Malware Analysis Report

2024-09-11 04:03

Sample ID 240620-xllh1swhnq
Target app.bat
SHA256 3cdbe34a17347c64ca109be1af4fb993e02c4f0449fe4aca88a28aafc372b440
Tags
defense_evasion discovery exploit persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

3cdbe34a17347c64ca109be1af4fb993e02c4f0449fe4aca88a28aafc372b440

Threat Level: Likely malicious

The file app.bat was found to be: Likely malicious.

Malicious Activity Summary

defense_evasion discovery exploit persistence

Possible privilege escalation attempt

Drops file in Drivers directory

Checks computer location settings

Modifies file permissions

Loads dropped DLL

Executes dropped EXE

Looks up external IP address via web service

File and Directory Permissions Modification: Windows File and Directory Permissions Modification

Adds Run key to start application

Checks installed software on the system

Drops file in System32 directory

Drops file in Program Files directory

Enumerates physical storage devices

Suspicious behavior: AddClipboardFormatListener

Suspicious use of SendNotifyMessage

Kills process with taskkill

Checks SCSI registry key(s)

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious behavior: EnumeratesProcesses

Enumerates system info in registry

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Suspicious use of FindShellTrayWindow

Modifies data under HKEY_USERS

Modifies Control Panel

Modifies registry class

MITRE ATT&CK Matrix V13

Initial Access
TA0001
Execution
TA0002
Persistence
TA0003
Boot or Logon Autostart Execution
T1547
Registry Run Keys / Startup Folder
T1547.001
Privilege Escalation
TA0004
Boot or Logon Autostart Execution
T1547
Registry Run Keys / Startup Folder
T1547.001
Defense Evasion
TA0005
File and Directory Permissions Modification
T1222
Windows File and Directory Permissions Modification
T1222.001
Modify Registry
T1112
Credential Access
TA0006
Discovery
TA0007
Query Registry
T1012
System Information Discovery
T1082
Peripheral Device Discovery
T1120
Lateral Movement
TA0008
Collection
TA0009
Exfiltration
TA0010
Command and Control
TA0011
Impact
TA0040
Resource Development
TA0042
Reconnaissance
TA0043

Analysis: static1

Detonation Overview

Reported

2024-06-20 18:56

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-20 18:56

Reported

2024-06-20 19:10

Platform

win10v2004-20240611-en

Max time kernel

840s

Max time network

828s

Command Line

C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\app.bat"

Signatures

Drops file in Drivers directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\drivers\etc\hosts C:\Users\Admin\AppData\Local\Temp\is-851NI.tmp\BuildBox-2-3-3_Loader_Setup.tmp N/A

Possible privilege escalation attempt

exploit
Description Indicator Process Target
N/A N/A C:\Windows\system32\takeown.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\is-851NI.tmp\BuildBox-2-3-3_Loader_Setup.tmp N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-851NI.tmp\BuildBox-2-3-3_Loader_Setup.tmp N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BsSndRpt.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BsSndRpt.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BsSndRpt.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A

Modifies file permissions

discovery
Description Indicator Process Target
N/A N/A C:\Windows\system32\takeown.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Buildbox = "\"C:\\Program Files (x86)\\Buildbox\\BuildBox.exe\"" C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Buildbox = "\"C:\\Program Files (x86)\\Buildbox\\BuildBox.exe\"" C:\Program Files (x86)\Buildbox\BuildBox.exe N/A

Checks installed software on the system

discovery

File and Directory Permissions Modification: Windows File and Directory Permissions Modification

defense_evasion

Looks up external IP address via web service

Description Indicator Process Target
N/A checkip.dyndns.org N/A N/A
N/A checkip.dyndns.org N/A N/A
N/A checkip.dyndns.org N/A N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.chk C:\Windows\System32\svchost.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.log C:\Windows\System32\svchost.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.jtx C:\Windows\System32\svchost.exe N/A
File created C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSSres00002.jrs C:\Windows\System32\svchost.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat C:\Windows\System32\svchost.exe N/A
File created C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat C:\Windows\System32\svchost.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.jcp C:\Windows\System32\svchost.exe N/A
File created C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSStmp.log C:\Windows\System32\svchost.exe N/A
File created C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSSres00001.jrs C:\Windows\System32\svchost.exe N/A
File created C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.chk C:\Windows\System32\svchost.exe N/A
File created C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.jfm C:\Windows\System32\svchost.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Buildbox\is-RUSNB.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\QtGraphicalEffects\is-V00B6.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-BL28L.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\imageformats\is-4N99O.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\imageformats\is-5GO9C.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\translations\is-QEJ2P.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\is-LT69G.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-FECKV.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File opened for modification C:\Program Files (x86)\Buildbox\Qt5Widgets.dll C:\Users\Admin\AppData\Local\Temp\is-851NI.tmp\BuildBox-2-3-3_Loader_Setup.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-4IOH8.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-S9QRL.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-9V6KH.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File opened for modification C:\Program Files (x86)\Buildbox\QtQml\Models.2\modelsplugin.dll C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File opened for modification C:\Program Files (x86)\Buildbox\Qt5Qml.dll C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File opened for modification C:\Program Files (x86)\Buildbox\qmltooling\qmldbg_profiler.dll C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\imageformats\is-JT45Q.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-V14JV.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-CBSIM.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-UEQTB.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\imageformats\is-4MUPK.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\QtGraphicalEffects\is-5B7NN.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-KCLRJ.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\QtQuick\PrivateWidgets\is-ROLLL.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-1217A.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-56MKQ.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File opened for modification C:\Program Files (x86)\Buildbox\bearer\qgenericbearer.dll C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\is-7DO4F.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\LICENSES\is-2IKJF.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\qmltooling\is-PH1BA.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\qmltooling\is-26COP.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Qt5Network.BAK C:\Users\Admin\AppData\Local\Temp\is-851NI.tmp\BuildBox-2-3-3_Loader_Setup.tmp N/A
File opened for modification C:\Program Files (x86)\Buildbox\imageformats\qwebp.dll C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File opened for modification C:\Program Files (x86)\Buildbox\libtiff.dll C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\is-O4SB4.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\QtGraphicalEffects\private\is-NUHMG.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-0H7BT.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\is-K6GIB.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\is-69KAJ.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\QtQuick\PrivateWidgets\is-L2OV3.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File opened for modification C:\Program Files (x86)\Buildbox\msvcr120.dll C:\Users\Admin\AppData\Local\Temp\is-851NI.tmp\BuildBox-2-3-3_Loader_Setup.tmp N/A
File created C:\Program Files (x86)\Buildbox\QtQuick.2\is-TEDNV.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-LVR8U.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-KTV6F.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\translations\is-GFH93.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\QtGraphicalEffects\is-DOBD0.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\QtGraphicalEffects\private\is-MO5QI.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\translations\is-S9GSV.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File opened for modification C:\Program Files (x86)\Buildbox\QtQuick\Extras\qtquickextrasplugin.dll C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File opened for modification C:\Program Files (x86)\Buildbox\QtQuick\Window.2\windowplugin.dll C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\is-MOORL.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-PK288.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File opened for modification C:\Program Files (x86)\Buildbox\BugSplat.dll C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File opened for modification C:\Program Files (x86)\Buildbox\libogg.dll C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\is-JDQ5Q.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\is-IP65V.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-NCL8G.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File opened for modification C:\Program Files (x86)\Buildbox\platforms\qwindows.dll C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File opened for modification C:\Program Files (x86)\Buildbox\imageformats\qgif.dll C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\unins000.dat C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\imageformats\is-VDIR8.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-NUMOB.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\QtGraphicalEffects\is-JI7S4.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-G5E02.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
File created C:\Program Files (x86)\Buildbox\Resources\presets\is-24PBR.tmp C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies Control Panel

evasion
Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\Desktop\ForegroundLockTimeout = "0" C:\Program Files (x86)\Buildbox\BsSndRpt.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\Desktop\ForegroundLockTimeout = "1700412" C:\Program Files (x86)\Buildbox\BsSndRpt.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\Desktop\ForegroundLockTimeout = "0" C:\Program Files (x86)\Buildbox\BsSndRpt.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\Desktop\ForegroundLockTimeout = "1700412" C:\Program Files (x86)\Buildbox\BsSndRpt.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133633834094725731" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (data) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\MRUListEx = ffffffff C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = 03000000010000000000000002000000ffffffff C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\Shell C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202020202020202020202020202 C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\3\NodeSlot = "16" C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\IconSize = "16" C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\2 C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\SniffedFolderType = "Downloads" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0 C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:PID = "0" C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3 C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3} C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\3\MRUListEx = ffffffff C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell\SniffedFolderType = "Generic" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Build_Box_Project\shell\open\command C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1092616257" C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = 000000000100000002000000ffffffff C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616257" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.bbdoc\ = "Build_Box_Project" C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\LogicalViewMode = "1" C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 03000000010000000000000002000000ffffffff C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3 C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616257" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202020202020202020202020202 C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202020202020202020202020202 C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Build_Box_Project\shell\open C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202020202020202020202020202 C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings C:\Windows\system32\mspaint.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Build_Box_Project\shell C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259} C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2 C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\system32\mspaint.exe N/A
N/A N/A C:\Windows\system32\mspaint.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Windows\system32\mspaint.exe N/A
N/A N/A C:\Windows\system32\mspaint.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-851NI.tmp\BuildBox-2-3-3_Loader_Setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-851NI.tmp\BuildBox-2-3-3_Loader_Setup.tmp N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\mspaint.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\BuildBox.exe N/A
N/A N/A C:\Windows\system32\mspaint.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A
N/A N/A C:\Program Files (x86)\Buildbox\Buildbox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2824 wrote to memory of 4844 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4844 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 4872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 3736 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 3736 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2824 wrote to memory of 1148 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\app.bat"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa2080ab58,0x7ffa2080ab68,0x7ffa2080ab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1720 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1944 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2308 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3056 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3096 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4360 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4488 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4668 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4576 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5016 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4968 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4620 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=4856 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3068 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3356 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=5352 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=4416 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=6092 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=1588 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5908 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2864 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6120 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=2872 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=2720 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=2724 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=3224 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=5684 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=4400 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=5980 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2724 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6060 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=6056 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=5488 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=5872 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=872 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=5544 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=5324 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=6276 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=5108 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5920 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6580 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=5980 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=4940 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=5920 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=4496 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=6484 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=5036 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=3216 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3952 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6316 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=6276 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=6348 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=4776 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=5712 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=6560 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=4716 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=6472 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=6344 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=6416 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=2732 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --mojo-platform-channel-handle=6284 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=4240 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=3252 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --mojo-platform-channel-handle=5468 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --mojo-platform-channel-handle=6092 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=2800 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --mojo-platform-channel-handle=6920 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --mojo-platform-channel-handle=6016 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --mojo-platform-channel-handle=7332 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --mojo-platform-channel-handle=7476 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --mojo-platform-channel-handle=7524 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --mojo-platform-channel-handle=7532 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --mojo-platform-channel-handle=7548 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --mojo-platform-channel-handle=7564 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --mojo-platform-channel-handle=8684 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --mojo-platform-channel-handle=8564 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --mojo-platform-channel-handle=8916 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --mojo-platform-channel-handle=8940 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --mojo-platform-channel-handle=8468 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --mojo-platform-channel-handle=7936 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --mojo-platform-channel-handle=9908 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --mojo-platform-channel-handle=8176 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --mojo-platform-channel-handle=10056 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --mojo-platform-channel-handle=7512 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --mojo-platform-channel-handle=3136 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --mojo-platform-channel-handle=7572 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --mojo-platform-channel-handle=7524 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --mojo-platform-channel-handle=9272 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --mojo-platform-channel-handle=5692 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --mojo-platform-channel-handle=8004 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --mojo-platform-channel-handle=7356 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --mojo-platform-channel-handle=4300 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --mojo-platform-channel-handle=6932 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --mojo-platform-channel-handle=7012 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --mojo-platform-channel-handle=5052 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --mojo-platform-channel-handle=6532 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --mojo-platform-channel-handle=7236 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --mojo-platform-channel-handle=9572 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8132 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x504 0x50c

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --mojo-platform-channel-handle=7076 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --mojo-platform-channel-handle=9120 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7268 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9124 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Windows\system32\mspaint.exe

"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\Downloads\OptimizeRestore.png" /ForceBootstrapPaint3D

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvc

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3096 --field-trial-handle=2032,i,13576722749816733573,11380013829967162151,131072 /prefetch:8

C:\Users\Admin\Desktop\Buildbox_2.3.3_Build_1986\Buildbox_2.3.3-1986.exe

"C:\Users\Admin\Desktop\Buildbox_2.3.3_Build_1986\Buildbox_2.3.3-1986.exe"

C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp

"C:\Users\Admin\AppData\Local\Temp\is-NUS7S.tmp\Buildbox_2.3.3-1986.tmp" /SL5="$502D8,76352150,56832,C:\Users\Admin\Desktop\Buildbox_2.3.3_Build_1986\Buildbox_2.3.3-1986.exe"

C:\Program Files (x86)\Buildbox\BuildBox.exe

"C:\Program Files (x86)\Buildbox\BuildBox.exe"

C:\Windows\SysWOW64\werfault.exe

werfault.exe /h /shared Global\8b2b1e5192b94473ba1f2a4109b527de /t 7072 /p 5140

C:\Windows\system32\mspaint.exe

"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\Desktop\Buildbox_2.3.3_Build_1986\Crack\INSTRUCTIONS.jpg" /ForceBootstrapPaint3D

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Users\Admin\Desktop\Buildbox_2.3.3_Build_1986\Crack\BuildBox-2-3-3_Loader_Setup.exe

"C:\Users\Admin\Desktop\Buildbox_2.3.3_Build_1986\Crack\BuildBox-2-3-3_Loader_Setup.exe"

C:\Users\Admin\AppData\Local\Temp\is-851NI.tmp\BuildBox-2-3-3_Loader_Setup.tmp

"C:\Users\Admin\AppData\Local\Temp\is-851NI.tmp\BuildBox-2-3-3_Loader_Setup.tmp" /SL5="$6031E,219014,111104,C:\Users\Admin\Desktop\Buildbox_2.3.3_Build_1986\Crack\BuildBox-2-3-3_Loader_Setup.exe"

C:\Windows\SysWOW64\taskkill.exe

"C:\Windows\SysWOW64\taskkill.exe" /F /IM Buildbox.exe /T

C:\Windows\SysWOW64\taskkill.exe

"C:\Windows\SysWOW64\taskkill.exe" /F /IM Buildbox.exe /T

C:\Windows\SYSTEM32\cmd.exe

"cmd.exe" /c takeown /f "C:\Windows\system32\drivers\etc\hosts" /r /d y

C:\Windows\system32\takeown.exe

takeown /f "C:\Windows\system32\drivers\etc\hosts" /r /d y

C:\Windows\SYSTEM32\cmd.exe

"cmd.exe" /c icacls "C:\Windows\system32\drivers\etc\hosts " /grant everyone:F /c /t /q

