Malware Analysis Report

2025-01-03 09:11

Sample ID 240620-m7bwlayaqj
Target steam_pfp_1.jfif
SHA256 dcf6bfa9392179f23ce11d1fe78325845bf0d1a921b720ef3cd7878020623e42
Tags
bootkit execution persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

dcf6bfa9392179f23ce11d1fe78325845bf0d1a921b720ef3cd7878020623e42

Threat Level: Shows suspicious behavior

The file steam_pfp_1.jfif was found to be: Shows suspicious behavior.

Malicious Activity Summary

bootkit execution persistence

Executes dropped EXE

Checks computer location settings

Writes to the Master Boot Record (MBR)

Drops file in System32 directory

Drops file in Windows directory

Enumerates physical storage devices

Command and Scripting Interpreter: JavaScript

Suspicious behavior: GetForegroundWindowSpam

Modifies data under HKEY_USERS

Suspicious use of SetWindowsHookEx

Suspicious use of SendNotifyMessage

Modifies Internet Explorer settings

Modifies registry class

Checks SCSI registry key(s)

Suspicious use of WriteProcessMemory

Suspicious behavior: AddClipboardFormatListener

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of AdjustPrivilegeToken

Runs regedit.exe

Enumerates system info in registry

Suspicious behavior: EnumeratesProcesses

Suspicious use of FindShellTrayWindow

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-20 11:05

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-20 11:05

Reported

2024-06-20 11:26

Platform

win10v2004-20240508-en

Max time kernel

1177s

Max time network

1177s

Command Line

cmd /c C:\Users\Admin\AppData\Local\Temp\steam_pfp_1.jpg

Signatures

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\wf.msc C:\Windows\system32\mmc.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\Debug\WIA\wiatrace.log C:\Windows\SysWOW64\mspaint.exe N/A

Command and Scripting Interpreter: JavaScript

execution

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Internet Explorer\IESettingSync C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastUpdateHighDateTime = "31113987" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 40ba1d7203c3da01 C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Internet Explorer\Toolbar C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\GPU\AdapterInfo = "vendorId=\"0x10de\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.19041.546\"hypervisor=\"No Hypervisor (No SLAT)\"" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastUpdateLowDateTime = "1903489006" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastTTLHighDateTime = "50" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 905f237203c3da01 C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Internet Explorer\GPU C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Internet Explorer\VersionManager C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000b2e58ab8bf361247b7301f68e304ddb2000000000200000000001066000000010000200000005fb74a890cef0d8cd9a2f7452d7a07f47c83b392782c16a4320ea921e6eaab04000000000e8000000002000020000000d1de306f32872c8a27dcf3d7716e833a05475364666bb961a149f8f182d78d7120000000f65648f26d43d624cfa6e158b51945c0d8485cd998cf9772edca2c0f5be3f81a40000000ee521e3978ba93177342e571042c5cd587d36749464f6c3f178545e90db3c6b98332955b0b48d90840a95a2b2e1c0a0df388258be48c2f8497bb90e7e50b7538 C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Internet Explorer\Toolbar C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\Recovery\AdminActive\{9D127CA5-2EF6-11EF-B8C0-5ABC67A14C95} = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Internet Explorer\MINIE C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastTTLLowDateTime = "1251635200" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateLowDateTime = "1903489006" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FullScreen = "no" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000b2e58ab8bf361247b7301f68e304ddb200000000020000000000106600000001000020000000e1eff4e6fb1719a7fa1ea1499a2b13183f9919afb9f6762db3706836f4b0e3d6000000000e80000000020000200000003edba1ce4be8e8ff20bce7e1faed60aedffcf14c551cfad181c347f6dd43387c20000000448fe487046542138a5b094d9708b79a994bfb1b53a72dab45e2b9ae38f340e54000000029188c22734b96aa435bf715b7c8285e3916322898b08d780f54cbbe19043fb652883a2b4ab7e26ef6cd463a376f7999aeac7715048a912d26c715778cdc0def C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\MINIE\TabBandWidth = "500" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateHighDateTime = "31113987" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\Locked = "1" C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\Locked = "1" C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Internet Explorer\IESettingSync\SlowSettingTypesChanged = "2" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271" C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1" C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00 C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "137" C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133633551876497067" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040" C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0 C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "48" C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0" C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\powercpl.dll,-1#immutable1 = "Power Options" C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\appwiz.cpl,-159#immutable1 = "Programs and Features" C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\recovery.dll,-2#immutable1 = "Recovery" C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\inetcpl.cpl,-4312#immutable1 = "Internet Options" C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\DiagCpl.dll,-1#immutable1 = "Troubleshooting" C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{DE4F0660-FA10-4B8F-A494-068B20B22307}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000010000001800000030f125b7ef471a10a5f102608c9eebac0a000000a0000000 C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\Speech\SpeechUX\speechuxcpl.dll,-1#immutable1 = "Speech Recognition" C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202 C:\Windows\explorer.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1181767204-2009306918-3718769404-1000\{D160163F-7D1B-42C7-853C-948899EF3569} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\telephon.cpl,-1#immutable1 = "Phone and Modem" C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\intl.cpl,-3#immutable1 = "Region" C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\DiagCpl.dll,-15#immutable1 = "Troubleshoot and fix common computer problems." C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Vid = "{65F125E5-7BE1-4810-BA9D-D271C8432CE3}" C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "2" C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\appwiz.cpl,-160#immutable1 = "Uninstall or change programs on your computer." C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4 C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{DE4F0660-FA10-4B8F-A494-068B20B22307}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 0c0001008421de39050000000000 C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\DeviceCenter.dll,-2000#immutable1 = "View and manage devices, printers, and print jobs" C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "18874385" C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "18874369" C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Vid = "{65F125E5-7BE1-4810-BA9D-D271C8432CE3}" C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel\ShowCmd = "1" C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\srchadmin.dll,-602#immutable1 = "Change how Windows indexes to search faster" C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel\ShowCmd = "1" C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\NodeSlot = "1" C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{DE4F0660-FA10-4B8F-A494-068B20B22307}\FFlags = "18874369" C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\FirewallControlPanel.dll,-12122#immutable1 = "Windows Defender Firewall" C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\FirewallControlPanel.dll,-12123#immutable1 = "Set firewall security options to help protect your computer from hackers and malicious software." C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\usercpl.dll,-2#immutable1 = "Change user account settings and passwords for people who share this computer." C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\system32\DeviceCenter.dll,-1000#immutable1 = "Devices and Printers" C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\fvecpl.dll,-1#immutable1 = "BitLocker Drive Encryption" C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "18874369" C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel\HotKey = "0" C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\devmgr.dll,-4#immutable1 = "Device Manager" C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\fhcpl.dll,-2#immutable1 = "Keep a history of your files" C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "48" C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 C:\Windows\explorer.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1181767204-2009306918-3718769404-1000\{A962D0ED-2864-47A3-979D-0C2FC734CDE6} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "2" C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\sud.dll,-1#immutable1 = "Default Programs" C:\Windows\explorer.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\ImmutableMuiCache\Strings\52C64B7E\@C:\Windows\System32\autoplay.dll,-2#immutable1 = "Change default settings for CDs, DVDs, and devices so that you can automatically play music, view pictures, install software, and play games." C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\MRUListEx = ffffffff C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202 C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel\WFlags = "0" C:\Windows\explorer.exe N/A

Runs regedit.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\regedit.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\regedit.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Internet Explorer\iexplore.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\SystemSettingsAdminFlows.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files\Internet Explorer\iexplore.exe N/A
N/A N/A C:\Program Files\Internet Explorer\iexplore.exe N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Windows\system32\LogonUI.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\MEMZ.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3932 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3548 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4080 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4080 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3932 wrote to memory of 4584 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Windows\system32\cmd.exe

cmd /c C:\Users\Admin\AppData\Local\Temp\steam_pfp_1.jpg

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7fff762fab58,0x7fff762fab68,0x7fff762fab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1816 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2208 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3084 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3096 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3964 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4292 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4576 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4492 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4488 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3744,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=3888 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4932 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4936 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4276 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x3f4 0x150

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=2752 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=4712 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4676 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault615e6b92h4a4fh47a7h9dc0hd553c54a05db

C:\Windows\system32\SystemSettingsAdminFlows.exe

"C:\Windows\system32\SystemSettingsAdminFlows.exe" TurnOffDevicePortal

C:\Windows\system32\SystemSettingsAdminFlows.exe

"C:\Windows\system32\SystemSettingsAdminFlows.exe" TurnOffDevicePortal

C:\Windows\system32\SystemSettingsAdminFlows.exe

"C:\Windows\system32\SystemSettingsAdminFlows.exe" TurnOnDeveloperFeatures DeveloperUnlock

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4188 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaultaac250f4hdeb2h4de1hb25ch85d32078d9f1

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k UnistackSvcGroup

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}

C:\Windows\explorer.exe

C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}

C:\Windows\system32\mmc.exe

"C:\Windows\system32\mmc.exe" "C:\Windows\system32\wf.msc"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=4116 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=2324 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=2788 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4580 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=4844 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=4188 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=3404 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4728,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=3884 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=5244 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=2240 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=4364 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x3f4 0x150

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=3500 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=4772 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=3240 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3456 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5412 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4284 --field-trial-handle=1900,i,14685684019703962951,16287590236961615785,131072 /prefetch:8

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\Downloads\memz_batch_code_201811_archive.torrent

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4596 CREDAT:17410 /prefetch:2

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\cscript.exe

cscript x.js

C:\Users\Admin\AppData\Roaming\MEMZ.exe

"C:\Users\Admin\AppData\Roaming\MEMZ.exe"

C:\Users\Admin\AppData\Roaming\MEMZ.exe

"C:\Users\Admin\AppData\Roaming\MEMZ.exe" /watchdog

C:\Users\Admin\AppData\Roaming\MEMZ.exe

"C:\Users\Admin\AppData\Roaming\MEMZ.exe" /watchdog

C:\Users\Admin\AppData\Roaming\MEMZ.exe

"C:\Users\Admin\AppData\Roaming\MEMZ.exe" /watchdog

C:\Users\Admin\AppData\Roaming\MEMZ.exe

"C:\Users\Admin\AppData\Roaming\MEMZ.exe" /watchdog

C:\Users\Admin\AppData\Roaming\MEMZ.exe

"C:\Users\Admin\AppData\Roaming\MEMZ.exe" /watchdog

C:\Users\Admin\AppData\Roaming\MEMZ.exe

"C:\Users\Admin\AppData\Roaming\MEMZ.exe" /main

C:\Windows\SysWOW64\notepad.exe

"C:\Windows\System32\notepad.exe" \note.txt

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=half+life+3+release+date

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --field-trial-handle=4780,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --field-trial-handle=1028,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=19 --field-trial-handle=5300,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=5468,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=5480,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=22 --field-trial-handle=5944,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=23 --field-trial-handle=5516,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=3996 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://play.clubpenguin.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=24 --field-trial-handle=3900,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=25 --field-trial-handle=6484,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=26 --field-trial-handle=6612,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x23c,0x240,0x244,0x238,0x214,0x7fff6bb1ceb8,0x7fff6bb1cec4,0x7fff6bb1ced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3060,i,8170688675522041063,4020490979093872589,262144 --variations-seed-version --mojo-platform-channel-handle=3056 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1868,i,8170688675522041063,4020490979093872589,262144 --variations-seed-version --mojo-platform-channel-handle=3244 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2192,i,8170688675522041063,4020490979093872589,262144 --variations-seed-version --mojo-platform-channel-handle=3348 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4128,i,8170688675522041063,4020490979093872589,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4128,i,8170688675522041063,4020490979093872589,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=564,i,8170688675522041063,4020490979093872589,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4632,i,8170688675522041063,4020490979093872589,262144 --variations-seed-version --mojo-platform-channel-handle=3968 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2616,i,8170688675522041063,4020490979093872589,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff762fab58,0x7fff762fab68,0x7fff762fab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1684 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2212 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3084 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3092 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4344 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4444 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4604 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4792 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4852 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4816 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4872 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4760 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4832 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=4828 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe" --reenable-autoupdates --system-level

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4872 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x238,0x23c,0x240,0x214,0x244,0x7ff737a7ae48,0x7ff737a7ae58,0x7ff737a7ae68

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://play.clubpenguin.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4804,i,8170688675522041063,4020490979093872589,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4808,i,8170688675522041063,4020490979093872589,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=5352,i,8170688675522041063,4020490979093872589,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=5316,i,8170688675522041063,4020490979093872589,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5848,i,8170688675522041063,4020490979093872589,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5828,i,8170688675522041063,4020490979093872589,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff6bb1ceb8,0x7fff6bb1cec4,0x7fff6bb1ced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2140,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=1984 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1868,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=3216 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2444,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=3416 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3568,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3568,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x3f4 0x150

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=560,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=4032 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4460,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=3836 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4624,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=dank+memz

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4748,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4784,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=5292,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=5332,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5852,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:1

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --field-trial-handle=4292,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=john+cena+midi+legit+not+converted

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4976,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=6200,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=vinesauce+meme+collection

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=6560,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=6868,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7016,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=6604 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4696 --field-trial-handle=1852,i,13313399929377350117,15909135420186625919,131072 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://motherboard.vice.com/read/watch-this-malware-turn-a-computer-into-a-digital-hellscape

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=6640,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=5864,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=5896,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=6896 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6424,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=6964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6980,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6704,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=7152,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=7364,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=7400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=7520,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=7532 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=7756,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=7088 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=7984,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=7596 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=7972,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=8028 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=8296,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=8304 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=7072,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=8464 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=8712,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=8776 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=8948,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=9184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=9220,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=9228 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=9008,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=9020 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=9036,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=8896 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=9332,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=9132 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=9308,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=9572 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=9744,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=9712 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=9824,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=9848 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=10016,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=9976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=10184,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=10176 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=10296,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=10328 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=10160,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=10500 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=10492,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=10584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=10780,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=10768 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=10288,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=10280 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=11012,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=11036 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=11016,i,11968256285135155270,5060772352369288104,262144 --variations-seed-version --mojo-platform-channel-handle=11228 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff6bb1ceb8,0x7fff6bb1cec4,0x7fff6bb1ced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3192,i,12879129912290321773,18445907465914447572,262144 --variations-seed-version --mojo-platform-channel-handle=3176 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1960,i,12879129912290321773,18445907465914447572,262144 --variations-seed-version --mojo-platform-channel-handle=3284 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2300,i,12879129912290321773,18445907465914447572,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=4456,i,12879129912290321773,18445907465914447572,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=4400,i,12879129912290321773,18445907465914447572,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=5104,i,12879129912290321773,18445907465914447572,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=5136,i,12879129912290321773,18445907465914447572,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=5616,i,12879129912290321773,18445907465914447572,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4784,i,12879129912290321773,18445907465914447572,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5744,i,12879129912290321773,18445907465914447572,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5744,i,12879129912290321773,18445907465914447572,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff6bb1ceb8,0x7fff6bb1cec4,0x7fff6bb1ced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2944,i,11947088333952154142,5368392056430251095,262144 --variations-seed-version --mojo-platform-channel-handle=2940 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1928,i,11947088333952154142,5368392056430251095,262144 --variations-seed-version --mojo-platform-channel-handle=3224 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2240,i,11947088333952154142,5368392056430251095,262144 --variations-seed-version --mojo-platform-channel-handle=3336 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4424,i,11947088333952154142,5368392056430251095,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4424,i,11947088333952154142,5368392056430251095,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=my+computer+is+doing+weird+things+wtf+is+happenin+plz+halp

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4828,i,11947088333952154142,5368392056430251095,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=4820,i,11947088333952154142,5368392056430251095,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=5392,i,11947088333952154142,5368392056430251095,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=5368,i,11947088333952154142,5368392056430251095,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=5892,i,11947088333952154142,5368392056430251095,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5276,i,11947088333952154142,5368392056430251095,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff6bb1ceb8,0x7fff6bb1cec4,0x7fff6bb1ced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2288,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1892,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2300,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4440,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4440,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=minecraft+hax+download+no+virus

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4808,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=4832,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=5404,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=5380,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=5856,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5208,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5844,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6064,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6160,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=minecraft+hax+download+no+virus

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=6076,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5848,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=5880,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --no-appcompat-clear --field-trial-handle=6716,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+create+your+own+ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5976,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=6512,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --field-trial-handle=5300,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=batch+virus+download

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=6060,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=3056,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6876,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6992,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=6036,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=6908,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=6916 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6580,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=vinesauce+meme+collection

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=7444,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=7448 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=7572,i,16499214689235610052,11812349295645654967,262144 --variations-seed-version --mojo-platform-channel-handle=7548 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7fff6bb1ceb8,0x7fff6bb1cec4,0x7fff6bb1ced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2308,i,9186129961153959063,16710051496059333144,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1932,i,9186129961153959063,16710051496059333144,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=1860,i,9186129961153959063,16710051496059333144,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4412,i,9186129961153959063,16710051496059333144,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4412,i,9186129961153959063,16710051496059333144,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8

C:\Windows\SysWOW64\control.exe

"C:\Windows\System32\control.exe"

C:\Windows\explorer.exe

C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}

C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe

"C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"

C:\Windows\splwow64.exe

C:\Windows\splwow64.exe 12288

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=560,i,9186129961153959063,16710051496059333144,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2824,i,9186129961153959063,16710051496059333144,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4700,i,9186129961153959063,16710051496059333144,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:8

C:\Windows\SysWOW64\regedit.exe

"C:\Windows\System32\regedit.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4824,i,9186129961153959063,16710051496059333144,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4448,i,9186129961153959063,16710051496059333144,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=5332,i,9186129961153959063,16710051496059333144,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=5364,i,9186129961153959063,16710051496059333144,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5692,i,9186129961153959063,16710051496059333144,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5800,i,9186129961153959063,16710051496059333144,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --field-trial-handle=6088,i,9186129961153959063,16710051496059333144,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.118 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.80 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7fff6bb1ceb8,0x7fff6bb1cec4,0x7fff6bb1ced0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2264,i,6741231949680754102,10750982325516820505,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1872,i,6741231949680754102,10750982325516820505,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2484,i,6741231949680754102,10750982325516820505,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4400,i,6741231949680754102,10750982325516820505,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4400,i,6741231949680754102,10750982325516820505,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8

C:\Windows\SysWOW64\mspaint.exe

"C:\Windows\System32\mspaint.exe"

