Malware Analysis Report

2024-10-16 06:50

Sample ID 240616-lm1tjsscqp
Target SolaraBootstrapper.exe
SHA256 a7fecfc225dfdd4e14dcd4d1b4ba1b9f8e4d1984f1cdd8cda3a9987e5d53c239
Tags
evasion themida trojan
score
9/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
9/10

SHA256

a7fecfc225dfdd4e14dcd4d1b4ba1b9f8e4d1984f1cdd8cda3a9987e5d53c239

Threat Level: Likely malicious

The file SolaraBootstrapper.exe was found to be: Likely malicious.

Malicious Activity Summary

evasion themida trojan

Identifies VirtualBox via ACPI registry values (likely anti-VM)

Checks BIOS information in registry

Themida packer

Loads dropped DLL

Checks computer location settings

Executes dropped EXE

Legitimate hosting services abused for malware hosting/C2

Checks whether UAC is enabled

Looks up external IP address via web service

Suspicious use of NtSetInformationThreadHideFromDebugger

Unsigned PE

Enumerates physical storage devices

Enumerates system info in registry

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: EnumeratesProcesses

Modifies data under HKEY_USERS

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-16 09:39

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-16 09:39

Reported

2024-06-16 09:42

Platform

win7-20240611-en

Max time kernel

117s

Max time network

19s

Command Line

"C:\Users\Admin\AppData\Local\Temp\SolaraBootstrapper.exe"

Signatures

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\SolaraBootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\SolaraBootstrapper.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\SolaraBootstrapper.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\SolaraBootstrapper.exe

"C:\Users\Admin\AppData\Local\Temp\SolaraBootstrapper.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.111.133:443 raw.githubusercontent.com tcp
GB 20.26.156.215:443 github.com tcp

Files

memory/2224-0-0x00000000742BE000-0x00000000742BF000-memory.dmp

memory/2224-1-0x0000000000B70000-0x0000000000B7A000-memory.dmp

memory/2224-2-0x00000000742B0000-0x000000007499E000-memory.dmp

memory/2224-3-0x00000000742B0000-0x000000007499E000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-16 09:39

Reported

2024-06-16 09:42

Platform

win10v2004-20240611-en

Max time kernel

104s

Max time network

110s

Command Line

"C:\Users\Admin\AppData\Local\Temp\SolaraBootstrapper.exe"

Signatures

Identifies VirtualBox via ACPI registry values (likely anti-VM)

evasion
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe N/A

Checks BIOS information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-2080292272-204036150-2159171770-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\SolaraBootstrapper.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe N/A

Themida packer

themida
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A whatismyipaddress.com N/A N/A
N/A whatismyipaddress.com N/A N/A
N/A whatismyipaddress.com N/A N/A

Suspicious use of NtSetInformationThreadHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe N/A

Enumerates physical storage devices

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133630044301583484" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\SolaraBootstrapper.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2376 wrote to memory of 4436 N/A C:\Users\Admin\AppData\Local\Temp\SolaraBootstrapper.exe C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe
PID 2376 wrote to memory of 4436 N/A C:\Users\Admin\AppData\Local\Temp\SolaraBootstrapper.exe C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe
PID 2884 wrote to memory of 556 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 556 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 4860 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3060 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3060 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2884 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Users\Admin\AppData\Local\Temp\SolaraBootstrapper.exe

"C:\Users\Admin\AppData\Local\Temp\SolaraBootstrapper.exe"

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe

"C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xe0,0x108,0x7ff97efbab58,0x7ff97efbab68,0x7ff97efbab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1716 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1996 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2256 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2896 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2904 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3604 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4340 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4652 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4720 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4852 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5040 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4852 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=4476 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5032 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3364 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3256 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5264 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=4924 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=2920 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=3172 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=3184 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=3340 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=5508 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=5688 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=5724 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=5828 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=6164 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=6336 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=6508 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=6656 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6992 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=6980 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=7012 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=7124 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=7192 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=7240 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=7244 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=7152 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=7412 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7572 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=6104 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=6972 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x45c 0x50c

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=6096 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=7964 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=7096 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=7072 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=4700 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1616 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8388 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=4876 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=5064 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=7628 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=6392 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=6300 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=5764 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=3336 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=7468 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=7388 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=8056 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=4388 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --mojo-platform-channel-handle=1684 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=7300 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=8128 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --mojo-platform-channel-handle=8668 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --mojo-platform-channel-handle=8776 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=3620 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --mojo-platform-channel-handle=4204 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --mojo-platform-channel-handle=2916 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --mojo-platform-channel-handle=9140 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --mojo-platform-channel-handle=6732 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --mojo-platform-channel-handle=6724 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --mojo-platform-channel-handle=5032 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --mojo-platform-channel-handle=6588 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --mojo-platform-channel-handle=7828 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --mojo-platform-channel-handle=7836 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --mojo-platform-channel-handle=7028 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --mojo-platform-channel-handle=8380 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --mojo-platform-channel-handle=3264 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --mojo-platform-channel-handle=5220 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --mojo-platform-channel-handle=9340 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --mojo-platform-channel-handle=9488 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --mojo-platform-channel-handle=9528 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --mojo-platform-channel-handle=9804 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --mojo-platform-channel-handle=9960 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --mojo-platform-channel-handle=10104 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --mojo-platform-channel-handle=9768 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --mojo-platform-channel-handle=10348 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --mojo-platform-channel-handle=10356 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --mojo-platform-channel-handle=10620 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --mojo-platform-channel-handle=9008 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --mojo-platform-channel-handle=10896 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --mojo-platform-channel-handle=5980 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --mojo-platform-channel-handle=11160 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --mojo-platform-channel-handle=11180 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --mojo-platform-channel-handle=10656 --field-trial-handle=1924,i,14762123181494116444,17650150802839124276,131072 /prefetch:1