C:\Windows\system32\icacls.exe

icacls "C:\Windows\system32\drivers\etc\hosts " /grant everyone:F /c /t /q

C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe

"C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe"

C:\Program Files (x86)\Buildbox\Buildbox.exe

"C:\Program Files (x86)\Buildbox\Buildbox.exe"

C:\Program Files (x86)\Buildbox\BsSndRpt.exe

"BsSndRpt.exe" /i "C:\Users\Admin\AppData\Local\Temp\BsSndRpt.ini" /dl

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /7

C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe

"C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe"

C:\Program Files (x86)\Buildbox\Buildbox.exe

"C:\Program Files (x86)\Buildbox\Buildbox.exe"

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x504 0x50c

C:\Program Files (x86)\Buildbox\BsSndRpt.exe

"BsSndRpt.exe" /i "C:\Users\Admin\AppData\Local\Temp\BsSndRpt.ini" /dl

C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe

"C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe"

C:\Program Files (x86)\Buildbox\Buildbox.exe

"C:\Program Files (x86)\Buildbox\Buildbox.exe"

C:\Program Files (x86)\Buildbox\BsSndRpt.exe

"BsSndRpt.exe" /i "C:\Users\Admin\AppData\Local\Temp\BsSndRpt.ini" /dl

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa2aeeab58,0x7ffa2aeeab68,0x7ffa2aeeab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1708 --field-trial-handle=1932,i,1482700847298805652,10238337427272397478,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1948 --field-trial-handle=1932,i,1482700847298805652,10238337427272397478,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2264 --field-trial-handle=1932,i,1482700847298805652,10238337427272397478,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3008 --field-trial-handle=1932,i,1482700847298805652,10238337427272397478,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3020 --field-trial-handle=1932,i,1482700847298805652,10238337427272397478,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3972 --field-trial-handle=1932,i,1482700847298805652,10238337427272397478,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4508 --field-trial-handle=1932,i,1482700847298805652,10238337427272397478,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4612 --field-trial-handle=1932,i,1482700847298805652,10238337427272397478,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4296 --field-trial-handle=1932,i,1482700847298805652,10238337427272397478,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4936 --field-trial-handle=1932,i,1482700847298805652,10238337427272397478,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3220 --field-trial-handle=1932,i,1482700847298805652,10238337427272397478,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4176 --field-trial-handle=1932,i,1482700847298805652,10238337427272397478,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3980 --field-trial-handle=1932,i,1482700847298805652,10238337427272397478,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3068 --field-trial-handle=1932,i,1482700847298805652,10238337427272397478,131072 /prefetch:8

C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe

"C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe"

C:\Program Files (x86)\Buildbox\Buildbox.exe

"C:\Program Files (x86)\Buildbox\Buildbox.exe"

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /7

C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe

"C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe"

C:\Program Files (x86)\Buildbox\Buildbox.exe

"C:\Program Files (x86)\Buildbox\Buildbox.exe"