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService

C:\Windows\system32\LogonUI.exe

"LogonUI.exe" /flags:0x4 /state0:0xa3de5855 /state1:0x41c64e6d

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 64.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 apis.google.com udp
GB 142.250.200.14:443 apis.google.com tcp
US 8.8.8.8:53 202.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 195.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.206:443 clients2.google.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 any.run udp
US 104.22.49.74:443 any.run tcp
US 104.22.49.74:443 any.run tcp
US 8.8.8.8:53 cdn.paddle.com udp
US 8.8.8.8:53 www.gartner.com udp
US 172.66.43.196:443 cdn.paddle.com tcp
US 104.18.34.221:443 www.gartner.com tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 151.101.65.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 analytics.any.run udp
US 8.8.8.8:53 www.g2.com udp
US 8.8.8.8:53 counter.any.run udp
US 8.8.8.8:53 public.profitwell.com udp
US 104.16.190.41:443 www.g2.com tcp
FR 18.155.129.102:443 public.profitwell.com tcp
US 8.8.8.8:53 api-gb.any.run udp
US 104.22.48.74:443 api-gb.any.run tcp
US 8.8.8.8:53 74.49.22.104.in-addr.arpa udp
US 8.8.8.8:53 196.43.66.172.in-addr.arpa udp
US 8.8.8.8:53 221.34.18.104.in-addr.arpa udp
US 8.8.8.8:53 229.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 41.190.16.104.in-addr.arpa udp
US 104.18.34.221:443 www.gartner.com udp
US 104.16.190.41:443 www.g2.com tcp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 102.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 74.48.22.104.in-addr.arpa udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 2.169.217.172.in-addr.arpa udp
GB 142.250.200.3:443 www.google.co.uk tcp
BE 64.233.166.156:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 216.239.34.36:443 region1.analytics.google.com tcp
GB 142.250.187.226:443 googleads.g.doubleclick.net tcp
GB 142.250.200.3:443 www.google.co.uk udp
US 8.8.8.8:53 cllctr.any.run udp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 156.166.233.64.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 26.165.165.52.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 8.8.8.8:53 107.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 app.any.run udp
US 8.8.8.8:53 www.recaptcha.net udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 216.58.212.234:443 content-autofill.googleapis.com tcp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
US 104.22.48.74:443 app.any.run tcp
GB 142.250.200.3:443 www.google.co.uk udp
US 8.8.8.8:53 234.212.58.216.in-addr.arpa udp
GB 216.58.212.234:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 sentry.any.run udp
GB 142.250.200.3:443 www.google.co.uk udp
US 8.8.8.8:53 22.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 cxcs.microsoft.net udp
NL 23.62.61.72:443 www.bing.com tcp
BE 104.68.66.114:443 cxcs.microsoft.net tcp
US 8.8.8.8:53 72.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 114.66.68.104.in-addr.arpa udp
US 8.8.8.8:53 www.google.co.uk udp
GB 142.250.200.3:443 www.google.co.uk udp
GB 142.250.200.3:443 www.google.co.uk tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.3:443 www.google.co.uk udp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.187.238:443 consent.google.com tcp
GB 142.250.200.14:443 apis.google.com udp
GB 216.58.212.234:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 en.wikipedia.org udp
NL 185.15.59.224:443 en.wikipedia.org tcp
NL 185.15.59.224:443 en.wikipedia.org tcp
US 8.8.8.8:53 upload.wikimedia.org udp
US 8.8.8.8:53 login.wikimedia.org udp
US 8.8.8.8:53 meta.wikimedia.org udp
NL 185.15.59.240:443 upload.wikimedia.org tcp
NL 185.15.59.240:443 upload.wikimedia.org tcp
NL 185.15.59.240:443 upload.wikimedia.org tcp
US 8.8.8.8:53 224.59.15.185.in-addr.arpa udp
US 8.8.8.8:53 240.59.15.185.in-addr.arpa udp
US 8.8.8.8:53 intake-analytics.wikimedia.org udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 e2c28.gcp.gvt2.com udp
US 8.8.8.8:53 beacons3.gvt2.com udp
US 34.94.232.12:443 e2c28.gcp.gvt2.com tcp
GB 216.58.213.3:443 beacons3.gvt2.com tcp
GB 216.58.213.3:443 beacons3.gvt2.com udp
US 8.8.8.8:53 google.com udp
GB 142.250.178.14:443 google.com tcp
US 8.8.8.8:53 beacons.gvt2.com udp
GB 172.217.169.3:443 beacons.gvt2.com tcp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 105.193.132.51.in-addr.arpa udp
US 8.8.8.8:53 3.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 3.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 12.232.94.34.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
US 8.8.8.8:53 encrypted-vtbn0.gstatic.com udp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com tcp
US 8.8.8.8:53 14.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 archive.org udp
US 207.241.224.2:443 archive.org tcp
US 207.241.224.2:443 archive.org tcp
US 8.8.8.8:53 polyfill.archive.org udp
US 207.241.239.241:443 polyfill.archive.org tcp
US 8.8.8.8:53 2.224.241.207.in-addr.arpa udp
US 8.8.8.8:53 analytics.archive.org udp
US 207.241.225.195:443 analytics.archive.org tcp
US 207.241.225.195:443 analytics.archive.org tcp
US 207.241.225.195:443 analytics.archive.org tcp
GB 216.58.212.234:443 content-autofill.googleapis.com udp
US 207.241.225.195:443 analytics.archive.org tcp
US 8.8.8.8:53 241.239.241.207.in-addr.arpa udp
US 8.8.8.8:53 195.225.241.207.in-addr.arpa udp
US 8.8.8.8:53 sentry.archive.org udp
US 207.241.239.241:443 sentry.archive.org tcp
US 8.8.8.8:53 athena.archive.org udp
US 207.241.224.2:443 archive.org tcp
GB 172.217.169.3:443 beacons.gvt2.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
GB 216.58.212.234:443 content-autofill.googleapis.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.169.46:443 play.google.com udp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.109.133:443 avatars.githubusercontent.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 repository-images.githubusercontent.com udp
US 185.199.111.133:443 repository-images.githubusercontent.com tcp
US 8.8.8.8:53 133.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 154.110.199.185.in-addr.arpa udp
US 8.8.8.8:53 133.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 142.250.200.42:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 collector.github.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 140.82.112.21:443 collector.github.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 42.200.250.142.in-addr.arpa udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 21.112.82.140.in-addr.arpa udp
US 8.8.8.8:53 beacons2.gvt2.com udp
DE 142.251.143.35:443 beacons2.gvt2.com tcp
DE 142.251.143.35:443 beacons2.gvt2.com tcp
DE 142.251.143.35:443 beacons2.gvt2.com udp
US 8.8.8.8:53 35.143.251.142.in-addr.arpa udp
US 8.8.8.8:53 i.ytimg.com udp
GB 172.217.169.86:443 i.ytimg.com tcp
US 8.8.8.8:53 86.169.217.172.in-addr.arpa udp
GB 172.217.169.86:443 i.ytimg.com udp
US 8.8.8.8:53 encrypted-tbn2.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn3.gstatic.com udp
GB 172.217.169.46:443 play.google.com udp
US 207.241.239.241:443 sentry.archive.org tcp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 archive.org udp
US 8.8.8.8:53 polyfill.archive.org udp
GB 142.250.200.42:443 content-autofill.googleapis.com udp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 any.run udp
US 8.8.8.8:53 www.gartner.com udp
US 172.64.153.35:443 www.gartner.com udp
US 8.8.8.8:53 35.153.64.172.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 172.217.16.226:443 googleads.g.doubleclick.net udp
GB 142.250.200.3:443 www.google.co.uk udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
GB 142.250.180.14:443 encrypted-tbn2.gstatic.com udp
US 207.241.239.241:443 polyfill.archive.org tcp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
DE 142.251.143.35:443 beacons2.gvt2.com udp
US 8.8.8.8:53 polyfill.archive.org udp
US 8.8.8.8:53 e2c49.gcp.gvt2.com udp
US 35.211.148.231:443 e2c49.gcp.gvt2.com tcp
US 8.8.8.8:53 231.148.211.35.in-addr.arpa udp
GB 172.217.169.3:443 beacons.gvt2.com udp
US 8.8.8.8:53 ia800704.us.archive.org udp
US 207.241.230.74:443 ia800704.us.archive.org tcp
US 8.8.8.8:53 74.230.241.207.in-addr.arpa udp
GB 172.217.169.3:443 beacons.gvt2.com udp
US 8.8.8.8:53 archive.org udp
US 8.8.8.8:53 ia600704.us.archive.org udp
US 207.241.227.164:443 ia600704.us.archive.org tcp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 164.227.241.207.in-addr.arpa udp
US 8.8.8.8:53 161.19.199.152.in-addr.arpa udp
US 8.8.8.8:53 beacons3.gvt2.com udp
US 8.8.8.8:53 clients2.google.com udp
GB 216.58.213.3:443 beacons3.gvt2.com udp
GB 142.250.187.206:443 clients2.google.com udp
GB 142.250.187.206:443 clients2.google.com udp
US 8.8.8.8:53 api.edgeoffer.microsoft.com udp
US 8.8.8.8:53 api.edgeoffer.microsoft.com udp
IE 94.245.104.56:443 api.edgeoffer.microsoft.com tcp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 13.107.6.158:443 business.bing.com tcp
GB 142.250.187.228:443 google.co.ck tcp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 2.20.12.87:443 bzib.nelreports.net tcp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
GB 2.21.189.233:443 www.microsoft.com tcp
US 8.8.8.8:53 56.104.245.94.in-addr.arpa udp
US 8.8.8.8:53 228.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 164.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 67.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 87.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
GB 172.165.69.228:443 nav-edge.smartscreen.microsoft.com tcp
GB 172.165.69.228:443 nav-edge.smartscreen.microsoft.com tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 data-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 data-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 233.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 228.69.165.172.in-addr.arpa udp
US 8.8.8.8:53 edgestatic.azureedge.net udp
US 8.8.8.8:53 edgestatic.azureedge.net udp
US 8.8.8.8:53 c.s-microsoft.com udp
US 8.8.8.8:53 c.s-microsoft.com udp
US 13.107.246.64:443 edgestatic.azureedge.net tcp
US 13.107.246.64:443 edgestatic.azureedge.net tcp
US 13.107.246.64:443 edgestatic.azureedge.net tcp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 update.googleapis.com udp
US 8.8.8.8:53 update.googleapis.com udp
US 8.8.8.8:53 edge-mobile-static.azureedge.net udp
US 8.8.8.8:53 edge-mobile-static.azureedge.net udp
NL 23.62.61.129:443 www.bing.com tcp
GB 216.58.204.67:443 update.googleapis.com tcp
US 13.107.246.64:443 edge-mobile-static.azureedge.net tcp
US 8.8.8.8:53 129.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 edge-consumer-static.azureedge.net udp
US 8.8.8.8:53 edge-consumer-static.azureedge.net udp
US 8.8.8.8:53 edge-consumer-static.azureedge.net udp
US 13.107.253.64:443 edge-consumer-static.azureedge.net tcp
US 13.107.253.64:443 edge-consumer-static.azureedge.net tcp
US 8.8.8.8:53 64.253.107.13.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com udp
GB 142.250.187.206:443 clients2.google.com udp
GB 142.250.187.206:443 clients2.google.com tcp
US 8.8.8.8:53 clients2.googleusercontent.com udp
GB 172.217.16.225:443 clients2.googleusercontent.com tcp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 api.edgeoffer.microsoft.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
IE 94.245.104.56:443 api.edgeoffer.microsoft.com tcp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 13.107.6.158:443 business.bing.com tcp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 2.20.12.87:443 bzib.nelreports.net tcp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
NL 23.62.61.129:443 www.bing.com tcp
US 8.8.8.8:53 edge-consumer-static.azureedge.net udp
US 8.8.8.8:53 edge-consumer-static.azureedge.net udp
US 13.107.246.64:443 edge-consumer-static.azureedge.net tcp
US 8.8.8.8:53 api.edgeoffer.microsoft.com udp
US 8.8.8.8:53 api.edgeoffer.microsoft.com udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
IE 94.245.104.56:443 api.edgeoffer.microsoft.com tcp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:443 google.co.ck udp
GB 172.165.69.228:443 nav-edge.smartscreen.microsoft.com tcp
GB 172.165.69.228:443 nav-edge.smartscreen.microsoft.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 www.google.co.ck udp
US 2.20.12.101:443 bzib.nelreports.net tcp
GB 216.58.213.3:443 www.google.co.ck tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 101.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 www.google.co.ck udp
GB 216.58.213.3:443 www.google.co.ck udp
NL 23.62.61.194:443 www.bing.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 194.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:443 google.co.ck tcp
GB 216.58.213.3:443 www.google.co.ck tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 216.58.213.3:443 www.google.co.ck tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 motherboard.vice.com udp
US 8.8.8.8:53 motherboard.vice.com udp
US 8.8.8.8:53 motherboard.vice.com udp
US 151.101.2.133:80 motherboard.vice.com tcp
US 151.101.2.133:80 motherboard.vice.com tcp
US 8.8.8.8:53 motherboard.vice.com udp
US 8.8.8.8:53 motherboard.vice.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 151.101.194.133:443 motherboard.vice.com tcp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 133.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 133.194.101.151.in-addr.arpa udp
US 8.8.8.8:53 vice-web-statics-cdn.vice.com udp
US 8.8.8.8:53 vice-web-statics-cdn.vice.com udp
US 8.8.8.8:53 htlbid.com udp
US 8.8.8.8:53 htlbid.com udp
US 8.8.8.8:53 video-images.vice.com udp
US 8.8.8.8:53 video-images.vice.com udp
US 151.101.130.133:443 video-images.vice.com tcp
US 151.101.130.133:443 video-images.vice.com tcp
FR 52.84.174.34:443 htlbid.com tcp
US 8.8.8.8:53 images.vice.com udp
US 8.8.8.8:53 images.vice.com udp
US 8.8.8.8:53 133.130.101.151.in-addr.arpa udp
US 8.8.8.8:53 34.174.84.52.in-addr.arpa udp
US 8.8.8.8:53 oembed.vice.com udp
US 8.8.8.8:53 oembed.vice.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 native.sharethrough.com udp
US 8.8.8.8:53 native.sharethrough.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 vice-dev-web-statics-cdn.vice.com udp
US 8.8.8.8:53 vice-dev-web-statics-cdn.vice.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 vice-dev-web-statics-cdn.vice.com udp
US 8.8.8.8:53 api.amplitude.com udp
US 8.8.8.8:53 api.amplitude.com udp
US 8.8.8.8:53 vice-sundry-assets-cdn.vice.com udp
US 8.8.8.8:53 vice-sundry-assets-cdn.vice.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 sourcepoint.mgr.consensu.org udp
US 8.8.8.8:53 sourcepoint.mgr.consensu.org udp
FR 52.222.169.121:443 native.sharethrough.com tcp
US 52.33.83.47:443 api.amplitude.com tcp
US 8.8.8.8:53 www.npttech.com udp
US 8.8.8.8:53 www.npttech.com udp
US 8.8.8.8:53 cdn.privacy-mgmt.com udp
US 8.8.8.8:53 cdn.privacy-mgmt.com udp
US 104.21.66.34:443 www.npttech.com udp
US 18.245.199.31:443 cdn.privacy-mgmt.com tcp
US 8.8.8.8:53 sourcepoint.mgr.consensu.org udp
US 8.8.8.8:53 oembed.vice.com udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 sdk.snapkit.com udp
US 8.8.8.8:53 sdk.snapkit.com udp
US 8.8.8.8:53 trinitymedia.ai udp
US 8.8.8.8:53 trinitymedia.ai udp
US 35.170.229.171:443 trinitymedia.ai tcp
FR 13.249.9.109:443 sdk.snapkit.com tcp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 121.169.222.52.in-addr.arpa udp
US 8.8.8.8:53 47.83.33.52.in-addr.arpa udp
US 8.8.8.8:53 34.66.21.104.in-addr.arpa udp
US 8.8.8.8:53 31.199.245.18.in-addr.arpa udp
US 8.8.8.8:53 static.anonymised.io udp
US 8.8.8.8:53 static.anonymised.io udp
US 18.245.199.31:443 cdn.privacy-mgmt.com tcp
US 8.8.8.8:53 segment-data.zqtk.net udp
US 8.8.8.8:53 segment-data.zqtk.net udp
US 8.8.8.8:53 secure.quantserve.com udp
US 8.8.8.8:53 secure.quantserve.com udp
US 8.8.8.8:53 tag.aticdn.net udp
US 8.8.8.8:53 tag.aticdn.net udp
US 34.107.217.107:443 static.anonymised.io tcp
DE 91.228.74.244:443 secure.quantserve.com tcp
FR 52.222.201.95:443 tag.aticdn.net tcp
FR 172.234.63.227:443 segment-data.zqtk.net tcp
FR 172.234.63.227:443 segment-data.zqtk.net tcp
US 8.8.8.8:53 api.snapkit.com udp
US 8.8.8.8:53 api.snapkit.com udp
US 8.8.8.8:53 silo50.p7cloud.net udp
US 8.8.8.8:53 silo50.p7cloud.net udp
US 8.8.8.8:53 cdn.confiant-integrations.net udp
US 8.8.8.8:53 cdn.confiant-integrations.net udp
US 8.8.8.8:53 launchpad-wrapper.privacymanager.io udp
US 8.8.8.8:53 launchpad-wrapper.privacymanager.io udp
US 8.8.8.8:53 scdn.cxense.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 oembed.vice.com udp
FR 18.155.129.54:443 launchpad-wrapper.privacymanager.io tcp
BE 104.68.95.245:443 scdn.cxense.com tcp
US 18.245.194.122:443 c.amazon-adsystem.com tcp
FR 3.162.38.92:443 silo50.p7cloud.net tcp
US 35.190.43.134:443 api.snapkit.com tcp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 34.107.217.107:443 static.anonymised.io udp
US 172.64.144.166:443 cdn.confiant-integrations.net udp
GB 172.217.16.238:443 www.youtube.com tcp
US 8.8.8.8:53 logws1330.ati-host.net udp
US 8.8.8.8:53 logws1330.ati-host.net udp
US 8.8.8.8:53 rules.quantcount.com udp
US 8.8.8.8:53 rules.quantcount.com udp
FR 52.84.180.181:443 logws1330.ati-host.net tcp
FR 18.244.28.87:443 rules.quantcount.com tcp
US 8.8.8.8:53 live.primis.tech udp
US 8.8.8.8:53 material.anonymised.io udp
US 8.8.8.8:53 material.anonymised.io udp
US 8.8.8.8:53 aegis.anonymised.io udp
US 8.8.8.8:53 aegis.anonymised.io udp
FR 52.222.201.106:443 live.primis.tech tcp
US 34.117.250.57:443 material.anonymised.io tcp
US 34.107.217.107:443 aegis.anonymised.io tcp
US 35.190.43.134:443 api.snapkit.com udp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 172.217.16.238:443 www.youtube.com udp
US 8.8.8.8:53 vd.trinitymedia.ai udp
US 8.8.8.8:53 vd.trinitymedia.ai udp
US 34.107.217.107:443 aegis.anonymised.io udp
US 34.117.250.57:443 material.anonymised.io udp
GB 172.217.169.86:443 i.ytimg.com tcp
US 18.245.194.122:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 launchpad.privacymanager.io udp
US 8.8.8.8:53 launchpad.privacymanager.io udp
US 3.164.163.14:443 launchpad.privacymanager.io tcp
GB 143.244.38.136:443 vd.trinitymedia.ai tcp
US 8.8.8.8:53 cdn.privacy-mgmt.com udp
US 8.8.8.8:53 cdn.privacy-mgmt.com udp
US 8.8.8.8:53 cdn.privacy-mgmt.com udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 yield-manager.browsiprod.com udp
US 8.8.8.8:53 yield-manager.browsiprod.com udp
US 8.8.8.8:53 silo50.p7cloud.net udp
US 8.8.8.8:53 silo50.p7cloud.net udp
US 8.8.8.8:53 www.vice.com udp
US 18.245.199.31:443 cdn.privacy-mgmt.com tcp
FR 3.162.38.107:443 yield-manager.browsiprod.com tcp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
FR 52.222.201.106:443 live.primis.tech udp
US 8.8.8.8:53 api.cxense.com udp
US 8.8.8.8:53 api.cxense.com udp
US 8.8.8.8:53 trinitymedia.ai udp
US 8.8.8.8:53 trinitymedia.ai udp
US 8.8.8.8:53 trinitymedia.ai udp
US 8.8.8.8:53 www.vice.com udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com tcp
FR 3.162.38.58:443 silo50.p7cloud.net tcp
DE 167.235.124.23:443 api.cxense.com tcp
US 8.8.8.8:53 geo.privacymanager.io udp
US 8.8.8.8:53 geo.privacymanager.io udp
US 35.170.229.171:443 trinitymedia.ai tcp
US 18.245.199.18:443 geo.privacymanager.io tcp
US 8.8.8.8:53 cdn.browsiprod.com udp
FR 18.155.129.106:443 cdn.browsiprod.com tcp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
US 8.8.8.8:53 events.browsiprod.com udp
US 8.8.8.8:53 events.browsiprod.com udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 142.250.200.2:443 pubads.g.doubleclick.net udp
US 44.240.5.14:443 events.browsiprod.com tcp
GB 142.250.200.10:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 109.9.249.13.in-addr.arpa udp
US 8.8.8.8:53 171.229.170.35.in-addr.arpa udp
US 8.8.8.8:53 107.217.107.34.in-addr.arpa udp
US 8.8.8.8:53 95.201.222.52.in-addr.arpa udp
US 8.8.8.8:53 244.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 227.63.234.172.in-addr.arpa udp
US 8.8.8.8:53 166.144.64.172.in-addr.arpa udp
US 8.8.8.8:53 134.43.190.35.in-addr.arpa udp
US 8.8.8.8:53 54.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 122.194.245.18.in-addr.arpa udp
US 8.8.8.8:53 92.38.162.3.in-addr.arpa udp
US 8.8.8.8:53 245.95.68.104.in-addr.arpa udp
US 8.8.8.8:53 238.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 181.180.84.52.in-addr.arpa udp
US 8.8.8.8:53 87.28.244.18.in-addr.arpa udp
US 8.8.8.8:53 106.201.222.52.in-addr.arpa udp
US 8.8.8.8:53 57.250.117.34.in-addr.arpa udp
US 8.8.8.8:53 136.38.244.143.in-addr.arpa udp
US 8.8.8.8:53 14.163.164.3.in-addr.arpa udp
US 8.8.8.8:53 107.38.162.3.in-addr.arpa udp
US 8.8.8.8:53 58.38.162.3.in-addr.arpa udp
US 8.8.8.8:53 23.124.235.167.in-addr.arpa udp
US 8.8.8.8:53 18.199.245.18.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 video.primis.tech udp
US 8.8.8.8:53 video.primis.tech udp
US 8.8.8.8:53 tag.bounceexchange.com udp
US 8.8.8.8:53 tag.bounceexchange.com udp
US 8.8.8.8:53 ams-pageview-public.s3.amazonaws.com udp
US 8.8.8.8:53 ams-pageview-public.s3.amazonaws.com udp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 yt3.ggpht.com udp
US 8.8.8.8:53 yt3.ggpht.com udp
GB 142.250.200.2:443 pubads.g.doubleclick.net udp
GB 142.250.200.10:443 jnn-pa.googleapis.com udp
GB 216.58.204.66:443 googleads.g.doubleclick.net udp
US 52.216.137.148:443 ams-pageview-public.s3.amazonaws.com tcp
GB 142.250.187.196:443 www.google.com udp
US 34.120.253.250:443 tag.bounceexchange.com tcp
GB 142.250.180.1:443 yt3.ggpht.com tcp
FR 52.222.149.38:443 video.primis.tech tcp
GB 216.58.213.6:443 static.doubleclick.net tcp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 rtb.primis.tech udp
US 8.8.8.8:53 rtb.primis.tech udp
US 44.240.5.14:443 events.browsiprod.com tcp
FR 18.155.129.106:443 cdn.browsiprod.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
NL 185.64.189.112:443 hbopenbid.pubmatic.com tcp
US 8.8.8.8:53 assets.bounceexchange.com udp
US 8.8.8.8:53 assets.bounceexchange.com udp
US 8.8.8.8:53 events.bouncex.net udp
US 8.8.8.8:53 events.bouncex.net udp
US 8.8.8.8:53 data.cdnbasket.net udp
US 8.8.8.8:53 data.cdnbasket.net udp
GB 172.217.169.46:443 play.google.com tcp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 pd.cdnwidget.com udp
US 8.8.8.8:53 pd.cdnwidget.com udp
US 8.8.8.8:53 api.bounceexchange.com udp
US 8.8.8.8:53 api.bounceexchange.com udp
US 8.8.8.8:53 ids.cdnwidget.com udp
US 8.8.8.8:53 ids.cdnwidget.com udp
US 8.8.8.8:53 view.cdnbasket.net udp
US 8.8.8.8:53 view.cdnbasket.net udp
US 8.8.8.8:53 page.cdnbasket.net udp
US 8.8.8.8:53 page.cdnbasket.net udp
US 34.149.130.207:443 pd.cdnwidget.com tcp
US 34.111.8.32:443 api.bounceexchange.com tcp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 34.98.72.95:443 assets.bounceexchange.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 172.217.169.46:443 play.google.com udp
US 34.98.72.95:443 assets.bounceexchange.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 ai.browsiprod.com udp
US 8.8.8.8:53 ai.browsiprod.com udp
US 8.8.8.8:53 demand-engine.browsiprod.com udp
US 8.8.8.8:53 demand-engine.browsiprod.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
US 3.164.163.129:443 demand-engine.browsiprod.com tcp
FR 52.222.201.76:443 ai.browsiprod.com tcp
US 8.8.8.8:53 106.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 250.253.120.34.in-addr.arpa udp
US 8.8.8.8:53 1.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 6.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 38.149.222.52.in-addr.arpa udp
US 8.8.8.8:53 14.5.240.44.in-addr.arpa udp
US 8.8.8.8:53 148.137.216.52.in-addr.arpa udp
US 8.8.8.8:53 112.189.64.185.in-addr.arpa udp
US 8.8.8.8:53 150.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 207.130.149.34.in-addr.arpa udp
US 8.8.8.8:53 32.8.111.34.in-addr.arpa udp
US 8.8.8.8:53 95.72.98.34.in-addr.arpa udp
US 8.8.8.8:53 ua.p7cloud.net udp
US 8.8.8.8:53 ua.p7cloud.net udp
US 8.8.8.8:53 location.p7cloud.net udp
US 8.8.8.8:53 location.p7cloud.net udp
US 8.8.8.8:53 d2tbszkvx1p56e.cloudfront.net udp
US 8.8.8.8:53 d2tbszkvx1p56e.cloudfront.net udp
FR 99.86.91.45:443 location.p7cloud.net tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 3.164.160.76:443 d2tbszkvx1p56e.cloudfront.net tcp
US 3.165.113.125:443 ua.p7cloud.net tcp
US 18.245.199.156:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 vd.trinitymedia.ai udp
US 8.8.8.8:53 vd.trinitymedia.ai udp
GB 143.244.38.136:443 vd.trinitymedia.ai tcp
GB 143.244.38.136:443 vd.trinitymedia.ai tcp
US 18.245.194.122:443 c.amazon-adsystem.com tcp
GB 143.244.38.136:443 vd.trinitymedia.ai tcp
US 18.245.199.156:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 js-agent.newrelic.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 www.vice.com udp
US 162.247.243.39:443 js-agent.newrelic.com tcp
US 162.247.243.39:443 js-agent.newrelic.com tcp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 id.crwdcntrl.net udp
GB 2.21.189.68:443 eus.rubiconproject.com tcp
GB 2.21.189.68:443 eus.rubiconproject.com tcp
GB 2.21.188.239:443 ads.pubmatic.com tcp
GB 2.21.188.239:443 ads.pubmatic.com tcp
IE 63.33.74.9:443 id.crwdcntrl.net tcp
US 34.120.133.55:443 api.rlcdn.com tcp
US 8.8.8.8:53 bam.nr-data.net udp
US 8.8.8.8:53 bam.nr-data.net udp
US 162.247.243.29:443 bam.nr-data.net tcp
US 8.8.8.8:53 129.163.164.3.in-addr.arpa udp
US 8.8.8.8:53 76.201.222.52.in-addr.arpa udp
US 8.8.8.8:53 45.91.86.99.in-addr.arpa udp
US 8.8.8.8:53 76.160.164.3.in-addr.arpa udp
US 8.8.8.8:53 125.113.165.3.in-addr.arpa udp
US 8.8.8.8:53 39.243.247.162.in-addr.arpa udp
US 8.8.8.8:53 156.199.245.18.in-addr.arpa udp
US 8.8.8.8:53 68.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 firebaseremoteconfig.googleapis.com udp
US 8.8.8.8:53 firebaseremoteconfig.googleapis.com udp
US 8.8.8.8:53 depart.trinitymedia.ai udp
US 8.8.8.8:53 depart.trinitymedia.ai udp
US 8.8.8.8:53 token.rubiconproject.com udp
US 8.8.8.8:53 token.rubiconproject.com udp
DE 52.29.22.16:443 depart.trinitymedia.ai tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 8.8.8.8:53 239.188.21.2.in-addr.arpa udp
US 8.8.8.8:53 55.133.120.34.in-addr.arpa udp
US 8.8.8.8:53 9.74.33.63.in-addr.arpa udp
US 8.8.8.8:53 74.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 29.243.247.162.in-addr.arpa udp
US 8.8.8.8:53 16.22.29.52.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 firebaselogging.googleapis.com udp
US 8.8.8.8:53 firebaselogging.googleapis.com udp
US 8.8.8.8:53 c6c1949ce56c5b86caef71b43758eb47.safeframe.googlesyndication.com udp
US 8.8.8.8:53 c6c1949ce56c5b86caef71b43758eb47.safeframe.googlesyndication.com udp
US 8.8.8.8:53 c6c1949ce56c5b86caef71b43758eb47.safeframe.googlesyndication.com udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 static.chartbeat.com udp
US 8.8.8.8:53 static.chartbeat.com udp
GB 172.217.169.65:443 c6c1949ce56c5b86caef71b43758eb47.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 assets.bounceexchange.com udp
US 8.8.8.8:53 assets.bounceexchange.com udp
US 8.8.8.8:53 assets.bounceexchange.com udp
US 8.8.8.8:53 www.vice.com udp
US 3.165.118.168:443 static.chartbeat.com tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 34.98.72.95:443 assets.bounceexchange.com tcp
US 8.8.8.8:53 hb.minutemedia-prebid.com udp
US 8.8.8.8:53 hb.minutemedia-prebid.com udp
US 34.98.72.95:443 assets.bounceexchange.com tcp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 krk2.kargo.com udp
US 8.8.8.8:53 krk2.kargo.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 s.seedtag.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 sc-static.net udp
US 8.8.8.8:53 sc-static.net udp
US 34.120.63.153:443 prebid.media.net tcp
US 34.120.63.153:443 prebid.media.net tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
US 8.8.8.8:53 static.ads-twitter.com udp
US 8.8.8.8:53 static.ads-twitter.com udp
US 8.8.8.8:53 cdn-magiclinks.trackonomics.net udp
US 8.8.8.8:53 cdn-magiclinks.trackonomics.net udp
US 8.8.8.8:53 ak.sail-horizon.com udp
US 8.8.8.8:53 ak.sail-horizon.com udp
US 8.8.8.8:53 s.skimresources.com udp
US 8.8.8.8:53 s.skimresources.com udp
US 8.8.8.8:53 analytics.tiktok.com udp
US 8.8.8.8:53 analytics.tiktok.com udp
US 8.8.8.8:53 g2.gumgum.com udp
US 8.8.8.8:53 g2.gumgum.com udp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
IE 34.250.107.231:443 hb.minutemedia-prebid.com tcp
IE 34.250.107.231:443 hb.minutemedia-prebid.com tcp
DE 3.64.142.120:443 krk2.kargo.com tcp
US 104.22.31.209:443 prebid.smilewanted.com tcp
US 104.22.31.209:443 prebid.smilewanted.com tcp
NL 147.75.84.158:443 prebid.a-mo.net tcp
US 35.186.253.211:443 rtb.openx.net tcp
US 34.149.50.64:443 s.seedtag.com tcp
GB 163.70.147.23:443 connect.facebook.net tcp
US 18.245.199.77:443 sb.scorecardresearch.com tcp
US 18.245.199.77:443 sb.scorecardresearch.com tcp
ES 108.157.98.41:443 hb.yellowblue.io tcp
FR 3.162.38.245:443 sc-static.net tcp
US 151.101.188.157:443 static.ads-twitter.com tcp
FR 18.244.28.113:443 cdn-magiclinks.trackonomics.net tcp
US 151.101.1.91:443 s.skimresources.com tcp
IE 99.80.191.128:443 g2.gumgum.com tcp
NL 23.62.61.107:443 analytics.tiktok.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