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Network

Country Destination Domain Proto
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 g.bing.com udp
US 13.107.21.237:443 g.bing.com tcp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.109.133:443 raw.githubusercontent.com tcp
NL 23.62.61.194:443 www.bing.com tcp
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 22.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 133.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 203.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 194.61.62.23.in-addr.arpa udp
US 185.199.109.133:443 raw.githubusercontent.com tcp
US 185.199.109.133:443 raw.githubusercontent.com tcp
N/A 127.0.0.1:54541 tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 234.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.206:443 clients2.google.com udp
N/A 224.0.0.251:5353 udp
GB 142.250.187.206:443 clients2.google.com tcp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 pornhub.com udp
US 66.254.114.41:443 pornhub.com tcp
US 66.254.114.41:443 pornhub.com tcp
US 8.8.8.8:53 157.123.68.40.in-addr.arpa udp
US 8.8.8.8:53 www.pornhub.com udp
US 8.8.8.8:53 static.trafficjunky.com udp
US 8.8.8.8:53 ei.phncdn.com udp
GB 64.210.156.20:443 ei.phncdn.com tcp
GB 64.210.156.20:443 ei.phncdn.com tcp
GB 64.210.156.22:443 ei.phncdn.com tcp
GB 64.210.156.22:443 ei.phncdn.com tcp
GB 64.210.156.22:443 ei.phncdn.com tcp
GB 64.210.156.22:443 ei.phncdn.com tcp
GB 64.210.156.22:443 ei.phncdn.com tcp
GB 64.210.156.22:443 ei.phncdn.com tcp
US 8.8.8.8:53 media.trafficjunky.net udp
US 8.8.8.8:53 prvc.io udp
US 8.8.8.8:53 cdn1-smallimg.phncdn.com udp
GB 64.210.156.18:443 media.trafficjunky.net tcp
US 66.254.114.156:443 cdn1-smallimg.phncdn.com tcp
US 104.21.56.52:443 prvc.io tcp
GB 64.210.156.22:443 media.trafficjunky.net tcp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 41.114.254.66.in-addr.arpa udp
US 8.8.8.8:53 20.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 22.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 18.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 156.114.254.66.in-addr.arpa udp
US 8.8.8.8:53 52.56.21.104.in-addr.arpa udp
US 8.8.8.8:53 25.14.97.104.in-addr.arpa udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 ss.phncdn.com udp
US 8.8.8.8:53 a.adtng.com udp
US 8.8.8.8:53 eg-cdn.trafficjunky.net udp
US 66.254.114.171:443 a.adtng.com tcp
PL 93.184.223.43:443 eg-cdn.trafficjunky.net tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 172.217.169.10:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 hw-cdn2.adtng.com udp
GB 64.210.156.0:443 hw-cdn2.adtng.com tcp
GB 64.210.156.0:443 hw-cdn2.adtng.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 171.114.254.66.in-addr.arpa udp
US 8.8.8.8:53 10.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 43.223.184.93.in-addr.arpa udp
US 8.8.8.8:53 0.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 storage.googleapis.com udp
GB 172.217.169.91:443 storage.googleapis.com tcp
US 8.8.8.8:53 91.169.217.172.in-addr.arpa udp
US 216.239.32.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
BE 108.177.15.154:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 ew.phncdn.com udp
US 8.8.8.8:53 154.15.177.108.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.187.238:443 consent.google.com tcp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.whatismyip.com udp
US 104.27.207.92:443 www.whatismyip.com tcp
US 104.27.207.92:443 www.whatismyip.com tcp
US 8.8.8.8:53 92.207.27.104.in-addr.arpa udp
US 8.8.8.8:53 api.whatismyip.com udp
US 8.8.8.8:53 apiv6.whatismyip.com udp
US 8.8.8.8:53 global.proper.io udp
US 104.27.207.92:443 www.whatismyip.com udp
US 34.117.39.86:443 api.whatismyip.com tcp
GB 99.86.114.98:443 global.proper.io tcp
US 8.8.8.8:53 live.primis.tech udp
US 8.8.8.8:53 cf.whatismyip.com udp
GB 99.84.9.107:443 live.primis.tech tcp
US 104.27.207.92:443 cf.whatismyip.com tcp
US 8.8.8.8:53 unpkg.com udp
US 8.8.8.8:53 www.clarity.ms udp
US 13.107.246.64:443 www.clarity.ms tcp
US 104.17.245.203:443 unpkg.com tcp
US 8.8.8.8:53 86.39.117.34.in-addr.arpa udp
US 8.8.8.8:53 98.114.86.99.in-addr.arpa udp
US 8.8.8.8:53 107.9.84.99.in-addr.arpa udp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 203.245.17.104.in-addr.arpa udp
BE 108.177.15.154:443 stats.g.doubleclick.net udp
GB 99.84.9.107:443 live.primis.tech udp
GB 99.86.114.98:443 global.proper.io tcp
US 8.8.8.8:53 c.clarity.ms udp
IE 68.219.88.97:443 c.clarity.ms tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 abcheck.proper.io udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
GB 18.244.114.90:443 abcheck.proper.io tcp
GB 18.244.114.90:443 abcheck.proper.io tcp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 13.107.21.237:443 c.bing.com tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 8.8.8.8:53 video.primis.tech udp
GB 142.250.200.2:443 pubads.g.doubleclick.net tcp
GB 18.165.201.11:443 video.primis.tech tcp
US 8.8.8.8:53 x.clarity.ms udp
US 20.114.190.119:443 x.clarity.ms tcp
US 8.8.8.8:53 secure.quantserve.com udp
US 8.8.8.8:53 static.vidazoo.com udp
US 8.8.8.8:53 bids.proper.io udp
GB 142.250.200.2:443 pubads.g.doubleclick.net udp
DE 91.228.74.166:443 secure.quantserve.com tcp
US 104.18.33.178:443 static.vidazoo.com tcp
US 44.241.218.102:443 bids.proper.io tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 rtb.primis.tech udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
DE 52.29.6.178:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
FR 185.86.138.32:443 prg.smartadserver.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 rules.quantcount.com udp
US 8.8.8.8:53 97.88.219.68.in-addr.arpa udp
US 8.8.8.8:53 90.114.244.18.in-addr.arpa udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 9.223.224.13.in-addr.arpa udp
GB 18.245.187.38:443 rules.quantcount.com tcp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 11.201.165.18.in-addr.arpa udp
US 8.8.8.8:53 119.190.114.20.in-addr.arpa udp
US 8.8.8.8:53 166.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 178.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 32.138.86.185.in-addr.arpa udp
US 8.8.8.8:53 178.6.29.52.in-addr.arpa udp
US 8.8.8.8:53 150.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 102.218.241.44.in-addr.arpa udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 pixel.quantserve.com udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 172.217.16.225:443 lh3.googleusercontent.com udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 38.187.245.18.in-addr.arpa udp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
IE 54.72.245.162:443 id.crwdcntrl.net tcp
US 8.8.8.8:53 ad.turn.com udp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
US 8.8.8.8:53 pxl.iqm.com udp
US 8.8.8.8:53 secure.adnxs.com udp
US 34.120.133.55:443 api.rlcdn.com tcp
US 8.8.8.8:53 dsp.adfarm1.adition.com udp
GB 2.21.189.68:443 eus.rubiconproject.com tcp
GB 2.21.188.239:443 ads.pubmatic.com tcp
DE 85.114.159.93:443 dsp.adfarm1.adition.com tcp
DE 37.252.171.21:443 secure.adnxs.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
NL 89.149.192.201:443 rtb-csync.smartadserver.com tcp
US 34.193.171.116:443 pxl.iqm.com tcp
NL 89.149.192.201:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
GB 142.250.187.226:443 cm.g.doubleclick.net tcp
NL 89.149.192.201:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 image6.pubmatic.com udp
US 8.8.8.8:53 token.rubiconproject.com udp
GB 185.64.190.78:443 image6.pubmatic.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
GB 142.250.187.226:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 162.245.72.54.in-addr.arpa udp
US 8.8.8.8:53 55.133.120.34.in-addr.arpa udp
US 8.8.8.8:53 68.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 11.164.228.46.in-addr.arpa udp
US 8.8.8.8:53 201.192.149.89.in-addr.arpa udp
US 8.8.8.8:53 239.188.21.2.in-addr.arpa udp
US 8.8.8.8:53 21.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 93.159.114.85.in-addr.arpa udp
US 8.8.8.8:53 116.171.193.34.in-addr.arpa udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 78.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 ce.lijit.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 player.propervideo.io udp
IE 52.19.220.51:443 ce.lijit.com tcp
DE 3.71.149.231:443 ups.analytics.yahoo.com tcp
GB 13.224.132.77:443 player.propervideo.io tcp
US 104.18.33.178:443 static.vidazoo.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 aps.zqtk.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
GB 108.156.39.15:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 ssc.33across.com udp
US 104.22.53.86:443 cdn.id5-sync.com tcp
GB 18.245.143.118:443 tags.crwdcntrl.net tcp
US 172.67.36.110:443 cdn.hadronid.net tcp
GB 23.49.161.153:443 secure.cdn.fastclick.net tcp
FR 172.234.63.227:443 aps.zqtk.net tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 g2.gumgum.com udp
US 8.8.8.8:53 reachms.bfmio.com udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 172.64.151.101:443 htlb.casalemedia.com tcp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
US 8.8.8.8:53 prebid.cootlogix.com udp
US 8.8.8.8:53 targeting.unrulymedia.com udp
US 34.149.20.76:443 ssc.33across.com tcp
US 8.8.8.8:53 rtb.openx.net udp
US 34.149.20.76:443 ssc.33across.com tcp
US 34.149.20.76:443 ssc.33across.com tcp
US 34.149.20.76:443 ssc.33across.com tcp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
IE 34.251.51.232:443 g2.gumgum.com tcp
IE 34.251.51.232:443 g2.gumgum.com tcp
IE 34.251.51.232:443 g2.gumgum.com tcp
IE 34.251.51.232:443 g2.gumgum.com tcp
US 159.203.149.139:443 prebid.cootlogix.com tcp
US 159.203.149.139:443 prebid.cootlogix.com tcp
US 159.203.149.139:443 prebid.cootlogix.com tcp
US 3.217.255.253:443 reachms.bfmio.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 35.227.252.103:443 rtb.openx.net tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 34.120.63.153:443 prebid.media.net tcp
IE 52.212.243.55:443 ap.lijit.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
GB 108.138.217.110:443 hb.yellowblue.io tcp
US 8.8.8.8:53 usync.proper.io udp
US 8.8.8.8:53 wserver.vidazoo.com udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 54.191.164.137:443 usync.proper.io tcp
US 207.148.31.85:443 wserver.vidazoo.com tcp
US 54.191.164.137:443 usync.proper.io tcp
US 104.22.5.69:443 id.hadron.ad.gt tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 67.220.228.202:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 bis1.vidazoo.com udp
