Malware Analysis Report

2025-01-03 09:23

Sample ID 240620-rg1jgs1gpd
Target sample
SHA256 c05bfbb7fb329d24f946885ce80b0e15d43267ec4f7e23f03d56d0a10a87814c
Tags
bootkit discovery persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

c05bfbb7fb329d24f946885ce80b0e15d43267ec4f7e23f03d56d0a10a87814c

Threat Level: Likely malicious

The file sample was found to be: Likely malicious.

Malicious Activity Summary

bootkit discovery persistence

Boot or Logon Autostart Execution: Active Setup

Downloads MZ/PE file

Loads dropped DLL

Checks computer location settings

Executes dropped EXE

Adds Run key to start application

Writes to the Master Boot Record (MBR)

Enumerates connected drives

Checks installed software on the system

Drops file in System32 directory

Drops file in Program Files directory

Drops file in Windows directory

Enumerates physical storage devices

Uses Task Scheduler COM API

Suspicious behavior: GetForegroundWindowSpam

Modifies data under HKEY_USERS

Suspicious use of AdjustPrivilegeToken

Suspicious use of SetWindowsHookEx

Suspicious behavior: SetClipboardViewer

Modifies registry class

Uses Volume Shadow Copy service COM API

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of WriteProcessMemory

Suspicious behavior: EnumeratesProcesses

Checks SCSI registry key(s)

Suspicious use of FindShellTrayWindow

Modifies Internet Explorer settings

Suspicious use of SendNotifyMessage

Suspicious behavior: MapViewOfSection

Checks processor information in registry

Enumerates system info in registry

Runs regedit.exe

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-20 14:10

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-20 14:10

Reported

2024-06-20 14:41

Platform

win10-20240404-en

Max time kernel

1514s

Max time network

1801s

Command Line

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html

Signatures

Boot or Logon Autostart Execution: Active Setup

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\software\WOW6432Node\microsoft\Active Setup\Installed Components C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
Key created \REGISTRY\MACHINE\software\WOW6432Node\microsoft\Active Setup\Installed Components C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A

Downloads MZ/PE file

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Downloads\BonziBuddy432.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\tv_enua = "RunDll32 advpack.dll,LaunchINFSection C:\\Windows\\INF\\tv_enua.inf, RemoveCabinet" C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\Downloads\MEMZ.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\SysWOW64\SET4058.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File created C:\Windows\SysWOW64\SET4058.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File opened for modification C:\Windows\SysWOW64\msvcp50.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\7-Zip\Lang\de.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page4.jpg C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ky.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pa-in.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Options\AutoDirPatcher.bat C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Options\AutoDirPatcher.vbs C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\es.txt C:\Windows\System32\msiexec.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ps.txt C:\Windows\System32\msiexec.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\tt.txt C:\Windows\System32\msiexec.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fa.txt C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\7-Zip\Lang\lv.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\CHORD.WAV C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Runtimes\Readme.txt C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page8.jpg C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\sites.nbd C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page5.jpg C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File created C:\Program Files\7-Zip\Lang\hi.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ast.txt C:\Windows\System32\msiexec.exe N/A
File created C:\Program Files\7-Zip\Lang\io.txt C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\7-Zip\Lang\zh-tw.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page12.jpg C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kk.txt C:\Windows\System32\msiexec.exe N/A
File created C:\Program Files\7-Zip\Lang\cs.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Options\menu.bat C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page12.jpg C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Bonzi's Solitaire.vbw C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\msvcrt.dll C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\j2.nbd C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\zh-cn.txt C:\Windows\System32\msiexec.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\eo.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page0.jpg C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page7.jpg C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Apps.nbd C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\MSWINSCK.OCX C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Runtimes\actcnc.exe C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Options\test.vbs C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\j2.nbd-SR C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ja.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ko.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb007.gif C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kaa.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kab.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\BonziBDY_2.EXE C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page1.jpg C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\cb013.gif C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\eu.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sq.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\favicon.ico C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\MSAGENTS\Bonzi.acs C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page2.jpg C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\gl.txt C:\Windows\System32\msiexec.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\it.txt C:\Windows\System32\msiexec.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Bonzi's Solitaire.exe C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Treasure Chest\page5.jpg C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File created C:\Program Files\7-Zip\Lang\hu.txt C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\7-Zip\Lang\ky.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nn.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonz and the Polizoof\page17.htm C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Alpha-net\page6.jpg C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\bn.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\he.txt C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nl.txt C:\Windows\system32\msiexec.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\msagent\AgentCtl.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\SET3BF0.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\1601268389\715946058.pri C:\Windows\SysWOW64\Taskmgr.exe N/A
File created C:\Windows\Installer\$PatchCache$\Managed\96F071321C0420722210000010000000\22.1.0\_7z.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\lhsp\help\SET4035.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File opened for modification C:\Windows\msagent\AgentDp2.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\fonts\andmoipa.ttf C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File opened for modification C:\Windows\lhsp\tv\tvenuax.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\Installer\inprogressinstallinfo.ipi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSICC7F.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\$PatchCache$\Managed\96F071321C0420722210000010000000\22.1.0\_7zFM.exe C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\msagent\AgentPsh.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\lhsp\tv\SET4024.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File opened for modification C:\Windows\Installer\$PatchCache$\Managed\96F071321C0420722210000010000000\22.1.0\_7zip.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\$PatchCache$\Managed\96F071321C0420722210000010000000\22.1.0\_7z.exe C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\msagent\SET3BF0.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File opened for modification C:\Windows\Installer\$PatchCache$\Managed\96F071321C0420722210000010000000\22.1.0\_7zFM.exe C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\help\SET3C26.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\INF\SET4057.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File opened for modification C:\Windows\Installer\$PatchCache$\Managed\96F071321C0420722210000010000000\22.1.0\_7zG.exe C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\msagent\SET3BF1.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\mslwvtts.dll C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File opened for modification C:\Windows\msagent\SET3BEE.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File opened for modification C:\Windows\Installer\$PatchCache$\Managed\96F071321C0420722210000010000000\22.1.0\_7z.sfx C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\msagent\SET3C02.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\msagent\SET3C25.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File opened for modification C:\Windows\msagent\SET3C38.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\Installer\e5ccc12.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\msagent\SET3C38.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File opened for modification C:\Windows\Debug\WIA\wiatrace.log C:\Windows\SysWOW64\mspaint.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SysWOW64\Taskmgr.exe N/A
File opened for modification C:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\msagent\SET3C03.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File opened for modification C:\Windows\msagent\SET3C04.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\INF\SET3C24.tmp C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\Installer\$PatchCache$\Managed\96F071321C0420722210000010000000\22.1.0\_7z.sfx C:\Windows\system32\msiexec.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0008\ C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0008 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004D C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0064 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Capabilities C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0008 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0008\ C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\0006 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0004\ C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\0016 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{4340a6c5-93fa-4706-972c-7b648008a5a7}\0008 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0008 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0008 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0064 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004D C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0004 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0058 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0065 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0005 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0034 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{4340a6c5-93fa-4706-972c-7b648008a5a7}\0008 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0034 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0008 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004C C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Mfg C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0065 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0018 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004C C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0008 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0018 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0004 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0055 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\000A C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\000A\ C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0038 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0018 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Mfg C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004C C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{4340a6c5-93fa-4706-972c-7b648008a5a7}\0008 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\HardwareID C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0004\ C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2002 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Mfg C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\SysWOW64\Taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Capabilities C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0018 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0004 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{88ad39db-0d0c-4a38-8435-4043826b5c91}\000A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{88ad39db-0d0c-4a38-8435-4043826b5c91}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2006 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004E C:\Windows\system32\svchost.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\system32\browser_broker.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\system32\browser_broker.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1b C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133633662696847181" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache C:\Windows\system32\svchost.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\1A\52C64B7E C:\Windows\system32\msiexec.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.google.com C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\ActiveSkin.SkinLabel.1\ = "ActiveSkin.SkinLabel Class" C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628} C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{920FF31F-CA25-451A-9738-3444FC206BCC}\TypeLib C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}\ = "IVBDataObject" C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{822DB1C0-8879-11D1-9EC6-00C04FD7081F} C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{972DE6C2-8B09-11D2-B652-A1FD6CC34260}\ProgID C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F5BE8BE1-7DE6-11D0-91FE-00C04FD701A5}\TypeLib\Version = "2.0" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\MiscStatus C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DD9DA664-8594-11D1-B16A-00C0F0283628}\ = "IImageCombo" C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FDF-1BF9-11D2-BAE8-00104B9E0792} C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C27CCE3D-8596-11D1-B16A-00C0F0283628}\InprocServer32 C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1EFB6599-857C-11D1-B16A-00C0F0283628}\ = "ITab" C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SSCalendar.SSDateComboCtrl.1\CLSID C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F5BE8BDB-7DE6-11D0-91FE-00C04FD701A5}\TypeLib\Version = "2.0" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\Total C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\96F071321C0420722210000010000000\AdvertiseFlags = "388" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}\ToolboxBitmap32 C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6B1BE807-567F-11D1-B652-0060976C699F} C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FD8-1BF9-11D2-BAE8-00104B9E0792}\Implemented Categories\{0DE86A52-2BAA-11CF-A229-00AA003D7352} C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A7B93CA0-7B81-11D0-AC5F-00C04FD97575}\ProxyStubClsid32 C:\Windows\msagent\AgentSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}\TypeLib C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2C247F26-8591-11D1-B16A-00C0F0283628}\ = "IImage" C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A7B93CA0-7B81-11D0-AC5F-00C04FD97575}\ = "IAgentAudioOutputPropertiesEx" C:\Windows\msagent\AgentSvr.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.google.com C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{B0913410-3B44-11D1-ACBA-00C04FD97575}\ = "IAgentCtlCommandEx" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{08C75162-3C9C-11D1-91FE-00C04FD701A5}\ = "IAgentNotifySinkEx" C:\Windows\msagent\AgentSvr.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{065E6FD5-1BF9-11D2-BAE8-00104B9E0792} C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DD9DA660-8594-11D1-B16A-00C0F0283628}\ = "IComboItem" C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\Total C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\Implemented Categories\{0DE86A52-2BAA-11CF-A229-00AA003D7352} C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{53FA8D40-2CDD-11D3-9DD0-D3CD4078982A} C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628} C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F5BE8BDB-7DE6-11D0-91FE-00C04FD701A5}\ProxyStubClsid32 C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Agent.Character2.2 C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DummyPath C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\Total\ = "9773" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{55DD814E-A1B7-4808-9625-4F75A3FAD8A7}\ProxyStubClsid32 C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\ACGPolicyState = "8" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1EFB6595-857C-11D1-B16A-00C0F0283628}\TypeLib\Version = "2.0" C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{916694A9-8AD6-11D2-B6FD-0060976C699F}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}" C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{065E6FD8-1BF9-11D2-BAE8-00104B9E0792}\Implemented Categories\{157083E0-2368-11CF-87B9-00AA006C8166} C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{0A45DB4D-BD0D-11D2-8D14-00104B9E072A}\TypeLib\ = "{0A45DB48-BD0D-11D2-8D14-00104B9E072A}" C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{6B1BE80A-567F-11D1-B652-0060976C699F} C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0A45DB4D-BD0D-11D2-8D14-00104B9E072A}\TypeLib\Version = "2.0" C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C27CCE38-8596-11D1-B16A-00C0F0283628}\InprocServer32 C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F55ED2E0-6E13-11CE-918C-0000C0554C0A} C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{74179610-5A56-11CE-940F-0000C0C14E92}\TypeLib C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{B0913412-3B44-11D1-ACBA-00C04FD97575}\ = "IAgentCommandEx" C:\Windows\msagent\AgentSvr.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DomStorageState C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TabbedBrowsing\NewTabPage\ProcessingFlag = d0be32201fc3da01 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.google.com C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C74190B4-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid32 C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C74190B7-8589-11D1-B16A-00C0F0283628}\TypeLib\Version = "2.0" C:\Users\Admin\Downloads\BonziBuddy432.exe N/A

Runs regedit.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\regedit.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A

Suspicious behavior: MapViewOfSection

Description Indicator Process Target
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: SetClipboardViewer

Description Indicator Process Target
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A
N/A N/A C:\Windows\SysWOW64\Taskmgr.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\BonziBuddy432.exe N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe N/A
N/A N/A C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Windows\SysWOW64\mmc.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Windows\SysWOW64\mmc.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2828 wrote to memory of 4772 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 4772 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 2944 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 4184 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 4184 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2828 wrote to memory of 3788 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffa8db89758,0x7ffa8db89768,0x7ffa8db89778

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1576 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1824 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2068 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2796 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2804 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4076 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4180 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4084 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=2032 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=2808 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4828 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4832 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5036 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5172 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5572 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=5616 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5484 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=5568 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=1648 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=5512 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=5088 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=2844 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=5220 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=5296 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=4352 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=2816 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=5296 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=2844 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=5344 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=5216 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=4832 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=5284 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4200 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=2060 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=5036 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=3068 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1496 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5144 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5924 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=6044 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5928 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=6108 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=5988 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=6016 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=5996 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=6224 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=5020 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=6440 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6336 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=5348 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=6040 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=4208 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=6116 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=6856 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=6424 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=6024 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=6684 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=6380 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=6720 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2400 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7172 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Windows\System32\msiexec.exe

"C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\Downloads\7z2201-x64.msi"

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k netsvcs -s DsmSvc

C:\Windows\system32\srtasks.exe

C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=7384 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=7828 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --mojo-platform-channel-handle=7988 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7884 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=7728 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --mojo-platform-channel-handle=3056 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --mojo-platform-channel-handle=7532 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5244 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7544 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --mojo-platform-channel-handle=6108 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6768 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5156 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=1768 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --mojo-platform-channel-handle=6560 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Users\Admin\Downloads\BonziBuddy432.exe

"C:\Users\Admin\Downloads\BonziBuddy432.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=860 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Program Files (x86)\BonziBuddy432\Runtimes\CheckRuntimes.bat" "

C:\Program Files (x86)\BonziBuddy432\Runtimes\MSAGENT.EXE

MSAGENT.EXE

C:\Program Files (x86)\BonziBuddy432\Runtimes\tv_enua.exe

tv_enua.exe

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentCtl.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentDPv.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\mslwvtts.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentDP2.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentMPx.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentSR.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentPsh.dll"

C:\Windows\msagent\AgentSvr.exe

"C:\Windows\msagent\AgentSvr.exe" /regserver

C:\Windows\SysWOW64\grpconv.exe

grpconv.exe -o

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s C:\Windows\lhsp\tv\tv_enua.dll

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s C:\Windows\lhsp\tv\tvenuax.dll

C:\Windows\SysWOW64\grpconv.exe

grpconv.exe -o

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

C:\Windows\system32\browser_broker.exe

C:\Windows\system32\browser_broker.exe -Embedding

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x3e4

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5772.0.1095045621\1379107946" -parentBuildID 20221007134813 -prefsHandle 1700 -prefMapHandle 1692 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a00eea28-8f80-4c30-940c-196f80079d3b} 5772 "\\.\pipe\gecko-crash-server-pipe.5772" 1780 190788cb258 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5772.1.188444638\1791275426" -parentBuildID 20221007134813 -prefsHandle 2108 -prefMapHandle 2104 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2b8566b1-51c5-4e77-9993-8ddffc4660ff} 5772 "\\.\pipe\gecko-crash-server-pipe.5772" 2120 1906636f858 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5772.2.897594989\543188686" -childID 1 -isForBrowser -prefsHandle 3060 -prefMapHandle 3048 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {81e8ae48-cb8f-4090-be33-0fc37fc207b8} 5772 "\\.\pipe\gecko-crash-server-pipe.5772" 3024 1907c89bb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5772.3.1153786946\652005907" -childID 2 -isForBrowser -prefsHandle 3428 -prefMapHandle 3424 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {464494d8-45f7-4b1b-9092-e5b1cf43534c} 5772 "\\.\pipe\gecko-crash-server-pipe.5772" 3436 1906635b258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5772.4.915127464\1460994168" -childID 3 -isForBrowser -prefsHandle 4452 -prefMapHandle 4448 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {035bfc08-65eb-4fbc-933c-456ab1c194b5} 5772 "\\.\pipe\gecko-crash-server-pipe.5772" 4464 1907d8eb658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5772.5.1681543954\1589490658" -childID 4 -isForBrowser -prefsHandle 3924 -prefMapHandle 4616 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f08b045d-e7ed-4eed-a64a-47211614574d} 5772 "\\.\pipe\gecko-crash-server-pipe.5772" 4352 1907ec0b958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5772.6.1022098635\1408492279" -childID 5 -isForBrowser -prefsHandle 4912 -prefMapHandle 4916 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {13a55fcc-18d5-4790-b475-970175aa10cf} 5772 "\\.\pipe\gecko-crash-server-pipe.5772" 4904 1907ee2b558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5772.7.1626617836\391612797" -childID 6 -isForBrowser -prefsHandle 5104 -prefMapHandle 5108 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {cd95b13e-1150-4a1f-9301-8b3c4fb38d6b} 5772 "\\.\pipe\gecko-crash-server-pipe.5772" 4352 1907ee2bb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5772.8.59351258\1776539713" -childID 7 -isForBrowser -prefsHandle 5652 -prefMapHandle 5660 -prefsLen 26503 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {aa08f2f5-2ea2-4bb9-b27f-6b1c66c5866b} 5772 "\\.\pipe\gecko-crash-server-pipe.5772" 5676 19081126158 tab

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --mojo-platform-channel-handle=8120 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --mojo-platform-channel-handle=5384 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --mojo-platform-channel-handle=7564 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5052 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ.exe"

C:\Users\Admin\Downloads\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ.exe" /watchdog

C:\Users\Admin\Downloads\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ.exe" /watchdog

C:\Users\Admin\Downloads\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ.exe" /watchdog

C:\Users\Admin\Downloads\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ.exe" /watchdog

C:\Users\Admin\Downloads\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ.exe" /watchdog

C:\Users\Admin\Downloads\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ.exe" /main

C:\Windows\SysWOW64\notepad.exe

"C:\Windows\System32\notepad.exe" \note.txt

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --mojo-platform-channel-handle=7008 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --mojo-platform-channel-handle=6828 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7592 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5412 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe

"C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"

C:\Windows\splwow64.exe

C:\Windows\splwow64.exe 12288

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --mojo-platform-channel-handle=1560 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --mojo-platform-channel-handle=6416 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --mojo-platform-channel-handle=7468 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --mojo-platform-channel-handle=6176 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --mojo-platform-channel-handle=8176 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --mojo-platform-channel-handle=764 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --mojo-platform-channel-handle=5472 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --mojo-platform-channel-handle=7396 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --mojo-platform-channel-handle=8000 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --mojo-platform-channel-handle=4040 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --mojo-platform-channel-handle=6248 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --mojo-platform-channel-handle=2856 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --mojo-platform-channel-handle=1544 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --mojo-platform-channel-handle=7864 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --mojo-platform-channel-handle=7264 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --mojo-platform-channel-handle=7244 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --mojo-platform-channel-handle=6724 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --mojo-platform-channel-handle=8364 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --mojo-platform-channel-handle=8356 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --mojo-platform-channel-handle=8668 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --mojo-platform-channel-handle=8688 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --mojo-platform-channel-handle=8848 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --mojo-platform-channel-handle=8864 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --mojo-platform-channel-handle=8880 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --mojo-platform-channel-handle=8904 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --mojo-platform-channel-handle=8920 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --mojo-platform-channel-handle=9060 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --mojo-platform-channel-handle=9300 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --mojo-platform-channel-handle=9436 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --mojo-platform-channel-handle=9560 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --mojo-platform-channel-handle=9804 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --mojo-platform-channel-handle=10284 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --mojo-platform-channel-handle=10420 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --mojo-platform-channel-handle=10452 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --mojo-platform-channel-handle=10972 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --mojo-platform-channel-handle=11100 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --mojo-platform-channel-handle=11640 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --mojo-platform-channel-handle=11812 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --mojo-platform-channel-handle=11484 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --mojo-platform-channel-handle=11756 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --mojo-platform-channel-handle=11420 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --mojo-platform-channel-handle=12152 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --mojo-platform-channel-handle=10744 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --mojo-platform-channel-handle=11716 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --mojo-platform-channel-handle=12528 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --mojo-platform-channel-handle=12696 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --mojo-platform-channel-handle=12724 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --mojo-platform-channel-handle=13040 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --mojo-platform-channel-handle=12704 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --mojo-platform-channel-handle=13292 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --mojo-platform-channel-handle=13316 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

C:\Windows\system32\browser_broker.exe

C:\Windows\system32\browser_broker.exe -Embedding

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --mojo-platform-channel-handle=11688 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --mojo-platform-channel-handle=11460 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\notepad.exe

"C:\Windows\System32\notepad.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --mojo-platform-channel-handle=11192 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe

"C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\mmc.exe

"C:\Windows\System32\mmc.exe"

C:\Windows\system32\mmc.exe

"C:\Windows\system32\mmc.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\mmc.exe

"C:\Windows\System32\mmc.exe"

C:\Windows\system32\mmc.exe

"C:\Windows\system32\mmc.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\mspaint.exe

"C:\Windows\System32\mspaint.exe"

\??\c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DeviceAssociationService

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\mspaint.exe

"C:\Windows\System32\mspaint.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\mmc.exe

"C:\Windows\System32\mmc.exe"

C:\Windows\system32\mmc.exe

"C:\Windows\system32\mmc.exe"

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\mspaint.exe

"C:\Windows\System32\mspaint.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe

"C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5040 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:8

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --mojo-platform-channel-handle=3820 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\Taskmgr.exe

"C:\Windows\System32\Taskmgr.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\calc.exe

"C:\Windows\System32\calc.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\calc.exe

"C:\Windows\System32\calc.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\mmc.exe

"C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"

C:\Windows\system32\mmc.exe

"C:\Windows\System32\devmgmt.msc" "C:\Windows\System32\devmgmt.msc"

C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe

"C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\calc.exe

"C:\Windows\System32\calc.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\mspaint.exe

"C:\Windows\System32\mspaint.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\regedit.exe

"C:\Windows\System32\regedit.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\Taskmgr.exe

"C:\Windows\System32\Taskmgr.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --mojo-platform-channel-handle=8180 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --mojo-platform-channel-handle=11184 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --mojo-platform-channel-handle=1064 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Windows\SysWOW64\calc.exe

"C:\Windows\System32\calc.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\SysWOW64\control.exe

"C:\Windows\System32\control.exe"

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --mojo-platform-channel-handle=1060 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --mojo-platform-channel-handle=8136 --field-trial-handle=1792,i,16888857146574393597,12437056209901127480,131072 /prefetch:1

