8:53 123.19.9.65.in-addr.arpa udp
US 35.94.16.34:443 pb-ing.ccgateway.net tcp
DE 162.19.138.118:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 s2s.t13.io udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 bidder.criteo.com udp
US 34.107.140.113:443 s2s.t13.io tcp
US 34.107.140.113:443 s2s.t13.io tcp
US 34.107.140.113:443 s2s.t13.io tcp
US 8.8.8.8:53 rules.quantcount.com udp
US 34.120.63.153:443 prebid.media.net tcp
US 34.120.63.153:443 prebid.media.net tcp
US 35.186.253.211:443 rtb.openx.net tcp
US 35.186.253.211:443 rtb.openx.net tcp
DE 3.68.142.144:443 btlr.sharethrough.com tcp
DE 3.68.142.144:443 btlr.sharethrough.com tcp
DE 3.68.142.144:443 btlr.sharethrough.com tcp
DE 3.68.142.144:443 btlr.sharethrough.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 34.160.152.31:443 d.pub.network tcp
HR 65.9.189.35:443 rules.quantcount.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 34.160.152.31:443 d.pub.network udp
HR 65.9.189.25:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 rp.liadm.com udp
HR 65.9.188.156:443 aax.amazon-adsystem.com tcp
HR 65.9.188.156:443 aax.amazon-adsystem.com tcp
US 54.198.0.28:443 rp.liadm.com tcp
GB 23.49.161.153:443 secure.cdn.fastclick.net tcp
US 8.8.8.8:53 a.ad.gt udp
US 104.22.5.69:443 a.ad.gt tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 35.94.16.34:443 pb-ing.ccgateway.net tcp
US 8.8.8.8:53 34.16.94.35.in-addr.arpa udp
US 8.8.8.8:53 113.140.107.34.in-addr.arpa udp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 8.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 211.253.186.35.in-addr.arpa udp
US 8.8.8.8:53 144.142.68.3.in-addr.arpa udp
US 8.8.8.8:53 35.189.9.65.in-addr.arpa udp
US 8.8.8.8:53 25.189.9.65.in-addr.arpa udp
US 8.8.8.8:53 153.161.49.23.in-addr.arpa udp
US 8.8.8.8:53 156.188.9.65.in-addr.arpa udp
US 8.8.8.8:53 69.5.22.104.in-addr.arpa udp
US 8.8.8.8:53 28.0.198.54.in-addr.arpa udp
US 8.8.8.8:53 b4796ec9582bfb9353998190ce9cb3b1.safeframe.googlesyndication.com udp
US 8.8.8.8:53 p.ad.gt udp
US 8.8.8.8:53 ids.ad.gt udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 image2.pubmatic.com udp
US 8.8.8.8:53 token.rubiconproject.com udp
US 8.8.8.8:53 sync.smartadserver.com udp
GB 142.250.178.2:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 dpm.demdex.net udp
US 34.98.64.218:443 u.openx.net udp
US 8.8.8.8:53 pixel.quantserve.com udp
NL 178.250.1.11:443 dnacdn.net tcp
US 104.22.5.69:443 ids.ad.gt tcp
FR 185.235.86.169:443 ag.gbc.criteo.com tcp
NL 185.235.87.195:443 gem.gbc.criteo.com tcp
NL 185.89.211.84:443 secure.adnxs.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 104.22.4.69:443 ids.ad.gt tcp
US 104.22.4.69:443 ids.ad.gt tcp
GB 185.64.191.210:443 image2.pubmatic.com tcp
IE 52.214.157.60:443 dpm.demdex.net tcp
FR 178.32.197.57:443 sync.smartadserver.com tcp
GB 142.250.187.196:443 www.google.com udp
US 104.22.5.69:443 ids.ad.gt tcp
US 104.22.5.69:443 ids.ad.gt tcp
US 8.8.8.8:53 pixels.ad.gt udp
US 104.22.4.69:443 pixels.ad.gt tcp
GB 142.250.187.193:443 cdn.ampproject.org udp
US 8.8.8.8:53 cdn.browsiprod.com udp
HR 65.9.189.37:443 cdn.browsiprod.com tcp
US 8.8.8.8:53 cdn.springserve.com udp
HR 65.9.189.108:443 cdn.springserve.com tcp
US 8.8.8.8:53 210.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 84.211.89.185.in-addr.arpa udp
US 8.8.8.8:53 60.157.214.52.in-addr.arpa udp
US 8.8.8.8:53 57.197.32.178.in-addr.arpa udp
US 8.8.8.8:53 37.189.9.65.in-addr.arpa udp
US 8.8.8.8:53 108.189.9.65.in-addr.arpa udp
US 8.8.8.8:53 events.browsiprod.com udp
US 35.81.91.148:443 events.browsiprod.com tcp
US 8.8.8.8:53 yield-manager.browsiprod.com udp
HR 65.9.189.64:443 yield-manager.browsiprod.com tcp
US 34.107.140.113:443 s2s.t13.io udp
US 35.186.253.211:443 rtb.openx.net udp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 vid-io.springserve.com udp
IE 52.49.61.124:443 vid-io.springserve.com tcp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 eb2.3lift.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
HR 65.9.189.37:443 cdn.browsiprod.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
SE 23.34.232.182:443 acdn.adnxs.com tcp
BE 104.90.24.23:443 contextual.media.net tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 52.95.126.138:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 serving.stat-rock.com udp
US 8.8.8.8:53 vid.springserve.com udp
US 8.8.8.8:53 148.91.81.35.in-addr.arpa udp
US 8.8.8.8:53 64.189.9.65.in-addr.arpa udp
IE 52.215.113.12:443 vid.springserve.com tcp