C:\Windows\SysWOW64\werfault.exe

werfault.exe /h /shared Global\00cd9746b690422695a9bd86ad2edee2 /t 6964 /p 4508

C:\Users\Admin\Desktop\Buildbox2Loader.exe

"C:\Users\Admin\Desktop\Buildbox2Loader.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 211.197.17.2.in-addr.arpa udp
BE 2.17.107.203:80 tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 195.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 10.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.238:443 clients2.google.com udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 13.107.21.237:443 g.bing.com tcp
US 8.8.8.8:53 74.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 237.21.107.13.in-addr.arpa udp
NL 23.62.61.194:443 www.bing.com tcp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 8.8.8.8:53 194.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 tinyurl.com udp
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 104.20.138.65:443 tinyurl.com tcp
US 104.20.138.65:443 tinyurl.com tcp
US 8.8.8.8:53 www.mediafire.com udp
US 104.16.113.74:443 www.mediafire.com tcp
US 8.8.8.8:53 the.gatekeeperconsent.com udp
US 104.21.42.32:443 the.gatekeeperconsent.com tcp
US 8.8.8.8:53 65.138.20.104.in-addr.arpa udp
US 8.8.8.8:53 74.113.16.104.in-addr.arpa udp
US 8.8.8.8:53 btloader.com udp
US 104.22.74.216:443 btloader.com tcp
US 104.22.74.216:443 btloader.com tcp
US 8.8.8.8:53 www.ezojs.com udp
US 8.8.8.8:53 privacy.gatekeeperconsent.com udp
US 8.8.8.8:53 translate.google.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 cdn.amplitude.com udp
US 8.8.8.8:53 static.mediafire.com udp
US 104.16.113.74:443 static.mediafire.com udp
US 172.67.170.144:443 www.ezojs.com tcp
US 104.21.42.32:443 privacy.gatekeeperconsent.com tcp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
FR 13.249.9.2:443 cdn.amplitude.com tcp
GB 142.250.187.238:443 translate.google.com tcp
US 8.8.8.8:53 cdn.otnolatrnup.com udp
US 104.16.53.110:443 cdn.otnolatrnup.com tcp
US 104.21.42.32:443 privacy.gatekeeperconsent.com udp
US 104.21.42.32:443 privacy.gatekeeperconsent.com udp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 www.mediafiredls.com udp
US 8.8.8.8:53 api.amplitude.com udp
US 130.211.23.194:443 api.btloader.com tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 104.26.2.173:443 www.mediafiredls.com tcp
US 8.8.8.8:53 g.ezoic.net udp
US 54.187.151.174:443 api.amplitude.com tcp
FR 35.181.89.222:443 g.ezoic.net tcp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 32.42.21.104.in-addr.arpa udp
US 8.8.8.8:53 216.74.22.104.in-addr.arpa udp
US 8.8.8.8:53 go.ezodn.com udp
US 8.8.8.8:53 144.170.67.172.in-addr.arpa udp
US 8.8.8.8:53 2.9.249.13.in-addr.arpa udp
US 8.8.8.8:53 73.79.16.104.in-addr.arpa udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 110.53.16.104.in-addr.arpa udp
US 8.8.8.8:53 translate.googleapis.com udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 70.3.26.104.in-addr.arpa udp
US 8.8.8.8:53 173.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 6.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 222.89.181.35.in-addr.arpa udp
US 130.211.23.194:443 api.btloader.com udp
US 104.21.87.79:443 go.ezodn.com tcp
US 104.21.87.79:443 go.ezodn.com tcp
US 104.21.87.79:443 go.ezodn.com tcp
GB 216.58.213.10:443 content-autofill.googleapis.com tcp
US 104.21.42.32:443 privacy.gatekeeperconsent.com udp
GB 142.250.200.10:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 otnolatrnup.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
BE 64.233.166.157:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 g.ezodn.com udp
US 104.21.87.79:443 g.ezodn.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
GB 142.250.200.3:443 www.google.co.uk tcp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 ad.crwdcntrl.net udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
US 8.8.8.8:53 translate-pa.googleapis.com udp
US 8.8.8.8:53 bshr.ezodn.com udp
FR 18.155.129.39:443 tags.crwdcntrl.net tcp
IE 54.72.245.162:443 ad.crwdcntrl.net tcp
IE 34.247.240.165:443 bcp.crwdcntrl.net tcp
US 104.21.87.79:443 bshr.ezodn.com tcp
US 8.8.8.8:53 region1.analytics.google.com udp
BE 64.233.166.157:443 stats.g.doubleclick.net udp
GB 142.250.200.3:443 www.google.co.uk udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 216.239.34.36:443 region1.analytics.google.com tcp
GB 142.250.200.10:443 translate-pa.googleapis.com udp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
US 104.21.87.79:443 bshr.ezodn.com udp
US 8.8.8.8:53 174.151.187.54.in-addr.arpa udp
US 8.8.8.8:53 79.87.21.104.in-addr.arpa udp
US 8.8.8.8:53 10.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 157.166.233.64.in-addr.arpa udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 39.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 162.245.72.54.in-addr.arpa udp
US 8.8.8.8:53 165.240.247.34.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 226.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 104.16.53.110:443 otnolatrnup.com udp
US 8.8.8.8:53 download946.mediafire.com udp
US 205.196.121.141:443 download946.mediafire.com tcp
US 205.196.121.141:443 download946.mediafire.com tcp
US 8.8.8.8:53 141.121.196.205.in-addr.arpa udp
GB 216.58.213.10:443 content-autofill.googleapis.com udp
US 104.16.53.110:80 otnolatrnup.com tcp
US 104.16.53.110:80 otnolatrnup.com tcp
US 8.8.8.8:53 woreppercomming.com udp
FR 18.155.129.103:443 woreppercomming.com tcp
US 8.8.8.8:53 www.ovardu.com udp
US 104.21.96.72:443 www.ovardu.com tcp
US 104.21.96.72:443 www.ovardu.com tcp
US 8.8.8.8:53 103.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 www.opera.com udp
DE 18.158.93.133:443 www.opera.com tcp
US 8.8.8.8:53 133.93.158.18.in-addr.arpa udp
US 8.8.8.8:53 72.96.21.104.in-addr.arpa udp
US 8.8.8.8:53 cdn-production-opera-website.operacdn.com udp
US 8.8.8.8:53 www.googleoptimize.com udp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
GB 172.217.16.238:443 www.googleoptimize.com tcp
US 8.8.8.8:53 www-static.operacdn.com udp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 120.66.68.104.in-addr.arpa udp
US 8.8.8.8:53 region1.google-analytics.com udp
DE 18.158.93.133:443 www.opera.com tcp
US 8.8.8.8:53 157.123.68.40.in-addr.arpa udp
US 8.8.8.8:53 35.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 22.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 249.197.17.2.in-addr.arpa udp
US 8.8.8.8:53 57.169.31.20.in-addr.arpa udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp
US 8.8.8.8:53 35.215.58.216.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 apis.google.com udp
GB 142.250.200.14:443 apis.google.com udp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 8.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 virustotla.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 virustotal.com udp
US 216.239.32.21:443 virustotal.com tcp
US 216.239.32.21:443 virustotal.com tcp
US 8.8.8.8:53 www.virustotal.com udp
US 74.125.34.46:443 www.virustotal.com tcp
US 8.8.8.8:53 www.recaptcha.net udp
US 216.239.32.36:443 region1.google-analytics.com udp
GB 142.250.187.227:443 recaptcha.net tcp
US 8.8.8.8:53 21.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 46.34.125.74.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
GB 142.250.187.227:443 recaptcha.net udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 74.125.34.46:443 www.virustotal.com tcp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 ghb.adtelligent.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 172.67.75.241:443 script.4dex.io tcp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 hb.minutemedia-prebid.com udp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 8.8.8.8:53 g.ezoic.net udp
US 172.64.151.101:443 htlb.casalemedia.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
FR 18.244.28.121:443 hb.yellowblue.io tcp
NL 145.40.97.67:443 prebid.a-mo.net tcp
GB 185.83.69.58:443 ghb.adtelligent.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 104.22.31.209:443 prebid.smilewanted.com tcp
US 104.22.31.209:443 prebid.smilewanted.com tcp
US 104.22.31.209:443 prebid.smilewanted.com tcp
US 104.22.31.209:443 prebid.smilewanted.com tcp
US 104.22.31.209:443 prebid.smilewanted.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
DE 51.89.9.252:443 onetag-sys.com tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
IE 54.228.156.250:443 hb.minutemedia-prebid.com tcp
US 8.8.8.8:53 oa.openxcdn.net udp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 cdn.prod.uidapi.com udp
FR 35.181.89.222:443 g.ezoic.net tcp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
US 8.8.8.8:53 cdn-ima.33across.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 b38fca02c3005c5be9e4af4749c6b668.safeframe.googlesyndication.com udp
FR 99.86.95.185:443 cdn.prod.uidapi.com tcp
US 172.67.38.106:443 cdn.id5-sync.com tcp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 104.18.35.167:443 cdn-ima.33across.com tcp
US 151.101.129.229:443 cdn.jsdelivr.net tcp
US 34.102.146.192:443 oa.openxcdn.net tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
GB 172.217.169.65:443 b38fca02c3005c5be9e4af4749c6b668.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 cadmus.script.ac udp
US 172.67.75.241:443 script.4dex.io tcp
IE 54.72.120.129:443 bcp.crwdcntrl.net tcp
US 104.18.23.145:443 cadmus.script.ac tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 58.69.83.185.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 121.28.244.18.in-addr.arpa udp
US 8.8.8.8:53 150.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 67.97.40.145.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 4.230.157.18.in-addr.arpa udp
US 8.8.8.8:53 209.31.22.104.in-addr.arpa udp
US 8.8.8.8:53 252.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 87.70.96.34.in-addr.arpa udp
US 8.8.8.8:53 250.156.228.54.in-addr.arpa udp
US 8.8.8.8:53 229.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 167.35.18.104.in-addr.arpa udp
US 8.8.8.8:53 192.146.102.34.in-addr.arpa udp
US 8.8.8.8:53 185.95.86.99.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 65.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 ghb1.adtelligent.com udp
US 172.64.151.101:443 htlb.casalemedia.com udp
DE 51.89.9.252:443 onetag-sys.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 oajs.openx.net udp
US 172.67.38.106:443 cdn.id5-sync.com tcp
US 23.227.151.194:443 ghb1.adtelligent.com tcp
US 34.120.135.53:443 oajs.openx.net tcp
US 172.67.75.241:443 script.4dex.io tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 104.21.87.79:443 bshr.ezodn.com udp
US 104.21.87.79:443 bshr.ezodn.com udp
GB 142.250.200.3:443 www.google.co.uk udp
US 34.120.135.53:443 oajs.openx.net udp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 s0.2mdn.net udp
GB 216.58.204.70:443 s0.2mdn.net tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 dsum-sec.casalemedia.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 google-bidout-d.openx.net udp
DE 37.252.171.21:443 ib.adnxs.com tcp
GB 142.250.187.194:443 cm.g.doubleclick.net tcp
GB 142.250.187.194:443 cm.g.doubleclick.net tcp
US 35.244.159.8:443 google-bidout-d.openx.net tcp
GB 216.58.204.70:443 s0.2mdn.net udp
US 8.8.8.8:53 id5-sync.com udp
DE 162.19.138.116:443 id5-sync.com tcp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
GB 142.250.187.194:443 cm.g.doubleclick.net udp
GB 216.58.204.70:443 s0.2mdn.net udp
US 8.8.8.8:53 129.120.72.54.in-addr.arpa udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 145.23.18.104.in-addr.arpa udp
US 8.8.8.8:53 53.135.120.34.in-addr.arpa udp
US 8.8.8.8:53 194.151.227.23.in-addr.arpa udp
US 8.8.8.8:53 106.38.67.172.in-addr.arpa udp
US 8.8.8.8:53 70.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 21.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 8.159.244.35.in-addr.arpa udp
US 8.8.8.8:53 116.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 cdn.ampproject.org udp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
US 8.8.8.8:53 gum.criteo.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 193.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 104.16.113.74:443 static.mediafire.com udp
GB 216.58.213.10:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 ajax.googleapis.com udp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
US 8.8.8.8:53 ade.googlesyndication.com udp
GB 172.217.169.74:443 ajax.googleapis.com tcp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 8.8.8.8:53 api.amplitude.com udp
US 18.246.203.165:443 api.amplitude.com tcp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
BE 64.233.166.157:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 74.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 165.203.246.18.in-addr.arpa udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 xda-forums.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 e2c24.gcp.gvt2.com udp
US 35.185.21.228:443 e2c24.gcp.gvt2.com tcp
US 8.8.8.8:53 beacons.gvt2.com udp
FR 172.217.18.195:443 beacons.gvt2.com tcp
FR 172.217.18.195:443 beacons.gvt2.com udp
US 8.8.8.8:53 e2c54.gcp.gvt2.com udp
US 35.219.153.27:443 e2c54.gcp.gvt2.com tcp
US 8.8.8.8:53 228.21.185.35.in-addr.arpa udp
US 8.8.8.8:53 195.18.217.172.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 beacons2.gvt2.com udp
US 8.8.8.8:53 27.153.219.35.in-addr.arpa udp
US 216.239.36.117:443 beacons2.gvt2.com tcp
US 8.8.8.8:53 e2c30.gcp.gvt2.com udp
US 34.125.80.210:443 e2c30.gcp.gvt2.com tcp
US 8.8.8.8:53 117.36.239.216.in-addr.arpa udp
US 8.8.8.8:53 210.80.125.34.in-addr.arpa udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 beacons3.gvt2.com udp
GB 216.58.213.3:443 beacons3.gvt2.com tcp
US 8.8.8.8:53 3.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 xda-developers.com udp
US 15.197.168.237:443 xda-developers.com tcp
US 15.197.168.237:443 xda-developers.com tcp
US 8.8.8.8:53 www.xda-developers.com udp
US 8.8.8.8:53 237.168.197.15.in-addr.arpa udp
US 8.8.8.8:53 cdn.adsninja.ca udp
US 8.8.8.8:53 sentinelbi.com udp
GB 143.244.38.136:443 cdn.adsninja.ca tcp
US 54.157.59.36:443 sentinelbi.com tcp
US 8.8.8.8:53 unpkg.com udp
US 8.8.8.8:53 cdn.sentinelbi.com udp
US 104.17.246.203:443 unpkg.com tcp
GB 143.244.38.136:443 cdn.sentinelbi.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
BE 64.233.166.157:443 stats.g.doubleclick.net udp
GB 142.250.200.3:443 www.google.co.uk udp
US 8.8.8.8:53 ampcid.google.com udp
GB 216.58.212.206:443 ampcid.google.com tcp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 136.38.244.143.in-addr.arpa udp
IE 209.85.203.84:443 accounts.google.com udp
US 8.8.8.8:53 36.59.157.54.in-addr.arpa udp
US 8.8.8.8:53 203.246.17.104.in-addr.arpa udp
US 8.8.8.8:53 84.203.85.209.in-addr.arpa udp
US 8.8.8.8:53 206.212.58.216.in-addr.arpa udp
GB 172.217.169.46:443 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 forums.xda-developers.com udp
US 8.8.8.8:53 xdaforums.com udp
US 3.214.214.173:443 xdaforums.com tcp
US 8.8.8.8:53 a.pub.network udp
US 8.8.8.8:53 b.pub.network udp
US 8.8.8.8:53 c.pub.network udp
US 104.18.21.206:443 a.pub.network tcp
US 104.18.21.206:443 a.pub.network tcp
US 8.8.8.8:53 confiant-integrations.global.ssl.fastly.net udp
US 34.160.152.31:443 c.pub.network tcp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 btloader.com udp
US 151.101.193.194:443 confiant-integrations.global.ssl.fastly.net tcp
US 8.8.8.8:53 cmp.quantcast.com udp
US 104.22.74.216:443 btloader.com tcp
US 8.8.8.8:53 pixel.quantserve.com udp
US 8.8.8.8:53 rules.quantcount.com udp
DE 91.228.74.200:443 pixel.quantserve.com tcp
US 8.8.8.8:53 secure.quantserve.com udp
FR 18.244.28.79:443 rules.quantcount.com tcp
US 8.8.8.8:53 d.pub.network udp
DE 91.228.74.166:443 secure.quantserve.com tcp
US 3.165.113.5:443 cmp.quantcast.com tcp
US 34.160.152.31:443 d.pub.network tcp