US 165.227.202.190:443 bis1.vidazoo.com tcp
US 8.8.8.8:53 a.ad.gt udp
US 8.8.8.8:53 231.149.71.3.in-addr.arpa udp
US 8.8.8.8:53 77.132.224.13.in-addr.arpa udp
US 8.8.8.8:53 51.220.19.52.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 15.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 118.143.245.18.in-addr.arpa udp
US 8.8.8.8:53 110.36.67.172.in-addr.arpa udp
US 8.8.8.8:53 86.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 153.161.49.23.in-addr.arpa udp
US 8.8.8.8:53 227.63.234.172.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 76.20.149.34.in-addr.arpa udp
US 8.8.8.8:53 232.154.172.18.in-addr.arpa udp
US 8.8.8.8:53 82.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 232.51.251.34.in-addr.arpa udp
US 8.8.8.8:53 103.252.227.35.in-addr.arpa udp
US 8.8.8.8:53 139.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 115.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 110.217.138.108.in-addr.arpa udp
US 8.8.8.8:53 248.64.124.3.in-addr.arpa udp
US 8.8.8.8:53 55.243.212.52.in-addr.arpa udp
US 8.8.8.8:53 64.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 139.149.203.159.in-addr.arpa udp
US 8.8.8.8:53 253.255.217.3.in-addr.arpa udp
US 8.8.8.8:53 69.5.22.104.in-addr.arpa udp
US 8.8.8.8:53 85.31.148.207.in-addr.arpa udp
US 8.8.8.8:53 137.164.191.54.in-addr.arpa udp
US 8.8.8.8:53 202.228.220.67.in-addr.arpa udp
US 104.22.5.69:443 a.ad.gt tcp
US 8.8.8.8:53 csi.gstatic.com udp
US 142.250.189.163:443 csi.gstatic.com tcp
US 8.8.8.8:53 eb.proper.io udp
GB 108.156.46.47:443 eb.proper.io tcp
US 8.8.8.8:53 cs.media.net udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 s.ad.smaato.net udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 rtb.gumgum.com udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
GB 2.21.188.27:443 contextual.media.net tcp
DE 51.89.9.252:443 onetag-sys.com tcp
IE 52.17.93.114:443 match.prod.bidr.io tcp
US 50.31.142.159:443 b1sync.zemanta.com tcp
GB 108.156.39.117:443 s.ad.smaato.net tcp
US 8.8.8.8:53 u.openx.net udp
US 104.18.36.155:443 ssum-sec.casalemedia.com udp
US 34.98.64.218:443 u.openx.net tcp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
GB 2.21.188.27:443 contextual.media.net tcp
FR 51.178.195.212:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 3874cf413f847c9ff4cbd1999a18092f.safeframe.googlesyndication.com udp
US 34.98.64.218:443 u.openx.net udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 match.sharethrough.com udp
GB 172.217.169.65:443 3874cf413f847c9ff4cbd1999a18092f.safeframe.googlesyndication.com tcp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
DE 3.77.214.116:443 match.sharethrough.com tcp
US 8.8.8.8:53 sync-amz.ads.yieldmo.com udp
IE 52.30.110.0:443 sync-amz.ads.yieldmo.com tcp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 sid.storygize.net udp
US 8.8.8.8:53 dis.criteo.com udp
US 15.197.193.217:443 match.adsrvr.org tcp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 143.244.208.184:443 sid.storygize.net tcp
US 8.8.8.8:53 bh.contextweb.com udp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 198.47.127.18:443 image8.pubmatic.com tcp
US 8.8.8.8:53 ads.yieldmo.com udp
US 8.8.8.8:53 data.adsrvr.org udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.8.8.8:53 um.simpli.fi udp
NL 208.93.169.131:443 bh.contextweb.com tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
US 8.8.8.8:53 190.202.227.165.in-addr.arpa udp
US 8.8.8.8:53 47.46.156.108.in-addr.arpa udp
US 8.8.8.8:53 163.189.250.142.in-addr.arpa udp
US 8.8.8.8:53 114.93.17.52.in-addr.arpa udp
US 8.8.8.8:53 252.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 117.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 159.142.31.50.in-addr.arpa udp
US 8.8.8.8:53 155.36.18.104.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 27.188.21.2.in-addr.arpa udp
US 8.8.8.8:53 212.195.178.51.in-addr.arpa udp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 8.8.8.8:53 65.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 65.98.95.141.in-addr.arpa udp
US 8.8.8.8:53 116.214.77.3.in-addr.arpa udp
US 8.8.8.8:53 0.110.30.52.in-addr.arpa udp
US 8.8.8.8:53 217.193.197.15.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
IE 34.247.111.35:443 ads.yieldmo.com tcp
IE 34.247.111.35:443 ads.yieldmo.com tcp
NL 35.204.74.118:443 um.simpli.fi tcp
US 143.244.208.184:443 sid.storygize.net tcp
IE 34.247.111.35:443 ads.yieldmo.com tcp
IE 34.247.111.35:443 ads.yieldmo.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 fw.adsafeprotected.com udp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 8.8.8.8:53 c.gumgum.com udp
GB 142.250.187.194:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 sync.crwdcntrl.net udp
US 8.8.8.8:53 image2.pubmatic.com udp
IE 52.48.163.181:443 fw.adsafeprotected.com tcp
GB 13.224.222.8:443 c.gumgum.com tcp
NL 198.47.127.205:443 image2.pubmatic.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 dsum-sec.casalemedia.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 76.223.111.18:443 eb2.3lift.com tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
IE 67.220.228.202:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 cm.ctnsnet.com udp
US 8.8.8.8:53 s.company-target.com udp
US 8.8.8.8:53 c1.adform.net udp
US 209.54.182.161:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 image4.pubmatic.com udp
US 35.186.193.173:443 cm.ctnsnet.com tcp
US 34.96.71.22:443 s.company-target.com tcp
DK 37.157.2.229:443 c1.adform.net tcp
IE 67.220.228.202:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 static.adsafeprotected.com udp
US 8.8.8.8:53 dt.adsafeprotected.com udp
NL 198.47.127.20:443 image4.pubmatic.com tcp
GB 18.245.253.100:443 static.adsafeprotected.com tcp
US 52.206.98.168:443 dt.adsafeprotected.com tcp
US 52.206.98.168:443 dt.adsafeprotected.com tcp
US 52.206.98.168:443 dt.adsafeprotected.com tcp
US 8.8.8.8:53 bid.g.doubleclick.net udp
US 8.8.8.8:53 js.gumgum.com udp
US 52.206.98.168:443 dt.adsafeprotected.com tcp
BE 142.251.5.157:443 bid.g.doubleclick.net tcp
GB 18.165.242.66:443 js.gumgum.com tcp
US 8.8.8.8:53 sonata-notifications.taptapnetworks.com udp
US 8.8.8.8:53 sync-pm.ads.yieldmo.com udp
DE 18.185.175.185:443 sonata-notifications.taptapnetworks.com tcp
US 8.8.8.8:53 eu-u.openx.net udp
US 8.8.8.8:53 18.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 ads.everesttech.net udp
US 8.8.8.8:53 aba.gumgum.com udp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 gumgum.com udp
US 8.8.8.8:53 184.208.244.143.in-addr.arpa udp
US 8.8.8.8:53 35.111.247.34.in-addr.arpa udp
US 8.8.8.8:53 118.74.204.35.in-addr.arpa udp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 8.222.224.13.in-addr.arpa udp
US 8.8.8.8:53 181.163.48.52.in-addr.arpa udp
US 8.8.8.8:53 205.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 173.193.186.35.in-addr.arpa udp
US 8.8.8.8:53 22.71.96.34.in-addr.arpa udp
US 8.8.8.8:53 229.2.157.37.in-addr.arpa udp
US 8.8.8.8:53 20.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 100.253.245.18.in-addr.arpa udp
US 8.8.8.8:53 168.98.206.52.in-addr.arpa udp
US 8.8.8.8:53 157.5.251.142.in-addr.arpa udp
US 8.8.8.8:53 66.242.165.18.in-addr.arpa udp
US 8.8.8.8:53 185.175.185.18.in-addr.arpa udp
US 34.231.54.205:443 ads.everesttech.net tcp
GB 13.224.132.120:443 aba.gumgum.com tcp
GB 18.154.84.60:443 gumgum.com tcp
US 8.8.8.8:53 ie-g2.gumgum.com udp
US 8.8.8.8:53 www.googletagservices.com udp
US 8.8.8.8:53 s.update.wo.gumgum.com udp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 z.moatads.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
US 8.8.8.8:53 sync.ipredictive.com udp
US 8.8.8.8:53 match.deepintent.com udp
GB 142.250.178.2:443 www.googletagservices.com tcp
US 50.31.142.159:443 b1sync.zemanta.com tcp
IE 3.253.249.181:443 s.update.wo.gumgum.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
GB 2.21.189.220:443 z.moatads.com tcp
IE 52.51.16.113:443 pr-bh.ybp.yahoo.com tcp
US 54.159.1.74:443 sync.srv.stackadapt.com tcp
US 54.160.38.67:443 sync.ipredictive.com tcp
US 169.197.150.7:443 match.deepintent.com tcp
US 8.8.8.8:53 usersync.gumgum.com udp
IE 52.210.15.1:443 usersync.gumgum.com tcp
US 8.8.8.8:53 ad.yieldlab.net udp
US 8.8.8.8:53 tg.socdm.com udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
GB 2.21.188.116:443 ad.yieldlab.net tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
US 8.8.8.8:53 pool.admedo.com udp
JP 124.146.153.165:443 tg.socdm.com tcp
US 8.8.8.8:53 cm.adform.net udp
NL 185.184.8.90:443 creativecdn.com tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
BE 104.68.78.171:443 secure-assets.rubiconproject.com tcp
GB 142.250.178.2:443 www.googletagservices.com udp
IE 3.253.249.181:443 s.update.wo.gumgum.com tcp
US 8.8.8.8:53 cadmus2.script.ac udp
IE 52.210.15.1:443 usersync.gumgum.com tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
DK 37.157.6.237:443 cm.adform.net tcp
US 104.18.23.145:443 cadmus2.script.ac tcp
BE 35.210.53.219:443 pool.admedo.com tcp
JP 124.146.153.165:443 tg.socdm.com tcp
US 8.8.8.8:53 dco-assets.everestads.net udp
GB 23.49.166.28:443 dco-assets.everestads.net tcp
US 8.8.8.8:53 px.moatads.com udp
US 8.8.8.8:53 cdn.doubleverify.com udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 120.132.224.13.in-addr.arpa udp
US 8.8.8.8:53 60.84.154.18.in-addr.arpa udp
US 8.8.8.8:53 205.54.231.34.in-addr.arpa udp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 181.249.253.3.in-addr.arpa udp
US 8.8.8.8:53 220.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 74.1.159.54.in-addr.arpa udp
US 8.8.8.8:53 67.38.160.54.in-addr.arpa udp
US 8.8.8.8:53 7.150.197.169.in-addr.arpa udp
US 8.8.8.8:53 116.188.21.2.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 171.78.68.104.in-addr.arpa udp
US 8.8.8.8:53 237.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 145.23.18.104.in-addr.arpa udp
US 8.8.8.8:53 6.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 219.53.210.35.in-addr.arpa udp
US 8.8.8.8:53 165.153.146.124.in-addr.arpa udp
US 8.8.8.8:53 28.166.49.23.in-addr.arpa udp
IE 3.253.249.181:443 s.update.wo.gumgum.com tcp
US 8.8.8.8:53 pixel.rubiconproject.com udp
GB 216.58.204.70:443 s0.2mdn.net tcp
BE 23.14.90.89:443 cdn.doubleverify.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
GB 216.58.204.70:443 s0.2mdn.net udp
US 8.8.8.8:53 rtb0.doubleverify.com udp
BE 35.210.53.219:443 pool.admedo.com udp
US 130.211.44.5:443 rtb0.doubleverify.com tcp
GB 18.165.201.11:443 video.primis.tech udp
US 8.8.8.8:53 dsum.casalemedia.com udp