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.8.0.8.0.8.0.ip6.arpa udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 234.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 beacons4.gvt2.com udp
US 216.239.32.116:443 beacons4.gvt2.com tcp
US 216.239.32.116:443 beacons4.gvt2.com udp
US 8.8.8.8:53 35.215.58.216.in-addr.arpa udp
US 8.8.8.8:53 116.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 226.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.187.238:443 consent.google.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 216.58.201.106:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 106.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 11.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
US 8.8.8.8:53 i.ytimg.com udp
GB 216.58.212.246:443 i.ytimg.com tcp
US 8.8.8.8:53 encrypted-vtbn0.gstatic.com udp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 246.212.58.216.in-addr.arpa udp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com tcp
US 8.8.8.8:53 14.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 id.google.com udp
GB 142.250.187.195:443 id.google.com tcp
GB 216.58.212.246:443 i.ytimg.com udp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.178.14:443 www.youtube.com udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 216.58.213.6:443 static.doubleclick.net tcp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 6.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 bonzi.link udp
FR 151.106.4.82:443 bonzi.link tcp
FR 151.106.4.82:443 bonzi.link tcp
FR 151.106.4.82:443 bonzi.link udp
US 8.8.8.8:53 d36ee2fcip1434.cloudfront.net udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 82.4.106.151.in-addr.arpa udp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 ajax.googleapis.com udp
US 8.8.8.8:53 s0.2mdn.net udp
GB 216.58.204.70:443 s0.2mdn.net tcp
GB 216.58.204.70:443 s0.2mdn.net tcp
GB 216.58.204.70:443 s0.2mdn.net tcp
GB 216.58.204.70:443 s0.2mdn.net udp
FR 151.106.4.82:80 bonzi.link tcp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 70.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 234.16.217.172.in-addr.arpa udp
FR 151.106.4.82:80 bonzi.link tcp
FR 151.106.4.82:80 bonzi.link tcp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
FR 151.106.4.82:80 bonzi.link tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
FR 151.106.4.82:80 bonzi.link tcp
FR 151.106.4.82:80 bonzi.link tcp
FR 151.106.4.82:80 bonzi.link tcp
FR 151.106.4.82:80 bonzi.link tcp
FR 151.106.4.82:80 bonzi.link tcp
FR 151.106.4.82:80 bonzi.link tcp
FR 151.106.4.82:80 bonzi.link tcp
FR 151.106.4.82:80 bonzi.link tcp
FR 151.106.4.82:80 bonzi.link tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.195:443 id.google.com udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.179.246:443 i.ytimg.com udp
GB 142.250.178.14:443 www.youtube.com udp
US 8.8.8.8:53 246.179.250.142.in-addr.arpa udp
GB 142.250.200.10:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 beacons.gvt2.com udp
GB 172.217.169.3:443 beacons.gvt2.com tcp
GB 172.217.169.3:443 beacons.gvt2.com udp
US 8.8.8.8:53 3.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 97.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 archive.org udp
US 207.241.224.2:443 archive.org tcp
US 207.241.224.2:443 archive.org tcp
US 8.8.8.8:53 analytics.archive.org udp
US 8.8.8.8:53 polyfill.archive.org udp
US 207.241.225.195:443 analytics.archive.org tcp
US 207.241.239.241:443 polyfill.archive.org tcp
US 8.8.8.8:53 2.224.241.207.in-addr.arpa udp
US 8.8.8.8:53 195.225.241.207.in-addr.arpa udp
US 8.8.8.8:53 241.239.241.207.in-addr.arpa udp
US 8.8.8.8:53 sentry.archive.org udp
US 207.241.239.241:443 sentry.archive.org tcp
US 207.241.224.2:443 archive.org tcp
US 8.8.8.8:53 athena.archive.org udp
US 207.241.225.195:443 athena.archive.org tcp
US 207.241.225.195:443 athena.archive.org tcp
US 207.241.225.195:443 athena.archive.org tcp
US 8.8.8.8:53 be-api.us.archive.org udp
US 207.241.225.125:443 be-api.us.archive.org tcp
US 8.8.8.8:53 ia804706.us.archive.org udp
US 207.241.236.16:443 ia804706.us.archive.org tcp
US 207.241.236.16:443 ia804706.us.archive.org tcp
US 8.8.8.8:53 125.225.241.207.in-addr.arpa udp
US 8.8.8.8:53 16.236.241.207.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.179.246:443 i.ytimg.com udp
GB 142.250.178.14:443 www.youtube.com udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 beacons2.gvt2.com udp
US 216.239.32.116:443 beacons4.gvt2.com udp
SG 74.125.68.94:443 beacons2.gvt2.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 e2c17.gcp.gvt2.com udp
NL 34.90.241.47:443 e2c17.gcp.gvt2.com tcp
SG 74.125.68.94:443 beacons2.gvt2.com tcp
SG 74.125.68.94:443 beacons2.gvt2.com udp
GB 172.217.169.3:443 beacons.gvt2.com udp
US 8.8.8.8:53 94.68.125.74.in-addr.arpa udp
US 8.8.8.8:53 47.241.90.34.in-addr.arpa udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 ia601005.us.archive.org udp
US 207.241.227.35:443 ia601005.us.archive.org tcp
US 8.8.8.8:53 35.227.241.207.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 bonzibuddy.org udp
US 198.187.29.31:443 bonzibuddy.org tcp
US 198.187.29.31:443 bonzibuddy.org tcp
US 8.8.8.8:53 31.29.187.198.in-addr.arpa udp
GB 142.250.178.14:443 www.youtube.com udp
US 198.187.29.31:80 bonzibuddy.org tcp
US 198.187.29.31:80 bonzibuddy.org tcp
US 8.8.8.8:53 lh5.googleusercontent.com udp
GB 172.217.16.225:443 lh5.googleusercontent.com tcp
GB 172.217.16.225:443 lh5.googleusercontent.com udp
US 216.239.32.116:443 beacons4.gvt2.com udp
GB 142.250.179.246:443 i.ytimg.com udp
GB 142.250.200.10:443 jnn-pa.googleapis.com udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 butterfly-on-desktop.soft32.com udp
DE 18.66.122.54:443 butterfly-on-desktop.soft32.com tcp
DE 18.66.122.54:443 butterfly-on-desktop.soft32.com tcp
US 8.8.8.8:53 d3gx3uz4yj2hnq.cloudfront.net udp
DE 99.86.1.53:443 d3gx3uz4yj2hnq.cloudfront.net tcp
DE 99.86.1.53:443 d3gx3uz4yj2hnq.cloudfront.net tcp
US 8.8.8.8:53 d3fnqfpn2r2a3x.cloudfront.net udp
US 8.8.8.8:53 d22blwhp6neszm.cloudfront.net udp
US 8.8.8.8:53 www.googletagservices.com udp
FR 3.162.40.203:443 d3fnqfpn2r2a3x.cloudfront.net tcp
FR 3.162.40.203:443 d3fnqfpn2r2a3x.cloudfront.net tcp
FR 3.162.40.203:443 d3fnqfpn2r2a3x.cloudfront.net tcp
FR 3.162.40.203:443 d3fnqfpn2r2a3x.cloudfront.net tcp
FR 3.162.40.203:443 d3fnqfpn2r2a3x.cloudfront.net tcp
FR 3.162.40.203:443 d3fnqfpn2r2a3x.cloudfront.net tcp
DE 18.66.107.150:443 d22blwhp6neszm.cloudfront.net tcp
US 8.8.8.8:53 soft32.disqus.com udp
US 199.232.192.134:443 soft32.disqus.com tcp
US 8.8.8.8:53 54.122.66.18.in-addr.arpa udp
US 8.8.8.8:53 119.82.161.3.in-addr.arpa udp
US 8.8.8.8:53 53.1.86.99.in-addr.arpa udp
US 8.8.8.8:53 203.40.162.3.in-addr.arpa udp
US 8.8.8.8:53 150.107.66.18.in-addr.arpa udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 c.disquscdn.com udp
US 8.8.8.8:53 disqus.com udp
BE 64.233.166.154:443 stats.g.doubleclick.net tcp
US 151.101.0.134:443 disqus.com tcp
DE 99.86.4.41:443 c.disquscdn.com tcp
US 8.8.8.8:53 referrer.disqus.com udp
US 8.8.8.8:53 tempest.services.disqus.com udp
US 199.232.192.134:443 referrer.disqus.com tcp
US 199.232.192.134:443 referrer.disqus.com tcp
US 199.232.196.64:443 tempest.services.disqus.com tcp
US 199.232.196.64:443 tempest.services.disqus.com tcp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 platform.twitter.com udp
GB 163.70.147.23:443 connect.facebook.net tcp
BE 151.101.8.157:443 platform.twitter.com tcp
DE 99.86.4.41:443 c.disquscdn.com tcp
US 8.8.8.8:53 lh3.googleusercontent.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 www.facebook.net udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 151.101.65.44:443 cdn.taboola.com tcp
US 8.8.8.8:53 134.192.232.199.in-addr.arpa udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 154.166.233.64.in-addr.arpa udp
US 8.8.8.8:53 134.0.101.151.in-addr.arpa udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 41.4.86.99.in-addr.arpa udp
US 8.8.8.8:53 64.196.232.199.in-addr.arpa udp
US 8.8.8.8:53 23.147.70.163.in-addr.arpa udp
US 8.8.8.8:53 157.8.101.151.in-addr.arpa udp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 syndication.twitter.com udp
US 104.244.42.72:443 syndication.twitter.com tcp
US 8.8.8.8:53 js-agent.newrelic.com udp
US 8.8.8.8:53 drugnom0x8w61.cloudfront.net udp
US 162.247.243.39:443 js-agent.newrelic.com tcp
DE 18.245.62.43:443 drugnom0x8w61.cloudfront.net tcp
US 8.8.8.8:53 bam.nr-data.net udp
US 162.247.243.29:443 bam.nr-data.net tcp
US 8.8.8.8:53 44.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 72.42.244.104.in-addr.arpa udp
US 8.8.8.8:53 39.243.247.162.in-addr.arpa udp
US 8.8.8.8:53 43.62.245.18.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 85c7f0252f8f8f73629a41a39db4ea45.safeframe.googlesyndication.com udp
GB 172.217.169.65:443 85c7f0252f8f8f73629a41a39db4ea45.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 trc.taboola.com udp
US 8.8.8.8:53 29.243.247.162.in-addr.arpa udp
GB 172.217.169.65:443 85c7f0252f8f8f73629a41a39db4ea45.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 trc-events.taboola.com udp
NL 141.226.228.48:443 trc-events.taboola.com tcp
NL 141.226.228.48:443 trc-events.taboola.com tcp
NL 141.226.228.48:443 trc-events.taboola.com tcp
NL 141.226.228.48:443 trc-events.taboola.com tcp
NL 141.226.228.48:443 trc-events.taboola.com tcp
NL 141.226.228.48:443 trc-events.taboola.com tcp
US 8.8.8.8:53 48.228.226.141.in-addr.arpa udp
US 8.8.8.8:53 65.169.217.172.in-addr.arpa udp
US 216.239.32.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 js.centerbodyapps.com udp
US 72.52.179.174:443 js.centerbodyapps.com tcp
US 72.52.179.174:443 js.centerbodyapps.com tcp
US 8.8.8.8:53 2710d93e1258e475597514e7db2cece5.safeframe.googlesyndication.com udp
GB 163.70.147.23:443 connect.facebook.net udp
US 8.8.8.8:53 d39gqu6btbxc9z.cloudfront.net udp
US 8.8.8.8:53 www.facebook.net udp
DE 18.245.78.195:443 d39gqu6btbxc9z.cloudfront.net tcp
DE 18.245.78.195:443 d39gqu6btbxc9z.cloudfront.net tcp
US 8.8.8.8:53 d3jj3bqika1l3e.cloudfront.net udp
FR 13.32.158.56:443 d3jj3bqika1l3e.cloudfront.net tcp
US 8.8.8.8:53 195.78.245.18.in-addr.arpa udp
US 8.8.8.8:53 56.158.32.13.in-addr.arpa udp
US 8.8.8.8:53 www.7-zip.org udp
DE 49.12.202.237:443 www.7-zip.org tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 185.199.110.133:443 objects.githubusercontent.com tcp
US 8.8.8.8:53 237.202.12.49.in-addr.arpa udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 133.110.199.185.in-addr.arpa udp
US 8.8.8.8:53 164.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 fastestvpn-com.webpkgcache.com udp
GB 216.58.212.225:443 fastestvpn-com.webpkgcache.com tcp
GB 216.58.212.225:443 fastestvpn-com.webpkgcache.com udp
US 8.8.8.8:53 225.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 google.com udp
GB 142.250.178.14:443 google.com tcp
US 8.8.8.8:53 e2c56.gcp.gvt2.com udp
ES 34.0.206.140:443 e2c56.gcp.gvt2.com tcp
US 8.8.8.8:53 140.206.0.34.in-addr.arpa udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com udp
GB 172.217.169.3:443 beacons.gvt2.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
US 8.8.8.8:53 thepiratebay.org udp
US 162.159.137.6:443 thepiratebay.org tcp
US 162.159.137.6:443 thepiratebay.org tcp
US 162.159.137.6:80 thepiratebay.org tcp
US 162.159.137.6:443 thepiratebay.org udp
US 8.8.8.8:53 6.137.159.162.in-addr.arpa udp
US 8.8.8.8:53 torrindex.net udp
US 8.8.8.8:53 iconcardinal.com udp
US 192.243.61.227:443 iconcardinal.com tcp
US 104.21.70.143:443 torrindex.net tcp
US 104.21.70.143:443 torrindex.net tcp
US 104.21.70.143:443 torrindex.net tcp
US 192.243.61.227:443 iconcardinal.com tcp
US 8.8.8.8:53 apps.identrust.com udp
NL 23.63.101.153:80 apps.identrust.com tcp
US 8.8.8.8:53 js.wpadmngr.com udp
US 104.21.70.143:443 torrindex.net udp
US 8.8.8.8:53 ricewaterhou.xyz udp
NL 45.133.44.53:443 js.wpadmngr.com tcp
US 54.225.185.110:443 ricewaterhou.xyz tcp
US 8.8.8.8:53 143.70.21.104.in-addr.arpa udp
US 8.8.8.8:53 227.61.243.192.in-addr.arpa udp
US 8.8.8.8:53 53.44.133.45.in-addr.arpa udp
US 8.8.8.8:53 153.101.63.23.in-addr.arpa udp
US 8.8.8.8:53 110.185.225.54.in-addr.arpa udp
US 8.8.8.8:53 na.nawpush.com udp
US 8.8.8.8:53 js.capndr.com udp
NL 45.133.44.25:443 na.nawpush.com tcp
NL 45.133.44.53:443 js.capndr.com tcp
US 8.8.8.8:53 notification.tubecup.net udp
DE 88.198.209.15:443 notification.tubecup.net tcp
US 8.8.8.8:53 dwhitdoedsrag.org udp
US 34.195.224.242:443 dwhitdoedsrag.org tcp
US 8.8.8.8:53 storage.multstorage.com udp
US 8.8.8.8:53 fp.metricswpsh.com udp
US 8.8.8.8:53 8345efe11f.8d742929b8.com udp
US 8.8.8.8:53 js.wpshsdk.com udp
US 8.8.8.8:53 js.wpushsdk.com udp
DE 157.90.84.242:443 fp.metricswpsh.com tcp
NL 45.133.44.53:443 js.cabnnr.com tcp
US 172.67.174.51:443 storage.multstorage.com tcp
NL 45.133.44.52:443 js.cabnnr.com tcp
NL 45.133.44.53:443 js.cabnnr.com tcp
DE 157.90.84.242:443 fp.metricswpsh.com tcp
US 8.8.8.8:53 25.44.133.45.in-addr.arpa udp
US 8.8.8.8:53 15.209.198.88.in-addr.arpa udp
US 8.8.8.8:53 242.224.195.34.in-addr.arpa udp
US 8.8.8.8:53 242.84.90.157.in-addr.arpa udp
US 8.8.8.8:53 52.44.133.45.in-addr.arpa udp
US 8.8.8.8:53 51.174.67.172.in-addr.arpa udp
US 34.195.224.242:443 dwhitdoedsrag.org tcp
US 34.195.224.242:443 dwhitdoedsrag.org tcp
US 8.8.8.8:53 d1n3aexzs37q4s.cloudfront.net udp
US 8.8.8.8:53 a.exdynsrv.com udp
US 8.8.8.8:53 a.exosrv.com udp
US 8.8.8.8:53 abservinean.com udp
US 8.8.8.8:53 apibay.org udp
US 3.164.160.134:443 d1n3aexzs37q4s.cloudfront.net tcp
US 8.8.8.8:53 cdn.engine.spotscenered.info udp
US 8.8.8.8:53 syndication.exdynsrv.com udp
US 8.8.8.8:53 134.160.164.3.in-addr.arpa udp
US 8.8.8.8:53 pogothere.xyz udp
US 8.8.8.8:53 getrunkhomuto.info udp
US 8.8.8.8:53 iththinleldedallov.info udp
US 8.8.8.8:53 ghabovethec.info udp
US 54.225.185.110:443 dwhitdoedsrag.org tcp
US 8.8.8.8:53 www.facebook.com udp
US 104.21.62.171:443 apibay.org tcp
US 8.8.8.8:53 accounts.google.com udp
US 104.21.12.172:443 iththinleldedallov.info tcp
US 104.21.12.172:443 iththinleldedallov.info tcp
US 104.21.12.172:443 iththinleldedallov.info tcp
GB 18.244.140.110:443 ghabovethec.info tcp
GB 143.204.176.70:443 getrunkhomuto.info tcp
IE 209.85.203.84:443 accounts.google.com tcp
GB 163.70.147.35:443 www.facebook.com tcp
US 172.67.220.203:443 pogothere.xyz tcp
US 172.67.220.203:443 pogothere.xyz tcp
US 8.8.8.8:53 171.62.21.104.in-addr.arpa udp
US 8.8.8.8:53 172.12.21.104.in-addr.arpa udp
US 8.8.8.8:53 110.140.244.18.in-addr.arpa udp
US 8.8.8.8:53 70.176.204.143.in-addr.arpa udp
US 8.8.8.8:53 35.147.70.163.in-addr.arpa udp
US 8.8.8.8:53 84.203.85.209.in-addr.arpa udp
US 8.8.8.8:53 203.220.67.172.in-addr.arpa udp
US 104.17.159.201:443 cdn.engine.spotscenered.info tcp
GB 195.181.164.21:443 a.exdynsrv.com tcp
IE 209.85.203.84:443 accounts.google.com udp
US 8.8.8.8:53 s.uuidksinc.net udp
NL 95.211.229.247:443 syndication.exdynsrv.com tcp
US 34.195.224.242:443 dwhitdoedsrag.org tcp
NL 45.133.44.52:443 js.cabnnr.com tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 dotsply.com udp
US 8.8.8.8:53 c.adsco.re udp
NL 31.220.27.134:443 s.uuidksinc.net tcp
NL 31.220.27.134:443 s.uuidksinc.net tcp
GB 142.250.200.10:443 content-autofill.googleapis.com udp
US 104.17.167.186:443 c.adsco.re tcp
US 172.66.43.213:443 dotsply.com tcp
US 104.21.12.172:443 iththinleldedallov.info udp
US 8.8.8.8:53 adsco.re udp
US 8.8.8.8:53 6.adsco.re udp
US 8.8.8.8:53 4.adsco.re udp
US 162.252.214.5:443 4.adsco.re tcp
US 162.252.214.5:443 4.adsco.re tcp
US 104.17.166.186:443 6.adsco.re tcp
US 8.8.8.8:53 201.159.17.104.in-addr.arpa udp
US 8.8.8.8:53 21.164.181.195.in-addr.arpa udp
US 8.8.8.8:53 134.27.220.31.in-addr.arpa udp
US 8.8.8.8:53 247.229.211.95.in-addr.arpa udp
US 8.8.8.8:53 186.167.17.104.in-addr.arpa udp
US 8.8.8.8:53 213.43.66.172.in-addr.arpa udp
US 8.8.8.8:53 5.214.252.162.in-addr.arpa udp
US 8.8.8.8:53 186.166.17.104.in-addr.arpa udp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 unuzxsxbaqag.l4.adsco.re udp
US 8.8.8.8:53 unuzxsxbaqag.n4.adsco.re udp
US 8.8.8.8:53 unuzxsxbaqag.s4.adsco.re udp
US 162.252.214.5:2087 4.adsco.re tcp
US 104.17.166.186:2087 6.adsco.re tcp
US 104.17.167.186:443 6.adsco.re udp
US 8.8.8.8:53 engine.spotscenered.info udp
GB 185.200.118.51:443 unuzxsxbaqag.l4.adsco.re tcp
US 38.132.109.115:443 unuzxsxbaqag.n4.adsco.re tcp
US 38.132.109.186:3478 udp
SG 185.200.116.90:3478 udp
GB 185.200.118.90:3478 udp
US 104.17.166.186:443 6.adsco.re udp
US 162.252.214.5:443 4.adsco.re tcp
SG 185.200.116.51:443 unuzxsxbaqag.s4.adsco.re tcp
SG 185.200.116.51:443 unuzxsxbaqag.s4.adsco.re tcp
US 104.17.159.201:443 engine.spotscenered.info udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 ad.crwdcntrl.net udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
IE 52.213.38.247:443 bcp.crwdcntrl.net tcp
IE 54.72.120.129:443 bcp.crwdcntrl.net tcp
DE 65.9.66.104:443 tags.crwdcntrl.net tcp
US 8.8.8.8:53 engine.4dsply.com udp
US 104.16.202.119:443 engine.4dsply.com tcp
US 8.8.8.8:53 51.118.200.185.in-addr.arpa udp
US 8.8.8.8:53 186.109.132.38.in-addr.arpa udp
US 8.8.8.8:53 90.116.200.185.in-addr.arpa udp
US 8.8.8.8:53 90.118.200.185.in-addr.arpa udp
US 8.8.8.8:53 247.38.213.52.in-addr.arpa udp
US 8.8.8.8:53 129.120.72.54.in-addr.arpa udp
US 8.8.8.8:53 104.66.9.65.in-addr.arpa udp
US 8.8.8.8:53 51.116.200.185.in-addr.arpa udp
US 8.8.8.8:53 119.202.16.104.in-addr.arpa udp
US 34.195.224.242:443 dwhitdoedsrag.org tcp
US 34.195.224.242:443 dwhitdoedsrag.org tcp
US 34.195.224.242:443 dwhitdoedsrag.org tcp
US 8.8.8.8:53 clients2.google.com udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
SG 74.125.68.94:443 beacons2.gvt2.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
GB 142.250.187.206:443 clients2.google.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 bonzibuddy.tk udp
US 172.67.138.185:80 bonzibuddy.tk tcp
US 172.67.138.185:80 bonzibuddy.tk tcp
US 172.67.138.185:443 bonzibuddy.tk tcp
US 8.8.8.8:53 x2.c.lencr.org udp
BE 23.55.97.11:80 x2.c.lencr.org tcp
US 8.8.8.8:53 185.138.67.172.in-addr.arpa udp
US 8.8.8.8:53 11.97.55.23.in-addr.arpa udp
US 8.8.8.8:53 code.jquery.com udp
US 151.101.130.137:443 code.jquery.com tcp
US 151.101.130.137:443 code.jquery.com tcp
US 172.67.138.185:443 bonzibuddy.tk tcp
US 172.67.138.185:443 bonzibuddy.tk tcp
BE 23.55.97.11:80 x2.c.lencr.org tcp
BE 23.55.97.11:80 x2.c.lencr.org tcp
US 8.8.8.8:53 137.130.101.151.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 8.8.8.8:53 push.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 shavar.services.mozilla.com udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 52.42.69.239:443 shavar.services.mozilla.com tcp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
N/A 127.0.0.1:53414 tcp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 8.8.8.8:53 166.188.117.34.in-addr.arpa udp
US 8.8.8.8:53 239.69.42.52.in-addr.arpa udp
N/A 127.0.0.1:53421 tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 161.19.199.152.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 google.com udp
GB 142.250.178.14:443 google.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 172.217.169.22:443 i.ytimg.com udp
US 8.8.8.8:53 22.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.179.238:443 www.youtube.com udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 216.58.212.226:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 226.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 185.199.109.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 beacons3.gvt2.com udp
GB 216.58.213.3:443 beacons3.gvt2.com tcp
US 8.8.8.8:53 133.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 154.110.199.185.in-addr.arpa udp
GB 216.58.213.3:443 beacons3.gvt2.com udp
US 8.8.8.8:53 collector.github.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 api.github.com udp
US 140.82.112.22:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 3.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 22.112.82.140.in-addr.arpa udp
US 8.8.8.8:53 codeload.github.com udp
GB 20.26.156.216:443 codeload.github.com tcp
US 8.8.8.8:53 216.156.26.20.in-addr.arpa udp
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
NL 23.62.61.194:443 www.bing.com tcp
NL 23.62.61.194:443 www.bing.com tcp
US 8.8.8.8:53 233.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 194.61.62.23.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 apis.google.com udp
GB 20.26.156.210:443 api.github.com tcp
GB 142.250.200.14:443 apis.google.com tcp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 beacons.gvt2.com udp
GB 172.217.169.3:443 beacons.gvt2.com udp
US 8.8.8.8:53 e2c37.gcp.gvt2.com udp
ID 35.219.111.231:443 e2c37.gcp.gvt2.com tcp
ID 35.219.111.231:443 e2c37.gcp.gvt2.com tcp
US 8.8.8.8:53 231.111.219.35.in-addr.arpa udp
US 8.8.8.8:53 e2c70.gcp.gvt2.com udp
CL 34.0.63.29:443 e2c70.gcp.gvt2.com tcp
GB 172.217.169.22:443 i.ytimg.com udp
CL 34.0.63.29:443 e2c70.gcp.gvt2.com tcp
GB 142.250.179.238:443 www.youtube.com udp
US 8.8.8.8:53 beacons2.gvt2.com udp
US 64.233.168.94:443 beacons2.gvt2.com udp
GB 216.58.212.226:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 94.168.233.64.in-addr.arpa udp
US 8.8.8.8:53 29.63.0.34.in-addr.arpa udp
US 8.8.8.8:53 monkeytype.com udp
US 104.26.0.151:443 monkeytype.com tcp
US 104.26.0.151:443 monkeytype.com tcp
US 8.8.8.8:53 151.0.26.104.in-addr.arpa udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 api.monkeytype.com udp
GB 20.26.156.210:443 api.github.com tcp
US 104.26.0.151:443 api.monkeytype.com tcp
US 172.67.69.61:443 api.monkeytype.com tcp
US 172.67.69.61:443 api.monkeytype.com tcp
US 8.8.8.8:53 cdn.intergient.com udp
DE 18.66.122.103:443 cdn.intergient.com tcp
US 8.8.8.8:53 61.69.67.172.in-addr.arpa udp
US 8.8.8.8:53 fixedfold.com udp
US 8.8.8.8:53 cdn.intergi.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 104.18.24.111:443 fixedfold.com tcp
DE 13.32.27.53:443 cdn.intergi.com tcp
US 8.8.8.8:53 static.adsafeprotected.com udp
DE 18.66.112.27:443 static.adsafeprotected.com tcp
US 8.8.8.8:53 impression-inferences-edge-prod.playwire.com udp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 z.moatads.com udp
US 8.8.8.8:53 px.moatads.com udp
US 104.22.74.216:443 btloader.com tcp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 2.21.189.220:443 px.moatads.com tcp
GB 2.21.189.220:443 px.moatads.com tcp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
FR 52.222.149.120:443 impression-inferences-edge-prod.playwire.com tcp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 104.18.24.111:443 fixedfold.com udp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 130.211.23.194:443 api.btloader.com tcp
US 8.8.8.8:53 103.122.66.18.in-addr.arpa udp
US 8.8.8.8:53 111.24.18.104.in-addr.arpa udp
US 8.8.8.8:53 53.27.32.13.in-addr.arpa udp
US 8.8.8.8:53 27.112.66.18.in-addr.arpa udp
US 8.8.8.8:53 216.74.22.104.in-addr.arpa udp
US 8.8.8.8:53 220.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 120.149.222.52.in-addr.arpa udp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 6.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
GB 141.147.81.223:443 mb.moatads.com tcp
US 130.211.23.194:443 api.btloader.com udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 223.81.147.141.in-addr.arpa udp
US 8.8.8.8:53 firebase.googleapis.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
US 8.8.8.8:53 oa.openxcdn.net udp
US 8.8.8.8:53 static.criteo.net udp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 34.102.146.192:443 oa.openxcdn.net tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 8.8.8.8:53 87.70.96.34.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 192.146.102.34.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 gum.criteo.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
GB 216.58.212.226:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
DE 13.224.186.120:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 cd836371f1d.cdn.intergient.com udp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 120.186.224.13.in-addr.arpa udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 fid.agkn.com udp
GB 142.250.200.10:443 imasdk.googleapis.com tcp
DE 13.224.186.120:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
DE 162.19.138.117:443 id5-sync.com tcp
US 34.160.46.1:443 fid.agkn.com tcp
IE 54.72.245.162:443 id.crwdcntrl.net tcp
DE 99.86.4.71:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
GB 23.53.174.156:443 secure.cdn.fastclick.net tcp
GB 23.53.174.156:443 secure.cdn.fastclick.net tcp
US 172.67.38.106:443 cdn.id5-sync.com tcp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 proc.ad.cpe.dotomi.com udp
NL 64.158.223.146:443 proc.ad.cpe.dotomi.com tcp
US 8.8.8.8:53 72.242.73.3.in-addr.arpa udp
US 8.8.8.8:53 1.46.160.34.in-addr.arpa udp
US 8.8.8.8:53 162.245.72.54.in-addr.arpa udp
US 8.8.8.8:53 117.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 71.4.86.99.in-addr.arpa udp
US 8.8.8.8:53 106.38.67.172.in-addr.arpa udp
US 8.8.8.8:53 156.174.53.23.in-addr.arpa udp
US 8.8.8.8:53 82.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 match.adsrvr.org udp
US 3.33.220.150:443 match.adsrvr.org tcp
US 8.8.8.8:53 rtb.gumgum.com udp
IE 54.216.224.159:443 rtb.gumgum.com tcp
US 8.8.8.8:53 146.223.158.64.in-addr.arpa udp
US 8.8.8.8:53 dis.eu.criteo.com udp
NL 178.250.1.9:443 dis.eu.criteo.com tcp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 ice.360yield.com udp
IE 52.208.202.34:443 ice.360yield.com tcp
US 8.8.8.8:53 uipglob.semasio.net udp
DK 77.243.51.122:443 uipglob.semasio.net tcp
US 8.8.8.8:53 150.220.33.3.in-addr.arpa udp
US 8.8.8.8:53 159.224.216.54.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 34.202.208.52.in-addr.arpa udp
US 8.8.8.8:53 d.turn.com udp
NL 46.228.164.13:443 d.turn.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
DE 37.252.171.52:443 ib.adnxs.com tcp
US 8.8.8.8:53 122.51.243.77.in-addr.arpa udp
US 8.8.8.8:53 13.164.228.46.in-addr.arpa udp
US 8.8.8.8:53 52.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 ce.lijit.com udp
IE 52.215.32.4:443 ce.lijit.com tcp
US 8.8.8.8:53 4.32.215.52.in-addr.arpa udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 e2c53.gcp.gvt2.com udp
US 35.217.93.191:443 e2c53.gcp.gvt2.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
DE 108.138.8.164:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 grid.bidswitch.net udp
DE 37.252.171.52:443 ib.adnxs.com tcp
US 8.8.8.8:53 hb.yellowblue.io udp
US 172.64.151.101:443 htlb.casalemedia.com tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 35.186.253.211:443 rtb.openx.net tcp
US 35.186.253.211:443 rtb.openx.net tcp
NL 185.64.189.112:443 hbopenbid.pubmatic.com tcp
DE 52.59.30.68:443 btlr.sharethrough.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
US 8.8.8.8:53 g2.gumgum.com udp
US 8.8.8.8:53 bidder.criteo.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
DE 52.222.236.91:443 hb.yellowblue.io tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
GB 172.217.169.3:443 beacons.gvt2.com udp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 52.94.222.140:443 aax-eu.amazon-adsystem.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 ssp-sync.criteo.com udp
US 8.8.8.8:53 191.93.217.35.in-addr.arpa udp
US 8.8.8.8:53 164.8.138.108.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 150.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 211.253.186.35.in-addr.arpa udp
US 8.8.8.8:53 112.189.64.185.in-addr.arpa udp
US 8.8.8.8:53 8.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 139.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 68.30.59.52.in-addr.arpa udp
US 8.8.8.8:53 91.236.222.52.in-addr.arpa udp
US 8.8.8.8:53 9.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
GB 172.217.169.65:443 2710d93e1258e475597514e7db2cece5.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
NL 178.250.1.3:443 static.criteo.net tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 cdn.ampproject.org udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 playwire-d.openx.net udp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
US 34.98.64.218:443 playwire-d.openx.net tcp
US 34.160.46.1:443 fid.agkn.com udp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 x.bidswitch.net udp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 2.21.189.68:443 eus.rubiconproject.com tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 2.21.189.68:443 eus.rubiconproject.com tcp
GB 142.250.187.206:443 www.youtube.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 104.18.38.76:443 js-sec.indexww.com tcp
GB 2.21.188.221:443 acdn.adnxs.com tcp
GB 2.21.188.239:443 ads.pubmatic.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
NL 178.250.1.11:443 gum.criteo.com tcp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
US 34.98.64.218:443 playwire-d.openx.net udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 secure.adnxs.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 cms.quantserve.com udp
US 8.8.8.8:53 c1.adform.net udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
GB 172.217.169.66:443 cm.g.doubleclick.net tcp
GB 172.217.169.66:443 cm.g.doubleclick.net tcp
US 8.8.8.8:53 140.222.94.52.in-addr.arpa udp
US 8.8.8.8:53 7.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 193.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 68.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 76.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 221.188.21.2.in-addr.arpa udp
US 8.8.8.8:53 239.188.21.2.in-addr.arpa udp
DE 91.228.74.166:443 cms.quantserve.com tcp
DK 37.157.6.243:443 c1.adform.net tcp
US 8.8.8.8:53 ad.360yield.com udp
IE 54.229.87.16:443 ad.360yield.com tcp
US 8.8.8.8:53 token.rubiconproject.com udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 8.8.8.8:53 66.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 166.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 243.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 16.87.229.54.in-addr.arpa udp
US 8.8.8.8:53 inmobi-match.dotomi.com udp
NL 63.215.202.137:443 inmobi-match.dotomi.com tcp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 us-u.openx.net udp
US 8.8.8.8:53 io.narrative.io udp
IE 52.50.29.241:443 io.narrative.io tcp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 137.202.215.63.in-addr.arpa udp
GB 172.217.169.66:443 cm.g.doubleclick.net udp
DK 77.243.51.122:443 uipglob.semasio.net tcp
US 8.8.8.8:53 px.ads.linkedin.com udp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 13.107.42.14:443 px.ads.linkedin.com tcp
IE 52.51.16.113:443 pr-bh.ybp.yahoo.com tcp
US 54.174.166.97:443 sync.srv.stackadapt.com tcp
US 54.174.166.97:443 sync.srv.stackadapt.com tcp
US 54.174.166.97:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 dis.criteo.com udp
NL 178.250.1.9:443 dis.criteo.com tcp
US 8.8.8.8:53 241.29.50.52.in-addr.arpa udp
US 8.8.8.8:53 14.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 113.16.51.52.in-addr.arpa udp
US 8.8.8.8:53 97.166.174.54.in-addr.arpa udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 172.64.151.101:443 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 image6.pubmatic.com udp
US 8.8.8.8:53 openx2-match.dotomi.com udp
GB 185.64.190.78:443 image6.pubmatic.com tcp
NL 63.215.202.169:443 openx2-match.dotomi.com tcp
US 35.186.253.211:443 rtb.openx.net udp
US 8.8.8.8:53 creativecdn.com udp
NL 185.184.8.90:443 creativecdn.com tcp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 triplelift-match.dotomi.com udp
US 8.8.8.8:53 um.simpli.fi udp
US 8.8.8.8:53 sync.1rx.io udp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 8.8.8.8:53 cs.media.net udp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
NL 63.215.202.140:443 triplelift-match.dotomi.com tcp
IE 52.17.120.207:443 match.prod.bidr.io tcp
IE 52.17.120.207:443 match.prod.bidr.io tcp
US 64.202.112.31:443 b1sync.zemanta.com tcp
US 64.202.112.31:443 b1sync.zemanta.com tcp
NL 35.204.158.49:443 um.simpli.fi tcp
US 8.8.8.8:53 78.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 169.202.215.63.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
GB 2.21.188.27:443 cs.media.net tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
US 64.202.112.31:443 b1sync.zemanta.com tcp
US 8.8.8.8:53 dsum-sec.casalemedia.com udp
US 8.8.8.8:53 ids.ad.gt udp
US 8.8.8.8:53 casale-match.dotomi.com udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
NL 154.59.122.79:443 ums.acuityplatform.com tcp
NL 89.207.16.201:443 casale-match.dotomi.com tcp
US 44.240.148.138:443 ids.ad.gt tcp
US 8.8.8.8:53 amazon-tam-match.dotomi.com udp
IE 52.94.222.140:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 p.rfihub.com udp
US 8.8.8.8:53 tr.blismedia.com udp
US 8.8.8.8:53 sync-tm.everesttech.net udp
NL 89.207.16.140:443 amazon-tam-match.dotomi.com tcp
US 151.101.130.49:443 sync-tm.everesttech.net tcp
NL 193.0.160.131:443 p.rfihub.com tcp
US 34.96.105.8:443 tr.blismedia.com tcp
US 8.8.8.8:53 match.sharethrough.com udp
NL 154.59.122.79:443 ums.acuityplatform.com tcp
US 44.240.148.138:443 ids.ad.gt tcp
NL 89.207.16.201:443 casale-match.dotomi.com tcp
DE 18.158.98.19:443 match.sharethrough.com tcp
US 8.8.8.8:53 dsp.adfarm1.adition.com udp
US 8.8.8.8:53 t.adx.opera.com udp
DE 85.114.159.118:443 dsp.adfarm1.adition.com tcp
US 8.8.8.8:53 ad.mrtnsvr.com udp
NL 82.145.213.8:443 t.adx.opera.com tcp
US 8.8.8.8:53 csync.loopme.me udp
US 8.8.8.8:53 d5p.de17a.com udp
US 8.8.8.8:53 ipac.ctnsnet.com udp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
SE 213.155.156.168:443 d5p.de17a.com tcp
NL 35.214.130.0:443 csync.loopme.me tcp
US 35.186.193.173:443 ipac.ctnsnet.com tcp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
US 8.8.8.8:53 cm-supply-web.gammaplatform.com udp
US 8.8.8.8:53 core.iprom.net udp
US 8.8.8.8:53 cm.adgrx.com udp
US 8.8.8.8:53 sync.crwdcntrl.net udp
US 8.8.8.8:53 cr.frontend.weborama.fr udp
US 8.8.8.8:53 mwzeom.zeotap.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 pubmatic-match.dotomi.com udp
US 8.8.8.8:53 ad.turn.com udp
US 8.8.8.8:53 match.adsby.bidtheatre.com udp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 207.120.17.52.in-addr.arpa udp
US 8.8.8.8:53 49.158.204.35.in-addr.arpa udp
US 8.8.8.8:53 140.202.215.63.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 27.188.21.2.in-addr.arpa udp
US 8.8.8.8:53 131.151.46.52.in-addr.arpa udp
US 8.8.8.8:53 31.112.202.64.in-addr.arpa udp
US 8.8.8.8:53 49.130.101.151.in-addr.arpa udp
US 8.8.8.8:53 140.16.207.89.in-addr.arpa udp
US 8.8.8.8:53 8.105.96.34.in-addr.arpa udp
US 8.8.8.8:53 131.160.0.193.in-addr.arpa udp
US 8.8.8.8:53 201.16.207.89.in-addr.arpa udp
US 8.8.8.8:53 79.122.59.154.in-addr.arpa udp
US 8.8.8.8:53 19.98.158.18.in-addr.arpa udp
US 8.8.8.8:53 138.148.240.44.in-addr.arpa udp
US 8.8.8.8:53 118.159.114.85.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 6.163.102.34.in-addr.arpa udp
US 8.8.8.8:53 0.130.214.35.in-addr.arpa udp
US 8.8.8.8:53 168.156.155.213.in-addr.arpa udp
US 8.8.8.8:53 173.193.186.35.in-addr.arpa udp
IE 52.215.155.11:443 cm.adgrx.com tcp
SI 195.5.165.20:443 core.iprom.net tcp
US 8.8.8.8:53 sync-amz.ads.yieldmo.com udp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
US 8.8.8.8:53 cs-tam.yellowblue.io udp
US 104.22.51.98:443 mwzeom.zeotap.com tcp
NL 134.122.57.34:443 match.adsby.bidtheatre.com tcp
DE 3.71.149.231:443 ups.analytics.yahoo.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
US 34.111.129.221:443 cr.frontend.weborama.fr tcp
IE 52.48.112.187:443 sync-amz.ads.yieldmo.com tcp
IE 52.208.159.70:443 cs-tam.yellowblue.io tcp
US 8.8.8.8:53 sync.targeting.unrulymedia.com udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 8.8.8.8:53 image2.pubmatic.com udp
US 8.8.8.8:53 simage2.pubmatic.com udp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
BE 35.210.53.219:443 pool.admedo.com tcp
GB 185.64.191.210:443 simage2.pubmatic.com tcp
GB 185.64.191.210:443 simage2.pubmatic.com tcp
GB 185.64.191.210:443 simage2.pubmatic.com tcp
GB 185.64.191.210:443 simage2.pubmatic.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
GB 185.64.191.210:443 simage2.pubmatic.com tcp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
GB 185.64.191.210:443 simage2.pubmatic.com tcp
US 8.8.8.8:53 stx-match.dotomi.com udp
US 8.8.8.8:53 ssp.disqus.com udp
US 54.92.179.157:443 ssp.disqus.com tcp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 live.primis.tech udp
US 8.8.8.8:53 pixel.tapad.com udp
BE 35.210.53.219:443 pool.admedo.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
NL 35.214.130.0:443 csync.loopme.me tcp
US 8.8.8.8:53 ads.stickyadstv.com udp
IE 52.94.222.140:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 contextual.media.net udp
DE 51.89.9.252:443 onetag-sys.com tcp
US 34.111.113.62:443 pixel.tapad.com tcp
IE 34.247.129.145:443 ap.lijit.com tcp
DE 13.32.99.104:443 live.primis.tech tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
ES 23.60.223.190:443 secure-assets.rubiconproject.com tcp
GB 2.21.188.27:443 contextual.media.net tcp
NL 89.149.192.244:443 ssbsync.smartadserver.com tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
FR 154.54.250.80:443 ads.stickyadstv.com tcp
US 34.111.113.62:443 pixel.tapad.com udp
US 8.8.8.8:53 11.155.215.52.in-addr.arpa udp
US 8.8.8.8:53 98.51.22.104.in-addr.arpa udp
US 8.8.8.8:53 34.57.122.134.in-addr.arpa udp
US 8.8.8.8:53 20.165.5.195.in-addr.arpa udp
US 8.8.8.8:53 11.164.228.46.in-addr.arpa udp
US 8.8.8.8:53 231.149.71.3.in-addr.arpa udp
US 8.8.8.8:53 221.129.111.34.in-addr.arpa udp
US 8.8.8.8:53 187.112.48.52.in-addr.arpa udp
US 8.8.8.8:53 70.159.208.52.in-addr.arpa udp
US 8.8.8.8:53 205.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 219.53.210.35.in-addr.arpa udp
US 8.8.8.8:53 157.179.92.54.in-addr.arpa udp
US 8.8.8.8:53 210.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 62.113.111.34.in-addr.arpa udp
US 8.8.8.8:53 252.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 145.129.247.34.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 104.99.32.13.in-addr.arpa udp
US 8.8.8.8:53 190.223.60.23.in-addr.arpa udp
US 8.8.8.8:53 244.192.149.89.in-addr.arpa udp
US 8.8.8.8:53 80.250.54.154.in-addr.arpa udp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
US 8.8.8.8:53 sync.ipredictive.com udp
US 8.8.8.8:53 match.deepintent.com udp
US 8.18.47.7:443 match.deepintent.com tcp
NL 81.17.55.106:443 rtb-csync.smartadserver.com tcp
US 54.158.1.77:443 sync.ipredictive.com tcp
US 8.8.8.8:53 image4.pubmatic.com udp
NL 198.47.127.20:443 image4.pubmatic.com tcp
US 8.8.8.8:53 tg.socdm.com udp
US 8.8.8.8:53 usersync.gumgum.com udp
JP 124.146.153.169:443 tg.socdm.com tcp
IE 34.247.205.196:443 usersync.gumgum.com tcp
IE 34.247.205.196:443 usersync.gumgum.com tcp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 dsp.nrich.ai udp
IE 34.247.205.196:443 usersync.gumgum.com tcp
IE 34.247.205.196:443 usersync.gumgum.com tcp
IE 34.247.205.196:443 usersync.gumgum.com tcp
IE 34.247.205.196:443 usersync.gumgum.com tcp
NL 145.40.97.67:443 prebid.a-mo.net tcp
FR 51.68.39.188:443 dsp.nrich.ai tcp
US 8.8.8.8:53 cs.yellowblue.io udp
US 8.8.8.8:53 euexchangesync.digitaleast.mobi udp
JP 124.146.153.169:443 tg.socdm.com tcp
US 8.8.8.8:53 dsum.casalemedia.com udp
US 34.95.81.168:443 euexchangesync.digitaleast.mobi tcp
US 8.8.8.8:53 sonata-notifications.taptapnetworks.com udp
DE 18.185.175.185:443 sonata-notifications.taptapnetworks.com tcp
US 8.8.8.8:53 ads.yieldmo.com udp
IE 54.74.114.10:443 ads.yieldmo.com tcp
IE 54.74.114.10:443 ads.yieldmo.com tcp
IE 54.74.114.10:443 ads.yieldmo.com tcp
IE 54.74.114.10:443 ads.yieldmo.com tcp
US 8.8.8.8:53 106.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 7.47.18.8.in-addr.arpa udp
US 8.8.8.8:53 77.1.158.54.in-addr.arpa udp
US 8.8.8.8:53 20.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 196.205.247.34.in-addr.arpa udp
US 8.8.8.8:53 67.97.40.145.in-addr.arpa udp
US 8.8.8.8:53 188.39.68.51.in-addr.arpa udp
US 8.8.8.8:53 168.81.95.34.in-addr.arpa udp
US 8.8.8.8:53 169.153.146.124.in-addr.arpa udp
US 8.8.8.8:53 185.175.185.18.in-addr.arpa udp
US 8.8.8.8:53 10.114.74.54.in-addr.arpa udp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 sync.mathtag.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
DE 51.89.9.252:443 onetag-sys.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 spl.zeotap.com udp
US 216.200.232.249:443 sync.mathtag.com tcp
US 80.77.87.161:443 cs.admanmedia.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
FR 91.134.110.132:443 ssbsync-global.smartadserver.com tcp
US 8.8.8.8:53 simage4.pubmatic.com udp
US 8.8.8.8:53 green.erne.co udp
FR 141.94.242.204:443 green.erne.co tcp
US 8.8.8.8:53 a.tribalfusion.com udp
US 104.18.25.173:443 a.tribalfusion.com tcp
US 8.8.8.8:53 matching.truffle.bid udp
US 8.8.8.8:53 pixel-eu.onaudience.com udp
FR 141.94.170.77:443 pixel-eu.onaudience.com tcp
DE 162.55.120.196:443 matching.truffle.bid tcp
US 8.8.8.8:53 88.199.214.35.in-addr.arpa udp
US 8.8.8.8:53 132.110.134.91.in-addr.arpa udp
US 8.8.8.8:53 249.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 161.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 204.242.94.141.in-addr.arpa udp
US 8.8.8.8:53 173.25.18.104.in-addr.arpa udp
US 8.8.8.8:53 pixel.onaudience.com udp
FR 141.94.171.212:443 pixel.onaudience.com tcp
US 8.8.8.8:53 s.tribalfusion.com udp
US 104.18.25.173:443 s.tribalfusion.com udp
US 8.8.8.8:53 77.170.94.141.in-addr.arpa udp
US 8.8.8.8:53 196.120.55.162.in-addr.arpa udp
US 8.8.8.8:53 212.171.94.141.in-addr.arpa udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
DE 52.59.30.68:443 btlr.sharethrough.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
DE 37.252.171.52:443 secure.adnxs.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 grid.bidswitch.net udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
DE 37.252.171.52:443 secure.adnxs.com tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 rtb.openx.net udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
US 35.227.252.103:443 rtb.openx.net udp
DE 52.59.114.254:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 103.252.227.35.in-addr.arpa udp
US 8.8.8.8:53 254.114.59.52.in-addr.arpa udp
US 8.8.8.8:53 beacons4.gvt2.com udp
US 64.233.168.94:443 beacons2.gvt2.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 216.239.32.116:443 beacons4.gvt2.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 199.232.213.91:80 softonic.com tcp
US 199.232.213.91:80 softonic.com tcp
US 199.232.213.91:443 softonic.com tcp
US 8.8.8.8:53 www.softonic.com udp
US 151.101.1.91:443 www.softonic.com tcp
US 151.101.1.91:443 www.softonic.com tcp
US 8.8.8.8:53 en.softonic.com udp
US 151.101.129.91:443 en.softonic.com tcp
US 151.101.129.91:443 en.softonic.com tcp
US 8.8.8.8:53 91.213.232.199.in-addr.arpa udp
US 8.8.8.8:53 91.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 assets.sftcdn.net udp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 articles-img.sftcdn.net udp
US 23.219.230.135:443 images.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 151.101.193.91:443 assets.sftcdn.net tcp
US 151.101.193.91:443 assets.sftcdn.net tcp
NL 23.62.61.112:443 articles-img.sftcdn.net tcp
NL 23.62.61.112:443 articles-img.sftcdn.net tcp
NL 23.62.61.112:443 articles-img.sftcdn.net tcp
NL 23.62.61.112:443 articles-img.sftcdn.net tcp
NL 23.62.61.112:443 articles-img.sftcdn.net tcp
NL 23.62.61.112:443 articles-img.sftcdn.net tcp
GB 172.217.169.67:80 beacons.gcp.gvt2.com tcp
US 151.101.193.91:443 assets.sftcdn.net tcp
US 151.101.193.91:443 assets.sftcdn.net tcp
US 8.8.8.8:53 91.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 91.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 135.230.219.23.in-addr.arpa udp
US 8.8.8.8:53 112.61.62.23.in-addr.arpa udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
DE 37.252.171.52:443 secure.adnxs.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 35.227.252.103:443 rtb.openx.net udp
DE 52.59.114.254:443 btlr.sharethrough.com tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 e2c20.gcp.gvt2.com udp
CA 34.95.44.106:443 e2c20.gcp.gvt2.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 106.44.95.34.in-addr.arpa udp
GB 172.217.169.3:443 beacons.gvt2.com udp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 8.8.8.8:53 grid.bidswitch.net udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 35.227.252.103:443 rtb.openx.net udp
DE 37.252.171.52:443 secure.adnxs.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
DE 52.59.30.68:443 btlr.sharethrough.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
US 216.239.32.116:443 beacons4.gvt2.com udp
US 8.8.8.8:53 176.168.78.3.in-addr.arpa udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 35.227.252.103:443 rtb.openx.net udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
DE 52.59.30.68:443 btlr.sharethrough.com tcp
DE 37.252.171.52:443 secure.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
NL 23.62.61.113:443 www.bing.com tcp
NL 23.62.61.113:443 www.bing.com tcp
US 8.8.8.8:53 113.61.62.23.in-addr.arpa udp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 35.227.252.103:443 rtb.openx.net udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
DE 37.252.171.52:443 secure.adnxs.com tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 3.122.80.51:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 51.80.122.3.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.187.196:443 www.google.com udp
GB 216.58.212.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 dsum-sec.casalemedia.com udp
GB 172.217.169.34:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 cdn.doubleverify.com udp
US 8.8.8.8:53 s0.2mdn.net udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 216.58.204.70:443 s0.2mdn.net udp
BE 23.14.90.107:443 cdn.doubleverify.com tcp
GB 216.58.204.70:443 s0.2mdn.net tcp
GB 216.58.204.70:443 s0.2mdn.net udp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
GB 142.250.200.2:443 googleads4.g.doubleclick.net tcp
US 8.8.8.8:53 rtb0.doubleverify.com udp
US 130.211.44.5:443 rtb0.doubleverify.com tcp
US 8.8.8.8:53 34.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 194.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 107.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
GB 142.250.200.2:443 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 www.googletagservices.com udp
US 8.8.8.8:53 5.44.211.130.in-addr.arpa udp
US 8.8.8.8:53 rtbc-ew1.doubleverify.com udp
US 130.211.44.5:443 rtbc-ew1.doubleverify.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 ade.googlesyndication.com udp
GB 142.250.187.226:443 ade.googlesyndication.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
GB 142.250.187.226:443 ade.googlesyndication.com udp
US 8.8.8.8:53 answers.microsoft.com udp
US 23.219.239.203:80 answers.microsoft.com tcp
US 23.219.239.203:80 answers.microsoft.com tcp
US 23.219.239.203:443 answers.microsoft.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 203.239.219.23.in-addr.arpa udp
NL 40.126.32.76:443 login.microsoftonline.com tcp
NL 40.126.32.76:443 login.microsoftonline.com tcp
US 8.8.8.8:53 aadcdn.msauth.net udp
US 13.107.246.64:443 aadcdn.msauth.net tcp
US 13.107.246.64:443 aadcdn.msauth.net tcp
NL 40.126.32.76:443 login.microsoftonline.com tcp
NL 40.126.32.76:443 login.microsoftonline.com tcp
US 8.8.8.8:53 76.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 68.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 answers-afd.microsoft.com udp
SE 23.34.233.128:443 www.microsoft.com tcp
US 8.8.8.8:53 js.monitor.azure.com udp
US 8.8.8.8:53 consentdeliveryfd.azurefd.net udp
US 8.8.8.8:53 csp.microsoft.com udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
SE 23.34.233.128:443 www.microsoft.com tcp
US 8.8.8.8:53 mem.gfx.ms udp
US 13.107.246.64:443 mem.gfx.ms tcp
US 13.107.253.64:443 csp.microsoft.com tcp
US 13.107.253.64:443 csp.microsoft.com tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 8.8.8.8:53 128.233.34.23.in-addr.arpa udp
US 8.8.8.8:53 159.252.19.2.in-addr.arpa udp
US 8.8.8.8:53 64.253.107.13.in-addr.arpa udp
US 8.8.8.8:53 answersstaticfilecdnv2.azureedge.net udp
US 152.199.21.175:443 answersstaticfilecdnv2.azureedge.net tcp
US 152.199.21.175:443 answersstaticfilecdnv2.azureedge.net tcp
US 152.199.21.175:443 answersstaticfilecdnv2.azureedge.net tcp
US 152.199.21.175:443 answersstaticfilecdnv2.azureedge.net tcp
US 152.199.21.175:443 answersstaticfilecdnv2.azureedge.net tcp
US 152.199.21.175:443 answersstaticfilecdnv2.azureedge.net tcp