US 8.8.8.8:53 173.214.214.3.in-addr.arpa udp
US 8.8.8.8:53 206.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 31.152.160.34.in-addr.arpa udp
US 8.8.8.8:53 194.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 200.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 79.28.244.18.in-addr.arpa udp
US 104.18.21.206:443 a.pub.network udp
US 8.8.8.8:53 optimise.net udp
US 8.8.8.8:53 api.floors.dev udp
US 34.160.152.31:443 d.pub.network tcp
US 8.8.8.8:53 static1.xdaimages.com udp
US 34.111.152.239:443 optimise.net tcp
US 34.160.128.112:443 api.floors.dev tcp
GB 143.244.38.136:443 static1.xdaimages.com tcp
US 34.111.152.239:443 optimise.net tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
US 34.111.152.239:443 optimise.net udp
US 3.214.214.173:443 xdaforums.com tcp
US 8.8.8.8:53 5.113.165.3.in-addr.arpa udp
US 8.8.8.8:53 166.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 239.152.111.34.in-addr.arpa udp
US 8.8.8.8:53 112.128.160.34.in-addr.arpa udp
US 8.8.8.8:53 cmp.inmobi.com udp
FR 52.222.149.100:443 cmp.inmobi.com tcp
FR 52.222.149.100:443 cmp.inmobi.com tcp
US 8.8.8.8:53 api.cmp.inmobi.com udp
DE 18.157.128.118:443 api.cmp.inmobi.com tcp
US 8.8.8.8:53 100.149.222.52.in-addr.arpa udp
US 8.8.8.8:53 118.128.157.18.in-addr.arpa udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
FR 52.222.169.27:443 sb.scorecardresearch.com tcp
US 8.8.8.8:53 cdn.confiant-integrations.net udp
US 8.8.8.8:53 freestar-io.videoplayerhub.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 104.26.9.50:443 freestar-io.videoplayerhub.com tcp
US 172.64.144.166:443 cdn.confiant-integrations.net tcp
US 3.165.118.121:443 c.amazon-adsystem.com tcp
US 104.22.52.173:443 cdn.hadronid.net tcp
US 8.8.8.8:53 pb-rtd.ccgateway.net udp
DE 91.228.74.166:443 secure.quantserve.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 id.hadron.ad.gt udp
DE 162.19.138.116:443 id5-sync.com tcp
US 8.8.8.8:53 api.rlcdn.com udp
US 34.216.243.131:443 pb-rtd.ccgateway.net tcp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 pb-ing.ccgateway.net udp
US 8.8.8.8:53 53b12df2d4f6a89f011e2302edefdaab.safeframe.googlesyndication.com udp
US 15.197.193.217:443 match.adsrvr.org tcp
US 172.67.23.234:443 id.hadron.ad.gt tcp
US 34.120.133.55:443 api.rlcdn.com tcp
US 54.201.16.220:443 pb-ing.ccgateway.net tcp
US 172.64.144.166:443 cdn.confiant-integrations.net udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
FR 52.84.174.6:443 config.aps.amazon-adsystem.com tcp
US 3.165.118.121:443 c.amazon-adsystem.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 172.67.23.234:443 id.hadron.ad.gt tcp
US 3.165.117.155:443 aax.amazon-adsystem.com tcp
US 3.165.117.155:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 50.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 27.169.222.52.in-addr.arpa udp
US 8.8.8.8:53 166.144.64.172.in-addr.arpa udp
US 8.8.8.8:53 121.118.165.3.in-addr.arpa udp
US 8.8.8.8:53 173.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 55.133.120.34.in-addr.arpa udp
FR 18.244.28.79:443 rules.quantcount.com tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 217.193.197.15.in-addr.arpa udp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
GB 23.53.174.156:443 secure.cdn.fastclick.net tcp
US 8.8.8.8:53 s2s.t13.io udp
US 8.8.8.8:53 rtb.openx.net udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 ads.yieldmo.com udp
US 34.107.140.113:443 s2s.t13.io tcp
US 34.107.140.113:443 s2s.t13.io tcp
US 34.107.140.113:443 s2s.t13.io tcp
US 35.186.253.211:443 rtb.openx.net tcp
US 35.186.253.211:443 rtb.openx.net tcp
IE 54.155.87.64:443 ads.yieldmo.com tcp
IE 54.155.87.64:443 ads.yieldmo.com tcp
US 34.160.152.31:443 d.pub.network udp
US 8.8.8.8:53 cdn.undertone.com udp
FR 13.249.9.12:443 cdn.undertone.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 usr.undertone.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 pixel.advertising.com udp
IE 52.94.223.167:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 pixel.rubiconproject.com udp
CZ 104.64.126.246:443 secure-assets.rubiconproject.com tcp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.8.8.8:53 image8.pubmatic.com udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
DE 3.71.149.231:443 pixel.advertising.com tcp
FR 13.32.145.38:443 usr.undertone.com tcp
FR 13.32.145.38:443 usr.undertone.com tcp
DE 3.71.149.231:443 pixel.advertising.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 8.8.8.8:53 cdn.browsiprod.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
FR 18.155.129.123:443 cdn.browsiprod.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
GB 2.21.189.68:443 eus.rubiconproject.com tcp
GB 142.250.187.194:443 ade.googlesyndication.com udp
US 8.8.8.8:53 sync.crwdcntrl.net udp
IE 52.211.142.73:443 sync.crwdcntrl.net tcp
US 8.8.8.8:53 events.browsiprod.com udp
US 8.8.8.8:53 yield-manager.browsiprod.com udp
US 8.8.8.8:53 image2.pubmatic.com udp
US 8.8.8.8:53 131.243.216.34.in-addr.arpa udp
US 8.8.8.8:53 6.174.84.52.in-addr.arpa udp
US 8.8.8.8:53 234.23.67.172.in-addr.arpa udp
US 8.8.8.8:53 220.16.201.54.in-addr.arpa udp
US 8.8.8.8:53 155.117.165.3.in-addr.arpa udp
US 8.8.8.8:53 83.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 156.174.53.23.in-addr.arpa udp
US 8.8.8.8:53 113.140.107.34.in-addr.arpa udp
US 8.8.8.8:53 211.253.186.35.in-addr.arpa udp
US 8.8.8.8:53 64.87.155.54.in-addr.arpa udp
US 8.8.8.8:53 12.9.249.13.in-addr.arpa udp
US 8.8.8.8:53 167.223.94.52.in-addr.arpa udp
US 8.8.8.8:53 246.126.64.104.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 231.149.71.3.in-addr.arpa udp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 38.145.32.13.in-addr.arpa udp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 123.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 68.189.21.2.in-addr.arpa udp
US 52.25.0.83:443 events.browsiprod.com tcp
FR 3.162.38.127:443 yield-manager.browsiprod.com tcp
NL 198.47.127.205:443 image2.pubmatic.com tcp
GB 142.250.187.193:443 cdn.ampproject.org udp
FR 18.155.129.123:443 cdn.browsiprod.com tcp
US 8.8.8.8:53 image4.pubmatic.com udp
NL 198.47.127.20:443 image4.pubmatic.com tcp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 cs.media.net udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 s.ad.smaato.net udp
DE 51.89.9.252:443 onetag-sys.com tcp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 76.223.111.18:443 eb2.3lift.com tcp
US 8.8.8.8:53 rtb.gumgum.com udp
IE 52.17.120.207:443 match.prod.bidr.io tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
NL 46.228.174.117:443 sync.1rx.io tcp
FR 18.164.52.116:443 s.ad.smaato.net tcp
GB 2.21.188.27:443 cs.media.net tcp
US 70.42.32.191:443 b1sync.zemanta.com tcp
IE 54.216.224.159:443 rtb.gumgum.com tcp
US 8.8.8.8:53 ai.browsiprod.com udp
US 172.64.151.101:443 ssum-sec.casalemedia.com udp
FR 52.222.201.40:443 ai.browsiprod.com tcp
US 8.8.8.8:53 token.rubiconproject.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 px.ads.linkedin.com udp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 34.107.140.113:443 s2s.t13.io udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 8.8.8.8:53 ib.3lift.com udp
US 8.8.8.8:53 ms-cookie-sync.presage.io udp
US 8.8.8.8:53 protected-by.clarium.io udp
US 13.107.42.14:443 px.ads.linkedin.com tcp
IE 54.73.50.175:443 pr-bh.ybp.yahoo.com tcp
IE 34.247.144.123:443 protected-by.clarium.io tcp
US 3.165.136.57:443 ib.3lift.com tcp
IE 63.35.51.224:443 ms-cookie-sync.presage.io tcp
US 54.162.33.171:443 sync.srv.stackadapt.com tcp
US 54.162.33.171:443 sync.srv.stackadapt.com tcp
US 54.162.33.171:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 d.turn.com udp
NL 46.228.164.13:443 d.turn.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 bid.g.doubleclick.net udp
US 8.8.8.8:53 fw.adsafeprotected.com udp
US 8.8.8.8:53 ads.eu.criteo.com udp
US 8.8.8.8:53 us-u.openx.net udp
US 8.8.8.8:53 adrta.com udp
US 8.8.8.8:53 ox-rtb-europe-west2.openx.net udp
US 3.165.136.57:443 ib.3lift.com udp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
US 34.102.143.98:443 ox-rtb-europe-west2.openx.net tcp
US 52.45.46.149:443 adrta.com tcp
IE 54.216.23.140:443 fw.adsafeprotected.com tcp
US 8.8.8.8:53 u.openx.net udp
IE 52.94.223.167:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 m.media-amazon.com udp
US 8.8.8.8:53 73.142.211.52.in-addr.arpa udp
US 8.8.8.8:53 127.38.162.3.in-addr.arpa udp
US 8.8.8.8:53 205.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 83.0.25.52.in-addr.arpa udp
US 8.8.8.8:53 20.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 207.120.17.52.in-addr.arpa udp
US 8.8.8.8:53 116.52.164.18.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 159.224.216.54.in-addr.arpa udp
US 8.8.8.8:53 27.188.21.2.in-addr.arpa udp
US 8.8.8.8:53 191.32.42.70.in-addr.arpa udp
US 8.8.8.8:53 40.201.222.52.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 175.50.73.54.in-addr.arpa udp
US 8.8.8.8:53 57.136.165.3.in-addr.arpa udp
US 8.8.8.8:53 123.144.247.34.in-addr.arpa udp
US 8.8.8.8:53 224.51.35.63.in-addr.arpa udp
US 8.8.8.8:53 171.33.162.54.in-addr.arpa udp
US 8.8.8.8:53 13.164.228.46.in-addr.arpa udp
US 8.8.8.8:53 14.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 8.8.8.8:53 sync.inmobi.com udp
US 151.101.1.16:443 m.media-amazon.com tcp
US 151.101.1.16:443 m.media-amazon.com tcp
US 151.101.1.16:443 m.media-amazon.com tcp
US 151.101.1.16:443 m.media-amazon.com tcp
US 8.8.8.8:53 amazon-tam-match.dotomi.com udp
US 151.101.1.16:443 m.media-amazon.com tcp
US 20.253.0.30:443 sync.inmobi.com tcp
NL 89.149.192.196:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 sync-amz.ads.yieldmo.com udp
US 151.101.1.16:443 m.media-amazon.com tcp
US 151.101.1.16:443 m.media-amazon.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 8.8.8.8:53 bh.contextweb.com udp
NL 63.215.202.140:443 amazon-tam-match.dotomi.com tcp
US 8.8.8.8:53 ts.amazon-adsystem.com udp
US 8.8.8.8:53 cs-tam.yellowblue.io udp
US 20.253.0.30:443 sync.inmobi.com tcp
DE 35.156.19.8:443 match.sharethrough.com tcp
IE 34.240.251.94:443 sync-amz.ads.yieldmo.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
DE 37.252.171.21:443 ib.adnxs.com tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 8.8.8.8:53 sync.ipredictive.com udp
US 18.245.175.52:443 ts.amazon-adsystem.com tcp
IE 52.208.159.70:443 cs-tam.yellowblue.io tcp
US 35.186.253.211:443 rtb.openx.net udp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
IE 52.94.223.167:443 aax-eu.amazon-adsystem.com tcp
IE 52.94.223.167:443 aax-eu.amazon-adsystem.com tcp
US 151.101.1.16:443 m.media-amazon.com tcp
US 8.8.8.8:53 creativecdn.com udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 8.8.8.8:53 cms.quantserve.com udp
US 8.8.8.8:53 c1.adform.net udp
NL 178.250.1.3:443 static.criteo.net tcp
US 8.8.8.8:53 cat.nl3.eu.criteo.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 52.46.143.56:443 s.amazon-adsystem.com tcp
US 52.46.143.56:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 sync.targeting.unrulymedia.com udp
US 54.158.1.77:443 sync.ipredictive.com tcp
US 151.101.1.16:443 m.media-amazon.com udp
US 151.101.1.16:443 m.media-amazon.com udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
US 8.8.8.8:53 ice.360yield.com udp
DK 37.157.6.233:443 c1.adform.net tcp
NL 185.184.8.90:443 creativecdn.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 17.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 98.143.102.34.in-addr.arpa udp
US 8.8.8.8:53 140.23.216.54.in-addr.arpa udp
US 8.8.8.8:53 149.46.45.52.in-addr.arpa udp
US 8.8.8.8:53 16.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 196.192.149.89.in-addr.arpa udp
US 8.8.8.8:53 140.202.215.63.in-addr.arpa udp
US 8.8.8.8:53 30.0.253.20.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 94.251.240.34.in-addr.arpa udp
US 8.8.8.8:53 8.19.156.35.in-addr.arpa udp
IE 52.208.202.34:443 ice.360yield.com tcp
US 8.8.8.8:53 52.175.245.18.in-addr.arpa udp
US 8.8.8.8:53 70.159.208.52.in-addr.arpa udp
GB 216.58.204.70:443 s0.2mdn.net udp
US 52.46.143.56:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 imageproxy.eu.criteo.net udp
US 8.8.8.8:53 dt.adsafeprotected.com udp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
US 8.8.8.8:53 ipds.adrta.com udp
US 3.216.216.37:443 dt.adsafeprotected.com tcp
US 3.216.216.37:443 dt.adsafeprotected.com tcp
US 3.216.216.37:443 dt.adsafeprotected.com tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
US 8.8.8.8:53 csm.eu.criteo.net udp
NL 178.250.1.3:443 static.criteo.net tcp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
US 8.8.8.8:53 aan.amazon.co.uk udp
IE 3.254.237.44:443 aan.amazon.co.uk tcp
US 8.8.8.8:53 static.adsafeprotected.com udp
IE 3.254.237.44:443 aan.amazon.co.uk tcp
FR 18.164.52.40:443 static.adsafeprotected.com tcp
US 8.8.8.8:53 dis.criteo.com udp
US 52.46.143.56:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 triplelift-match.dotomi.com udp
US 8.8.8.8:53 um.simpli.fi udp
US 8.8.8.8:53 56.143.46.52.in-addr.arpa udp
US 8.8.8.8:53 77.1.158.54.in-addr.arpa udp
US 8.8.8.8:53 6.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 14.24.17.104.in-addr.arpa udp
US 8.8.8.8:53 233.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 34.202.208.52.in-addr.arpa udp
US 8.8.8.8:53 15.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 37.216.216.3.in-addr.arpa udp
US 8.8.8.8:53 44.237.254.3.in-addr.arpa udp
US 8.8.8.8:53 www.googletagservices.com udp
NL 35.204.74.118:443 um.simpli.fi tcp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 64.158.223.140:443 triplelift-match.dotomi.com tcp
US 8.8.8.8:53 ads.pubmatic.com udp
GB 216.58.204.66:443 www.googletagservices.com tcp
US 8.8.8.8:53 freestar-d.openx.net udp
IE 3.254.237.44:443 aan.amazon.co.uk tcp
GB 2.21.188.239:443 ads.pubmatic.com tcp
US 34.98.64.218:443 freestar-d.openx.net udp
US 8.8.8.8:53 ads.avct.cloud udp
US 8.8.8.8:53 pixel.tapad.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 34.111.113.62:443 pixel.tapad.com tcp
NL 147.75.84.158:443 prebid.a-mo.net tcp
US 8.8.8.8:53 40.52.164.18.in-addr.arpa udp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 140.223.158.64.in-addr.arpa udp
US 8.8.8.8:53 118.74.204.35.in-addr.arpa udp
US 8.8.8.8:53 239.188.21.2.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
GB 216.58.204.70:443 s0.2mdn.net udp
US 8.8.8.8:53 s2.paa-reporting-advertising.amazon udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
FR 99.86.91.123:443 s2.paa-reporting-advertising.amazon tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
US 8.8.8.8:53 ap.lijit.com udp
GB 2.21.188.27:443 cs.media.net tcp
IE 63.35.21.244:443 ap.lijit.com tcp
US 8.8.8.8:53 sync-tm.everesttech.net udp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
US 8.8.8.8:53 ce.lijit.com udp
US 151.101.66.49:443 sync-tm.everesttech.net tcp
IE 52.19.170.170:443 ce.lijit.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
US 8.8.8.8:53 vjs.zencdn.net udp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 8.8.8.8:53 csync.loopme.me udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 cm.adform.net udp
US 8.8.8.8:53 contextual.media.net udp
US 151.101.194.217:443 vjs.zencdn.net tcp
US 151.101.194.217:443 vjs.zencdn.net tcp
NL 185.89.210.180:443 secure.adnxs.com tcp
DK 37.157.2.230:443 cm.adform.net tcp
NL 35.214.210.10:443 csync.loopme.me tcp
FR 154.54.250.80:443 ads.stickyadstv.com tcp
GB 2.21.188.27:443 contextual.media.net tcp
US 8.8.8.8:53 eu-u.openx.net udp
US 8.8.8.8:53 ad.turn.com udp
US 151.101.66.49:443 sync-tm.everesttech.net tcp
US 8.8.8.8:53 sync.mathtag.com udp
US 8.8.8.8:53 s.company-target.com udp
US 8.8.8.8:53 pm.w55c.net udp
NL 35.214.210.10:443 csync.loopme.me tcp
US 8.8.8.8:53 us.creativecdn.com udp
US 8.8.8.8:53 rtb.adentifi.com udp
US 8.8.8.8:53 pbs.yahoo.com udp