US 8.8.8.8:53 cdn.pathtosuccess.global udp
GB 18.245.218.9:443 cdn.pathtosuccess.global tcp
US 8.8.8.8:53 70.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 89.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 9.218.245.18.in-addr.arpa udp
US 8.8.8.8:53 5.44.211.130.in-addr.arpa udp
GB 172.217.169.10:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 propermedia-d.openx.net udp
US 151.101.129.108:443 acdn.adnxs.com tcp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 ib.adnxs-simple.com udp
US 44.219.8.233:443 cs-server-s2s.yellowblue.io tcp
NL 185.89.210.212:443 ib.adnxs-simple.com tcp
US 54.159.1.74:443 sync.srv.stackadapt.com tcp
US 54.159.1.74:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 csync.loopme.me udp
US 8.8.8.8:53 mb9eo.publishers.tremorhub.com udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 sync.kueezrtb.com udp
US 107.23.54.218:443 mb9eo.publishers.tremorhub.com tcp
US 80.77.87.162:443 cs.admanmedia.com tcp
NL 35.214.251.144:443 csync.loopme.me tcp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 165.227.196.92:443 sync.kueezrtb.com tcp
US 8.8.8.8:53 108.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 233.8.219.44.in-addr.arpa udp
US 8.8.8.8:53 212.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 115.158.57.154.in-addr.arpa udp
US 8.8.8.8:53 144.251.214.35.in-addr.arpa udp
US 8.8.8.8:53 162.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
GB 23.49.166.28:443 dco-assets.everestads.net tcp
US 8.8.8.8:53 218.54.23.107.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 sync.targeting.unrulymedia.com udp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
GB 23.49.166.28:443 dco-assets.everestads.net tcp
US 8.8.8.8:53 de.tynt.com udp
US 67.202.105.31:443 de.tynt.com tcp
US 67.202.105.31:443 de.tynt.com tcp
US 8.8.8.8:53 analyticspixel.microsoft.com udp
US 204.79.197.204:443 analyticspixel.microsoft.com tcp
US 8.8.8.8:53 92.196.227.165.in-addr.arpa udp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 204.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 31.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 240.221.184.93.in-addr.arpa udp
US 8.8.8.8:53 whatismyipaddress.com udp
US 104.19.222.79:443 whatismyipaddress.com tcp
US 104.19.222.79:443 whatismyipaddress.com tcp
US 104.19.222.79:443 whatismyipaddress.com udp
US 8.8.8.8:53 ds6.whatismyipaddress.com udp
US 8.8.8.8:53 app.fusebox.fm udp
US 8.8.8.8:53 a.omappapi.com udp
US 8.8.8.8:53 a.pub.network udp
US 8.8.8.8:53 cmp.inmobi.com udp
GB 18.244.114.102:443 cmp.inmobi.com tcp
GB 143.244.38.136:443 a.omappapi.com tcp
US 104.18.21.206:443 a.pub.network tcp
US 104.26.13.133:443 app.fusebox.fm tcp
US 8.8.8.8:53 maps.whatismyipaddress.info udp
US 104.26.5.215:443 maps.whatismyipaddress.info tcp
US 104.26.5.215:443 maps.whatismyipaddress.info tcp
US 104.26.5.215:443 maps.whatismyipaddress.info tcp
US 104.26.5.215:443 maps.whatismyipaddress.info tcp
US 8.8.8.8:53 optimise.net udp
US 8.8.8.8:53 api.floors.dev udp
US 8.8.8.8:53 d.pub.network udp
US 34.111.152.239:443 optimise.net tcp
US 34.160.128.112:443 api.floors.dev tcp
US 34.160.152.31:443 d.pub.network tcp
US 104.26.13.133:443 app.fusebox.fm udp
US 8.8.8.8:53 api.omappapi.com udp
US 8.8.8.8:53 79.222.19.104.in-addr.arpa udp
US 8.8.8.8:53 223.111.17.104.in-addr.arpa udp
US 8.8.8.8:53 136.38.244.143.in-addr.arpa udp
US 8.8.8.8:53 102.114.244.18.in-addr.arpa udp
US 8.8.8.8:53 206.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 133.13.26.104.in-addr.arpa udp
US 8.8.8.8:53 215.5.26.104.in-addr.arpa udp
US 8.8.8.8:53 239.152.111.34.in-addr.arpa udp
US 8.8.8.8:53 112.128.160.34.in-addr.arpa udp
US 8.8.8.8:53 31.152.160.34.in-addr.arpa udp
US 172.66.41.8:443 api.omappapi.com tcp
US 34.111.152.239:443 optimise.net tcp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.libsyn.com udp
US 8.8.8.8:53 onesignal.com udp
GB 18.165.242.6:443 static.libsyn.com tcp
GB 18.244.114.102:443 cmp.inmobi.com tcp
US 34.111.152.239:443 optimise.net udp
US 104.18.21.206:443 a.pub.network udp
US 8.8.8.8:53 api.cmp.inmobi.com udp
US 8.8.8.8:53 cdn.whatismyipaddress.com udp
DE 18.184.88.93:443 api.cmp.inmobi.com tcp
US 8.8.8.8:53 8.41.66.172.in-addr.arpa udp
US 8.8.8.8:53 6.242.165.18.in-addr.arpa udp
US 8.8.8.8:53 cdn.confiant-integrations.net udp
US 8.8.8.8:53 freestar-io.videoplayerhub.com udp
US 172.64.144.166:443 cdn.confiant-integrations.net tcp
US 104.26.9.50:443 freestar-io.videoplayerhub.com tcp
US 8.8.8.8:53 btloader.com udp
US 104.22.74.216:443 btloader.com tcp
US 8.8.8.8:53 pb-rtd.ccgateway.net udp
US 35.89.160.156:443 pb-rtd.ccgateway.net tcp
US 8.8.8.8:53 lexicon.33across.com udp
US 8.8.8.8:53 gum.criteo.com udp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 fid.agkn.com udp
US 34.120.133.55:443 api.rlcdn.com udp
US 8.8.8.8:53 idx.liadm.com udp
US 8.8.8.8:53 pb-ing.ccgateway.net udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 35.94.16.34:443 pb-ing.ccgateway.net tcp
US 35.244.193.51:443 lexicon.33across.com tcp
US 34.160.46.1:443 fid.agkn.com tcp
US 34.192.117.142:443 idx.liadm.com tcp
US 172.64.144.166:443 cdn.confiant-integrations.net udp
US 104.22.74.216:443 btloader.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 c.pub.network udp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 35.94.16.34:443 pb-ing.ccgateway.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 34.160.152.31:443 c.pub.network tcp
US 8.8.8.8:53 s2s.t13.io udp
DE 52.29.6.178:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 bidder.criteo.com udp
US 34.120.63.153:443 prebid.media.net udp
US 35.227.252.103:443 rtb.openx.net udp
US 34.107.140.113:443 s2s.t13.io tcp
US 34.107.140.113:443 s2s.t13.io tcp
US 34.107.140.113:443 s2s.t13.io tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 34.160.152.31:443 c.pub.network udp
US 8.8.8.8:53 50.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 93.88.184.18.in-addr.arpa udp
US 8.8.8.8:53 166.144.64.172.in-addr.arpa udp
US 8.8.8.8:53 216.74.22.104.in-addr.arpa udp
US 8.8.8.8:53 51.193.244.35.in-addr.arpa udp
US 8.8.8.8:53 1.46.160.34.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 142.117.192.34.in-addr.arpa udp
US 8.8.8.8:53 156.160.89.35.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 113.140.107.34.in-addr.arpa udp
US 8.8.8.8:53 8.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 34.16.94.35.in-addr.arpa udp
US 8.8.8.8:53 rp.liadm.com udp
US 3.215.137.140:443 rp.liadm.com tcp
US 8.8.8.8:53 p.ad.gt udp
DE 37.252.171.21:443 secure.adnxs.com tcp
US 8.8.8.8:53 ids.ad.gt udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 sync.go.sonobi.com udp
US 104.22.4.69:443 p.ad.gt tcp
US 35.166.26.70:443 ids.ad.gt tcp
US 35.166.26.70:443 ids.ad.gt tcp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 e477220d3f59f8265120c2ed21fe1a01.safeframe.googlesyndication.com udp
IE 54.77.89.252:443 ad.360yield.com tcp
US 69.166.1.67:443 sync.go.sonobi.com tcp
US 35.166.26.70:443 ids.ad.gt tcp
US 35.166.26.70:443 ids.ad.gt tcp
US 35.166.26.70:443 ids.ad.gt tcp
US 35.166.26.70:443 ids.ad.gt tcp
US 8.8.8.8:53 static.criteo.net udp
NL 178.250.1.3:443 static.criteo.net tcp
US 35.94.16.34:443 pb-ing.ccgateway.net tcp
US 104.22.5.69:443 p.ad.gt tcp
US 8.8.8.8:53 pixels.ad.gt udp
US 104.22.4.69:443 pixels.ad.gt tcp
US 104.22.4.69:443 pixels.ad.gt tcp
US 8.8.8.8:53 cdn.browsiprod.com udp
US 8.8.8.8:53 a5278.casalemedia.com udp
GB 18.164.68.62:443 cdn.browsiprod.com tcp
US 8.8.8.8:53 140.137.215.3.in-addr.arpa udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 252.89.77.54.in-addr.arpa udp
US 8.8.8.8:53 67.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 70.26.166.35.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
CA 185.170.61.219:443 a5278.casalemedia.com tcp
US 8.8.8.8:53 cs.lkqd.net udp
US 8.8.8.8:53 events.browsiprod.com udp
US 8.8.8.8:53 yield-manager.browsiprod.com udp
US 35.81.91.148:443 events.browsiprod.com tcp
GB 13.224.245.123:443 yield-manager.browsiprod.com tcp
US 8.8.8.8:53 ad.sxp.smartclip.net udp
US 35.186.194.101:443 ad.sxp.smartclip.net tcp
GB 18.164.68.62:443 cdn.browsiprod.com tcp
US 8.8.8.8:53 cms.quantserve.com udp
US 8.8.8.8:53 a.tribalfusion.com udp
US 8.8.8.8:53 p.rfihub.com udp
US 54.159.1.74:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 js-sec.indexww.com udp
US 104.18.38.76:443 js-sec.indexww.com tcp
US 104.18.24.173:443 a.tribalfusion.com tcp
NL 193.0.160.131:443 p.rfihub.com tcp
GB 216.58.204.70:443 s0.2mdn.net udp
US 35.186.194.101:443 ad.sxp.smartclip.net udp
US 8.8.8.8:53 ai.browsiprod.com udp
GB 143.204.68.89:443 ai.browsiprod.com tcp
US 8.8.8.8:53 62.68.164.18.in-addr.arpa udp
US 8.8.8.8:53 219.61.170.185.in-addr.arpa udp
US 8.8.8.8:53 123.245.224.13.in-addr.arpa udp
US 8.8.8.8:53 101.194.186.35.in-addr.arpa udp
US 8.8.8.8:53 148.91.81.35.in-addr.arpa udp
US 8.8.8.8:53 76.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 173.24.18.104.in-addr.arpa udp
US 8.8.8.8:53 131.160.0.193.in-addr.arpa udp
US 8.8.8.8:53 89.68.204.143.in-addr.arpa udp
US 8.8.8.8:53 cdn.somplo.com udp
US 8.8.8.8:53 video.somplo.com udp
US 8.8.8.8:53 adserve.somplo.com udp
GB 93.123.11.62:443 video.somplo.com tcp
GB 93.123.11.62:443 video.somplo.com tcp
NL 93.123.17.254:443 adserve.somplo.com tcp
US 8.8.8.8:53 cdn.springserve.com udp
US 8.8.8.8:53 s.tribalfusion.com udp
GB 216.137.44.28:443 cdn.springserve.com tcp
US 8.8.8.8:53 vid-io.springserve.com udp
IE 52.49.61.124:443 vid-io.springserve.com tcp
GB 93.123.11.62:443 video.somplo.com tcp
US 8.8.8.8:53 pixel.somplo.com udp
US 8.8.8.8:53 62.11.123.93.in-addr.arpa udp
US 8.8.8.8:53 254.17.123.93.in-addr.arpa udp
US 8.8.8.8:53 28.44.137.216.in-addr.arpa udp
US 8.8.8.8:53 124.61.49.52.in-addr.arpa udp
US 8.8.8.8:53 vast.somplo.com udp
US 8.8.8.8:53 serve.somplo.com udp
IE 63.33.80.217:443 serve.somplo.com tcp
US 8.8.8.8:53 serving.stat-rock.com udp
US 8.8.8.8:53 vid.springserve.com udp
DE 144.76.120.254:443 serving.stat-rock.com tcp
DE 144.76.120.254:443 serving.stat-rock.com tcp
IE 54.74.27.74:443 vid.springserve.com tcp
US 8.8.8.8:53 freestar-d.openx.net udp
US 8.8.8.8:53 vpaid.springserve.com udp
GB 2.21.188.27:443 contextual.media.net tcp
GB 54.192.137.97:443 vpaid.springserve.com tcp
GB 2.21.188.27:443 contextual.media.net tcp
US 8.8.8.8:53 c21lg-d.media.net udp
IE 52.17.93.114:443 match.prod.bidr.io tcp
US 8.8.8.8:53 px.ads.linkedin.com udp
US 8.8.8.8:53 triplelift-match.dotomi.com udp
US 8.8.8.8:53 217.80.33.63.in-addr.arpa udp
US 8.8.8.8:53 254.120.76.144.in-addr.arpa udp