FR 52.222.169.82:443 ak.sail-horizon.com tcp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 btloader.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 d2zue0pgsssbc6.cloudfront.net udp
US 8.8.8.8:53 d2zue0pgsssbc6.cloudfront.net udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 8.8.8.8:53 ping.chartbeat.net udp
US 8.8.8.8:53 ping.chartbeat.net udp
US 104.22.74.216:443 btloader.com tcp
US 8.8.8.8:53 t.co udp
US 8.8.8.8:53 t.co udp
US 8.8.8.8:53 analytics.twitter.com udp
US 8.8.8.8:53 analytics.twitter.com udp
US 8.8.8.8:53 d2zue0pgsssbc6.cloudfront.net udp
US 3.219.253.44:443 ping.chartbeat.net tcp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
US 104.244.42.131:443 analytics.twitter.com tcp
US 8.8.8.8:53 d2zue0pgsssbc6.cloudfront.net udp
US 8.8.8.8:53 d2zue0pgsssbc6.cloudfront.net udp
PL 93.184.221.165:443 t.co tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.vice.com udp
PL 93.184.221.165:443 t.co tcp
US 104.244.42.131:443 analytics.twitter.com tcp
US 8.8.8.8:53 invusion.vice.technology udp
US 8.8.8.8:53 invusion.vice.technology udp
US 8.8.8.8:53 cdn.doubleverify.com udp
US 8.8.8.8:53 cdn.doubleverify.com udp
US 104.21.4.24:443 invusion.vice.technology udp
US 8.8.8.8:53 api.sail-personalize.com udp
US 8.8.8.8:53 api.sail-personalize.com udp
US 8.8.8.8:53 168.118.165.3.in-addr.arpa udp
US 8.8.8.8:53 r.skimresources.com udp
BE 23.14.90.107:443 cdn.doubleverify.com tcp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 209.31.22.104.in-addr.arpa udp
US 8.8.8.8:53 211.253.186.35.in-addr.arpa udp
US 8.8.8.8:53 23.147.70.163.in-addr.arpa udp
US 8.8.8.8:53 64.50.149.34.in-addr.arpa udp
US 8.8.8.8:53 231.107.250.34.in-addr.arpa udp
US 8.8.8.8:53 158.84.75.147.in-addr.arpa udp
US 8.8.8.8:53 120.142.64.3.in-addr.arpa udp
US 8.8.8.8:53 77.199.245.18.in-addr.arpa udp
US 8.8.8.8:53 157.188.101.151.in-addr.arpa udp
US 8.8.8.8:53 91.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 tr.snapchat.com udp
US 8.8.8.8:53 tr.snapchat.com udp
US 8.8.8.8:53 tr.snapchat.com udp
US 8.8.8.8:53 www.vice.com udp
US 35.190.59.101:443 r.skimresources.com tcp
US 99.83.154.140:443 api.sail-personalize.com tcp
US 35.190.43.134:443 tr.snapchat.com tcp
US 8.8.8.8:53 t.skimresources.com udp
US 8.8.8.8:53 t.skimresources.com udp
US 35.201.67.47:443 t.skimresources.com tcp
US 8.8.8.8:53 p.skimresources.com udp
US 8.8.8.8:53 p.skimresources.com udp
US 8.8.8.8:53 107.61.62.23.in-addr.arpa udp
GB 163.70.147.23:443 connect.facebook.net udp
US 8.8.8.8:53 139.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 tr.snapchat.com udp
US 8.8.8.8:53 tr.snapchat.com udp
US 35.190.91.160:443 p.skimresources.com tcp
US 35.190.91.160:443 p.skimresources.com tcp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 api.btloader.com udp
US 35.190.43.134:443 tr.snapchat.com tcp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 ad-delivery.net udp
US 130.211.23.194:443 api.btloader.com tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 35.201.67.47:443 t.skimresources.com udp
US 8.8.8.8:53 113.28.244.18.in-addr.arpa udp
US 8.8.8.8:53 tr6.snapchat.com udp
US 8.8.8.8:53 82.169.222.52.in-addr.arpa udp
US 8.8.8.8:53 128.191.80.99.in-addr.arpa udp
US 8.8.8.8:53 41.98.157.108.in-addr.arpa udp
US 8.8.8.8:53 14.24.17.104.in-addr.arpa udp
US 8.8.8.8:53 216.74.22.104.in-addr.arpa udp
US 8.8.8.8:53 131.42.244.104.in-addr.arpa udp
US 8.8.8.8:53 165.221.184.93.in-addr.arpa udp
US 8.8.8.8:53 44.253.219.3.in-addr.arpa udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 www.facebook.com udp
GB 163.70.147.35:443 www.facebook.com tcp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 tps.doubleverify.com udp
US 8.8.8.8:53 tps.doubleverify.com udp
US 35.190.43.134:443 tr6.snapchat.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 34.111.8.32:443 api.bounceexchange.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 www.vice.com udp
US 172.64.149.180:443 js-sec.indexww.com tcp
US 8.8.8.8:53 contextual-analytics.wunderkind.co udp
US 8.8.8.8:53 contextual-analytics.wunderkind.co udp
US 34.111.8.32:443 contextual-analytics.wunderkind.co tcp
US 8.8.8.8:53 www.googletagservices.com udp
US 8.8.8.8:53 www.googletagservices.com udp
GB 142.250.178.2:443 www.googletagservices.com tcp
US 8.8.8.8:53 24.4.21.104.in-addr.arpa udp
US 8.8.8.8:53 107.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 101.59.190.35.in-addr.arpa udp
US 8.8.8.8:53 47.67.201.35.in-addr.arpa udp
US 8.8.8.8:53 140.154.83.99.in-addr.arpa udp
US 8.8.8.8:53 160.91.190.35.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 70.3.26.104.in-addr.arpa udp
US 8.8.8.8:53 6.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 35.147.70.163.in-addr.arpa udp
US 8.8.8.8:53 5.44.211.130.in-addr.arpa udp
US 8.8.8.8:53 180.149.64.172.in-addr.arpa udp
FR 52.222.149.38:443 video.primis.tech udp
GB 142.250.178.2:443 www.googletagservices.com udp
US 8.8.8.8:53 fw.adsafeprotected.com udp
US 8.8.8.8:53 fw.adsafeprotected.com udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 s0.2mdn.net udp
IE 52.212.217.255:443 fw.adsafeprotected.com tcp
GB 216.58.204.70:443 s0.2mdn.net tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 static.adsafeprotected.com udp
US 8.8.8.8:53 static.adsafeprotected.com udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 www.vice.com udp
FR 18.164.52.51:443 static.adsafeprotected.com tcp
GB 216.58.204.70:443 s0.2mdn.net tcp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
GB 142.250.187.226:443 googleads4.g.doubleclick.net tcp
US 8.8.8.8:53 check.analytics.rlcdn.com udp
US 8.8.8.8:53 check.analytics.rlcdn.com udp
FR 99.86.91.90:443 check.analytics.rlcdn.com tcp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 70.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 255.217.212.52.in-addr.arpa udp
US 8.8.8.8:53 dt.adsafeprotected.com udp
US 8.8.8.8:53 dt.adsafeprotected.com udp
US 8.8.8.8:53 51.52.164.18.in-addr.arpa udp
US 3.208.78.55:443 dt.adsafeprotected.com tcp
GB 216.58.204.70:443 s0.2mdn.net udp
US 3.208.78.55:443 dt.adsafeprotected.com tcp
GB 142.250.187.226:443 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 synchrobox.adswizz.com udp
US 8.8.8.8:53 synchrobox.adswizz.com udp
US 8.8.8.8:53 playerservices.live.streamtheworld.com udp
US 8.8.8.8:53 playerservices.live.streamtheworld.com udp
US 8.8.8.8:53 play.adtonos.com udp
US 8.8.8.8:53 play.adtonos.com udp
IE 54.217.151.229:443 synchrobox.adswizz.com tcp
IE 54.217.151.229:443 synchrobox.adswizz.com tcp
US 34.111.8.32:443 contextual-analytics.wunderkind.co udp
US 34.111.8.32:443 contextual-analytics.wunderkind.co udp
FR 192.173.31.109:443 playerservices.live.streamtheworld.com tcp
GB 51.89.155.117:443 play.adtonos.com tcp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 c1.adform.net udp
US 8.8.8.8:53 c1.adform.net udp
US 8.8.8.8:53 c1.adform.net udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 hashtaglabs-d.openx.net udp
US 8.8.8.8:53 hashtaglabs-d.openx.net udp
US 8.8.8.8:53 hashtaglabs-d.openx.net udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 csync.smilewanted.com udp
US 8.8.8.8:53 csync.smilewanted.com udp
US 8.8.8.8:53 csync.smilewanted.com udp
US 8.8.8.8:53 www.vice.com udp
DK 37.157.2.229:443 c1.adform.net tcp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 www.vice.com udp
US 34.98.64.218:443 hashtaglabs-d.openx.net tcp
US 104.22.30.209:443 csync.smilewanted.com tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 cs.seedtag.com udp
US 8.8.8.8:53 cs.seedtag.com udp
US 8.8.8.8:53 cs.seedtag.com udp
US 8.8.8.8:53 www.vice.com udp
GB 2.21.188.27:443 contextual.media.net tcp
NL 147.75.84.158:443 prebid.a-mo.net tcp
US 8.8.8.8:53 sploit-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 sploit-edge.smartscreen.microsoft.com udp
DK 37.157.2.229:443 c1.adform.net tcp
US 104.16.183.87:443 cs.seedtag.com tcp
US 34.98.64.218:443 hashtaglabs-d.openx.net tcp
GB 2.21.188.27:443 contextual.media.net tcp
US 8.8.8.8:53 trx-hub.com udp
US 8.8.8.8:53 trx-hub.com udp
GB 20.58.112.186:443 sploit-edge.smartscreen.microsoft.com tcp
US 18.245.175.12:443 trx-hub.com tcp
US 34.98.64.218:443 hashtaglabs-d.openx.net udp
US 8.8.8.8:53 90.91.86.99.in-addr.arpa udp
US 8.8.8.8:53 55.78.208.3.in-addr.arpa udp
US 8.8.8.8:53 109.31.173.192.in-addr.arpa udp
US 8.8.8.8:53 229.151.217.54.in-addr.arpa udp
US 8.8.8.8:53 117.155.89.51.in-addr.arpa udp
US 8.8.8.8:53 229.2.157.37.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 209.30.22.104.in-addr.arpa udp
FR 192.173.31.109:443 playerservices.live.streamtheworld.com tcp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 cs.seedtag.com udp
US 8.8.8.8:53 tpsc-ew1.doubleverify.com udp
US 8.8.8.8:53 tpsc-ew1.doubleverify.com udp
US 8.8.8.8:53 csync.smartadserver.com udp
US 8.8.8.8:53 csync.smartadserver.com udp
US 8.8.8.8:53 csync.smartadserver.com udp
US 8.8.8.8:53 cs.seedtag.com udp
ES 23.60.223.190:443 secure-assets.rubiconproject.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
ES 23.60.223.190:443 secure-assets.rubiconproject.com tcp
BE 23.14.90.72:443 csync.smartadserver.com tcp
BE 23.14.90.72:443 csync.smartadserver.com tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 cs.seedtag.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 cs.seedtag.com udp
US 67.202.105.23:443 ssc-cms.33across.com tcp
US 67.202.105.23:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 87.183.16.104.in-addr.arpa udp
US 8.8.8.8:53 27.188.21.2.in-addr.arpa udp
US 8.8.8.8:53 186.112.58.20.in-addr.arpa udp
US 8.8.8.8:53 12.175.245.18.in-addr.arpa udp
US 8.8.8.8:53 190.223.60.23.in-addr.arpa udp
US 8.8.8.8:53 72.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 cs.seedtag.com udp
DE 18.158.98.19:443 match.sharethrough.com tcp
DE 18.158.98.19:443 match.sharethrough.com tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 www.vice.com udp
US 34.230.93.105:443 cs-server-s2s.yellowblue.io tcp
US 34.98.64.218:443 u.openx.net tcp
US 34.120.63.153:443 prebid.media.net udp
US 172.64.151.101:443 htlb.casalemedia.com udp
US 35.186.253.211:443 rtb.openx.net udp
US 8.8.8.8:53 s.seedtag.com udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 csync.loopme.me udp
US 8.8.8.8:53 csync.loopme.me udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 mb9eo.publishers.tremorhub.com udp
US 34.149.50.64:443 s.seedtag.com udp
US 8.8.8.8:53 s.seedtag.com udp
US 8.8.8.8:53 s.seedtag.com udp
US 52.223.40.198:443 match.adsrvr.org tcp
US 3.223.171.233:443 mb9eo.publishers.tremorhub.com tcp
NL 35.214.130.0:443 csync.loopme.me tcp
DE 3.75.62.37:443 ups.analytics.yahoo.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 13.248.245.213:443 eb2.3lift.com tcp
US 34.149.50.64:443 s.seedtag.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 live.primis.tech udp
US 8.8.8.8:53 live.primis.tech udp
US 8.8.8.8:53 live.primis.tech udp
US 8.8.8.8:53 cs.media.net udp
US 8.8.8.8:53 cs.media.net udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
FR 52.222.201.14:443 live.primis.tech tcp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
IE 54.77.97.31:443 ap.lijit.com tcp
US 80.77.87.162:443 cs.admanmedia.com tcp
GB 2.21.188.27:443 cs.media.net tcp
US 8.8.8.8:53 cm.adform.net udp
US 8.8.8.8:53 cm.adform.net udp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 www.vice.com udp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
FR 178.32.210.230:443 ssbsync-global.smartadserver.com tcp
DK 37.157.6.232:443 cm.adform.net tcp
DE 3.122.213.30:443 match.sharethrough.com tcp
IE 52.94.223.37:443 aax-eu.amazon-adsystem.com tcp
IE 52.94.223.37:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 sync.kueezrtb.com udp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 23.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 19.98.158.18.in-addr.arpa udp
US 8.8.8.8:53 105.93.230.34.in-addr.arpa udp
US 8.8.8.8:53 198.40.223.52.in-addr.arpa udp
US 8.8.8.8:53 213.245.248.13.in-addr.arpa udp
US 8.8.8.8:53 0.130.214.35.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 37.62.75.3.in-addr.arpa udp
US 8.8.8.8:53 233.171.223.3.in-addr.arpa udp
US 8.8.8.8:53 14.201.222.52.in-addr.arpa udp
US 8.8.8.8:53 115.158.57.154.in-addr.arpa udp
US 8.8.8.8:53 31.97.77.54.in-addr.arpa udp
US 8.8.8.8:53 30.213.122.3.in-addr.arpa udp
US 8.8.8.8:53 230.210.32.178.in-addr.arpa udp
US 8.8.8.8:53 232.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 js.gumgum.com udp
US 8.8.8.8:53 js.gumgum.com udp
US 192.241.154.32:443 sync.kueezrtb.com tcp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 cdn.id5-sync.com udp
FR 18.244.28.120:443 js.gumgum.com tcp
FR 52.84.174.40:443 config.aps.amazon-adsystem.com tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 ced-ns.sascdn.com udp
US 8.8.8.8:53 ced-ns.sascdn.com udp
BE 23.14.90.72:443 csync.smartadserver.com tcp
GB 142.250.187.202:443 imasdk.googleapis.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
BE 23.14.90.106:443 ced-ns.sascdn.com tcp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 cs.seedtag.com udp
US 8.8.8.8:53 aba.gumgum.com udp
US 8.8.8.8:53 aba.gumgum.com udp
US 8.8.8.8:53 c.gumgum.com udp
IE 99.80.191.128:443 g2.gumgum.com tcp
US 8.8.8.8:53 gumgum.com udp
US 8.8.8.8:53 gumgum.com udp
IE 52.17.120.207:443 match.prod.bidr.io tcp
IE 52.17.120.207:443 match.prod.bidr.io tcp
FR 99.86.91.77:443 c.gumgum.com tcp
FR 99.86.91.33:443 gumgum.com tcp
FR 18.244.28.120:443 js.gumgum.com tcp
US 3.165.136.57:443 aba.gumgum.com tcp
US 8.8.8.8:53 c6c1949ce56c5b86caef71b43758eb47.safeframe.googlesyndication.com udp
US 8.8.8.8:53 www.vice.com udp
GB 172.217.169.65:443 c6c1949ce56c5b86caef71b43758eb47.safeframe.googlesyndication.com udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 www.vice.com udp
GB 142.250.187.202:443 imasdk.googleapis.com tcp
GB 216.58.204.70:443 s0.2mdn.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 c6c1949ce56c5b86caef71b43758eb47.safeframe.googlesyndication.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 8.8.8.8:53 s.seedtag.com udp
US 8.8.8.8:53 ssp.wknd.ai udp
US 8.8.8.8:53 ssp.wknd.ai udp
US 8.8.8.8:53 37.223.94.52.in-addr.arpa udp
US 8.8.8.8:53 162.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 120.28.244.18.in-addr.arpa udp
US 8.8.8.8:53 40.174.84.52.in-addr.arpa udp
US 8.8.8.8:53 86.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 32.154.241.192.in-addr.arpa udp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 106.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 207.120.17.52.in-addr.arpa udp
US 8.8.8.8:53 77.91.86.99.in-addr.arpa udp
US 8.8.8.8:53 57.136.165.3.in-addr.arpa udp
US 8.8.8.8:53 33.91.86.99.in-addr.arpa udp
US 8.8.8.8:53 as-sec.casalemedia.com udp
US 8.8.8.8:53 as-sec.casalemedia.com udp
US 34.149.50.64:443 s.seedtag.com udp
US 34.117.4.53:443 ssp.wknd.ai tcp
US 34.117.4.53:443 ssp.wknd.ai tcp
US 34.117.4.53:443 ssp.wknd.ai tcp
US 34.117.4.53:443 ssp.wknd.ai tcp
US 162.247.243.29:443 bam.nr-data.net tcp
US 162.247.243.29:443 bam.nr-data.net tcp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 c6c1949ce56c5b86caef71b43758eb47.safeframe.googlesyndication.com udp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 www.vice.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 www.vice.com udp
US 34.117.4.53:443 ssp.wknd.ai udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 csi.gstatic.com udp
US 8.8.8.8:53 csi.gstatic.com udp
US 8.8.8.8:53 53.4.117.34.in-addr.arpa udp
US 8.8.8.8:53 82.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 116.138.19.162.in-addr.arpa udp
IT 142.251.209.35:443 csi.gstatic.com tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 dsum-sec.casalemedia.com udp
US 8.8.8.8:53 dsum-sec.casalemedia.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 172.64.151.101:443 dsum-sec.casalemedia.com tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
GB 172.217.16.226:443 cm.g.doubleclick.net tcp
GB 172.217.16.226:443 cm.g.doubleclick.net tcp
GB 51.89.155.117:443 play.adtonos.com tcp
GB 51.89.155.117:443 play.adtonos.com tcp
US 8.8.8.8:53 delivery-cdn-cf.adswizz.com udp
US 8.8.8.8:53 delivery-cdn-cf.adswizz.com udp
GB 51.89.155.117:443 play.adtonos.com tcp
US 8.8.8.8:53 yield-op-idsync.live.streamtheworld.com udp
US 8.8.8.8:53 yield-op-idsync.live.streamtheworld.com udp
FR 52.84.174.116:443 delivery-cdn-cf.adswizz.com tcp
FR 52.84.174.116:443 delivery-cdn-cf.adswizz.com tcp
CA 192.173.28.19:443 yield-op-idsync.live.streamtheworld.com tcp
IT 142.251.209.35:443 csi.gstatic.com udp
US 8.8.8.8:53 csi.gstatic.com udp
US 8.8.8.8:53 csi.gstatic.com udp
US 8.8.8.8:53 www.googletagservices.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 216.58.212.194:443 www.googletagservices.com tcp
GB 142.250.187.206:443 redirector.gvt1.com tcp
US 8.8.8.8:53 image6.pubmatic.com udp
US 8.8.8.8:53 image6.pubmatic.com udp
US 8.8.8.8:53 image6.pubmatic.com udp
US 8.8.8.8:53 csync.smartadserver.com udp
GB 185.64.190.78:443 image6.pubmatic.com tcp
GB 185.64.190.78:443 image6.pubmatic.com tcp
US 8.8.8.8:53 r5---sn-aigl6n6s.gvt1.com udp
US 8.8.8.8:53 r5---sn-aigl6n6s.gvt1.com udp
US 8.8.8.8:53 35.209.251.142.in-addr.arpa udp
GB 173.194.3.74:443 r5---sn-aigl6n6s.gvt1.com udp
US 8.8.8.8:53 212.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 116.174.84.52.in-addr.arpa udp
US 8.8.8.8:53 19.28.173.192.in-addr.arpa udp
US 8.8.8.8:53 194.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
FR 91.134.110.136:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 eu-u.openx.net udp
US 8.8.8.8:53 eu-u.openx.net udp
US 8.8.8.8:53 eu-u.openx.net udp
US 8.8.8.8:53 csync.smartadserver.com udp
US 34.98.64.218:443 eu-u.openx.net tcp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
GB 142.250.200.2:443 pubads.g.doubleclick.net udp
NL 23.62.61.72:443 www.bing.com udp
US 8.8.8.8:53 78.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 74.3.194.173.in-addr.arpa udp
US 8.8.8.8:53 136.110.134.91.in-addr.arpa udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 8.8.8.8:53 ad.turn.com udp
US 8.8.8.8:53 ad.turn.com udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 sync.smartadserver.com udp
US 8.8.8.8:53 sync.smartadserver.com udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 cm.adform.net udp
US 8.8.8.8:53 cm.adform.net udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 ap.lijit.com udp
NL 46.228.164.11:443 ad.turn.com tcp
US 172.64.151.101:443 ssum-sec.casalemedia.com udp
DE 52.29.22.16:443 depart.trinitymedia.ai tcp
US 8.8.8.8:53 ad.turn.com udp
US 8.8.8.8:53 csync.smartadserver.com udp
US 35.71.131.137:443 match.adsrvr.org tcp
IE 52.16.177.199:443 ap.lijit.com tcp
US 64.202.112.159:443 b1sync.zemanta.com tcp
DE 3.71.149.231:443 ups.analytics.yahoo.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
FR 51.178.195.216:443 sync.smartadserver.com tcp
IE 54.74.225.146:443 ad.360yield.com tcp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 cm.adform.net udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
DK 37.157.5.133:443 cm.adform.net tcp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
US 162.247.243.29:443 bam.nr-data.net tcp
US 44.240.5.14:443 events.browsiprod.com tcp
US 8.8.8.8:53 comcluster.cxense.com udp
US 8.8.8.8:53 comcluster.cxense.com udp
DE 167.235.124.60:443 comcluster.cxense.com tcp
DK 37.157.5.133:443 cm.adform.net tcp
US 8.8.8.8:53 11.164.228.46.in-addr.arpa udp
US 8.8.8.8:53 137.131.71.35.in-addr.arpa udp
US 8.8.8.8:53 199.177.16.52.in-addr.arpa udp
US 8.8.8.8:53 231.149.71.3.in-addr.arpa udp
US 8.8.8.8:53 216.195.178.51.in-addr.arpa udp
US 8.8.8.8:53 146.225.74.54.in-addr.arpa udp
US 8.8.8.8:53 159.112.202.64.in-addr.arpa udp
US 8.8.8.8:53 131.151.46.52.in-addr.arpa udp
US 44.240.5.14:443 events.browsiprod.com tcp
US 8.8.8.8:53 133.5.157.37.in-addr.arpa udp
NL 23.62.61.97:443 www.bing.com tcp
US 8.8.8.8:53 api.edgeoffer.microsoft.com udp
US 8.8.8.8:53 api.edgeoffer.microsoft.com udp
US 8.8.8.8:53 google.co.ck udp
IE 94.245.104.56:443 api.edgeoffer.microsoft.com tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 13.107.9.158:443 business.bing.com tcp
GB 142.250.187.228:443 google.co.ck udp
US 8.8.8.8:53 97.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 www.google.co.ck udp
GB 216.58.213.3:443 www.google.co.ck udp
US 13.107.9.158:443 business.bing.com tcp
US 13.107.9.158:443 business.bing.com tcp
US 8.8.8.8:53 bzib.nelreports.net udp
US 2.20.12.101:443 bzib.nelreports.net tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 158.9.107.13.in-addr.arpa udp
US 8.8.8.8:53 2.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com udp
NL 23.62.61.97:443 www.bing.com udp
NL 23.62.61.129:443 www.bing.com tcp
US 8.8.8.8:53 api.edgeoffer.microsoft.com udp
US 8.8.8.8:53 api.edgeoffer.microsoft.com udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
IE 94.245.104.56:443 api.edgeoffer.microsoft.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:443 google.co.ck udp
US 13.107.9.158:443 business.bing.com tcp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 www.google.co.ck udp
GB 216.58.213.3:443 www.google.co.ck udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 2.20.12.87:443 bzib.nelreports.net tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
NL 23.62.61.129:443 www.bing.com tcp
US 8.8.8.8:53 api.edgeoffer.microsoft.com udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
IE 94.245.104.56:443 api.edgeoffer.microsoft.com tcp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 google.co.ck udp
US 13.107.6.158:443 business.bing.com tcp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:443 google.co.ck udp
GB 142.250.187.228:443 google.co.ck tcp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 bzib.nelreports.net udp
GB 216.58.213.3:443 www.google.co.ck udp
US 2.20.12.87:443 bzib.nelreports.net tcp
US 8.8.8.8:53 www-minehacks-net.webpkgcache.com udp
GB 216.58.212.225:443 www-minehacks-net.webpkgcache.com tcp
GB 216.58.212.225:443 www-minehacks-net.webpkgcache.com udp
US 8.8.8.8:53 www-minehacks-net.webpkgcache.com udp
US 8.8.8.8:53 www-minehacks-net.webpkgcache.com udp
GB 216.58.212.225:443 www-minehacks-net.webpkgcache.com tcp
GB 216.58.212.225:443 www-minehacks-net.webpkgcache.com udp
US 8.8.8.8:53 225.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 consent.google.co.ck udp
US 8.8.8.8:53 consent.google.co.ck udp
GB 216.58.201.110:443 consent.google.co.ck tcp
US 8.8.8.8:53 110.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 encrypted-vtbn0.gstatic.com udp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com tcp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com udp
US 8.8.8.8:53 edge-consumer-static.azureedge.net udp
US 8.8.8.8:53 edge-consumer-static.azureedge.net udp
US 13.107.246.64:443 edge-consumer-static.azureedge.net tcp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 id.google.co.ck udp
US 8.8.8.8:53 id.google.co.ck udp
DE 142.250.185.67:443 id.google.co.ck tcp
US 8.8.8.8:53 67.185.250.142.in-addr.arpa udp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.187.246:443 i.ytimg.com tcp
GB 142.250.187.246:443 i.ytimg.com tcp
GB 142.250.187.246:443 i.ytimg.com tcp
GB 142.250.187.246:443 i.ytimg.com tcp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
GB 216.58.201.110:443 www.youtube.com tcp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.google.co.ck udp
GB 142.250.187.206:443 www.youtube.com tcp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
GB 172.165.61.93:443 nav-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.187.206:443 www.youtube.com udp
GB 142.250.200.22:443 i.ytimg.com tcp
US 8.8.8.8:53 246.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 93.61.165.172.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 216.58.212.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 216.58.213.6:443 static.doubleclick.net tcp
GB 172.217.169.42:443 jnn-pa.googleapis.com tcp
GB 172.217.169.42:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
GB 172.217.169.46:443 play.google.com tcp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 42.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.187.238:443 www.youtube.com tcp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:443 google.co.ck udp
US 8.8.8.8:53 www.google.co.ck udp
DE 142.250.185.67:443 id.google.co.ck udp
GB 142.250.187.246:443 i.ytimg.com udp
US 8.8.8.8:53 www.youtube.com udp
NL 23.62.61.72:443 www.bing.com udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.google.co.ck udp
GB 216.58.213.6:443 static.doubleclick.net udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.google.co.ck udp
GB 142.250.187.238:443 www.youtube.com tcp
GB 142.250.187.238:443 www.youtube.com udp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 172.217.169.54:443 i.ytimg.com tcp
GB 172.217.169.54:443 i.ytimg.com tcp
US 8.8.8.8:53 54.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 rr1---sn-5hne6nsz.googlevideo.com udp
US 8.8.8.8:53 rr1---sn-5hne6nsz.googlevideo.com udp
NL 74.125.100.70:443 rr1---sn-5hne6nsz.googlevideo.com udp
US 8.8.8.8:53 rr2---sn-5hne6n6l.googlevideo.com udp
US 8.8.8.8:53 rr2---sn-5hne6n6l.googlevideo.com udp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 www.youtube.com udp
IE 209.85.203.84:443 accounts.google.com tcp
NL 74.125.8.167:443 rr2---sn-5hne6n6l.googlevideo.com udp
US 8.8.8.8:53 sploit-edge.smartscreen.microsoft.com udp
IE 209.85.203.84:443 accounts.google.com udp
GB 20.162.145.158:443 sploit-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 216.58.213.6:443 static.doubleclick.net tcp
US 8.8.8.8:53 70.100.125.74.in-addr.arpa udp
US 8.8.8.8:53 167.8.125.74.in-addr.arpa udp
US 8.8.8.8:53 84.203.85.209.in-addr.arpa udp
US 8.8.8.8:53 158.145.162.20.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.180.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
GB 172.217.169.46:443 play.google.com tcp
GB 172.217.169.54:443 i.ytimg.com udp
US 8.8.8.8:53 www.google.com udp
GB 172.217.169.46:443 play.google.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 youtube.com udp
US 8.8.8.8:53 youtube.com udp
GB 142.250.200.46:443 youtube.com tcp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.google.co.uk udp
GB 142.250.200.3:443 www.google.co.uk udp
US 8.8.8.8:53 46.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 encrypted-tbn2.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn2.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.google.co.ck udp
US 8.8.8.8:53 yt3.ggpht.com udp
US 8.8.8.8:53 yt3.ggpht.com udp
GB 142.250.180.1:443 yt3.ggpht.com tcp
GB 142.250.180.1:443 yt3.ggpht.com tcp
GB 142.250.180.1:443 yt3.ggpht.com tcp
NL 23.62.61.194:443 www.bing.com tcp
US 8.8.8.8:53 edge-consumer-static.azureedge.net udp
US 8.8.8.8:53 edge-consumer-static.azureedge.net udp
US 13.107.246.64:443 edge-consumer-static.azureedge.net tcp
US 8.8.8.8:53 api.edgeoffer.microsoft.com udp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 softonic.com udp
IE 94.245.104.56:443 api.edgeoffer.microsoft.com tcp
US 8.8.8.8:53 softonic.com udp
US 199.232.213.91:443 softonic.com tcp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 199.232.213.91:443 softonic.com tcp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 softonic.com udp
US 199.232.213.91:443 softonic.com tcp
US 13.107.9.158:443 business.bing.com tcp
GB 172.165.69.228:443 nav-edge.smartscreen.microsoft.com tcp
GB 172.165.69.228:443 nav-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 www.softonic.com udp
US 8.8.8.8:53 www.softonic.com udp
US 8.8.8.8:53 www.softonic.com udp
US 8.8.8.8:53 91.213.232.199.in-addr.arpa udp
US 151.101.193.91:443 www.softonic.com tcp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 assets.sftcdn.net udp
US 8.8.8.8:53 images.sftcdn.net udp
US 18.245.175.80:443 sdk.privacy-center.org tcp
US 151.101.129.91:443 assets.sftcdn.net tcp
US 151.101.129.91:443 assets.sftcdn.net tcp
US 151.101.129.91:443 assets.sftcdn.net tcp
US 151.101.129.91:443 assets.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 2.20.12.87:443 bzib.nelreports.net tcp
US 151.101.129.91:443 assets.sftcdn.net udp
US 151.101.129.91:443 assets.sftcdn.net udp
US 8.8.8.8:53 notix.io udp
US 8.8.8.8:53 notix.io udp
US 151.101.129.91:443 assets.sftcdn.net udp
NL 139.45.197.253:443 notix.io tcp
US 8.8.8.8:53 static.site24x7rum.eu udp
US 8.8.8.8:53 static.site24x7rum.eu udp
US 18.245.175.80:443 sdk.privacy-center.org udp
FR 52.222.201.73:443 static.site24x7rum.eu tcp
US 8.8.8.8:53 ampcid.google.com udp
US 8.8.8.8:53 ampcid.google.com udp
GB 216.58.212.206:443 ampcid.google.com tcp
US 8.8.8.8:53 91.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 91.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 80.175.245.18.in-addr.arpa udp
US 8.8.8.8:53 135.230.219.23.in-addr.arpa udp
US 8.8.8.8:53 73.201.222.52.in-addr.arpa udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
BE 64.233.166.154:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.3:443 www.google.co.uk udp
US 8.8.8.8:53 206.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 154.166.233.64.in-addr.arpa udp
NL 23.62.61.129:443 www.bing.com tcp