US 8.8.8.8:53 124.61.49.52.in-addr.arpa udp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 23.24.90.104.in-addr.arpa udp
US 8.8.8.8:53 182.232.34.23.in-addr.arpa udp
US 8.8.8.8:53 138.126.95.52.in-addr.arpa udp
US 8.8.8.8:53 ai.browsiprod.com udp
DE 144.76.28.41:443 serving.stat-rock.com tcp
DE 144.76.28.41:443 serving.stat-rock.com tcp
HR 65.9.189.75:443 ai.browsiprod.com tcp
US 8.8.8.8:53 vpaid.springserve.com udp
HR 65.9.189.88:443 vpaid.springserve.com tcp
US 34.160.152.31:443 d.pub.network udp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 as-sec.casalemedia.com udp
US 8.8.8.8:53 ads.undertone.com udp
HR 65.9.189.100:443 ads.undertone.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 34.160.152.31:443 d.pub.network udp
DE 3.78.168.176:443 tlx.3lift.com tcp
US 8.8.8.8:53 12.113.215.52.in-addr.arpa udp
US 8.8.8.8:53 41.28.76.144.in-addr.arpa udp
US 8.8.8.8:53 75.189.9.65.in-addr.arpa udp
US 8.8.8.8:53 150.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 88.189.9.65.in-addr.arpa udp
US 8.8.8.8:53 100.189.9.65.in-addr.arpa udp
US 8.8.8.8:53 176.168.78.3.in-addr.arpa udp
US 8.8.8.8:53 ads.yieldmo.com udp
IE 52.208.132.138:443 ads.yieldmo.com tcp
US 8.8.8.8:53 imasdk.googleapis.com udp
GB 142.250.200.10:443 imasdk.googleapis.com tcp
GB 142.250.200.10:443 imasdk.googleapis.com udp
US 8.8.8.8:53 s0.2mdn.net udp
GB 216.58.204.70:443 s0.2mdn.net udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 8.8.8.8:53 138.132.208.52.in-addr.arpa udp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 csi.gstatic.com udp
CO 142.250.78.99:443 csi.gstatic.com tcp
CO 142.250.78.99:443 csi.gstatic.com tcp
US 8.8.8.8:53 servedby.flashtalking.com udp
BE 104.68.68.28:443 servedby.flashtalking.com tcp
CO 142.250.78.99:443 csi.gstatic.com tcp
CO 142.250.78.99:443 csi.gstatic.com tcp
US 8.8.8.8:53 secure.flashtalking.com udp
BE 104.90.24.47:443 secure.flashtalking.com tcp
BE 104.90.24.47:443 secure.flashtalking.com tcp
BE 104.90.24.47:443 secure.flashtalking.com tcp
US 8.8.8.8:53 www.googletagservices.com udp
US 8.8.8.8:53 vid-io-cle.springserve.com udp
US 8.8.8.8:53 vid-io-iad.springserve.com udp
US 3.214.237.205:443 vid-io-iad.springserve.com tcp
US 3.214.237.205:443 vid-io-iad.springserve.com tcp
US 3.214.237.205:443 vid-io-iad.springserve.com tcp
US 3.214.237.205:443 vid-io-iad.springserve.com tcp
US 3.214.237.205:443 vid-io-iad.springserve.com tcp
US 54.185.54.232:443 vid-io-cle.springserve.com tcp
US 54.185.54.232:443 vid-io-cle.springserve.com tcp
US 54.185.54.232:443 vid-io-cle.springserve.com tcp
US 54.185.54.232:443 vid-io-cle.springserve.com tcp
US 8.8.8.8:53 99.78.250.142.in-addr.arpa udp
US 8.8.8.8:53 28.68.68.104.in-addr.arpa udp
US 8.8.8.8:53 47.24.90.104.in-addr.arpa udp
CO 142.250.78.99:443 csi.gstatic.com udp
US 8.8.8.8:53 vid-io-sin.springserve.com udp
SG 13.250.223.91:443 vid-io-sin.springserve.com tcp
SG 13.250.223.91:443 vid-io-sin.springserve.com tcp
SG 13.250.223.91:443 vid-io-sin.springserve.com tcp
SG 13.250.223.91:443 vid-io-sin.springserve.com tcp
BE 104.68.68.28:443 servedby.flashtalking.com tcp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 ade.googlesyndication.com udp
US 8.8.8.8:53 d9.flashtalking.com udp
US 8.8.8.8:53 data.ad-score.com udp
US 8.8.8.8:53 ad-events.flashtalking.com udp
SG 13.250.223.91:443 vid-io-sin.springserve.com tcp
US 8.8.8.8:53 vid-io-dub.springserve.com udp
GB 3.9.87.252:443 ad-events.flashtalking.com tcp
GB 3.9.87.252:443 ad-events.flashtalking.com tcp
IE 52.17.201.249:443 d9.flashtalking.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
GB 172.217.169.66:443 googleads4.g.doubleclick.net tcp
GB 216.58.204.66:443 ade.googlesyndication.com tcp
GB 216.58.204.66:443 ade.googlesyndication.com tcp
GB 216.58.204.66:443 ade.googlesyndication.com tcp
US 8.8.8.8:53 205.237.214.3.in-addr.arpa udp
US 8.8.8.8:53 232.54.185.54.in-addr.arpa udp
US 8.8.8.8:53 91.223.250.13.in-addr.arpa udp
US 8.8.8.8:53 66.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 249.201.17.52.in-addr.arpa udp
US 8.8.8.8:53 4.115.211.130.in-addr.arpa udp
US 35.81.91.148:443 events.browsiprod.com tcp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
GB 185.83.69.58:443 ghb2.adtelligent.com tcp
US 23.227.151.242:443 ghb2.adtelligent.com tcp
GB 185.83.69.58:443 ghb2.adtelligent.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.200.34:443 ade.googlesyndication.com udp
US 8.8.8.8:53 8.179.89.13.in-addr.arpa udp
GB 185.83.69.58:443 ghb2.adtelligent.com tcp
GB 142.250.200.34:443 ade.googlesyndication.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 216.58.204.70:443 s0.2mdn.net udp