US 8.8.8.8:53 74.27.74.54.in-addr.arpa udp
US 8.8.8.8:53 97.137.192.54.in-addr.arpa udp
US 13.107.42.14:443 px.ads.linkedin.com tcp
NL 89.207.16.137:443 triplelift-match.dotomi.com tcp
US 8.8.8.8:53 as-sec.casalemedia.com udp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 m.media-amazon.com udp
GB 18.245.186.232:443 m.media-amazon.com tcp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 8.8.8.8:53 sync.bfmio.com udp
US 8.8.8.8:53 cs.emxdgt.com udp
US 8.8.8.8:53 pixel.advertising.com udp
NL 208.93.169.131:443 bh.contextweb.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 69.166.1.67:443 sync.go.sonobi.com tcp
US 8.8.8.8:53 pbs.publishers.tremorhub.com udp
FR 51.178.195.212:443 ssbsync-global.smartadserver.com tcp
US 8.8.8.8:53 sync.sxp.smartclip.net udp
US 8.8.8.8:53 ih.adscale.de udp
US 8.8.8.8:53 sync.teads.tv udp
US 52.55.247.7:443 sync.bfmio.com tcp
US 52.70.16.10:443 pbs.publishers.tremorhub.com tcp
GB 2.21.189.110:443 sync.teads.tv tcp
DE 35.156.11.56:443 cs.emxdgt.com tcp
DE 52.57.121.98:443 ih.adscale.de tcp
US 8.8.8.8:53 vid-io-dub.springserve.com udp
US 8.8.8.8:53 sync.richaudience.com udp
DE 162.55.236.225:443 sync.richaudience.com tcp
US 8.8.8.8:53 i.liadm.com udp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
US 8.8.8.8:53 casale-match.dotomi.com udp
NL 46.228.164.11:443 ad.turn.com tcp
US 8.8.8.8:53 d.adroll.com udp
GB 18.245.186.232:443 m.media-amazon.com udp
US 8.8.8.8:53 sync.admanmedia.com udp
US 8.8.8.8:53 y.one.impact-ad.jp udp
US 8.8.8.8:53 ts.amazon-adsystem.com udp
US 8.8.8.8:53 vid-io-iad.springserve.com udp
US 34.235.7.137:443 i.liadm.com tcp
US 34.95.81.168:443 euexchangesync.digitaleast.mobi tcp
IE 52.215.133.40:443 d.adroll.com tcp
GB 18.245.218.63:443 ts.amazon-adsystem.com tcp
US 44.211.102.106:443 vid-io-iad.springserve.com tcp
NL 63.215.202.140:443 casale-match.dotomi.com tcp
US 8.2.110.17:443 sync.admanmedia.com tcp
US 8.8.8.8:53 sync.springserve.com udp
US 44.211.102.106:443 vid-io-iad.springserve.com tcp
JP 35.213.17.49:443 y.one.impact-ad.jp tcp
US 8.8.8.8:53 cacerts.rapidssl.com udp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
JP 35.213.17.49:443 y.one.impact-ad.jp tcp
US 8.8.8.8:53 vid-io-cle.springserve.com udp
US 35.161.146.173:443 vid-io-cle.springserve.com tcp
US 8.8.8.8:53 vid-io-sin.springserve.com udp
US 8.8.8.8:53 s2.paa-reporting-advertising.amazon udp
US 8.8.8.8:53 14.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 137.16.207.89.in-addr.arpa udp
US 8.8.8.8:53 232.186.245.18.in-addr.arpa udp
US 8.8.8.8:53 56.11.156.35.in-addr.arpa udp
US 8.8.8.8:53 98.121.57.52.in-addr.arpa udp
US 8.8.8.8:53 110.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 7.247.55.52.in-addr.arpa udp
US 8.8.8.8:53 10.16.70.52.in-addr.arpa udp
US 8.8.8.8:53 225.236.55.162.in-addr.arpa udp
US 8.8.8.8:53 168.81.95.34.in-addr.arpa udp
US 8.8.8.8:53 63.218.245.18.in-addr.arpa udp
US 8.8.8.8:53 140.202.215.63.in-addr.arpa udp
US 8.8.8.8:53 137.7.235.34.in-addr.arpa udp
US 8.8.8.8:53 40.133.215.52.in-addr.arpa udp
US 8.8.8.8:53 17.110.2.8.in-addr.arpa udp
US 8.8.8.8:53 106.102.211.44.in-addr.arpa udp
SG 54.169.172.204:443 vid-io-sin.springserve.com tcp
SG 54.169.172.204:443 vid-io-sin.springserve.com tcp
GB 54.192.137.121:443 s2.paa-reporting-advertising.amazon tcp
SG 54.169.172.204:443 vid-io-sin.springserve.com tcp
SG 54.169.172.204:443 vid-io-sin.springserve.com tcp
SG 54.169.172.204:443 vid-io-sin.springserve.com tcp
US 35.161.146.173:443 vid-io-cle.springserve.com tcp
US 35.161.146.173:443 vid-io-cle.springserve.com tcp
SG 54.169.172.204:443 vid-io-sin.springserve.com tcp
US 35.161.146.173:443 vid-io-cle.springserve.com tcp
GB 54.192.137.121:443 s2.paa-reporting-advertising.amazon tcp
JP 35.213.17.49:443 y.one.impact-ad.jp udp
DE 51.89.9.252:443 onetag-sys.com udp
US 8.8.8.8:53 sync-tm.everesttech.net udp
US 8.8.8.8:53 pm.w55c.net udp
US 8.8.8.8:53 rtb.adentifi.com udp
NL 35.214.251.144:443 csync.loopme.me tcp
US 8.8.8.8:53 cdn.indexww.com udp
US 151.101.66.49:443 sync-tm.everesttech.net tcp
US 18.207.17.188:443 rtb.adentifi.com tcp
US 8.8.8.8:53 r.casalemedia.com udp
IE 34.251.19.157:443 pm.w55c.net tcp
US 8.8.8.8:53 ms-cookie-sync.presage.io udp
IE 54.194.99.63:443 ms-cookie-sync.presage.io tcp
IE 67.220.228.202:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev udp
GB 108.156.39.62:443 tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev tcp
US 8.8.8.8:53 49.17.213.35.in-addr.arpa udp
US 8.8.8.8:53 173.146.161.35.in-addr.arpa udp
US 8.8.8.8:53 204.172.169.54.in-addr.arpa udp
US 8.8.8.8:53 121.137.192.54.in-addr.arpa udp
US 8.8.8.8:53 49.66.101.151.in-addr.arpa udp
US 8.8.8.8:53 157.19.251.34.in-addr.arpa udp
US 8.8.8.8:53 188.17.207.18.in-addr.arpa udp
US 8.8.8.8:53 63.99.194.54.in-addr.arpa udp
US 8.8.8.8:53 62.39.156.108.in-addr.arpa udp
US 20.253.0.30:443 sync.inmobi.com tcp
US 8.8.8.8:53 amazon-tam-match.dotomi.com udp
US 8.8.8.8:53 cs-tam.yellowblue.io udp
IE 52.208.159.70:443 cs-tam.yellowblue.io tcp
US 209.54.182.161:443 s.amazon-adsystem.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 209.54.182.161:443 s.amazon-adsystem.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 209.54.182.161:443 s.amazon-adsystem.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 crt.sectigo.com udp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 172.64.149.23:80 crt.sectigo.com tcp
US 209.54.182.161:443 s.amazon-adsystem.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
GB 2.21.188.27:443 c21lg-d.media.net udp
NL 35.214.251.144:443 csync.loopme.me tcp
IE 67.220.228.202:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 capi.connatix.com udp
NL 145.40.97.67:443 prebid.a-mo.net tcp
US 54.160.38.67:443 sync.ipredictive.com tcp
IE 67.220.228.202:443 aax-eu.amazon-adsystem.com tcp
US 172.64.146.152:443 capi.connatix.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 8.8.8.8:53 cs.yellowblue.io udp
IE 67.220.228.202:443 aax-eu.amazon-adsystem.com tcp
US 34.107.140.113:443 s2s.t13.io udp
US 50.31.142.159:443 b1sync.zemanta.com tcp
IE 67.220.228.202:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 30.0.253.20.in-addr.arpa udp
US 8.8.8.8:53 70.159.208.52.in-addr.arpa udp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 67.97.40.145.in-addr.arpa udp
US 8.8.8.8:53 152.146.64.172.in-addr.arpa udp
US 8.8.8.8:53 tr.blismedia.com udp
US 8.8.8.8:53 sync.adkernel.com udp
US 147.135.71.24:443 tracker-shr.ortb.net tcp
US 34.96.105.8:443 tr.blismedia.com tcp
NL 77.245.57.72:443 sync.adkernel.com tcp
US 8.8.8.8:53 ads.betweendigital.com udp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 sync.mathtag.com udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 188.42.34.65:443 ads.betweendigital.com tcp
US 216.200.232.249:443 sync.mathtag.com tcp
DE 18.157.153.25:443 rtb.mfadsrvr.com tcp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
US 8.8.8.8:53 t.adx.opera.com udp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
IE 67.220.228.202:443 aax-eu.amazon-adsystem.com tcp
US 54.159.1.74:443 sync.srv.stackadapt.com tcp
DE 85.114.159.93:443 dsp.adfarm1.adition.com tcp
US 8.8.8.8:53 ad.mrtnsvr.com udp
US 8.8.8.8:53 d5p.de17a.com udp
IE 67.220.228.202:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 ads.avct.cloud udp
US 8.8.8.8:53 simage2.pubmatic.com udp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
SE 213.155.156.181:443 d5p.de17a.com tcp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
IE 52.17.93.114:443 match.prod.bidr.io tcp
US 8.8.8.8:53 cm-supply-web.gammaplatform.com udp
US 8.8.8.8:53 ipac.ctnsnet.com udp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
GB 185.64.191.210:443 simage2.pubmatic.com tcp
GB 185.64.191.210:443 simage2.pubmatic.com tcp
GB 185.64.191.210:443 simage2.pubmatic.com tcp
GB 185.64.191.210:443 simage2.pubmatic.com tcp
GB 185.64.191.210:443 simage2.pubmatic.com tcp
US 8.8.8.8:53 core.iprom.net udp
US 8.8.8.8:53 green.erne.co udp
US 8.8.8.8:53 cm.adgrx.com udp
GB 185.64.191.210:443 simage2.pubmatic.com tcp
SI 195.5.165.20:443 core.iprom.net tcp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
NL 89.149.192.201:443 rtb-csync.smartadserver.com tcp
IE 54.217.19.5:443 cm.adgrx.com tcp
US 104.18.24.173:443 s.tribalfusion.com udp
US 8.8.8.8:53 pubmatic-match.dotomi.com udp
US 8.8.8.8:53 match.adsby.bidtheatre.com udp
US 34.111.129.221:443 cr.frontend.weborama.fr tcp
IE 52.17.93.114:443 match.prod.bidr.io tcp
NL 134.122.57.34:443 match.adsby.bidtheatre.com tcp
NL 89.207.16.201:443 pubmatic-match.dotomi.com tcp
FR 141.95.171.140:443 green.erne.co tcp
US 104.22.50.98:443 mwzeom.zeotap.com tcp
US 34.111.129.221:443 cr.frontend.weborama.fr udp
US 8.8.8.8:53 matching.truffle.bid udp
US 8.8.8.8:53 uipglob.semasio.net udp
US 8.8.8.8:53 pixel.onaudience.com udp
US 8.8.8.8:53 pixel-eu.onaudience.com udp
DE 162.55.120.196:443 matching.truffle.bid tcp
US 8.8.8.8:53 8.105.96.34.in-addr.arpa udp
US 8.8.8.8:53 24.71.135.147.in-addr.arpa udp
US 8.8.8.8:53 65.34.42.188.in-addr.arpa udp
DK 77.243.51.121:443 uipglob.semasio.net tcp
US 8.8.8.8:53 25.153.157.18.in-addr.arpa udp
US 8.8.8.8:53 249.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 6.163.102.34.in-addr.arpa udp
US 8.8.8.8:53 181.156.155.213.in-addr.arpa udp
US 8.8.8.8:53 20.165.5.195.in-addr.arpa udp
US 8.8.8.8:53 210.191.64.185.in-addr.arpa udp
FR 141.94.171.214:443 pixel-eu.onaudience.com tcp
FR 141.94.170.64:443 pixel-eu.onaudience.com tcp
FR 141.94.171.214:443 pixel-eu.onaudience.com tcp
DK 77.243.51.121:443 uipglob.semasio.net tcp
DK 77.243.51.121:443 uipglob.semasio.net tcp
US 8.8.8.8:53 ps.eyeota.net udp
IE 67.220.228.202:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 5.19.217.54.in-addr.arpa udp
US 8.8.8.8:53 221.129.111.34.in-addr.arpa udp
US 8.8.8.8:53 201.16.207.89.in-addr.arpa udp
US 8.8.8.8:53 140.171.95.141.in-addr.arpa udp
US 8.8.8.8:53 34.57.122.134.in-addr.arpa udp
US 8.8.8.8:53 98.50.22.104.in-addr.arpa udp
US 8.8.8.8:53 214.171.94.141.in-addr.arpa udp
US 8.8.8.8:53 64.170.94.141.in-addr.arpa udp
US 8.8.8.8:53 121.51.243.77.in-addr.arpa udp
DE 3.124.210.90:443 ps.eyeota.net tcp
DE 3.124.210.90:443 ps.eyeota.net tcp
US 8.8.8.8:53 spl.zeotap.com udp
DE 162.55.120.196:443 matching.truffle.bid tcp
US 35.81.91.148:443 events.browsiprod.com tcp
DE 162.55.120.196:443 matching.truffle.bid tcp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 8.8.8.8:53 90.210.124.3.in-addr.arpa udp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp

Files

memory/2376-0-0x00007FF98DEB0000-0x00007FF98E0A5000-memory.dmp

memory/2376-1-0x0000000000D70000-0x0000000000D7A000-memory.dmp

memory/2376-2-0x0000000005600000-0x000000000560A000-memory.dmp

memory/2376-4-0x00000000060F0000-0x0000000006102000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Monaco\fileaccess\node_modules\get-intrinsic\.nycrc

MD5 d0104f79f0b4f03bbcd3b287fa04cf8c
SHA1 54f9d7adf8943cb07f821435bb269eb4ba40ccc2
SHA256 997785c50b0773e5e18bf15550fbf57823c634fefe623cd37b3c83696402ad0a
SHA512 daf9b5445cfc02397f398adfa0258f2489b70699dfec6ca7e5b85afe5671fdcabe59edee332f718f5e5778feb1e301778dffe93bb28c1c0914f669659bad39c6

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Monaco\fileaccess\node_modules\hasown\.nycrc

MD5 c2ab942102236f987048d0d84d73d960
SHA1 95462172699187ac02eaec6074024b26e6d71cff
SHA256 948366fea3b423a46366326d0bb2e54b08abd1cf0b243678ba6625740c40da5a
SHA512 e36b20c16ceeb090750f3865efc8d7fd983ae4e8b41c30cc3865d2fd4925bf5902627e1f1ed46c0ff2453f076ef9de34be899ef57754b29cd158440071318479

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Monaco\fileaccess\node_modules\has-proto\.eslintrc

MD5 c28b0fe9be6e306cc2ad30fe00e3db10
SHA1 af79c81bd61c9a937fca18425dd84cdf8317c8b9
SHA256 0694050195fc694c5846b0a2a66b437ac775da988f0a779c55fb892597f7f641
SHA512 e3eca17804522ffa4f41e836e76e397a310a20e8261a38115b67e8b644444153039d04198fb470f45be2997d2c7a72b15bd4771a02c741b3cbc072ea6ef432e9

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Monaco\fileaccess\node_modules\vary\LICENSE

MD5 13babc4f212ce635d68da544339c962b
SHA1 4881ad2ec8eb2470a7049421047c6d076f48f1de
SHA256 bd47ce7b88c7759630d1e2b9fcfa170a0f1fde522be09e13fb1581a79d090400
SHA512 40e30174433408e0e2ed46d24373b12def47f545d9183b7bce28d4ddd8c8bb528075c7f20e118f37661db9f1bba358999d81a14425eb3e0a4a20865dfcb53182