US 23.219.239.203:443 answers.microsoft.com tcp
US 23.219.239.203:443 answers.microsoft.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 35.227.252.103:443 rtb.openx.net udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 3.122.80.51:443 btlr.sharethrough.com tcp
DE 37.252.171.52:443 secure.adnxs.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 8.8.8.8:53 acctcdn.msftauth.net udp
US 8.8.8.8:53 acctcdn.msauth.net udp
US 8.8.8.8:53 175.21.199.152.in-addr.arpa udp
US 8.8.8.8:53 acctcdnvzeuno.azureedge.net udp
US 8.8.8.8:53 logincdn.msftauth.net udp
US 8.8.8.8:53 acctcdnmsftuswe2.azureedge.net udp
US 8.8.8.8:53 lgincdnvzeuno.azureedge.net udp
US 8.8.8.8:53 lgincdnmsftuswe2.azureedge.net udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 152.199.21.175:443 lgincdnvzeuno.azureedge.net tcp
US 13.89.178.26:443 browser.events.data.microsoft.com tcp
US 13.89.178.26:443 browser.events.data.microsoft.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 26.178.89.13.in-addr.arpa udp
GB 216.58.212.194:443 googleads.g.doubleclick.net udp
US 130.211.44.5:443 rtbc-ew1.doubleverify.com tcp
GB 142.250.200.2:443 www.googletagservices.com udp
GB 216.58.204.70:443 s0.2mdn.net udp
GB 172.217.169.34:443 cm.g.doubleclick.net udp
US 34.98.64.218:443 us-u.openx.net udp
US 8.8.8.8:53 sync.teads.tv udp
SE 23.34.233.33:443 sync.teads.tv tcp
SE 23.34.233.33:443 sync.teads.tv tcp
US 8.8.8.8:53 33.233.34.23.in-addr.arpa udp
US 130.211.44.5:443 rtbc-ew1.doubleverify.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
DE 37.252.171.52:443 secure.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 172.64.151.101:443 dsum-sec.casalemedia.com udp
US 8.8.8.8:53 grid.bidswitch.net udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 35.227.252.103:443 rtb.openx.net udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
DE 52.29.6.178:443 btlr.sharethrough.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 8.8.8.8:53 178.6.29.52.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
GB 216.58.212.194:443 googleads.g.doubleclick.net udp
GB 216.58.204.70:443 s0.2mdn.net udp
GB 216.58.204.70:443 s0.2mdn.net udp
GB 142.250.200.2:443 www.googletagservices.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 172.217.169.34:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 sync.search.spotxchange.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
DE 3.71.149.231:443 ups.analytics.yahoo.com tcp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 172.64.151.101:443 dsum-sec.casalemedia.com udp
US 35.227.252.103:443 rtb.openx.net udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 52.29.6.178:443 btlr.sharethrough.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 37.252.171.52:443 ib.adnxs.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 beacons4.gvt2.com udp
US 216.239.32.116:443 beacons4.gvt2.com udp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
US 8.8.8.8:53 grid.bidswitch.net udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 35.227.252.103:443 rtb.openx.net udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 37.252.171.52:443 ib.adnxs.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
US 172.64.151.101:443 dsum-sec.casalemedia.com udp
DE 18.158.188.181:443 btlr.sharethrough.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 181.188.158.18.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 8660aac359522ce5b213c514cb6ae861.safeframe.googlesyndication.com udp
GB 172.217.169.65:443 8660aac359522ce5b213c514cb6ae861.safeframe.googlesyndication.com udp
GB 216.58.212.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 cdn.doubleverify.com udp
BE 23.14.90.107:443 cdn.doubleverify.com tcp
GB 172.217.169.34:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
NL 89.149.192.201:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 rtb0.doubleverify.com udp
US 130.211.44.5:443 rtb0.doubleverify.com tcp
US 8.8.8.8:53 1f2e7.v.fwmrm.net udp
GB 18.134.84.23:443 1f2e7.v.fwmrm.net tcp
US 8.8.8.8:53 201.192.149.89.in-addr.arpa udp
US 8.8.8.8:53 23.84.134.18.in-addr.arpa udp
US 8.8.8.8:53 tps.doubleverify.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
GB 142.250.200.2:443 www.googletagservices.com udp
GB 216.58.204.70:443 s0.2mdn.net udp
US 3.33.220.150:443 match.adsrvr.org tcp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
IE 54.171.38.47:443 pr-bh.ybp.yahoo.com tcp
IE 52.214.45.172:443 match.prod.bidr.io tcp
US 8.8.8.8:53 ads.stickyadstv.com udp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
US 8.8.8.8:53 pm.w55c.net udp
IE 54.77.130.68:443 pm.w55c.net tcp
DE 37.252.171.52:443 ib.adnxs.com tcp
US 8.8.8.8:53 47.38.171.54.in-addr.arpa udp
US 8.8.8.8:53 172.45.214.52.in-addr.arpa udp
US 8.8.8.8:53 115.158.57.154.in-addr.arpa udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 8.8.8.8:53 sync.crwdcntrl.net udp
IE 54.72.245.162:443 sync.crwdcntrl.net tcp
US 8.8.8.8:53 jelly.mdhv.io udp
US 216.239.32.21:443 jelly.mdhv.io tcp
US 8.8.8.8:53 68.130.77.54.in-addr.arpa udp
US 8.8.8.8:53 sync.ipredictive.com udp
US 52.44.76.179:443 sync.ipredictive.com tcp
US 8.8.8.8:53 tpsc-ew1.doubleverify.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 8.8.8.8:53 21.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 179.76.44.52.in-addr.arpa udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 151.101.130.133:80 motherboard.vice.com tcp
US 151.101.130.133:80 motherboard.vice.com tcp
US 151.101.130.133:443 motherboard.vice.com tcp
US 8.8.8.8:53 www.vice.com udp
US 151.101.2.133:443 www.vice.com tcp
US 151.101.2.133:443 www.vice.com tcp
US 8.8.8.8:53 133.130.101.151.in-addr.arpa udp
US 8.8.8.8:53 htlbid.com udp
US 8.8.8.8:53 oembed.vice.com udp
US 151.101.66.133:443 oembed.vice.com tcp
US 151.101.66.133:443 oembed.vice.com tcp
DE 13.32.27.51:443 htlbid.com tcp
DE 13.32.27.51:443 htlbid.com tcp
US 8.8.8.8:53 video-images.vice.com udp
US 151.101.194.133:443 video-images.vice.com tcp
US 151.101.194.133:443 video-images.vice.com tcp
US 8.8.8.8:53 133.66.101.151.in-addr.arpa udp
US 8.8.8.8:53 51.27.32.13.in-addr.arpa udp
US 8.8.8.8:53 133.194.101.151.in-addr.arpa udp
US 8.8.8.8:53 90.193.84.52.in-addr.arpa udp
US 8.8.8.8:53 224.244.67.18.in-addr.arpa udp
US 8.8.8.8:53 vice-web-statics-cdn.vice.com udp
US 8.8.8.8:53 www.npttech.com udp
US 8.8.8.8:53 images.vice.com udp
US 151.101.66.133:443 images.vice.com tcp
US 151.101.66.133:443 images.vice.com tcp
US 104.21.66.34:443 www.npttech.com tcp
US 104.21.66.34:443 www.npttech.com tcp
US 151.101.66.133:443 images.vice.com tcp
US 151.101.66.133:443 images.vice.com tcp
US 151.101.66.133:443 images.vice.com tcp
US 151.101.194.133:443 images.vice.com tcp
US 151.101.194.133:443 images.vice.com tcp
US 151.101.66.133:443 images.vice.com tcp
US 151.101.66.133:443 images.vice.com tcp
US 151.101.66.133:443 images.vice.com tcp
GB 172.217.169.67:80 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 vice-sundry-assets-cdn.vice.com udp
US 151.101.130.133:443 vice-sundry-assets-cdn.vice.com tcp
US 151.101.130.133:443 vice-sundry-assets-cdn.vice.com tcp
US 8.8.8.8:53 cdn.privacy-mgmt.com udp
DE 18.66.147.27:443 cdn.privacy-mgmt.com tcp
DE 18.66.147.27:443 cdn.privacy-mgmt.com tcp
US 8.8.8.8:53 34.66.21.104.in-addr.arpa udp
US 8.8.8.8:53 27.147.66.18.in-addr.arpa udp
US 8.8.8.8:53 firebaseremoteconfig.googleapis.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 13.33.173.196:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
US 8.8.8.8:53 g2.gumgum.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 35.227.252.103:443 rtb.openx.net udp
US 8.8.8.8:53 hb.yellowblue.io udp
DE 18.158.188.181:443 btlr.sharethrough.com tcp
DE 37.252.171.52:443 ib.adnxs.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
DE 18.157.230.4:443 tlx.3lift.com tcp
IE 99.80.191.128:443 g2.gumgum.com tcp
DE 52.222.236.48:443 hb.yellowblue.io tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 8.8.8.8:53 196.173.33.13.in-addr.arpa udp
US 8.8.8.8:53 128.191.80.99.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 48.236.222.52.in-addr.arpa udp
US 8.8.8.8:53 firebaselogging.googleapis.com udp
GB 216.58.201.106:443 firebaselogging.googleapis.com tcp
GB 216.58.201.106:443 firebaselogging.googleapis.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
GB 216.58.212.194:443 googleads.g.doubleclick.net udp
BE 23.14.90.107:443 cdn.doubleverify.com tcp
US 8.8.8.8:53 cd836371f1d.cdn.intergient.com udp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
GB 142.250.200.2:443 www.googletagservices.com udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 beacons2.gvt2.com udp
US 8.8.8.8:53 beacons.gvt2.com udp
FR 172.217.18.195:443 beacons.gvt2.com udp
US 216.239.38.117:443 beacons2.gvt2.com udp
US 8.8.8.8:53 195.18.217.172.in-addr.arpa udp
US 8.8.8.8:53 117.38.239.216.in-addr.arpa udp
US 13.33.173.196:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
DE 37.252.171.52:443 ib.adnxs.com tcp
DE 52.222.236.48:443 hb.yellowblue.io tcp
IE 99.80.191.128:443 g2.gumgum.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 35.227.252.103:443 rtb.openx.net udp
DE 3.78.52.91:443 btlr.sharethrough.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
US 8.8.8.8:53 91.52.78.3.in-addr.arpa udp
US 8.8.8.8:53 248.64.124.3.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 216.58.204.70:443 s0.2mdn.net udp
GB 142.250.200.2:443 www.googletagservices.com udp
US 8.8.8.8:53 aus5.mozilla.org udp
US 35.244.181.201:443 aus5.mozilla.org tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 35.244.181.201:443 prod.balrog.prod.cloudops.mozgcp.net tcp
US 35.244.181.201:443 prod.balrog.prod.cloudops.mozgcp.net tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 142.250.200.14:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
NL 2.18.121.79:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
GB 142.250.200.14:443 redirector.gvt1.com udp
US 8.8.8.8:53 r1---sn-aigl6ney.gvt1.com udp
GB 173.194.183.166:443 r1---sn-aigl6ney.gvt1.com tcp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 79.121.18.2.in-addr.arpa udp
US 8.8.8.8:53 r1.sn-aigl6ney.gvt1.com udp
GB 173.194.183.166:443 r1---sn-aigl6ney.gvt1.com udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 18.244.15.236:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
DE 3.78.52.91:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 g2.gumgum.com udp
US 35.227.252.103:443 rtb.openx.net udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
DE 37.252.171.52:443 ib.adnxs.com tcp
US 8.8.8.8:53 hb.yellowblue.io udp
DE 3.124.64.248:443 tlx.3lift.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
IE 34.251.51.232:443 g2.gumgum.com tcp
DE 52.222.236.9:443 hb.yellowblue.io tcp
US 8.8.8.8:53 236.15.244.18.in-addr.arpa udp
US 8.8.8.8:53 232.51.251.34.in-addr.arpa udp
US 8.8.8.8:53 9.236.222.52.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
GB 216.58.212.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 cd836371f1d.cdn.intergient.com udp
GB 142.250.200.2:443 www.googletagservices.com udp
GB 142.250.187.196:443 www.google.com udp
GB 216.58.204.70:443 s0.2mdn.net udp
US 8.8.8.8:53 ad.atdmt.com udp
US 35.206.11.92:443 e2c58.gcp.gvt2.com tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
FR 172.217.18.195:443 beacons.gvt2.com udp
US 8.8.8.8:53 92.11.206.35.in-addr.arpa udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 216.239.38.117:443 beacons2.gvt2.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 18.244.15.236:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
IE 34.251.51.232:443 g2.gumgum.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
DE 52.222.236.9:443 hb.yellowblue.io tcp
US 8.8.8.8:53 tlx.3lift.com udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 35.227.252.103:443 rtb.openx.net udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 37.252.171.52:443 ib.adnxs.com tcp
US 8.8.8.8:53 grid.bidswitch.net udp
US 104.18.36.155:443 htlb.casalemedia.com udp
DE 3.78.52.91:443 btlr.sharethrough.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 8.8.8.8:53 155.36.18.104.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 216.58.212.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 cdn.doubleverify.com udp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
BE 23.14.90.107:443 cdn.doubleverify.com tcp
US 8.8.8.8:53 rtb0.doubleverify.com udp
US 130.211.44.5:443 rtb0.doubleverify.com tcp
US 8.8.8.8:53 tps.doubleverify.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
GB 142.250.200.2:443 www.googletagservices.com udp
GB 142.250.187.228:80 google.co.ck tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
DE 108.138.8.164:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 g2.gumgum.com udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 104.18.36.155:443 htlb.casalemedia.com udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 35.227.252.103:443 rtb.openx.net udp
DE 3.78.168.176:443 tlx.3lift.com tcp
DE 3.78.52.91:443 btlr.sharethrough.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 8.8.8.8:53 hb.yellowblue.io udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 185.89.210.141:443 ib.adnxs.com tcp
IE 54.228.172.41:443 g2.gumgum.com tcp
DE 52.222.236.4:443 hb.yellowblue.io tcp
US 8.8.8.8:53 141.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 41.172.228.54.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
GB 142.250.187.196:443 www.google.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 cd836371f1d.cdn.intergient.com udp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 rtb.openx.net udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 185.89.210.141:443 ib.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 104.18.36.155:443 htlb.casalemedia.com udp
US 35.186.253.211:443 rtb.openx.net udp
DE 3.64.135.1:443 btlr.sharethrough.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 13.35.57.188:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 8.8.8.8:53 hb.yellowblue.io udp
US 104.18.36.155:443 htlb.casalemedia.com udp
DE 3.64.135.1:443 btlr.sharethrough.com tcp
NL 185.89.210.141:443 ib.adnxs.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 35.186.253.211:443 rtb.openx.net udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 g2.gumgum.com udp
DE 52.222.236.4:443 hb.yellowblue.io tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
IE 34.251.51.232:443 g2.gumgum.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 188.57.35.13.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 cd836371f1d.cdn.intergient.com udp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 13.35.57.188:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 grid.bidswitch.net udp
IE 34.251.51.232:443 g2.gumgum.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 35.186.253.211:443 rtb.openx.net udp
NL 185.89.210.141:443 ib.adnxs.com tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
DE 52.222.236.4:443 hb.yellowblue.io tcp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 104.18.36.155:443 htlb.casalemedia.com udp
DE 52.59.30.68:443 btlr.sharethrough.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 cdn.doubleverify.com udp
GB 142.250.187.196:443 www.google.com udp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
GB 142.250.187.196:80 www.google.com tcp
BE 23.14.90.89:443 cdn.doubleverify.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 rtb0.doubleverify.com udp
US 130.211.44.5:443 rtb0.doubleverify.com tcp
US 8.8.8.8:53 89.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 tps.doubleverify.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 tpsc-ew1.doubleverify.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
DE 108.138.8.164:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 hb.yellowblue.io udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
NL 185.89.210.141:443 ib.adnxs.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 8.8.8.8:53 g2.gumgum.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 52.59.30.68:443 btlr.sharethrough.com tcp
US 104.18.36.155:443 htlb.casalemedia.com udp
US 35.186.253.211:443 rtb.openx.net udp
DE 52.222.236.9:443 hb.yellowblue.io tcp
IE 52.51.107.176:443 g2.gumgum.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
US 8.8.8.8:53 176.107.51.52.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 cd836371f1d.cdn.intergient.com udp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
DE 108.138.8.164:443 aax.amazon-adsystem.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
US 8.8.8.8:53 grid.bidswitch.net udp
NL 185.89.210.141:443 ib.adnxs.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 104.18.36.155:443 htlb.casalemedia.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
DE 52.222.236.9:443 hb.yellowblue.io tcp
US 35.186.253.211:443 rtb.openx.net udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
IE 52.51.107.176:443 g2.gumgum.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
DE 18.184.231.156:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 156.231.184.18.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 8660aac359522ce5b213c514cb6ae861.safeframe.googlesyndication.com udp
GB 172.217.169.65:443 8660aac359522ce5b213c514cb6ae861.safeframe.googlesyndication.com udp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
GB 172.217.169.65:443 8660aac359522ce5b213c514cb6ae861.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 discovery.demdex.net udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 d.agkn.com udp
IE 34.250.234.115:443 d.agkn.com tcp
IE 63.32.81.13:443 discovery.demdex.net tcp
GB 216.58.204.70:443 s0.2mdn.net udp
GB 216.58.204.70:443 s0.2mdn.net tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 115.234.250.34.in-addr.arpa udp
US 8.8.8.8:53 13.81.32.63.in-addr.arpa udp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 location.services.mozilla.com udp
US 35.190.72.216:443 location.services.mozilla.com tcp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 216.72.190.35.in-addr.arpa udp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 104.18.36.155:443 htlb.casalemedia.com udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 185.89.210.141:443 ib.adnxs.com tcp
US 35.186.253.211:443 rtb.openx.net udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 18.184.231.156:443 btlr.sharethrough.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
GB 18.245.220.173:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 104.18.36.155:443 htlb.casalemedia.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
NL 185.89.210.141:443 ib.adnxs.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 g2.gumgum.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 18.194.196.94:443 btlr.sharethrough.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
FR 18.244.28.86:443 hb.yellowblue.io tcp
US 35.186.253.211:443 rtb.openx.net udp
DE 3.124.64.248:443 tlx.3lift.com tcp
IE 99.80.191.128:443 g2.gumgum.com tcp
US 8.8.8.8:53 86.28.244.18.in-addr.arpa udp
US 8.8.8.8:53 94.196.194.18.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 discovery.demdex.net udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 d.agkn.com udp
US 8.8.8.8:53 cd836371f1d.cdn.intergient.com udp
IE 34.250.64.99:443 discovery.demdex.net tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
GB 142.250.187.196:443 www.google.com udp
IE 34.242.115.85:443 d.agkn.com tcp
US 8.8.8.8:53 99.64.250.34.in-addr.arpa udp
US 8.8.8.8:53 85.115.242.34.in-addr.arpa udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 18.245.220.173:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 18.194.196.94:443 btlr.sharethrough.com tcp
US 35.186.253.211:443 rtb.openx.net udp
FR 18.244.28.86:443 hb.yellowblue.io tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 104.18.36.155:443 htlb.casalemedia.com udp
NL 185.89.210.46:443 ib.adnxs.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
IE 99.80.191.128:443 g2.gumgum.com tcp
US 8.8.8.8:53 46.210.89.185.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
IE 34.250.64.99:443 discovery.demdex.net tcp
IE 34.242.115.85:443 d.agkn.com tcp
GB 142.250.187.228:80 google.co.ck tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 13.33.173.196:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 185.89.210.46:443 ib.adnxs.com tcp
US 8.8.8.8:53 grid.bidswitch.net udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 8.8.8.8:53 hb.yellowblue.io udp
US 35.186.253.211:443 rtb.openx.net udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 g2.gumgum.com udp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
IE 52.214.151.37:443 g2.gumgum.com tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
DE 52.59.114.254:443 btlr.sharethrough.com tcp
DE 52.222.236.48:443 hb.yellowblue.io tcp
US 8.8.8.8:53 37.151.214.52.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 cd836371f1d.cdn.intergient.com udp
GB 142.250.187.196:443 www.google.com udp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
US 8.8.8.8:53 servedby.flashtalking.com udp
BE 104.68.68.28:443 servedby.flashtalking.com tcp
US 8.8.8.8:53 ajs-assets.ftstatic.com udp
DE 18.66.147.15:443 ajs-assets.ftstatic.com tcp
US 8.8.8.8:53 agen-assets.ftstatic.com udp
US 18.244.18.79:443 agen-assets.ftstatic.com tcp
US 8.8.8.8:53 15.147.66.18.in-addr.arpa udp
US 8.8.8.8:53 79.18.244.18.in-addr.arpa udp
US 8.8.8.8:53 cdn.flashtalking.com udp
SE 23.34.232.40:443 cdn.flashtalking.com tcp
SE 23.34.232.40:443 cdn.flashtalking.com tcp
SE 23.34.232.40:443 cdn.flashtalking.com tcp
DE 18.245.60.124:443 js.ad-score.com tcp
US 8.8.8.8:53 ad-events.flashtalking.com udp
US 8.8.8.8:53 stat.flashtalking.com udp
GB 13.42.107.14:443 ad-events.flashtalking.com tcp
SE 23.34.232.40:443 stat.flashtalking.com tcp
SE 23.34.232.40:443 stat.flashtalking.com tcp
US 8.8.8.8:53 data.ad-score.com udp
US 130.211.115.4:443 data.ad-score.com tcp
US 8.8.8.8:53 40.232.34.23.in-addr.arpa udp
US 8.8.8.8:53 124.60.245.18.in-addr.arpa udp
US 8.8.8.8:53 14.107.42.13.in-addr.arpa udp
US 8.8.8.8:53 secure.flashtalking.com udp
SE 23.34.232.40:443 secure.flashtalking.com tcp
US 8.8.8.8:53 4.115.211.130.in-addr.arpa udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
SE 23.34.232.40:443 secure.flashtalking.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
SE 23.34.232.40:443 secure.flashtalking.com tcp
US 13.33.173.196:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
IE 52.214.151.37:443 g2.gumgum.com tcp
DE 52.59.114.254:443 btlr.sharethrough.com tcp
DE 52.222.236.48:443 hb.yellowblue.io tcp
NL 185.89.210.46:443 ib.adnxs.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 35.186.253.211:443 rtb.openx.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 130.211.115.4:443 data.ad-score.com tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
US 8.8.8.8:53 d.agkn.com udp
US 8.8.8.8:53 discovery.demdex.net udp
IE 34.242.115.85:443 d.agkn.com tcp
IE 34.242.115.85:443 d.agkn.com tcp
IE 63.32.81.13:443 discovery.demdex.net tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 beacons3.gvt2.com udp
GB 216.58.213.3:443 beacons3.gvt2.com udp
GB 216.58.213.3:443 beacons3.gvt2.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
FR 3.162.36.191:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
US 8.8.8.8:53 grid.bidswitch.net udp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 btlr.sharethrough.com udp
NL 185.89.210.46:443 ib.adnxs.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 35.186.253.211:443 rtb.openx.net udp
DE 52.59.114.254:443 btlr.sharethrough.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
IE 34.251.51.232:443 g2.gumgum.com tcp
DE 52.222.236.48:443 hb.yellowblue.io tcp
US 8.8.8.8:53 191.36.162.3.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
FR 3.162.36.191:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 z.moatads.com udp
SE 23.34.233.119:443 z.moatads.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 cd836371f1d.cdn.intergient.com udp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
US 8.8.8.8:53 cdn.intergi.com udp
DE 13.32.27.71:443 cdn.intergi.com tcp
US 8.8.8.8:53 px.moatads.com udp
US 8.8.8.8:53 119.233.34.23.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 imasdk.googleapis.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
GB 216.58.204.70:443 s0.2mdn.net udp
GB 142.250.200.10:443 imasdk.googleapis.com udp
US 8.8.8.8:53 csi.gstatic.com udp
US 172.217.222.120:443 csi.gstatic.com tcp
US 172.217.222.120:443 csi.gstatic.com tcp
US 8.8.8.8:53 71.27.32.13.in-addr.arpa udp
US 8.8.8.8:53 m.media-amazon.com udp
BE 23.14.90.82:443 m.media-amazon.com tcp
US 172.217.222.120:443 csi.gstatic.com udp
US 8.8.8.8:53 ts.amazon-adsystem.com udp
US 8.8.8.8:53 images-na.ssl-images-amazon.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
DE 18.66.122.76:443 ts.amazon-adsystem.com tcp
US 8.8.8.8:53 120.222.217.172.in-addr.arpa udp
US 8.8.8.8:53 82.90.14.23.in-addr.arpa udp
BE 23.14.90.82:443 images-na.ssl-images-amazon.com udp
IE 54.239.38.253:443 aax-eu.amazon-adsystem.com tcp
IE 54.239.38.253:443 aax-eu.amazon-adsystem.com tcp
IE 54.239.38.253:443 aax-eu.amazon-adsystem.com tcp
IE 54.239.38.253:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 s2.paa-reporting-advertising.amazon udp
FR 99.86.91.61:443 s2.paa-reporting-advertising.amazon tcp
US 8.8.8.8:53 tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev udp
DE 52.222.236.18:443 tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 76.122.66.18.in-addr.arpa udp
US 8.8.8.8:53 253.38.239.54.in-addr.arpa udp
US 8.8.8.8:53 61.91.86.99.in-addr.arpa udp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
IE 54.239.38.253:443 aax-eu.amazon-adsystem.com tcp
IE 54.239.38.253:443 aax-eu.amazon-adsystem.com tcp
SE 23.34.233.119:443 px.moatads.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
IE 54.239.38.253:443 aax-eu.amazon-adsystem.com tcp
IE 54.239.38.253:443 aax-eu.amazon-adsystem.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
FR 3.162.36.191:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 52.59.114.254:443 btlr.sharethrough.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 52.222.236.48:443 hb.yellowblue.io tcp
NL 185.89.210.46:443 ib.adnxs.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
US 35.186.253.211:443 rtb.openx.net udp
US 172.64.151.101:443 htlb.casalemedia.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
IE 34.251.51.232:443 g2.gumgum.com tcp
US 35.186.253.211:443 rtb.openx.net tcp
FR 3.162.36.191:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 52.59.114.254:443 btlr.sharethrough.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 52.222.236.48:443 hb.yellowblue.io tcp
NL 185.89.210.46:443 ib.adnxs.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
IE 34.251.51.232:443 g2.gumgum.com tcp
GB 142.250.187.196:443 www.google.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.206:443 clients2.google.com udp
GB 142.250.187.206:443 clients2.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 13.35.57.188:443 aax.amazon-adsystem.com tcp
NL 185.89.210.46:443 ib.adnxs.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 8.8.8.8:53 grid.bidswitch.net udp
US 8.8.8.8:53 hb.yellowblue.io udp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 172.64.151.101:443 htlb.casalemedia.com udp
US 35.186.253.211:443 rtb.openx.net udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 8.8.8.8:53 g2.gumgum.com udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 52.58.29.89:443 btlr.sharethrough.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
IE 52.214.151.37:443 g2.gumgum.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
DE 52.222.236.9:443 hb.yellowblue.io tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 52.222.236.9:443 hb.yellowblue.io tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 89.29.58.52.in-addr.arpa udp
GB 142.250.187.196:80 www.google.com tcp
US 8.8.8.8:53 cd836371f1d.cdn.intergient.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
GB 142.250.187.196:443 www.google.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 answers.microsoft.com udp
US 23.219.239.203:80 answers.microsoft.com tcp
US 23.219.239.203:443 answers.microsoft.com tcp
US 8.8.8.8:53 answers-afd.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 8.8.8.8:53 consentdeliveryfd.azurefd.net udp
US 8.8.8.8:53 js.monitor.azure.com udp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
SE 23.34.233.128:443 www.microsoft.com tcp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 8.8.8.8:53 answersstaticfilecdnv2.azureedge.net udp
US 13.107.253.64:443 js.monitor.azure.com tcp
US 13.107.253.64:443 js.monitor.azure.com tcp
US 8.8.8.8:53 logincdn.msftauth.net udp
US 152.199.21.175:443 logincdn.msftauth.net tcp
US 152.199.21.175:443 logincdn.msftauth.net tcp
US 13.107.253.64:443 js.monitor.azure.com tcp
US 13.35.57.188:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
DE 52.222.236.9:443 hb.yellowblue.io tcp
NL 185.89.210.46:443 ib.adnxs.com tcp
US 35.186.253.211:443 rtb.openx.net udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 52.58.29.89:443 btlr.sharethrough.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
DE 18.157.230.4:443 tlx.3lift.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
IE 52.214.151.37:443 g2.gumgum.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 csp.microsoft.com udp
US 13.107.253.64:443 csp.microsoft.com tcp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 52.168.117.168:443 browser.events.data.microsoft.com tcp
US 52.168.117.168:443 browser.events.data.microsoft.com tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 servedby.flashtalking.com udp
BE 104.68.68.28:443 servedby.flashtalking.com tcp
US 8.8.8.8:53 168.117.168.52.in-addr.arpa udp
US 8.8.8.8:53 agen-assets.ftstatic.com udp
US 18.244.18.94:443 agen-assets.ftstatic.com tcp
US 8.8.8.8:53 cdn.flashtalking.com udp
SE 23.34.232.40:443 cdn.flashtalking.com tcp
US 8.8.8.8:53 94.18.244.18.in-addr.arpa udp
US 8.8.8.8:53 ad-events.flashtalking.com udp
US 8.8.8.8:53 stat.flashtalking.com udp
SE 23.34.232.40:443 stat.flashtalking.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
GB 13.42.107.14:443 ad-events.flashtalking.com tcp
SE 23.34.232.40:443 stat.flashtalking.com tcp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
US 142.250.64.131:443 beacons2.gvt2.com udp
US 142.250.64.131:443 beacons2.gvt2.com tcp
US 8.8.8.8:53 131.64.250.142.in-addr.arpa udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
SE 23.34.232.40:443 stat.flashtalking.com tcp
SE 23.34.232.40:443 stat.flashtalking.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 18.244.15.236:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 hb.yellowblue.io udp
US 35.186.253.211:443 rtb.openx.net udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 g2.gumgum.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
NL 185.89.210.46:443 ib.adnxs.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
US 35.186.253.211:443 rtb.openx.net tcp
US 18.244.15.236:443 aax.amazon-adsystem.com tcp
DE 18.185.42.31:443 btlr.sharethrough.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 8.8.8.8:53 31.42.185.18.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 35.186.253.211:443 rtb.openx.net udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 130.211.115.4:443 data.ad-score.com tcp
US 8.8.8.8:53 cd836371f1d.cdn.intergient.com udp
US 8.8.8.8:53 8660aac359522ce5b213c514cb6ae861.safeframe.googlesyndication.com udp
NL 178.250.1.3:443 static.criteo.net tcp
NL 178.250.1.3:443 static.criteo.net tcp
GB 172.217.169.65:443 8660aac359522ce5b213c514cb6ae861.safeframe.googlesyndication.com udp
GB 172.217.169.65:443 8660aac359522ce5b213c514cb6ae861.safeframe.googlesyndication.com tcp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 s0.2mdn.net udp
GB 216.58.204.70:443 s0.2mdn.net udp
GB 142.250.200.2:443 googleads.g.doubleclick.net tcp
GB 142.250.187.196:443 www.google.com tcp
GB 216.58.204.70:443 s0.2mdn.net tcp
GB 142.250.200.2:443 googleads.g.doubleclick.net tcp
DE 52.222.236.48:443 hb.yellowblue.io tcp
US 104.18.36.155:443 htlb.casalemedia.com udp
IE 54.216.224.159:443 g2.gumgum.com tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
US 8.8.8.8:53 motherboard.vice.com udp
US 151.101.2.133:443 motherboard.vice.com tcp
US 8.8.8.8:53 www.vice.com udp
US 151.101.130.133:443 www.vice.com tcp
US 8.8.8.8:53 oembed.vice.com udp
US 8.8.8.8:53 video-images.vice.com udp
US 8.8.8.8:53 vice-web-statics-cdn.vice.com udp
US 8.8.8.8:53 www.npttech.com udp
US 151.101.130.133:443 vice-web-statics-cdn.vice.com tcp
US 8.8.8.8:53 images.vice.com udp
US 151.101.2.133:443 images.vice.com tcp
US 8.8.8.8:53 cdn.privacy-mgmt.com udp
US 151.101.194.133:443 images.vice.com tcp
US 104.21.66.34:443 www.npttech.com tcp
DE 13.32.27.51:443 htlbid.com tcp
US 18.245.199.47:443 cdn.privacy-mgmt.com tcp
US 151.101.2.133:443 images.vice.com tcp
US 8.8.8.8:53 vice-sundry-assets-cdn.vice.com udp
US 8.8.8.8:53 47.199.245.18.in-addr.arpa udp
US 151.101.194.133:443 vice-sundry-assets-cdn.vice.com tcp
US 151.101.194.133:443 vice-sundry-assets-cdn.vice.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 firebaselogging.googleapis.com udp
GB 216.58.212.202:443 firebaselogging.googleapis.com tcp
GB 216.58.212.202:443 firebaselogging.googleapis.com tcp
US 8.8.8.8:53 202.212.58.216.in-addr.arpa udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 151.101.2.133:443 vice-sundry-assets-cdn.vice.com tcp
US 18.244.15.236:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 35.186.253.211:443 rtb.openx.net udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 52.222.236.48:443 hb.yellowblue.io tcp
NL 185.89.210.46:443 ib.adnxs.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 18.185.42.31:443 btlr.sharethrough.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
IE 54.216.224.159:443 g2.gumgum.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 8.8.8.8:53 www.vice.com udp
US 151.101.130.133:443 www.vice.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 151.101.2.133:443 www.vice.com tcp
US 151.101.194.133:443 www.vice.com tcp
US 151.101.2.133:443 www.vice.com tcp
US 104.21.66.34:443 www.npttech.com tcp
DE 13.32.27.51:443 htlbid.com tcp
US 151.101.130.133:443 www.vice.com tcp
US 18.245.199.47:443 cdn.privacy-mgmt.com tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 216.58.212.202:443 firebaselogging.googleapis.com tcp
GB 216.58.212.202:443 firebaselogging.googleapis.com tcp
US 142.250.64.131:443 beacons2.gvt2.com udp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 35.186.253.211:443 rtb.openx.net udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 104.18.36.155:443 htlb.casalemedia.com udp
DE 52.222.236.48:443 hb.yellowblue.io tcp
US 8.8.8.8:53 tlx.3lift.com udp
NL 185.89.210.46:443 ib.adnxs.com tcp
IE 54.216.224.159:443 g2.gumgum.com tcp
US 8.8.8.8:53 grid.bidswitch.net udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 13.33.173.196:443 aax.amazon-adsystem.com tcp
US 35.186.253.211:443 rtb.openx.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
DE 35.157.245.177:443 btlr.sharethrough.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
DE 52.222.236.48:443 hb.yellowblue.io tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 185.89.210.46:443 ib.adnxs.com tcp
IE 54.216.224.159:443 g2.gumgum.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 8.8.8.8:53 177.245.157.35.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.187.228:80 google.co.ck tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 servedby.flashtalking.com udp
BE 104.68.68.28:443 servedby.flashtalking.com tcp
BE 104.68.68.28:443 servedby.flashtalking.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 agen-assets.ftstatic.com udp
FR 18.155.129.117:443 agen-assets.ftstatic.com tcp
FR 18.155.129.117:443 agen-assets.ftstatic.com tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 ad-events.flashtalking.com udp
US 8.8.8.8:53 stat.flashtalking.com udp
SE 23.34.232.40:443 stat.flashtalking.com tcp
GB 142.250.187.196:80 www.google.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
US 8.8.8.8:53 117.129.155.18.in-addr.arpa udp
SE 23.34.232.40:443 stat.flashtalking.com tcp
SE 23.34.232.40:443 stat.flashtalking.com tcp
GB 13.43.176.233:443 ad-events.flashtalking.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 13.43.176.233:443 ad-events.flashtalking.com tcp
SE 23.34.232.40:443 stat.flashtalking.com tcp
US 8.8.8.8:53 play.clubpenguin.com udp
SE 23.34.232.40:443 stat.flashtalking.com tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 pcoptimizerpro.com udp
US 50.63.8.124:80 pcoptimizerpro.com tcp
US 50.63.8.124:80 pcoptimizerpro.com tcp
GB 142.250.187.196:80 www.google.com tcp
US 50.63.8.124:443 pcoptimizerpro.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 124.8.63.50.in-addr.arpa udp
US 8.8.8.8:53 www.pcoptimizerpro.com udp
US 8.8.8.8:53 www.jqueryscript.net udp
US 8.8.8.8:53 maxcdn.bootstrapcdn.com udp
US 172.67.75.171:443 www.jqueryscript.net tcp
US 172.67.75.171:443 www.jqueryscript.net tcp
US 104.18.10.207:443 maxcdn.bootstrapcdn.com tcp
US 104.18.10.207:443 maxcdn.bootstrapcdn.com tcp
US 8.8.8.8:53 cdn.jquery.app udp
US 172.67.164.99:443 cdn.jquery.app tcp
US 172.67.164.99:443 cdn.jquery.app tcp
US 8.8.8.8:53 171.75.67.172.in-addr.arpa udp
US 50.63.8.124:443 www.pcoptimizerpro.com tcp
US 50.63.8.124:443 www.pcoptimizerpro.com tcp
US 50.63.8.124:443 www.pcoptimizerpro.com tcp
US 8.8.8.8:53 99.164.67.172.in-addr.arpa udp
US 8.8.8.8:53 softonic.com udp
US 199.232.213.91:80 softonic.com tcp
US 199.232.213.91:443 softonic.com tcp
US 13.33.173.196:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
DE 35.157.245.177:443 btlr.sharethrough.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
US 8.8.8.8:53 hb.yellowblue.io udp
US 35.186.253.211:443 rtb.openx.net udp
US 8.8.8.8:53 htlb.casalemedia.com udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 172.64.151.101:443 htlb.casalemedia.com udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 8.8.8.8:53 g2.gumgum.com udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
DE 52.222.236.91:443 hb.yellowblue.io tcp
US 35.186.253.211:443 rtb.openx.net tcp
IE 34.251.51.232:443 g2.gumgum.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 123.172.252.37.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 www.softonic.com udp
US 151.101.193.91:443 www.softonic.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
GB 142.250.200.2:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 assets.sftcdn.net udp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 articles-img.sftcdn.net udp
US 151.101.193.91:443 assets.sftcdn.net tcp
US 151.101.193.91:443 assets.sftcdn.net tcp
BE 104.68.68.28:443 servedby.flashtalking.com tcp
FR 18.155.129.117:443 agen-assets.ftstatic.com tcp
US 23.219.230.135:443 images.sftcdn.net tcp
NL 23.62.61.147:443 articles-img.sftcdn.net tcp
US 8.8.8.8:53 sdk.privacy-center.org udp
SE 23.34.232.40:443 stat.flashtalking.com tcp
NL 23.62.61.147:443 articles-img.sftcdn.net tcp
NL 23.62.61.147:443 articles-img.sftcdn.net tcp
NL 23.62.61.147:443 articles-img.sftcdn.net tcp
GB 13.43.176.233:443 ad-events.flashtalking.com tcp
SE 23.34.232.40:443 stat.flashtalking.com tcp
NL 23.62.61.147:443 articles-img.sftcdn.net tcp
NL 23.62.61.147:443 articles-img.sftcdn.net tcp
US 8.8.8.8:53 147.61.62.23.in-addr.arpa udp
GB 142.250.187.228:80 google.co.ck tcp
SE 23.34.232.40:443 stat.flashtalking.com tcp
US 8.8.8.8:53 google.co.ck udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
DE 52.222.236.91:443 hb.yellowblue.io tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
US 13.35.57.188:443 aax.amazon-adsystem.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 35.186.253.211:443 rtb.openx.net udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
IE 34.251.51.232:443 g2.gumgum.com tcp
DE 52.59.2.9:443 btlr.sharethrough.com tcp
US 35.186.253.211:443 rtb.openx.net tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 8.8.8.8:53 9.2.59.52.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 130.211.115.4:443 data.ad-score.com tcp
US 8.8.8.8:53 cd836371f1d.cdn.intergient.com udp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
GB 142.250.187.196:80 www.google.com tcp
US 8.8.8.8:53 servedby.flashtalking.com udp
BE 104.68.68.28:443 servedby.flashtalking.com tcp
FR 18.155.129.117:443 agen-assets.ftstatic.com tcp
SE 23.34.232.40:443 stat.flashtalking.com tcp
GB 13.43.176.233:443 ad-events.flashtalking.com tcp
SE 23.34.232.40:443 stat.flashtalking.com tcp
SE 23.34.232.40:443 stat.flashtalking.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 stat.flashtalking.com udp
SE 23.34.232.40:443 stat.flashtalking.com tcp
US 13.35.57.188:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 52.59.2.9:443 btlr.sharethrough.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 35.186.253.211:443 rtb.openx.net udp
US 172.64.151.101:443 htlb.casalemedia.com udp
DE 3.78.168.176:443 tlx.3lift.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 8.8.8.8:53 hb.yellowblue.io udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 8.8.8.8:53 g2.gumgum.com udp
FR 18.244.28.121:443 hb.yellowblue.io tcp
IE 34.251.51.232:443 g2.gumgum.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 121.28.244.18.in-addr.arpa udp
GB 142.250.187.196:80 www.google.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 ad.atdmt.com udp
GB 216.58.204.70:443 s0.2mdn.net udp
GB 216.58.204.70:443 s0.2mdn.net tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 www.clarity.ms udp
US 13.107.253.64:443 www.clarity.ms tcp
US 13.107.253.64:443 www.clarity.ms tcp
US 8.8.8.8:53 static.hotjar.com udp
DE 18.66.102.11:443 static.hotjar.com tcp
DE 18.66.102.11:443 static.hotjar.com tcp
US 50.63.8.124:443 www.pcoptimizerpro.com tcp
US 50.63.8.124:443 www.pcoptimizerpro.com tcp
US 8.8.8.8:53 11.102.66.18.in-addr.arpa udp
GB 142.250.187.228:80 google.co.ck tcp
US 8.8.8.8:53 script.hotjar.com udp
FR 18.164.52.121:443 script.hotjar.com tcp
FR 18.164.52.121:443 script.hotjar.com tcp
US 8.8.8.8:53 x.clarity.ms udp
US 20.114.190.119:443 x.clarity.ms tcp
US 20.114.190.119:443 x.clarity.ms tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 79.142.66.18.in-addr.arpa udp
US 8.8.8.8:53 121.52.164.18.in-addr.arpa udp
BE 64.233.166.156:443 stats.g.doubleclick.net tcp
BE 64.233.166.156:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 c.clarity.ms udp
IE 68.219.88.97:443 c.clarity.ms tcp
IE 68.219.88.97:443 c.clarity.ms tcp
US 8.8.8.8:53 119.190.114.20.in-addr.arpa udp
US 8.8.8.8:53 156.166.233.64.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 97.88.219.68.in-addr.arpa udp
US 50.63.8.124:443 www.pcoptimizerpro.com tcp
US 8.8.8.8:53 answers.microsoft.com udp
US 23.219.239.203:80 answers.microsoft.com tcp
US 23.219.239.203:443 answers.microsoft.com tcp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 answers-afd.microsoft.com udp
US 8.8.8.8:53 js.monitor.azure.com udp
US 8.8.8.8:53 consentdeliveryfd.azurefd.net udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 8.8.8.8:53 mem.gfx.ms udp
US 199.232.213.91:80 softonic.com tcp
US 199.232.213.91:443 softonic.com tcp
US 8.8.8.8:53 www.softonic.com udp
US 151.101.65.91:443 www.softonic.com tcp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 assets.sftcdn.net udp
US 151.101.129.91:443 assets.sftcdn.net tcp
US 8.8.8.8:53 articles-img.sftcdn.net udp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 csp.microsoft.com udp
US 8.8.8.8:53 91.65.101.151.in-addr.arpa udp
NL 23.62.61.147:443 articles-img.sftcdn.net tcp
US 13.107.246.64:443 csp.microsoft.com tcp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
JP 40.79.197.34:443 browser.events.data.microsoft.com tcp
JP 40.79.197.34:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 34.197.79.40.in-addr.arpa udp
US 23.219.230.135:443 images.sftcdn.net tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
US 8.8.8.8:53 rtb.openx.net udp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
FR 18.244.28.121:443 hb.yellowblue.io tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 8.8.8.8:53 grid.bidswitch.net udp
US 8.8.8.8:53 tlx.3lift.com udp
US 35.186.253.211:443 rtb.openx.net udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
IE 34.251.51.232:443 g2.gumgum.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
DE 3.78.168.176:443 tlx.3lift.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
DE 52.59.30.68:443 btlr.sharethrough.com tcp
DE 108.138.8.164:443 aax.amazon-adsystem.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 ad.atdmt.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 c.pki.goog udp
GB 172.217.169.67:80 c.pki.goog tcp
US 8.8.8.8:53 c.bing.com udp
US 204.79.197.237:443 c.bing.com tcp
US 204.79.197.237:443 c.bing.com tcp
US 8.8.8.8:53 o.pki.goog udp
GB 172.217.169.67:80 o.pki.goog tcp
US 20.114.190.119:443 x.clarity.ms tcp
US 8.8.8.8:53 motherboard.vice.com udp
US 151.101.2.133:443 motherboard.vice.com tcp
US 8.8.8.8:53 www.vice.com udp
US 151.101.66.133:443 www.vice.com tcp
US 8.8.8.8:53 htlbid.com udp
US 8.8.8.8:53 oembed.vice.com udp
US 8.8.8.8:53 vice-web-statics-cdn.vice.com udp
US 8.8.8.8:53 video-images.vice.com udp
US 8.8.8.8:53 cdn.privacy-mgmt.com udp
US 18.245.199.25:443 cdn.privacy-mgmt.com tcp
US 151.101.130.133:443 video-images.vice.com tcp
US 8.8.8.8:53 25.199.245.18.in-addr.arpa udp
GB 216.58.212.202:443 firebaselogging.googleapis.com tcp
GB 216.58.212.202:443 firebaselogging.googleapis.com tcp
DE 108.138.8.164:443 aax.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 35.186.253.211:443 rtb.openx.net udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 52.59.30.68:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 hb.yellowblue.io udp
US 172.64.151.101:443 htlb.casalemedia.com udp
US 8.8.8.8:53 g2.gumgum.com udp
DE 37.252.172.123:443 ib.adnxs.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
DE 52.222.236.9:443 hb.yellowblue.io tcp
IE 99.80.191.128:443 g2.gumgum.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
DE 108.138.8.164:443 aax.amazon-adsystem.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
US 8.8.8.8:53 cd836371f1d.cdn.intergient.com udp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
US 8.8.8.8:53 px.moatads.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 2.21.189.220:443 px.moatads.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 csi.gstatic.com udp
GB 142.250.187.196:443 www.google.com tcp
AE 172.217.19.195:443 csi.gstatic.com udp
AE 172.217.19.195:443 csi.gstatic.com tcp
US 8.8.8.8:53 ts.amazon-adsystem.com udp
US 8.8.8.8:53 images-na.ssl-images-amazon.com udp
DE 18.66.122.32:443 ts.amazon-adsystem.com tcp
IE 54.239.33.159:443 aax-eu.amazon-adsystem.com tcp
IE 54.239.33.159:443 aax-eu.amazon-adsystem.com tcp
DE 52.222.237.219:443 images-na.ssl-images-amazon.com tcp
DE 52.222.237.219:443 images-na.ssl-images-amazon.com tcp
IE 54.239.33.159:443 aax-eu.amazon-adsystem.com tcp
IE 54.239.33.159:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 m.media-amazon.com udp
IE 54.239.33.159:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 32.122.66.18.in-addr.arpa udp
US 8.8.8.8:53 195.19.217.172.in-addr.arpa udp
DE 52.222.237.219:443 m.media-amazon.com udp
DE 52.222.237.219:443 m.media-amazon.com tcp
DE 18.66.147.100:443 s2.paa-reporting-advertising.amazon tcp
US 8.8.8.8:53 tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev udp
DE 52.222.236.36:443 tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev tcp
DE 52.222.236.36:443 tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev tcp
US 8.8.8.8:53 159.33.239.54.in-addr.arpa udp
US 8.8.8.8:53 100.147.66.18.in-addr.arpa udp
US 8.8.8.8:53 219.237.222.52.in-addr.arpa udp
US 8.8.8.8:53 36.236.222.52.in-addr.arpa udp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
NL 178.250.1.8:443 grid.bidswitch.net tcp
NL 178.250.1.8:443 grid.bidswitch.net tcp
US 35.186.253.211:443 rtb.openx.net udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
DE 52.58.29.89:443 btlr.sharethrough.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.187.228:80 google.co.ck tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.228:80 google.co.ck tcp
AE 172.217.19.195:443 csi.gstatic.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 play.clubpenguin.com udp
US 8.8.8.8:53 play.clubpenguin.com udp
GB 142.250.187.228:80 google.co.ck tcp