US 216.239.32.36:443 region1.analytics.google.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
N/A 127.0.0.1:61235 tcp
US 8.8.8.8:53 config.uca.cloud.unity3d.com udp
US 34.111.113.40:443 config.uca.cloud.unity3d.com tcp
US 8.8.8.8:53 cdp.cloud.unity3d.com udp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp
US 8.8.8.8:53 40.113.111.34.in-addr.arpa udp
US 8.8.8.8:53 ghb.adtelligent.com udp
US 23.227.151.242:443 ghb.adtelligent.com tcp
GB 185.83.69.58:443 ghb.adtelligent.com tcp
N/A 127.0.0.1:61266 tcp
US 8.8.8.8:53 168.172.107.34.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
GB 142.250.180.2:443 googleads.g.doubleclick.net udp
GB 142.250.200.3:443 www.google.co.uk udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 st.pubmatic.com udp
NL 185.64.189.221:443 st.pubmatic.com tcp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.34:443 ade.googlesyndication.com udp
GB 185.83.69.58:443 ghb.adtelligent.com tcp
US 8.8.8.8:53 221.189.64.185.in-addr.arpa udp
GB 216.58.204.70:443 s0.2mdn.net udp
N/A 255.255.255.255:47584 udp
N/A 10.127.255.255:47584 udp
N/A 10.127.0.177:47584 udp
N/A 10.127.0.177:47584 tcp
US 8.8.8.8:53 perf-events.cloud.unity3d.com udp
US 35.190.78.8:443 perf-events.cloud.unity3d.com tcp
US 8.8.8.8:53 8.78.190.35.in-addr.arpa udp
US 34.111.113.40:443 config.uca.cloud.unity3d.com tcp
US 8.8.8.8:53 cdp.cloud.unity3d.com udp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp
N/A 127.0.0.1:49610 tcp
N/A 127.0.0.1:49624 tcp
N/A 10.127.0.177:47584 tcp
US 8.8.8.8:53 perf-events.cloud.unity3d.com udp
US 35.190.78.8:443 perf-events.cloud.unity3d.com tcp
US 23.227.151.242:443 ghb.adtelligent.com tcp
GB 142.250.200.34:443 ade.googlesyndication.com udp
GB 216.58.204.70:443 s0.2mdn.net udp
N/A 127.0.0.1:58286 tcp
US 34.111.113.40:443 config.uca.cloud.unity3d.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp
N/A 127.0.0.1:58300 tcp
N/A 10.127.0.177:47584 tcp
US 8.8.8.8:53 perf-events.cloud.unity3d.com udp
US 35.190.78.8:443 perf-events.cloud.unity3d.com tcp
GB 185.83.69.58:443 ghb.adtelligent.com tcp
GB 185.83.69.58:443 ghb.adtelligent.com tcp
GB 142.250.200.3:443 www.google.co.uk udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.34:443 ade.googlesyndication.com udp
GB 142.250.180.2:443 googleads.g.doubleclick.net udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 23.227.151.242:443 ghb.adtelligent.com tcp
US 34.111.113.40:443 config.uca.cloud.unity3d.com tcp
US 8.8.8.8:53 cdp.cloud.unity3d.com udp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp
N/A 127.0.0.1:64056 tcp
N/A 127.0.0.1:64070 tcp
N/A 10.127.0.177:47584 tcp
US 8.8.8.8:53 perf-events.cloud.unity3d.com udp
US 35.190.78.8:443 perf-events.cloud.unity3d.com tcp
BE 23.41.178.106:443 www.bing.com tcp
BE 23.41.178.106:443 www.bing.com tcp
US 8.8.8.8:53 106.178.41.23.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
BE 23.41.178.64:443 r.bing.com tcp
BE 23.41.178.64:443 r.bing.com tcp
BE 23.41.178.41:443 th.bing.com tcp
BE 23.41.178.41:443 th.bing.com tcp
US 8.8.8.8:53 41.178.41.23.in-addr.arpa udp
US 8.8.8.8:53 64.178.41.23.in-addr.arpa udp
US 8.8.8.8:53 www.virustotal.com udp
US 74.125.34.46:443 www.virustotal.com tcp
US 74.125.34.46:443 www.virustotal.com tcp
US 8.8.8.8:53 www.recaptcha.net udp
GB 142.250.180.3:443 www.recaptcha.net tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 46.34.125.74.in-addr.arpa udp
US 8.8.8.8:53 recaptcha.net udp
GB 142.250.200.35:443 recaptcha.net tcp
GB 142.250.200.35:443 recaptcha.net udp
US 74.125.34.46:443 www.virustotal.com tcp
US 8.8.8.8:53 35.200.250.142.in-addr.arpa udp
US 216.239.32.36:443 region1.google-analytics.com udp
GB 185.83.69.58:443 ghb.adtelligent.com tcp
GB 185.83.69.58:443 ghb.adtelligent.com tcp
US 23.227.151.242:443 ghb.adtelligent.com tcp
US 8.8.8.8:53 config.uca.cloud.unity3d.com udp
US 34.111.113.40:443 config.uca.cloud.unity3d.com tcp
US 8.8.8.8:53 cdp.cloud.unity3d.com udp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp
N/A 127.0.0.1:54661 tcp
N/A 127.0.0.1:54667 tcp
N/A 10.127.0.177:47584 tcp
US 8.8.8.8:53 perf-events.cloud.unity3d.com udp
US 35.190.78.8:443 perf-events.cloud.unity3d.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 c39b3aa574c0c938c80eb263bb450311
SHA1 f4d11275b63f4f906be7a55ec6ca050c62c18c88
SHA256 66f8d413a30451055d4b6fa40e007197a4bb93a66a28ca4112967ec417ffab6c
SHA512 eeca2e21cd4d66835beb9812e26344c8695584253af397b06f378536ca797c3906a670ed239631729c96ebb93acfb16327cf58d517e83fb8923881c5fdb6d232