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe

MD5 d213a75b1956398e4c36bcc2f93339bf
SHA1 6a2739cc0e67f5593c744fbcbc8f00f12eef9954
SHA256 ece75d080f94df4b3699389021337b1536cfed229d1325f09b03f0b0d6d85ab4
SHA512 d32ddaf4c6f8f8df6c390d683e6c039f3b0d8f35f68f690b28bf88b17caedf0e11abd3aeb2e46238d0cd0a91b2db095cca0782b4e27f04453ea4cb6db38f4dd7

memory/4436-1470-0x00007FF98DEB0000-0x00007FF98E0A5000-memory.dmp

memory/4436-1471-0x0000021EB4B40000-0x0000021EB4B5A000-memory.dmp

memory/4436-1472-0x00007FF98DEB0000-0x00007FF98E0A5000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Wpf.Ui.dll

MD5 aead90ab96e2853f59be27c4ec1e4853
SHA1 43cdedde26488d3209e17efff9a51e1f944eb35f
SHA256 46cfbe804b29c500ebc0b39372e64c4c8b4f7a8e9b220b5f26a9adf42fcb2aed
SHA512 f5044f2ee63906287460b9adabfcf3c93c60b51c86549e33474c4d7f81c4f86cd03cd611df94de31804c53006977874b8deb67c4bf9ea1c2b70c459b3a44b38d

memory/4436-1474-0x0000021ED0D20000-0x0000021ED125C000-memory.dmp

memory/4436-1475-0x0000021ED09D0000-0x0000021ED0A8A000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Microsoft.Web.WebView2.Wpf.dll

MD5 34ec990ed346ec6a4f14841b12280c20
SHA1 6587164274a1ae7f47bdb9d71d066b83241576f0
SHA256 1e987b22cd011e4396a0805c73539586b67df172df75e3dded16a77d31850409
SHA512 b565015ca4b11b79ecbc8127f1fd40c986948050f1caefdd371d34ed2136af0aabf100863dc6fd16d67e3751d44ee13835ea9bf981ac0238165749c4987d1ae0

memory/4436-1477-0x0000021ED07B0000-0x0000021ED07BE000-memory.dmp

memory/4436-1478-0x00007FF98DEB0000-0x00007FF98E0A5000-memory.dmp

memory/4436-1479-0x00007FF98DEB0000-0x00007FF98E0A5000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Microsoft.Web.WebView2.Core.dll

MD5 851fee9a41856b588847cf8272645f58
SHA1 ee185a1ff257c86eb19d30a191bf0695d5ac72a1
SHA256 5e7faee6b8230ca3b97ce9542b914db3abbbd1cb14fd95a39497aaad4c1094ca
SHA512 cf5c70984cf33e12cf57116da1f282a5bd6433c570831c185253d13463b0b9a0b9387d4d1bf4dddab3292a5d9ba96d66b6812e9d7ebc5eb35cb96eea2741348f

memory/4436-1481-0x0000021ED14E0000-0x0000021ED155E000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\WebView2Loader.dll

MD5 a0bd0d1a66e7c7f1d97aedecdafb933f
SHA1 dd109ac34beb8289030e4ec0a026297b793f64a3
SHA256 79d7e45f8631e8d2541d01bfb5a49a3a090be72b3d465389a2d684680fee2e36
SHA512 2a50ae5c7234a44b29f82ebc2e3cfed37bf69294eb00b2dc8905c61259975b2f3a059c67aeab862f002752454d195f7191d9b82b056f6ef22d6e1b0bb3673d50

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\zlib1.dll

MD5 75365924730b0b2c1a6ee9028ef07685
SHA1 a10687c37deb2ce5422140b541a64ac15534250f
SHA256 945e7f5d09938b7769a4e68f4ef01406e5af9f40db952cba05ddb3431dd1911b
SHA512 c1e31c18903e657203ae847c9af601b1eb38efa95cb5fa7c1b75f84a2cba9023d08f1315c9bb2d59b53256dfdb3bac89930252138475491b21749471adc129a1

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\VCRUNTIME140.dll

MD5 7a2b8cfcd543f6e4ebca43162b67d610
SHA1 c1c45a326249bf0ccd2be2fbd412f1a62fb67024
SHA256 7d7ca28235fba5603a7f40514a552ac7efaa67a5d5792bb06273916aa8565c5f
SHA512 e38304fb9c5af855c1134f542adf72cde159fab64385533eafa5bb6e374f19b5a29c0cb5516fc5da5c0b5ac47c2f6420792e0ac8ddff11e749832a7b7f3eb5c8

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\libcurl.dll

MD5 e31f5136d91bad0fcbce053aac798a30
SHA1 ee785d2546aec4803bcae08cdebfd5d168c42337
SHA256 ee94e2201870536522047e6d7fe7b903a63cd2e13e20c8fffc86d0e95361e671
SHA512 a1543eb1d10d25efb44f9eaa0673c82bfac5173055d04c0f3be4792984635a7c774df57a8e289f840627754a4e595b855d299070d469e0f1e637c3f35274abe6

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.dll

MD5 fee348eb64504fd06b527d6694e1762b
SHA1 2b4f6598394f65a3a469e201005edec58ceff206
SHA256 3988950e51bbab918762ca18d6bd5dfb94207942864813b7ad64ae7c46afb4fd
SHA512 db766b02cd289a48d3581a9043031285a0a2cb9a6529023c391f30956fb114e99d84ce7f7f5414fdcb7ce0839f6fd26052084ff4f3f90d2fca09d0128a19f37a

memory/4436-1492-0x0000000180000000-0x0000000180AB4000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Microsoft.Web.WebView2.WinForms.dll

MD5 4cf94ffa50fd9bdc0bb93cceaede0629
SHA1 3e30eca720f4c2a708ec53fd7f1ba9e778b4f95f
SHA256 50b2e46c99076f6fa9c33e0a98f0fe3a2809a7c647bb509066e58f4c7685d7e6
SHA512 dc400518ef2f68920d90f1ce66fbb8f4dde2294e0efeecd3d9329aa7a66e1ab53487b120e13e15f227ea51784f90208c72d7fbfa9330d9b71dd9a1a727d11f98

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\bin\path.txt

MD5 0e2184f1c7464b6617329fb18f107b4f
SHA1 6f22f98471e33c9db10d6f6f1728e98852e25b8f
SHA256 dbf5f44e1b84a298dbbcad3c31a617d2f6cfa08eb5d16e05a5c28726c574d4eb
SHA512 8e745c0215d52e15702551f29efb882a5eba97b5f279ccc29293b1a9b1b8661bf71b548569f9a99fa35c35a15d1b6b288d3c381c1292418c36dc89e2fa0b3a37

memory/4436-1495-0x0000021ED14B0000-0x0000021ED14B8000-memory.dmp

memory/4436-1496-0x0000021ED5A20000-0x0000021ED5A58000-memory.dmp

memory/4436-1497-0x0000021ED14D0000-0x0000021ED14DE000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Newtonsoft.Json.dll

MD5 195ffb7167db3219b217c4fd439eedd6
SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac

memory/4436-1499-0x0000021ED5D50000-0x0000021ED5E02000-memory.dmp

memory/4436-1500-0x00007FF98DEB0000-0x00007FF98E0A5000-memory.dmp

memory/4436-1501-0x0000000180000000-0x0000000180AB4000-memory.dmp

\??\pipe\crashpad_2884_GDLLGYKJXJWMDRDV

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 bea929b41d6e7b79fd682bf90ec92bf7
SHA1 2ee3985259d845be463b68cd58fc46148e5a6304
SHA256 7ea254c8a52cebf27b470c83d08e8293a6a2f4775ef40a03cc28d49b8337ca07
SHA512 22e9d8a6b97d76ea0442e1471d9add367587e1f310a137919f75d6bf5768687cd182131a87124cacb38d7bbdc8ba1d2e93d151820f4b3c98c0e3e8cef2b55efe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d5cc39cd39f869c9c396345759d56f0f
SHA1 2741f7e475e472e931e66ab261481db8bbc2356f
SHA256 6e5d785b4cd75679b17450c7a8843098a7dbd28dee9b2096f959e8605e124930
SHA512 74ad4c9007bfb8ef6d6da29a037a79efd3c6c8c075a3ccb6ed9c770dd5e598ce33bcc4221503401e8eefbcb109b8c8ac3f96dbf57eb9b565b71869c41beb83fc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ec9122336f7863018d9b790ce7666018
SHA1 e4c50206ac594a43112897e805f39fa7e5e8f476
SHA256 a493b64df6f338a3a6380430a3d3f841af15995a483c9e44bdf6d9a542e519a4
SHA512 3329969a32337296d9b944c74d0ae3bc3074e84f338bda64783a07871f9468d5edb1289f1ba40c667948d8388fad85c1d45e479a4622192d98da1baa5aa67014

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 db786fd684dfa49301e9fd83fce142a1
SHA1 d0879beffa475c542bb24f9b368793919502b681
SHA256 52de17d2c9e78c456749d736de72fe2bfe36496afefda1869cbc3006e4ac1256
SHA512 d7a5edbe8ca716ed29bfaa7458c09d343d946245b02365a196fb496e861e7e59259f5958484870d7c62d62e36abae7595bbd6aa8d700a00a10fe7bdfb4c81643

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 eafc0daf82b355d00df77c9f43c2a16e
SHA1 1338bb736df158ba3d4af273a2cf8b8900fa1d7a
SHA256 56485f8ea472077231c32fcf2cb8765a069820d2e66e5cd44de575f37478dbcf
SHA512 ed46f738ba9613a50950f5aaa111e61d02538cc37147d09be173244051f13bf219b7a06610271295ec45dd1e7b63f07745cc3a2ea858038a29435497e98e4b2e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ce17598ad869af767812fa45176245d3
SHA1 54c4a81cd155da083385138ac229725f4c44cfaf
SHA256 6baede024b711ab35a1e6152a8715dfca5044de8822faead816f47d041d0f2ba
SHA512 eb10d94108fcc4fb11258f1afa46152cd4b3a1de72f4d055c22d9134e3c30c3220a80ea753dcb1b753ad062a235259583da39e21778371a27e97f8eecd3ce9de