Files

\??\pipe\crashpad_3932_ZRKRCBPIAYDGIWAI

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 0a87826536b40613fb69dbceef184601
SHA1 29bcbf44db09be561a527e06454f584363d0039d
SHA256 948d99b9f1c725af3104f7892964107f406ffef23223e50bddc346a1a733e164
SHA512 537ae3835453ea7afe8a21d95f30563595b1437b40c865a02a325e46f5a403f964e28cb6212e24951053640ff387eeeab348649711674866f9ac885d14e98cd3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e1eed107443b515192da9c7431316dd3
SHA1 1609446b7f9c94c10754b39a825eed8d2ca02637
SHA256 8d3be849e1063dd2a2957beb3d0e2976c2335032fd2ce43fe5793ca343358564
SHA512 4979849fa720a3bf2066feffd31b161f0e04c8491e1e220d0c6ac05000da7b5069b216466b909674b95ee0aa89b85dcfb8dcd30d63e5b173538c4fe92a3bd2e9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6c3054b1077b50fb0391eb3508971275
SHA1 3a157231971aaabb0649cc4109fb3be18f02f1df
SHA256 486dbfea98f071058fb8637252f96eab9aa8ddca3368c8152b2cfc7f7bc9f36f
SHA512 be568ff35ea24e9b37f6c6908ac8ee891f4b2384ed317c5a1498a3fc65dad1d99835b3f5d52a3df1436cc1925f6dafd551326c84b862aa3db08953d9a9dd24b6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 9df7627df5a2318de23dae62e054afb9
SHA1 92749faaa05decf73b7b38488e98603cf8f0e733
SHA256 9e325302d84fa3b686225e7d6de5b745ce2c0fa64bef6f117f5559dcc8409502
SHA512 717fe6b3148123fd101cdb633a50866b785c227a39d0a42299355552ec089bb12b972b50d3f20f4faabe519a3aba5b4bae20fb9498562b41a7b1874a5232b512

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 dd5e6d9ad7bcf14d7571342f9adcfb40
SHA1 c20cf0da0075c1482e865b90b11838a6ea22f00e
SHA256 c074a7d3c3da746d58721007b6ade5fe6f199f4346e873742c16892c5512df80
SHA512 eb69be2785201f0e4a4f5323992eb579a916832bfdee191f075a9a1683f3e97548ee40a1e9c71c33bf9ca1567d0710afbeaa8ffda10a15a0bc727127adef5e95

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 76d94b55b712ac078e65323373fe328d
SHA1 cdf48c5820f1d20bf26888cbb809a9fa4e344a20
SHA256 e6df43859645605bb8f0d02e163c4e4d0131705a054777bf373fe82823239005
SHA512 e8fedfc589d3571f725016db41d5e7dbeeb7f15bfc65e0ae9010aa16a0e536be527ba9c85b189ea9a0ae3985d940688783aa45400b07c8fb30a9686790aeacb4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000029

MD5 99916ce0720ed460e59d3fbd24d55be2
SHA1 d6bb9106eb65e3b84bfe03d872c931fb27f5a3db
SHA256 07118bf4bbc3ba87d75cbc11ddf427219a14d518436d7f3886d75301f897edaf
SHA512 8d3d52e57806d1850b57bffee12c1a8d9e1a1edcf871b2395df5c889991a183a8d652a0636d5452068f5ef78d37e08ce10b2b2f4e05c3e3c0f2f2230310418a8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0f6748f5664a52e69a7666b58f63c24c
SHA1 d00c5e18d73041d2ac67229a8ba66dd5b500aea3
SHA256 28b39f9618f41a1b8dafcee0de18870b521db6175219d1a7fb01bd3853860f0d
SHA512 dd28eef9ebff51632bfde5cd9e700ae33345e022297223eade71d4e4e9adc7af319ba7415d90ba2e8b93388dd70965148902d4803a5f490ae5a2f1fcbcbac2b3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 7ac862faece428fe51a3c99c92038814
SHA1 0be3f900ba800b0cccdf8a95163eff77653a0a1f
SHA256 e7ac6514256fd6f64c20681c667ba194d478ab29e5e470ff32632f55b0abfd77
SHA512 53c79fbc5311a8524d019d9ea5a32296b97e7c7c2acacc1f08448b2852e48f7cf4df319a5036f69a32c5d6ffebcddb8b842ec5ad4ed0c68602295ee9a75ef599

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8bb2f501c8789e78004587eeede4cd60
SHA1 166da4f1ec286dd5d8e17273fa47db39d1988544
SHA256 aa1e96dcd11fdddc60f225ebcb0ae11658ffdc06bd044c12b6a55f6280754627
SHA512 f2586bd8f3ba87f014acc9f836b84df899b990827e741069f250d837f485ef07230c5cf7b1e9a82154863d556ad0f0e18407b6e3ecb0f0a471a42cc062fda323

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9f37f0f0d700ada46e2283aed8fa8fcb
SHA1 e0d3b01cc6dcf1d907bc68fac53776b9167ed48c
SHA256 78d81402efdf9181cb8aa997e06c55317f60fdbce732e7064eee9ba944159ddf
SHA512 273bb15b97f124bed96c15db883a2c1d7dc4dfe46495299e575631c393b3155cb77435ed0b2447a9dd308c703be62d45ad183822abe4d2154ebf5aa38b086a9e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\bfd482b4-6514-4b08-8055-9eb5a212e286.tmp

MD5 d184f6c8fc5a22a9b6d1f9d9285e9f44
SHA1 3fad18d8937d6d081fad81b2252ca2a1a72204cd
SHA256 e78f7c159299c77cb8fb5333e2d63d51bf1b435559cd59ae1e76dd9e3a0e9ad2
SHA512 2a740110a6ad49ff9fc89a8d0b00950c8b87ba2c833e5afac8dd1599c442c63ad5ebf7adcfd4fa861145b90983d9a1b7db74bd95344cb3bd197fb315cf3a54ce

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 db302dcdbdfc58e144aef4aad3fb8cb1
SHA1 ff8d917e0762a7e56c7319d8ac33b842c2e8e6a9
SHA256 bf4f93456914e6ef0202572f0689d445bc4e75620e9c096bddd511308893d9c7
SHA512 d8ae0f563b98d1b1089e4acf3e4150365197511531edf97e8ff24deb0d76bafde51798c4620028ec240463ac12f22cd0239fae072659f9883d35c8957d70906b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 88dfaa8eb3a3945d53b62b6842887da6
SHA1 203485fe3c63c6dd903301e17604b940dea5fab1
SHA256 ca92f7e59107a65140410a139779646d20cee89864361e8dfb67c1be91654561
SHA512 6ae6ffbe34b6c3aded9f11a70de1fd789ac54547d9189a17a4cd484d94b8ddee8b8657ebee8dade37234f3b7fe5feecaddefa55dbb66596ecccca42699ae36e2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 ef45962c6609f5efbfba5fe410f99fe8
SHA1 e71b2771711cb1a1baecf019b4556eaa74db4a58
SHA256 8fd05d13d4dc98ddc73d24da5da2e82f05cf9968a4be8f7ed2f03ae97344ac2d
SHA512 833e9b52cfca7fa0c94b7d3858421b83e6b0f0cec20f69f20d02ebf7a109b93605e842de14502c1c8b6e42e14eae5a8bbeb633292f8bf3ca280f85b4cd419edb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe58eda7.TMP

MD5 5acb02c16d4e98e605ab0a853bdd92c8
SHA1 266465a95feed50d1fd565f605acdd4a5f052326
SHA256 527028555499be133bed76b1011ef7a46f3ac4b4b2e1ef65c687d37eccfe625c
SHA512 39ebf349ba27693b2c2dd512d7349fa881495fef0e390b1ed6e83e35e1fc270661cbc6fdb45f18f40d3cff5fca69dcd70dc0faff087d8cfc33709636c0fb4b71

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 8f722b8f2cd259d03b1e2270d3e6b511
SHA1 dad57fcf020cddda877d9f6740a2af2e82a9e906
SHA256 bf1409db7e98dd1b18a39362dbc4bcb53c03ad97c840c743f9fa12d7d95cadcf
SHA512 416cd03922ca10991db3e67e58107ce54262d210a943674cb8353b5230dddcf15bee5b0adb19b3a2a31fceeac18c38b15627ed0f5e8bca6f89513b02b7ffdb70

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 277b1230946dc7d19a9ade7e0783d859
SHA1 9a2f4547e595cdb6e6c891bf6269856d74f4aeeb
SHA256 a46f779c5068e5225ad61c0cb30b5e06727568739747945e8beafc3e2dc4db54
SHA512 116c44e114b58fed3e79e2b67797bde0c443e6c5cb99b8762fe1aab6dd902105240105b11f5fc6420dd2b8833b8fd808f57cf85beedee651bca596c37f628987

memory/4912-356-0x00000232BF040000-0x00000232BF050000-memory.dmp

memory/4912-372-0x00000232BF140000-0x00000232BF150000-memory.dmp

memory/4912-388-0x00000232C7420000-0x00000232C7421000-memory.dmp

memory/4912-390-0x00000232C7450000-0x00000232C7451000-memory.dmp

memory/4912-392-0x00000232C7560000-0x00000232C7561000-memory.dmp

memory/4912-391-0x00000232C7450000-0x00000232C7451000-memory.dmp

memory/3728-394-0x000000001D300000-0x000000001D7E6000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 9bf133c5444927bb98f312bd2aee1626
SHA1 6269e9114661e98b3b54766a0e64bf4190a5a4b8
SHA256 3b88d5d72767a88ab9b3500d8bf809a0d25d01fb3ad14aca2570c906fa8df1d8
SHA512 ccaec5cd59055c830c3b2d26bed8199d6c5dc9120853ccbff5488948f88269fc94428125d765334a1f0fafebd9f40a76cef2d616ea9c03d15013a8b54893071a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 91b3c33d684642c4648dfee91d2c768c
SHA1 5c9e692ee21f5d425214235b4e7dc082197abb4b
SHA256 4343bc4a95227511475ee660e1316ff79ab4cd19b8a830ddef790ac51f9b1011
SHA512 beebffd0631d2316c8b1a18e4f79b69883a6c591b4aee972a3faaf43574b203b4c9484f086453e1d3e26c94009c769d53b54bbbb4b1c489ff21cf70cf242c03e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6a5a5015cf8d04c3345ec3a0b93c4916
SHA1 60c4f0ba1ca01017f5f4c0023cf141d512c62934
SHA256 c18166261df2847a47a7718d77d074cad03f65e6343905f01eb9c2a2b7344438
SHA512 a78ee122023a7f531155390191efa3949053e0543bc857c5821abedf34e64bad70c36a3dc2cb33477590e3aaddf280fd2d9ac5b7532e1ee878ece02dce9f6314

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 30803c1eb2126863fcb2db05140fc82e
SHA1 e6b0129c9a683a640159cc2273dea251120efe99
SHA256 cc9b65329a5caa94027ed6ac962c37f00c5549732f38c1b792a5b02d0ae4873c
SHA512 da0d5a80435258c825fe793c5b8ec4aaffeb3b87b5c84e5e29f7a2df7eee27af418a48392b16dfd889eb5a6da09e494589b0a9b2f4ab4c3b5901090d58a517cf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8b75d6bfedcca553a9fa74d106f1703d
SHA1 84842337263a9169d2da923128a3c588c9aa5a9e
SHA256 e4dab9fbfd19e67bd76dd670602dcad2459376b8a7fd4520639c76cb0d1b913d
SHA512 e987cf1447e48594f2763ebb653d0b6fa76642f7f44f027f64ceb2fa6b6d85fcb6366ff80a6f3f0000d5e7c15fe28ed9f5ec0aaa24f4f15683713ca58f795899

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 2018c0c07ab1d5fcae8a59a15405233d
SHA1 cbdcf2354263dc1344df07b049197a2eadf8a3fc
SHA256 cc3e9cfecef0c4db24db9f0d9e26c015d4988c9dd35960624e7c8ab0c3212298
SHA512 d3710269390768c68290d6ff89e0822a1bb9daf522ce4eb1393d2dbb3f417742079468edc3a5c4363cfc9849c47d02f8398bfd3f03bd8c76334be5beb4113e52

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 18822b3f4ed5f8d5b6e722ae6620677f
SHA1 7c779a52f3e3723419666716adcfe609892b48b6
SHA256 cd4f891df52dba8b9ed9290f9f747e012e0375ba9491a42ca3139d4495f571df
SHA512 7ab9c91c82c4597133577518e8e114310e00dbbb8104095596b1c5dde977020f49998a357ea4646039aad12d4116291b2b5eba4e953ef743991354128d88b043

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f6b89a5b75e96993d7dcfa0116444d72
SHA1 a8f369f9860a0512d28d6e5c001c4ae55f261463
SHA256 2efedc0f11ac81643e478708d08f0e1a5a2e96b2ab01dd679080d549397c73d2
SHA512 ecd89881400b1e27b2cf350506f2518f41a6621a7ae7d4f070be67a425bbd09fba1f3ad1063ac093711804c60a36cc53daeabbb58e587ce24235900be2e555ed

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9704f96122a847477a102568e858569a
SHA1 72619ce9d97a5e47b75a1db4bdacac2c23af255a
SHA256 176f55ffae0424412de22b3d7038ea259173e6ceb89a0b984e3d4b0227f19b39
SHA512 df1d84a9d0769ecdafc91449f613be6082179260d332d1bfa810b97621d0fa0108a502838c0d3b9ee5c48fcbee266d47caa52290c103622a52df6811b54fb87a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 0701f551bb6058ca12bbca6d69d8633d
SHA1 5884964c1f7920f2d6c90a262639b00c103898b5
SHA256 f08706773d472f6904678e496352206e8ea09c74417c4a209b749be48ef07b28
SHA512 b7d19fde636112942c980b87f2b45a73635b2ad41c16c7e848afee5c022a6d0aa07bc18fcd36063c51b484f09ac1f969cbfb2a42f16710250d8a34a13b72b083

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0778b4d35ee160977017ecf69b218bc6
SHA1 24a45ada683356f48ee340b16038f9cb0470f5e9
SHA256 6563b71c53fe17bed0ac10ae0dbb3506cb80fc11b6924f14c7dbd89910466f7e
SHA512 ae8da06f9d003784faa08e1852cfbaa3f5923cfe177bd0720d86ba171068873785eaee0e39d8bec9314ddc804502f065dfe580ee9fcc6d545049c8c7d5c82239

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000033

MD5 cfd2fdfedddc08d2932df2d665e36745
SHA1 b3ddd2ea3ff672a4f0babe49ed656b33800e79d0
SHA256 576cff014b4dea0ff3a0c7a4044503b758bceb6a30c2678a1177446f456a4536
SHA512 394c2f25b002b77fd5c12a4872fd669a0ef10c663b2803eb66e2cdaee48ca386e1f76fe552200535c30b05b7f21091a472a50271cd9620131dfb2317276dbe6c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 406d818b9f0ac412879859336b5f6358
SHA1 cf98e0282fd1ca965d28a3e6e9001fadfb0198a8
SHA256 38d827f514e5af94a1a97c505f0e49492db57729d6a1ee0fd80f1667c299eb70
SHA512 70818c6bf780b0d63eee960a4d17364fc3b987a84f74389e7833af483020159b2397ff78f64803ba7b7ce574c14f2b6d989b56a7bf03cf50f348046c7ed8a802

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 e5867f0cdbdc34d2b756ca863fff4588
SHA1 37f77b07703b08d477dec1371736900e23d16065
SHA256 0b91bab0c40aa5ee8e708e45d5b4f7865ff8ba877f1a77baa0611d61a025387b
SHA512 a63f90569dcd09c9aa326f7e9df1ddf258be256a0f3e6f2e27716ff3ced88fd4fca5139ae571eec410344a12259e6366e295eb2043b1230ef1bce931e6627669

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9194d20a44e118a8432dc858f8d1f0cd
SHA1 6de8a704c854f1554e5cfa2ea43868d49ab54f17
SHA256 f49f34e04dd07244e82358ca046cd71fffbcca2a94a1e8a8aa5579181218c84c
SHA512 1a1c5b7b82bfb7586241cefb3f80366d5da72f34a28f5d791746adf795690f9ad32bf21eda9396f61793b62823b40f76b3c9ec51348b84371a6b1528efe651f1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 886ee0b656413b0d8489708498eaee92
SHA1 96901d8a17a7fe2a60341cbd2b9739eb074e98fe
SHA256 4a8b05ed69dfa1287a42978994d364d66bdd2f512ab770b66fd7e33d22488af2
SHA512 a9dda23b17f990f9098ae5f4b0dc0923cc7e1573641ca9f0739c58d72d17ca848b4c2ae4b8a7a8c69491297057a6977e028e38d0dd5eb0ac50e2fe3992e12578