\??\pipe\LOCAL\crashpad_1308_LLYLOLILDEOFZRKL

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 dabfafd78687947a9de64dd5b776d25f
SHA1 16084c74980dbad713f9d332091985808b436dea
SHA256 c7658f407cbe799282ef202e78319e489ed4e48e23f6d056b505bc0d73e34201
SHA512 dae1de5245cd9b72117c430250aa2029eb8df1b85dc414ac50152d8eba4d100bcf0320ac18446f865dc96949f8b06a5b9e7a0c84f9c1b0eada318e80f99f9d2b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c5a7220619848b9ca5e9815c0f212019
SHA1 ce5e48bc5cd23d26667d23b9ec5f5d6229e5fe59
SHA256 13025e0e778bf941db95dfefc9aa5ce1c2634a51724a44e683ea77a152aef855
SHA512 c02e291ec6fb229ff4891e7306125b56ccb46c129379ad06d0413dfc9fde0ebabb8fe6ee5fcb81abd2f020cf00c01f93f45caf1963efece6379a8a5f85be9edd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 ddd5c4e425f2af15e3c00b1335167416
SHA1 113a376fcc6e784b78bee614a483b523a26b9122
SHA256 1bc2d9ba1719304e2d465f6032f22eedcbd7aba02490d1d68ba1e9bf7aa221c4
SHA512 5257598bb2a43d91f51748ba3a36c71c2a427315d120a711a3ad000cf62564f14d8a1d6f3cabad3a13a736b8219d173d8158c64052e62a0cf3e3e2cf5e404734

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 90f657a9e0d9e0a87807c2cb2fe4ec22
SHA1 35e8086b22a4f5fd38906eaa489edbb28574f8dc
SHA256 77548acdc4692264eca33ecd4fb65b13a785879f374f96843a8f883024c277d0
SHA512 df44bcc714d3ac9dc77a7c9b240b731c7fa39daf522b1bc1ceeb1bf577e9a36d2e281219edf1a79d27ed17a7ca6c7257c7d486675277d81942d184f784bf7d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2b37e5590ee9bcf801449f5dd18190be
SHA1 52fc6863735ab40c1102b740584ee0ee45c92f18
SHA256 9fc1124ccf31c086911630ef9228db2fffe038ff71b12803911977556a3947e0
SHA512 b89944d4af5eb019cd3bb73b906a31aad5eefdf8dfc080561267f90caa1e4a822d5b02add231f8090d6b5fd9bd4b202f57119f94729a39e29bdb5969b2849a79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57a122.TMP

MD5 dbcb017f7f9cba75803cc153cf2abb5b
SHA1 687651b68ae6dc0b597a061de25a43473eee16bf
SHA256 02225f36294bfe230d0b53166518ccefd660347947ad66aa5bb27aa5b6330434
SHA512 e8d567042611fc8e99213cccd511e7f90dff18b17a4020ea4111ae10ec7cf10de87e8a708828603c8829050ed934ac4781bdc0db1d04efa3b0bd0d50e9ec0f1d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 002c743ad9370721e8ae4c36179693d2
SHA1 b0f0abdcff4cf57d4e9a4a1ceb61a364c04d6a73
SHA256 f0218fdfc317d2f0518257306eb8717ac360ecdf657dc50c964d3faf5c756548
SHA512 c7c1b45d12fa97c893045aa78d28b423c3f17925c40fb791f25d53a7f9ac51268ba9a0ce6449659992429fc1294169c37c8fed79015fd69b75f3673216354fa7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 39fa10409587c3aae761f79ceb9d18f2
SHA1 f548d211ee7b48db184fa5fff28f5299b788d88c
SHA256 3e697f301b8adc3a4beb8e9ece503da6ef472b28f8626126f0845ffb7541e883
SHA512 20c23ba17b3c57937ad2da9df188d5eae231fa954b35ee959316f02053b3e7e943df2bcd2354bcc6115af2ddfaca75bd3d753803360e0067e52ace2c2e0bed90

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e196e741305361ac6269ed3d020be7a3
SHA1 d2fa7a0fee24de85ad8dad716308b988b58daf35
SHA256 b04d7ae3755f84493b0813b4d9ef69fedce7444ad8cd768db5fe50bae8db80a7
SHA512 6596258ccfdd5d4641e588f066f20fbf608e1f3c682190088dab389438057080a1d107c8d9c68fbd68af9ec3b346765c716ee630d6b641d2f38fb86f4292b5c1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029

MD5 c52f3521639f61d058b371c90f7340a0
SHA1 26cda00aa74d363215fe8e5de80878cf767d9747
SHA256 98dadb40ba05b9079b6c7cfdcdce83a11764b15cee748e1d6b06ef13e94f1736
SHA512 ead5c9d264cb85f32a1e4e7ca84df51b2d8fcad89abe35b8a9e461cab914224e5ee9c3b0cbcaf720ffaf43566b9d9c958667024e0e6988f948640fd782ff3f23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b2c11dde4623450b41a957abe23154d7
SHA1 395e0def0986bdfff74f189c5aee33730d6ddfd0
SHA256 36904831ca05a420e69c7e839229ac658ca8d411a7046a530992a27d4f77938e
SHA512 059375f36b8edfe2ba9e8efa8ff991944c44f77d928c5bf64b15d54fb2d61bc534506ad8ed9a6baf16a0f44db39eb1c3f1a586338cf615207ef19b658b69a831

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 3e26c0edc0865d79718294f6f9b4ee05
SHA1 37115264bc8b0a959727e86bfa5036f9886497ab
SHA256 c6b654c961af20817ba6d6c24e609a75b671b0bb3de7176c3b3f1e945e686b3f
SHA512 901e6f3afd507bf2cf303e4927a517db80d3840c01fcbab56d74128e2faca1115323aa5774973b8828d0e6dbefb52975098a843b7c626234dcc10fcb21ce02aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022

MD5 42d9fcc7172456834d9e05605cfb999f
SHA1 d1df0982a953011482b7cc5e97803a5fae290ba7
SHA256 5029f1471e648ecdf5518199b5d7a6fdcf2dab7b9ba8367331b0836de3064575
SHA512 5fc471dfd6cf0516739b40db211b4f1e0d3e27e7b53eb1e0c8d34f7ddf5d09ff520bd4c3b7baca993857fd462f184621391fed363a548bc7b50eee3b7ef6ade8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