Files

\??\pipe\crashpad_2828_GBWOEECNEBEACHPH

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 3237935adb1d2b9238c8d46f21b06dee
SHA1 fff310ca22acd900357e9e303cf120c659408501
SHA256 285693550a135ca9e8caf15dd39a1313644022712af40b7f461fd421f25a67ee
SHA512 a96c915fc4870e4b3060dc9fc2856d1972d37eaf2a0045e8e9ea5c1e06a44930ed435fc360d77044ebc6e3d81c25e201e43c47caa9ebefce7b96cf077cfd204a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a0fad3eb071b4807253301e1f712d779
SHA1 61602dd5c38df64a5122a8021db3ae2ec3fdf3cf
SHA256 3840a784f27797e1c1619a90de0167919bc61065756f65aff5fe6b476bd6b3f7
SHA512 ee70832ef80d01b620330f53c1b2ad9f0c817e5b43116573dc1afcf2bbee673945956e9715b229c835dc6cd61a7234aba4df3ec4ee5580e6f53058a1f89ff734

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000001

MD5 081c4aa5292d279891a28a6520fdc047
SHA1 c3dbb6c15f3555487c7b327f4f62235ddb568b84
SHA256 12cc87773068d1cd7105463287447561740be1cf4caefd563d0664da1f5f995f
SHA512 9a78ec4c2709c9f1b7e12fd9105552b1b5a2b033507de0c876d9a55d31678e6b81cec20e01cf0a9e536b013cdb862816601a79ce0a2bb92cb860d267501c0b69

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1745a3696dcdb1ca04c5c7cac9d5e7b4
SHA1 abcab8985a7843b9ed1b2578f402b2391454a666
SHA256 bfb24dbda00706541ace911ae35f9a134ec8e176d17242be98f5c374f8a94a6f
SHA512 568c1ce36f709db4d8d7741bc83e0becfd3a1bc7ec0a57f6cabc33424474fd9f31a02b835c2ceb5d5f73e42fa474c1bd14101f43b9203699cb3759f28708672d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f267cde04cabaa7a72e00760e50263d7
SHA1 7f2c6140119cb80b49d0e87a8819b482460bf3a4
SHA256 05db3935f733cd5788fbf51abc8d59621cd4b54eaeaa0d03005d2b364ff1dd06
SHA512 589202c5c41f2fb7044cdbbc2e2fce54533dd1258716805c8c0545c5e60ab79ebc0047cc55af3b1406de5aa3fb79972cff97c65ffb78b9cda183a58cf578278b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 981e02dda970fe52f2f40dc0ac54c4aa
SHA1 83b8113a526ebab2eccffe4828d9a07b8d6b5c83
SHA256 eafae8db1c12f9081dda13822f5bf9fb05c3ba8d4b986ce0e6e7ea4c2c1d07f6
SHA512 5c825a9469e24c963435f5355db4e32e55090bd924d8f375e5e930edcc3eb2e904937d81f97aa9597ee72b7e309d2f9474d9c39245df8215cb99f4eaa79e2196

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e9f44c72f8bd8254551d901796729f1c
SHA1 9a49e75606559cb6b2b69067e817993683c54acd
SHA256 1cce0baa0dfb656295462ff5a06b08db1bed51453fddaf847746c86a69232717
SHA512 951cdf6bb4d09331097f5e968a5add920711a365f6a0fb3b461783a83e9669f6e5d5070efe9d712ce5eec93beb3d37bf1fa86ec6d153ba2d3f0e75c4f0414a76

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5a3cc374522eb373a4e94592ac94ff7e
SHA1 46931f950bb4301640225905c7ecb702c34cd9e1
SHA256 aba2a3e72479b9860c72720de68f886950bb795d47e0140781c58caa22e44a63
SHA512 467c0ef31fef0c5d995899e5f5fc344ce1b2b1a6195a39e2e002a638220e9427e72e1571c674b5483d34c7b64122ce4d0c078e06d74a4c20cd8c0ae317783d5f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 e5ef18ba2a2c72aa2c441c245a422993
SHA1 83a0232cc093fdc97bd93d82bc4c17612b7b73c3
SHA256 e46bc9f149a78dfdf4feae34dce36187fef885a205875e75d26f7de643edaeb8
SHA512 4f67727ce933d658ce9c9594971fba1bc2507cfc254ac90b9b81d0b505fbd6cc531daf0b44bdcaabbae07288b088a2f3a74bab5c7c22cba52b7d00cb800ae215

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\c5009974-85a8-4495-b2d6-3d920485b075.tmp

MD5 e0db89358ed555656d5975da256165c3
SHA1 a697eb4db261aadd786fa396fbc284b664adfa2a
SHA256 8bca229142ead83bd83b266e2d1c9ad27e27bf9268e7cfc2f16db4de14e38940
SHA512 3d3ce461b450e4ff2572a2409f37732f7dbb5ed1e719a6ddfb95ba812fadd7cbcd7448aa6d16222f2f3a58eec354ea06916f4e40952a19ee76183097dac515b0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f8e69ba190bf303f91650e008e27d2e2
SHA1 e80a47d974f4e0f63942cfea0c7dcaebaeca16f2
SHA256 202108b42f8e39ec983d00a65ab767107b44bc8be00c3d9b15d8a0bb93b2d3ec
SHA512 eed0fff68fbc32da5aced478cfe6b9b48fc1590fb2613df70b4105bedf98c93d9f049cdc4fdca6791bc3c4922540bfa0ad1d38bfd682ef1dd519ffb8da6e2529

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 ae1bccd6831ebfe5ad03b482ee266e4f
SHA1 01f4179f48f1af383b275d7ee338dd160b6f558a
SHA256 1b11047e738f76c94c9d15ee981ec46b286a54def1a7852ca1ade7f908988649
SHA512 baf7ff6747f30e542c254f46a9678b9dbf42312933962c391b79eca6fcb615e4ba9283c00f554d6021e594f18c087899bc9b5362c41c0d6f862bba7fb9f83038

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58da8c.TMP

MD5 5e438c47597670002b3740dd0a04c8f8
SHA1 d183d7e67c05308ed6a6e429bdfaa963f21d7f76
SHA256 dd5a64e75eb497240606025e3609b0bea2c89a74c3c23bda6bc5bae326343b87
SHA512 b8520c769893b920515af4a16a9e68869482d9cce1376154e1817ef5af4835e906511631ba40d4ebae8245e70f806a5df864336d39621e4a5eaa8d0eb674167f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 60f95cef2433b82dd642ec04aa6f680f
SHA1 3788462cd60abface05c70638ba1ba99ef677a56
SHA256 2dd0bb8c903fa011d62083fb55eae06d8f634d77fb082016751bb7cd8d00a296
SHA512 69f5591e387ea4fd57e31e296a1c9babe7f19e7d864464b270928be5a6be0b2d992b460c4daec0cfe3d0541cab50e2941efcdd6fbb40836413e34c7217b0a127

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c829446bb8cc6f608739390f89ff0c7f
SHA1 823f8df215e7d890e5546872aae77e4995aa86dc
SHA256 2a1afb5ac1b6cc42f2a523360424e7bcae98e00190e53ce19e9efd5eb5d85b1c
SHA512 913601f717b2b7043e3e56ab692c4e7b3e7e59e8230b6615078ee219874462142d25ad484c2df469d24afd82eb52a32aeb7f7519efc73e9b8e9554744b5df499

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002f

MD5 94f3cd075711c9533d5c34754d748eef
SHA1 6d17b83bacb2d1aea0b3e7995dc7128cf7b88e56
SHA256 26922c1a98440b0c6b8141d2ed4d0f485fdca942fc1bdf304c723ad17224e7ba
SHA512 4996ef6edf0e7616cc778f06fafb3cacaf81de8ab66559b60617d87cbb6c7e8fbc3209aa2455dcc480f9e40bb6e162ed22a7ee25eca5563052530b1830a626e1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\534b02a33e332ede_0

MD5 c72956e0b579c09c770fc904ceedf113
SHA1 9e8f2b34abfb7e457bed3db2aefefd15b79ddbe5
SHA256 8076115d5b6bcc1a553651d3d3a820b6a99944cd0618cf731463bd53b2ea9b41
SHA512 ed98a1b4e15efe2b2691371424e54d3229143b4b0aecd275616cd240e1a1067c0fbc47c88a19d079cb6ab62a450471d1ab24a3479e30223781342486026ed61b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d2884f9ebce346c3_0

MD5 ce272bfa2f4952ffa3ce109aedb95fb6
SHA1 a7486286a9a96ee0ec6485b72024cdb27d1eb2ec
SHA256 15e6e6369e58c58b95faef876306edf30007d94710728293f60c67d0b9d5362d
SHA512 24528f4cfcad52e244a994c73fc0b6efce154e7b363161996680fc670a5c88134229959b9b104830b38850f24ec0fd9cd5124eed183fcb6a25ad27b66af5bdaa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 07b2aaad5414b28a9dbf41bcbf1c3338
SHA1 ce4877c1f2010cb531063881a9a3e6cf69796143
SHA256 0d285709dcace2b51074db190bf22e0ec32c446d23f9537a9e5c828300616dbf
SHA512 4d5f679ae764f3a249d040230c40dbd109286e5630034b199527f034487ce2d8fc38391f9c7b8d1c0295e879fdfb5f6941d90ea6cd5ee39f076d9fb6367a88d5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036

MD5 3be2e9c4c58e18766801ef703a9161cc
SHA1 cbdc61e9fa2bd8c4293ea298a8aab94745e57f2d
SHA256 1c3f11c5ba6d3d5e0e1e88a3de6c27a16df13833470a19c03b04fb2f99dd5d57
SHA512 2f1a71f1fc17e79ddc1c0ba0be697fdc1641ee38604bd0c424b6ab702f008f9fd3c57f22ca959cea1f1de368016b258027190c279637ae8838787be366e40ec0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 2330f5bea2aa968b58c63bc707196235
SHA1 c502152d7a56a25cfd090cacbaa321b5536b6c3e
SHA256 2db560a5eb4feb26dae861d8b451a539c43982b91b7cb0d287205ce02cd31369
SHA512 64038c2cc5b6fc60d1615c49d42507b477a73057bc64cc6ef22d17673b624fe42728cc0a5c1e547cdc1d9646755de5e3448ee40427accac0517693006468d679

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 ae56bb8b6d2bcb378e322d35772b0e39
SHA1 b84f60b8c4b3cc187f0b88871ec940cfd1ea43ec
SHA256 a5cc2a1c66de5716d62cedca78fe225ba46b6d203c120e9a9c61d674f0420499
SHA512 53e4370d7c8d9725fd09558afc60896ffc598be7de25733e6851c174c27d89d87343be17c9216eea8382dd3ab79534b08a589610dc6d6c1b9d2d1cf1d261d02c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 3014fe72a1ec34c97071a842a941a060
SHA1 21308d82abb015c65efdbf3a9a0ae9ba4a46a95a
SHA256 27a3a48bcf2ccbfbd74d84f003836838ad798d1a678965f61b5cc1ae98443a50
SHA512 bdb987d3324011d2bd53a74a0537cb4b440fbe4e4adf55c3dfb7695669b27204928adee508198322375ba51d02743e1c78f6d3a7d0e43a89432f40b64f0f4d98

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe596596.TMP

MD5 f856207c95d357bbadfe893e93ddfda2
SHA1 54d6ca73c7881a975b24520af7588cc7859daef9
SHA256 eda125b46671f3eccf7e2727fc67417d7a08091582deb14047cd8df66e3ae82b
SHA512 410fd2aec3dd26e3e7c2a907bf9d5ffffd4b7af69611b1231514c784e164b68ccb63a7cb9f8fb106f06f95272a085455e24f58f9193eee1b7294b9ccb0a08141

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 44737651cffa269a67b76d902d47efa5
SHA1 f64bf1466a7189f672a6609d373fe6a7640e75b9
SHA256 8b8a8d6112c445c420dea2f3a349de4021e4e504bf114e2d7bab1227cbf2bc9c
SHA512 86f28fd90dea2528ddf703df62fa6f05cb6bf21f3d23209e593c77f0e87a2a2f9e7a03c9eedef4123f5ff96c55c13acf101f999b46db98b152a2f832bf237f3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 492f7e6f8bdcc4276c3c1c4c0ede75c7
SHA1 2f00b80cf97189fd75f76fbc5e5acab2eb2b9007
SHA256 c6949d3b1897c8ae93a0e6a88d166a8b762b01a1f442ee2547e2585a37266161
SHA512 30e67a80ea843b7cf94d8df3e587958646be796caf826d05b53dcbe2d5dd50ca810b68ef4603fcb08a7dcddfb6a3ffb62ab7257765d35a934b508ea6c7187c94

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1b1ba4fe966b02b1d9d3aa4aabcf9433
SHA1 f80cddea25f19649b42cd3ba85e8b9632a48c4c2
SHA256 22f9c17c273264596efd45477009ee3ec9008735e05a0f4dbd08ac66a3ac420e
SHA512 3370b10bddcc749d2b80c54901a9aa12d41432fc2e28f7fddd9eaa123c543492f31e38cacefa5635101525e589808351b72d617a8516671194257c977ea81249

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 866f2dcbca83b1090b616a59ff2f9ab7
SHA1 99fe1b839435e83d4bdd786bc8becb25eb8c5139
SHA256 9b39a453a2924f60b4b51b0052bc0af02fcac410bf1826caff458ec571483d9d
SHA512 8f45a9c46483d886dc5ae6df55a8c2073d1acf6581c24472985de2481671aafbbbf7bb24a8ced98f26b11ae9add1700d0db5d030d0dc5312e00622fcf6700319

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 a25afc90ab01fb309a29ebd3bcf0150e
SHA1 cc52aa3155e406eed43dc6216208dd6eb38fcf7b
SHA256 d193880c22eb3bb0ada2fc46f01ae58eb04647cd81cafef7fa67eb4e37e4f1b3
SHA512 adbf0b378c11828a213518377ad137e18a5f56a7f261bc21a8777a5b60c9e8ef1b33909719204f3b8d0244099e8b3749176790ad1c7e0fa2920e7018d45002ba

C:\Users\Admin\Downloads\ea0e19bf-8eeb-44c5-8c6e-951a6538d25b.tmp

MD5 25afcf36b7f5aba6e436d7db60f15829
SHA1 c61b46c34c57d4b250de09467376f3ec819d70ea
SHA256 a4de5e8127fd600d77bc3463fd501693abb59490ae585811be196269c9d80963
SHA512 156d5acabd891fc00ce28c272e576d13b95603317821422173aae88e778a11c6128bcd47cacaba2c564302ca5c70f420ba12f1b39acf7a888477fa21aac7d4b7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b

MD5 921df38cecd4019512bbc90523bd5df5
SHA1 5bf380ffb3a385b734b70486afcfc493462eceec
SHA256 83289571497cbf2f2859d8308982493a9c92baa23bebfb41ceed584e3a6f8f3f
SHA512 35fa5f8559570af719f8a56854d6184daa7ef218d38c257e1ad71209272d37355e9ad93aaa9fbe7e3b0a9b8b46dfc9085879b01ce7bb86dd9308d4a6f35f09e5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c

MD5 40e01c775b4f150dec2ff43bdf0f1816
SHA1 29cc0f7eb904aced209cec12ebbf8e6ab192da53
SHA256 4d21e64e043f3f03c39754589e8131f993de6565a9da3bf86a21c205e37b3ca0
SHA512 c868ed04136d1c38c2d4f22f7c16337532fa1b62a3da413df9815ddeb2fbd5a5175d7987beb796193a4e812a679c117928c97a4e87042ce4383433ba479b923f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d

MD5 c054cddd96069f22fe75e7a2c17ae412
SHA1 d38822115595dad9af041a2ac43dd74c782276c3
SHA256 5f2af02562178807d98ae12e1a8e1aeac6928440ed40276a8c3ea791a733ae71
SHA512 64506610fa6074e56f710f5e7b21ea47662237751121e2b73d77a9c1fc72ae61f2b3a2fd7cfd95c9b6a9500f56c307d0176f365e426aaa641b2afda81aa136c1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 efd46fc612453231f0898603c93f0d9d
SHA1 bd6353a93e8b86c945215e16fd84bb0c88bf7ae3
SHA256 d59b3c017384b1ab79838e742c331d62eb71e4aa90591fc6251794148d784501
SHA512 d06ba9c43c0c1724286118a7833023e1379598d1db0b7ec25fa35745b5cd54a0627ba2c762a7c3584469f76046b53823b25ae33a4ab88cb82df803d710ff89c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f5ae1c0d997d75e50e327cd409de34c9
SHA1 63f7cb555d103577c758c1bc0e1317854fa088c0
SHA256 b5694721f399997c096bf9f8ee88cb96dfceaf0eccf7ec4cbc07edfc75d2c81e
SHA512 026d7356c3ee0b7d10838284eb711484f108bc326b0e07b57e1be302782bd78c6339f230400a41c04e0103f70f7d44de57550c7aa1ed19b8032b70b9672ee8ab

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d88f9a0eb2d99e9e91adae5cdda16fed
SHA1 443741e65e398396685dff54125557e49c14b543
SHA256 415e464cd476b6c9f6f6970d62c6432144c24547302c7807aa3d0965ce56f683
SHA512 e3a0a929c6c7bbd498c2b876fc46d5331d4f23595dae57e35a53978f997b8b4309da9788a196e4bd5caad5843a2c6839f109eef629d849bcb931d49fbc7ad129

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013

MD5 29f447931bb22600031bbff505c3c9fb
SHA1 3dbfbf67710f5381e074e0b1032ec90433ba5750
SHA256 a6451ae5ea44f5fd24324d1c67fc56c4f8676dc3ff2954e5634e37890081d1a8
SHA512 b36f4e99014dbfc5027fd09aad552ee5332874f47b92135be144fb7c3bc605887eb15f01a71524cfe9dc4e43f0c93d1b046b6e2fe52dabc4b0a38074296b0e06

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

MD5 6d53dd4517b48262aab18bdc2ef3a830
SHA1 9c163a2d1fec496db66789ff4ad73b35baf576bb
SHA256 81320c19b14c74cc0f4440df9b3e1872ba364c823fb5fb25c80a8af7ef7f54f1
SHA512 c3f71f748902ca950b9eece75a4114e7ae0227028cab4440b3155f2fd3dc2bc88a50531f720383f269d05575777ff0971b2b2c362eb459e4787eeee9b3a12bdc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016

MD5 14745167f9f71a0c90cc2608a0e470a0
SHA1 bf049ff489936099e55bad9f255e36865724c36e
SHA256 315b4276007df165d5aa3e9b7957209e824d990956a56a2346313b5717e87a0e
SHA512 db81d2a2ee4674e236ea1fcca572abb82ae98e3f855897416c8abc93a08124465459f25462a308a6d6d90e883ad493333b4eb9a43285f67fa6d482a39ad94fac

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015

MD5 c61cb257ba75e1fe6c3687ba4ac68a0a
SHA1 d4c5be04814af250bd5ee823b295bdae9e4b3dff
SHA256 a9cd4fd5eb20c784a184ba77558208a441b24bbf3d149f3f018ea87ebfee5ac4
SHA512 2e25b1a32d17bc377b5dcc42fe21b04d515e52db286484c22b33a6da54053900bd9ddf452914f371bcc7fa5f4a727ac2e747c50f5e08e72d321ab882dfb50f5b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_archive.org_0.indexeddb.leveldb\000001.dbtmp

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 440d714fe8c8a623c8e0ccaa5bfc3f9c
SHA1 6f9125d579393111b339c14893760dd1daf872e7
SHA256 f1844d7206e84af1ce9e170c81ddd06a2546d010b0bae28f22ac81b0027fc7de
SHA512 5606572b0ea1b6ea6f68d914da9011a8801216203d9e0867fb2aba7058701be3b4337c4191763786e39344646e6c93ccfec7c60089e57839be432056983b82d1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 31c9c79cc00eb3dceef56ef333a0fcbb
SHA1 08d99400917b2923d7b48774b0edeabf9fdfa46a
SHA256 2a54506651eaabaec0c500b2ee5e8387c37bca6f7f823e1287049b7476aff024
SHA512 e5e3caf16d07056cf4fc4718a87fda89a589ba64e4ba2b57fc23b870e34d52cbe45e106a798a62ea287c02f16ae7a46dccfb20f52a9c51751177ba6406e71a65

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 82cd31902d6daaba55ca8c0a4728f837
SHA1 58b0ae90db006835fc700aeac741357f34f8995d
SHA256 4288ea7d11ab70286ca507ec0e67ef949fa02de215bfedb8f35a0dc76ec7483a
SHA512 350cbcc7900792424c12bf0117d282c1a294da83021c61a2038d33e563a50a46ef88144354dec68b390573937d6d529cfe9695637c3b4b700c608b44c79ab57d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e3c449db86bbda0f97a82897f037fcfe
SHA1 4df1ad8327008ea6868148a93cc655f80d3533b4
SHA256 76ef86eef748f3ddafa90aebc8b9a8dc77801e20303ed147ca16665994e6f9b0
SHA512 9aba295ca434cf61491806cd9b2adb27b0ac2e1d65f162e8359df1a5e5b4bb986e1a16c87afe61870da5c1e8f195419383f1fc1b9e05cd1a094b61aa72ab0a38

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 eee5c3d2afa52fddfac59a0e914f5851
SHA1 27d57dc29c6d73f2808f9cd2d170ae6ce041c091
SHA256 82e9e70547f14f30e6f800e7c78d84f49ded7a04be5cdcc822a22780a97e78dc
SHA512 a056ca2c9149c1c912adae7c9b0c0178419319b0de2ff9fe055ee59507b3240baa2967f5c61387d4dae6931de328f0272b76032d6a593d4ffd1793d9fe0141f9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\5b5d2bb9-1250-4117-96d0-aad69cd86806.tmp

MD5 34e495396d27b5b725a2c983c18eb9bb
SHA1 00b55cf8711ccb24234e1ed6c0ab93500cfa1b1b
SHA256 62f3bf510074cd22be1efd00b1f8ad6901fba42cb16af73e1de917dbe167bc4a
SHA512 eaa20a597c1885d1d477f6aec68e09fef7089d575ad0f7c770df9327dd7686aeb560af827da6c4993acc20332238d4b871ccee7281a21e19d026e3594b159acf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 157e859b26042e5d7e80e53004c80975
SHA1 1c085dfd3423fff3c2509f3fc2392636da14a843
SHA256 ed5153c6c61a43ca5003703f0855da5a644bf8e831961984e2cdaf7fe58b9ff5
SHA512 2f0bea5f2e4f348417691166c100f2bba804395193d4f9d817daccd9f39060c43ecf49dc999cfcaa8da1035283e3faf912e1eca73d014990bfb860c1e499239e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009