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6a2a8812172e201dda70cb046a7bfefa
SHA1 801c1a05e54a64fc810c2be179cedfa3f9f5fee3
SHA256 11d5e54b39183bf1e271bf809a44e3438c0c229d1604498efad2938d17e01967
SHA512 cdaf77bb70a9bd8aca21b86e950a856e7fa6625c956c26aa21f4e0f28a9ae7332aacca9e8def9a7fe322657617497e575638cf1e958910601771d51769eb9e82

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 bc78c966c72d5ef73e0919877f5d5712
SHA1 45603e0bc9ec23f39ab26f6eefdddc753b9b8a9b
SHA256 9c6711ab9606e777703f9be1146794de0c52d384ff5c02232bf8cf56ddd009f2
SHA512 9a5897aa40dbacc882cbb50c644716d56193398c09dcee2d917e88f79046c0fa005065a64ecb52ef9ff6b59bdc037cbae3e902ec2eb7224691b84474c2057ebf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7660c35b256ab40691b42fcda60d87fb
SHA1 e003c3c12069a99152f217d8f60752b22fc430fe
SHA256 d738e28dd66eddebb21cd81411265b0058169fc0200c95ddbe9d77d3a37d39ea
SHA512 ccdb0c2b72339d2dd6a05135e69a4a06309af8896d01f2a4859073be6080b69fcb494cc36388ff859a6d900bb89cfb279faba8fb8a2033484efceb28822336ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 08dcddc752e00cfd054fa91e962a7834
SHA1 06194d309edb6c17016ab75249ddcd846b463458
SHA256 bfe6874eab09a4f97162f22a089f5627128e36ddca5787075c45ff4973510a31
SHA512 cc721ad24cc85a57d260f6f8607ac206e2a6dd185034f1deea7a46ad1b4e7a81db54d0323fc140cdb3a5aa5f1ccc815d9f08cd7efa74f03177decdb41c6e2fd0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c9c6ca2caa7b97e33d9f282cac1bedc8
SHA1 85ede1e42790c55f431f7c97b0b2827b5987fb3c
SHA256 d95d50fafa625973239fac8ee8f254920f08808f3a1ca4226b5fb3f8f9c538ab
SHA512 74221ec7adc68aca83dcc51fec6fff5365cc03da3d47ed7f482f25300fdd0e781dc1e96fcc73ac078dae253f0eeb26fb71929f3185b2e3d5a845e99e945f4b65

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c

MD5 30c94d936a93d4416009aea98b24bccd
SHA1 730e2b2fcf32945c61beca7a5eac08603c38cbd6
SHA256 74a8a6adeaa5413b2a6c8ac2e027ac23c680905545b7cd31edadcaea64a37f9f
SHA512 72c5df74bcae53e88d6366543acddca962dc5d7d15ed51c909715b9968ec449b2ff338d3ed1a4b1035fa520b705ffa6d2a5633282494554dc6adaa0262a84a5a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b

MD5 87c2b09a983584b04a63f3ff44064d64
SHA1 8796d5ef1ad1196309ef582cecef3ab95db27043
SHA256 d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0
SHA512 df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d

MD5 40e01c775b4f150dec2ff43bdf0f1816
SHA1 29cc0f7eb904aced209cec12ebbf8e6ab192da53
SHA256 4d21e64e043f3f03c39754589e8131f993de6565a9da3bf86a21c205e37b3ca0
SHA512 c868ed04136d1c38c2d4f22f7c16337532fa1b62a3da413df9815ddeb2fbd5a5175d7987beb796193a4e812a679c117928c97a4e87042ce4383433ba479b923f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e

MD5 c054cddd96069f22fe75e7a2c17ae412
SHA1 d38822115595dad9af041a2ac43dd74c782276c3
SHA256 5f2af02562178807d98ae12e1a8e1aeac6928440ed40276a8c3ea791a733ae71
SHA512 64506610fa6074e56f710f5e7b21ea47662237751121e2b73d77a9c1fc72ae61f2b3a2fd7cfd95c9b6a9500f56c307d0176f365e426aaa641b2afda81aa136c1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002f

MD5 bdaa1e84052d9aa4cd3fab7df47065b2
SHA1 5fe26535b18377eee3d6e3b7070458596ccd3155
SHA256 4d67bc9f812696d537d3c3e2ba2d2f27aac47442a73462b57e99de715cfd24fc
SHA512 a2230dd74842306c88f7205931bae69a2d074c0b240972265276b58ef35fd328d8700a1a6ef3a650007ae63e8efad6590c218e4c002a01f11801aa43c737ca1c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000056

MD5 ac697272daf25c8969a6767b4969edd8
SHA1 ba0bb20e9f6a970cd666ab9e2957c04e022208f0
SHA256 72d8987b6a58f30eff31c130695cfe070f39ae325b0a2723520da29e22950f58
SHA512 36df91f90e4883e3c2f064d4711b6498729b36fda0b175b246c3ed79b06283f21f8a0496cff7cb7cfd16d6dd8e39e6b6a0816acdcfb225dc97878bc49c2b3c9b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000034

MD5 83c511a7c252d5987dfae7d9e8a4b157
SHA1 4810af893f372482b099aa6edf2c4eeaee960d98
SHA256 78f88c0dec4734e6bd3a4e44e5de2eeacc6c0980d2dda9b2ad577fbf927814e8
SHA512 408dd518034b8a50139b535378c231bfefb073406627ff2b6124ca8311a35fcc5731713d604a707bec0a79aae95003b87da5093a0447b3fbce8dd77457416e8d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000035

MD5 4d3d53b4a85914ce42bd374d16608e4b
SHA1 c62da52502733eef263d98500d1d5570639c1cf8
SHA256 a36e88935ff9ccb9725c3da664977ac16b1511cca0b7f1713b24a6528a65d73c
SHA512 50fefac8aebae83ae6334edb28f6cab3edd512b4da0e67951bc68a8e82ebe0b27ae3d862292159819afec66cc076920933c3e05c5ffb3a2f9bd7c53acd901a2c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036

MD5 1008a5a925bd3a4d45b303f525c798e1
SHA1 bda1e56b3785e10743c14c34fb5637068a37e195
SHA256 a7ac995a7745ead77d22fcc5768dc5f6bd88688c602ff9abb16fc5f13668708f
SHA512 1592dd87a44a7b7786ffc44c286d5c42be460d5ef4b5a6dabdafdeea26bde01157fca1921e039730e4b6e1ad3974390be7fd46f218ef1962816a7f50673d7358

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000037

MD5 6d53dd4517b48262aab18bdc2ef3a830
SHA1 9c163a2d1fec496db66789ff4ad73b35baf576bb
SHA256 81320c19b14c74cc0f4440df9b3e1872ba364c823fb5fb25c80a8af7ef7f54f1
SHA512 c3f71f748902ca950b9eece75a4114e7ae0227028cab4440b3155f2fd3dc2bc88a50531f720383f269d05575777ff0971b2b2c362eb459e4787eeee9b3a12bdc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039

MD5 c8756359e661d300936f33eb8539329f
SHA1 72b09d0b9af7b57df263c2ff2d4d750b71b5338b
SHA256 a0922c7eafb2cbc59163b773fb3c7a7095b045b49e3aced8f60a0c45291e5ded
SHA512 f4ad8eeba5163217e52cf7239277113bbf32988d98356ee3165a4f8f3fba2904323e2a4e384e949f777ace6beb55a2da2cd91a1d0d68efa31751d59aa240cd02

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000038

MD5 c61cb257ba75e1fe6c3687ba4ac68a0a
SHA1 d4c5be04814af250bd5ee823b295bdae9e4b3dff
SHA256 a9cd4fd5eb20c784a184ba77558208a441b24bbf3d149f3f018ea87ebfee5ac4
SHA512 2e25b1a32d17bc377b5dcc42fe21b04d515e52db286484c22b33a6da54053900bd9ddf452914f371bcc7fa5f4a727ac2e747c50f5e08e72d321ab882dfb50f5b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 684ed5408c4470bbe8547df50f6c1d2c
SHA1 d9ee0e52862cecc19d6a774c1fafea64eee329c9
SHA256 8a3c5edce32e1d4971c00a120ec55b1277b96bfd009e5a36a705642b20843903
SHA512 65959baf849d7f2f7f50658262fefd41f496387ab838ceace457c0ea3d601e1c559d6cc7fb2bc1030d5bb5d1f6212e07880f0ad130eecebc80d1eeab4dc2f710

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ab125b853d8796d3ac099ebe4117f7cf
SHA1 2118c42ae7585b25c5398ea322a3875b4da58c34
SHA256 9ea32e1818a52572571a6d9f2d2cb62388f7107ea29bd298c80d76fa670c755f
SHA512 d6f3c004937601828d406592b2697c0e0f35b3d1f295b56600b241706cfd2634830d3f1102af405f68ac7d2f25b06e9a64111a802e38366c91ea0c04d2e0e084

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 609fd7154d6f99733ae60a407927f2e0
SHA1 0a0b42a514c9b9fd8c06438e8c26e7699d419581
SHA256 187e766724eb7319f4591c6afe97b4338e39a368022cb7fae94fd689f2c0e4cf
SHA512 98964a9629b98db8b7285ccab2feb3bfa53a8326c195f5334d52c373d320fa7dd74dd79a16b5074dd85ab981de3b24b6693d0f80da1fef5b93ef5272e42582d8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 8f739cf96340f57e68057a32721bc6c1
SHA1 084c8e1f6bbeded69f784de92fc2a20d7d4235d3
SHA256 5729ad090c2c0492aea7b3e4188d96c06b96172bf69702bc20536e239f99643e
SHA512 c859214d0f0d5b9d0b75416835ddaf569689fbc5cd81628d7781fcebd5ad03858749b693b10a9b22243c1cec065d4c9f540c465c71e7fb0d555b64c746863de0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2455a46ec14d434302a530a20240984d
SHA1 b23e263900dbee28dd5e4f6d28492652375cb41c
SHA256 94895bd5379de9a5b8b9bbbb1aec930c6478164dc2a2ccf6e15c2797eb5f5d87
SHA512 a555d67cf21c3dbc77dc533aec4b22e0c428706fd21d0e878710921a3e4f13eec5ef13ebffcd83c5eb35881997bea23c60aac55f8ec3a73cc34d8929cbdeba5d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1a15d62cad8b614fcb646485611fa6e5
SHA1 fc9e208d01506f799b2a65ce242d174e28dd6437
SHA256 0ccf96e0c16af46431aa2580f22d20daa3e6892e8ca4d8f70e2a89694c688032
SHA512 e2a042f24e2fda55657a978db38656f3fadfbd942bf3448bbb8f66bfe56d9c0a94949edbde3062f22081e9b9cfc938f81580527a38f5a314d20fd4977997248e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c205468f4656d3463e4ec7935fd18cfb
SHA1 a2446a68d04f794061f57d489d3df89c86d0d482
SHA256 b45f9df898bb99eece120e93355ad4d63649707913330fc3c1d04fef345d00c8
SHA512 d8747556e38dc7e83c322e08969d3d6f897f1c5e9cb9a5bbbb55251cf19e1e6250c0222faea31ecb16bd4737f82258f55770cb8f543b64e486c8aee78e45ce4d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2aae910d7772edfc84c7601589bd9764
SHA1 8d698e8efd542e550f083b6109beb906fff3ead5
SHA256 9ce13d6748b95a7f76550e6dae8f68e8bb602a7be09555fe314b2563b4c7bb2f
SHA512 0ddd19500806cd24982ee5e441a07ed0048b3c79a45dab20af44b9ab379d2afcf89e42731534c2249c8c987dcb6d8d70b243f8cff438afbf1757e33f1166178e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004b

MD5 e01a4cd8fdcc7c74dae0b1342fd6a77e
SHA1 bb9b55cb8791e907bdb0500362b1a8251dfbac06
SHA256 538e014ff67894b859e7e60a034a23c4f27e8096de94c2fbbcd8ca1c9020165b
SHA512 c8446fae65ac4f7ca0d126cd0e9e4b48c903fe4ea6c7852863b99a2d5dc2e1004af0a0e229906f8cf227eb1202e6dd062b659b0fa02f5b4dbfe0817765efb81c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 886b59ae9d033561e6c3aa4afb5b4429
SHA1 7c893e7bfa68de2850bc00c5143c54ca666e54da
SHA256 636a0492edff500119005cf3dd930175194f5f8c89f293a665bc170ecaf64f5e
SHA512 1e145307c4ecb9fbe488f0d78a2e2be4661b43e5a55227b4968e89837cd61296b70dc69b37afbcd80ce5b780ec49f71bdac7fe4c132e907619058ccffc977688

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 dbde68a08c86bd6322f95bafccaa3729
SHA1 6039e24ad78172bfca47428f759f16a33f728584
SHA256 9f97c40298c97ca9df131fc03a892780f653498c7882d448b60535208593d904
SHA512 d576403e4e189f907b002f4c887fe58868cd01d47e178659bdefc8537ff7324c48a887600d7237446fa5e751194bf17d10bccbe5d35e0aa0a1962b870c1e11e7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e4a522d24eb9b60b46018313433e80f6
SHA1 aac833f542d621323b5fba656ea521ddd82dc384
SHA256 c5107288fdda50411be1facf67dd9a0cdfc420f5274e19b8f99f9785e8d9d537
SHA512 0ef5a6c544017e848f8c69f530e3eab2cb063df91c3e36a443a62783632d61af8d7017cd314c8a273bd7937d10898b842e817cbbe27a7cefcc6c4a55359974d5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004a

MD5 56e6be029d77f578e709c24b614846c9
SHA1 489c375c9f3497c386174d83cad05129e537ba2f
SHA256 25f1d7fee2bd9cf97933b907f627a6ff47534b2ad58fb99676f17b472fb1cbba
SHA512 efe69b930590d01364af98e68539d8bda4538ca7becb19b8b38f6ad6838c3f42778bd5625afb6f76c12aa360b6d3a13d42419bc0a198cd4c043852130a90e8bd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004d

MD5 158a0cc3b8390b268676b3fc3644dbe3
SHA1 bf06cf6e7d96d7808b0c245be28d79c6b963a5e0
SHA256 544c11dc585731e0fb13a885e55fe671f69b9d1adb7d7f9ab3b63d5cd1886b48
SHA512 d41616ba3fd2bafd80926c890621b0bb2b0e50e7625badc6e25d86b26eefa7526451b9f0d3777c54c4cf383cb87e5e2361294b79edf19e9f514d72c4cc0d100b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 bd6a2dd737b8e922fb228237d1edd014
SHA1 25988b953eb501bbdfb728c128c24c93441c1a32
SHA256 56efe313ad845927e19626862fe88a73b241fa7d5ae179154a3310d2b06bc806
SHA512 1247c3436bddeab877cbe3a873eeb78ebf35f9451f1dfb6da2d81bb8fa8dd28388f3526821e11efd2e9f1da7b4d3b63c275bfee43a24604e53289edf8e6494fb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 de330a9a8991334c5b10a93deb512b18
SHA1 88fabc636e745ebd764f995e09d5efa7196b319b
SHA256 2f0125137056d9c594fa53eb20af485eb5204ba1293444208ecc5910e09451af
SHA512 5b414472e9ebc6b4b0c2a6a43130147895b602273780ce8535713c3634c5c09940b310835044ed3ae96e577288b6344437f9f317f1e3328571d74dd72567ab17

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 b0b48ec68590751828228b998deca265
SHA1 9a6b59e346c38fcf0ea1f02b5e7b4d785830ee14
SHA256 91f9b1b03c01897049be5b31d6988cb8bffe76f94625580a9454d5831d031c13
SHA512 b2e90a33df0cb7b233c7ba6335e3b9c40caae91662865d35dcf5e5a4a6d4b598927798698213ef91768cc0d877e1d9a0f4660fee7fec5c59990d7fe5e9bc969c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 29a186f60a7d6667e5f425aed64c63e3
SHA1 da96cef58c4ac9f6a368fb264f002c7385eea98e
SHA256 dd54ef528090506ca8293bea2c85c60718e1aff9b00afe209d3bcf2ea28a726e
SHA512 c9e53524ea4ab5d5fa71c9446231ef4563306fd35ad36e6c09c4805499b83e6c33e53f8716d6b135c084648378c743a67965803c90ba64c862b45196f891d94d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

MD5 d5a3daa877f1aeaa411d3c5cfb33b7a6
SHA1 9cee90b3e441bed6731a95e7c9a49546b0ded5fa
SHA256 7a3daff1393607c6af535c90bbc8351c6bf4e75c5e88b87c04d286539a46cfe3
SHA512 ecc85ca1a3189202e884a60f8cab8996a9d9bf7bff1fd033fc31a1bba53dd89f05c53670acc730d07504e48ede4160e9f90754cac21bdd699260d1108d7d5819

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c

MD5 b021c1272b87b8f8dd9fb0d8be93f105
SHA1 96419b5500e76d97b4dcfb1bd79c0db9e69d9d65
SHA256 eab71f2adb1ef9ca1d44c274a998fdd26a5e3bd3b128d69b80834965fa77a576
SHA512 f34222b8174602d77a9097e1d7251f1f8f5116a7d2211e4c9e3584ae32e2edd74ce77811e8a9f064007758183403935d2a7bdde7c67d1b0fa372372ceb06361d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d

MD5 5b3379740e9b1a85d0f5e6f0adc3ae2a
SHA1 cb112aaccbdc852fb458f3d64577b390d5a70e3b
SHA256 d8aab2afcfd90398336f292d9364963037f8d20b97afa383d0ff18972a3e0cae
SHA512 7b16c52ceb63b3923c7865e44efe264b2d633b721a75465ef1500130149bc59ae53809bda71bb6a55d4f4880987a23319c84f7b91f6c1edb2689bfa2708c21f7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a52f587ea00ce5ba889194a0e457057d
SHA1 cb2e2b401c6e05ab20d08297d51ec4954625b924
SHA256 28b2fc65801629eed5fd813f5ffa84b2ad380d0a8d851cb8c53dbbf65c0b53d6
SHA512 7246279fad98e2465b543a96208a05741fcc4a3e9f584bf11cb9f996e76308d5878b85ed81d847fca89a4c68ef039ea0b72dd0d335f20f288a337f9be56c4c44

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 01324e7125b6a6a488dd3ec49aa95740
SHA1 0f68eb2c3fd6197f65c3cfaf2c243fc5b7de2834
SHA256 db7cc6f538725b1c5f0a8e2d35505c6299757007fb3a1231527b7c46c5fa2e37
SHA512 0045e7a24b05318a657e0d90696dd5d87fc753c05cf051dcf9379e1618886552c6f67b6ed6dd4652684320b64a8f6147190653e8b114d18cd879d712d0537ace

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000048

MD5 5845eee51fcb5323d5ba2feb626868a2
SHA1 ad88111e4a3a451114f3aa1e81d009f3ce40e509
SHA256 76451156a1c93c08d7cfcafc35c3c956750fd23b780b4a01e152b828729b21c4
SHA512 4b05de4f617545c1fddf511bdcafadbb7afb9a5dd95b066c5e200c049fb273d7421da76c652c3a3f49b37be019039d162b60820880e175ef8228520a1ac897fa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 08fd8f8e07103f001ec1f05d2bb28ac0
SHA1 1981daf4af0e419f49106b1d98e1c056aff2c9f1
SHA256 e1ce7a09e2a69cd7de905fdc34e18b591ce517d314dc68953597c8e836693cf6
SHA512 d8b2a03a029bbfb777ba97fe363196985f0b0babbeb9a3dcc3fe685bcf3227a7b6cf282c54d42a1d3cb7635f839dbdc44cd225aa7500b8f54f54e490fbac0622

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 8dfa0cefd585358f4084f844183ffda3
SHA1 8330abd673838d49658cfd7f9a78ead2571354ce
SHA256 a3736d87039b33426acdc46cee689f8cb1d80a067207ddc6560d09e61cfbbf8e
SHA512 07e18a45df41178a2a85a3d8461f29ba67f1846dbc48b930f11be6db8d78d2e0f409e6cfa161343d95ee624541b918952f4e3f0a140d345718b8394b23c62be8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004c

MD5 65ac83614fe766076b0c37060d4fb703
SHA1 dc5c7bef28e04bdcb7833eb1fd20d1fe99fb96ca
SHA256 72846d400ed39ff0bbb0a47bcd577ab5ad928120b1f0861b62ef4d6d1e4b7dbd
SHA512 25ff60b4db0338c5dbcc941b3f3ca5de1946d4ec16e2af03b51fbc6ad26911f29b59a426e52fb1449ba35299530a58b1f087321cc3093eeac4d42e6fe72a7687

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b12a233e37d4f6dd96759d51fddbdcb5
SHA1 72a39e5f75f0915cebe7bc98304a95c3853ce8e6
SHA256 bab3dbf6269b6c2da7b7b29a38fc4be623f153bbe997de3a00de99b4254e87f7
SHA512 d108d6b6186de7bee0e3b1dfc6da9d0c7e0832ae99be94e449f665fa1684d05190917b63c06a1e255dbc53486ee144eba59cef91fca6b1b30527570a0cf89fe1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\50f60c0c66688ebf_0

MD5 bbb612be6c0420083cbf3d7b773ee4e2
SHA1 28e7935ecc9882a21b360a191759a5ed78ce9b27
SHA256 1b43d289ac95a1ca8f2ff5e1c554101961db7ccc07675216feadb5f6e56aa333
SHA512 b30abeb40038d83471592824dd28b9b7f632d8b0af0f97df9adba85b031b5b912054b976630d63d44ab2f07839bd82720926ba8ba3b2f476bebe97f06dacd65b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b30508d043495ee1_0

MD5 1b3f0cda543b7211773761fa5347e823
SHA1 4d5628d7e1adad1c961681f79974fcb55d1abd8f
SHA256 5d549dc5bcc6c5e1f58248dc5ec6cd1f07781a0eaea44d3fe95c17d06da2639c
SHA512 6d33524a064e08177f8d88c278183dac6e20c7adb80861dfed0ff6d43bf28408e6b0dc9cb618eaedeab3b2fe95d3d590fc4e67aee2f547d6b6d4bfe9fb5e7755

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b6d7ac8ea25638ac_0

MD5 29b007de92da973cb0213c74f1d19689
SHA1 58d7463c1043d472264fed03f8adb7fd685caec7
SHA256 928f2a802ff8b5bf501303f368001f8c4bc886f89afe85be39518917cf045570
SHA512 e980d7b8557a6a92c26c4cab8669f3f46866de6010268873e5e1e75dba9811f6462175f61fb367514d63d3ec870a46a26333657515e01df94e0278c24fdeb451

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\510e4dbb59afcb14_0

MD5 286194d6351b0310d2a3fbaec6db0cb6
SHA1 a05d89414a500a7bd07b584a9cc3559050f8b439
SHA256 d5b9117f9d5804d6132eb655ea603b97bd2eb4faddd77c101dbdde8c1718dd90
SHA512 1fccc2c8730b5a86e5a0601cbaf0a78137a5a3b063ff82357982cae92c033a04264e3fa37d14ff86a2096f3eec179818ee6720d0bd37b5081f96bbdc7f65b3cb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c8fa4676df2caecb_0

MD5 02ab40221ad928021833f6c8f6a3b649
SHA1 facdd07042e8a7201cac1bd1aabf1897d63c0f5c
SHA256 20f77101ea78478ff9e148b84520daba0858a921e37b6e43a9633b85c918321a
SHA512 27fc70bc54fc21d937858d425e4918c89f8cce249bc20eb048337c036f22faa1d7006dc582e7ab5774052de31bc1f27743091d09a85fd437f95d5b1d67ec0d41

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 1afb91ce207e412f93c64c76932e3f74
SHA1 9badb59bf3f729ccb155f32317de85e55661b357
SHA256 504f2abe628078a24ea8a2fac1397ed672bfc864b8833663b11a7b7d8f66f64c
SHA512 2069a8541458e50162af667a4bfcf7465ff13961cfaa1d9b6ae6d99119f9c5dc508e7c76010a4b9594ed37b3cbb14f42d5c487ef71e10f21c49f90dbf96b8ff1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 80b26ea79827097eaf036c96b7b782ff
SHA1 119c6e2e5e48b6944c343ce0813850d9e2f8097f
SHA256 21b1d84faa854dc239e016f566ebcb92e557a42be133e772ffeea10803e602c2
SHA512 c353ed2dbc96e350e8efe6e5a5c074a3b74897f0b3010ea7b32c844803e5c475d49c9f9463a88339e3ce320b2fdf6cfd92e0102f94b2efe0dfb54a44f40e5f18

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 98e9c4fceedaf7e28fc1a21049622119
SHA1 5828f510b857a945828daac9ac0b759f4fffa056
SHA256 17420613dabbe97a26c8ae988d4b30cbad032c34670a66b315d73ad9ebedb502
SHA512 70ac5ac620889afd94433e7e3e1ced10bbe5793606de87dd40345b64c9ce931606e409ddacab9208041348c5a5615e6fef0f2d5d35d630a6900eca8ce26ef1b0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007a