MD5 60140bc834da90837a9a4d1530484677
SHA1 d99868b0693b332681b4db7927f3f11b3ed37607
SHA256 29c0ba2fb11f5bbedff938e0d0a97da59f725cd153bc0c04f052419e779f134e
SHA512 448ddc49ab5128dfc0dc91ebe388d447e748848cd2f7dc15fe1fd0380a5436cc9872c32606d9d161d3648b20bff5eda0e48e8fb77c9293f3c0924ae89589eb37

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f2f36342a02a2e59752ff39e3bb0c1a8
SHA1 8c12e217103808aed05974c0ea891aaaaf311755
SHA256 f33ce17ad469172b1c47893f8054be234ca8b28698b31906537ef3630831c656
SHA512 e9a36c28ef3b9446cb29dd2ec3b08f494d574375dd4242ccedb6a44451ddeef64faf7d93a4f8fa9b0107fc4c06d76025924985176e3d879b36b93e34177114e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e9fbde828d6b152963a4d6e2d98ebba9
SHA1 b947a312a9826a1e5e3748e15a2d7a2273d48f0a
SHA256 423720eb4f1055947aad14e1e7f930d0215d37b9e35930f4b1a1b839cfc6967e
SHA512 62a19d47b8ad0fd89ce10fb8c2f1aad550e7661b7fb637ee31103abf1f828e4e191e52c4f854ff18c686d204c12c087ec65a091ae27bdad83b11a165eae32de7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2fbf23c7c6b04bd5e4700f77885168a8
SHA1 bde75b8fc362872175d0349f8468e14c054aeddf
SHA256 8bd7c4b104c32b82e39d033ddbfea0825a46a75d582d8e8230acccfaf81003f4
SHA512 29baf1d8ad95605f5835fddd753822fd27f4bf75e0ce0c8e981acea3cf99df28453712daaae548b5190b7af5b36eb4cf8e658a595a9eddbc8a6cacfaf40fd29f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 9b0221d446b21f9f7b383399a27fb669
SHA1 1ec9990eb4c239616cee385dfb34d480f1ac78d8
SHA256 1d92bbbddfa41482b2547c0802dd11e6dfdcb1fcd044238106bb810a06375a9a
SHA512 56ee566c41e30e487c354731b6263202670f0c2da65df18ae1f5594bca4a237334afad1bfdd07dbdb083c17e76e0e968058c3e60d113abea347e1cebd30b2418

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000070

MD5 92356d0513ca1b8d064a32ed5c03f331
SHA1 9d115a0eef9a38663c9df6c8f3fae605edb37114
SHA256 0033a94154e5b25943ce930a90d066f29c49e174e1feaf241d56c1be3514514a
SHA512 631d8da4b0df3143a2910ea82355718fb8c926600b3bdabaf19953f5209ec26df7710bb5cb64d420a40a635f93fdc90ae7c9e8b00f80bbeae4eaa9a620526013

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007a

MD5 f0c0412e4f7e8ebf6e1c8738622abdf4
SHA1 7e5433f4d55ff103426fde504031eea535b3d55d
SHA256 a67bd5961e1d3fba115d8d04644accb4df135aefe880d03d7e66c404c85b47de
SHA512 5d228fe7f147e41b874a167942c017c130cccb61fa05f80cdab0911dd5e0185b8974c93ae9877c5d0beace13fb248bfdf717b29d450b12e08e2230c806232638

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 40546386ca12c23f86be3b2a38b136b8
SHA1 32506338fa3f3819454d429b9c3cc5991971b6e3
SHA256 f49a6abda6f5d6a7b61160e28e726b20b653a819023547371af865357e8881a4
SHA512 eaf7836592e6394206fdc2a05175289c9335735a3b9f29b05663f8a4ae86f75d79be2bb64896ac18c07909a9195abfd6eb4e3c9911ad6d7535bf381aaa4e199f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 41ad03abb83fca57a393d2727fd356e6
SHA1 34f35047e4cdcec1ae682c31b8824735c53a8dbe
SHA256 f0b5f9eade2b0de8ebeec8e13f17750dee1d8159004e17709eee501f9f9624af
SHA512 61a47912b3a65fb323ba83f08943c8ce2a72c56f8168403537fdccf3b09046d6addb7384f9bd2d71ba5c3a753151ba679901b34fcab0aa5c6c591a97ea0ab52c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 a9b7db12120106c3b46f40e511bf3662
SHA1 397ea1914b208d425ea3f99a030ace2f456d3597
SHA256 70982122e3ba7f8f4b6e4dbbd87483550cf7b0d378acb6bfc7efbe2cf46490ac
SHA512 3561630e73207ce77bbb9bad97fd61b43a16d0b8af026b1be844c82ac7b2a45a82e370a287cab971880c948c7eec53cdff0d71b1b0358a67ebe901cdca29727e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d3e2f840d0ad392dfd3d852b5b3e1382
SHA1 84d82a46946919e692ddb701a8d81c7a115988d7
SHA256 8df3ddb5b8a53b07611bb557853f63df686c719b71169bb66750576f7d1ef52b
SHA512 d00c8bf07c7e7d853999d879af8d1b1634cab29c9751b534b082363f820d280a0a1901b834919b097a5217ae0d8528dd25ed71347cb1f71591f10d83819bbd9c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000091

MD5 e9f2b85be013faf1fae0e6973211a3ba
SHA1 cbaed034b85f22ed7afa9c93cb8f17e21221175b
SHA256 ac043245833da9c2bc1b00869f469a2e087228eb2e4751278b41b504779ec092
SHA512 366910f1d6dd46822b73b725dba936153a27c48646630ce4f830e556301c41d6e243e729c13566c0c4d9953089bc027d7758e7436a5a3677cd78987ae15dd373

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000092

MD5 17e08579d28ea14e46c20dde4dd989d3
SHA1 34f1da35133b80e527922018d1c60a882c033724
SHA256 45ebaaa1455ed1bedea47d3253a843b233358c391b7e48c3ed212c75894b3946
SHA512 1ec6733214d091c127633036e53150aecfe6c2853a7413f870fc98ba89d61f671e10fcd4427f072f5debd3359198ea971bbd6a7a0718794621d310aadca8a369