MD5 87c2b09a983584b04a63f3ff44064d64
SHA1 8796d5ef1ad1196309ef582cecef3ab95db27043
SHA256 d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0
SHA512 df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\12fdb50401330c31_0

MD5 dbc7fc3b0d030fc50cd980620cbcde31
SHA1 ce76a5935736ce1eb72761cd5b4dc0e5559f03ef
SHA256 92e98f766205cd2b27b7cfd868e771827535dd7c82bfaf3825caebae4d243b71
SHA512 a34dee79489c32b10e77a769d542097f4869157f41bb9fc9921686ba03ceb68cba2a4f81cb22a7ee392cc786b5887eec3bf10ea85bb2fc1011ea0ee813094133

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c2e3859bc5f2969c_0

MD5 9f08c533724a3963ddb8df9944c4b699
SHA1 410e717e382b5aa426d445544a5b383cf847027c
SHA256 7dcc09e6566fa30764d42140f5256a01d42f7ecdb81ed08d1352bf8f222a192a
SHA512 6e0260847ec598255f230ec5148c9095ff27b03ca7ebfa2db966370654eb738de2b728752a4f3a2f3cc37a2cd70f68c9fa51de19dc2400977607c82d0c03fbfa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021

MD5 296107fd9e4b08da2a5eb5381e62e59c
SHA1 0fab647f77db64c6284dd6335f6f01696217fb88
SHA256 9a75f06abaf3c4db9cb4110d32c18ba80356efafd79e6f6255aefc31054ff133
SHA512 519f5c12f414e6321e63c5c2992b4eb89131334543310513ffefcb9b4cfdc9cbf9adc48854dd40daa8475b238ec4a1b1d6f31d666e5edb773f433582777bea43

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020

MD5 443826e43ae39d6b6d996ec061398f84
SHA1 a996ce34b3bac4eb02a8c113b1105de8f17f0868
SHA256 87fb32803b0681980e6fcf71b9d20c00239b622beffa02de6184e8b15d7b9b51
SHA512 6875d9dfaa2d4b0fcced2350ac95aac477e9289ffc4e192f8a3d20eda57020d31d6feff74b5f4978f1e5f6373b13d81fd041ad95978c1a20c867710bb1acd477

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e

MD5 3dda883b89b1f31dd1e8e0be2d4250e9
SHA1 ff69000e8307afcb2b4db7d6117b47975f9de06a
SHA256 e60268695e6c66a62ad318850e45954bb22d21f2ae62fe9f0c5490dcb1e69f9b
SHA512 25176c5acc9cf658129508ccc1b7fc8e93777cc59a404caf06a0e0eeb7c10b5276923aa51d56a99ebfd45d9f05b16f598794fb31ea0aa39565770b3c3b8c8c43

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f

MD5 654b495cf8877c0a6c9423793216dd88
SHA1 17526245d961301ad40c738f6b6d16a2afe6ac8a
SHA256 e6e0c443422b16eb462ce281ca745a2e8cd58d266c10bec39a12dbd45b92af69
SHA512 0c319332fa505d54972ec8046e209f109c52dde42ae303d862856e2107e7f16ed5332375acc5a9c1272d940dc7be3576e57b833e3746ffbbbf9b8c71ec3482f2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG.old

MD5 d6a4b9938b84fc20fd2901f063bba9b8
SHA1 65bd9468fd4109a86191e68a221daf85f010151c
SHA256 ca705fe5fe3408008b9fb3b46509cd62fc4ddc0f89101fb6b9c84f44d60b747b
SHA512 da3b7a781aa055fcb11522fd78ce9d131af9e5c2465f9008786f4ef3c2f42b40d38fbb30cf3989c74b2c016b58a2432c675e007a4b092ea47cd18f820e3de2ce

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG.old~RFe5afcd0.TMP

MD5 99d2053955d2f7bdb1635fc18e39bc5b
SHA1 d6c7bfd709d9b2df7b8fe2ff3fe991bfa181bd34
SHA256 841accb1ebff17ffbea826051f53ea7c75a9a062f458573b5b00b887b0a8e2c8
SHA512 a317812ce2c0db15006dae9efd28a5f1962f6b0c793465a280aece4ab92e1a63754dc49a9dad327324e5c4275e5631bf8125db3f297e27f49ecd5930d47cb16f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000022

MD5 20adea22eec53811cc6bb3e6fb9648a1
SHA1 89ccfb989609bb343bff0f260fbc28e78b0ae16a
SHA256 d1b7f4208210049da4739648765e40bb8d8f0a7fd4e942df1d736e803739f5ea
SHA512 24342b4e909b88faa4b028aba8428bf4b3fac6203a61e74890a4c3439817444826c6d4785f0cef484b73c6116a9913c2980be3c59abaf2b3711942e1e53e6b55

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 7b1982559ebb5adbc3b2d89cf3a28968
SHA1 cdade14ffc04c07f592a324de189b28163ce84f4
SHA256 2b1824cd615ce992d494afae39ec67154aa50fb73b44f0622d98c3398d1cb180
SHA512 fe2f67096b0cd23ac5c5b9c0604e4b3c2074a42aa52d48a1ba3d1dc0a4f2621d56a9b35b3fba60020814ff0e4882fccd1b71bc7bb7e4154ca358d0996e59af8c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 9cf575506d8b2a7ec0c983dd7dd2eef5
SHA1 2db99b753c078823e2f3eae59f0c76778a7f640d
SHA256 e0904de3ea052206fe58508a91acca74dab9a3b387584ddf969d51ca0876f886
SHA512 be6c483b41e1c5ae2c4208fb24bc0ff871b060402dc8813f24271dd23a4cf103b3a06254a0862fe31b98fe0803f2fe17c243b1a0857ee26d9b9cba6e5c0f6a5a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e79053c4b53d4f09fd6736cb6d43e345
SHA1 02f00cb8c0adf6ec4cd11a120c37d7aa3d2c421a
SHA256 f1a8a56566bb5e79cace380a1ba32c046e1ddc6903aaf898e40a26b089a297c3
SHA512 06e5061b2d130a6504e0bee2534df9f4a5d057e0342fd2c250ed602c98fc6b8434cf7c1cec36d76edecaa247f7e712951fe784f7dfa2ccc53d8bd90a11cfd441

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 b3ae8a733a34bf837c17af5c626cb807
SHA1 1b0540bf97f1c94d392eb061d21121da4b59cfb0
SHA256 d58a44b793665841f7237e2aa6428df836c661ee3b852ae6d5cc04d4885f0412
SHA512 6e90a7650dc92709e9ca87d8129aa39ce9526d237ab2dadc20051ad00e4f81ecbcad07ecd66840a80424f24cf7f50b1ef8bd105b14e6a23955d25b707fdaddf2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 091668e6c591f30e75b41fee7185f3d6
SHA1 d71b6ad3ef1d877944f91606796d5de2a1ee2bd6
SHA256 6cfb529f1329b0d3f37042f2c64ae403f3101514e1df1c687073d0aba5f6da06
SHA512 80b174d453788a2a081d6ffc7f114ff93c4b6befa9f9d4ba5507218f557166022e2145198be6f825024b9a1fbc726f7931e30e751480e79b7188ed950a141f3c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 838b19da98d94435180e1a02e3cbfc5c
SHA1 0e5b2cff77c3a49255c250dd7d9491645936247f
SHA256 d66d5f484a3e3a58b24854866e7ec7d3b8d67c8fdedcb801d0f1e20ef86e6f24
SHA512 17a1b8dc53d3472b4f4a1a626fa8e535d513ee4c57dd7a6749b2527a5ea94ca51d273f813224b7963fb034bc558e743978530519e7aa6a4c9ec20a61a258d716

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e3a76fe1d0ed99f9b10f87ef91bc2b64
SHA1 325362c24e1a037954d2d4e4a09870ee882ea642
SHA256 dc781b79cce4e389ae54e6bbc417dff80a25b665202ef5f1cdda7052107d5642
SHA512 aacb17e46f46a081a6fbb6e7ce2bc7ebe57d7fc3aaa8a2bfb1381cc0887771f40e6f452d3a034ffa81358c2228d4ac2a467156a4548e073aecb9bbc03f6e4fa6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a7816b82db08360fc085c3ac2b93faf6
SHA1 ca3b062fc9ba7bea7aa97180e76a8046c6a32262
SHA256 56631e9aa18518c526429c517455f7e7d99bdfcecd03654b29d1ae3845fc77fb
SHA512 43f8b268604b31d8477034867ca8f8c76b8958d39a904ebca03125282d24f6d92645af06ad0f5f8eb920ce7d7019d69df6cf04fe4278c141d0dcedd7d8813778

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 c9848038c318014f5722c45d963c69f9
SHA1 3e8bee51f2d20f8901f8ad9ce9afdcfe5dcd8219
SHA256 3a6f50a07af12328f27d21da629d9636522dc4e7ed8969413afc785e950a59e7
SHA512 0166f470737c2c184158b18a6f989baf5d8b57b17bb922b7e98561e0de5375a953a2e67682cc6128283b934250ad0a28f74423b0c7e6eb293c53e186f737a8e3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3d95551aec655f70e0f655a4f378ff93
SHA1 223e6574a17429385f2144271f1520da5195a050
SHA256 2ac653d97d5e361f00cf109920895ed2e571c1a7143379ca92a436fb94cf33c9
SHA512 814552c32ab4885c8ec699a187e4554228685314e259579e97a49663c3e59f3e0fe9105b5eab7c4431b7cc6a8814748be3c81eecd96e8f8d52679a8218ae1121

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 2495323dde6e58e4e257f800baa6d3c0
SHA1 b00e6b786bbbdb8c2ac6c70d1d777c7c5c26ca62
SHA256 e9e51219244617ef297f6f41ae52fd2e8bfd750b2744c8fc110df04c66abd3bc
SHA512 fd119baa8f3b3faef7fd315aefa239f6b836198c4679a0ad200e106f37f425bf0b87ef614e463d82ad2c836ea9e827706cf14fde322cd84797930d7d4508d78f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0d8074e4a5d1f6a6c9a872521b9c6692
SHA1 4d826c46e0b4662500fbe7ae8cc12a0f5ccb1e62
SHA256 2935baf5238169c95e7d95950b411ca2edf032b9043f4241350cfd527e84a411
SHA512 f0203ec706ac8904fded36ae61d173351131f11f5c2323ccf14b7e20931f49a80cd5004208a48b46b32a752e51df2f8bf73077b60c457eec7dda689eda321647

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 f7252bce142b07c123e442fb2c2b79cf
SHA1 1335d1acbae367ef769eda9f4b36e7e0ef7d43c1
SHA256 e350a69b954bfb0fd5d98bcf470f9bde5fe7cc2d0a94dfe4f27d2727708f5a79
SHA512 2efd4b0acc21aad0644115bd08423394c22689258cb3bbeebbd8039723078b53696cf9b296fc702eaf5695b949d80f20d4d31b841643ec2bd98a103d9aad4fc8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 53b6be261bb8a4256b009cee1ee079a7
SHA1 fcc7394e1879cbd3ec38d517f2292a47510d1059
SHA256 3dab3c148ce803ca56de5f8e4a84025861f0e15645bbe8d02e967acc63e99364
SHA512 06b58b30ccd0ec1e695d8930b945f3f7ac19f561bdeb30c9306bd1c83ea259f68c22e2073ecec0dd3c6cb025daf913db278924d9a3f564082b3ad3c2b13d39b3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b57487d93f436cc1_0

MD5 25ee459cd36fbf577920540aa9956312
SHA1 759a310dd2fd093a6f544b04d30be948870d5992
SHA256 8de09c81a01744cf2bb2d6a4c6cd6790ffc113788d975176ea26c6ce7c6bad06
SHA512 4ce5db33d9bbf33dbcfeaf1fb784f43fca1bb88a59ae8abe11bba7a9e53b069f644a8501a644d3c341215a281054f36b298482b93cff48ce8049f2cfb21b10b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fb264290bce39dcf_0

MD5 5a852630add2e059219a408b31bd22b8
SHA1 911f01da8184aa4a07e1384bb25cc82517f4913a
SHA256 8841b33337fd56fae3c1495c71e3273876324fc78c1629a8c974fc9c634bc30b
SHA512 a645b35abfd20eb577cd977c758bc6d097ec8f37913c5b6d67fab9e1c6f146a13744f1d59780cf329be675342774314c15788f5d6280c97c7e1160e028e9d48c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a4fccd5cca30cb5b_0

MD5 0a2b35154a1b0b112d5ea716b7531757
SHA1 41bc42b74f9ccfc890887b870829a0caceac982a
SHA256 cfb31f3899f29f798268ff8b488a7723b8e8aa124079a811b0a51390661ff78a
SHA512 aeeb9922d01166dc9b5814389ba528e6e664ef58bdfe8d275463bdc12af6982f6045eeed1ad85326d30ac0d488548d7dc7ce1723e3b657ba27e50e204f5ef7cc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7a4c614f728a96c8_0

MD5 ada8d620f73b14d5339ce6b6868a520f
SHA1 b4f127725b9dc9177af554a1b9c820b06cdcde98
SHA256 2739883d23cdd48072c8ca988998b3796d86791e780de7024000b58f8d0d08d3
SHA512 7ac3759fde017a7e9dd49bd8cfaf20923a2c3ada471c21bcb962561fa81d635758490d3694ebc01d17b30eb0a828871a35ee74d537b7bf3f01dfabf3176baa8b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 bd0d52230ea5aa38262a9d4a700f2fa4
SHA1 fccbbbcafd22bb233a10092a83fb96dbbc5405e9
SHA256 b237f1e01e9d4276ce8514e1d03a20819c8f7bc315edcaef8b361e0bc331c556
SHA512 c1b23f7bff273a2e3a89cb208c7eba9b40c318da67bd9ab75f6769d6729c63074b75277900104e886eea9ebbed9c9d136f14a8cad5d6b7b25d48d030e96c0173

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1a1898ebb8618e8cab178e873e8d4727
SHA1 b0c1d62b66e1d02a45ddefc4113e1ad8c16c5e37
SHA256 e064eedf8b28f7b69751432fdc0548ea691583d10ce6c6977ff4229c2915e699
SHA512 f934ba885d68e1e03902c0f39d5caac3963cd8144466728410a14a472a57c0b8e2a65a4638ae7b29b2673eb56fefed114837d1ba92f60c98569bfbe24226f980

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 22e97a0286075104f015f69bb76f5ae9
SHA1 a07de14614736f250ec7dd34c91093d391cc9da3
SHA256 38a07f56369e931ead1ce424dcc359e698afed22cf698d81acdb2415a895dd1c
SHA512 63b0e2a0e93c3a487779401a0d7908a618a4d23e87586ec552eddbc1ad010b062430d679993a14c6a07bce954f272143117111c4cb506fe3b73ff986b8128059

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log

MD5 95bd36a73bea229f2357b4bbb39dbfd5
SHA1 0d8f493d7fba6748b9ea85f13ebea9217c59bfe9
SHA256 9a43195520ef2b918d7d9245c4b40556b03b62dd2e0fe30881d247cb4e3ffbe7
SHA512 a37fd5efb3384b9fc51a9ed2c12ec5d221374f5249f63deb6095ef90e80d23fc71e24268951d2187ba23a2f6c2bb5c49187a14a3d3692e55ce6efb2f2a9e4cc8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000083

MD5 07106a49a5cad51443e6d62e27efb5f8
SHA1 12db96b12fffd8fc49260fe28cf941015abc3edc
SHA256 11ae10b371a42fa2fae4f7b378544d842c7f6882bf1f1d5978a369a34432cf65
SHA512 e4a791d5eb3feac31b539e52d35cedf82a170f4e271939017448de8e2cf065abe9d5a0d8adfffa6e3279b8ff14503e390052f854bc50267d42528a6d3bb41b9b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000084

MD5 4bfdb3e265a3745aecb98decf1bf1a20
SHA1 f9139d5471ee061cb9b2aab7836f471412f30cc0
SHA256 f8489b02807bc7689a7e6b8d99e8157b728a61063b5508d3ebc01cbc9f328f11
SHA512 a33b444a8900edf6964f1af88d09ba758cf4c078ff1354449326628ce536edeee9f690f81c759b22fa0f05890e690fea3f26afad29d4b4722f3916747713b139

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 a55022e616d3f9481f34929291a001d1
SHA1 087d800a05131ca8a8b846d13192896d138d145a
SHA256 64308643ac543ed82d6fb5080856c6a3cfb2e8ac7e7b6ccc55b6eac13e24a23f
SHA512 c4ebd3bcb4347dfb8c119b3db0c1a2d1b5b4d986faf92c038b960ba9c2d4749140f60cc0c9f30852fb93c3ac508fa424c62ac49dc61df0854dd2a35c2076013e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d13111254302c132bbb4306fca9e6b41
SHA1 aa799cb4727a5e68984d770fe5bc7e9377a3e63f
SHA256 36e2ffb2d3fb73f284904baf933d5ba3ff67f63e22ca8399ee146d98a815f1e4
SHA512 1b76e80e9311192efc40a9b2121edc6a3d9ff3198b334511ec582fe483a8d39eebd7558b2a7945792d61f29421b0cc629c1eccb4e963e37d18e1684940e73fe0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 3934091e02f7a22ef27333693cd8c292
SHA1 68ceb2503b73ae924c787b950e7ea7a2e31bca26
SHA256 9db24c33bf9d22ab8c0c259155425a08b21d3972680d1de5e333d25fe8f265a9
SHA512 361a7c2ed66821d78a9b19db778b418b54f8d52ef61ff94ab9e7f5eabc3a1fac624f087c1d1faa05fb893b9192a1e64d80bc60ce812c958de6934ea9e5a4b968

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 774261392837b87f81ca272d5fa9d82e
SHA1 cc3e409f0288452c6f9e5d2cb1d49939c948aa6d
SHA256 03d4d6f0257f57ff257a27f319fe83d56386862c4dcb8e7985d244f0e39a2c81
SHA512 30fa7a842402dbe8bc2f91bb73919ff7c1c1a9b823097e72e4a785c9e20775fe9402d7534ca7d4c25055e80075ee5224d53dd39785f5bd59874d589a667a7955

C:\Users\Admin\Downloads\Unconfirmed 510993.crdownload

MD5 50515f156ae516461e28dd453230d448
SHA1 3209574e09ec235b2613570e6d7d8d5058a64971
SHA256 f4afba646166999d6090b5beddde546450262dc595dddeb62132da70f70d14ca
SHA512 14593ca96d416a2fbb6bbbf8adec51978e6c0fb513882d5442ab5876e28dd79be14ca9dd77acff2d3d329cb7733f7e969e784c57e1f414d00f3c7b9d581638e5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7dc682e37c4e7c3039d190d7ec6523e3
SHA1 04be8c345c22936286899d0bc3ad587dbd034a02
SHA256 88c49fae05e3ee3ad15b898580bb2dcc3ec8f84cdd089d07ecfb228ebd71328f
SHA512 aad682a8098e299fc1e5d1ad0a4fd52837e67cbccb53160a0645472871c3e8c6476c917d63e23a5a161156b25558649b50986a214c2a7532f1df09aeeb4b2684

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 060cb288af1c346c4585fc07dd892c28
SHA1 c420e9dde70b3da9580015c999f466ebba04aa71
SHA256 81b470af45bfa47ca79d11a5c45b7653fca10e81ef3972f1807f24419d490a13
SHA512 b46a00c40887e05522083817d65a8e16c5ea37ff9acab7996e705a84e2f6e6f4aff427cd9d90c4d69e64771bc8adbc0613c968cc7392d3a988d2534ea99ee849

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 2232925e9dfe20e77294d34eb935f2da
SHA1 038e0f3c4298a40f6665d0e87653783314942400
SHA256 7665cc7195f0d18cb34c2eed7bd32786fbb65cbe8393eb9bd978b7d25786c1aa
SHA512 2966d40d856b11f81b99c997edbfbb1222990354eb9f6bed83b8187153f8e49fc815abf197a27e0896b527a73a4d7e7f990c3d136b1ddf26ab39da1fdf107d05

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 63c214cc79127d5c4ea770a55b75da6f
SHA1 7a03bf2644a1eb8aab915221b7b4e821fb8d5393
SHA256 ae4f96868aefa51abd75e2b7c9e66139f754b97d5a6b4c82d21cc95460f2ad1b
SHA512 8aa87b8dd4c610fab1d8421f331a16d813083ed7b0ab3e5d7f1a2490f0702c05c527de4bcac05738fee8e6e165b8728cdbc8400dd799e14c562931d762b3a8d4

C:\Config.Msi\e5ccbc5.rbs

MD5 4a2559556777e4dc9c378ee7a0ae74ad
SHA1 67c1c439e2877155dccfa8078b3279b638257539
SHA256 c6f063421445728d29cdc06ee2ce298a0d4495f9fd6b25183ea0ce971d0f7045
SHA512 a645e3ba1eaf34c69427581f259679c12130fbe6ce6a83b8c133664e991ede86ea50a74e7372bdcecc556f51ee429cd747a5db55af709b48f24e1301d36317f2

\??\Volume{39cd0eda-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{45d2f02a-9dc4-444a-9866-3c47abdf8b59}_OnDiskSnapshotProp

MD5 66698c6494e739c9e6fb1acb0e5d99fd
SHA1 353c9d92f0c023ff825725e18997e598b93c88a5
SHA256 bb9ef9be9bb292313d4736c49fbb4e09b30867ad4d126e40d8c52b3af834b64f
SHA512 21d8ae73da73024873a8f429ee9ac76a787d4e60ff0970ea2eb191131bd051cdfd3d7b726a7df9f38efe91e236cb2a5eb7e4283fc97e27a5eb6fd808d8823797

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\aadb9f15c4742c02_0

MD5 773894f1b56d2e94cace69b6ff60e961
SHA1 5d39c51e2594d73b9b73b04a8da0c06a72f17acb
SHA256 eea08e5b1ad499ccd9e2d9ff7a3aaacb32cf08d6c876df3e8fc3a85a09c30544
SHA512 4a34439b98fd9d1dffc1691694473e9257368ec65c1197b489b266a1dc538819e5c93e7e7c3b9bfc897ddbb3f15f186b0c265a3cc953361f196fc1492979cb2b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 2725857f8f755721cc125f1721061748
SHA1 5f570fa758980a0bb0e82b515bc2bca5645282e1
SHA256 738d94b74384ac9b769cfcf3bebbf7970beb7d2be20c4212d4a2efdc487ea75f
SHA512 254fce380110ad5a168093edda7058d02e47361b86d44f880f61de4f12926766a6c9e2f56e162412f73e8ed8a53bfef7ced8bd2c9b70ee271101fe2db48ed963

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8736a83fa50d6507fc85295f5a19f828
SHA1 b1da97c7dfccc74c64a8913a70f727fabc65607d
SHA256 13624a2c1f303102ae2cd1be49e8f706d84fadc75062b8897b176810fc8c97c3
SHA512 5cf6a5a7ac689457668d248c71ef55c5721ce085286e37013105650969cff0cc0d4905e392ead9012052d4851c9611777c03b7f7d7cae3651f0f5ab8eb4f53d3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 060eebfd640f93ace657baa129aeaed6
SHA1 0c1d3eedf21095ff76c0b5b55379e32b433749bd
SHA256 59a12bc2b08f666a135210f4b4937df75a71a7edd5d7c9cf5aadab5fcfc4d321
SHA512 4d8818ee5444813ce39bf41aa7cfc665a110b58ed7029e2e3ec273dab3c0d5cf88cdee30aebcddc8fa8bb8918929d6647881d9cfc885a2113b1abfa31710ade3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a1

MD5 d12bab21f61c3f4aeed98950c3e8c896
SHA1 6288a46a763b70e970d1c52f796ef4cfde839100
SHA256 5d6d0fc922b8d6dced1cb0d9a403f9d146205cfe6af4bfc4120b7ee3d95989ad
SHA512 af2fffd907fc340bc560c0282d947ce92d519fd56fb977cc863483fe7d084919f5d955d0e9cd90adaada2f82d455b9fe506698e1828fa366e752292f1ed365ac

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 61958c21315894f9e4927665dd7ab2ce
SHA1 048531d18131af1ba5acb8e631b0170a4a11614d
SHA256 4b09238bba9ba51184a6b28f8657e19f949ae6834cbcbe43f421d524570809b4
SHA512 78a68d844ed744e4adacefd56365b7798f18c3a5aab8a4432a8fdc9d655e292744a9b663eef6506e848c816b92822c85ade38dd001fc3b6e482debf887386959

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 88298cbe7b18f8a3de9118e5930f5b9d
SHA1 a2a087cfd1c9562c4ffa6cb2afa8b53b219b9f94
SHA256 22b0bce6a0b64188e90942a05c04a68d2f19803e7dadb504c95c3e939cf666f8
SHA512 8bc673ee9e1b3440bcff8b32577e9e87c6880b04fdfec28b1740ecde0157414c3369aac9ced71a7703d585c48ce94a9e533842ac5eb353f5e2880edd440dabb9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000b8

MD5 bf2c9b4c340827cb10ac21e17f3db378
SHA1 2203a03b53ed7ee3ef8f7a4835694a3d313becff
SHA256 d66c19bcc3bae147b4606eb1cf98fdf16427865451b9b5f41ca685215abed254
SHA512 d2e87455aca2b99bb29fc5f4940a64a78ddc6da47703a02f8b46d51b4bdbd301b67532165af9d0afa48afbf1b4785b714e00bdd33f67a80a8d68250b0e4037c6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 aa41abfee2ffc1604a2b6249b65b8595
SHA1 26d34126c3581728e0a20ca316596699188b0a35
SHA256 a7ffc4624d6191c5730d8043583ab088e34ef8bed94d1eabb7ae888d394d9937
SHA512 48d16e8d1629dbd9e574a6336075ca38e13c8be22a44574a47a962f9787124139c931e15489f9faae2ed19fba33fead28a8bac2f815f178cc8f3893e3f6afd70

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 0ebaad1db60b8789f2fdb36863cc0f03
SHA1 6a6755e31b727f63483d39b4cf32c5ff737287b1
SHA256 9ba05af8f86bc5708b210c74896f7ff2fe18243ed7b6276ad19821acb7c4b48d
SHA512 27caef8a364f1e40e8c155deb3d53e06c9de1874b09fff3f14f4eb68b9db97f4b06654186a2883927489df6de95551fb466643ff8a951840222209477a47ccea

C:\Users\Admin\Downloads\BonziBuddy432.exe

MD5 06d87d4c89c76cb1bcb2f5a5fc4097d1
SHA1 657248f78abfa9015b77c431f2fd8797481478fd
SHA256 f1e859d99072e35f20e172d8458e3ea1baf8ba86c8c9e311a0debcd2acd5d0fc
SHA512 12bcc681544bfc0cb5f1a3c2e5e3d475efdf5abb8bf0e18cb18f529a82d551f39e16de2d3f0664c2c2cbfab2bc4702e256b958acadca53424e6d8760b6f457f9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c11960abd47426a148052f70ab582553
SHA1 59d1fb2d9fc3a05c66b2ab52bf099f0c4778d981
SHA256 d5ec5a24aac765a33067111893a315cfc11405e91d1373098382999456d6d13e
SHA512 59bb4ca6c66d90e9863e1af92e90763415121117eee1e0a84beb01245fa7a9509abee998e0441a3ec9e94fc6caee16e7a9696d0b531ac10fdbadbdc7b61c2dfa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 eb209f84211d56e0c3a15477974fde28
SHA1 467f5a09ac2601a7382985e59d677163b19d77bd
SHA256 9233b178a09e64798fcb0432a0fcb28eca4e1c50e88f3373cd942a080aab7d26
SHA512 b44a4a8ada5d2c686bebf080d68e57c5e7a4ff82702f5533a1332ebda4fb1cdc8c0f6f82c925a29cf7f645e66e1bfa231ef39a7ca79c25f86843612bccb43a91

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fb9a5e54a2393a1620b7f407fc719ffd
SHA1 2dc4fd0a8f6298e73b375190a0dcbbe1e5030128
SHA256 219a26c916e1c2efb2d316dcd554e2682d19a6775c0d87478eab4ca25a1425da
SHA512 61191ba807574da995c7cb20bd12c5e48691e69e7bac034511e7c5aa71d1388ea9d7ed5eaa12d84078525ee38bde2adda112d38e09eeebd0daa9fd5ed30e2eb1

C:\Users\Admin\AppData\Local\Temp\$inst\0001.tmp

MD5 8e15b605349e149d4385675afff04ebf
SHA1 f346a886dd4cb0fbbd2dff1a43d9dfde7fce348b
SHA256 803f930cdd94198bdd2e9a51aa962cc864748067373f11b2e9215404bd662cee
SHA512 8bf957ef72465fe103dbf83411df9082433eead022f0beccab59c9e406bbd1e4edb701fd0bc91f195312943ad1890fee34b4e734578298bb60bb81ed6fa9a46d

C:\Users\Admin\AppData\Local\Temp\$inst\0002.tmp

MD5 596cb5d019dec2c57cda897287895614
SHA1 6b12ea8427fdbee9a510160ff77d5e9d6fa99dfa
SHA256 e1c89d9348aea185b0b0e80263c9e0bf14aa462294a5d13009363140a88df3ff
SHA512 8f5fc432fd2fc75e2f84d4c7d21c23dd1f78475214c761418cf13b0e043ba1e0fc28df52afd9149332a2134fe5d54abc7e8676916100e10f374ef6cdecff7a20

C:\Users\Admin\AppData\Local\Temp\$inst\0003.tmp

MD5 7c8328586cdff4481b7f3d14659150ae
SHA1 b55ffa83c7d4323a08ea5fabf5e1c93666fead5c
SHA256 5eec15c6ed08995e4aaffa9beeeaf3d1d3a3d19f7f4890a63ddc5845930016cc
SHA512 aa4220217d3af263352f8b7d34bd8f27d3e2c219c673889bc759a019e3e77a313b0713fd7b88700d57913e2564d097e15ffc47e5cf8f4899ba0de75d215f661d

C:\Users\Admin\AppData\Local\Temp\$inst\0004.tmp

MD5 4f398982d0c53a7b4d12ae83d5955cce
SHA1 09dc6b6b6290a3352bd39f16f2df3b03fb8a85dc
SHA256 fee4d861c7302f378e7ce58f4e2ead1f2143168b7ca50205952e032c451d68f2
SHA512 73d9f7c22cf2502654e9cd6cd5d749e85ea41ce49fd022378df1e9d07e36ae2dde81f0b9fc25210a9860032ecda64320ec0aaf431bcd6cefba286328efcfb913

C:\Windows\msagent\chars\Bonzi.acs

MD5 1fd2907e2c74c9a908e2af5f948006b5
SHA1 a390e9133bfd0d55ffda07d4714af538b6d50d3d
SHA256 f3d4425238b5f68b4d41ed5be271d2f4118a245baf808a62dc1a9e6e619b2f95
SHA512 8eede3e5e52209b8703706a3e3e63230ba01975348dcdc94ef87f91d7c833a505b177139683ca7a22d8082e72e961e823bc3ad1a84ab9c371f5111f530807171

C:\Windows\msagent\chars\Peedy.acs

MD5 49654a47fadfd39414ddc654da7e3879
SHA1 9248c10cef8b54a1d8665dfc6067253b507b73ad
SHA256 b8112187525051bfade06cb678390d52c79555c960202cc5bbf5901fbc0853c5
SHA512 fa9cab60fadd13118bf8cb2005d186eb8fa43707cb983267a314116129371d1400b95d03fbf14dfdaba8266950a90224192e40555d910cf8a3afa4aaf4a8a32f

C:\Users\Admin\AppData\Local\Temp\$inst\0005.tmp

MD5 94e0d650dcf3be9ab9ea5f8554bdcb9d
SHA1 21e38207f5dee33152e3a61e64b88d3c5066bf49
SHA256 026893ba15b76f01e12f3ef540686db8f52761dcaf0f91dcdc732c10e8f6da0e
SHA512 039ccf6979831f692ea3b5e3c5df532f16c5cf395731864345c28938003139a167689a4e1acef1f444db1fe7fd3023680d877f132e17bf9d7b275cfc5f673ac3

memory/3532-2694-0x0000000000400000-0x0000000000424000-memory.dmp

C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page17.jpg

MD5 e8f52918072e96bb5f4c573dbb76d74f
SHA1 ba0a89ed469de5e36bd4576591ee94db2c7f8909
SHA256 473a890da22defb3fbd643246b3fa0d6d34939ac469cd4f48054ee2a0bc33d82
SHA512 d57dd0a9686696487d268ef2be2ec2d3b97baedf797a63676da5a8a4165cda89540ec2d3b9e595397cbf53e69dcce76f7249f5eeff041947146ca7bf4099819f

C:\Program Files (x86)\BonziBuddy432\Books\Bonzi and the Internet\page18.jpg

MD5 108fd5475c19f16c28068f67fc80f305
SHA1 4e1980ba338133a6fadd5fda4ffe6d4e8a039033
SHA256 03f269cd40809d7ec94f5fa4fff1033a624e849179962693cdc2c37d7904233b
SHA512 98c8743b5af89ec0072b70de8a0babfb5aff19bafa780d6ce99c83721b65a80ec310a4fe9db29a4bb50c2454c34de62c029a83b70d0a9df9b180159ea6cad83a

C:\Users\Admin\AppData\Local\Temp\$inst\0006.tmp

MD5 b3b7f6b0fb38fc4aa08f0559e42305a2
SHA1 a66542f84ece3b2481c43cd4c08484dc32688eaf
SHA256 7fb63fca12ef039ad446482e3ce38abe79bdf8fc6987763fe337e63a1e29b30b
SHA512 0f4156f90e34a4c26e1314fc0c43367ad61d64c8d286e25629d56823d7466f413956962e2075756a4334914d47d69e20bb9b5a5b50c46eca4ef8173c27824e6c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 e2c2aebf3ae392649a872235e92028ee
SHA1 e7c6178b6b1c151920cc8f903a7f03bf40dae544
SHA256 b2a02f786a0cb10f907e739ae6108291cfd610da8b8b56b3a46bd10f61d98ea9
SHA512 4d7ec6f4e16725b9a1e0de72a10c95da36624dee0fc4c5ce79ca2e438347855a01b615193ebf9f848b0b478cf6ffba57c4d3d6b9e2e47b749afc04cc100ca70b

C:\Program Files (x86)\BonziBuddy432\BonziBDY_2.EXE

MD5 8a30bd00d45a659e6e393915e5aef701
SHA1 b00c31de44328dd71a70f0c8e123b56934edc755
SHA256 1e2994763a7674a0f1ec117dae562b05b614937ff61c83b316b135afab02d45a
SHA512 daf92e61e75382e1da0e2aba9466a9e4d9703a129a147f0b3c71755f491c68f89ad67cfb4dd013580063d664b69c8673fb52c02d34b86d947e9f16072b7090fb

C:\Program Files (x86)\BonziBuddy432\BonziBDY_35.EXE

MD5 73feeab1c303db39cbe35672ae049911
SHA1 c14ce70e1b3530811a8c363d246eb43fc77b656c
SHA256 88c03817ae8dfc5fc9e6ffd1cfb5b829924988d01cd472c1e64952c5398866e8
SHA512 73f37dee83664ce31522f732bf819ed157865a2a551a656a7a65d487c359a16c82bd74acff2b7a728bb5f52d53f4cfbea5bef36118128b0d416fa835053f7153

C:\Program Files (x86)\BonziBuddy432\BonziBDY_4.EXE

MD5 93f3ed21ad49fd54f249d0d536981a88
SHA1 ffca7f3846e538be9c6da1e871724dd935755542
SHA256 5678fd744faddb30a87568ae309066ef88102a274fff62f10e4963350da373bc
SHA512 7923556c6d6feb4ff4253e853bae3675184eab9b8ce4d4e07f356c8624317801ee807ad5340690196a975824ea3ed500ce6a80c7670f19785139be594fa5e70f

C:\Program Files (x86)\BonziBuddy432\Uninstall.exe

MD5 578bebe744818e3a66c506610b99d6c3
SHA1 af2bc75a6037a4581979d89431bd3f7c0f0f1b1f
SHA256 465839938f2baec7d66dbc3f2352f6032825618a18c9c0f9333d13af6af39f71
SHA512 d24fcd2f3e618380cf25b2fd905f4e04c8152ee41aeee58d21abfc4af2c6a5d122f12b99ef325e1e82b2871e4e8f50715cc1fc2efcf6c4f32a3436c32727cd36

C:\Program Files (x86)\BonziBuddy432\ActiveSkin.ocx

MD5 3d225d8435666c14addf17c14806c355
SHA1 262a951a98dd9429558ed35f423babe1a6cce094
SHA256 2c8f92dc16cbf13542ddd3bf0a947cf84b00fed83a7124b830ddefa92f939877
SHA512 391df24c6427b4011e7d61b644953810e392525743914413c2e8cf5fce4a593a831cfab489fbb9517b6c0e7ef0483efb8aeaad0a18543f0da49fa3125ec971e1