US 8.8.8.8:53 yieldmo-match.dotomi.com udp
US 8.8.8.8:53 bttrack.com udp
US 151.101.66.49:443 sync-tm.everesttech.net tcp
US 8.8.8.8:53 tr.blismedia.com udp
US 34.111.113.62:443 pixel.tapad.com udp
GB 216.58.204.66:443 www.googletagservices.com udp
US 216.200.232.249:443 sync.mathtag.com tcp
US 34.96.71.22:443 s.company-target.com tcp
US 54.210.201.126:443 rtb.adentifi.com tcp
US 54.210.201.126:443 rtb.adentifi.com tcp
GB 87.248.114.11:443 pbs.yahoo.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
IE 34.250.160.0:443 pm.w55c.net tcp
US 185.184.10.30:443 us.creativecdn.com tcp
US 8.8.8.8:53 rtb.fr3.eu.criteo.com udp
NL 89.207.16.137:443 openx2-match.dotomi.com tcp
FR 178.250.7.12:443 rtb.fr3.eu.criteo.com tcp
US 8.8.8.8:53 62.113.111.34.in-addr.arpa udp
US 8.8.8.8:53 158.84.75.147.in-addr.arpa udp
US 8.8.8.8:53 123.91.86.99.in-addr.arpa udp
US 8.8.8.8:53 244.21.35.63.in-addr.arpa udp
US 8.8.8.8:53 49.66.101.151.in-addr.arpa udp
US 8.8.8.8:53 170.170.19.52.in-addr.arpa udp
US 8.8.8.8:53 217.194.101.151.in-addr.arpa udp
US 8.8.8.8:53 180.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 10.210.214.35.in-addr.arpa udp
US 8.8.8.8:53 80.250.54.154.in-addr.arpa udp
US 8.8.8.8:53 230.2.157.37.in-addr.arpa udp
US 8.8.8.8:53 22.71.96.34.in-addr.arpa udp
US 8.8.8.8:53 11.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 11.164.228.46.in-addr.arpa udp
US 8.8.8.8:53 0.160.250.34.in-addr.arpa udp
US 8.8.8.8:53 ad.sxp.smartclip.net udp
US 8.8.8.8:53 ad.yieldlab.net udp
US 34.96.105.8:443 tr.blismedia.com tcp
US 192.132.33.69:443 bttrack.com tcp
US 8.8.8.8:53 pbs-cs.yellowblue.io udp
US 8.8.8.8:53 cs.yellowblue.io udp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 216.200.232.249:443 sync.mathtag.com tcp
FR 154.54.250.80:443 ads.stickyadstv.com tcp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 t.adx.opera.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 spl.zeotap.com udp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
FR 51.178.195.213:443 ssbsync-global.smartadserver.com tcp
GB 2.21.188.116:443 ad.yieldlab.net tcp
US 35.186.194.101:443 ad.sxp.smartclip.net tcp
US 192.132.33.69:443 bttrack.com tcp
US 8.8.8.8:53 tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev udp
US 8.8.8.8:53 image6.pubmatic.com udp
US 3.164.163.55:443 tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev tcp
US 104.22.50.98:443 spl.zeotap.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
US 8.8.8.8:53 tracker-shr.ortb.net udp
US 34.96.105.8:443 tr.blismedia.com tcp
US 8.8.8.8:53 sync.adkernel.com udp
FR 178.250.7.12:443 rtb.fr3.eu.criteo.com tcp
US 8.8.8.8:53 sq-tungsten-ts-eu.amazon-adsystem.com udp
NL 198.47.127.19:443 image6.pubmatic.com tcp
NL 77.245.57.72:443 sync.adkernel.com tcp
IE 3.254.239.147:443 sq-tungsten-ts-eu.amazon-adsystem.com tcp
US 147.135.71.152:443 tracker-shr.ortb.net tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
US 104.22.50.98:443 spl.zeotap.com tcp
US 8.8.8.8:53 uipglob.semasio.net udp
DK 77.243.51.122:443 uipglob.semasio.net tcp
US 8.8.8.8:53 137.16.207.89.in-addr.arpa udp
US 8.8.8.8:53 126.201.210.54.in-addr.arpa udp
US 8.8.8.8:53 30.10.184.185.in-addr.arpa udp
US 8.8.8.8:53 249.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 69.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 88.199.214.35.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 101.194.186.35.in-addr.arpa udp
US 8.8.8.8:53 213.195.178.51.in-addr.arpa udp
US 8.8.8.8:53 116.188.21.2.in-addr.arpa udp
US 8.8.8.8:53 55.163.164.3.in-addr.arpa udp
US 8.8.8.8:53 12.7.250.178.in-addr.arpa udp
GB 2.21.188.27:443 contextual.media.net udp
NL 35.214.210.10:443 csync.loopme.me tcp
US 8.8.8.8:53 19.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 72.57.245.77.in-addr.arpa udp
US 8.8.8.8:53 147.239.254.3.in-addr.arpa udp
US 8.8.8.8:53 166.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 152.71.135.147.in-addr.arpa udp
US 8.8.8.8:53 98.50.22.104.in-addr.arpa udp
US 8.8.8.8:53 imasdk.googleapis.com udp
GB 142.250.187.202:443 imasdk.googleapis.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 35.186.194.101:443 ad.sxp.smartclip.net udp
US 8.8.8.8:53 dis.eu.criteo.com udp
NL 178.250.1.9:443 dis.eu.criteo.com tcp
US 52.25.0.83:443 events.browsiprod.com tcp
US 8.8.8.8:53 b.pub.network udp
US 104.18.21.206:443 a.pub.network udp
US 34.160.152.31:443 d.pub.network udp
US 34.160.152.31:443 d.pub.network udp
US 34.160.152.31:443 d.pub.network udp
US 8.8.8.8:53 122.51.243.77.in-addr.arpa udp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 7d9fab05e4cb2d7d716941794e67e914.safeframe.googlesyndication.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 sync.smartadserver.com udp
NL 89.149.193.121:443 sync.smartadserver.com tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
US 8.8.8.8:53 pulsepoint-match.dotomi.com udp
US 52.46.143.56:443 s.amazon-adsystem.com tcp
US 52.46.143.56:443 s.amazon-adsystem.com tcp
US 54.158.1.77:443 sync.ipredictive.com tcp
US 8.8.8.8:53 match.deepintent.com udp
US 38.91.45.7:443 match.deepintent.com tcp
US 8.8.8.8:53 usersync.gumgum.com udp
US 54.162.33.171:443 sync.srv.stackadapt.com tcp
US 38.91.45.7:443 match.deepintent.com tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
IE 34.247.233.198:443 usersync.gumgum.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 8.8.8.8:53 capi.connatix.com udp
US 8.8.8.8:53 s.seedtag.com udp
US 8.8.8.8:53 tg.socdm.com udp
IE 34.247.233.198:443 usersync.gumgum.com tcp
US 34.149.50.64:443 s.seedtag.com tcp
US 104.18.41.104:443 capi.connatix.com tcp
JP 124.146.153.164:443 tg.socdm.com tcp
US 8.8.8.8:53 exchange.mediavine.com udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 live.primis.tech udp
DE 3.64.241.25:443 exchange.mediavine.com tcp
FR 52.222.201.10:443 live.primis.tech tcp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
US 34.160.128.112:443 api.floors.dev tcp
US 8.8.8.8:53 sync.resetdigital.co udp
US 8.8.8.8:53 121.193.149.89.in-addr.arpa udp
US 8.8.8.8:53 7.45.91.38.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 198.233.247.34.in-addr.arpa udp
US 8.8.8.8:53 64.50.149.34.in-addr.arpa udp
US 8.8.8.8:53 104.41.18.104.in-addr.arpa udp
US 8.8.8.8:53 10.201.222.52.in-addr.arpa udp
US 8.8.8.8:53 25.241.64.3.in-addr.arpa udp
US 8.8.8.8:53 153.84.255.185.in-addr.arpa udp
US 165.227.251.217:443 sync.resetdigital.co tcp
US 34.160.128.112:443 api.floors.dev udp
US 8.8.8.8:53 odr.mookie1.com udp
IE 34.247.233.198:443 usersync.gumgum.com tcp
IE 34.247.233.198:443 usersync.gumgum.com tcp
IE 34.247.233.198:443 usersync.gumgum.com tcp
IE 34.247.233.198:443 usersync.gumgum.com tcp
US 34.160.236.64:443 odr.mookie1.com tcp
US 8.8.8.8:53 sync.teads.tv udp
GB 2.21.189.110:443 sync.teads.tv tcp
GB 2.21.189.110:443 sync.teads.tv tcp
US 8.8.8.8:53 a.tribalfusion.com udp
IE 34.250.160.0:443 pm.w55c.net tcp
US 8.8.8.8:53 dmp.brand-display.com udp
IE 52.94.223.167:443 aax-eu.amazon-adsystem.com tcp
US 104.18.24.173:443 a.tribalfusion.com tcp
US 34.160.19.107:443 dmp.brand-display.com tcp
US 8.8.8.8:53 r.casalemedia.com udp
US 104.18.24.173:443 a.tribalfusion.com tcp
US 8.8.8.8:53 matching.truffle.bid udp
DE 23.88.86.2:443 matching.truffle.bid tcp
US 8.8.8.8:53 pixel.onaudience.com udp
US 8.8.8.8:53 dsum.casalemedia.com udp
FR 146.59.148.16:443 pixel.onaudience.com tcp
US 8.8.8.8:53 s.tribalfusion.com udp
DE 23.88.86.2:443 matching.truffle.bid tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
US 8.8.8.8:53 a.sportradarserving.com udp
NL 35.214.174.141:443 a.sportradarserving.com tcp
US 8.8.8.8:53 164.153.146.124.in-addr.arpa udp
US 8.8.8.8:53 64.236.160.34.in-addr.arpa udp
US 8.8.8.8:53 110.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 173.24.18.104.in-addr.arpa udp
US 8.8.8.8:53 107.19.160.34.in-addr.arpa udp
US 8.8.8.8:53 16.148.59.146.in-addr.arpa udp
NL 193.0.160.131:443 p.rfihub.com tcp
US 8.8.8.8:53 ps.eyeota.net udp
NL 35.214.174.141:443 a.sportradarserving.com udp
DE 3.124.210.90:443 ps.eyeota.net tcp
US 8.8.8.8:53 cdn.doubleverify.com udp
BE 23.14.90.89:443 cdn.doubleverify.com tcp
US 8.8.8.8:53 sync.search.spotxchange.com udp
NL 46.228.164.13:443 d.turn.com tcp
US 8.8.8.8:53 141.174.214.35.in-addr.arpa udp
US 8.8.8.8:53 131.160.0.193.in-addr.arpa udp
US 8.8.8.8:53 90.210.124.3.in-addr.arpa udp
US 8.8.8.8:53 89.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 rtb0.doubleverify.com udp
US 130.211.44.5:443 rtb0.doubleverify.com tcp
IE 52.94.223.167:443 aax-eu.amazon-adsystem.com tcp
FR 154.54.250.80:443 ads.stickyadstv.com tcp
US 8.8.8.8:53 event.hgrtb.com udp
US 8.8.8.8:53 trc.taboola.com udp
US 8.8.8.8:53 sasinator.realestate.com.au udp
US 8.8.8.8:53 usersync.getpublica.com udp
US 44.205.7.146:443 event.hgrtb.com tcp
US 151.101.65.44:443 trc.taboola.com tcp
US 23.23.220.184:443 usersync.getpublica.com tcp
AU 13.238.127.108:443 sasinator.realestate.com.au tcp
US 8.8.8.8:53 sync.adotmob.com udp
US 8.8.8.8:53 dsp-ap.eskimi.com udp
NL 193.0.160.131:443 p.rfihub.com tcp
FR 45.137.176.88:443 sync.adotmob.com tcp
NL 188.42.63.48:443 dsp-ap.eskimi.com tcp
IE 52.94.223.167:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 1f2e7.v.fwmrm.net udp
US 104.18.24.173:443 s.tribalfusion.com udp
US 8.8.8.8:53 idsync.rlcdn.com udp
GB 18.134.84.16:443 1f2e7.v.fwmrm.net tcp
US 8.8.8.8:53 ads.betweendigital.com udp
US 8.8.8.8:53 sync-openx.ads.yieldmo.com udp
NL 188.42.189.231:443 ads.betweendigital.com tcp
FR 154.54.250.80:443 ads.stickyadstv.com tcp
US 8.8.8.8:53 simage4.pubmatic.com udp
US 8.8.8.8:53 88.176.137.45.in-addr.arpa udp
US 8.8.8.8:53 44.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 5.44.211.130.in-addr.arpa udp
US 8.8.8.8:53 146.7.205.44.in-addr.arpa udp
US 8.8.8.8:53 184.220.23.23.in-addr.arpa udp
US 8.8.8.8:53 48.63.42.188.in-addr.arpa udp
US 8.8.8.8:53 16.84.134.18.in-addr.arpa udp
US 8.8.8.8:53 108.127.238.13.in-addr.arpa udp
US 8.8.8.8:53 231.189.42.188.in-addr.arpa udp
GB 142.250.187.202:443 imasdk.googleapis.com udp
US 8.8.8.8:53 tv.springserve.com udp
IE 54.74.27.74:443 tv.springserve.com tcp
US 8.8.8.8:53 csi.gstatic.com udp
CH 172.217.168.67:443 csi.gstatic.com tcp
CH 172.217.168.67:443 csi.gstatic.com tcp
US 8.8.8.8:53 vpaid.springserve.com udp
FR 52.222.149.6:443 vpaid.springserve.com tcp
US 8.8.8.8:53 74.27.74.54.in-addr.arpa udp
US 8.8.8.8:53 6.149.222.52.in-addr.arpa udp
US 8.8.8.8:53 67.168.217.172.in-addr.arpa udp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
GB 142.250.200.2:443 pubads.g.doubleclick.net tcp
US 8.8.8.8:53 rtbc-ew1.doubleverify.com udp
CH 172.217.168.67:443 csi.gstatic.com udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 130.211.44.5:443 rtbc-ew1.doubleverify.com tcp
GB 142.250.200.2:443 pubads.g.doubleclick.net udp
US 8.8.8.8:53 gcdn.2mdn.net udp
GB 142.250.179.238:443 gcdn.2mdn.net tcp
US 8.8.8.8:53 acdn.adnxs.com udp
US 151.101.1.108:443 acdn.adnxs.com tcp
US 8.8.8.8:53 r3---sn-aigl6nzl.c.2mdn.net udp
GB 74.125.168.168:443 r3---sn-aigl6nzl.c.2mdn.net tcp
US 8.8.8.8:53 vid-io-dub.springserve.com udp
IE 52.30.124.212:443 vid-io-dub.springserve.com tcp
US 8.8.8.8:53 vid-io-cle.springserve.com udp
US 8.8.8.8:53 vid-io-sin.springserve.com udp
US 8.8.8.8:53 vid-io-iad.springserve.com udp
US 35.167.90.73:443 vid-io-cle.springserve.com tcp
US 35.167.90.73:443 vid-io-cle.springserve.com tcp
US 35.167.90.73:443 vid-io-cle.springserve.com tcp
US 35.167.90.73:443 vid-io-cle.springserve.com tcp
SG 3.0.171.202:443 vid-io-sin.springserve.com tcp
SG 3.0.171.202:443 vid-io-sin.springserve.com tcp
US 3.232.126.218:443 vid-io-iad.springserve.com tcp
US 3.232.126.218:443 vid-io-iad.springserve.com tcp
US 3.232.126.218:443 vid-io-iad.springserve.com tcp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 108.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 168.168.125.74.in-addr.arpa udp
US 8.8.8.8:53 212.124.30.52.in-addr.arpa udp
SG 3.0.171.202:443 vid-io-sin.springserve.com tcp
US 3.232.126.218:443 vid-io-iad.springserve.com tcp
US 8.8.8.8:53 73.90.167.35.in-addr.arpa udp
US 8.8.8.8:53 218.126.232.3.in-addr.arpa udp
US 8.8.8.8:53 202.171.0.3.in-addr.arpa udp
GB 172.217.169.46:443 play.google.com udp
DE 162.55.120.196:443 matching.truffle.bid tcp
DE 162.55.120.196:443 matching.truffle.bid tcp
US 216.239.36.117:443 beacons2.gvt2.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 196.120.55.162.in-addr.arpa udp
US 8.8.8.8:53 www.google.co.uk udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
GB 142.250.200.3:443 www.google.co.uk udp
US 8.8.8.8:53 e2c47.gcp.gvt2.com udp
US 8.8.8.8:53 e2c21.gcp.gvt2.com udp
GB 142.250.200.3:443 www.google.co.uk tcp
CA 34.130.135.16:443 e2c21.gcp.gvt2.com tcp
US 35.206.80.10:443 e2c47.gcp.gvt2.com tcp
FR 172.217.18.195:443 beacons.gvt2.com udp
US 8.8.8.8:53 e2c57.gcp.gvt2.com udp
IT 35.219.224.178:443 e2c57.gcp.gvt2.com tcp
US 8.8.8.8:53 10.80.206.35.in-addr.arpa udp
US 8.8.8.8:53 16.135.130.34.in-addr.arpa udp
US 8.8.8.8:53 178.224.219.35.in-addr.arpa udp
US 216.239.36.117:443 beacons2.gvt2.com udp
GB 216.58.213.3:443 beacons3.gvt2.com udp
US 8.8.8.8:53 download.buildbox.com udp
FR 18.164.52.60:80 download.buildbox.com tcp
US 8.8.8.8:53 api.mixpanel.com udp
US 130.211.34.183:80 api.mixpanel.com tcp
US 8.8.8.8:53 checkip.dyndns.org udp
DE 193.122.6.168:80 checkip.dyndns.org tcp
US 8.8.8.8:53 60.52.164.18.in-addr.arpa udp
US 8.8.8.8:53 168.6.122.193.in-addr.arpa udp
US 8.8.8.8:53 183.34.211.130.in-addr.arpa udp
FR 172.217.18.195:443 beacons.gvt2.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 142.250.200.3:443 www.google.co.uk udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.238:443 clients2.google.com udp
GB 142.250.187.238:443 clients2.google.com tcp
US 8.8.8.8:53 beacons.gvt2.com udp
GB 172.217.169.3:443 beacons.gvt2.com udp
US 8.8.8.8:53 download.buildbox.com udp
FR 18.164.52.21:80 download.buildbox.com tcp
US 8.8.8.8:53 21.52.164.18.in-addr.arpa udp
US 8.8.8.8:53 api.mixpanel.com udp
US 107.178.240.159:80 api.mixpanel.com tcp
US 8.8.8.8:53 159.240.178.107.in-addr.arpa udp
US 8.8.8.8:53 www.buildbox.com udp
US 18.205.139.99:443 www.buildbox.com tcp
US 8.8.8.8:53 99.139.205.18.in-addr.arpa udp
FR 18.164.52.21:80 download.buildbox.com tcp
US 107.178.240.159:80 api.mixpanel.com tcp
US 8.8.8.8:53 checkip.dyndns.org udp
US 158.101.44.242:80 checkip.dyndns.org tcp
US 8.8.8.8:53 242.44.101.158.in-addr.arpa udp
N/A 127.0.0.1:443 tcp
N/A 127.0.0.1:443 tcp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 download.buildbox.com udp
FR 18.164.52.21:80 download.buildbox.com tcp
US 107.178.240.159:80 api.mixpanel.com tcp
US 158.101.44.242:80 checkip.dyndns.org tcp
N/A 127.0.0.1:443 tcp
N/A 127.0.0.1:443 tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 virustotal.com udp
US 216.239.32.21:443 virustotal.com tcp
US 8.8.8.8:53 www.virustotal.com udp
US 74.125.34.46:443 www.virustotal.com tcp
US 8.8.8.8:53 www.recaptcha.net udp
US 8.8.8.8:53 recaptcha.net udp
GB 142.250.187.227:443 recaptcha.net udp
GB 142.250.187.227:443 recaptcha.net tcp
US 74.125.34.46:443 www.virustotal.com tcp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.238:443 clients2.google.com udp
GB 142.250.187.238:443 clients2.google.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 216.239.32.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 download.buildbox.com udp
FR 18.164.52.17:80 download.buildbox.com tcp
US 8.8.8.8:53 17.52.164.18.in-addr.arpa udp
US 107.178.240.159:80 api.mixpanel.com tcp
US 158.101.44.242:80 checkip.dyndns.org tcp
N/A 127.0.0.1:443 tcp
N/A 127.0.0.1:443 tcp
FR 18.164.52.17:80 download.buildbox.com tcp
US 107.178.240.159:80 api.mixpanel.com tcp
US 8.8.8.8:53 checkip.dyndns.org udp
BR 132.226.247.73:80 checkip.dyndns.org tcp
US 8.8.8.8:53 73.247.226.132.in-addr.arpa udp