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 4b76b71ade5b53bed817ad22209140b9
SHA1 33aa0b2d0c16ff6f280bb23fbfdc48a51fc119a7
SHA256 d4e8c2f2c5bdc5bac9123901342086f9337ec2ae772402e279da747851b834e0
SHA512 9e5329764eb614e456a25615674139076ea3407f13b214b4f2a3a8080a19d354015a306e036e71bb6e158e31c7ca7ec88b1060736b64de8ade722b1ec9d3e327

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 7c7e1278e151911ed4697b2f473b7cf3
SHA1 d50825771a1e38404fb980d45c90f83f324ec977
SHA256 acaaa9fcee548495d6c3a624396c87a11298e1d4e3a04fd39b7ab79cc4c2e7a8
SHA512 d6151a9bf8c0453986e317f16aec715f36077b7e7f73d7c2dbac4684f417879ac095253b9b3eb9879150208fad90ee67b5d033aed2486fab045ad2c2a8a1bcc2

C:\Users\Admin\AppData\LocalLow\mkarpenko\WorldBox\Unity\1fee820e-0c37-402a-927d-d35def5ef484\Analytics\ArchivedEvents\171828548900002.8c3ab110\c

MD5 c81e728d9d4c2f636f067f89cc14862c
SHA1 da4b9237bacccdf19c0760cab7aec4a8359010b0
SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
SHA512 40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

C:\Users\Admin\AppData\LocalLow\mkarpenko\WorldBox\Unity\1fee820e-0c37-402a-927d-d35def5ef484\Analytics\ArchivedEvents\171828548900002.8c3ab110\s

MD5 e1e5b1a3190ec42492fe01beb414ce6b
SHA1 a9192e6219ce91ad3e452d2eab1218777fcedd81
SHA256 452ab7f7b37f5d7cd06baa17c9e1d9c9e6778d9d9f5ca332bb42439a147f67db
SHA512 14531e644d1b797e79d20ba1413f043189a0edaa91babe38af0ea200209ad4cc3f37aa5b9774943454c31d65a5e6d19d4e1f8732648305d1c14a18b0c029f828

C:\Users\Admin\AppData\LocalLow\mkarpenko\WorldBox\Player.log

MD5 8336684a47ed3259802510fec868453d
SHA1 b920231bfee14b716197aa75555d0bacfca4fd41
SHA256 3b250ae25f1d279f0e417a9c750e7145bf7a7c2454df6960c7b4a8d70cf11260
SHA512 181943bd5fdb8e25792891226b1105e25a126197501cef75a477ade41e51e13732cc702f56882b6156eac96977c276732fc602f8ef03b385555a2567647cbd92

C:\Users\Admin\AppData\LocalLow\Unity\CrashReports\CrashReport2024-06-13_133136197.json.meta

MD5 ba98baaafaefc8fc9349de3e5e12cf1e
SHA1 7c1cf07d5f12ed351a802e672575346e5aa4bf78
SHA256 23cbbd6cf771a31dc8f6cdb4b3802ee20649b8cdd5b125677f7f26d7b0f21f85
SHA512 b5b61dfdd67c925940c9c030514998bab04324e0597c02ea65df73e9bd7a52f4b8e7e79c20f8547d3674f62ffe779d48c21d23d529f79ea09b9ca4ab0de52e96

C:\Users\Admin\AppData\LocalLow\Unity\CrashReports\CrashReport2024-06-13_133136197.json.gz

MD5 8000dcda95f9e783c39e1174fb57cd44
SHA1 754e67d0df3f2a70dfac25d86be27f47f3e544da
SHA256 a6b848fc2b23b73304f1fa23a8931024f65f299ea91c08e3842ef94367afb1fc
SHA512 14943173b48d4f90c9db08fe5cfb4878868731e2fbe4fffe3ab38c2592ed6013fa514decba5324b949714760542909f0527e4dfc91d300bd33347fa1a1d47f56

C:\Users\Admin\AppData\LocalLow\mkarpenko\WorldBox\Player.log

MD5 57f03d412522356e3be34f1edd67cf69
SHA1 f99d7b3e499a6e7581927845ddfc5499486c3699
SHA256 6cfaaf4a6f2d4d7be0ad5d83da6af8d4287d15394f3f7217775b5e4f1331e285
SHA512 4d2f9b1bd8a81b66dbcb388b33d3c9e47d3d079378a840dae251c5c32a9319c48e963a5e501add021baea5ffec6e82fa44831839a2aff9cdf623d295a5449f16

C:\Users\Admin\AppData\LocalLow\mkarpenko\WorldBox\Unity\1fee820e-0c37-402a-927d-d35def5ef484\Analytics\config

MD5 8673a8ac0b06a9d056d08d62f857ba4b
SHA1 a351bea1932270bafbe468584058fef20dcfc31e
SHA256 83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
SHA512 edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f

C:\Users\Admin\AppData\LocalLow\mkarpenko\WorldBox\Unity\1fee820e-0c37-402a-927d-d35def5ef484\Analytics\values

MD5 8898ee35e4e0b1628839d39038384097
SHA1 e47c3aa37af4fac2ab51f5112391103410a87645
SHA256 67e3a18a1c68cc5d47e52be039156b31ec987a3aa721c408efa2607a175ab819
SHA512 a3e129b4d1ea47f165b2b049dcf3093173b683157295e7d89c9b110f9bad3fc88fa5d8be412e02fe6b6a31e641b185f6ea0d9938d4d7655b5c35aeaf52323e46

C:\Users\Admin\AppData\LocalLow\mkarpenko\WorldBox\worldboxData

MD5 5392d9ea1dd18a7d980811d02bb68cb7
SHA1 c0781cdd4146d72cf4526475ee23c00e7805a2ce
SHA256 68e09b1af8ae5727374dc9bdd2226f549e5ee9cb148b4b60db6404c89e993cd0
SHA512 2d200ad345dc19c1d46570b87f7becbb018b31022efe9ac1bd0ecb1d233129724ac34ea04195716b3a6bf8872f17d4adf4eabf728073d1df511335725417c6d1