C:\Program Files (x86)\BonziBuddy432\BonziCheckers.ocx

MD5 66551c972574f86087032467aa6febb4
SHA1 5ad1fe1587a0c31bb74af20d09a1c7d3193ec3c9
SHA256 9028075603c66ca2e906ecac3275e289d8857411a288c992e8eef793ed71a75b
SHA512 35c1f500e69cdd12ec6a3c5daef737a3b57b48a44df6c120a0504d340e0f721d34121595ed396dc466a8f9952a51395912d9e141ad013000f5acb138b2d41089

C:\Program Files (x86)\BonziBuddy432\MSCOMCTL.OCX

MD5 12c2755d14b2e51a4bb5cbdfc22ecb11
SHA1 33f0f5962dbe0e518fe101fa985158d760f01df1
SHA256 3b6ccdb560d7cd4748e992bd82c799acd1bbcfc922a13830ca381d976ffcccaf
SHA512 4c9b16fb4d787145f6d65a34e1c4d5c6eb07bff4c313a35f5efa9dce5a840c1da77338c92346b1ad68eeb59ef37ef18a9d6078673c3543656961e656466699cf

C:\Program Files (x86)\BonziBuddy432\MSINET.OCX

MD5 7bec181a21753498b6bd001c42a42722
SHA1 3249f233657dc66632c0539c47895bfcee5770cc
SHA256 73da54b69911bdd08ea8bbbd508f815ef7cfa59c4684d75c1c602252ec88ee31
SHA512 d671e25ae5e02a55f444d253f0e4a42af6a5362d9759fb243ad6d2c333976ab3e98669621ec0850ad915ee06acbe8e70d77b084128fc275462223f4f5ab401bc

C:\Program Files (x86)\BonziBuddy432\MSWINSCK.OCX

MD5 9484c04258830aa3c2f2a70eb041414c
SHA1 b242a4fb0e9dcf14cb51dc36027baff9a79cb823
SHA256 bf7e47c16d7e1c0e88534f4ef95e09d0fd821ed1a06b0d95a389b35364b63ff5
SHA512 9d0e9f0d88594746ba41ea4a61a53498619eda596e12d8ec37d01cfe8ceb08be13e3727c83d630a6d9e6d03066f62444bb94ea5a0d2ed9d21a270e612db532a0

C:\Program Files (x86)\BonziBuddy432\Regicon.ocx

MD5 32ff40a65ab92beb59102b5eaa083907
SHA1 af2824feb55fb10ec14ebd604809a0d424d49442
SHA256 07e91d8ed149d5cd6d48403268a773c664367bce707a99e51220e477fddeeb42
SHA512 2cfc5c6cb4677ff61ec3b6e4ef8b8b7f1775cbe53b245d321c25cfec363b5b4975a53e26ef438e07a4a5b08ad1dde1387970d57d1837e653d03aef19a17d2b43

C:\Program Files (x86)\BonziBuddy432\ssa3d30.ocx

MD5 48c35ed0a09855b29d43f11485f8423b
SHA1 46716282cc5e0f66cb96057e165fa4d8d60fbae2
SHA256 7a0418b76d00665a71d13a30d838c3e086304bacd10d764650d2a5d2ec691008
SHA512 779938ec9b0f33f4cbd5f1617bea7925c1b6d794e311737605e12cd7efa5a14bbc48bee85208651cf442b84133be26c4cc8a425d0a3b5b6ad2dc27227f524a99

C:\Program Files (x86)\BonziBuddy432\SSCALA32.OCX

MD5 ce9216b52ded7e6fc63a50584b55a9b3
SHA1 27bb8882b228725e2a3793b4b4da3e154d6bb2ea
SHA256 8e52ef01139dc448d1efd33d1d9532f852a74d05ee87e8e93c2bb0286a864e13
SHA512 444946e5fc3ea33dd4a09b4cbf2d41f52d584eb5b620f5e144de9a79186e2c9d322d6076ed28b6f0f6d0df9ef4f7303e3901ff552ed086b70b6815abdfc23af7

C:\Program Files (x86)\BonziBuddy432\SSCALB32.OCX

MD5 97ffaf46f04982c4bdb8464397ba2a23
SHA1 f32e89d9651fd6e3af4844fd7616a7f263dc5510
SHA256 5db33895923b7af9769ca08470d0462ed78eec432a4022ff0acc24fa2d4666e1
SHA512 8c43872396f5dceb4ba153622665e21a9b52a087987eab523b1041031e294687012d7bf88a3da7998172010eae5f4cc577099980ecd6b75751e35cfc549de002

C:\Program Files (x86)\BonziBuddy432\sstabs2.ocx

MD5 7303efb737685169328287a7e9449ab7
SHA1 47bfe724a9f71d40b5e56811ec2c688c944f3ce7
SHA256 596f3235642c9c968650194065850ecb02c8c524d2bdcaf6341a01201e0d69be
SHA512 e0d9cb9833725e0cdc7720e9d00859d93fc51a26470f01a0c08c10fa940ed23df360e093861cf85055b8a588bb2cac872d1be69844a6c754ac8ed5bfaf63eb03

C:\Program Files (x86)\BonziBuddy432\Runtimes\CheckRuntimes.bat

MD5 4877f2ce2833f1356ae3b534fce1b5e3
SHA1 7365c9ef5997324b73b1ff0ea67375a328a9646a
SHA256 8ae1ed38bc650db8b14291e1b7298ee7580b31e15f8a6a84f78f048a542742ff
SHA512 dd43ede5c3f95543bcc8086ec8209a27aadf1b61543c8ee1bb3eab9bc35b92c464e4132b228b12b244fb9625a45f5d4689a45761c4c5263aa919564664860c5e

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT20.INF

MD5 e4a499b9e1fe33991dbcfb4e926c8821
SHA1 951d4750b05ea6a63951a7667566467d01cb2d42
SHA256 49e6b848f5a708d161f795157333d7e1c7103455a2f47f50895683ef6a1abe4d
SHA512 a291bb986293197a16f75b2473297286525ac5674c08a92c87b5cc1f0f2e62254ea27d626b30898e7857281bdb502f188c365311c99bda5c2dd76da0c82c554a

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTCTL.DLL

MD5 237e13b95ab37d0141cf0bc585b8db94
SHA1 102c6164c21de1f3e0b7d487dd5dc4c5249e0994
SHA256 d19b6b7c57bcee7239526339e683f62d9c2f9690947d0a446001377f0b56103a
SHA512 9d0a68a806be25d2eeedba8be1acc2542d44ecd8ba4d9d123543d0f7c4732e1e490bad31cad830f788c81395f6b21d5a277c0bed251c9854440a662ac36ac4cb

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTDPV.DLL

MD5 7c5aefb11e797129c9e90f279fbdf71b
SHA1 cb9d9cbfbebb5aed6810a4e424a295c27520576e
SHA256 394a17150b8774e507b8f368c2c248c10fce50fc43184b744e771f0e79ecafed
SHA512 df59a30704d62fa2d598a5824aa04b4b4298f6192a01d93d437b46c4f907c90a1bad357199c51a62beb87cd724a30af55a619baef9ecf2cba032c5290938022a

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTMPX.DLL

MD5 4fbbaac42cf2ecb83543f262973d07c0
SHA1 ab1b302d7cce10443dfc14a2eba528a0431e1718
SHA256 6550582e41fc53b8a7ccdf9ac603216937c6ff2a28e9538610adb7e67d782ab5
SHA512 4146999b4bec85bcd2774ac242cb50797134e5180a3b3df627106cdfa28f61aeea75a7530094a9b408bc9699572cae8cf998108bde51b57a6690d44f0b34b69e

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTPSH.DLL

MD5 b4ac608ebf5a8fdefa2d635e83b7c0e8
SHA1 d92a2861d5d1eb67ab434ff2bd0a11029b3bd9a9
SHA256 8414dfe399813b7426c235ba1e625bd2b5635c8140da0d0cfc947f6565fe415f
SHA512 2c42daade24c3ff01c551a223ee183301518357990a9cb2cc2dd7bf411b7059ff8e0bf1d1aee2d268eca58db25902a8048050bdb3cb48ae8be1e4c2631e3d9b4

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTSR.DLL

MD5 9fafb9d0591f2be4c2a846f63d82d301
SHA1 1df97aa4f3722b6695eac457e207a76a6b7457be
SHA256 e78e74c24d468284639faf9dcfdba855f3e4f00b2f26db6b2c491fa51da8916d
SHA512 ac0d97833beec2010f79cb1fbdb370d3a812042957f4643657e15eed714b9117c18339c737d3fd95011f873cda46ae195a5a67ae40ff2a5bcbee54d1007f110a

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT0409.DLL

MD5 0cbf0f4c9e54d12d34cd1a772ba799e1
SHA1 40e55eb54394d17d2d11ca0089b84e97c19634a7
SHA256 6b0b57e5b27d901f4f106b236c58d0b2551b384531a8f3dad6c06ed4261424b1
SHA512 bfdb6e8387ffbba3b07869cb3e1c8ca0b2d3336aa474bd19a35e4e3a3a90427e49b4b45c09d8873d9954d0f42b525ed18070b949c6047f4e4cdb096f9c5ae5d5

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT0409.HLP

MD5 466d35e6a22924dd846a043bc7dd94b8
SHA1 35e5b7439e3d49cb9dc57e7ef895a3cd8d80fb10
SHA256 e4ccf06706e68621bb69add3dd88fed82d30ad8778a55907d33f6d093ac16801
SHA512 23b64ed68a8f1df4d942b5a08a6b6296ec5499a13bb48536e8426d9795771dbcef253be738bf6dc7158a5815f8dcc65feb92fadf89ea8054544bb54fc83aa247

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\MSLWVTTS.DLL

MD5 316999655fef30c52c3854751c663996
SHA1 a7862202c3b075bdeb91c5e04fe5ff71907dae59
SHA256 ea4ca740cd60d2c88280ff8115bf354876478ef27e9e676d8b66601b4e900ba0
SHA512 5555673e9863127749fc240f09cf3fb46e2019b459ad198ba1dc356ba321c41e4295b6b2e2d67079421d7e6d2fb33542b81b0c7dae812fe8e1a87ded044edd44

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGTINST.INF

MD5 b127d9187c6dbb1b948053c7c9a6811f
SHA1 b3073c8cad22c87dd9b8f76b6ffd0c4d0a2010d9
SHA256 bd1295d19d010d4866c9d6d87877913eee69e279d4d089e5756ba285f3424e00
SHA512 88e447dd4db40e852d77016cfd24e09063490456c1426a779d33d8a06124569e26597bb1e46a3a2bbf78d9bffee46402c41f0ceb44970d92c69002880ddc0476

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTANM.DLL

MD5 48c00a7493b28139cbf197ccc8d1f9ed
SHA1 a25243b06d4bb83f66b7cd738e79fccf9a02b33b
SHA256 905cb1a15eccaa9b79926ee7cfe3629a6f1c6b24bdd6cea9ccb9ebc9eaa92ff7
SHA512 c0b0a410ded92adc24c0f347a57d37e7465e50310011a9d636c5224d91fbc5d103920ab5ef86f29168e325b189d2f74659f153595df10eef3a9d348bb595d830

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTSVR.EXE

MD5 5c91bf20fe3594b81052d131db798575
SHA1 eab3a7a678528b5b2c60d65b61e475f1b2f45baa
SHA256 e8ce546196b6878a8c34da863a6c8a7e34af18fb9b509d4d36763734efa2d175
SHA512 face50db7025e0eb2e67c4f8ec272413d13491f7438287664593636e3c7e3accaef76c3003a299a1c5873d388b618da9eaede5a675c91f4c1f570b640ac605d6

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTDP2.DLL

MD5 a334bbf5f5a19b3bdb5b7f1703363981
SHA1 6cb50b15c0e7d9401364c0fafeef65774f5d1a2c
SHA256 c33beaba130f8b740dddb9980fe9012f9322ac6e94f36a6aa6086851c51b98de
SHA512 1fa170f643054c0957ed1257c4d7778976c59748670afa877d625aaa006325404bc17c41b47be2906dd3f1e229870d54eb7aba4a412de5adedbd5387e24abf46

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGTCTL15.TLB

MD5 f1656b80eaae5e5201dcbfbcd3523691
SHA1 6f93d71c210eb59416e31f12e4cc6a0da48de85b
SHA256 3f8adc1e332dd5c252bbcf92bf6079b38a74d360d94979169206db34e6a24cd2
SHA512 e9c216b9725bd419414155cfdd917f998aa41c463bc46a39e0c025aa030bc02a60c28ac00d03643c24472ffe20b8bbb5447c1a55ff07db3a41d6118b647a0003

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\ADVPACK.DLL

MD5 81e5c8596a7e4e98117f5c5143293020
SHA1 45b7fe0989e2df1b4dfd227f8f3b73b6b7df9081
SHA256 7d126ed85df9705ec4f38bd52a73b621cf64dd87a3e8f9429a569f3f82f74004
SHA512 05b1e9eef13f7c140eb21f6dcb705ee3aaafabe94857aa86252afa4844de231815078a72e63d43725f6074aa5fefe765feb93a6b9cd510ee067291526bb95ec6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9a8df4cd8c3f7b37adc9c2ecd0e00a56
SHA1 25948340b4277fc2a87c740f519bd4ca652b571a
SHA256 2e7322280383c2ebc581957b7806003450813c76e8a9dd827d12a423e29edeeb
SHA512 9d3d8bd96d81e1bd4d3e6cf285bb247dce8300d93880babd3afaa56c7c7b39dd36d3ddf582d6aa8acf695e483ab4a36c46edfb1e8fb95be83ade096d8f9c4659

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\W95INF32.DLL

MD5 4be7661c89897eaa9b28dae290c3922f
SHA1 4c9d25195093fea7c139167f0c5a40e13f3000f2
SHA256 e5e9f7c8dbd47134815e155ed1c7b261805eda6fddea6fa4ea78e0e4fb4f7fb5
SHA512 2035b0d35a5b72f5ea5d5d0d959e8c36fc7ac37def40fa8653c45a49434cbe5e1c73aaf144cbfbefc5f832e362b63d00fc3157ca8a1627c3c1494c13a308fc7f

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\W95INF16.DLL

MD5 7210d5407a2d2f52e851604666403024
SHA1 242fde2a7c6a3eff245f06813a2e1bdcaa9f16d9
SHA256 337d2fb5252fc532b7bf67476b5979d158ca2ac589e49c6810e2e1afebe296af
SHA512 1755a26fa018429aea00ebcc786bb41b0d6c4d26d56cd3b88d886b0c0773d863094797334e72d770635ed29b98d4c8c7f0ec717a23a22adef705a1ccf46b3f68

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.inf

MD5 0a250bb34cfa851e3dd1804251c93f25
SHA1 c10e47a593c37dbb7226f65ad490ff65d9c73a34
SHA256 85189df1c141ef5d86c93b1142e65bf03db126d12d24e18b93dd4cc9f3e438ae
SHA512 8e056f4aa718221afab91c4307ff87db611faa51149310d990db296f979842d57c0653cb23d53fea54a69c99c4e5087a2eb37daa794ba62e6f08a8da41255795

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.dll

MD5 ed98e67fa8cc190aad0757cd620e6b77
SHA1 0317b10cdb8ac080ba2919e2c04058f1b6f2f94d
SHA256 e0beb19c3536561f603474e3d5e3c3dff341745d317bc4d1463e2abf182bb18d
SHA512 ec9c3a71ca9324644d4a2d458e9ba86f90deb9137d0a35793e0932c2aa297877ed7f1ab75729fda96690914e047f1336f100b6809cbc7a33baa1391ed588d7f0

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tvenuax.dll

MD5 1587bf2e99abeeae856f33bf98d3512e
SHA1 aa0f2a25fa5fc9edb4124e9aa906a52eb787bea9
SHA256 c9106198ecbd3a9cab8c2feff07f16d6bb1adfa19550148fc96076f0f28a37b0
SHA512 43161c65f2838aa0e8a9be5f3f73d4a6c78ad8605a6503aae16147a73f63fe985b17c17aedc3a4d0010d5216e04800d749b2625182acc84b905c344f0409765a

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.hlp

MD5 80d09149ca264c93e7d810aac6411d1d
SHA1 96e8ddc1d257097991f9cc9aaf38c77add3d6118
SHA256 382d745e10944b507a8d9c69ae2e4affd4acf045729a19ac143fa8d9613ccb42
SHA512 8813303cd6559e2cc726921838293377e84f9b5902603dac69d93e217ff3153b82b241d51d15808641b5c4fb99613b83912e9deda9d787b4c8ccfbd6afa56bc9

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\Msvcp50.dll

MD5 497fd4a8f5c4fcdaaac1f761a92a366a
SHA1 81617006e93f8a171b2c47581c1d67fac463dc93
SHA256 91cd76f9fa3b25008decb12c005c194bdf66c8d6526a954de7051bec9aae462a
SHA512 73d11a309d8f1a6624520a0bf56d539cb07adee6d46f2049a86919f5ce3556dc031437f797e3296311fe780a8a11a1a37b4a404de337d009e9ed961f75664a25

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\andmoipa.ttf

MD5 c3e8aeabd1b692a9a6c5246f8dcaa7c9
SHA1 4567ea5044a3cef9cb803210a70866d83535ed31
SHA256 38ae07eeb7909bda291d302848b8fe5f11849cf0d597f0e5b300bfed465aed4e
SHA512 f74218681bd9d526b68876331b22080f30507898b6a6ebdf173490ca84b696f06f4c97f894cb6052e926b1eee4b28264db1ead28f3bc9f627b4569c1ddcd2d3e

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\Msvcirt.dll

MD5 e7cd26405293ee866fefdd715fc8b5e5
SHA1 6326412d0ea86add8355c76f09dfc5e7942f9c11
SHA256 647f7534aaaedffa93534e4cb9b24bfcf91524828ff0364d88973be58139e255
SHA512 1114c5f275ecebd5be330aa53ba24d2e7d38fc20bb3bdfa1b872288783ea87a7464d2ab032b542989dee6263499e4e93ca378f9a7d2260aebccbba7fe7f53999

memory/1536-3200-0x000001765A420000-0x000001765A430000-memory.dmp

memory/1536-3184-0x000001765A320000-0x000001765A330000-memory.dmp

memory/1536-3219-0x0000017657880000-0x0000017657882000-memory.dmp

memory/3532-3220-0x0000000000400000-0x0000000000424000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 018375da9d26bdcdfd64b9fb344ccf24
SHA1 0a9a646b85da25d96418c14970734db51b2ff710
SHA256 8985f27589e24dd26f6151c37ad8373ece3f28b44e5be2c0b35856dce7afe7fa
SHA512 f448f6d868c459bc6b72d4b7b67de3e96cb70e29b4d4e32cc95c341459f04ecf2be7a23b297f05707a24d8b6acb583478ef2de1f051f531f267c13e9c8307f94

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5e45a2.TMP

MD5 f3c9403665d803a2d36a81ef2b2ff09f
SHA1 543bb0224e08d821d0a0112df3040d8cfc8305b7
SHA256 9e12da99e6a32af09a76710f486195b689f55ac2fe60c8102c8c8b0e6f80f0e5
SHA512 f1d09b89e8f537f5d6ba9d1446df70af238b896f32bf59e54ff0ad80c7c3527aa41f101f9ab3870f1c8aebd33b6cfb92b4f808d0ab9f56ce83ef84f53d3e3629

memory/4032-3237-0x00000241D2700000-0x00000241D2800000-memory.dmp

memory/4032-3239-0x00000241D2700000-0x00000241D2800000-memory.dmp

memory/3024-3251-0x000002261CC00000-0x000002261CD00000-memory.dmp

memory/3024-3260-0x000002261CA50000-0x000002261CA52000-memory.dmp

memory/3024-3258-0x000002261C5F0000-0x000002261C5F2000-memory.dmp

memory/3024-3255-0x000002261C5C0000-0x000002261C5C2000-memory.dmp

memory/3024-3282-0x000002261CAA0000-0x000002261CAA2000-memory.dmp

memory/3024-3301-0x000002262DC20000-0x000002262DC22000-memory.dmp

memory/3024-3303-0x000002262DC40000-0x000002262DC42000-memory.dmp

memory/3024-3307-0x000002262DC60000-0x000002262DC62000-memory.dmp

memory/3024-3305-0x000002262DC50000-0x000002262DC52000-memory.dmp

memory/3024-3299-0x000002262DC00000-0x000002262DC02000-memory.dmp

memory/3024-3313-0x000002262DD00000-0x000002262DD02000-memory.dmp

memory/3024-3315-0x000002262DD20000-0x000002262DD22000-memory.dmp

memory/3024-3350-0x000002262D120000-0x000002262D122000-memory.dmp

memory/3024-3348-0x000002262D100000-0x000002262D102000-memory.dmp

memory/3024-3346-0x000002262D0F0000-0x000002262D0F2000-memory.dmp

memory/3024-3344-0x000002262D0D0000-0x000002262D0D2000-memory.dmp

memory/3024-3353-0x000002262D130000-0x000002262D132000-memory.dmp

memory/3024-3360-0x000002262CE10000-0x000002262CE12000-memory.dmp

memory/3024-3362-0x000002262CE30000-0x000002262CE32000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 7c19f09a895fd44ca0c16f5bb0452c0f
SHA1 b8fde751e382005d26771fa7e376af5446a186d5
SHA256 8d0dd423afb81a380345e3379c3169a8208063aac5abdaedbb40dd411671cf1a
SHA512 4d8d72ddab83e2c2d8ef3fee9a3809f45eaac4456091fe04b9be97db02d0e0c02078bd7e4cd4e15c31f5d4ab958de075faf1e973be25b508a95631629e0b29d0

memory/3024-3380-0x000002261CAB0000-0x000002261CAB2000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\db\data.safe.bin

MD5 cfb76805b87f6ee1a33210978b82f8ff
SHA1 c19a4909a5579ec538adcbccca347fbde6205cb9
SHA256 14f20e1e9bb4974726828289be618d33af9b15b00b223bdc9632d083280fbbe3
SHA512 fd308434ca235b5c2ef83d69c92ec6f7381d0bd1de70a8f82c5748e08209533ea6cdcd53b370423e35c9391eb07fc4b524951927cec5b9431300abc08f376b53

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\pending_pings\a7ce01d4-1c29-47ad-b3ed-41de23fa5480

MD5 4489550e836ec4f38617c817be49438a
SHA1 e5055e2e348952fdbf17b54de1029888176ce2f4
SHA256 87f5e64e3dbd7aed1cdfa488719988778556ff70c8cfdbf855e1aa7d1ff560f0
SHA512 4de96b56f3a8f757eba7e716e976fb7b9e92a09560403db909fdf6cb28cc4455ac7c26c78011351785e0944f9bb296f3b601dd3f0ffd4796916ad821c434977c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\pending_pings\b98e8dce-6bb8-435e-b56a-bd5fafb166bf

MD5 8a7302c5b6d1bfd526ecc5c43748ff45
SHA1 d78aeaaac28aa7cdef7d9771a3fb6cbe46ca97bc
SHA256 74a57750447c3394f3fba6c39238ab78eb7baae7d4b409f09a5616f08e1012c6
SHA512 e1e7f9ac686e528d38d35468811f2e9ed7ff5d91d34e601ad72806083283bfd1236b36b74a18545aa976ea7426c82d516ae24310b26c88b03ae457828bdbdc90

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs.js

MD5 b0d2c8718978a6ffc2ecf131c5517891
SHA1 e11b6b768c54f548a187120fa597dc7c3523a10e
SHA256 135561ea9840ca5036a3d80f1b614b44e14dccd90ceb17323e6d5f30ed908036
SHA512 769e98cb91c9c77d75d4ae0b542a7994e4e69fac5b3a5302ed26fae47750f1e34ca1ef875b489793e715f76fee003e61582f3b27cdb5c41b475231b8ded60981

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs-1.js

MD5 8b59bc3af4c245160cbcb6b937b04227
SHA1 753254605879a93c72d4cd9beeba16c6c7348236
SHA256 64aaf7ada41df1669b86844367ffc1424890a6f229ad3a630a349a33124b7d13
SHA512 ef5a5a8b8af7542aa4d1ef3b030d17167368f8d320dec970fc5ae02e0696502eff7dd2bdb7b6fc049d0d00af25139e8c6bc32775b12be5a067ccb6e1af4e4bcd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 3018d1aad8385b734068dbad441e344e
SHA1 2a3925bc92ec843db64b6db2cd6fe18ccf084a86
SHA256 f33415b0b1fc8c7e52356318d44aef1ae6bd9c64a89afa012d43a01a79954f88
SHA512 7ab1a1115a4f7ac61ba41bfe5875792cfa84d81f14f71239e43848de5940bfa07e2e34ea4be85a61c091d0b4b7742f3f55961fd26734b528cdb2c0b4d169c5e0

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OHP8MVFQ\edgecompatviewlist[1].xml

MD5 d4fc49dc14f63895d997fa4940f24378
SHA1 3efb1437a7c5e46034147cbbc8db017c69d02c31
SHA256 853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1
SHA512 cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 44cae3d0bb049602fe91da8d5218e2f4
SHA1 70c3e15ac3e25cbd411a977031a17537dfee9315
SHA256 f7fe6601c1a8fc8ed32a7df56b2fa3bbc7f9ae42a0d68e53e18ad111ba4cc336
SHA512 f26b6c15ee338f8a0ff80d564addf9bb375dfa0464a4e2484e6d1136f626c0fabcc8623073f4310cbf84834d5e6e1a4d68c5e313928a82c9dcf58a92c8e0801a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\1A46B60D72C2FC66DA7284DB961C95808BA84FAA

MD5 71eaa1df924747fa05116057cffa5c1d
SHA1 a94339537b4a4d787eb641b37ee4891b7229e659
SHA256 12b761b1bf6f4c0ce0deb37fde970250f45b090192ca209d876e8e8a9601ec13
SHA512 fcda848344065f120e3516cb90ed1793761dda2c38d2f9135f627e5e82b112ff4e4960bb812c21c432c120502f05ffcb9bec1d313a7b62ad93beffb5fa2bf9f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 943a93d9d5926eae9d3017702bf8154a
SHA1 7332acd6be5d875f8982384354e259917a955f7e
SHA256 c5fd14cd25411a6d2b94042dbbb4a2c22b2bc9dd92faca9eb282642d8dc48867
SHA512 7c3345d3c0c16263b3c3a3c4e751d79124aaca318cef42fd4d6adcbc6ef4d0a6a96ce3e4111e3c7e056c0fbc8b3c67532c0d15b03494b71c042be7d553229ad2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG.old

MD5 1f2b99a45a06b1b86c97c77b985e9ebc
SHA1 6dad674bb0e687bf68542a556f32203442bdba3d
SHA256 d53f3ee5d5dd0fe031a4d605d132217da4111947a416d480f7926efe3375968c
SHA512 e0232420861406a508a5e539d2fed986d41eb981586b8c23744e97ba25c8849455f53d20417be0a86d4ad1cdb8fe6652b013ce47024b3b2dc63b00efee894b58

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 c2a9c50d1517242903fa27d4cce9a3df
SHA1 f218a0460caaaea3fc9ec76b902515f45a953e87
SHA256 cb5b0a86dad39e7d9c01135f1509df384eb96c52b05d72df15401eb9f11a2497
SHA512 7550169f0bef844a8d11859c9aa9c902c3a0293f575e96eca04ddbd0e34695d4c512542342477a0e65c48b744bb72dd9d73643d36bcad81ba41e7bf465640d09

memory/3024-3741-0x0000022631B30000-0x0000022631C30000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 a7d6cc626110edea8b4fdc797fcca51d
SHA1 032e213a2a6d33e2f24fb44f7259aa716c3bd189
SHA256 0103ca1845b72a8dd0635dd6ab95709152602096f34f848fd419eee1fec8a3da
SHA512 072e7e54e906d9c5e2c75f2167af27aeaa5c2950ccae0df7fd489d81d81694fbaecc3529fa8e807c82f84f96a8fae2d8502cf3e71259404a0a50c413c0b96842

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0d235236ed791669460c80922f81e385
SHA1 36093d828098678a460f097ee3b95a25473233ee
SHA256 675ae482024557cd550090835731f991329c9ad6f0539abeedd127df0d3cee46
SHA512 d05ef0a37badd3b96b2f1c8776997703a5aba1a87edbb61ee74d78394209c333633d270eef38f9fea1b047b9da217ca9f8b4527ad59bd01e4333add9ecafb7c4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 74d12c63145ba8df43e8e39462a26ec7
SHA1 934ece3f6ed9b58a29841ac485ee050e7debccc6
SHA256 31b9c966e85d8650cabdd7fa64e1d40ad3da5d5a824762aae8120843f1c373e8
SHA512 4000a08d23ac492f77d5fa62683056836d0d7d4897621ea11868ab02475e838db7704dca2f33749163438794f411d1e8c37a275856abfcf4b726fa44128f91ba

C:\Users\Admin\Downloads\MEMZ-virus-main.zip

MD5 a043dc5c624d091f7c2600dd18b300b7
SHA1 4682f79dabfc6da05441e2b6d820382ff02b4c58
SHA256 0acffde0f952b44d500cf2689d6c9ab87e66ac7fa29a51f3c3e36a43ea5e694a
SHA512 ee4f691a6c7b6c047bca49723b65e5980a8f83cbbc129ddfd578b855430b78acf3d0e461238739cd64c8a5c9071fe132c10da3ac28085fc978b6a19ee1ca3313

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 acca039f1761d66ef2fb49c70bbb26af
SHA1 52950bdf976df9f4103d420035ae209c87e19b78
SHA256 ff0ca836ecf893c3e4ba65ca51d4f46899920251d4ba2cad2d6f0646603d0aa6
SHA512 70615106f2cab15b8aa8c489f36b2f796d9412677ac5df4702d1ce5a71dda345fa426fbcd46de1dca0ef72290f9c9687e27d1ce1aaca7ca7c62991c066cdf54d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\LQ0OMCY3\suggestions[1].en-US

MD5 5a34cb996293fde2cb7a4ac89587393a
SHA1 3c96c993500690d1a77873cd62bc639b3a10653f
SHA256 c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
SHA512 e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 5da627aebf96f552dedea812fe7081ce
SHA1 af2aae872d72c1a7df84fe3ee3dc0b6ac0b042ce
SHA256 e7a710b9920168913370b8eedc02dd3116302b5345cc3a2d889a99b5d63055d3
SHA512 1f3bfc71d4b4655f6f1ad38691ae78b1dd05937a9cd3d5151159d5902a7c1e506aeb0e84e658a31e84a3f13d8a795f1e086fb136e5a4c029688497cd6e017a37

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 8fe820575671e38ed30cad5b4267b0ac
SHA1 bf8c5aa2f5bacd42a6bb389d1194b516a1c0b46d
SHA256 52597b82eec7e3ef25a61555eaf2d7837d19eb14deabb8120a071bf0b8a25bda
SHA512 84d1913ab75e8a6c064811e66a2ca136ea79f25b31e2e14553fb9ee1172118082356f7f4e3aa8f2944397d86bba9187982a447da8b57d45faed232f38c52ed76

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 239ab5ddd5a7c9f148d625b1c92bd6da
SHA1 336a9393089cb0183b4bb66287f43536e44aa9b3
SHA256 483fbcd206ecac12821975c194ad8d264516dfd24bb3bde6d09cb3067a8a4fab
SHA512 dc74eb96be7b774930192a19b22cd3382666a9560bb89b61b03bb2ce1459d5fabb9e71745a2fe46296cb0ee8256f20415b879d8fcbdfbde7bfe9ae1e1f2b9f16

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 0cd38842d3794b34c41de6e8c2b0258d
SHA1 d9252cbb300eb4506322bdd91d2d8931d445933e
SHA256 48d3ad0bd54c157f6ae42d9833d3cf8c336bef4d0ad944be690ece9c067ebbc9
SHA512 b4689ffd9bd7b55f1ae8a8ebc47e421c2016d17e773640fcdf2f69d192ce9b31e5b70dbde11a62f1049a8023d54ea2579013b175711a207b57005f3bbd33122d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 32bc2530ed8b74d1cabdf6db0a17cd1f
SHA1 b6fcc253015bd3e9b4e1aac99639297e1025c9aa
SHA256 da3aafaf9dead7dfe17dab3db87a02f51a8520d1260930d2dc6e9ac4d7477d75
SHA512 39a6891c8c8b748ecd9f709f2c634c35135be1bdfd95f99aff88caeb4079ca311c48a60c27ec5c3efcf49912d41c3090ec5f00f0b25fd44ed8093d0efdeee4a5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 796485c85adabde840d4feae492936f4
SHA1 a5816af2fadca8627744d9bd035057ac4b082c6a
SHA256 65e3c88b5e66841504f4625840d5446d8a14ffad846df26a2a33bccc6e07c12d
SHA512 711f9a128f875b70d785f8bf28e625b3de95e0477808509ced286607a1d2c65e0aa59193d4fb67e13eb22af95750a0f0a0473c4c73dae0362235eb9f2ba090dc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9f31d6d9d3defec7_0

MD5 17ea1874936cc12de35e7063502a418b
SHA1 44157faa7b2250dc57ee572bf05277d73d287361
SHA256 ad718cb19da5b26c8271811fada3bceebce40a8e352c561bfb49d3d0e1c8fa7e
SHA512 314869e80ee0b748171bdf471089e31c00272103a4ad528cea914e9c38eb006c51611bdca2875d2af84d8ea09731f85e5e30815d5cbf8b3cd2b17c15fa3224bc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b32b2f8092205ec9_0

MD5 6a4054435caa4a9be199bcba7305f73d
SHA1 555382282899b745c3fdad2c0e11ffc61409d787
SHA256 004bc3eb46e8c13698fc991dcd1a9a2c450d57d2ce8a998f4958a75f17ba4b2b
SHA512 0c077032ff0d1f41c08b91f97a9b8536162e77abd0f9a950eb3275e1686c78aeea4b0a7db308adf84dc3475b9503976c14456c2c6fe022616b76d301c8c18d2e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ae9064c7b5f1a892_0

MD5 b17c7611d7311c4476d5fd7c3f38b5b7
SHA1 17287f7f1d236c07c358dd65668350d02257e45f
SHA256 32842ac72d9ed5b0b95fa0e558514920e34b9c4f084b3eb97cd19c5158442930
SHA512 27dfc00a9be1e25334c51e1298378dfb51bfa8c2bfc1a9653bb79a13bf69e77dc2ccf9ae5bb3239b74a8e3012b7d6b056bfafe856d207a536d9163779bd3b0eb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\89939286be894343_0

MD5 338b386aab8f752cc746750c09ee4c54
SHA1 a29874ac589e40697db54e3af4f3e3b09da089b1
SHA256 425285a0ae6830fb32cd71884be5f29d29260e9069031ae240ba8e1ec5893e60
SHA512 ecd78ab0dcb9166c9999cad82ab017be48691b7752ef3c1db60ddede2440c8cc5844cfe0f4838153297854cd8e16f5e6bfc8d90adc080ed17590cdc04d200e63

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6f7c3abf75d4bda1_0

MD5 03ca284004317ab0921969393aee8646
SHA1 7704c5ebb1589be6c42285e3c2f2acc0762f1216
SHA256 820c99f4f721ed95d41c6b5686a8ad8b86c5832355f494d536d4fa8da3406712
SHA512 5827ca3340e0ed3a0c385663b66379a2ad7e6fd3b5b81acb85e7e4cc46eb1846441cfbb7b3cc4503cc5fe0dc0300ed63e2709b2fe0f58b91d56938efdae2bc4c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ff415ebb9acbfeec_0

MD5 e08c91f24775c7123253dd6592066a3a
SHA1 2dc9f4e62aa8abf85a8be741241b58c67883ae01
SHA256 167b65d8ee383a92436ddba04e5b6308947f4cc95148436cd410fa7d97190f0d
SHA512 29b5e41a1c961468740ffa8c78cf9588c3bbd34bf8ccd1052eb72da546f4e73cacbd1390191a153f07637a8aa440e0027bc4a93425e714f1831b76aa0e07af38

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\25118d7a4068fb74_0

MD5 13ea38dac915e0e6ac0b8ed608426725
SHA1 e8084d7a1d2d789234786758a233e344f91d11c8
SHA256 33b97c65e587f51829600d584cb5f466dca832b5217866331f47546b1094ecb2
SHA512 ca64ef1602ae12cd8c68f1b084aef54993db235c2ef9a81ab87cb5c019dd700469340d9cab7f73e53eba380aec41a4cfd5ec08da443e4786b24c277da67bf65d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\29e10b2a58968b1f_0

MD5 159fdf09b727f49945a1087b2b388863
SHA1 df32531aaa1b1f947a6f6e7dce675cb4b50e0b1b
SHA256 5cf4439f65dd9926f2e34ee9d965432dfb67ef1ab749774d668c338a93e149a3
SHA512 84e63ff80400136f78b6bb9eb20eb69b3e394269f3d7e77d59325c24f2ab19063c325666a067510d2baba30aac1617caafeb3fe4e6751b99373033133ff1499b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG.old

MD5 5290dbf0f7b5546273e162d9a6df12c2
SHA1 86f2fa89557440c354ef4ad9572e22ede56ca7f1
SHA256 fb80cbfb2a9ab87081bfc188d83ec734e648119d28b20e32c63cb5068e287bea
SHA512 cf18b1d7e593d7c1519d852ffbc2a2f20cbb672a7b3033cdd691bafea41ac1174327e4f5467214970966922f227a1ea051772e4aa95936f7df8fb0d355d75416