Files

\??\pipe\crashpad_2824_BYXROTDWEHWIANJX

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 e2541f489046bb0bbc886c45ae7c1333
SHA1 436565389defe81925e2e55a51d75871a31e387a
SHA256 283a9bc060e377d43eb53e0709a670e9eb5e1450825f8caf3bb1a897e37e0bcb
SHA512 b6a22c943e975314ab6fbdcec5d77bd7b36dc0f3825442c1b0a282130e8838e0ee77f8552b293fc273dba19859286c0d278c26580f77ec04c9ddf15fa0aacddb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ea7cb9049e80553b4a942ddb96eff899
SHA1 63c6f7884ef65009f2dc8151f4d843953776dd00
SHA256 962917deb0b2f3093be4d2f4a76cb1f2c05c7fd2bc2cec72ca3651fc51565bd3
SHA512 5d0b3f2b6da32767648b1628b4b1a2a6221112c14152db818a90ba15bc4d9be980abea848520539005369379b745007182521d78cc9314707402d73ea637eb0a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 47c540e6d873a21153b905417e2357c4
SHA1 453e9d7f3c9fe737259866763841b670fc66a43b
SHA256 bf95bc6a26ba72b20d3d281e0cc393746b9013be7e2e3619c709aea1e885fdf9
SHA512 1ad744027d1189fc8e867653cd7a6689c8a1420c419c9c93804d1987556b5102e7f1085770564a276ea22f5db54846767a1c45ec342e4933f017600a548d5ca1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 f1a3247967715b3460a37bfd4f7c7d83
SHA1 9e0dbd9a8b1c36c5c133d28947e9aff9fbc85a1b
SHA256 c9b03591cffe643f1ce3017f41717952e8b0f1fd600aa5b253920d9a70242f6d
SHA512 b47572f3deee82343d4f4a72ee73c0d1800be38097bcd73002ea191d10eb53404788040e09b1c8461c4148fced243a108db60f6e137a9929522c26a9e5f6bad0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 12b83e989851738f4289adcc37d5023b
SHA1 dae4ffd3ea26a44812a491b93fa1cc360c63ff12
SHA256 0671e614cf8e13a6f5c0785637d353773dbbf4c3e127fb463ce099c79c8f5950
SHA512 c4f3930765c45d90abc5c2a5f5be42e6d4cb98f533a8c72f8fd9c4ce73156850f1482f103584dbda8aa911568dcac35f8322cd27083ac3ad78132e6af8857f46

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 abafce8cc3dcc9a63d47ec18082d69d4
SHA1 36f0ed27c4d4e2f1b4600757661ae8584da91b70
SHA256 98d7a6d5a17e7a20723fb70c10f8b5da85b817a1ceaa21726e5ef8d12989ebd1
SHA512 cd8b0cee3c2125edf7687ace92806996d6b7fedc88958202b769a6cfc8d24a1f36cdb7d96f542db8519d6c5acbe408325e138e371f33662f6595a54c6a9313bf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 62ef02d2b807c8d0aa5bb6e928b63562
SHA1 5128f90a8f2660ac3606eaacaf8862d25dfbc762
SHA256 2dd58d71d82c85f1b97bf49db4d67d6f58e4abdb5f82a0afd26c0d6d971e9243
SHA512 8e0e08a84302d408c83c368d98a79aaac23f81edfd5886aaba6254d464cdf6d02e409d23fcba6855412b4827120858700b8cbe588dd99f5147640ac2cf310c99

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 ba603933221f5d521046d93d403a61cb
SHA1 030629405a30d9bf52a621888febecc7c4fb0449
SHA256 ed49a8d454fd199812ba9ba097d90bc45736fb267fdd954dacbd9e586e0419ee
SHA512 683b37aeff57004eed5ae8082519746c958c65b7fea2e566629aec520a6d38a2fb4c5003e6f25a90e7bd39c3fd19e719f08f16bd85781c0c07695a947183c7a0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 3a33e45f47c25d8b7fdc174e66facfe5
SHA1 7225562d6e0f4b2742a96645104345cff59877df
SHA256 e5d2ac44b9e8ca2118865b0a9c5a3e28551df9f72fc0f6421492bc9883a1922e
SHA512 d1ea7cb4d56fb4e8ec2b2ff441c73c456400b898cd92c0013c2e3bea7aaaebfa4eefffd538e0380ce3e9af803e0059e4e5382cb71ddfd648f544fd3200bf889a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5812d7.TMP

MD5 cb887d08a7b9e9ad74448c8fe0217aeb
SHA1 2f575b803416f998ffe99470555593dd2ee89c3a
SHA256 bd2edb3bc84a4d2f519c255ef3d337b1e9c28c02272cbf81fad4f00fc21b1452
SHA512 622ccf09f5f3ea1b5e9a10224d0d8814d943f77788e435170231d68511328ff228825e78f22e28d55335286889971a7e9e94b4b83911e072823a0597fbf7a342

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 1ea1836f7749263d733aa5db07bf80c7
SHA1 081a012caea70555b493762eebc2273f5e9ff508
SHA256 2b197d85a2ab4ddfc55c8542fdd23b6703113164057ceea0ef1697d2160b28fe
SHA512 1d00974b5133798ceac08e28ae568078bd3d05fc9005781469031978d132c1d97f74a13d64fb1327f9eee34791175e02f2745987c08f446d54e1296509d97fad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 25f22577e0819cc854dfb772ec00290c
SHA1 1d6863a25046f9b2a820e2f079e1d60003a48126
SHA256 25f784657d7f318c5ce78043a7b875f3448f712ee3ac9c0f971f73165af01a81
SHA512 0007e018431d7bc270cd0e34d12f6a3f545e72803d82383a68274daa1fed0a10051eea368dc9fa2c7c3dd7110fde8edfa213b25c3901329fbe5ad8bf79b3754a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 ec70dae32fc4a07f75303ccdf14f4c5a
SHA1 dab012ac4c1a98cb7ba5f002dd811b5c9fb0a544
SHA256 25da9532d066cc977fe345920c064cbc4f055880c2fa4e087f049f1fb2a890e5
SHA512 6ca815f23ba065f4e8dea64a0a358b34811d80c12ec5d268536dc03ed8ace47ac75e9cf4bd37674d0c34b1a66d7855eac67103cdd45547a618e6482936af971e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 aeb5b0f28ce95c0b0440a1b195328cda
SHA1 97117f68d131221ba39dd7ddb39028b8e4d52930
SHA256 2e394136691d34bc65398088b02b50d8c98dbe4bce8400a9546f7807b489f3c9
SHA512 d301837ad2491a52c831359e31d60a6f19fb30486de4c866913d486e3e9d4ce441d007fad9755f0b625e710b58d78b658af334635f75178722d9065599acb0a2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e0c5c314e8251c599736a32d3252882d
SHA1 eb46ab8978f0ffa6143d93713328cde062a51090
SHA256 a15797e681c288121c6556bccefd29e8288861c4e31573d19ec6cf6f03c26f21
SHA512 8153c875009cad0b77c0c723d6fb5328955444ce6464a40b7204bc68848167e5da533fc4f29e2ab84945bdd2cd5dbfb2a36c83c3890cc4185262f96c861a5232

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000035

MD5 081c4aa5292d279891a28a6520fdc047
SHA1 c3dbb6c15f3555487c7b327f4f62235ddb568b84
SHA256 12cc87773068d1cd7105463287447561740be1cf4caefd563d0664da1f5f995f
SHA512 9a78ec4c2709c9f1b7e12fd9105552b1b5a2b033507de0c876d9a55d31678e6b81cec20e01cf0a9e536b013cdb862816601a79ce0a2bb92cb860d267501c0b69

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2b4f8d5321ebcf7f8b0069ef56863a6a
SHA1 94505c8e219b917316d1d7a0eb9ad32f2f27a577
SHA256 e9d2a25604c7a7020ba4e6de212ddb7dbf2ce5696499b074d7df1160ca43666e
SHA512 cd73c5899e2ac55be9621ddf1931028366c9b2d7ca3991a163d59cd13d4e6836010bb09d084262a952308b66ba1a3aee8be1787516d2dd8152ddaca8177a9a32

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 04b698a6ab6d52f138e1c9d6b501e073
SHA1 2327f3549624873dcdd8c9c42d8f9df16fc3c2cd
SHA256 663c81596e1c36228a8a2ab7e2e5d4529fc7768c7985eb0dda3ffac775c34042
SHA512 396d02bb2100f61e2b0767f4e6d2a83248049eef653e8579f7df6d3c12972d1ad0970be7421c96500cfe9ad7df8b684c8dec99af3a9e39309107fc6696c343c8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 d5005927ebee2b2005061ae8f8f9de07
SHA1 8e7a4bedcb63eda9c5d81a037def00dd168b8f0a
SHA256 409e6e7c0b29024613d3464499a27fd1163b0b9ff8bc0140ebf0682c5f7e89d7
SHA512 6c1b187baa30d6408a3a85e54d1ecb9c6b724a6b8789dda08c2d703b8b257059a5d57bfe598118868dfe8303cf2156f063cf33bae742c4e15519cfcb8caa4f28

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

MD5 caaa5222d179a24ca5540080c7018b99
SHA1 1f415a7a73a12a4c16f25709504f4e4e4beae9dd
SHA256 b729255f2e984a20fa0f0eb07e08368cf468fd17ff27a7d1dbb4042ec261d8cf
SHA512 71b4f878aa154ba4a8523c2e36faa8dbe3cfafa082b18796d8b69539dee9506253b9e55fc9b71cc2c9027d22ae08587b0e2ddadbc8d3395dbb73584d1ca1ebcc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 7f2d15801166273f1e1a1dc64316c645
SHA1 1bbd3108113acddff2331c51f10d8316daf02346
SHA256 80caf49ccc635ffa13aec56519f632bd91af82530bfa9e3f08fb6214831f17a4
SHA512 b6a7e94a2b543c3387f7dfea15dfee59fb1c06354465fdcf4b7e4b06d588a232a14989e4387d1d7f123c152fa4205a275c86512fed4afc5aecc28610ada48f52

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a6e16848af641db5a0f1e5959729a5f9
SHA1 527d2d84ff33a145d3f5205547cd1fec3a751d6e
SHA256 85c1637b3441e69404872063baf18b66a3b0d2c00155bc46f5a1d46aab9044ba
SHA512 aec9a63c611a0036e44d99a4bd72bc0783e1477a46036855e3d5edddfb7ac0824bc4c3758e1a10a17a33e913444ba16da211d1a34ebdea10c2a8905fb67880ea

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 ed188cc1f1bb0a87c95d07561f79802c
SHA1 8ac0afbd104441566928d4b51a576ed00a6722c2
SHA256 9fd9a94da306706ae6492a2616d4795d21b0a7c1f38ce10ee4be2a5d65483024
SHA512 d5d060298dc71ef9c14a7cad2be35695527141e780ffa1da3754ec93593094761571f70e46fdb861fcc8f1d9e38e7cb5ca66ca3f2d798f03ba83b9a45e9eebbe

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 1600f60c4ae635577f97d42a5d25072a
SHA1 a6b7582cd083d9614ddf880339d103f565f5bf4d
SHA256 504a5fb5e325c36b7d29a567cb39f8b1735e378617f2d06fe217facf87a85bbe
SHA512 660b9c42a71ff68601433839d8fc2f79341359bab675d0e591405ca8849118d6b24e5167830b267eb39f198b86d55ceb5146ac33d579ec87eb96ae7dffe36638

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 fbb0a3ac94990492f18211d80b165f7b
SHA1 f38062074f4806fc7447eafd9598a28974743341
SHA256 e704273c46bb62997a94f7b8ca0b250f24ee6a5f3b3a1a43aca84a7d81c33d0e
SHA512 c9bea69f8c88bb639ef5a22936b0fb1318d87f707267f93557ea828a50bdc211c74e23cae9b2a9ca43e484e24bc4ecf6e01cbb97412388240ea97e3cacb37124

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 6c33e1d094ceb2807dbeffcd51c871b0
SHA1 e669fbe7d72126bc3eef977d9c05d6f89e462e50
SHA256 3c2929d0cf11384ddae0bd1af7d9de4aa9d640d249df86ebe9d34d4285d52ffe
SHA512 2772ee31298c4ce847c2c4e2bfa7ad2615b65f98700e2caefe5945aa97f12875a111a02c61eb3dcac617116c58289c0cd2b8fd48ca211a07c191b3e5c9954c60

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c17f4f9f4d65a27c0aac5568bff55fe5
SHA1 362ccfbc1b67d31c9c5f78ec583680438713af15
SHA256 540b4f45be957bcfaf96f0c153098cd0a9b74d756a6591dd5e0db708f319d618
SHA512 50a4189fac8c6853193790345e3ad53075fc3db3e3ed174195a0fb39217e960c8a3d8c852eaf30a3c798ddf80fcf4e9eae06c08aad046016ac1ea1208c8c3861

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 1f4c2d1efadd8a82adf22fa9462dbf31
SHA1 1abee62208e1c08b7d19738a1ab9f98fc25a7a0e
SHA256 8d6de59f77992dfc93256df9ca0ba4f615a8aa7cffd28be40140a05553aa13d6
SHA512 e3bbac8c5f21a60678579c8e12005e774bbd4d367591ad125621b6f1f9de43d02aa5bde7794f9b5c054aa63c64fe1cd1c3af3e40cfc12527340f6850d071a593

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 f0b0ec522ea6825de366a3b185ffa975
SHA1 ebb312e47a81950708d93ac7f591bb09eb9d2e82
SHA256 12df5f9461606cc5b6e0f30cacedc48705efc80c4947d699aef6f40bcd36b072
SHA512 ece2bdc121b13c3135f07030ed65cec363eb1c5ba9778b151c4314986311af9c0fc30e10075cdb31956dc6083cf0ce45b451f4ce6d69df7c58307a85173d2414

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 0597f2065a572a8e66f1f36f71ba0171
SHA1 e7175b1ceedf42fece0d8bd2e6f799c6de1e1f06
SHA256 82ccb7c1467bb42c9e84e17584a8d8f3392a68c7d1713ceb2e923ee690a7be33
SHA512 5c624720aaa29a7f377a063716e3967a2daad3f9b7c305feb3d477a854dcfeaf15f06ad92ddf833ba16df2b58bfcd770f48acd100c338293c5d7feb4e5e57fa6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2e7002a48b81914664972f9ab8c31363
SHA1 fd9852d289416f27ac87dfc92ffd2cf6640952dd
SHA256 87f46cb0354c8ef35cd013d684c02967b46aba594750f7451923b83f885c9ae1
SHA512 239058a25f81717babd8f1543e3ab56ef23a83d6efdd4eaa3bce09302af30e089935f342f763a41bad9325ee75bf627019c9c3617d04bca08bfeea9322c98d79