MD5 b31b3dfa7bb00d5beb63e941a366b2e7
SHA1 6bb910d9cc2793fd870d2d325ffd3977adf8da12
SHA256 3113192795322ab666fa6cd52791d8b927ad4ddf8a3cd4f0146388574e6c6d5c
SHA512 e1f2014dec1edef0c5ec7e3f79ad570bda95477b823852a950d606da66319a060a45eb0aaab8010206df0fa1485f207d04c8b9c34e27d0bb7ff594531163b90f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 00fe0cecb0d3a8d33ea1103a4442da4e
SHA1 f82f316591cde6420e2dbf3d58531d54af9d173d
SHA256 539d931fdda62dd0deb6b4c0965adfda942212566c16a48052a051752360cf66
SHA512 494fade8a73ee17928dfc75877d4d2955a7eccedc3844cc47610e9a8d2d6cfe5626220f375db6211db264fc78c9818504a50271c72a39ab0e2f6331d73d2a1ed

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 bc9aadc9f30c5731e0a6f0ed72647e4b
SHA1 e566e7f263ff87ad05acef0e37e6ce06e3503112
SHA256 1552917f431edf8bcc04ab85c06dea41f749eb610a1271d04011aa1a2ba3fad0
SHA512 32da85bbbb47c5e588a66a2ea51c43460bbeb08008492182ec93c436d8165a3347bbbed6c8c4e8a04873c6639fe9b31aab1062520bbbc0d060542bd2b456b8ba

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 1e01c6a07792dfd06c305f5498838028
SHA1 c65105789f47662e2004630916d01424477925a1
SHA256 10334ed9a632dc6c5db943c1d3ead1444245cd4e389d98c0003be29657914769
SHA512 1417492bfece7f8e241914f71e907f32d04daa7b7d9929a6f662ccd47b889f01aa7f95c0b5b60a92b949ff1dcc0319a0f1b2289eb48453abc78edb1c1a17aee6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 6e6f0d943f93fc79f185e20d9e6eab66
SHA1 72ef9fade9d779e5afddf43f5e4904f206cfc09a
SHA256 1b92c1bf1ca53e9d399179e811023d2d89170249ef4be1b1984a723beccd6d00
SHA512 813b352ef180ce620e0fbade45d35218b8bb45e755c79b1f4914d6b667bd077c10986f4b3c67765154a1bd82bc48b2e140c911b8aad3b54dffa21f7428063635

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000073

MD5 36ee88ffa7d72e1de8f2a1c5ed273ee6
SHA1 9500ee713855b706ecbd0110b26a428717d25294
SHA256 ac706f558871fe0d09dd78e98310b8f93fd5a477473014df4ee6d8f1092e1e8d
SHA512 7976c5e7bd36f780da9743c759e6d36081b4d1c61017002fb04f0dbdc55656cf25d5b160674ad388f2c5770509ccd066ee6ef1c3dc019ae6913acfd7d0cedee3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 09ee02a05040a8f382ea4bd60d1f3c1f
SHA1 94b67e2f61264ef624a62dc8259b8fa4be6582b6
SHA256 c21336cedcb3d3c22cc45f1261034e728a58c7d3b419ad321988d050e171a658
SHA512 49f6fa5d33c913be0149da8ebc120cd0cac57a7e9e1c05cfdc659faa8220838706e57fea281c8b56b6a31a337aef39a2e1fdaa2f0737d489f44d4d0948a9446a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ab18bc08702efe6452ba833d813d2503
SHA1 2eb091d30f9c4305df6baaa24884c23d668cc86f
SHA256 ccb13f7a06c00b3f95ec323904a2adaf4aa4304544b827fe304b82467d6e1468
SHA512 3676afdb3d9f6707e8460a0798b4de00a21a55d863ca0a623942235867a0ba63b9933c020658375c1fc362edef0bb55bee5c9637cb3413f6b11f2aeffe58f954

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 040963952d9ce10febc4b2a86c9b3463
SHA1 5bed771ae1ed8ca7a7e163310d0a67b6bd3ba246
SHA256 dc711b8467cfe7271fa748421953563fea8fa54e700bc911e4a34aa4d0e406cf
SHA512 8fc60aa9f27b2c12170376305c5717cb2bc167ac05388eb52836f2c78adaef8483fdb7cd5f015c458c599c605723f02c5c2cdae15188441ab5052c3dc3fef998

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 e1a97b34aebd3ff545e052d090d31e42
SHA1 8915f80376cd3c8c9047a0f4dad85200cc64a3d1
SHA256 14d68a8e2fd2ead580659966c4f359e610deca515b244d90fcdc6e187a68675c
SHA512 f10188b1ab8cb4edbf8c7ea3c9c913b3b89ece9659ca9ef2181c4d10cd51307137c7c7552fafca01422d4e401bc196cc2fa63083b2ef49432aac5e08b72b099a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 4c376a63b503bbb94b440495d4ad982e
SHA1 7e624c8c363c5547d365728a965f1e6d56785ea3
SHA256 e7b21ca41814cc5162b1f2275ef3a991c57389592e7944dfdc02b5aa0206862f
SHA512 ea2d94f1abce026309becddad989f6433e98bbacde401ac2672eecdb8e883e1658da7632ec3bfbe0a73003da9acd767d3ecd83537b17930c7f3a5ee53e4ece93

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2303c2b2e9da2ab0eb64d4a63ce116a8
SHA1 75f730e2edf87c80710ed64f4e362242873a9f50
SHA256 6d203deb37228980c1e728cb8d85d1976a3d7536d9bb25d90d38bcd85454a04e
SHA512 bbafad419958a26e33e0de8d8f0cdd01d8396444552cb476ac89817e29b1372bc553611af02c05424ccf4f03498d62ca07e8594fae847674fbffb1f8c12f2452

C:\Users\Admin\Downloads\memz_batch_code_201811_archive.torrent

MD5 765ad8fe2f6128108d1accd0281c5ff9
SHA1 45e69c40853fbbe796364210e84803cb19550c67
SHA256 0779d5e9e8b5f86a7a81e0c7555b38cfc4a1a5fe31b290ddec066f9e04e6d345
SHA512 b0d1dd1829994f37d749dc01e28d8417e65521e098ed7e89815461061628b4777c3d85783771e9eed0332be79ee71ba4e18cc14d1decd86278512318a5d32386

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 69bef5ccc2508db11b5ae560ded622d1
SHA1 60e3c7f87b30c26b4593e73540a8e53f50f65449
SHA256 f0a598c3c7d6fd5ea42383b2a6ac726637b5dfe033e1d49c3f999e28d6550709
SHA512 220272ab3c964725dbe52ea8a61b173ff26468fbbd13a91c30a524246fe3167393234c63280bb2e96073ab8df7853aaa289574dd1aec160c0a63fb35cebc5c27

C:\Users\Admin\AppData\Local\Temp\~DFD2115B6A7DE56C43.TMP

MD5 af7944316db29b79999c30bd6568b2a4
SHA1 de5d8e27b065a8b129cbf65a82d16c49bbbb01a2
SHA256 5ece441ed9e4ef73efd62cb3d79528243e23753cb7f68e939bd188b75af1e18f
SHA512 a42c4e1450b962893a53d7341c1becb65bb1abda86c13df2975917e7dec8c293fb4dbd0489d1592b766a9f96cec6a463cd1c3efcdf3df2301ef19d34061415e5

C:\Users\Admin\x

MD5 214f98cb6a54654a4ca5c456f16aed0a
SHA1 2229090d2f6a1814ba648e5b5a5ae26389cba5a0
SHA256 45f18ccd8df88c127304a7855a608661b52b0ca813e87e06d87da15259c45037
SHA512 5f058b05f166e2688df7b3960e135ada25bbcdfbb62a11da3cf9e70c08c51e5589a1e6ca2250318a694d27197f2c5ba1028c443831c43fba2171ca8e072e9873

C:\Users\Admin\x.js

MD5 8eec8704d2a7bc80b95b7460c06f4854
SHA1 1b34585c1fa7ec0bd0505478ac9dbb8b8d19f326
SHA256 aa01b8864b43e92077a106ed3d4656a511f3ba1910fba40c78a32ee6a621d596
SHA512 e274b92810e9a30627a65f87448d784967a2fcfbf49858cbe6ccb841f09e0f53fde253ecc1ea0c7de491d8cc56a6cf8c79d1b7c657e72928cfb0479d11035210

C:\Users\Admin\x

MD5 1882f3dd051e401349f1af58d55b0a37
SHA1 6b0875f9e3164f3a9f21c1ec36748a7243515b47
SHA256 3c8cea1a86f07b018e637a1ea2649d907573f78c7e4025ef7e514362d09ff6c0
SHA512 fec96d873997b5c6c82a94f8796c88fc2dd38739277c517b8129277dcbda02576851f1e27bdb2fbb7255281077d5b9ba867f6dfe66bedfc859c59fdd3bbffacf

C:\Users\Admin\z.zip

MD5 63ee4412b95d7ad64c54b4ba673470a7
SHA1 1cf423c6c2c6299e68e1927305a3057af9b3ce06
SHA256 44c1857b1c4894b3dfbaccbe04905652e634283dcf6b06c25a74b17021e2a268
SHA512 7ff153826bd5fed0a410f6d15a54787b79eba927d5b573c8a7f23f4ecef7bb223d79fd29fe8c2754fbf5b4c77ab7c41598f2989b6f4c7b2aa2f579ef4af06ee7

C:\Users\Admin\AppData\Roaming\MEMZ.exe

MD5 19dbec50735b5f2a72d4199c4e184960
SHA1 6fed7732f7cb6f59743795b2ab154a3676f4c822
SHA256 a3d5715a81f2fbeb5f76c88c9c21eeee87142909716472f911ff6950c790c24d
SHA512 aa8a6bbb1ec516d5d5acf8be6863a4c6c5d754cee12b3d374c3a6acb393376806edc422f0ffb661c210e5b9485da88521e4a0956a4b7b08a5467cfaacd90591d

C:\note.txt

MD5 afa6955439b8d516721231029fb9ca1b
SHA1 087a043cc123c0c0df2ffadcf8e71e3ac86bbae9
SHA256 8e9f20f6864c66576536c0b866c6ffdcf11397db67fe120e972e244c3c022270
SHA512 5da21a31fbc4e8250dffed30f66b896bdf007ac91948140334fe36a3f010e1bac3e70a07e9f3eb9da8633189091fd5cadcabbaacd3e01da0fe7ae28a11b3dddf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 78859291d2431db2428125a20198b7c5
SHA1 5ecb8341e3187abf11d175ef22cc147e8e93923a
SHA256 02ee785e6ba0cab0636751703c8145842c928f1490f39a61b30da8c6f4b8e8b5
SHA512 f3f2cffc0ab5f15bf2599d56035f226aa670a576396690f0b9d727f5f47edfd478e3b22b446a40da875a333b78fc80ecdd713c1f20d055dbb3dd4a41f4d80703

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6f31ec6ea4129de77e1236b78e94ac5c
SHA1 92ccc42aa760555ef0093daf3204e1262bd933fb
SHA256 b58e43e2861a2acaa4a78ab3e77c3f3dbc8f6f6e7a5d5a7edb6fa2f88535bfc7
SHA512 dffd731c4d7ded76159d8d427a4ff723492c73fbdd887f218ddb1d7184c9f217c65f7e202484e34acf1d78df75d99b56a2b1768a8eab8bb98adf571a3a2c3ed6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 b148afa66ee99105f8ecaca0eec3ffa9
SHA1 c52e2e5be937c05c5a1b640aca86a9280b54a524
SHA256 7a9a646a26f1a9604270f1a3ca1569993644c1d6fff6916a6f0f6d18de506c96
SHA512 28da2da70127ad495749283ba0e6e8b4a39eb853b8e4264d7ea5a06a2a61749416b6678fb5fbaa76db4115f451a53ff6d810e770ecbaad80f6cd9a7bb2aef129

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

MD5 4b850e47dd95902b0ab6f470e3f524f1
SHA1 24b66ef275390d2609312a1d46743f484f9d178a
SHA256 a65eb9f9f369ee5b03b90c29f87a96cb158bdd1404b5ea45d6c5a09623344885
SHA512 d0c3eef3d8dd7fccb282df02352346412ec4d710158b469ff6066c361e8981abcd72478666a11dd3e905132ded4391e9be32bdaebe3ad8338527e38b1942b346

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 2a1bfdf4e71bfcbda86e6fe2d7646a63
SHA1 ea312e7496892e4edbc1f5647bc8646bf9c3c766
SHA256 d572def4890a8e864a8744b690c73d0992fc5b6c821dc41237987af815f7123a
SHA512 5d794022cb145cafa9fc2a281960e6060da49262d24cabd8674f76fbd8ef7a02af02a66c2d020bccfeb2f0890af76ade9d156b5320442dc95f50621179af886f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3e1feae3-a21e-4697-b354-4516946503a7.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

MD5 920d58019facf9e4b0e33667153301bf
SHA1 a4890286a330fa69013c59d4577b1b3fe6da57c8
SHA256 942c025f2612fdfeaf15a246837a04f54d3b0c82772ec09a60cc6afbe19d4be3
SHA512 bb7b6fd3f59adff5167b92d19f7b8ff5867b4cefbf6faceb142597894cba8eb0278cea5460cbbe76eb723a65b9745c27a44bc6731d8603c6947c225fe1b7ceef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9afede6a3d7223ec8dc9cdbe04a06717
SHA1 990f1a2700b8c558bf161dea39822b18b5709e66
SHA256 02163f19ecc2465055d6e67181b6d067213daefe342eabec6f4c45906a7ad619
SHA512 72ca91aebd233efc832af7854c96e8607d8d15d7317642f75518e6fba420d941adfe8e23597085fce7008616f042c80761e2a7a928b5d12f7d7cae7dd2029de7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 5c18da4fdc67bc1c7e09e212897d3c7c
SHA1 ce24ad650c26d055293268d75d87942dc843e7f1
SHA256 b415cb6fd516da793a573cc2ddd5b2c563d29995d1ccb50a3b8152dd4c6dbae0
SHA512 5ada41e810d8fd649780b4a49a072547cf6ba80753587e3e199bb113d8b6fbba15737b7ea3c361c988af2089a353e5ccb250b6cf125faec5bf965882e270c846

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

MD5 920a7dd001a367ff6eb0daeb6ac6f56c
SHA1 f954383b7b33c9c0a7c4803d023e72cbdbef8aea
SHA256 f1b0ebe6e777d1801257c97c43a4feb8f85270b981d1e8b2b049b7dcf0658c9a
SHA512 d04ead2626d03347fea8cf7f93a80506604058895758dd080e2b5cc0d9d6de3246e0cbfcb9b1adeee337775af8a04c955e21417db3dff508ba931c48701f7192

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 e646991f9b7863013f4543e5deea2d49
SHA1 7d3ab1c249b15c5bc5761baef819fa96b043539a
SHA256 0cc277125b5bd55a7c42e32f351b5bce3ca6003f28bc0646db5bc6b9b5135c07
SHA512 8b7b264f086ee2d1c1ec1199307d6511ce964890e84312a1c12c21a0a1fac24d6bf005a2ded820ecae3b51b58229a8ce724e98e40b03e1f93d3914948025a76f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

MD5 bc6142469cd7dadf107be9ad87ea4753
SHA1 72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c
SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
SHA512 47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version

MD5 009b9a2ee7afbf6dd0b9617fc8f8ecba
SHA1 c97ed0652e731fc412e3b7bdfca2994b7cc206a7
SHA256 de607a2c68f52e15a104ead9ecbaa3e6862fdb11eac080e408ba4d69f1f7a915
SHA512 6161dd952ae140a8fb8aa5e33f06bc65fdc15ce3fbfe4c576dc2668c86bce4a1d5c1112caee014e5efa3698547faad3bc80ec253eedb43148e36e1a02ce89910

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3

MD5 3329489d96a0076bdcc5d5c3b89c6fb7
SHA1 707977aaf46cd443a55d40a556228acc3be4af7c
SHA256 d202e4d1ba5fb0e8e9cbeea8b467114654c7c2f76fe8cd1c733310670ddfbeb2
SHA512 39eda039463e704f4c0621b855d8c9fdf1c8445b736647efd35fbe9c9b281f168aae42bd57ed94d19baf005275ced973d48ecb3f11838102dbd382d499255d6f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_2

MD5 2b9882337a6421aa0077bc48601740be
SHA1 ba1aa67ab06e83a6a3d6e4ffae1ac6c2a389b895
SHA256 b1bcccc4f53dc515f805350e30e97766d131a3f6bf40d7658f650572808a9bd5
SHA512 140385238ecccea4da161a0d21bb993f9c879d9557782d594ba3f81e40c86b66c43f9c76b221440115bbfb8b110de532f0cb9cbeabb54543dc84611820c3704f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1

MD5 72bb72d6e4ea10e4c75b2e55de7ea594
SHA1 a754d64ad33c0e52464c24eca5eb569aa4350c44
SHA256 7e70f676b41d5d139686a916e22aac7de9a9cbdb7bdd9221ca29e1dba41bcf5a
SHA512 dea03e3ab3c87df058eda706bdc248b7d9aab436972d1316d2dd721f828ff6a4fdb260419c16c9453409744ce6ab7e519969f71f70a9a20725fbaab8a746fcf3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0

MD5 5ae0fb130fe8b1c618ac71c6e91fee02
SHA1 73ab5c9d25d55268646b94666b4d74dbe1197756
SHA256 fa17b8573f6eda0cbf5e4c497fcf47a13fd43dbfa1e549118e487788d791c5e7
SHA512 b7111b993058466f55d4ec9b7b1d26a4964f08a0465a85f898b0d27eba739a35ee45f56b479d31ea7309518d2188e3c7289c6080b6e6144fd9fca1f06705173f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

MD5 adabed9669cc2c58b457c4862da4e2eb
SHA1 525c463616097b3bd77be168890b1d2c4eeb7c57
SHA256 4b3ee7dbf48e2b3112791eed31a24d4980ddf89e65e3695754e0e1eefcb598ac
SHA512 5e79fc11afd24639aa3df78305337ec0c08dcabdd70b3a90e591772716dc1907a6181f329ee27f16923159807e35839bdd73361164656a0ea06c2c6b27abb1c9

C:\Users\Admin\AppData\Local\Temp\scoped_dir3216_1795115326\fb20de14-da67-467c-9dcf-95d68b3b977b.tmp

MD5 f8e609603d53c701422bbc4e026740c8
SHA1 5d08ba917111a8fce835be950477156720e57437
SHA256 aea99c066addc7157626d59326d8e5589402f6aac551a0560b92710ba68ded8a
SHA512 5cbdfc06d076665752b4a1aefd697f8af7dd2f673c2a65d363dde5e27e97451bbf6d6097c0b9003cccc886b1ec0cc3cd66be58c57076c181d2749249395462bc

C:\Users\Admin\AppData\Local\Temp\scoped_dir3216_1795115326\CRX_INSTALL\_locales\en_CA\messages.json

MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.78.1_0\dasherSettingSchema.json

MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.78.1_0\_locales\en_CA\messages.json

MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 2ee4edc9b6b4e285bda70bf7d0b098fd
SHA1 0ccb2e6748a1cf6672595030568ea90908731580
SHA256 8cf931e805a504d8653345ca82918a7c82202dbc5825f8ea59f413ba96e593fe
SHA512 e6d92cc497b5711728dc8e9f93abaf69e06a8ec1fc9a86c45a5e71a416469495b6c41f70bef682ddca042212e64b4bfd54818643b94d953b45e4af3fd4a1bbd3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 698f20a282b4ed2da4b483f95b1e0b7e
SHA1 696cd5cb850255745e357b4433e23069f305629e
SHA256 0108ac8616513eeb7faf916718d8d41f2bba1b8316adbf1d8adec2e987b7c61d
SHA512 97c853ed59d1fa2d5b5877c9342cb5aab6c7ff6891f8a0c559718ae3ab9de79e33e3b481ca1f7eb2043dd9aaf0ab5888c395d938c7cf73dd378db0622942edba

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d97b15be1c072de0cedfc8f1bf44c698
SHA1 f1a30e80dd4870c31f4c3699d5ffa10a16b5ee04
SHA256 22e308cb5538a784589e0a7a0eee65b5930ba571443ef762479b12af9c83c39b
SHA512 4ffd4cfc533e1bac11bff2726a55ac29537f9192306c20c662ee1dbf5786e7f1c75d0d5f5d179054ab42e2f0b8bd006cbc2203472b10ccb06be18adfc43e3fc0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 54b8aba586684989546b06e180f72c2b
SHA1 c7fde0bd4cd789fb61b77abaad6f2f49634603b5
SHA256 387986e088f1d386068a3fde5c667a9666419832544039a29a149c4e59a8e106
SHA512 84f1c56ee57350e49da51ed13bfc7c048c0ebfd4ab4d268526f80efec3a0b6e1271517714d295a6055357283171c4b058228d2ed20388135d06fce648ca3040e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 de737d4a3f69421b618984af4406a7c9
SHA1 b349bcf18c314074cca345c3c4ecf5a28882c824
SHA256 261bddf5fbf4ce333f5dfb8a47e69bdee6953bde6c19acc3926983f4a813de7e
SHA512 48b719051e282392c257563780c4f55ea551a2cdd14790e31581e8e0664e976ecf3c3de3fbcd6ed93a3480ea262b00e61f95c06d74ae20c89ecbf79550c36b6a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8e90d326e4d75683f05f823ee28a7160
SHA1 9b8dc2f12758160b67315b3c8d26ad3558e2dc84
SHA256 d95de4998351ec1fae430ed5c43ffb9e297c4b5b83b8e1a6ec784bfc16b52cd7
SHA512 3648020cc9378530b19e8130d22d03d2dd6e921a63d7218b3619b86169b945c0260c232fdb10b41079a042acd5f4a2d4fb17387163451025d0dc62c7f5679835

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9080b317b15ccd3f974d4668e41183ca
SHA1 dda527b93a3446eeb87b095ac8e71986c3b9eb7c
SHA256 ae2ef2d74ca44d94710a9e9abaef5d51c6963db183a6082bc17722cb2e377a6c
SHA512 c03c32c3a0b4f231ee08b2b7ab67b40c01ea6ad3d85d1a76b75a480dc7d3ab54367ffce1b5eac420e1640aa967bd958da0340d690cc06754a069855f3712d91a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 49263619dcf126785f8095bf5d6b2ec7
SHA1 72fd91e9d89bff7fbe5ebc1752c212f8d06ed3ac
SHA256 dd678195ca50e06b0573ebbd858e9d143d0ba7c4da3d39edfb253c4df449d392
SHA512 404edf76888f061296fc840edaa86d0a23188e2592ff2846795e8dbdd391072360fb8d0b06a58cf01c08d19dda12165b9f06255606c6e64c8b697ff466b16f1d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 6b6233784411926d1f8511ad43ff0685
SHA1 de9b75f8607dc4da6ef99fd04e3e06dce8c29d4d
SHA256 cc4a95173458c1aa5e482adb36227c1ba0322658c1932907d2f41b145a506d94
SHA512 554d92297eb2c2a74dd543a5b4ea8452ba427b0b1ff890ac2cf57e58bb282cf70df81802788416fb75ce4d84e597e447d2bc482c372574c7c3bb0c6f9089a621

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 302d253f8737024f2863ae6dc1f13387
SHA1 d4f59d6f807f32e7ce4790a480b0b7f5a196f56e
SHA256 8e91382165dd83e290ccbfc0bed6d3a6427b989414cf0968d4b164dc701763b1
SHA512 cf0c0a2055f68306240e6a325644ff3b22f3d7184b63df09553a9e5e1b6a7302ad36a29c6f4cf02ad871569e5501cfae1c65a738844e60262b52fde3ad7260c9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 4fed21b57e527c744769881423cc562c
SHA1 76cb0702ab1d1565c977fd9b6e49227e0b9b7788
SHA256 b46cea0ca4fc6a1779a817bd5b44d3b7a5e892d1c53868c0c85c4d0786b6e864
SHA512 bb3b9574e5b1359fb07882e422cc11bd0e87eff44386098dcd3849941ed9c754c45bef79c76228907416acf06235e87258a2feac1665df22a702addcb4eb25ca

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe64ab25.TMP

MD5 aa5157095854a45d4e3d3da39d2adb22
SHA1 675fcc2a1c4fd4e5b5b269595910162065e2d665
SHA256 ccfecd7c74b6b84b55f6106bf9858bf2e370129ee99e4db0f3f55b0d90b7b155
SHA512 a8343813e0fa2df9f36fa92d42412de901ed4bf1831b33706e3d153ea87c2757474e2cfb95993d43e6adadbef5a6306a7bcca51204da82694efe179abd8bb83f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 64574fc2dfcc7358a896d828603743d7
SHA1 28dcb8ec0df048ea33fc182c55e14ad00e469bbe
SHA256 0117ce6e0dfaf1bd908c0649ec4cae473580b57bce6087528824307d44a16003
SHA512 14dcbcff3062f8d3c3f0b7250bbf69805d52ff7344fc4852539601813b3c245774fb5196d279542c94a2b822ad3901fb597bfb7dd12a1629254c5ff2a85e2065