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7d806ae90acc7ba7_0

MD5 5b7fdd8ccc8de2c8f80333a98f3617ba
SHA1 3a0b80309b9df1d53d6ab3b4c278e79947842a0e
SHA256 132544360a412570ad0451b6c16e4df09c7c2c36facded62e29efe20c5628d92
SHA512 8ecce57a5186154f9d42694f397272187e21855bc052e6c491f3619c2702282bd54df1b630980f903c68075235e6dbf114715e8354e12bb1aadd31eee801464a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\105685a12ffd1a93_0

MD5 5613d9a87b012f52655fc38926b28b54
SHA1 0de468220f9fdc21836f4ec5a468fab98be05419
SHA256 3087f5edb07a069348b1fb9751e2cb22057e32395b3609ea20716c186c8c54a8
SHA512 1cba9c1c2e03f6cbf82508567d2778647c1f3b471c6f4a9cb3973fa789d6cb0b87f993c10b3e6c5d0309e27c4aa82eabf2e97b40d14b58f61cf1494f194b2587

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 b9b3a1b8da736ab1944bad5affaab162
SHA1 fc1283e54a45ff89b4798685339c94bff023627a
SHA256 bffd7a2a8c6403532aab4d832e8774d372e3a2ddc2be21fc75a4c3ae9bf805e2
SHA512 e88eea419e2b40c3c601b44ba2986bdcb483f05c91611760065499599e94be29edd94ab36d259b18f10ee5f3613806356fb7b2be9d9fe43f9ae9671526194edd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\335e69ddec2b9ac6_0

MD5 2ada830d80438c7f2195f811ee328340
SHA1 82fa6b7ae3c35f059ee46cb10b22bdf9489f914e
SHA256 e062e440fbd84d915d58fc4371aa16cd59b5cc8070f5e616eacab1d9f975ee79
SHA512 92dc87174f8517ef4f8a3f6bb8fb3b08aacbe243974072bb198c1b675d44a85259a08430e404f9533a0ad284fa402e609012c199f7c0f3c29c2c5c3c1fe9f4d3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8aa05b2bea09f81e_0

MD5 4cadbc96a0f43e8ba3b52c589e230eb3
SHA1 1904bc45782ab674bc3a2b4f927b53652b7b29ea
SHA256 e05f064bc890305f69b301fda2adfda8142c291c9348b07ddf71fcfe9731ae53
SHA512 8e77b79885e18936f161ea786772a9d235d03bb3d963e5fb18f966dce6b08a39a2ad18c9f96ed5167040dce5d8ba71130637f7535a3798a74932ac05ba2b344a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ec330e53bd6be1b7_0

MD5 6891cdb7b8fbe519f4ae93221c013303
SHA1 861e4a92f056217ba752f43371474f2c969b74ff
SHA256 cad3b603d2792d2cd2aabbfdbc5df98a684668e4535dbde3bd56ecad8fe5873a
SHA512 73bae07e4e794299a2c35d1c9a052115a530bd42f2c1090d9c218d8a77b78d70263086487b96c0d18101696cf37547004b8d338b6afd3876e64bdd484ef05957

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000df

MD5 3b0650447674e63f4ecc8e781def0fa4
SHA1 29014308bf69683f507db387a2d6917bcdc73eee
SHA256 7f53c287b1419addd5560c55cdbd70e91e7a5fae82906cbdcd8d6d9924f9e794
SHA512 27305b0710a05fb76c27f9c39db56eb7ab2d4530e9e1a4b14a1082edf41a893bd1d8dfab60cf01a4d2e820f2ae4d8d14f278a43021ce7ae282ce0e63387a55ad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e4

MD5 015c126a3520c9a8f6a27979d0266e96
SHA1 2acf956561d44434a6d84204670cf849d3215d5f
SHA256 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
SHA512 02a20f2788bb1c3b2c7d3142c664cdec306b6ba5366e57e33c008edb3eb78638b98dc03cdf932a9dc440ded7827956f99117e7a3a4d55acadd29b006032d9c5c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e5

MD5 53436aca8627a49f4deaaa44dc9e3c05
SHA1 0bc0c675480d94ec7e8609dda6227f88c5d08d2c
SHA256 8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
SHA512 6655e0426eb0c78a7cb4d4216a3af7a6edd50aba8c92316608b1f79b8fc15f895cba9314beb7a35400228786e2a78a33e8c03322da04e0da94c2f109241547e8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 932ee85ecf2dfde1878e67f752a46c46
SHA1 136f3b353e9ee398bdf4a89ea5e87eba96f9dea8
SHA256 652bece02ab9f52bdcc15d9ab8c966c6a0fc8ba93954b960cf9423539784302e
SHA512 4f35f010ec5b202e272c54c5262a42b084c116145ab8db83ca3fc506a4e3ee713846e6a9d1731570e7500c923d81063f627625e233c029222fdf2c7bc3209caa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d16a59d2b9b9f0d3b3937afd5610e741
SHA1 7cf4c925a847ecc432c6e679e7f12fff0bfc6093
SHA256 db26523d376d690ab72b6894a19c51e3c9444f2de492edf1f062150253c43f60
SHA512 8d29c637941334c922769a05a4c79f6cd09693a821f1c6a5c32aaf48e2b82f7234e21192d223cd6a7c5a3ee8c1f2da22a2db89a2386c953675ee2176c1d216c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e7

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\6V43E52H\favicon[1].ico

MD5 f3418a443e7d841097c714d69ec4bcb8
SHA1 49263695f6b0cdd72f45cf1b775e660fdc36c606
SHA256 6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770
SHA512 82d017c4b7ec8e0c46e8b75da0ca6a52fd8bce7fcf4e556cbdf16b49fc81be9953fe7e25a05f63ecd41c7272e8bb0a9fd9aedf0ac06cb6032330b096b3702563

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\7JSIP9Y6\recaptcha__en[1].js

MD5 1bb4ebd5a1126f7287c58e242a7188e2
SHA1 f06c98f9b76c942631ca4ced196b6ccff5aae339
SHA256 4b20abde9f7eb27dc344dbbb35f59aba01e4cc70262c07c260beadef9072f25e
SHA512 b51fe40ab04c98c21b1f233cb335f5d1ce2f496a2b07544025e5a89c171413ed1755bd5d9900ea43f0495fce190d4607b6d53c3d8078ebfaaecefa97471c8abe

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1EBKA1Q\styles__ltr[1].css

MD5 4adccf70587477c74e2fcd636e4ec895
SHA1 af63034901c98e2d93faa7737f9c8f52e302d88b
SHA256 0e04cd9eec042868e190cbdabf2f8f0c7172dcc54ab87eb616eca14258307b4d
SHA512 d3f071c0a0aa7f2d3b8e584c67d4a1adf1a9a99595cffc204bf43b99f5b19c4b98cec8b31e65a46c01509fc7af8787bd7839299a683d028e388fdc4ded678cb3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8fa49c866ed8fcadbcc83bc689b597b5
SHA1 f0d299f78092b5bcd56c144f309274170ff859ab
SHA256 3fa2a1a9bdb8e452003017affaaeb8c8f6f8df82e0510a80b237e2097331ccf3
SHA512 fe34ee982ab53ebb8fe44bd89f7abb09da22b6a88fabfda783439ac40f1f445b48ba16210fffc31818af9417ee31b9db15e328d46e578e3525a9d58f72a6d254

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 7a8949a7ee4948fcd21537161de006d2
SHA1 5b20b276390e6868550ed0dab09611271beee40a
SHA256 911d87873466e9128de5ad79e3f16952596ed8c49203f11ff0763702d54bad50
SHA512 3003e1fa5cd343335804fd6b6e1c5037553063a078b6cb492e833c577d9c613a57e6c948ffdee9bf25090394f9c88b0be6f2a83f01c58d33d1f7609b02b75ab1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4

MD5 2e449418f46b90351d981ed3c0830b59
SHA1 a4bb4c6aed117ed698f7ea92b0ae7ca24b4372b3
SHA256 6ea9bcd38d83b4eb41551fc31d48785d8bbee8ffa0d19daf17cca469e9f6e658
SHA512 0e61d86a548ac7e31fddd9d411a6b1199ddc13d6064ce142ca131dc9d523711b024878fc97ec8eba875780967ff1964bf4930784a323c088c5e7587983a77290

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 827bde8eb658b2cfa83ae7b851427343
SHA1 1661477f3b73d17558a0ba20531046224964b3fb
SHA256 297e863e9724d52bbd0b9a3fb6c06c471ad30670fa3739e0ee8c91220ea017d3
SHA512 56db29d06a3f263df8f93a4e2ccd5a69aa8fc2ba2b4ca1a78b6fd7be613d36e20ba24155c4d56331b9b2c1e7fbc6b62c0edf8e5fba525b62d333c69bf26edd0a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6cfce4bcef3cbdbd5c9a03143537f234
SHA1 f0cd7c84684c5681305f1abd73c07749175857db
SHA256 b94bcd21f3cb4496e524793cf1a227d6bfef913e252ba241f9b0e1a041fde0d9
SHA512 8ba9b800dc2c73c2d3f612d40119d20e1d0db7dbf4dd84a0f2511c37832b596d78ee2a5b6c5a5df540188b0a14070e262836448c22f81729b8709854ffe1940d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1EBKA1Q\anchor[3].htm

MD5 62cac3f961715813be2e267c18a977c6
SHA1 880df75608a954f8c91f2e1276e99baa0a8d49a5
SHA256 421b257e48764e5828a22f5c46e22c88fe3e9c130ce1a71184be2e9965eaf593
SHA512 5b02ea0295ac79a475a10adbdcd7d440bae4c64e813979a575141262152c6f0f56bc8cc06d8c443e4d5326db3ee06f4b515cc771af6926c372b9178a825cc983

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1EBKA1Q\bframe[3].htm

MD5 8b6d85c0b9170d42a9a9c542840a40ea
SHA1 a99b12c8c6185e9333f5e056397a7795f3643d62
SHA256 dafb7a440e4775ae66ef620ee93471957e440a2e080681c520c5601363921c05
SHA512 fedd54dd8a7a1c3473019aa5d589397378259111bf38e6fdc381db14c2828576aee9b92f0a17f7eced3644e48fbac400bdebf9e1214020a48a13f44286872f30

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 07d59fb35429c7749abe38a083c7988d
SHA1 588be1fecbc170f11551e88d61b5c005ff15029a
SHA256 31d15d36b8a3ae7f2f6dde9ebbf8cf62b9cd20d25cfc6e6a5afad36dc255b944
SHA512 c7963cdc4c81d1b9abc7d254d14d3cab5404404bbd9d4d9fc1ffac8f30a8f086e31776fbdb036b6611131ff6461d5dfbd7470682d49ea87b7267966b1fe57cc5

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\MJ9GTA0S\www.google[1].xml

MD5 73f4c03fd8707c7d7be094d4dd9998e4
SHA1 ce0ccd051c28d0215de8d55f3b6aed195bd57728
SHA256 cc17bb1a71505bb54e318369a3a9ec08cceba85f1f4527a1009bfd080ba7562e
SHA512 7948a963dabab972413b1a0f256c0c6418121bd47be1adf5ecc42e2bf1ee934ba492a18a8481aa1b519e92eb38934e037a4ea29abce345c9e758865e012760df

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\MJ9GTA0S\www.google[1].xml

MD5 0c5abbf1f9efd8852aff99ff0b1c5cf3
SHA1 5c7944d86451afb1945e2bd2bcf65e3cc4d3df5e
SHA256 2e0135effe01557332f0d3202c1de81d28d732b9f2b5e3bbeefdf49f82fce690
SHA512 ba892f675600a3865ef1e82c470e92709e742c070928c755e487f5681e9e6ba7c0b35c6574658344ef0481c0aa6c1211a627da57aa34a440deb5c3e0026744dd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6f8b023ac6f09f4a5dd4f0625927c6ee
SHA1 27706cd26926e0c1701431d59ca7f087b91f91cb
SHA256 249406cd46594a8d21f13c0f348cdb3a9a76028b06927cdea8dc577a922bc569
SHA512 97a73362e5a82d7bf40a4295c2f66693c3743fd61709d450911415e6badc3d45a0a718f197d075839c9c6f1f33ff4dce31cb6a22f5dae53cfbfd30255f6f650f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 99168561e4c681d719841e8f79f49750
SHA1 6ed8d72ab5f19f92923fe0cd18243d7ffa0721b0
SHA256 529e86cd8faf8d8ce0ab61c6cebf23cef6ed199631e29dc546b0c37cacb6b01c
SHA512 aa5e0e0f72bf091bd4132c7b85739e5d4d84c17f7b7b90865747f7dd1c09bca1a1ca8c5bf1d7b49795fefca0ee29474340954293f97621b8d1a0202ae7748001

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 45b0acafc0dcf9545620137d55393ac9
SHA1 17fc90406e11bec47dfef537045416d193bc155d
SHA256 4e1b0935e622a9c51629be1e5789848b8dd2be3450669eb7fcfaabdd9960da84
SHA512 bb7541d9a337b5732cc91bad36e84ce8232913277655beca89ad7a43ade154f9d5a47123e5841473a4aeadca317f1259d7b2b97328e0d3481f22cb37e6abd80b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\LQ0OMCY3\b80692[1].ico

MD5 ac0cd867e03ed914827807d4715bdfe7
SHA1 4051a8c23756c10d9cc00fcde6f7215c780fdf6f
SHA256 b50546da121186fbffd2aec430249cb21c7c2e2c85e561a393a9df9abfc4477c
SHA512 fa11d1d76c39719c218b4ffa34de8dd44d398bdcbb236a666f0be6eeee96bcbe4da9ac65a89441ad284c0de21788c135dc4fd21f6f82c7039f00c8a7c705c8e2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1ae4007e8368ee99e1f08b6b06d1bc46
SHA1 4511ac43032992e574c167e461d712d9f957fbc2
SHA256 06aca7bbc86c247066db2d952fc5165c56f6a361dc104f68e10880577313592c
SHA512 b7a5cc9a53303fb52480dd86cd7aaeb6b9a23e43f7f6b86446b34ea7aecba50fb29549dc1fc58a826b210835f3b2847bea722fc03e3c9b5e3d8e7eaef2262d90

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 39c7887443e463a43d470f3ba701ed9e
SHA1 23ec0acc17c255a9cb292106c6342dc24fa3d319
SHA256 3eff48773bced0a1fe6134a93df5ec429939d46cb47148be14f80c51b1d9e953
SHA512 527059e03408d8e41dcb49c80cc26a7c7ff26fa7dc4430e15d8ba4d46a6c6b901eef303187c416c67de0a2fe42f3f61bd4604ac7af8c0b89ba3f895b7a66c01c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 c1f975cc52190765d804ec0902559540
SHA1 24716c3ebc4ce6954439efd4984d115ffbb0c995
SHA256 c67e358afe422a193bf9f6e1e3f9905842cb46f596763ce587e0ec39179bc236
SHA512 e3e0d758f2ec8023fcd04eab58622af962769eb766d167d628a9ae39780f86801b0e638cef993a6ef4a6de1486619551748d709902416681283cbd74c8dd6dd1

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\~DF0D809D8D3CA7C68C.TMP

MD5 d3cdb7663712ddb6ef5056c72fe69e86
SHA1 f08bf69934fb2b9ca0aba287c96abe145a69366c
SHA256 3e8c2095986b262ac8fccfabda2d021fc0d3504275e83cffe1f0a333f9efbe15
SHA512 c0acd65db7098a55dae0730eb1dcd8aa94e95a71f39dd40b087be0b06afc5d1bb310f555781853b5a78a8803dba0fb44df44bd2bb14baeca29c7c7410dffc812

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000fd

MD5 1aca735014a6bb648f468ee476680d5b
SHA1 6d28e3ae6e42784769199948211e3aa0806fa62c
SHA256 e563f60814c73c0f4261067bd14c15f2c7f72ed2906670ed4076ebe0d6e9244a
SHA512 808aa9af5a3164f31466af4bac25c8a8c3f19910579cf176033359500c8e26f0a96cdc68ccf8808b65937dc87c121238c1c1b0be296d4306d5d197a1e4c38e86

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7383fcaa240248f43ae2b07765288e94
SHA1 9761aec77426c8fb7bd461e4c10b3a80abfffb01
SHA256 1f4ac7e9facf91de128d915957aca31c4bf758465c6ac3f3845d136fdeb33d95
SHA512 1594653934d760c48f860bc207a363a20d9e9bbc0d2749640dfa95f51d86386c23874b4622970fa3575aeb054be664474614eae3f122874f835537ba212848bf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 cd041d976453ecc44b0a4c98b4c883c2
SHA1 8c7a537f8b00c8bef15f92b2a8df862f30831656
SHA256 0d8b39c32bc10d38c64ded9428f01368e634ec7197ce8c4b199298e954efd9be
SHA512 10a3ec3e1c8b75f5287c445f080f842f40203f6b1cf9253333c68dc44eaf9500883a426524a4a2effd61ae10d647d75a469187080ef9add8751f595540106872

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000f5

MD5 481f5276ad0115cc3a3795544187b170
SHA1 4f5195443166c762bc2930b5a26c0c094c59138d
SHA256 2378d1b08310b3fade0d8ca6be27f3cdcf6e22eb4b910b1642d1645a06fc3f19
SHA512 45dcd09c6bfc73df65946b24aa9ae064398b9cb0ecde680b94bdfb2147a259472305c7763a9d1a0065805613b769cd39dc17bf559136f2ab356e7074466e895f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000f6

MD5 213ee0fb15c15f4d60668f76eb6ce849
SHA1 10724af05228b412a607b9da530b32ebd3ed63b8
SHA256 32e6af6526aecb416f3d3e74bf4add4becb3eedf7bd98e4c245df72f57e42478
SHA512 4ea2dd06222c2c4caa4ef4b3046e1a7d7bd05aabaf15dba55d17b186dd5c61c1a1d956f3ecc439c99b0945c3dce55f2136f949b8049e1b377aba649c9904f82f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ccdda807db2cab2b7ffa614564e58590
SHA1 627e78a9be4d45322776539dad849eaf0f132f52
SHA256 3366dbab13bea5db99709ddaa4266eff36b60c147ce33a9eb21fecabc1ebe9c7
SHA512 d759915ad27e0ec5a1d6cf58e92ef893e323c6f0db636a3754bb4a2579b44d7301652438c83125ed8a6bd4f5256947c74ea0f41b773b55b7afee641d2d836746

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 42d9a9219a9db5687fa76403322b93c8
SHA1 8d9480ea3485ed5104fa82a453e91e7666806e82
SHA256 53588aca6695e9ad935cc6d4a30b49ea4f8b9bc865edbf41848c8f358bb10c57
SHA512 9577dcfcae1bc1cf0dac3e4d4943313a48ea6fa1a5a5775033a95df744a523a594ef7c750ee1843971da2e4b8f98d2082f8b0de15f18b4ab930b90d66eb8f9fb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0b3b79bfb0a0907cf59b4dc849a0d167
SHA1 8fdfca1bb09542a35872b8053b828b6ea6214643
SHA256 c792444bbf7152f9206471ab332b1a863ff02f8b0dabefbbb0f6055869337d5b
SHA512 3015c6600cd574d8efbc9b9ce04d7e493da64e6cd7d21df70c8034cd59c0a74d95c521a585146e1fafb470672533ebae9a343d5e53e400a5c46e28690e9ca7dd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 8d7521f2ecd948f34cc7a3250783a2c8
SHA1 697e37f7156ac0b161910cb0fe8f476e6657f5e6
SHA256 1b2cd5e96b2a42af1b83ad8dff7b1c1eda0a432fc969f81a129a8da1acdaf896
SHA512 ff39f3af4e76e9f303a982ecff89d1a586a6c1dca9ddd00f5e15a9ace874cc01e4299f4c3376d001229c39aaa88b5d24e4d38cc03b06406428c79862ce5c028e

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\E4WMC8XC\answers.microsoft[1].xml

MD5 c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA1 35e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256 b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA512 6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NB7JLYO1\wcp-consent[1].js

MD5 5f524e20ce61f542125454baf867c47b
SHA1 7e9834fd30dcfd27532ce79165344a438c31d78b
SHA256 c688d3f2135b6b51617a306a0b1a665324402a00a6bceba475881af281503ad9
SHA512 224a6e2961c75be0236140fed3606507bca49eb10cb13f7df2bcfbb3b12ebeced7107de7aa8b2b2bb3fc2aa07cd4f057739735c040ef908381be5bc86e0479b2

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\LE0ZP3N1\favicon[1].ico

MD5 b939aee911231447cbd2e3ff044b3cce
SHA1 0f79060358bea92b93ded65860ffbc9ecae3dc14
SHA256 f35fe126f90cecbb6addd79308e296e8409dbebf6bc589c31749e67713e9bb3c
SHA512 8053232364d54966f4b8acdf9af61a1366bae09789d6a76b8e723d7c3f96287460248eda12083795766809569527f4821f7e87ca4a644ae900c3df33002c9977

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\RI8T0NAJ\MeControl_v6QmZT1KIHvYorogrcRgqA2[1].js

MD5 bfa426653d4a207bd8a2ba20adc460a8
SHA1 1c3777307ca89baffe14769945eb2215c0c2700e
SHA256 f07fdce076d91c554de135674b5ea92a3b72348d33c72d43f93e7ff9a5bfa490
SHA512 56643373ee5af3f6f1ec20da41998b99a5d311aa9b550492683e2ea2a07146939e3abec9c10b525f5a312bbe2b6152d6c8ec3b9e2174c79c316cf21db764c8ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 29a71b91faeb67ec1aa6719e5ef8a1df
SHA1 25f81770ac998315ce482f246eeed3e58e965638
SHA256 8766c1c25e0c481b9569fba3983d8e44a2f70d96d0f0fe263c9eacc6d876c9fd
SHA512 3eeab307857ef257a2853c4a1136e43a7f07f54dc11d782508924c26ea4d2169e0a441c4ebe980a546563c15e133f4c7368ca3ca5016636aa717ef21f0535248

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 00ca87ce3f1d6ead889609814ea508b5
SHA1 97a27f30d9da9209ff1aa4dde7fb704ed68c1f22
SHA256 208e3ccee5858573bb437ca4da6b36d5936cbaff47be6c789384d6b052d7eac6
SHA512 3ef34b4c476ab2bc723e0d4701a02bd764d2ae106129173974436e9afdb5ae405fb955151aaa2bf4dd00ab464e67617142aa96c722c6bb934bc87e2adcbcb1ce

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b6332043668ebfc57bac26ed1962121a
SHA1 99c3e904fadbd5106a78ee6074e5a520f93fc3d1
SHA256 c9fb9f2e4c9e93e44b484b0ae95775d11e7b769b825d4ae8d94c1773207b39e8
SHA512 6bccb01a628b12e220c3cc95f208a526371dbf94f500c834ec4123754d7a9ec8a95450ed159a7766e231f1b1e465517118cc3b6120e3169107bd3ea6658f474a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 471661e9d893e931335cdf21541c0141
SHA1 a467658008bc435b069a1e122fc95ea9094d8ce3
SHA256 5b23637ff502a9df12e62e5c3d13b70e9c5083b725ee998f4e606b6b1928970b
SHA512 6db15e818c28a9dfb9c70d20e15b9bc3a1bac74e0def83d589978344346f25206d259b7f170560cb3c024071c4021e3161e7c023315b570a81dbe6fd81a837e2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 20872379221a3fa9a79747bae5291b58
SHA1 ffbbadd984498e0d646322000054980889d91a58
SHA256 3aa3d2a7ce5704818fdbcb9855a47f6a3c0e346a16ba29c3ba817673907f9d3a
SHA512 be890d407111a950d2b19f1d5be4ab38027d185258de4bca16257f1844b1c3f951fd46829a1ee69e37b652a7b0b917607e9e3b8bd931f6f3b872f1788ca0e219

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1EBKA1Q\api[1].js

MD5 832e6993cda3469c6a40da72268663ac
SHA1 4650b1e5c601a454d3fd746276fff4cd3dbd54aa
SHA256 0ef1e5d700fb1691e5faa92a14f8a755c8dd4a92ec9b1a2310ad769b225cf46f
SHA512 6aefa1b28c697c81239e47ff57b3b61cc67bdbf820b7eac99f924db2b5093b7d03a029accd7dce42d517bde32cec9f6540082f7557b72bdc3c8da27095d68b80

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NB7JLYO1\webworker[1].js

MD5 62eb30af91dddd7d80f32a890e1e4672
SHA1 37f1141450a98dda7dd8899600e46d8a9f7cc970
SHA256 d601447806420fb7676679daa6dbb113d6617440ecc79998bb013370dc08f4fa
SHA512 16446d271e46b6561b1e26d77394dcc999f49cbcdd9971cc836be2de8048fef46168dc578f02c8b33af492d586d1e636331360a21778eb337ddcd1d9af471da6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 89d7471abe74ae1a8b662ddbf7b5840a
SHA1 fdb7ab3649ffe7dc767afc658f5da823ad7242b6
SHA256 49f9549ee468e9074a2b861a2cb03c6e33cad00dab5a18e1c2bf9a5a01450f77
SHA512 2db7bb2d463520d29a697f8d3b91b6a4fc1b0c6fd26e3aaf044a53b6b1471c45384eaafec0aa93106c7b179ad98ba37fe3f8e147ae88c57190ca5cf9a7121e38

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c42ed5eaab5132c228be07d390ae0763
SHA1 7b0c5c7d78f35a674536d8242033bb980d619054
SHA256 884107a970ce158dd341e6308413c5bd30668084385d9bcb1b054600f5eb4316
SHA512 bff968739af90b5b0d2b3c13034cb17f743608f277f085a27f948ff5d8d4db3ad14f3198126301e76f9bfa76aac6fd2c8eb8b6aaef61e8a4cad76e3d68cac6c9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2cfeb2e3a595dd4b_0

MD5 e136c3e81014df26c56b5aa52a6357a7
SHA1 cabeecf21056414c8756ba803296c5d0aa56d0ef
SHA256 fa7351cfc8dd38fd12c4aaffdda9a181f9b641aa7f17690b1a9fb1d840f56331
SHA512 f596368e4233a1b722f197f6718bcd75df3f5e67f3578a6a2c16e94dee5d1725ada018aee68f45fde1a84331c5e1186bd3312d04c3c823ddea22a544c82bf3cd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d2fa15139ff32bb3_0

MD5 1d2a8f6b3810fed01044df1f6de74baa
SHA1 8b11e3b1b95356b5f09e5b14cac45799d35a6f06
SHA256 5e162fb82025d1f9e33f2f91307f2ff07d3bc4d80a63ff49dfc694828d4e9f0e
SHA512 fa8211331638dbcd7e8a7ec07dcc0a0384ac6416feeda63bb3677e3a53d4ae1ef9f0cb01c948d8ef2723989f75443a27eb854aac6de1554e51ac7a8caa24486f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\860861a2ceda2488_0

MD5 09e1d4c78c9d8f4b3dd7f0c64d16081b
SHA1 bb92033ebdf4eaf5b174e92e88c3300bd207c5e8
SHA256 b80c7e0208ed170a25fc88fbf338e9df5ec64ea975093714d95a5ab02523803f
SHA512 3f0b7ba7ab69988ee524647dabcda19cede63c7c1b3d6200c7d3842b925d0c9d8d03630b6163a2ea59eecadb79104d444627709105f5f2fa98a48b65d8670ff0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f948579b3d4918ff18dd2f684cd6b7f2
SHA1 b8255acb1426b82e66ac303db5d83ddfd03b9a2d
SHA256 9680b99f9fc8ef6c28a5d0fe817aa8863c4b6e1f694333d5f385ca65192e8b3a
SHA512 ee29d77e2956b8cc2ad779917a9f678d57bfa3e1c1dd1bf8bc0aa44b3e1f91a4ad503b3daaa589e907f96f4dff038efcbfaa0198c152743fc7268c38c510a0e5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f07aa6202c69ac9036232f96f09396a5
SHA1 3f3ad28c100de2e6dc24ff2c3b62f352fe6f16c2
SHA256 d7167e129892396215c0d70307a838345fe9abfab1b0adcffb90246c338f8aba
SHA512 16938431a086d84f3c491481d7c3ec1b58b4bf6fd5cb7fa10de576fc35ba55dd1bd79f8745437f56cfb99e360ba21365b3722fcc5597e3e735ca077162fb7925

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\CB33YD81\coast-228x228[1].png

MD5 b17926bfca4f7d534be63b7b48aa8d44
SHA1 baa8dbac0587dccdd18516fa7ed789f886c42114
SHA256 885cf4c748081f6e569c4c5432249084eded544d55f7c85cf47ec1aebe6bdcd6
SHA512 a99269cc3c0af6a291e5373c4e488eaa3900e66bc3342933da3a18caff5401a4408aa1cb4463fac649c3cc5d88773f789fb120e292ed956188f1f5eda8ca7633

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\ImageStore\cqdrag9\imagestore.dat

MD5 45b654ecbd89fca45c6958e8291440fe
SHA1 13b2e7980e9f2aaa1ed1d5d3e1641351a18ad4ef
SHA256 bcaff172f4d0381acac9dacc18046fcc675517a427eb542535fcc07892961379
SHA512 19e4eb8ed3f1bf8a15d148ce30248e3c2f8a2674c85b7c0a11a711ad77c64472542361a3a73419cba6797ce770902bc582ccd44e68f368a40151b1b69d5c28a0

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\VSI9QOOM\www.vice[1].xml

MD5 db683435c28a73c0037132f7cbe4a478
SHA1 d3d876341392d4dffab2a6065874da234336661b
SHA256 05bbb6233c33c72c2ea38617b22d7321654b0de084cecd6cbd9934f17a4f1792
SHA512 c0586f043e4c611faa918542c397afe06759b1c7307fbecfde09ff1a7f6725a8159214f4db601d5eb8afa1fb9c965859711a4925a7894d6b6a1949d5a471097f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\60e2d5997afcaed4_0

MD5 a8c07488354222a2d33437ebc398f38a
SHA1 24fe3e2b42f1ebf31fb8b274c2fb939968c58502
SHA256 615b0bbd6d329456edad57738e14fd27dbed3df4ec155969a669f14db3678ab0
SHA512 aaa2c404784bc9256192c5578f2a29220222205f9f645e9b492875bf00d8ca18531ea184ced8bae622a2de138ef9040fb013cda8a5fa119c9c20eabc33a5820c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2bfde39962961371_0

MD5 f2901e1b5e43c8e27100d0c09306a5e7
SHA1 bb54ea9702bc32d6208cb4f4bc09de6b641b6fed
SHA256 fd8c50ebdb521d449e1ef44d6e2cc876eba8973f2d754a902e99c9b2820adabf
SHA512 016def5f39f659ac21ec14e8312e3a905ae6aede048e767ab0f1bff63eb30546602e74b0ff591acf8775bb39b7e596afac7ce088ae6d9085499002e2b9636d96

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 a3455c4c0e5dee0538519f5fbc917345
SHA1 1049ab85f1d6ecd96ca127f64c01919d976004f4
SHA256 67bf808a1304f7d913c9465159d781848844b13d05470add97396bfb16437aef
SHA512 a50f7a5bea69920aa55eca7965ce0495849b2c4ed67b3d82e03dc1afc314271761b5a566790876433411e909999f23962d689bed3556c9344b4e5409c476849c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 47d4c9964ff3c41d1fcbcbb4005282f9
SHA1 54f4d8ae273fef23d0e35029b997de1ece70ea7d
SHA256 52246668bf177481ff270a3b0582ff1a3785e17526a4ad192727510c493fd76c
SHA512 aa02cb64c7cd94c4f61ecc66d67ea7ce8d198a3d8a8022954fa716f1c27d372dcbef25a1b584a814c06cb5733a7ae730868a2e23a3f1f2c74cc36f4c75a0fde3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 fca99a2a496b3ae248ff61681b1c06ba
SHA1 daed35e11ac7290177acea589a4584cc0680d914
SHA256 32883a2086d630d4120cac0022add6f6e59227465fcab75a54a4ecac25891865
SHA512 304ade27f35ef1dcaf5adc19bec2c73f1c9476c84333eee3301d2b7337dbd5faf5c3573ed41d717a05595cb2378f00070508f1a60dc962f8a6bc09bf2c4757b2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs.js

MD5 9b5cbb584cc4cf319b10def21291fe5d
SHA1 fcaba70ace159e25087e28db3d22f5038ad75b94
SHA256 5270f3382800cb4c7699887a49ba8ffb874e8f11d4ed4df03950c8c96044eef8
SHA512 9b90079af43a2e1b56f5b7d3b8fba8c1d41bd1ed960eed9a53375b7a56c25e16e7c7f6f1df979dc6d3a36128c268402982b44c3926829edb26569126c6b79893

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 85430baed3398695717b0263807cf97c
SHA1 fffbee923cea216f50fce5d54219a188a5100f41
SHA256 a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA512 06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

MD5 3d33cdc0b3d281e67dd52e14435dd04f
SHA1 4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512 a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

MD5 fe3355639648c417e8307c6d051e3e37
SHA1 f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512 8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs-1.js

MD5 7b087cb343cdd9f53bbed0790a67ea6b
SHA1 876ae0b6cf2edf0e299ca7ea4fb83ec8df40969b
SHA256 b686e17ef43014e3118764ce9c2b2ea06fd3b8f4e77d2155a8961769f83ff4b4
SHA512 1a575a0faca24adb3db3003b7d810707a37a0dc10c0ec63b51deb72bb42657191c82da6cb8dd01d847513c4a5810b3c3ad927c9a30fdd5ab4da370bf3b43902b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a0cc2b393d2021a05f24296fae773c3f
SHA1 b85083c62c4832cc5296b8335d19b7990c13f8fa
SHA256 50a48ae8be1a43a1517b95e77edbb27b3f6d77265b146135fc098523c3fb3dd2
SHA512 6a4dd7aa582ca36cfa3bac2eca7778a45b8ab3caa56842a0423515f02859dcf2d36a8730160fdcbc838b1c393aaa6652f1537bb12fd9ae771a412b245179fd74

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

MD5 8be33af717bb1b67fbd61c3f4b807e9e
SHA1 7cf17656d174d951957ff36810e874a134dd49e0
SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA512 6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

MD5 49ddb419d96dceb9069018535fb2e2fc
SHA1 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 a01c5ecd6108350ae23d2cddf0e77c17
SHA1 c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256 345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512 b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

MD5 688bed3676d2104e7f17ae1cd2c59404
SHA1 952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

MD5 937326fead5fd401f6cca9118bd9ade9
SHA1 4526a57d4ae14ed29b37632c72aef3c408189d91
SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512 b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

MD5 33bf7b0439480effb9fb212efce87b13
SHA1 cee50f2745edc6dc291887b6075ca64d716f495a
SHA256 8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512 d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 2333ca71561530190406bd297d75d67a
SHA1 bbb1701adbf1ee17d2b21b12ca05e29291b16a5c
SHA256 8e5d0d7af8b6ab14f5a3bc601c70358ab119919a5ee8a5dc5c2e6310f4164ae4
SHA512 1bafe0efab25fb67ca7c025af3e9282df1384de7723fcda4a58c30d7703664ffcdaa3089dc0284a723ae2320d340ac62ab646196d0db51e87b5edd2a10df30b6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d5c0a30d29a56cc6d2530624f88c35f9
SHA1 24f0cbf7ca3c81799ac99a384de3678ebe7e62a9
SHA256 b1f8054a6fec71213bb92014de1489e5f9cd04e63fc10dc3db6a54f8c2ed6a41
SHA512 574b7bac6a10ea21bc754ac518da9e12912b1d76b4e9ef13bc81ffc667dee6b4e41bf8a2889f12fc9a2b3ed7b5b812357587e02578a3672978a2fdbc09687837

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9148fc56323b09982aba3a82ee3372e0
SHA1 dfc65e5775ffcf17bd203c052af526d67cf2f676
SHA256 eb4fc52535be5f37a15bc7c30d47744fd6de76dc3bac0a0b7fda9c498140cc71
SHA512 b8cfe48adb45c4036057bf9666dfa74d5f43d6bfc3e744d3f1c3c881fd64660ae9ab8a9b7d8741c1f14d55e7af4f5cba58e10812be525bac8c4fd43c72a8df39

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000119

MD5 4f765addd0161b6f77bdc567170fc324
SHA1 d13816a0133a48768f04a310d76c7462af2bb989
SHA256 087a6e9da56ed5bafec7d743b24273d2e39f51450e13db55a663f3ddbb08c472
SHA512 1938d6c46e60884e548d0a690641addb6b46b489c3b198a4527da4578deedb441ce48a0e0604c050a80cde168e0ae94e50f8daf5ac1732d032feb5327f3c3345

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 088e0f8dfb42a1393c3c7acb29b2a8aa
SHA1 bef519b45e997a9c936251bd6e844df89f3aa8f0
SHA256 e4f9aa7dd49bab1742d2e927f6429d9a55132959f08e1938549e8de0b016ddd9
SHA512 dee1b9c213bb4d79afba329a35208606ce5126a9294338bbf7b67e9da276eade224b6f62b0ae09c5bc3f00254571001ad5a4cf940824c3ddbf14780ce48f80a7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 3caaa85373884833bf65e7df0d34384d
SHA1 676f2f21b1ad05bb1d30fd2a007915dd98a9a27b
SHA256 16029a42e00b319892f6758a4561b5f6763465fb82f779c86fb165c1c08eab99
SHA512 1db7db53eab87ebe2c883e4a73add669caa662a44c543383e2d6f95029243dfce887647dcaaf670e595a8b8cac589cacdfc7e4736b8068253a778e305db9154a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9f6e1c73a2ba982db68b670770998ddc
SHA1 e0f57a09831d5b6bd640ca36f4354ddb433bae14
SHA256 b91fd826940b4c8fe84b582b03dac2598fa6f388540564e0c760b887f7f612be
SHA512 1fbfba60807a2f95b5f2b45348cd5a8f370b31d401089ee403fbbd127b746ee4b75f4e978f1ae46911eb8d7f56da83942aed874f375bff61bf15e12bb5266709