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 974a8bd8702bc5ea2b2dc4d8702bd5e8
SHA1 b644bb3fa6f15a766d755a501d9681dddffb8ce2
SHA256 b515978320f7542ca5cefa156f2dcca985ce1c959856b65c254c9ab70b173420
SHA512 12667c16326c3f6880fc2cfc3ffcdaa3980ee7050d58008fa8bd92ce21b2a25352d32085ad9a1dff8c97f0c287860b967fe700e701ccff1c549d1f85cb59d16d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 51e39e13bf488c5e0c0c853312b163ad
SHA1 a5e0814d1837d3566cd5440829519e74017cbd05
SHA256 06e3110532d81aafd0cc7ec83dc5ef3b0aa3836275c0d0e9c5c353f8d9006b57
SHA512 9dea6ca6ccd4c75eeddaa1719f9bf16077cf42da0559f0eb2b7a8fe6ab1243f3d57d72843ac33526ce77754cbec36822a87ba46f2253605d1fff91636d5b825c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 22862227960f12656c5b399466ca67e4
SHA1 9e2cefc7b6c08ca9f98ef8e33a0b62ca9835863f
SHA256 ad5b0ff1de51dfdbcc03fa46f2a475b7f71bd443e0aacd1c14654dd1ce48d4dd
SHA512 909d484389966f76cd8a404bb962faa68784a1d144885c4acf9ea6b2956f77a9b7f32f70228a22eeeed34337e730bf41dfb0a27fc90964a07c2d23d91b82eef8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000082

MD5 3be2e9c4c58e18766801ef703a9161cc
SHA1 cbdc61e9fa2bd8c4293ea298a8aab94745e57f2d
SHA256 1c3f11c5ba6d3d5e0e1e88a3de6c27a16df13833470a19c03b04fb2f99dd5d57
SHA512 2f1a71f1fc17e79ddc1c0ba0be697fdc1641ee38604bd0c424b6ab702f008f9fd3c57f22ca959cea1f1de368016b258027190c279637ae8838787be366e40ec0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000084

MD5 94f3cd075711c9533d5c34754d748eef
SHA1 6d17b83bacb2d1aea0b3e7995dc7128cf7b88e56
SHA256 26922c1a98440b0c6b8141d2ed4d0f485fdca942fc1bdf304c723ad17224e7ba
SHA512 4996ef6edf0e7616cc778f06fafb3cacaf81de8ab66559b60617d87cbb6c7e8fbc3209aa2455dcc480f9e40bb6e162ed22a7ee25eca5563052530b1830a626e1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000096

MD5 dc618e061d68cfabe140b8be708ecd63
SHA1 7f80fde042b5cf118546da35cbdf17ddc3d6cc46
SHA256 c514b3244a116be900dc4aee0007634771898b955af033687c2d6f2273ecbe3b
SHA512 2e41eeb182bbeec6eadacd33732e6da6a015aabe00142adfe3ff6a5be6b0cce6e68da78db6c6bb9b112c65bf935a8ebe645f341a3bd5f05716add5dde63c2275

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5a53c34b8621dc22f3438134cb6656a2
SHA1 e77a6c05dd80243486e4caf4e3e95374fa2fc0d4
SHA256 848011c45e0d46d1aed3f4c5f84024a735f7406d7d83937934ebcca0034bfa36
SHA512 620b3307609e3438dd0546743dc473d5f94ab668dc171a53cf37f99b3b42adeebdb0e6706a5496020342ee85a63d590c0b888ef309f0b8a1f27f3606ef92a5d2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e601805c784ee871501b27d90c4e3c71
SHA1 934ec3826643b0d52676132a4edce13b7283a1c7
SHA256 bb20352a8780ec065a435c1a67b968830f2e148424515d8283d80b020b8c0547
SHA512 5b4da242192d049f68ed08d18ac14d0bd8df739f7bad8a9cad010d264f969656f02db1aff6fd7ed8d3b02d5e91d58c6b29dae87c586ec7e4a9f947fbf80d1105

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000074

MD5 3b0650447674e63f4ecc8e781def0fa4
SHA1 29014308bf69683f507db387a2d6917bcdc73eee
SHA256 7f53c287b1419addd5560c55cdbd70e91e7a5fae82906cbdcd8d6d9924f9e794
SHA512 27305b0710a05fb76c27f9c39db56eb7ab2d4530e9e1a4b14a1082edf41a893bd1d8dfab60cf01a4d2e820f2ae4d8d14f278a43021ce7ae282ce0e63387a55ad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000086

MD5 213ee0fb15c15f4d60668f76eb6ce849
SHA1 10724af05228b412a607b9da530b32ebd3ed63b8
SHA256 32e6af6526aecb416f3d3e74bf4add4becb3eedf7bd98e4c245df72f57e42478
SHA512 4ea2dd06222c2c4caa4ef4b3046e1a7d7bd05aabaf15dba55d17b186dd5c61c1a1d956f3ecc439c99b0945c3dce55f2136f949b8049e1b377aba649c9904f82f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000085

MD5 481f5276ad0115cc3a3795544187b170
SHA1 4f5195443166c762bc2930b5a26c0c094c59138d
SHA256 2378d1b08310b3fade0d8ca6be27f3cdcf6e22eb4b910b1642d1645a06fc3f19
SHA512 45dcd09c6bfc73df65946b24aa9ae064398b9cb0ecde680b94bdfb2147a259472305c7763a9d1a0065805613b769cd39dc17bf559136f2ab356e7074466e895f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00008b

MD5 e68dc41937e75b392b26998acb2d09be
SHA1 b3ffd33f790eb21b8bae1c6c8f93c85765fc4e91
SHA256 e4b53b7fdd39514df81e6bb419cb980f00cbb8c95cd421f17cb702faf18af513
SHA512 68eb5da95eca580e9d3040ea91717300e810e26cfed80f0765c2edc2e983d102671c358792c72c680f9a621304cfa542bb116cac9f6f1dc2fa28e39201210425

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 b1dc2a5899a70f60c4cd8881d23c3527
SHA1 0901a6f077e408ee129d54ccb03c452fdf1e1717
SHA256 12b08ef343d62914b78ada669604012ed6817f71a62b646b0dc63c2d6c489f26
SHA512 e4eaf3481843a492b656fc34c93fd0a652deabb01df83b0bf60581da0d7f46b65fda98b0b662b6a163c4d01c9fe2c2a392c5d4d5986ffecce11005d49934d219

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 48a7aa118571f99a0484c34a8dc2b97d
SHA1 655ed8998f970eb0658ebc205eb1d20b293342db
SHA256 7ac149bbc512c6c47f2b4a52e37f35e1debc5b6858e59735447ddc47e9ac3a1b
SHA512 1b5472b61c49708931124d4124692ed21c5c0f9e9cbed3c74f397c4576a9168fded0d2d029e0cf17a9ba8eef8eee93be4484c844a7f4d9d67cf9aa2055b776d3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ba

MD5 4abaab8e7de1b432de604b80bb1ed6d9
SHA1 b2b6af238b1a5447d6a1298fd5437331ca53a9ab
SHA256 f1bca05f29b170f9ac7ead7d29850d5b54a2878596ece51edf5947f529f2dd18
SHA512 72ed23003c13bdca7cec70becde014e5654fea43b9776e1c013733bc94084e94698fbdc982f5507ec16b03dafba50c26d2e5bd1c9f4efc808d27d75a835b5241

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 bb6253580a827b45409a86ff3b0a0334
SHA1 4ecfb8c94abcb19f50a71bf06f2c9621477f3aed
SHA256 ee0dae6444f0bae0c4e56f2cde3fca4325093a3284f2ccc74fd85ed3de67de90
SHA512 85c3835c00343fdd5c57faae1b547fa88f4f62082694875e4dbaf2bf8bad4e8600bb9b46c01c48a037817f68e023adbb5e48e78dd2d9efad4ac50c5303545ebe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2fc2a640c7e21adb900b4b8ae33b73cab34f29d5\dda2b382-b691-4a34-bf77-90c6423f84e5\index-dir\the-real-index~RFe5b5010.TMP

MD5 655c036739a351b7cb54228a7b9f0545
SHA1 e33b02c97e36067601c6c135e7ccaad8764b9f14
SHA256 99a45713870666483d4884bf0be07575c191261e630a4066262340662c97aca0
SHA512 73261d36e8824ccc7e14b8385f7fbebdd482103eda87a2323852055babcefd810b7693fa0099508e869c0d21240859d37ee9677098cc78a7e50161ca099f8c75

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2fc2a640c7e21adb900b4b8ae33b73cab34f29d5\dda2b382-b691-4a34-bf77-90c6423f84e5\index-dir\the-real-index

MD5 b11ebd7ea604b9b9cc1b8be9480acd50
SHA1 7ddd656704d438958bf58b13d798f7cdc5274dc9
SHA256 6df92932290cba9a8381a8699674d67a7d5222b86f914539582cb3ad0b94f063
SHA512 e15f8247178e70bd6790b96fa6d2121309f6832a730042c1283a724d47062906d6dd6bb9876ec728dfb5fa8a0a0e7c2c720ad418d0bdd93d6eb2fe02aae454c5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2fc2a640c7e21adb900b4b8ae33b73cab34f29d5\index.txt

MD5 4d7584e129dc0ec09ae367db68799080
SHA1 2af6ca3701a3d33692e8ea7d28425b8157c8f3d7
SHA256 dd69ecb7e1334156d7a45acb174e3e6a00b3736bbbe837a28ee438c8832f5955
SHA512 73ae83e4b09fe4d79bace0b70aa25278f7e755ce68832c54a08584344030e994a095896a3008a167961b3c9d5aa1256d347f5874bb31a55e735c151e76ec8d83

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2fc2a640c7e21adb900b4b8ae33b73cab34f29d5\index.txt~RFe5b504f.TMP

MD5 6b9a74eae35c17e2666e32fce942b6a0
SHA1 f82ffa3ae8195759e5346ff148163872ac784d8f
SHA256 3ad56ff4760d56d536ff7198b40fd3cb2cd1525b18fa8d47bbd34be1985b10e4
SHA512 2e7e060f18213f7e84b6aa54c184419221503229f0aa35617258e682c33ec7611a644d07c5508b969b8f5bd00e48bc9784070d29c3383c8beb6747026f9dae40

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\860861a2ceda2488_0

MD5 bafa80d5b4fd6be358c160b9184b990d
SHA1 1630ad7414a047e02368c7caa68a14153b1eb193
SHA256 370283b537f13710debf88b3333375d48871310cd4e33ecb72b8e9aee990b771
SHA512 d1caaf4881046853a982e9d700a51dbcd30bbc55c844fa861661aa7764f887dd2bdc904a10724948390286552bbd6bce871c6ab1c848e683aad9e98f7e642a6d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\bea99651e371966c_0

MD5 153888081fe0cc490e63fcce517c45ec
SHA1 a5938fd7f7db660e9bc6ee18decdde27e8804108
SHA256 b205d2a12c52b7f54d05416dcbd37d1ebb066079d16d68727f27717c5f3ad2a6
SHA512 65ab99925153bd01070bb3c814b38c4a0c52b48a9a01a6fd49aebc26fd7197aa900d89652b421c2f4098a66f65093f3fdaac731b5d47b138a6f95e8ce9dd84ee

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 ca11fec57fd0054d7836f78860c77b4c
SHA1 ec0ce6355bbf45df4366428d1a2b7a87823b1c99
SHA256 7b393a03486977f42f1a30d770adac45336642533f880ca2eab8ba37710d182e
SHA512 6c1fef6d730d0d791f3ab8954e3d6829939e6da694a47fe3c56130dda884f9154c92aae57615c0a1b5edeaed8ee824dd66567952ecdf88eac84c7bb0a5dd68fc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c30e9acf9eed3a75c483098534cf2943
SHA1 51236a5061eb81dc57dab5c7682a1ce58cd179d9
SHA256 d48f426646f013d0fc575b4f2187deeed9285c27a649dd7f50dea264f31929fb
SHA512 420d1850852ae86f730470307714ba654079cd32b6a5c4a2d3e49eb2f3f214eaaf2d30d2f5c2cead10b0e5228ddf63a2e4754f42cf80e705d3da210455c431dd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2bbc84fda3f9d486ef231f0d6b2d528a
SHA1 d359b923bd846d297cc96daac1666060b85c3fc2
SHA256 6c2dae2086ae12f32f44846e0e8da5eba76a44aad85b9afb16f9653232d91192
SHA512 9621d6df65d4bb637de98a97fa99241b804e6339c1418007225cd4ec0976479d6cbd44c21e35deb440a444fc3720ef0ef4e41a8adbc57194ee46848b7afbbdd9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 b44ee1d7035b44c2de5041591e972d08
SHA1 b49e1a8621e23841edde3506c9c9cbf803f48e59
SHA256 488840fa00112f8f5b3a5fbe3ad735855a7965379d5bd21dacd35ba6d52c4f10
SHA512 a539548fcbbfb225b863ac2c865ebb6dd72b97ea860123d82d1d9b174b37de04dbec99bc0d6db7ce63315dfce634e9c7fd40bd3c315386f0cd9809e0e9f1e62d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ea366a9d0ba510bbe18855a6fbcb108c
SHA1 a25ceecf937309ae35a615b1b4f2226ae677807d
SHA256 27f109fddcae46b48898baee2efbdc12b2a7bb2572e9bfd4f28732b7efc4602c
SHA512 c996db0852c0fbc812f0ff0c6ec3353f08acfc406be529190225f90ea135a04f85d817d652e8da918d4ca62b9194dd903117e7840e4599f40a4d627bb4c80270