C:\Users\Admin\AppData\Roaming\Goldberg SteamEmu Saves\settings\account_name.txt

MD5 654e1c2ac6312d8c6441282f155c8ce9
SHA1 b601eaa0f87fe94355f635b77a7608b971ea8825
SHA256 bc3a7860cd4f58f3e1e66a20e3cb2930477121c46b9e030636bc6c5cfd050071
SHA512 a3adcc6bef462dcea21dd995bec6b4466c68ee85c8059c27fba7bb33ec57ec00c6bed9528be92d1044100b749a68ee439f84c9b8a37d1dd13d7fccbe231ed31a

C:\Users\Admin\AppData\Roaming\Goldberg SteamEmu Saves\settings\listen_port.txt

MD5 76bf79e9a0a4c128d97dbd6900773f4b
SHA1 8abb38a924d5bf8a1ee12fe96aa2d2be942704d6
SHA256 45095e3e3f29ea73ffab2e23158b7cd2afa6532004b5a9b6f06d4e5e068a89aa
SHA512 8cd54c07d87c41103d963eb7dfd2642b07bb67ceb731b477fc9cd9b736ab03833dc2e2d0b2eb399002d76d405a20d5816d19d77ef760d7dac0c1a67d80662535

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 519cdd1f0fee06cf94be6957b2f7579f
SHA1 831eb620023b31fbceefb74d1ca88ed021f42def
SHA256 0935370ecece53a3a17d7477d4e8094784b42626bc715b27723e0ef6ae044e78
SHA512 55140e2276f022fb279f97241157ea99a22645da47926143bcff5e62c29e8318bf1c8d9c56bf789c1b2b99bffb547395967b912fb2fab173af8782824449108d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\13986ccd40e3a0f0_0

MD5 af393f72367a55558369d0ae0243ff01
SHA1 13c58bcd6a7af52ae2bf73b97b5ef52cc882f593
SHA256 006a3462d84e53a3cd8adff922316a09ba58cbae2cd90be5cfa9e856dd373bbb
SHA512 fc20eabbb9798564baaa8bc4254ca266b8a29900915d1b18030d081f0d868df25425ed7eec1daf185df883f557ba0322abcb1844209f5ef3e2ef3a1870dbd136

C:\Users\Admin\AppData\LocalLow\mkarpenko\WorldBox\Unity\1fee820e-0c37-402a-927d-d35def5ef484\Analytics\ArchivedEvents\171828552900000.5b75af43\c

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

C:\Users\Admin\AppData\Local\Temp\cur1058.tmp

MD5 0ad26da2c6964e62a0c4aba120b10a4c
SHA1 b7f3d4bf27ccadef4c99658a565983d7390fc27c
SHA256 84ead5361e3e86a973113b1e752071e726ec62680db50d906fbd67adbe8f4017
SHA512 7ff32768fccac1af15c40c88e4e0c766c5eae5008ba4527f3f52c8d2de55f842d53a0a07d5af893442b6838cc02797714fa4bbaa5f16e1bda49bbc0dc83c852f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a075a2d2f491765a3fea428f78e5a0ff
SHA1 e920f13cecdb9f1a888e152cf079bfd0b5f2c6da
SHA256 e81f601d261172379dd6e3f534612d4771e3711c3a4eab2b0f8e5a52675cb896
SHA512 ef92d990d1321181c38b32ebca10ff13ad1171e8e583e7a9bf4f55af6052c84572fa77a105a3cf1bb34a2e891fb91c896667687704a0ba416f361ae2fe97e9f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003a

MD5 635efe262aec3acfb8be08b7baf97a3d
SHA1 232b8fe0965aea5c65605b78c3ba286cefb2f43f
SHA256 8a4492d1d9ca694d384d89fa61cf1df2b04583c64762783313029ae405cbfa06
SHA512 d4b21b43b67697f1c391147691d8229d429082c389411167386f5c94e3a798f26c2457adf6d06caec446106e0f0aa16d895bfc4e8a1ff9e9c21a51173a923e3d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038

MD5 57a09a381255b716f97d35162e6d03cf
SHA1 2c3896bd47340403f67d2fd834ed396609806b58
SHA256 91762de21a32bf7714921e215cf564232ea09afc529b620584de7e16dadfeaf0
SHA512 b10bbbc4c552f31aa18458d0eeef6ddc656d7e9b9d99290e764e4a60c0f26f118969bfc0050cf3b710c7cf75486739499c7b9ea9fefe792a20192a67bccfba26

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000039

MD5 2923c306256864061a11e426841fc44a
SHA1 d9bb657845d502acd69a15a66f9e667ce9b68351
SHA256 5bc3f12e012e1a39ac69afba923768b758089461ccea0b8391f682d91c0ed2fa
SHA512 f2614f699ac296ee1f81e32955c97d2c13177714dbd424e7f5f7de0d8869dd799d13c64929386ac9c942325456d26c4876a09341d17d7c9af4f80695d259cfea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036

MD5 5d0e354e98734f75eee79829eb7b9039
SHA1 86ffc126d8b7473568a4bb04d49021959a892b3a
SHA256 1cf8ae1c13406a2b4fc81dae6e30f6ea6a8a72566222d2ffe9e85b7e3676b97e
SHA512 4475f576a2cdaac1ebdec9e0a94f3098e2bc84b9a2a1da004c67e73597dd61acfbb88c94d0d39a655732c77565b7cc06880c78a97307cb3aac5abf16dd14ec79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000037

MD5 a9ee0092a50e4443e7cd01cefdc6d95e
SHA1 18614eadee202eae00c3f22267d18cf648446b93
SHA256 78c268c35b00d23224cb9ad9ee70426c943d41d4635d558756ef83f985e7cc9b
SHA512 d4db3c81cd081d582017bb678ecc7edac4641c840300b802c88d433a9f79fb709176bb8c11af35d55562ac0a82b25763477e3a6b2784456a5f4b8be625d165a6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003b