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 1959b97f0e0e1f410697bea1051faa1b
SHA1 90b26206341a98cf583d4493cb8631fb18808ddf
SHA256 7fd9253b4720b2868162b92c219ed53824d645f70c4d7c53419cb800ed9927c7
SHA512 0bee2b70d60ab01bbad4ba186d2bfad8a30c0a8d25b705e56cb920b2637668a2739f6ee4dc9a36993ece5b8ed6a128cebc74972874753d0cac2f8672bea1c643

memory/3184-2987-0x0000022CE2390000-0x0000022CE2391000-memory.dmp

memory/3184-2986-0x0000022CE2390000-0x0000022CE2391000-memory.dmp

memory/3184-2985-0x0000022CE2390000-0x0000022CE2391000-memory.dmp

memory/3184-2994-0x0000022CE2390000-0x0000022CE2391000-memory.dmp

memory/3184-2997-0x0000022CE2390000-0x0000022CE2391000-memory.dmp

memory/3184-2996-0x0000022CE2390000-0x0000022CE2391000-memory.dmp

memory/3184-2995-0x0000022CE2390000-0x0000022CE2391000-memory.dmp

memory/3184-2993-0x0000022CE2390000-0x0000022CE2391000-memory.dmp

memory/3184-2992-0x0000022CE2390000-0x0000022CE2391000-memory.dmp

memory/3184-2991-0x0000022CE2390000-0x0000022CE2391000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 f5140fb2257aa69d0e646106b19d4c8c
SHA1 ad24f417698d841917a8ce193effa44732e684c4
SHA256 51e444fd51f13c4de1534483b549394658852d8208f16e89906e57ca8a6850ae
SHA512 fba9262d5effd4ab473cb427122df38d42c8e83f7f379672bda4ccbcd1e8c76f9b370f0917ed6ce8550e2ba441b527fc95b4c9cd08f56a65b8d93f0f015469c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 718bce8b7fffbb2b1ff4e4a3b9c0bb6e
SHA1 3d6a919dc5072cd9c8481eb01741402b3a880827
SHA256 394fd89b63676c3eb3771353cf92b04565747e7fc06bd148c2978ebf594c08de
SHA512 aab26cf041d1730ed2a15faf11bbfb3ecc704a3e4b1db5e44de5dae5bb53841491abd31b1e00697f8e28cc1e304c742cf7c6150fea63b448324e1ae247f15037

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 82bcfdb0491c60e83c1b4d6670939561
SHA1 4265a0404bb13992f67a478b74e6caad964021cf
SHA256 101df55ac8e0df1c8c1a6ebaa26d64b079354a7a3952bffbe80d35c8dc62d693
SHA512 88d2b136573a53fc725cb644d57d145ac682e74cc001358e91ed2c7d4691d01e3d6a1aae2e9712266ab845eca84a9031da21e9dedd176119f91934d00aa9c44c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 10275442b792f4bae135ff8dc446427e
SHA1 5d55b987cf298d0eb1fe2ec687bcd65baabd1c65
SHA256 f18e61f61a2e75e34c48ceb289df0ec28c7c2b2e939fbd61daab2910fb049041
SHA512 8380028a9b976c7a612b047ea7bafc7deb50e143183bb54dbb2d56be336d0d3775b0a2208e72a3f149f0a5be4c9591ad39aaceb7f3f17cc083f26e25f746516f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4d8d285a67455ebb1e495dda6980f483
SHA1 a918253857cbe43f8ca38628c7c7324ee55b4485
SHA256 9992aa19172811ccf2024de2a3fa7480da43cfe0e13c90592edbd9af271c096b
SHA512 92eca81a22ab11748c7e22b51e0877eef2825e0762c3dcc03a9824257ccbe24c0353f7c2ee26ec671042b944f5cd80186ac00b7f619a6192f8341496773c45fd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 24cd21a681ae72d5e0ae41f5f52f886c
SHA1 c03dd0f3fe28e62a145161e9296445e4fbf38aa9
SHA256 6d1816817a6d465252a4fad80f7fd6e1f790c193fc5ad53d16071c7b70e47a89
SHA512 420904e0d960bc9b145ab93b494df173a7081f623ec5d1d3f27c384a4ab5f04ade003079d556a7301866382bc864bab4cc6b6fd4dcf431791807f7216e34b6b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 7320cb567ac5f5faf40b515fc969ad1d
SHA1 658c817f02c163a73c648a1a1fc1aaedff064546
SHA256 c0a245f1102bb24a400cbacf945220a97b087ed9b0dc5abe00bcdeabe557e45e
SHA512 dccb773188126fb66d8f28a038848db752c5a7b7a98cfcd8c8c850556e06d44f095bf111ebfe5ca2d2d3fd5fd31ea42bb70db97e7ad29882de9f56d9d5b5858e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 f84a792b1c1124ffef13750387dd99f0
SHA1 e686c4597ee4d4650147db5b53d5081e92bbd54e
SHA256 6611ffc06d64b3efee2b1ffb70204f334e00a306aadd1519a11a0b863d5c9468
SHA512 5428e6d99292c5257b06a9ddfbf149a8d64847d989d1ef928c5f8dc031dfb63df544a96a6521d056ab807a3cf8bf95e65111fcdb612adf17be1aa8e4587386e3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 348f65ebb9f8e7e7ec943acb7973e7c5
SHA1 68c164d6340ed5c5e1dfc0cf52c558b83b82512a
SHA256 811cbb42dc17cae904f71f6d350aadcdc3e8183907e81524c9f7d48e39a1c0f0
SHA512 a761c137d56eb4483d56081206e8a49dee091a425abe1f00a7893c39e63505a989fe9b8cf3c1ed487c1e5c5a40745262ba359c44a9fc8f5fb35418e0d0ffbf56

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8356643c05a43c6da0d1eeb817dd320d
SHA1 c372645667151170d01156771e7169809aafaaf1
SHA256 5d3ab63110d752293ada1b54f4e01001361a9bb36e0758ea67247806cff3591c
SHA512 4b8fbacb1d334c6aa8dbd00f8ea0fdae43a59f6d0c348c5faee68f7e08697e7399ea85ace66384bf640a40deb6939c506f6509881d1f4e5d2590486ef0d20044

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 c7f620739a83102da382031409924997
SHA1 550137897662c036728ab8766b9641e183f0d22b
SHA256 2fc2af8083a47f7df62eb7e27299e338ed9b41c021ba087c46a27ba9049db6c8
SHA512 23abc8751f375a855a5f81c2db555ec7314ee8d9a47cece41c8309f6a25c9fd4cabd67156d2c46cda405d68746752e5d9ff20e9a75adc6796419281526eae23b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 52b107decf6c744f3f624dc182e1a619
SHA1 1cdeda643978ca30727531d14c545339a1b96dbb
SHA256 6fae32a6c2ddb56580fa648db1ff4b0f76b18ba753d82ba3807ff712d479679f
SHA512 0aa276fcfd6f46a940c9b754bf77dfae8b0e69633b93c6f673e5a8f6d84ecefdb656f724adf1549afe83ffb00bca16fc2e7a88881f3bf1fe9afe335707a26b62

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache

MD5 b6f7a6b03164d4bf8e3531a5cf721d30
SHA1 a2134120d4712c7c629cdceef9de6d6e48ca13fa
SHA256 3d6f3f8f1456d7ce78dd9dfa8187318b38e731a658e513f561ee178766e74d39
SHA512 4b473f45a5d45d420483ea1d9e93047794884f26781bbfe5370a554d260e80ad462e7eeb74d16025774935c3a80cbb2fd1293941ee3d7b64045b791b365f2b63

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4d082f50601649b0adf6ede18cd9d408
SHA1 06b99585b7949666fffd56f3d5c69bde7427cc6b
SHA256 5c6a4bdfc6cca900f5479ea8f9184b57ce50d8739249d7442d924d27b94936c8
SHA512 e354ed26b78315c046e2e559813c59db3fa5ff39a9171dd1ca34a16beaef96f6b80dca98f8b3d64d71b1dd1caa8ef4e158fa49369805bdd55b8b0824f90275d8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\1\CacheStorage\index.txt

MD5 20bf07b7d36859fbce568b557a42ee33
SHA1 5bd390ff23f7d365af018172ddb92d21bc46c325
SHA256 adafc6f8761ac982b9e1b2e171af5ad323a833f138f0fda5a169724818e560f5
SHA512 9515e9fc3f1c8b99809239f256626aa253298993665c0a87eb58e0b5265058dc996732ea6550fd2f3c21b610208bfb26bd2d8b7b2d9034c948ade92758b83de4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\1\CacheStorage\index.txt~RFe66382e.TMP

MD5 3f941881ccecf9494238e5779e419845
SHA1 b7395ec3903e5b0a1731b576b949f4ae0bab9c6b
SHA256 b5d63d245ed28167a984d19e93b387709cadd1509e7ec34fc47a87f0aee1754b
SHA512 a8f5093539e040988200517c38b598ccc23a1b57d2862fe69f4e0d2c8218f1393eb8f9cb189d2607c37c3823debba12326e6c730a6a604c641d4db0766d7ec41

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\1\IndexedDB\indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1a8e5686f626dac34f83d92499a1b644
SHA1 2978bde876ef2f61c40c6c8328dd7dd79cdf4dcc
SHA256 778b8a4ff81f441f3d96abcecb39416c2af871f50aaaf075941ad548663200f4
SHA512 fdac1ef20b9dc63a2159568e67390fb07ec24a1b97eb2e28a6bb2e5701296620629b8e9e5b1ea847b9c274934d978e433c4972f39bac0d8dcbc7cfee778923a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 37d88f6fed6406fffa079023819b9674
SHA1 298d878d4fc866021542731ea2b32d5f1a13b23b
SHA256 b271b8c9b72f383dc2e472a1c0f91fcbeb30f3d1829bc3675869cf385a6d06a4
SHA512 5ded2a2115a4e7bdb86ec846fc86634221990c8fb81345c839e9f8808e48179e8300d06da8cd551574c9e3d0794df4dfb4edae6f6ac78ba569d2fcd417ce95fd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.vice.com_0.indexeddb.leveldb\000003.log

MD5 3e46da92df650cf769e264b0019e7f26
SHA1 81480c9f839142d4c3fd9f1d0d8c8b9978fa0141
SHA256 ff69f1fb32b916cb724e3d518a1071b26e5e1242bff880d4a511541e0af2d8e9
SHA512 111ad8585ccada370cab2097e823f33b53c2f11b39d959402060182cb14c1d0406dbb03a8e3b037d8ab2b694bcf00247c3dcf539b9f31e4599dd4b1c9fea99cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.vice.com_0.indexeddb.leveldb\LOG

MD5 d739ebc07d9ed55fbc11e697424a959a
SHA1 1265fa135ca59169d8222906b1b4b8b91e6f7305
SHA256 2984313b485ee40a3fc7227ef2e63c6c35c9bfa449708aecdf3442891957c11b
SHA512 1c397b04f8cb39d953f98a14784de503a6bc5a97ba6cab274f3553c413d54f0a37c1cab57d5b65c179d29d38f6e5719189dcf072da0b5e2cb1370e56feafa4ea

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 9edd2eba5f8975277a15e77926f18d11
SHA1 e314eb44fc2ee3f5f246b09c7f7a9aac30e8e0f0
SHA256 015e362d387dc78ac6978cd76cb48c02c30bbb8d7cb40a16f1c11878da5a3c12
SHA512 74051f82c498172485d29118afdc154a8f418c3559c5a7f57bfcd991e7f8c16eca101414f9e626e4f8c95e40cbca77a390773cb02ef28b31149cea87f58bc491

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 33ea22a3909ccb860e0638e625304ce4
SHA1 b9ef83f6f8cce2dc1f503117d24096b0cf7f3f98
SHA256 7cfc363fbac689b06f899eebff8a5c36f29ba4d07f1b59c596a8f54dcdeb24e8
SHA512 da5bb20cc865ce777a72899e100d74847b71c70fecf5f7fba29dc4eb0f7c1075066501c7da7d0d21d19663676d9a2cdb1fe8b0888835e49111537edda79d25af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b6a574c02e113cc99a2992380127a6be
SHA1 ebbee25e68c33c5380421f0eeb89b41ab7f69b48
SHA256 7efbfaaf3547967f45d52614423a610963e0d633b1c84324c6b21ea3872bb9b3
SHA512 f8bd6c702e8a00f9f5afc1b4552a7bbc30c5c2b28d017c66e81963c79e8b37b87e3f49fb3160986cdeca50b24b01959727f8ec0a1e06d8fde64240c17d04dbf0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051

MD5 3be2e9c4c58e18766801ef703a9161cc
SHA1 cbdc61e9fa2bd8c4293ea298a8aab94745e57f2d
SHA256 1c3f11c5ba6d3d5e0e1e88a3de6c27a16df13833470a19c03b04fb2f99dd5d57
SHA512 2f1a71f1fc17e79ddc1c0ba0be697fdc1641ee38604bd0c424b6ab702f008f9fd3c57f22ca959cea1f1de368016b258027190c279637ae8838787be366e40ec0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8d007673dc6c1edafbd354384b723e14
SHA1 e669d2b5528361022a4303ac3de9848645d2a895
SHA256 ff2b39eeb69904062af2d9cf67300da9cb9afe096af67d4bdf4ad4928fb532d0
SHA512 14fff9f63b900369ce5d34bfe684df829eac095f0de65d0f0d987ab410537095f37dbdf8edd5850a76d0f4535dd0d9494612b9bcda044cc4179cea8c9323587f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 a341e771de1dc22750a740d6652991d5
SHA1 4b715b9b375b5ea1496f45665ae7ce27947df96b
SHA256 37acfa124813dfa8f660a11f09e7ab6a7156e5a542f2e5b3698636e3d2c8bd53
SHA512 82795bf796b1c86fbf8f9a7308dfa97fed80a4f48f593ba5526dab15df4673da46bfad23b88ee5f5bb71318b4aab5d1c2fff20e1070e2d4bf9aa96664453c9af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 64e2ac28e0bc6d46a231369dcc43be0d
SHA1 32446da7734f720df4926e3138eb10e3e3f30df2
SHA256 0276a98cdea4e05174121227b51ca1b3aadc223eb29a509a0fac270ebf004969
SHA512 e9839f225795a4787768496ffd8f95486a59e08debe71fed159ddd061f8fd234086ce605882271068387291a5096dced5ef1c063e1d0353e311f8e6c769c826b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\c49aef92-1336-4d67-adc4-4dd0ca9590df\index-dir\the-real-index

MD5 7e5cb405c06f56e1bf71258da5c6c90c
SHA1 b36f7ab11fbc371569ee725229c8c1f37fbc4fd1
SHA256 3fd662dce88a0773caf3479002eba363a4cbd420d1c0590955304e7f4a2f6e14
SHA512 9e296ebd62bb3047682396fe16d7ed67e805cf38957a7bb9cc6fe1363439583ef23fbc7666a90d055c8b42fd8e66fdc8c8c7b15a429120c4d77f2b17f990007d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\c49aef92-1336-4d67-adc4-4dd0ca9590df\index-dir\the-real-index~RFe66771b.TMP

MD5 7b5a0eaed3b9a04c674e5af196207de4
SHA1 005038cba6c37709bdb783ef54441d4d0f8f0deb
SHA256 22bb26bd627e166284f84ff6ef9f8f2ee469b32f9eb511a39e8bee57901ea5ec
SHA512 54761c6c29e71ddbb4e4fd585fea9200c9f54d5fb63ac8bcfe5874e0cb961d202108f7f5b2248e268187c7cb038057d42f10dc92751ae57ee7f6ba7d2b18db09

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\index.txt

MD5 2c7c0e65d84e7aeaacfc950b635dba17
SHA1 0465cebe187da811efecaf2eb7c5a0b8488d0381
SHA256 b2e3a846406fa4e439fbb570447ac2f70f0c7dd4035147678523cf347893cb08
SHA512 3430a626e3352772206d5d020d8ba659749136acef9dc71add917af1a547e6a08e8f5fa45b5376417c8aaa57152d70982161a1a5bbce4826fc52b9307bc2679e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\index.txt~RFe66771b.TMP

MD5 2daaaf284f92da3eb1119ccb6cf4a81f
SHA1 20ae5ffeedc929f7948dea58a3dbd0542b546b26
SHA256 e8a8d83919dd0b845a6a1a776ad6a7d39391ecd84a8eeb1b9c1ed6ac32c87cac
SHA512 733ba2ff445fa9aae88d550c3a831d091ff9987e94372bb02ad58c078f1a7bebe5e84fbfd53b56e668ed02c11db443cba330e433a3b49fc23e5c7debbe8f6c03

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4a5d2f95cc4721f86c5ff17d2aa53f0f
SHA1 28facd1be210a1024cc385fd49a606165768714c
SHA256 77cce3450740d44d87a4837d975293a401f913fe6cc4329ec357fca35284739b
SHA512 adef7f225e1aa210923619d9e61e3513e108ccef556a387ac907ffa79b850518cddde536b37dfdd8c6b321535ea94f0ec7dda3b7ba643a80959e07c296a888e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe6676fc.TMP

MD5 9e2839a751913b9ff9de31a77bb5fd9b
SHA1 350ad581bc8128d8155f60a64263be563217c9e0
SHA256 0dea9a59dddb87fc26f232eae6f46edfb747352115b33cfdc73ff5b80f13b59f
SHA512 b31c80a3ca7edc6e7545aed56fa8c2224c3d3e88d888e01f851af397ed0761d83c99edb979c0408e2be3b3e1da65e5422df3ab05cc35d22b1d1e394a302c7911

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 e07445978c03f75e892d51ec8034128c
SHA1 9816f086f0e769e0ea34415e04d0f6803ce1d1bc
SHA256 b0d32f306afb9138ef85296ad1e385158fdff1f7f9ac385f6cb94b872c9533b5
SHA512 d4b51089499bbd8bd6e7922346e7578d69accd5c0a0a37eb9691c5dc4a31dbddcd9d58a5e72c8d682329cd7eaf56f7540e05012d4e400dee7fe595e596415acb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 2c5d203eb32d0892086d07f5ba3d2ea4
SHA1 b87b91b4d9a611b828a43e8c64f73383745efc1d
SHA256 02041e22d04233a2f7e0bbac9172cc0bdadcb828412fee38f9a3d6c9c876bd32
SHA512 aba9d940d7310c8e8a5405e16595a55b2f8767d85311290d79f8d6465e32898607c7480959d2c1233090387875972828a9d761d6bdb3eb0cf268fdb18d337014

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations

MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 8ac0bdcfcf87ce7795c9ae7e8bfa0323
SHA1 7a5a129443b2141d95f7d33a3935a11c67df1888
SHA256 8c5b640bef5cb94440203920fbdf4769a890d53fe27884f93f66d6fbdf498be9
SHA512 54f026f4ad3dbcba2bd12e5cd2f8a8912b1413f612a36e0446244503c45e9756150662e32a6ef2dbbe57bbfffb2fe11e8594ff0c583a40b79440f6b957f54f89

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8ff2bbea562b35b3523fda4bdd66160c
SHA1 f168954b01039c70f98729bd88d91a56208755dd
SHA256 9929b2b402d19b9c809f8380ca17cb8e9b799d0f6686d51f20634cf483748e1c
SHA512 f1d7198d6cb34e7ac1463d4819fb73073c818dc6e1b9ab8aae734b744f0908310369efd52f9d9536d0f5f4f2888358c88a5630f6f68e9cd6b4507bfa15e85edb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 1a9bd05dadc1339c1b1cf186b8b4f906
SHA1 5e04042b2f856f6d7fb32a5401b2c7f7549cdf64
SHA256 3660a3270a51660929f811793f061b9d72acf9a436c8210e79f61f3e4ef5d47f
SHA512 d43a711b4f1a43141f675ab7e5a7d60ae9d8fb747bc578b826b7b81d4a7dd0f00da8610b6551d7244f4b2a2d73d362e7c979c262dbd1468555b6e629169d28f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 17505e3d42fcb22cf8debe9d5e375bd0
SHA1 7bbc768e4eab0d1298a439b87e097094a184482e
SHA256 9736a354b6f1f7e874f352fd02a7dbed263901561c06a8209e36ca49c246983b
SHA512 236e1c1e8e76975f1b3ffbd3fb78cebdbc7daebd0bdd9dcaa404dce83680dd7b2649695fb962cc33ec719b9f3ed6fd06d10a3a9bd65443d95414b4068eae1604

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 8fdd717ea1976493b598ebae2504abcb
SHA1 02365892bf413eb872bbdf9c01f98303428c9fea
SHA256 4c7b48bfb4bd170820ea91ab173b11f51a0570073e8a43e4dbeb8375b4a61b1b
SHA512 a37d6afe0fa249a68922f8a34b64b3e1cffed37fbac252c685850c7af10382c368c491c0bd0fa12162296e9cc10b5d8e0a2cdde9aa0a2103a3fb810cb739db68

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 04547ff927abf01cb18213eddd48b880
SHA1 4cd330ec5e0dc0f47a99fbc6f539023c69087c86
SHA256 5ffc52d80bcd43f00561a2b5ea4ef2c392e9113f11ddc3e74b4af2b96bb36a2a
SHA512 06673af3397a29f1c17a6b1e0c6dedfd0135636eb88dc9404d109298ca4ad28255e0a8e0bc7b887a3bbb605fb0023beef0f6c0ac89df015630bebb6676a82180

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1583e71e-e0cb-4234-baa8-4e5bfc7ccec6.tmp

MD5 500fbeb8719dd58692974f0a4ef150d6
SHA1 5f7f4b58c7cce59ba21389d7725157df87594087
SHA256 676eae75c874fb56c5eb58c31faf09954e9023ce2b615f88b1701db60f25377b
SHA512 3500d702825fb4d808d8f825f1bb8f7ce19e41b3f7f0b6f5ff2e006c9fa87da174998c14bf06ebf215291b2df5e3309e44744f1ce9f46a39bc1f9afb6cc6b63a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 96623892eec3940560833e1aa75e5ab1
SHA1 43706d3fe25b5a893e66935bc409306007b86126
SHA256 adae92e5872bd7642daf62446c14910a7725de02e7f43371d1b87902a66b2af3
SHA512 a59ade12bf9063646756694cffd80376665b050b763d923a7c615edeed2776705a90e3b5fa13362b1961594ca50e29b546eff1d3c24c8344724bbfed29bd8b0b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 49bce896a2daa271f333e0831d505a46
SHA1 6f5fc429f5d7e21199342627c30c88129bac93b1
SHA256 54b0d8520f67324cf474958f444eaa6dc7daff37e2b2f4527912633b4ea42c93
SHA512 dad58751fbbdc898d654589fb211a526d39e348a48d7e5f809b12901dbb46a8150491b7467f3cf9801117f5de4d160a46127262921706111486583917a282ac4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a367abfad974e1ddc99e9d00d75f4968
SHA1 e112a97c0c6ec3e994ef61f99e172d6479a9b55a
SHA256 ce06ef63c26e151152369896919945248079557b8fb4d221571687b798cc62b3
SHA512 e4dd3ce0a9b1bc5f63c972071ef1672393b563d1f2e43fe9df944456a629ccba81612b1c252b0bba534bf7d2b38b23bdf915bdec9d2ac71511519d4b2c96a1de

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d4350c7511e73f9ee2d2cc7c59a9799c
SHA1 284bc619a3c8df9b7f9fe8e0516eeb9d9983bb9b
SHA256 92fea2973ba8739b8b0ea166d3753aa9cc7736ff58352399388a845421bb45f0
SHA512 b50f7d7da2c796b79006dcfd0164933260f37cd9aab07c578c1379003ddf3c77280181da99c198690c1ad76a721f6c9d1ab0c9244f0e9b3a27a5975f7289a525

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 e57770bcdae2e63fd5560a9f72aded4e
SHA1 f6191f7869651fa384500005d5fbb36e4221175d
SHA256 636fc559770d805fbe864ca98fbadff3a1fbef671603101e74ee9fff8f764c47
SHA512 c9a2b641faf763233b777a262c35971bb4a50d2a19935e32b9099f6ea15e2cc4f29532b91ce14e2036808ae603cc5e4cd173bbd3f0e8b12e36a882cb862989a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

MD5 ccfdb3683885194694814921ac4cd280
SHA1 97e37b300cec836cf1d71a273d417fe15676211f
SHA256 1232cd46a3a396999ad60d837e67fcd15a48257fe1d5da5d6d60dbf24f4d32ac
SHA512 e918d6d7d26978478715a55d9ba0b7796d8d001c06d5a4d5edadbeeb57dc4a702a783830db5b38858e7d085fda2db0f2e9231371bedc0c70d8b2ab88627c6ae5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json

MD5 5e273c9e018a68930c04b180d8ddb57e
SHA1 d62dc00c24ffe2fb742b5baea5c8044c860240f3
SHA256 f46b81a73dcb215015a9981e9327c93b550a4e6da3ab8b1092a1679dbaab4638
SHA512 e5d3ed5e2cd972d2ca3a7ed5696e1612b283115da02cbc9db079ec5f96b12381128272f727f90d30bc11d0548cbb4f6b9c4e6f7b3399aa58c367e90990ebee8a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser

MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 d64e1f3e558c2a6d482be6f719ec7113
SHA1 fc7f522f253d4804b869e441f1ab1b36b7dfee80
SHA256 ec0a65f4dff91a02387e7009fb7bb81fbc851b7111cda28b57e3ce95bfcd42c5
SHA512 4b8a0e84e250ca41dc6ba62e36dd1fa2dfbb8e9f97986802532416a8e08adc3daebd21a94e3d0417d69ac9879bcf7940a5bbfa7ebcd63f044dee9965b7bd8cdb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1ecd5a00716723b272047e98889cb986
SHA1 00aa23169f771c18c8e78687147dccf29e4e7923
SHA256 c9445b8c57346f7e81d0f2a6dd93492d0838aa5c910af73ba8cdc22a40747b91
SHA512 1348391bb89cb66b527a01e7c02e62f45133b5777532817007fa0686ab956cc0b79f610d77bcf3f506ea9ba1091ddca5508ea9e0de4d19cf1aa8bcece233aa6a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 1db43c80cb58a2a10460457d6fc73773
SHA1 b13d85c0577381e5759b368189881b3cf1c555eb
SHA256 45a24494c93c45378946795d767ef2d6e96ebdd14606efa31e946df6634b3653
SHA512 8b2423a14ca2ac3bc46bdbf51b5627de68743b6faf33b07486889be1682fca4a5b30194a6b185a5f782569b15349668e5252ebe2d6daa001efe30f111b8c3eb3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 a845a8f6e90b2f2a78a4a5320fd5a1a3
SHA1 b4fb194e77203b7b026e2d5e91fdbadfffb9c11b
SHA256 7fcaec8d90f1bfd868c0376435ca3d965fa10fa0e865c7a0b9c21afeef7a0e7c
SHA512 9e9e4fcc8dbdafa624a8c77b3fda8854f2c816c94069070ae9c4ecd549cdbc3f4f1a28d2063936a655d97f706a73b903074a874ecd892fec85649d25350b6c1a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\2c283d89-4db1-4fb9-96a5-09f91806ce80\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt

MD5 a005b4cce74683d4880071e59e28badf
SHA1 126408f680beca9d6233172a48de211a42f181e8
SHA256 136df9591bb17177e010ed1b3b4adc768c34a88b7e7066d8f36efc940b6f078c
SHA512 b2764c29730088a8d781fe4d58fb7cc84e48780500fa6cb1c67ce8d5b729c3fb45ea4a49cfb9ebbfe85b51f7dcd6ac9334addfe6d8c3c4cdd9f7bb1e44c93bc3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe676b20.TMP

MD5 44db30e688ff600fd3b050da5189601a
SHA1 7fb6f53853bb3384c4b41f2ac348d9dc09496801
SHA256 0ff340fd08dc45c8e52f8b91671226ff5c8c79de61cfab46f83b6029381baeeb
SHA512 7aef578ed52ef0506ac6ba6ba191c0f0d1c65ab39d93ed8c5338008e16f576243f2bf0d03e5bb1c787521b0e8953c23cf1f4017fd814562eba9bf5159d528180

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 4a5b104810a976051d851c17c1bdeb00
SHA1 c3b3d5a67b1379b60aef0a81f484f906f0f1c70d
SHA256 1051f71f5ea8522984c417b8dac3e217c8ec30f8fa97273797161f4dc17d2897
SHA512 8dc0f2bbe1b16f4ed72734a06d3c32b05ee6371e7e5fd6670584ccfe5c2f62fe06941098dab55165e1130dc89bb8261d69d0d93e2978db648268805718859787

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f

MD5 3dda883b89b1f31dd1e8e0be2d4250e9
SHA1 ff69000e8307afcb2b4db7d6117b47975f9de06a
SHA256 e60268695e6c66a62ad318850e45954bb22d21f2ae62fe9f0c5490dcb1e69f9b
SHA512 25176c5acc9cf658129508ccc1b7fc8e93777cc59a404caf06a0e0eeb7c10b5276923aa51d56a99ebfd45d9f05b16f598794fb31ea0aa39565770b3c3b8c8c43

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0

MD5 654b495cf8877c0a6c9423793216dd88
SHA1 17526245d961301ad40c738f6b6d16a2afe6ac8a
SHA256 e6e0c443422b16eb462ce281ca745a2e8cd58d266c10bec39a12dbd45b92af69
SHA512 0c319332fa505d54972ec8046e209f109c52dde42ae303d862856e2107e7f16ed5332375acc5a9c1272d940dc7be3576e57b833e3746ffbbbf9b8c71ec3482f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt

MD5 54fa4b3b3a02b3a25ea90c0dff58bb8e
SHA1 8ab4432ef25ce3079ca2a897cbeee4092f95030a
SHA256 82ba7bcc4b66e0be80d3a3505d3e8a57f096d4e5bc55f2f1b892d3a5c95c67a4
SHA512 b3069a5c78a031f9058efbda320b084cd96685b82553449d6a659e7a57b2e9bc7b21525ef0f6c2afcf6be5c7cd67bf84d375f24de395cdd10b02a836a4b5711f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9ef130e74d463a7273f8337cb1b5a00b
SHA1 4fa2fed9490b70cfb7440f3bd0fea5ecf18e1585
SHA256 e8238832f735641b3c2d7d5fa006dace63f222e21b05f3c87331c3c3f4c14b5b
SHA512 b7ceb2640420073bd790ea53a606eee75e6c44186d84c43f3e72bf9354968ee1db2afc93cca89f4ce3096b32a5f9c0832cb222c388320ae546c59620048f93ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8026904c558283b968ddd0686fbb9755
SHA1 d93fc92ca431f0318bef31c49cfb04ae54a3afee
SHA256 6d46bc7a2f2a83b65fab11a1bb63eb642880c5844f575164735143706b308921
SHA512 fc4901d88d1cf67153d2f12aa36f89de309ca8185b4b7fd9e40347201d37fdcdf7f220a6614fb2b8351646c21640a72b7fe0917f016fdd227751475c6b757dca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 dd0b14544acabb7f7c2c3b1f9255b187
SHA1 077de97f1f5a13f3a5a87c6d849d671d66270427
SHA256 75f81c0b0296f17edd8dc712b4c5b83f2efd6488f50ed058bd9419050246044a
SHA512 09fdaeec740eb308c2d56b7547c3b3491fcf9d8bb55727399981b0a3c31ba34629ed3d0b929b2b967776904928fd1ab79777ba282ab640c4082d5b195dddd24d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094

MD5 de7cbb4c18054116f0bf7bbe9df6bf23
SHA1 f96ecb521cf937a503d3b3c4cb73b9d05091a2f9
SHA256 f5b5125021b26023051c43432209690e69bcb89c297aeb6cfa56a65e7199fac7
SHA512 e2ae840e0288506698f06c3e36a4aac68bf9dc4a1b1a741234453e762340a27e1ff610bec8fe27ab2e9209b7000ee3e8f0271d666c1679362b7fce4944c7a004

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098

MD5 14745167f9f71a0c90cc2608a0e470a0
SHA1 bf049ff489936099e55bad9f255e36865724c36e
SHA256 315b4276007df165d5aa3e9b7957209e824d990956a56a2346313b5717e87a0e
SHA512 db81d2a2ee4674e236ea1fcca572abb82ae98e3f855897416c8abc93a08124465459f25462a308a6d6d90e883ad493333b4eb9a43285f67fa6d482a39ad94fac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1

MD5 443826e43ae39d6b6d996ec061398f84
SHA1 a996ce34b3bac4eb02a8c113b1105de8f17f0868
SHA256 87fb32803b0681980e6fcf71b9d20c00239b622beffa02de6184e8b15d7b9b51
SHA512 6875d9dfaa2d4b0fcced2350ac95aac477e9289ffc4e192f8a3d20eda57020d31d6feff74b5f4978f1e5f6373b13d81fd041ad95978c1a20c867710bb1acd477

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2

MD5 296107fd9e4b08da2a5eb5381e62e59c
SHA1 0fab647f77db64c6284dd6335f6f01696217fb88
SHA256 9a75f06abaf3c4db9cb4110d32c18ba80356efafd79e6f6255aefc31054ff133
SHA512 519f5c12f414e6321e63c5c2992b4eb89131334543310513ffefcb9b4cfdc9cbf9adc48854dd40daa8475b238ec4a1b1d6f31d666e5edb773f433582777bea43

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3

MD5 20adea22eec53811cc6bb3e6fb9648a1
SHA1 89ccfb989609bb343bff0f260fbc28e78b0ae16a
SHA256 d1b7f4208210049da4739648765e40bb8d8f0a7fd4e942df1d736e803739f5ea
SHA512 24342b4e909b88faa4b028aba8428bf4b3fac6203a61e74890a4c3439817444826c6d4785f0cef484b73c6116a9913c2980be3c59abaf2b3711942e1e53e6b55

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt

MD5 4743354b9ff12a75cae687370f819d78
SHA1 11ae9b077b6ccc6b88fbbcf04a1b53540abad0c3
SHA256 04951a7f234e2b3fe189219e2240c17c6a68c662d836f76332a4803d44b063ab
SHA512 c57902a49c00ba27bb0970c7be7687c795d99b456d49ca981d72d5f17c7395dd9378129cb85027ba1f6ff26239faf01156058409d90d9bdb5e5ef21554dd8058

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\JumpListIconsRecentClosed\f767126a-b0a9-48f2-8464-785f190a7313.tmp

MD5 e0485c0d743883df435265f51f5934ef
SHA1 2be1dca331fcbce9e08f7c58abc23a49988590bf
SHA256 cc284f9755742791d39cfcaf4435a39c727fd8469bbaa647809f3b710cda3cd3
SHA512 b518d0774e6ce8cab200d741be0cda0cb3905fece843bd769e0b64c437a903e204b5dc0fc6544b425d86861969a58f7f2aa589eea8584ab60b056183c1b551ce

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 0239f7b811dc1d171b6c31e7c6a54ba0
SHA1 1a37dd37d6cf9006162ee367cef9d7815577c4db
SHA256 a8752b4d9cbb253bbb64d41d467b1045353d6b0e977c5fce9837f092c40192e4
SHA512 3c370e6d4127e62bf28009f97ed45f9befb397a2af4083706b344d181b12bb90c35f76aede78feb5e1a8aae8f60d5159c958ac699d3b4ae17721ac6cb43ba3c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 574b0010eec7c20252461f0a147044e7
SHA1 74e021b5044acd6720035990e9f436b5f62e0f08
SHA256 3004def524b8938dab036c85db44f90fa0dfc359ffa7aca348085f3e52f515c8
SHA512 b0f1a19e26b7cc073731d73d841078312e623f34c243f3ca62c3213b5b04f067f0bb3bb1defbe43b956b57ace75136cb8e99d3b7dc8a15fa761d63fbe6ee2aa8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 c392f6edf556f7a917ab4802aebc29dd
SHA1 1345600aa01439e4cc10d918d7e9fe585b28862a
SHA256 9fa93512aba54111e7d22db80b97ce1621a848b6deb8c0c8033490b7e1d251af
SHA512 aec656f8b3be5a959ebe10b73e93eb76be2f0567192f86c0c379b1b7112124d9529c2bd7e7382ff6b1b9fbc634aac8da4729e2002039eb78bff34ba79151e7c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 35d944e3f41d77930dd9f5f143775981
SHA1 125631085aca72dd9b044dfd355eb3d86ff2131c
SHA256 906196ee4bca5fb66acbdbd84ee5d5b2fe08059a12ad05cbb0b01e33cd65e895
SHA512 dbe95c82504a1d70e6db8b26321f710fa5bd343118ce39384046b89be3e29e19a865fb6d881f7cf626b5482fdead77426376193f967e9b8514bc1f59902bc545

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe683a57.TMP

MD5 4ec6fe56768231cf28e7b6e96b5bff1d
SHA1 c126b20afd8b7749f4c6e4ed93eaf9275b621826
SHA256 e038bc929ce836852530eb3ec7650e86842c921a033da5d395a89af89f2a8206
SHA512 07ab2bc7c5643c573ad25523d4dfe1a816b8daa5fcb0f4e794391a89ca07cc6f19d2fa4ebf69996aa5f2e58942ca45386ec8a171b6d3485f4f4ed3f68368dc4f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 dfb4055d63488e98c1cfa061fad97cec
SHA1 9ceae89de91bbf11b45b2728de1310ec306922c9
SHA256 8a9745cdc531b55e27ffc38b29fa7dd5815ae4467a66826cb48aea2e645f877a
SHA512 dc467f06f52e3431dde1675b7e3b1bcf856e6c534e5fa6441dc0766e9258772b7fc1d897e6dabe8aa103c4969de7cdd676e8d5352795efc5ea1969edf4938375

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG

MD5 9ec575c75924235b0284f0b519350007
SHA1 dd09dddcfd4b9bc4ea6af87eaab74edafc0c09e7
SHA256 e4008665a4e2471dac99c31abeb8fe87cd6cab0187f2c8fb93c2e57e07e98896
SHA512 f745d0c19d0d31a05f09697ae67eb0ab596379c682ac63de0b7d0c42322b9d641c73c487a8e0ab564acb12a10592b3e8f3f9a38855525d0e3868be44be16e95b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log

MD5 1b3c07787c6e5e05cb4bf357fea47aad
SHA1 62dbd5f95d88ac3c0603a952c8f3d57db6fa40ad
SHA256 f3201fdfbdae6f30f45cc80adaa9ce949099f343701a4000e2d8b5fb03087a88
SHA512 ec5c55b55417069ae7d455d4bd1cb8b0c16dda9767020a2e75f4df004337b470f1bc9f8789df0a5ee21fb1c579bf86dcacaf500902f4b675a5928d9cc79416c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4b1e3b33d8e06001_0

MD5 f7e369747a6bb704115ac41c5b6b6913
SHA1 1f1e53f23c868c8dc7b1b693ecbc3fecf03d0a8a
SHA256 dcd53b3693dc8e224984104e58c2daa87d359acefd641d9b9fb8cb55e0b2eaeb
SHA512 ca626a3daf6f41b00f7653e73bd5aad81ae69b0b8534ca08d4122e8c8c1afe3c3745ced6a6642dfafce95a7a1914169f6d8096b27b41c60a18695baed1b95238

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d

MD5 752422b711f90bbe13507797f70d0cf5
SHA1 29e2200f69ae3ba4b80c50be6dd51287c4eb6e1d
SHA256 130500bfe7bca4776fccda5610f5c2d58835831e02b8b3814a9d8e976e2ca852
SHA512 42e724f83a98649f91549dabbe37b257d079fc76289be39339455a0d68bf2e27cad5ecb0dce636d00b440646ff0bde5378efec889f0202797700fb2219bced71

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt

MD5 064ea35fffbe697668d9ed2a81c84ce3
SHA1 956124d3102fdc15f08d9e02ea64c61d049e8a75
SHA256 fb797318035a7c9f1058f23a8ff16c3882e955155352a98dbb754ff2e5669c9d
SHA512 c375a9fa2d169a74677f1bc53760a057a769ebc658a1ca62bdc94060e24e6a989b8f44c10b1bc18b02515b1b90242cca924586c531c212cd6f27be8f3f02aa41

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 eda4e7cd917e08e8f93fd14998cff74b
SHA1 a14d7ad1cca63993ea03f3acffbf7a23f440bbfc
SHA256 b295c20c22db553b1aacd0d0fdf6002827a425694ed330b858887163f5e25bbd
SHA512 670bb832d529935e02c2f8a69f2d4cf5f6eae3063d5a79f4cb79ec17a9c62163796c72038ea7486f2d1da26a54bb38d91ae9d381e0a3ae8587d55605a66fcb80

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8fc0b7a73fdb6f488a80c415119d40aa
SHA1 509ac218b0e85bca3f8e99abc14068a813687c55
SHA256 280f51add9297af1bbc417079c84f995736e8103debcdac6df67be9b71440c32
SHA512 ce5f5de21231821baf540236e4f51a7b0fa6e52f6d03a0da8c09840f52126077cb2b776ddb9e81681db4a97b8c876d361e704b3391f9604d4cdcfdfe80d63904

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8d6b4d039ab444b0b1a0d716892cbcbb
SHA1 73808ac352ae185f4791ba90ad8886ddafa79ae7
SHA256 65e41558114a35efc6ebfd8dd26b93b9ec0042ad8aa50c7a0e045df92e9a37d3
SHA512 17a6cdd3db0e7cc5787dc23f470fff56bc500966a1a1a11ef484ff768149996afb1e27ac586cc03657ea6cf6a8f5176fa04c1cdc892ab7dcf9321eae743a277c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma

MD5 cfab81b800edabacbf6cb61aa78d5258
SHA1 2730d4da1be7238d701dc84eb708a064b8d1cf27
SHA256 452a5479b9a2e03612576c30d30e6f51f51274cd30ef576ea1e71d20c657376f
SHA512 ec188b0ee4d3daabc26799b34ee471bee988bdd7ceb011ed7df3d4cf26f98932bbbb4b70dc2b7fd4df9a3981b3ce22f4b5be4a0db97514d526e521575efb2ec6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 d724cadb78cb6b5696c41a7d55094f82
SHA1 f444670733352997b1013604fc8f2a8734ce43b5
SHA256 6aad84c5a3713b542f667c40046691600431e8c6f2f2c595b68b79fe9be4adae
SHA512 2c79d3ced72ab85eb97217b7c5925ba61c708a6d795b31f69f5d826f3b7b50f50c29f7824587bce82c0339316ccc4949fc8ed36118204aff4fec740cf5f3906d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\000003.log

MD5 1d0886be5ec4b1158d4434fafb9b9bb4
SHA1 8a26e204fa87fc119a71dbfb18c0c536dc8dd36d
SHA256 b29c1cd0e6a7e336eedc8494598aba1e7a81ac81a516cab011e3a59c94267f1a
SHA512 c84cffb8d1e919b1c4981b173ed4dc7bb70ccb921b0793ee82ed09df23c41e828719fbdd2d680bc13adfd01eea2c6370a92c2c7d8686ad4f0f5eaabc07c17e08

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\78a95db9-1514-4776-8c85-26a7a393f0ac\index-dir\the-real-index

MD5 918680d808db62a09f8e08100a56ae5f
SHA1 115f332220222fff55b178e3631f3efff9a382a9
SHA256 54739d89bc63fffad821281e81894ae075b8a21a94b372f9d8dbeb6e75008366
SHA512 3246abecc1c12d61502e9ea8ecaf43f0403ab05afed67c83b7b23f02e21d7e64daebbd0eddbe7742d682f8234a6e9ab1b7d66fbf516c1dd9cbb91c24031746e7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 0da6659e16b6032407b118a2c09bd2b3
SHA1 14f072ed6a2b86a28cdfb954c0a349fe3cad239f
SHA256 cc8b968577dfe4045fc24480b606f7549e55a38311bbd315bec1eb1e8f8737c5
SHA512 97c47753508d54e4ec37b6da2abf9febd7413e72f28b685ca458fc0e30179b6cf23d9d175ce9434e4a6df94e7803cc274a0fde6b8470e22d3fe0ff66418ed3a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7f759459-3661-4c8f-9a50-3a5e82295ad0\index-dir\the-real-index

MD5 680fee8eeeeffbdb10be96f794d6cea5
SHA1 45549dc103bcfcb392d7f82e07e1c04217affb37
SHA256 3d688593e5cd242b5219e5abc036961764ec95508d0c0188b3164f7088da80a9
SHA512 ba2ce86b17d6f64ba2710eee00ad09de17e936fb697863233fb8503ac0b54be4c357e9deb8630e9e2dbf973287c2950efc73669ffa3138f3260efa185e9e26d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7f759459-3661-4c8f-9a50-3a5e82295ad0\index-dir\the-real-index~RFe686290.TMP

MD5 d475e443d07469dd7e85e626157a1188
SHA1 be2a1670bb4f37e454ed745bd6e842b768357c6e
SHA256 cb7f0c866757dc0b6aa0a9c1654cf38e94052ba49fcfe9081eea3a609f7e6b37
SHA512 a9dd759810d548a0f91189f9eb0ed3133d4ee0bbc6fb8a2afb7bd548fda64b5130106cf2ed84834484cc5da1f0a2a0c6b5b8959836145b74073e68fcbacade75

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\78a95db9-1514-4776-8c85-26a7a393f0ac\index-dir\the-real-index~RFe686290.TMP

MD5 e450c729eb4317c0d5c7ccd539a0677e
SHA1 add061fe398758ca45862aeca62e0b57a557120e
SHA256 7d3909c1e43974de38751a2d8be0bcf55665e64280f603b78f90f92a7651bb8a
SHA512 4c1193907aa4d1ec18713498f73796fce996bf055a6fb62208db126c0708bb9a1d27eb3a3e98271251cd855ef1fde62939ee8c461a2713b4348e6626eedbe927

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 28be9796c8efd47366fcca283f022235
SHA1 b4abadd4732b24905fe88b6a70ab1f6e3d0ac4b1
SHA256 5123111f6198457951ba9e5af7c51011edd9122d36c62b39a65d573135e17bfb
SHA512 22469f679f2873f57094296a80e8f3e9ad6844ef92d38473b9a54c2d0384e9e3b3af0781584fa739f218f524a67f8863759b12ccaf5e8d1055458ff40d1cc158

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 272fbef24202fdbf695b0614e11e06b4
SHA1 63da7543df3da8ae20aa58e890af0fdfdfd5642f
SHA256 5e91bfcb4f76a4cfa2fbc987545835fa3e254f09f77d0f237d5e528d40ff918f
SHA512 34b44ac82fa81a6c7a79600d39e838f95739ac40e8d898bc0a53beec658a324631d76cf49c927d922b8cc8747fedd6f7b73df6c82c4d1021ca02bddc03fe4df6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e2a06aa98a05f748d9ad7bae05d13687
SHA1 a0c204ec73add4048ecc0aa262d81ff92cd35235
SHA256 ee4e6d7cddfaf881d7e87b1f00f667dbdc217dd3f79e09fc5bf10605da243faf
SHA512 19ecc943c35923961a1424a045db07d2eb9c6fc31cacb86714f2e897ab18b7665e45c708ffb8d796ddda093236fbe80697af108a421f8dd70180fa895ffe4bc2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 37c03aaa0eff31a79c1f6c93a639f103
SHA1 6bc201da2d7eef4697f17ebb212e8e1b7423c624
SHA256 da053fa7049f2effa2eb1b025b047f443f0a78a85bcc154ed49e77671b5955a0
SHA512 680c2af1f6b0f31a7e8af2598d72f092d82d0e6095fb16e985eefc387d99c00dfc3c466fabd8248cc375d1ce936b376b6fe0d16ab2488b93e00083625068432f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 11f09b8c2d6327e6c8b890f130c5ba1a
SHA1 1768d9f542dca552a58fcb060e7e0ba7b97f735d
SHA256 f1a7bb1b5c6e144715b6f19d09fdafb30137380264e51c65acbfcec754dd81d3
SHA512 1fd6e0c5cce5475f917ec325eec9f37ab9ce454be42a904c0701109b6bc15a7c74d46507d35ec90739f5441d3de566b42725dd67300b66b46446ff9be8865e41

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 4c5ded42789bbcf29a793d6568c952cf
SHA1 2f75191e72dc09272aa0e98f38e697cd8c4b3dd0
SHA256 f14a3a378edbc8eb463ad0926bb00aa2380294e0a936b3126faff4ce114a25ba
SHA512 b15a487abfa3fcf8b314949abeeb503b3651d555e04eb26ceab6a2b2e5b28f9441ac51f4458dd181b678c7d172354ae77ac206aab48399e4a04d32b3162bbcee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 c5e6d11500d14f81b2f8e5188090f751
SHA1 663a671bf0ee9844f55b769a52971da0f023c9de
SHA256 10ec826bea00ff70d42a118e8c114ab90193ecaa6fd16745a894ebbce51f21e4
SHA512 7b3688cbf757f124a4db33e516e87a062e863dc0aeaa363985976756aa2a913c30dbfe01b7a882c11cc533485cdd2e324cbd4d93821dcc5bb92d7d53fecf4857

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

MD5 e63faff4dda6011d260eb1845c26f6cb
SHA1 a30084839f35b22b9c27d9f630fb12262bd1b642
SHA256 3805f063e35bf5150f6f277bff5be3d3255eea14f5cc0dbfdfa980320f910b01
SHA512 0a73a4ecbc006732ad611afb1a7b806b80a064be5065daff6f818f89a61361186a61ceb5c1f959fcbaf8570ecd19999498127d749197faf0111ab034eec88c0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ce26c2ff02b7d5579e37ed81519f422a
SHA1 8649471d484503de55ccb89cf6470ec25156532f
SHA256 3bca1eb6532828f67fb5750d866caf6530a7468617fe7f2509ff93cc45157333
SHA512 92b1f3732d5348b55b9ee5426802facda17b5409a3557133492d310c9a1e522f1a103857e21360b47a2e86174d7d810b3b6b48b3c0cae662b214f0d2794c9eee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 cfcff06f43b91e07952f43560e50c7bc
SHA1 aa3201d7b8513b374bc94fa60b4ce70ad72398d3
SHA256 54cec7f4ba275aaa1fa9450fe40cb8e7f1290f805289c5f1911beb1397729413
SHA512 84dc712decf0dc65d9cb62daf948a101d4ea2ddd5bcdcbedbc6e1a649cc92811249c442b848ece23d0eeaebfa9bec367447d94edc9821cddc46bedc8bacfb766

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 28abd2043b09be42f8090c0100413b00
SHA1 10421132a5c0d4a8d13cad50c03386d35de56df7
SHA256 04c792823c71a25368e835df14135486c4a9e60a476ba0bdd30c180c56a6d7af
SHA512 ea7285e606ac6110a5f0e8d3324ee26a8b2596d602217e94efb0565eb4bc7b67ba16b298846590ff76a874805f87b75845f5505f264a7104d79c0c7653bc8242