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\991b53d0dd0b50fa_0

MD5 4d72174568900c8e9818d8ad961a47a7
SHA1 ea1a4a7ec99a7b5333686e318cac77a9e7e18b96
SHA256 8fa2feacf95060b3a700efe525bc84e00f2c36ec252c569a0c3c6f2cbdb320b6
SHA512 b29d3e3b57eb32c027622a9839c2eb9b7cf853307c7f7236e74592e51bd2a8f221a7722ee33e1b3b3fd5d7398f1c98f21fd6dee62a24388eecddabff72275e42

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\28443b083fe97e91_0

MD5 29da425d12886bab89ddd0be8f72c469
SHA1 6d7f2a212a2ea9386f8c42d133dca8eb4a4d9be7
SHA256 d752d5cac549ff71c229b6d0990e5cc18c8af5faa1e5b06acd7f6e121119bfe1
SHA512 22894a8d037c904bdf991d30fa0e3bd086cce6882756a7ce6cb4a94a31d1acd8b686703a14aa01aa934ccf409f6731f4545b2cf68c85234c603d3fd3ed1b1264

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0dee1417ccf97940_0

MD5 a968d12f66edaddc485e8de70bc0cef4
SHA1 6e731b468bbfe46ee2dba5fd464da1ae77cb14fb
SHA256 75717e066660ba14953d3dc482257a78bb08a1297fa7082a9c99d50410dfc8e4
SHA512 c7da59d8fa351161b5c0e04d838a142093310e8bb6d0c353e75128b23a419c3e8027a2faa63c72cf74c5b4290f5ca7edeea881b8823b121c93a7b474038541a5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c500f77eccb2df55ce3abdf87e905af5
SHA1 ccf398ca48f435fc61307afbde02cd042c4fb8ae
SHA256 6daa4510f273166f27773cfcf750c8cf17ce5771b5df8f0648464ef02d22eb7c
SHA512 dbd61fdc39729624287bcda0cc78958a021bee5a0c3131db696ace0e1e767e91685241106f7d11f344c1543a7963e1f6695d58876b2d0d817a858453945db321

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ec8c55bb8b7269863b69e648c4ce057a
SHA1 7ad51f283cf3b299c683ec2570d786a92d30de4b
SHA256 3e2f9fdf4ad294a61c39d5c52455272c34bb3a573721b0dfaf1b794d14c70ad6
SHA512 1d079bfe95a667bde11bde570e88310f398df9412311a45f6bb46958fa25778cb63d3ccb9c1f940a5e9d48dbc52a1e3eccfa5df2807ab16d43926f6628a27722

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7346ad007febfc8b_0

MD5 38f2111ce60d5b7b1555ffa34b065a3f
SHA1 61cdc39d82dfbbbade63b97049198e23a2c6498e
SHA256 71c0f68ed2560ee0dc1f4fde55c3da96380fe0057c46c80281fd93330590c4b7
SHA512 3c9a1ed80e084dd495bf327ec4fa85bbce1dd9a22c55eb59cc9d1924f1c980dbfcb280fd852d2a85f2a8612575ada05290c0168c21ddc460bf7ae5bd3fff1829

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\db1c5e2bf2d4abaa_0

MD5 a3e6be4620a052648c76475ce8d5a7ad
SHA1 5f1f306de74692792598a276929c12abb2c003db
SHA256 b92f3ff331bf0bded356d1bf0967a04f843f4ab36517ba16757865e78bb59e1e
SHA512 ad6f6f8c7097adc3be2f2446edaf3d191d2839a1a1338d40499c7aaf02142cb6a7665576cf59bb76e7eee39054c1287a17836167c40abd8e6ea77d2c3b501a7b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7edf033e5010ba59_0

MD5 0a34ddcc7646374f1bddf7afffd3d366
SHA1 93c78ce4fc87086b09ac3a834c6321d21a542d9b
SHA256 ddfa0b7707dfd5415c03017848aad82eb33c25d8f0c164d5f8da9c522b5ed7b4
SHA512 aee697e40ccedcc8eb85f94c8fe11436ed864790254ea3a0a83154f6d5d6b407ddb4cb4579e66931b2e531b7a8dedc9af703ff3e3b7268afea93c9ef0d2eb44b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8588d7877b5b444a_0

MD5 8ea28410007d1b0967b49abf795d6e0d
SHA1 5bd10e6d14b732ad9cd1a7135fb8f5a7db3ebbcf
SHA256 ab25273090af6c95e7b5ceb9ef8b81e84b319db2c5dc3577a012fdee893ee417
SHA512 b683923f9809c1b1a936913ece5ffbf5dd414eb953610d4195a62b2a8aa19499b3c0265a3e6ba1392729e18667b943fcb2b1660af65bef8c41ec7d31751843fe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c631f3940de42745_0

MD5 931dd4a1906deff78ef4f82317dc70c8
SHA1 369f23b48e781d936d93d40a156b1b689ab4cd79
SHA256 df4c9401e52d697cd4150c7b5007df5faeab60a63f7344487c456d6a69d39a33
SHA512 da68c8617846bb52f9a970640707a2759c0442eabc8626a2e0464b3b25e5223459c55d9c1bc0ce6d9ffdff8b4053a0d7c7bcced709648d113ab67a9162b57ae5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1d05092c8579751d_0

MD5 0afb812036a0dd437e021b6bcd83c3d3
SHA1 af0badd986321b82147319bea14be28caa464b24
SHA256 c157ba77b728f329d7bba2c3d846acfc2aabcf5ef11e4f5743e9cb83a934565a
SHA512 4bb23baa06f680af993c6b96dc52050cb7ed4f227492c24cfae001464b1f191f6bb45f2f40d55dc09b43c71115b13054bf462b97ab9a17200b8b7df874687949

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 04d42035426084fb9c5c672432abc071
SHA1 45802dd6167d6dfd1bd1c96c1eeecfdb6d84a57f
SHA256 d12c37780f0da8878666a6df4909f154fbc81518a7ec23d59004a1b586bbedea
SHA512 1e95ab89714cc80968fe7fb53e39123c7bac53436e4f81fc20c530bd0db924e38abd4f70cea31213c78c565de543e2a8cdffe93350ad71a37627e024c5b1c35a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4ed2d7d13112e675360612ec9ab6cfa8
SHA1 e63a9706eb9cd80fb199de6521ccb489907eba68
SHA256 ac69979f876a0b5ab504e54a860af89cacb16c8189e008bbc369fa885e9c6ee5
SHA512 ee71c141c8077d82408ba66d256f9bce800be64ad72497127304c4e054a99b12ca51cb8963e866462560066c2529fa43845b7d7c6b92cf4310b77f178eb19d8a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 566492cc19a8cddb6b1ae3556e83ad91
SHA1 02340e498e3b25ab113a4a29e5c557b215df4d08
SHA256 b0c799cdf4e36071af9584a7aef17d933ee29514614788ab11d0b362baa39b0b
SHA512 0d641af926d3bcd892e384db5bb84a8ee083d1831cc6bd47613e5b9b435822cc238fdd9b66b605385205849472cda94ca65e5e79f73fa3bf72f01e37b10ffa18

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\76a056d9f3afafb7_0

MD5 6c2e76b6827cd6ae7e839bec5fc15306
SHA1 c2206598193ad488634d938da43124b20890c768
SHA256 2fc5c079afe56c68b3ed23eeb6a6bb12059f91983dc619642251842082841a5f
SHA512 56b087c806e68e47efc76f540295cbc9c351c53e59bff19d5a6dee60ab1292e3f6daa05fdfa26703c95902c166d496a6c42c4879d53b6610e274325ec2d24dea

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 70708c1a33418847a14c0e8426ffac66
SHA1 f390ce4c730cbca94ea412fb9fa5bbd53e8997b6
SHA256 c5068bfe853fbae3b09c173645ced310495b73cebc8304e2a76b7355023558f7
SHA512 d74b027bb9c34a6b9e4298547564ad90522242b16b05a5516398429338a85d0d90c897ae8b157b168fb90668c8e641aff8d63a425f877cc5516ddc28f0abdd6e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 efcf44adae88542ba54f7c98f7f9cbe3
SHA1 5a2c85896c0f4fb8cdb086bfc5cfba6928f253b5
SHA256 7b0f209f93410e6ed86c87fb89898d4e9ae12cfea04ed970e6f50286d85c3385
SHA512 093aaabced98dca61af2e0bea45e398f547cba65d9a807a9e663f57c3a91518994b94bd52e2571f860751072b5c8d29ac18280b1fe628cb2eb85a7709b65b7ff

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c09aed4ddaa7e76613490ce8eb22b860
SHA1 32309887fd09860f3958bb25ae97398e4a724fe0
SHA256 f3d4892f865ba129dfccfeccbd830e41dc4a20ecd4692cf5159501cba15b075c
SHA512 133bd533b40874352b7003d1a373f7e4118939b0fb24070eb43b02a899e418e94f372a7262cd25401770832b130dc3b0f1bda2f70f4038f4a24f93ca9e64e511

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 13a5d7830c2ff47bc380a72b573f98ac
SHA1 2693ba12ddb13c33207415b82c416794d5670958
SHA256 6e983778f5822148cca40733e6e9d5a4bddabd871bf6803f213c4c198f63c16c
SHA512 8567bca131ab9b8f0518eae42db30c21d8a1946605256bf36bde89a7eb301b626c5836bef8d9d616240e027838b54c4937e5474c1bffd1f7e0cbc243a9724713

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\prefs.js

MD5 614e30d4753d6d42b6c8eaa2f269fb3a
SHA1 2859be885e82ca44835a478f634e5449bfc13052
SHA256 f84c5d4caa477ad887a289f8badc709d16f514e23a5c84e626a31c1227190a98
SHA512 44059307c9e94347c8c89426817d41589a99015430044b9907f7bcbd884839fa93d908760c4b3d1672fd6c71ca14955e6a1b0d35b6793a892333ea3b465d3fee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c9b54331972dbd11d71118a646dfda3d
SHA1 eac4433be5ecf2bd7e4a8f298b1046212df3cbef
SHA256 87aa53b075641128e5f6aa8ac3322659ab02bc1ff9da61f1ac21d447af11ac68
SHA512 96dfe16ee9a3c17959c994040b01862443094cc5e7c496ff11f98b0f9ab34894f4e2b1b9dc0b2e5c860db3dcf9e1e65e4e41bd01f72d11c9d3ed195f44e05428

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d556f370c5c123ebce017c826f876792
SHA1 2857297d398ad0153b4c815164ab448f2d186789
SHA256 c05e7ad23acfed9cca0a75d11e9e50cd0a2bc26e17a7fb6c32425cc803a71d60
SHA512 a954860a4fbbe33087dc849d44605853b480b36d53d173e2f340a2fde2b910527e87bb8e5bbe1318e0a18e8ecd2d8cfbecda7fa3d9c16cb1d22893487c820b9a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 08789fb317ca95c5347af3c49b01f99a
SHA1 aa450209f3960086fabe9594938be3a4e83c70b7
SHA256 2f41df0d735afb0f6715764e0d192c074b22c70105c31251c17f04c1e2efd0c1
SHA512 39d150f60f4bc51fb76b9abfdee3be7f0bebafe0c49a1703e554313172ee17e10283eeac888cd8269ba93b9ea255defd834cf9185adaad8de5f73b2f80a3e18e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 1dfbbbc3b306fb43e9f227f2c76ce0d3
SHA1 b1319ed8e84cecb02424dcb06f4c63cf3621c456
SHA256 82914852201fbacb856067ad69a869ef5aa27a0c5523377e07993940ed153a3a
SHA512 3430405dd4a43aee732950f34375ebe3f6a406ba455d0342a223bcb80195c811d2832b53dc13849fe076752d92dd4d254334d75658d05fe0e1250c5f71809020

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6c2877a2b00ad60c63e6bf3061695332
SHA1 95288e8b7aa008f1bd61b761863df922e785099a
SHA256 1c20300421d6a8b17ea2fd763513a0601e67db1c4bd7a06fc93d0d0df1d57ee1
SHA512 33a6b1d277498eb43b0097f7c7877417d062e9e5a45dabc4d4ec65794e80881e53c3b8ce022831d203cbaeabd94f86b9b5bbbf66ca6754d3823c6736857a6bb1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 48062e14f3967f64b882ba05a5b12400
SHA1 3aeb014869b1a3df6f2967eddec504f850e8c271
SHA256 61075533395ddfdd8d59761343d9b7308bb1ccd2ccc05e1ea358ec6999c96d5c
SHA512 c5311f90aae94f039b5099e0c030a98e3e0fa77be87f3ceb2d4f54c06f915d297399a49c5109b679e6d285a4bb64f5f98978634719cf75c3be10862436f2ed41

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 cf63d0530d4bc4999935cbeb2e794913
SHA1 98e9a5cff6ac53ae7a917f97cc2df12223a84de5
SHA256 0f32a117c0ba94cbda6f217dccb32df04b4dc9be5893eede1dc13dc2fe524207
SHA512 5a38f314f71301bf5890cb1b98814dcd0b0a6f7c08c91fa7cc65183bdca2df1ee04fb17cc7b8fc16e9f03816d5ad137e5f678b90e809c26350495d107dbcfe85

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 84c62edbe580f83a2972183058786abf
SHA1 9121763219a10b6415600d2bb55d3be50973bc1c
SHA256 835784dee142302c6d263f39c106f817c3011a6bb469aab85746637ce521e727
SHA512 ec7591fc2a4bf79adcd95e6f63f756c1260be7dffa820aeaf6cd9447742375d488dd0c4506f1c9e95d453e794e8930d77c6d036f8ba5010157979d3c5e12246c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ebddc561d3c7fb50056daacbd38cfd59
SHA1 1d8467e181ee855d537e56838e0970ef3a03891b
SHA256 ec3cb8f154b1259a8e426a68e0e6aab2ef85cc0b9f9b695358aa038f17df13be
SHA512 c36b53733fd1357b62dba6cf33e1748846f7b566beb3c85ca29d6fd1b87c55410e097405c69b5a63765cb2e2dfd84de9f469701077fd6d81ce9d3f6e2de3103d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 fc43cf2a4b5e6a9ecf0a3a2f21a9e895
SHA1 fd8428988abb46bc86d1f7942a8c2d1023073828
SHA256 69654350209e67093f7fa96b789e2ae5f57e0e4a3f78a2fc3523c5354f251226
SHA512 40c331493cb0a936b7fdb82917554e946be2108de40408e8e1dbde9d4302023407b4a18eb5e7e38678a9aae2fdd0a36c128d29c0a2574d27f80ff8f8ab77aa34

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 9b13a4466c59706b4e4ca6b4e63eaca9
SHA1 c5f83cc14fde40400aeeb905b5e88286544c3f0d
SHA256 b3843b74f26c96886cee5af84a77b7baeee707e17ecca165ab44f02919ca1498
SHA512 4b1486ec601ed08f9bece8e608c62f3c06bf699dacdf35678baabd4d3453dad789c857902d0bea32161ad190751b84181864f963f13194e8474490a00515f399

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 990a56eb64e4c986f0356cb2f798fef4
SHA1 32c5e2150c55d5594c9ec403597f68d38dfeac7b
SHA256 890aad8848c5225ec828e90da23213d0aad6b7bdd919fb43c880e34f8a03f0a6
SHA512 761b2ca6859e3c540797d857a25eee786f607cf37f3ae8949f95004b399595817f86975a5240712d9e067e891aa59fb1640b3895d0eb8cda44c4866f1b2192f0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 eb4afebf31ff4b6394aa9e79fd435da6
SHA1 ae81b2f7aefab04516e028faecdece5de21ff041
SHA256 76057b17c8e0fd36ee0a0d2af721ab94e24194ba4a99a080aca2ec9c084ad71e
SHA512 a06cbd3dad2f578e1d32b698e0f60b6d7c92064ba1b553821318254e4f32b8f0ecab402e6e4fd387aa2df9262142f0acaf12c631374c93b967fd2c71c97c7bd6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\f_00002c

MD5 43cbe3af7a99f859fbe405a4416a914a
SHA1 cbaa2eda4ed71a3d61541b1fa80f9870b4f9b810
SHA256 d2e3669d2812af7275bc72be47edd55663a898b251d02d0ab57e18d929906a8b
SHA512 03fed245be777e2046a3b2e7e702adad5b31a477104894409c8fa2a0f8357d1967c95ec53c8b5e0f94607d9e2bb5dad01ccd282de45da0347dcf59ef91a33883

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 4ad757204d08297a0f49b097997e93a6
SHA1 8bdff3ddfdfaad1113565a268d9c6e67cca82fcd
SHA256 3fdc153883861eb538b5d70a6e735b889cb2cedf4496626d7ff0ddfe19dc7e6a
SHA512 ccf502ea43a54157cea9a582643e79c7d0381bbc519d91dfcde04b7da1b21b42d7a65f2d0c519e2b6721ab79ad51ee5c4f881f0156f1b753b4fa6ed68d04102f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f1eab36fb8070f8c64acda474f0ab6b9
SHA1 3e5751018cacf54391dd00017db0b539d5fde076
SHA256 98ab1ed571a3caf8fc2e7fd87bb61ef05bd64a5c6208cb5b7c94c026ad1244e0
SHA512 4667d83c3c4432c65462152b86b43b401c59c26eb6b621558aba6a6aeac2c254616070dce3981053ffc385938ae4d5fbd2c33d20976265f0712b89f58f488312

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1f62bbd95795ebe84bcce561548854f7
SHA1 8bbb21f0461d550de7ffb6a0db065afd765b33e6
SHA256 11acc307dab656ffe8d3e5c48c4b9bd5f77d97d858764f98fce3d9d9d735c92a
SHA512 19f01a8469458708129d0a8f52a6b090ba94e349781e8c716978f12a3f3d63cae33e04bdeea18eea50b1b7c3f357ade95c50b2639a4b5e80abdc2c5cf123743a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f86649bf2264928d96604c724a43b7b0
SHA1 444d1973dc340f5f37a2e91c9f4dceb17cb92e5e
SHA256 55dce0b289853c32ce1c756f0027425fa1fd1739a6a7664776418d7795ab72fc
SHA512 a3a5703efadd1fc48fc2bfe38004958937442cf86c507073997864652d468ce85bd50bc36dcb5220e0a3af000b9747e0ece4b6c19b9552f547228f26fd7fa4ba

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 2b06a02be8d56799a024962fa8716777
SHA1 7dfc606db55efb53c4e5f332858ffa191e8bdd72
SHA256 300282113d9044f61f87cfec5c9251f144dc4ea9d8a47d92c65d14279978a86c
SHA512 39c4ce02f2eb585d14c34133fd911bddb00871c10ed02e672da4dce6532fdb4f2eb4fe7b048543b12d8da7448ebb1e6f75ff09055cefbb6598ddfee3a44b0daa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 67e519ca60dc43a424f6dc0c02a1dfea
SHA1 dff7499b3c9f4ab40bf26210adecd96e6a9b279f
SHA256 8dc46d692dcee20d56daeceff2e4510d71ec0f92f5a4807c581a56097d8a2675
SHA512 668806c8d78fb9848733a2c04d09054845e8f57a073c29964a694b513486ed7c15f49042d72c9e86a9633e2729b745e99ad243e9f97cfb06ba5460ecfcc722f9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0b2b8ccda7baaa809578ba23099280ea
SHA1 0d34a1026d21ea40bc9587853b4dc62f5c19a9e9
SHA256 6779f8eea995eaa9243400c1beea1aed3ad5983c5454021285c0228b3582e806
SHA512 1f6f1c508af75d3684df7b33263a155863f537c10ece76e200f7a5501cc71f0530edf54ed1c237b0db4427ffa457c6ffec2a7d73edb0e3778688358dd5c64daa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 b6d36efeeefef51145476c67143dd3e1
SHA1 cc5747eec7ed747d61b9c49d080dce94e597a211
SHA256 4725cac7eea732edc1ee2df1a986732a77bf842a34fc1a84bc0f9fd4e84e02f3
SHA512 5230b30fd7d008d282c65ea041a488b622dc6fed776675dbe99157662578afad67cf6ada39f2c5b1e071db50ef3191368293a0fe2e55d8c37ef7b381937da731

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 003109dd10abf773e2168006612ccba7
SHA1 02eb618790d156357a1db0971d5871f89ece4691
SHA256 f833141ddf831c971f71f802368b5ec3b92f07060cae936160fc1b817de7331e
SHA512 d31f6935a1665f2b58aab96773080b0ceb2692f1cca97c60b99179843db911b8f4be09eb0103c8aa06bc652a2ac7e1ba3cec5f8b9e686c80aa9b0c2ed55a3443

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\93b010713836c202_0

MD5 4e5fe90e913275b51a422b56ee028ea7
SHA1 ce94340ad7711a89beabd8f3e1aeef40ad84ac40
SHA256 7a3c05164a0dfa742968acf1c24a75cbd4f670eafd466a1a3feaf730dd8658e0
SHA512 acd286120b9787e6c510594277d2399cc4c2c4325f341c55d64829d4a006d3c49cc2f9d38e94efc90923a4471b2f4a58e76e1288cb805eba61ccbb88651e5b97

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6e95c30f5f083410_0

MD5 1b4698fdc61fef8288cd286359548372
SHA1 b2e7bf0b66832140d88e219a7f1315568c22ada8
SHA256 339f3000d1a86f8aae024af8ae873bdfb3c84e4deac17b24929db4a263565990
SHA512 e470feb2adc1a69ef6c7b56a9d9bfe5661993d2e6ee7d31fb7dfc9d1d7ae62f0fa4f9786531c93a06fc1f51d15c1b3301e43fb0aac75331d8ae4499678b716bb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5058e8df2e43e49e_0

MD5 950d500bbb3a6b645e13aba4d66227f2
SHA1 00bc301d92e462c87d821323dbf6e092d8d4f0fd
SHA256 831959a37f55546020b4777a426a062ef2ff6da93397a4efab3298befd7adec0
SHA512 e67043f00f29b9d9d5fe13f6f873cf0b9dd468bb9b98f49cf89d56e5134d27726da90e51af2f4ed012be81595d7bb7e7df335a5f29325047a466e24cacf9dfa2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1cb8462295111e7943f74198a1835699
SHA1 dd4676079d0e9c46f09bdd81d6f44516a0e68e50
SHA256 f4743dc9d2d54de95825744cf96d3203cad0578b0a36e3d78a764857896dc095
SHA512 21fcf034f0bedb45e15f4419304680c16669dae39e35cb93ad1b2350f77afa6adfa2cf7dfeb931d11b4d8c1b2d08e632480533dad585e42b27c192c09d43a776

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 5223cc1eefc0b407f46aa07691e4b960
SHA1 0c72d87fbbf623be08d931d0792229f0e7090bbc
SHA256 0eb2ecbe409ef0e56bfd6a6b4ed5cf89d0a8c0d2f3f1d63d45c0419cea22e378
SHA512 4b447cdd4a5f25cf128ed70d35be7647cc2e42e4d5d6825a3bddb6982a699d05600d30ae4cc73dc2866e4004347d73ade0c9e5bfb63ebf8d61b7c79fc1a996e8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 2091d564dabf36f789fa776df9fd013a
SHA1 fca9bb18ad16ede939702d64da3125b106d5c294
SHA256 9383aa7c068644c0aad4729eba0e138cbd203b22f3ef38e237ea48eedf9c6270
SHA512 98322bfd7ce72c34fe5a6ef3299242da113b99cecc159abe28085e73fc3d57ac57b1fe140288ce75422d76e9a65abd326fbd7ebc6ad40f7484cdd9f9969514e2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 cb9fc602613db668eacc247fe497e1ba
SHA1 4f6899b0e6794deb9931d21247ae84f179a9c8b2
SHA256 d73e80cb0f8f4af113643b5ac89ee6d7038cdcae7fbdba49edf6c0f7f3f82112
SHA512 c1493af6562a15ecfa84543d2447cef7a78c61d95a23d032206a752fe2913cb91afbcbf9952d605f3f5ed462b659af957aa72036c9bb5587a796611c30ba5286

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00012e

MD5 4f6db48223f79e0948e5b3d9f3c627ce
SHA1 fd1d8b4be609b14b4b47363c3df6b7e3fc5f125f
SHA256 298c725b5498415a4b022a97a46cf90cce375d163e5ffd6dd672faab467c80be
SHA512 3e1bc387bc0802ac011d44481c0cbe713a86e9407947f509fd78d741473f6c0aa932c1c51f89ea411edde25b20a85d4439c5962ec0410ab3b76e443f9dbf20c7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00012f

MD5 6aa6fdfecb444971b1c76fd52e765ad8
SHA1 d65297b26d236692ea2f5916bfec9f634f42d315
SHA256 3f1387052a2103870bfcf84a314ed5f9036b0c5c214e0c1d03692f4f1eeef82f
SHA512 00c39657dbaa4e930abd97c425b9dac64ebb05901ca9820e0897d59160269bfd65d325dc938601370b1c1ece0fcf7832d63e39d00a184ea64d84ede9857876a8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000141

MD5 44373bbee08af7c03895e971298aafa3
SHA1 28f17cd77da31d75142ed090187e09a3e6e1087b
SHA256 bc3b93428ec6454bbc8f8ca634701b3fc5395e2f13d90ab5abac18d2e81bd488
SHA512 5c027cc8b7447a3135ffaaa7fd94179759b45cf93f87911e9c468b0708d47beae163d9a5cee450129c11cc6e347b7fd0a752fc3a0c197f9f314dfca5b572e5a6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 cdd52a879ac9d3d1ab2064733db0b2ce
SHA1 3fa1377d1e6634004ea7f96abd6e42327750bd18
SHA256 2a65188a8ad264b9e0817122ccd7082e124063fc404fab014e19cecebdcd4955
SHA512 d77b86caef36453bec4a353605097013b4b98298234b3a0958a510e9011a4d09907da3ca7460e540f4dbfc918a92e5be2e7883cdaa91f609b5ab65e232b877d6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 fdd54f900fb0fd768334a739c3bcd414
SHA1 eb74be56fe2a099b1ac2ba412293d6f45cea4f56
SHA256 a02de411fc1306001c8fe746ddedd367dd78b06d4411fc3af06792aeecb6cd0b
SHA512 688bbce8eb8827263b18ef94dd81949d88e120338e6b9957936558fda2e2bc2d32b89b9aa98fdfa0340dce953b9dada5c987508e04dacc33abfe013505975983

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 df09a7ad3842c70dab612518b4427326
SHA1 f19b1774a801a86099e60decafb02d574351902d
SHA256 600a41fdca54648fd699fef6050af12e409beefd7ccf4b6b2b1b6b52185491a0
SHA512 9120d3cb9fe8184a0d2f4f5cfe2fc9d4b3f3c7889369f5c068501fd2dd51557226082272e9cddd1f1c67baf6091127d226ad3c11750da74088a272ff2adf0a3d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\17e8cbe5caa230a9_0

MD5 0667225266be2679a58e853f5f1bedaf
SHA1 51289088295cf7c11315a43ca17a77b8da301d14
SHA256 cd6642f964aad7bfa265b13a04e81fc71f7da21dc928092910eb247ee6fd81ab
SHA512 31380317582c45e25e232a71940b2f3efbce9611921da542f1fb060888fb9991d25fe5ac735176bef25e08cc19a44134cee9d622947ebd8bebe21c045c318824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\20d1abd02255ff98_0

MD5 6f863a76aacba78952e200bb8e831a77
SHA1 9148173730351122e993c8f2ef311c6789fe0742
SHA256 e1bfd9e795f85a95a049b41703b510431659649b59b56bbbd776911e17ac9773
SHA512 9a9cf138bab10dde4ec6e4ddbd88acc55e7877019e5d6912b8f09e55a711d90df4ef6bd2751c12fc12abc663879500d7d8a1ed0f038f56ea5293840962ed0f33

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7a9da92c5a440c3298c544ffa204a53a
SHA1 5f5f0e59f04863d88dbb5cf164e2ccfbba01b83e
SHA256 fb961e03f52449cd8961aa5e5322724ff0688fa0272ab491067dc66f1aacef1d
SHA512 0bcffd8d6d20f713ef8fd22a1b1f35ff37763b52afeaa13664bb4ae20e332b7bfb8d7f026fa9cdfd879efa7a7dd1a18833ee0e396f902ce3f30eb49d995c5911

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 8d6a078b64566b62a843d42e2000a82c
SHA1 bba830c6be5f6cec0d67f2925daefcb2c2602c00
SHA256 d784cd4ff5fc9134018a4e1ff1c0df4786a18a7b076b5fed63f0af12795d4a31
SHA512 0ba71aa7783011d9c0336229137bf1428c64391cde04d79d49d0a4680249f204d76fad78fafd140bcb19e24e26c2051ae9cde1262c3580e3b84b74b629a0c3dc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7c303354b19b6a8d8c008b82b6a56ef0
SHA1 602b03412f555b1604e816b78f986b5f282e0df3
SHA256 bf4f0270842f6d810039b4a70e6ce7b2ee732a5dadfd3e0d757d20b16db0544a
SHA512 0f3c0245f0c0f2fdbf809fa5d1e8614aafda96401241e58622f10400916cf8b3d53cd9c0e9b26629c865b016d284cabdcdc2b230f52f5fb905eef471f391d976

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 564ceaad2a07b131131711100ffdbcbb
SHA1 dc0f19d1ac5b1e963aaade279632e0500e0152a3
SHA256 4edc867a1cf822609f5eabcf1e0141726cfeaac3b8287df2a55ba926b56c5766
SHA512 7266a5f189d32fc62406b5185ffe8b5efcc310c240f0765b685aaf140aedff47af410f4ebfcd775b2a2e23a10c306f05f41b59525c8351dfad731e08adb36781

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\doomed\25137

MD5 7ec7e33877ec315cd5cbbd90dd24c781
SHA1 84d0a7442d6c9999964f274a688a9e510d9b606d
SHA256 bd6b2bae782b090d044ac77809dd6e8e416379f0caa5d132a54a8a7cfd657a32
SHA512 6f6638f79f1ae2d5510674dffe846e95f8577144b21ebc16daa3f5e2da858ee313504efc5f719e48e1ca921a5102a4c0d57dd156c3e475c20311085e86bd8f96

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 f0603978756cfabff625fd6cfefa4ffc
SHA1 4f0fc80ae9d730ed45185b693205874e1cec5d4f
SHA256 ad90152e1c57ca7c5dbf8bea2dc785d2e724e1ad6c2885f85f734dd6e7ef4e83
SHA512 a72ee385e4c95c1cd4bd65362d9f1474925f3139c517b3944a970d0591ee548aebbd6973175863f3d4c3d1961d55f8e49219d0c0ae630bfeb6d244f33aa2d6e9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 46211418157b74d47c19f3596990d330
SHA1 516d5069744a9ffd0d5cbc16138cd2421373f263
SHA256 74df15f46e270ff6e71dd5b482af63feb765cffaf7a5e344342a4cea21855807
SHA512 afba99a043bff156440a99995af9735617a1be4bf57c56df919c1b08f976d861d6f5b78c29fb20f90b82615ffdb73bb32e9aff813ad0bca6e0714155d03612e9

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\6V43E52H\PCOP[1].ico

MD5 6303f12d8874cff180eecf8f113f75e9
SHA1 f68c3b96b039a05a77657a76f4330482877dc047
SHA256 cd2756b9a2e47b55a7e8e6b6ab2ca63392ed8b6ff400b8d2c99d061b9a4a615e
SHA512 6c0c234b9249ed2d755faf2d568c88e6f3db3665df59f4817684b78aaa03edaf1adc72a589d7168e0d706ddf4db2d6e69c6b25a317648bdedf5b1b4ab2ab92c5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e94de1410001e5cc5fe5d18b2c5f4592
SHA1 350efdac874fd31ea75c490efb5f441d05e65e78
SHA256 ac6836bb66e6a6a4fa44eb4f4266a80b11577b850c8b5a77d805db48616dd13e
SHA512 d44b322410c10fe3b87b80fb66ba1a4971ec8825a6b67ebbddbb3fa570b1ae1a2ef9a0db62e767e72f4f5260240fdcaa6921db8268b0f46e0c3ed719a99f52b4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a207b3ebe381e389870d6122054b99c8
SHA1 e0b5bac5a3411979ef40265ccd9c4187dce4bb66
SHA256 5a526019a87de680ebd2d167df0e6548af3cdd689d7760d867c5fcbc5f12fc2d
SHA512 318455e4c217db3e370baa636e1ae094fe00d7280aaf2965c7725c4face5430ad59f589b97f038f51cfbc9c73d0cd939bd174e4f992a03556c8f0e8f61069245

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\RI8T0NAJ\js[1].js

MD5 0fba80dfb5f9179e0a9d9aefd01baa25
SHA1 718c5f70811f17e177e2f47e2bb12a5cabe6ff9f
SHA256 a6146f10bdb26ba0c30bc3b7a4b2408cd141cadbf98caaccebf1b3610f948543
SHA512 21b15d953c4f655dd76985a9bad53bc24e2d8b586e56dfa400c8ebe038f635fd513a2c36a1614b7bc47b361b4ad56a4d336462a7eb8643f21c1cc9a58c468100

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 367f21ec8632c6ed446c2e20efab3e4b
SHA1 bff208d82392b8abb94b470db557940caaa9dab7
SHA256 81b0357c1bbeeb1c21679d36ee1a7ecfe53b898d23f44912e2b89551e47d3c2c
SHA512 b1a3d8a8eb75899fe241f77fbb55ca363a4e6e2f23001d5589b8dde9871890db57b2fbbdd41490fbf87ecf79cf7a080e4178be6e30b795949f5b02ce1bf0d9a1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d97b8acf8f3a819dba7c29da6e453c08
SHA1 cc23ea1dc3aec12781484cbb79f8f2c5a28c8e49
SHA256 dc032ee9e90c2423fe9328f2cb9ef4e60a19c4883df18c4e1232426556d26af7
SHA512 504aeb3130eac9725c5f6183180a3918f894208134cfac646c2fcd4774e6069eb0d4dec380fc2e003ec6045394bd232584327454512b4542a79a7cd2f91648c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a536fd0d92b0847a07cb9e926dc8e95b
SHA1 aa8e562e757a889b982ef454c6fc933b2c64ac23
SHA256 e4c946e10d0162d2cb908e28145206cfd66b34e7e654c2a90e6c4c3a3b0f1938
SHA512 07063cdfa14c012c63f49ccfd06967d5b06c4bb03b1bd85a4f48e9d51f3287ffde1f7b9979676d9701833370d8f2bfb830d1d9b0b926f1c0b81ffc2d971735fe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000135

MD5 ff2f5ca154017b946b0fb41fb689f4d8
SHA1 c8734581728346d0f3faeeea89fc589cfdbc8cae
SHA256 acd5afb29d1b87e2dcb15e518283c3f8311aa3d74c3452a1c88837ffeb3c3199
SHA512 8c23296846a123c8a9e1c07443ebe620a288c9936e18ba4643b8b1047f3fbf58dd133ad9d2edfa57a4989bafd3481a5bb36cd266d8f2fa1ce7a4e2f05633a39e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000136

MD5 c7abbc9e65446bde7792aa1c1b573528
SHA1 c4de48491225b7670dce31fbea742aebf6b7a53f
SHA256 3296a975e45bbaa05d91aacf13090655559a31687d0c1cf7edb6706dfc1df072
SHA512 6b7f7b01e2bb792d55f94099ecbbf81f7e36bebebc02418f0bf85b90cddf2665acd1ace96ca488e4f51da4552ff823eeb7852be1fa095244dbf9d3a4ea6646d1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1d0df024be3d0497c98efba8765e1b11
SHA1 0ca5dd571e0bbf6d2ae3df161cbbeff77facea08
SHA256 23007c7711f4c8867338fe105b4272f6f70d4f9d5c3c547fd723232afacf293d
SHA512 d60e76e939048108af879ea1ad479111072f9526dc39ab7a4e00641ad58e42a8f7bdfcd4b68c4c4fdf15e0d2b563e9b6606b73c234f12e0795eebcfab9c1702a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00014e

MD5 900e217361ce1f52ca334eafa055ede9
SHA1 a744d334b154b6aefaccf685526156cdf3f82e7f
SHA256 6e50c78089d18760870450e7e82bdaf56c75ef916b4b9e06ea3ee5d74517a9bb
SHA512 90e568da4878070c82c7c0dfbf617ec6524ea61c805bda867dd173ef85d8026618aecb5d38a15e838952a6a77b6326caadede433ecd401a910de760b610033fb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00014f

MD5 1cb357ae9f1541d4e0317f5e1151f03e
SHA1 97d228cb80ad0e3e825a208cba9a22a9b4e72c9d
SHA256 02aee346bf43f006fba08e5e833dc7474b1086bc45a3a512b46b726369d5ada8
SHA512 087ecfd36482a571dbf2fd7bb1ab17186d49d15cf286333b4ac7715cd1f32c4b8abb9b7685fb2f5bef5e182be8464fefa19269a85c32ce418edbec26d5a87f67