MD5 77e89b1c954303a8aa65ae10e18c1b51
SHA1 e2b15a0d930dcc11f0b38c95b1e68d1ca8334d73
SHA256 069a7cc0309c5d6fc99259d5d5a8e41926996bbae11dc8631a7303a0c2d8c953
SHA512 5780d3532af970f3942eecf731a43f04b0d2bdb9c0f1a262dbd1c3980bcc82fe6d2126236ad33c48ea5434d376de2214d84a9a2ccec46a0671886fe0aa5e5597

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 eb63aad3cfbfc8e4570b89c9f2f651c7
SHA1 c4ae7ad4c021508f7721b16e82efd60826b1e96a
SHA256 dd2ae4d6b1cbf32b75433ea22afa1022f8aba05f521447bfd9b186694a022467
SHA512 df0ee255da8abac46386a70ae562d30d7e898bf7070e9082ded20546cac552ef951b77b5fb8b12f907828c65409f6450258791eaa1e0739c89810cfc3ad07db4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 28f5a3be7543686eaf5bc70e521ffab0
SHA1 388506b0aeaa1ab88bff7c010a35e0c210199094
SHA256 c9977aadcdc85b95311cf59037441e56d7fb0758f39c0cce14cda7019570d353
SHA512 b52046d0c7a913498229c379b2f842e23c767084b4d45b541d65664dde0f59e5975738707222ecb80fcfdfa2283604432057a8229ef2f06a6f48ce22254c1b5d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a4

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000aa

MD5 99916ce0720ed460e59d3fbd24d55be2
SHA1 d6bb9106eb65e3b84bfe03d872c931fb27f5a3db
SHA256 07118bf4bbc3ba87d75cbc11ddf427219a14d518436d7f3886d75301f897edaf
SHA512 8d3d52e57806d1850b57bffee12c1a8d9e1a1edcf871b2395df5c889991a183a8d652a0636d5452068f5ef78d37e08ce10b2b2f4e05c3e3c0f2f2230310418a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 017ca67585dd136c69e3f21eff8f87f0
SHA1 8428b5c27f9f58ea0981d2c8f829cf01d1e114f5
SHA256 38bbdcc45ed02175337f537aa500c0aba2aa2b8018a643c9f14eab3cd7a855e8
SHA512 916df21aef067f9b00f9435b3e3accc41bd2eb6465bb2d39a00c2ecd17aa30f15f0f7783f4dddb8cea86bc12fbf5ad8f7d3927a9d7b7c06f30a9721f96deba04

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ed17b99884ad7e7b20b70d0170d34c52
SHA1 bc9ae0258e7637181165c9f1861be7cbd4b21886
SHA256 4dcb84327213f352980965f82ec21797510cd3e1041b39dbcfbcfeaf63b18ef7
SHA512 f89904cba54b5a7a936c8737dd0bfd89a767c128365a0c1bb6532da49397a76a09fd97fc278993512da8ddd6cfd472032393e6255b11903a3bd999d2a519e3ae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 2ef775dbbffa0fb96ffae064a63e5142
SHA1 53ab739da39920eb1fd09a63afadd0212333132c
SHA256 eb937bcc5125556067fdb99f93834d3e1d8736bf906bd639caf9b96e14367a4b
SHA512 9eaa4caa1e1b2bf8b5c3342e0782adc78277f96ee81ee3f832dd903be3824245e69a3174133828d33880975b75922927bfd72525ab2b46fae08bf0e9be7a5f93

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5c08e1.TMP

MD5 27fee743ad012b5ec09206bbdf3ecaf3
SHA1 4d0fec4750de4603481cace5c362ccd7a3e6fdaf
SHA256 c0e17cac64c152da664e39c60e02144bf7343a320a30a658470febb7ad544dde
SHA512 ae412bd1f1a1c7e88ac4283591d1e74af2c91584a04d671d158ea6a4ad02831361ef3c53e9fec2bb8d15f9e4ebbdf447b442207cbaa969a7102c63cce56c22b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 6d3e2ec1273c8db24254ecd390b8cc94
SHA1 a94c1c768c823a83aa0fb8ac0143254b2f8f9ecf
SHA256 1df23c624770bf096b03423d8019383fd5387a14de5f19c378263aa0a61a922a
SHA512 1daa60ac82dc4db185eda8eb8f7e9d1ce8b32ef6966657ca97b12b89dbe8e84dadc4a9b1b4f80072c64647315a8069efd695ea0f7c42d01e41d0d14ec85e21fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 f56ea33f618dfc0f4f3ff627dd4f98f0
SHA1 0c1f42877144804a3d5ab2273598974ae2849ee7
SHA256 814efc6ca0aa57efe69587a5751987585f5a17cf27d3d128fccc44afffc34af2
SHA512 106266139a19515874a2c252e773bffd460ecf069d78505bb6c4262eda3fc1f9554b516e266087b682442d4bb51a447a0f23db2a100dc5ebdba56d03f78347c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f6c720b9ed8580361b82efe1037042d8
SHA1 4e491d0ea59c6f600d1cbc50453a5af9a43564f4
SHA256 e976bc6eb2c23de06da029d5c4f103804a1f7ab5ebe0da15075562d86e5973f1
SHA512 a43f7500444440c5b930e7893b4595fa5c6bed0a737747fa201c8c406541d35467c4bd5972b23a39fa6e2bb44a93790f13e54cb2e8485568b4c6c5fdea5c4963

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 b354f6d9dcc3f628aa5ed2f346883903
SHA1 17e3560a0b37e2b92a90f270e55d74715979cd8a
SHA256 e8e2923909a9ff0892bc1a6fe1af4ec89ab094334a256d28860fd979ae3b06cf
SHA512 53d7c88986c69acec34786dc45c4e47732ef9b7592155f88ec1ae711707dc0ed171050e6635ea3714a71158c783123bab1aea44424d0462766b2db3819285ef8