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 c70d9a2301f9cf3c12e19b463ae86b08
SHA1 0d110ba6ae075f5d2a69f2108de371968f522573
SHA256 8ae6cde430cc84b1d1a349565c87ffeae0ac95dcb88cabbf6b51fd16d98db3b5
SHA512 3937251eea69317cda4fc9e65004ce0e85fd6f44ac5b80aa171f7f45473a549b952be5abf2593706bcbf528f76e9e4fd142b1235b7199ca18b7b057b69d68d6f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 166d819adfa456d50eaca89ffd493344
SHA1 8ac8a5bf86c1c01b8c930b1a4c9398cd9971477b
SHA256 450e31ed1311642225d951ecf07e188c9edf218f3a9340023f8ea7a9de98647f
SHA512 f6061a45f4f76b057d9a9fb1f259e5bae6d28ad7049f9043e1b99b95c7137e77d21307e090a578feea411f0b86265ee785e6bb0069eaea5cd37703b83bf531be

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000051

MD5 be676a6820a16101eed8dfe9bc39211d
SHA1 84a68584fffc1863f604984161abefe9ddd727c0
SHA256 49e7c48f632a33abfebbf881e504a833abc8b5cf87d7be4dfa9b5b3cc86749ae
SHA512 3ef3fa135bd1ea25660d9b3e3cd0995d1f542d608302e99bacc22640cc7045700391f001f5ba43c4bf89597b8058d533282e92f934b6bfb746c9f2940b96af32

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000040

MD5 e78f9f9e3c27e7c593b4355a84d7f65a
SHA1 562ce4ba516712d05ed293f34385d18f7138c904
SHA256 75488ac5677083f252c43009f026c2ec023ac4da3e65c5d7a084742e32abce3d
SHA512 05f9fbbd59c286024b3ad49961c4e0eaa1abcf36ed29a1d07ea73d2b057075d46fbfdda56f135145f942bd0c3d48246c73be1771c21861eec4ddf8bbc365a286

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ed513492cfce9bfc9c80a0c443693d8d
SHA1 1fe95dc0847b3ded92cbadd8ad740102d9262a67
SHA256 c1702f4c07aca6dd04a9331eda84bf197370aaae2e557b3114536a0f87b8158a
SHA512 dbbabfb1452c1e42183f505fc0d2b4c0d01cf13c4414ffb2709f2d70a12ec8d596e77d84bd0170a697b4af520256cf489fe2d2277cc47975677b35400ebc22a9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ca489e0ffc20c91a83a7fd04653585df
SHA1 36bf0e32be4247b1438b66095b9ef94ccd07879a
SHA256 1603a2ea68be41e24750c2d7f7a2584a3a4a296e37a011cb0f35087a6810b5b5
SHA512 7f021af62a9f15ba71132142e3977d44c3f03490278ba2577529b3c52516175706560248ed872502aa8d1e5671daff90a5b58be0bc62dd05da3f780e63cd8a6f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_whatismyipaddress.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_whatismyipaddress.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000081

MD5 b96dcbc9dcb4e16ed812dfb8c159156f
SHA1 f9962111efadf9e5fe3d7d8d7329c55b7de71887
SHA256 8da7e8aec66339bd949d0eedd377adb08b2f0183da612ee7615da5f61a57e563
SHA512 2d0b666c331ffc189641109a80e12f355c626db1a61b71526bea06acbf7b141bbdc5df563b2a8afc10817d0639670a3f34cf154dd9cea7bc46058b0f5336a200

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 480baaa437a3645d2a26b2edb05637e4
SHA1 b794da81e149bd0b3b240aff25fb28f9f0eb66e2
SHA256 63ca085f4bb69a73fb9bf044e06028a7598d63c159524fb8fea086642110ee4e
SHA512 73323859f0e2aa5abc5ddbb20b7b5b68c9ba9fd0666916a01a5864303bef7db7676e4c49f9b970c54c58d68e1eaf229a23af216117af63ff6b26f8a371973ff0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5839f7.TMP

MD5 e1125acf6b5992d0f891747bc900b615
SHA1 b571bffa1c8d29a9955b264bf914e1a66dab2a0d
SHA256 99bf4107b4e7be2a256539bc9593698d6f5c9f36e3feb8cc73c2b60240b11599
SHA512 30f06e7b7cc8cab3c5f065c62b7fb6cefb4d3511e1f1f8f4bd8f066060c4c279eb09c64cb0d4492a9583e0b46245e86fb1a4f96c82d0d78833d9bc80afa4770e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7ce1ace6417ca429_0

MD5 85535337f5d580ffba85f9b1cbc0d143
SHA1 e5812be2c7bd98159fbdf9796af277d99a58ae71
SHA256 6d94a82c9855bf2d4044d016bcce901862b01a00eefbf688fad9e5a47d0d4a95
SHA512 01e243f1f1bb48115147b624f6733c27e64a83987ec25904242d68a97272dbe4b0cd5933a9ccc37402e8b7b4809902dc8cb1eb8b8670c2e3a4cee7481079a1d3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6ab79d33f9de9c36_0

MD5 6338e5d4463b16328ce79d3b2755d3e4
SHA1 49acfbc493631114878f8426dffde814ff28d766
SHA256 a75f620ec1ba5408279b850ab1affc8d679c3aef4b92b9d7785da08b564a0a0d
SHA512 1b6d58ac1f5ed25c5e71d794f9cc639badd54a5c9bb79c3aeed9e9679dd36e12e5ee863b46db3cb01d3c1fe5dfef3d456b3e9ac703b2e883ca4b648aa5c8f88e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00008e

MD5 e68dc41937e75b392b26998acb2d09be
SHA1 b3ffd33f790eb21b8bae1c6c8f93c85765fc4e91
SHA256 e4b53b7fdd39514df81e6bb419cb980f00cbb8c95cd421f17cb702faf18af513
SHA512 68eb5da95eca580e9d3040ea91717300e810e26cfed80f0765c2edc2e983d102671c358792c72c680f9a621304cfa542bb116cac9f6f1dc2fa28e39201210425

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e8e8947a9c50d286c90203eb153b36e6
SHA1 f70054ebc88959d12a19f13f35dd637aa5cfbfb9
SHA256 e88ded20038e6e41fe4f7f984dc51617a5443d97a07a0b967b9167f870eeef66
SHA512 c4a4ae488f2aa126006c772b4005e64d90d22c93b4029649d401faeffd32a12920b1db2bc0b76c99db5cbfdfa2fb5f4bd6979152bd9c7f0f4872e9cb05369f45

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a1

MD5 9c6b5ce6b3452e98573e6409c34dd73c
SHA1 de607fadef62e36945a409a838eb8fc36d819b42
SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 2aec0ba491614046b452cfe97172e3fe
SHA1 dec968bdefe3af6367d51c491831a29351154c08
SHA256 4c538650d5c708d173403648b4ccb00a583b7bba1d2641fa1f60f7f0f158d11e
SHA512 34f024eb710dbb468e16e303f094e6168ff9931957c81099ed30d024a7fa1446444cb6099ca5b34e1ec57ddd0c200a80b605ef4498eef6f92dcf02ca4a8c2bff

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 630bb2018eb3178b88881a63223b5960
SHA1 5d3761526213ad65dc27ebf503af8e1929fa631a
SHA256 7b15945cd158f7227996f37c266447ba4da01e0ad409879d12e3353e21a130da
SHA512 714e168f709d1f7d49cf739dc36bf52cfa7ae7efcf66a0667c0ac257f56599337b8e9c36f20dc8a862be30c735cacd9d6b891537d342d713fdf2064c046c254d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b7acf8f602a48a41571d1c9f9a4197d4
SHA1 3d72407adf7fb89c426b060fe0abaf90ecbbfeb8
SHA256 fe41cbff7ca19a52977dcc3ce696a23bfecaf6ee12f87d2a5df7124973c4a0d7
SHA512 09a44ddbdeee37170c2db5608fc792c0f793d8d6bcb045a1ace65cc1390d3b043cfa4aacf17af6d6423219bf4df1db6bdd1858f5f237f88b645cc241dcdd53d5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 88c31de893470b5fd4d221031a30ecef
SHA1 11e4ce11e9ca56f8f3eeb5b63c4f1cf67688287a
SHA256 fe66cda0d1b6bdc26dc56aa49415529928fc24a5f34ab675f7a60e3c67d97f32
SHA512 a3cd03c73136041e79ae31adeeb3b8dff2a4ee5ec41d77db7302837f9030fa56bc57163ec997473772a5616278d6c1350d292aed248446aaaad72349ff5b0cfd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 f2e130ef2fac7419ef5f7031da11a44e
SHA1 4e6141cc16b0278a69aecb99410a67324e2ecb63
SHA256 66daaf4d57cc999277c61b3ef21264115e8a597e628bc5ef5e4a0ab639e9742b
SHA512 db1ba2d6532a8b127bd31faf0199fc979deb04425c7f878b87284e1fc25973256501baa3a0ace91e6dfdd474d5158e56a45d1a878594737b214f6b988ee76f96

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

MD5 7965754ac757e4dabf80199c5723159b
SHA1 76a9d989b2c0ece391dae9a0d33d58fb17dbf9fd
SHA256 586b98cc06527e7c73451249d9eeec3cc8d564596c2c6c723fd74c861801a4d7
SHA512 ca2ee94a9ef3b5ad55f3bdfcbf37a638ec9f542c75f043792a13f230b585c1b6a1f8b93cf6264045fbe69ab5e2c53a940fd268ce2d723ffc76f9420b84ce591e