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 a0828753565118ef98ae005149e9ca48
SHA1 dae06b8c6b8b1f43087a9432336874aafb0cbb98
SHA256 8f7119e9f573f37e231672141ee4d21ad74180ed36b3a5fad999d191c2311000
SHA512 3c57a7dc208b50f9dc08cd16ae59a3065590fd1cb730a8fac866e94d145a933c2c5f700af0a8027b6356f4787cd469c8f23d565ee7a8372b2e9f1c01ef88ff24

memory/1496-1751-0x0000013B5EFA0000-0x0000013B5EFB0000-memory.dmp

memory/1496-1747-0x0000013B5EF60000-0x0000013B5EF70000-memory.dmp

memory/1496-1758-0x0000013B67260000-0x0000013B67261000-memory.dmp

memory/1496-1760-0x0000013B672E0000-0x0000013B672E1000-memory.dmp

memory/1496-1762-0x0000013B672E0000-0x0000013B672E1000-memory.dmp

memory/1496-1763-0x0000013B67370000-0x0000013B67371000-memory.dmp

memory/1496-1764-0x0000013B67370000-0x0000013B67371000-memory.dmp

memory/1496-1765-0x0000013B67380000-0x0000013B67381000-memory.dmp

memory/1496-1766-0x0000013B67380000-0x0000013B67381000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d1b8bbf6ea3a5b3a74dd00affa935125
SHA1 f9a595ef716107613e806984ded24449a16942f5
SHA256 6b513f9219e78c9924ebec420a295a4fc25004dd78587aee8f8cd557045cc814
SHA512 be75d7a654a5ecd289051ccc5f6f33ebbaf2ca93eb568c0407f7ab156ccb9b088d06dba32b619c2da9c257973ac63aec2a3156694d55ad7f7474ec000a00ab80

memory/3988-1781-0x0000000000400000-0x0000000000414000-memory.dmp

C:\Program Files (x86)\Buildbox\Buildbox.exe

MD5 29211004fe19a0b2d549dc7e09431e30
SHA1 6ec77df7afe978c0be258a71c64cb0ae9a5da80a
SHA256 87259f60583c8efd5a9f496c68b9aa8e0f700d4efa6c0f094cc821c781ffad00
SHA512 5f0c330bcc75904b9b6bf3d46dc1913209c11eb9984e3e8dca3804c0df39360daae9e6dd843323ea00e3524eb73e3c223381c8de3836c2b8d42d0a2a6ddab598

C:\Users\Admin\AppData\Local\Temp\is-FEMTP.tmp\vcredist_x86.exe

MD5 2fe9702861e9f93a53be8dab361291a6
SHA1 17b381d3adb22f00e4ab47cbd91ce0a5b1ccbc70
SHA256 4ff07492947c3e52607aa8de0c241898aa35c439c442de1cea5d17de5b7c7f01
SHA512 dbd4023d3919ffcca2d21ff01bece68bc58004b966f0484eeef54fac0192ced1601859dd72f2214a38dc53c2c18582b74711d8b80e4bac60b9a6ad03b72fe803

memory/3988-2316-0x0000000000400000-0x0000000000414000-memory.dmp

memory/4456-2317-0x0000000000400000-0x00000000004BD000-memory.dmp

memory/5140-2320-0x0000000002C80000-0x0000000002DA5000-memory.dmp

memory/5140-2325-0x0000000002E50000-0x0000000002F7B000-memory.dmp

memory/5140-2324-0x0000000002E20000-0x0000000002E31000-memory.dmp

memory/5140-2322-0x0000000002DB0000-0x0000000002E00000-memory.dmp

memory/5140-2319-0x0000000002C60000-0x0000000002C73000-memory.dmp

memory/3988-2331-0x0000000000400000-0x0000000000414000-memory.dmp

memory/4456-2330-0x0000000000400000-0x00000000004BD000-memory.dmp

memory/5140-2335-0x0000000062E80000-0x0000000062EA2000-memory.dmp

memory/2012-2339-0x0000000000400000-0x0000000000422000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 3d3fef03b9279007a4d7f33cfffbda33
SHA1 fa848c5c6a88f7a0998d9539f9fd6e599cbc9f74
SHA256 6662eede5fa7d28b2ba490d5c3f1c51b0495e6976d4e4f3dc1e745676fcd2204
SHA512 7e40d9fe1aac7eaeff7e3d18591708525f96af4d63ba6d016f04425fb384c86b6ac5f90041e3cecb59888f30ee0363fec11393444cb953ab6bd1871017e49481

memory/2012-2353-0x0000000000400000-0x0000000000422000-memory.dmp

memory/3864-2354-0x0000000000400000-0x00000000004CB000-memory.dmp

C:\Program Files (x86)\Buildbox\msvcr120.dll

MD5 084997c2165e30db2ae3fd804469a9d3
SHA1 ced6dab01fb11fa386fe06fff3f5a3f46af49a18
SHA256 ca2bd30e5483237c2352a8a96b7aabef8087d8242e11127365377e430667fc26
SHA512 914edd89c68ebe0b561253269efb2c5d12e45e261d1243ac91913333f1ec02588800cf5bec0ecd8326d1a4468109e8e52209fe4634596a1fb0e035430fc40906

C:\Program Files (x86)\Buildbox\Qt5Network.dll

MD5 9ea9b60e0ff61e2f3f98624627dce45b
SHA1 3ac5d17c3a396d5f1f8b1d33b5e612e5fb8098c1
SHA256 2febcb30fe393de5c486ea4e4b82b2ff1a5182b943dff8d56f2abd908c02eed8
SHA512 11a52bf542d0bcb2f11cc6bfed59715434715df278d7557311c684810c829c29d9291c5b8ad76069c39a420aecbe922c9a75581929ea2505f4ec9bb9e9ab101b

C:\Program Files (x86)\Buildbox\Qt5Core.dll

MD5 845531781aa9ab846e3f7b6910a23a54
SHA1 820fd3b44098f89a46addd9a40bdc90cc1f00ae4
SHA256 907262164fbb508ebc34b2b471876e6aacede64344d437c3c65eb9532f0d8cd1
SHA512 552396e613c53b50196ec80da61bb8c06cc2e2ee7a6131b401e988db63a6859d53519373493b7d61913e97123f3b0814ae3676c361ffb2cc9386283014e8496d

C:\Program Files (x86)\Buildbox\Qt5Widgets.dll

MD5 0db5c6782a6d931bc12d2700f9bbbfc2
SHA1 8aebce653dc6fbcad6c084ad3459d634e4a5581a
SHA256 8140ba373b4a87d898572d20f7080f74da6848d71c5e9fb35e505bc073365e7d
SHA512 4dd8a787bb69885ad41d761404e361417f4cc4dc635d78b5c3994e035b55565388030930ce5bfaf781ac7f096a80acb7675cd42a0c0e8dce1d245955e1c23285

C:\Windows\System32\drivers\etc\hosts

MD5 37360caf0905591b87ee1aa8e94f0f78
SHA1 823197adf1bae6a628746e8dd1a5ca74083c2257
SHA256 e6ef4718f413b09e9afa6e5b44841b6578ce94e41d8b4750967563251e8d493a
SHA512 2f7bda1dd33f35bfe977a01823c26918707f99b697ab69147c4c3d01eefb0ca5ba98c2ee336191259eef2118dcc90d3964c794d9e6ea737c1b0a0f096f540f4b

memory/3864-2384-0x0000000000400000-0x00000000004CB000-memory.dmp

C:\Program Files (x86)\Buildbox\Buildbox2Loader.exe

MD5 58679a14f55cdc9d4f043ad271cba6bf
SHA1 04de4c633f1d8539cc5fe0548a57a692c1bc2e74
SHA256 c1bccf7d0ce3f3591899d0c191ca07342f4918fd3b3a82ead6c87ef05b0703ab
SHA512 a43eddf402daee691747be40157b162f3d5a4add508e38e9931471863ee92091e24b69ef8bb625852119318f35dedd966a9515753163eb6d029afd51de5d94dc

memory/3864-2394-0x0000000000400000-0x00000000004CB000-memory.dmp

memory/3864-2396-0x0000000000400000-0x00000000004CB000-memory.dmp

memory/2012-2397-0x0000000000400000-0x0000000000422000-memory.dmp

memory/1468-2405-0x0000000002BF0000-0x0000000002C01000-memory.dmp

memory/1468-2401-0x0000000002960000-0x0000000002A85000-memory.dmp

memory/1468-2403-0x0000000002AB0000-0x0000000002BDB000-memory.dmp

memory/1468-2399-0x0000000002910000-0x0000000002960000-memory.dmp

memory/1468-2398-0x00000000028F0000-0x0000000002903000-memory.dmp

memory/1468-2420-0x000000000B200000-0x000000000B201000-memory.dmp

memory/1468-2418-0x000000000A9D0000-0x000000000B1D0000-memory.dmp

memory/1468-2430-0x000000000B680000-0x000000000B681000-memory.dmp

memory/1468-2429-0x000000000B680000-0x000000000B681000-memory.dmp

memory/1468-2428-0x000000000B680000-0x000000000B681000-memory.dmp

memory/1468-2427-0x000000000B680000-0x000000000B681000-memory.dmp

memory/1468-2426-0x000000000B680000-0x000000000B681000-memory.dmp

memory/1468-2425-0x000000000B680000-0x000000000B681000-memory.dmp

memory/1468-2424-0x000000000B680000-0x000000000B681000-memory.dmp

memory/1468-2423-0x000000000B680000-0x000000000B681000-memory.dmp

memory/1468-2422-0x000000000B680000-0x000000000B681000-memory.dmp

memory/1468-2421-0x000000000B680000-0x000000000B681000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\com.eightcell.buildbox\debuglog_2024.06.20.txt

MD5 7bcea8280cc8cf3c876f7101340cdcdd
SHA1 5a51dfe19072b90f9d356d4cb533dfbee379973f
SHA256 396c4f4f451cc51ce270f6f22869857231c92891af3987defd60450171f69bd4
SHA512 184ff23fa85742193ed6a9b7ea41196be955257291acf979191703b32f5479f8b310a35a159baf08f8b323066bb9f515adb83ba8de22e55321a2eba829299bfb

C:\Users\Admin\AppData\Local\Temp\BsSndRpt.ini

MD5 1dd75535ebc53fcf0fd20d9ee7b366e2
SHA1 8a63c9eb9efb35dfc864d51ceecf247c16a17498
SHA256 a8f4eac4eae96a384a8679536dd8deaa2d5b60ad454f651bf01919e374cccc97
SHA512 5d28de8ab27542d3206cab0e1691232e6f6a06b8187b6b3a70ecf059904893d7f2b0acc64767d758682020aad783cf089abd15b34a92f94b574531546a02f298

C:\Users\Admin\AppData\Local\Temp\bugsplat.log

MD5 2bcae90ddaa05372554ba5dd44038d3e
SHA1 e89ef4babe3815bd40e82f97b653cbb1cfdb124a
SHA256 749f44c7c126e29aa04164e454ad2d4aef4e775b26807eb7181c625f8cbb755f
SHA512 26a2bb184208e91998b079c880aee28f09d3ef26d6df573c0f57a0ccc137638bbd6953ef5e1c01bb872f105ae8f0cc6189d42a15aae0c9d766bd16a8d72093a9

C:\Users\Admin\AppData\Local\Temp\com.eightcell.buildbox\debuglog_2024.06.20.txt

MD5 a37c8ca8b5f48819adf2af0088b0de70
SHA1 dc3f89c151de36f558027ef72311c6cb882c4e0e
SHA256 44a956049824cc5b3d9831fcc6f32d88a6d6499b15d513bb508690ae5d2d055a
SHA512 c283455829af68a35bccb17c7cbe59808ff7ce815aab696824a71de1fc5740456cf69a4abffa05324a8d423ec9d14a706b20c8986242a23a244b4f1da7fca554

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 40f609961f8ab791544d06344c2a824a
SHA1 ece7e8ea6a13df009935682891b7ef48de5fef93
SHA256 5176cd8e2e086005c96472f4c239b62e00fc6b479e8265a4fa60e416784a78ae
SHA512 50edb3607cb89ea994b42ff49b24c4c47631b07c768c48cbb09092f64402d08b20c0c9203a41e03bc36de31f063316ed51bbc9573117aca9477a7f860ea11f9b

C:\Users\Admin\AppData\Local\Temp\bugsplat.log

MD5 83c039999ee14248a270e91c61cc53eb
SHA1 535a22ddba2f0d245afccfcec2e09437e12d3c59
SHA256 af195546e136d2f4090c67a71107c7aa7fe42b4d0eb945b4f1ad0ff372299c71
SHA512 fdb52271be13f22c0eb08061df0e657676c995f53fea8af0b35792fdb9a5489f6d63cccee4d7261a294832648ba2bcad5824b724e5c4ef9c3d67b612c9d75b7d

C:\Users\Admin\AppData\Local\Temp\com.eightcell.buildbox\15a9abca-ef7f-4d17-a182-43950dd3c3b7\fonts\PTModelFont_ID2.fnt

MD5 84d7de7692b1ebbcc7b36191c88f03bf
SHA1 679eeec5e3678db335083307b0dd1baa3f2c8ae5
SHA256 986a2b47fcc3e35a918b0978e900d0f7a9c2eee52e2ee26ebaecafaf47bf5360
SHA512 fecfc2a604785bda79408938cdc46d6e62b2e0122a3696e7eba0b31976a5cf10d0ed296aaca2d17ee232ad63bed88b23b638832df38dbcaf0592ddde6aa0e307

C:\Users\Admin\AppData\Local\Temp\com.eightcell.buildbox\15a9abca-ef7f-4d17-a182-43950dd3c3b7\fonts\PTModelFont_ID2.png

MD5 f0fe914df82a43196a6a09f2ca1a92a7
SHA1 34eadf40f2d6bae54977cffc6cb3ee37ff8bedf1
SHA256 d2abd4c47a939e7079b69d1c3a4a415876465091efd7f15f56a9af65a2019684
SHA512 d74c7a57d2e13e560e4252b6637e5a1daca80c740de27e3211c3b74081c27564cb775b15e3047ddffaa8a73cc7724261caee13279c5dc777a900b4958573393e

C:\Users\Admin\AppData\Local\Temp\bugsplat.log

MD5 e95859aef4dd6387c4df3010a4ed0559
SHA1 48a292f07af31ae1d0b4c9f4abf18ad6b08ed736
SHA256 b0ba59385dc1afd03664e16e2a3001346fd1cd0846369080d2a5146839fb38c6
SHA512 31be616c77e27efb97f9fcd8f7a22856dbd64836701a24a4433b580cd4199861e2b8d5afb56b0c697d49f6f0fd4816c931dd8558952d807df5c2fddb1b93923b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 25e879f3b2277c00168170a201136032
SHA1 7facd85ed175a0f0bd71d82fa36c23ac0a57d6e8
SHA256 eca996727b1ed4433448e78ca4addb925c8319865cb38a00ef519e16ad847ae4
SHA512 f625dc66ae95fbea54ef678900e83cdb8d32445e6bacd925a864878a029b075bf12f6536317797ef69c9c97b369d8f6d2831345aad19e1f8759f6379640eba57

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8f3a3b0535de481a42299a6f6e399799
SHA1 c05804c196a365bd566d096cc5e8bdbbd2e63455
SHA256 68aef8980bd13f1d12e4528bfe4ebb408f97117f460184c693e9b6d9c6a9f4b3
SHA512 19c8e27e1e4387b5d71a89c83798e24381a0078c37b6de3115fc3a7cd1c7bbf466775feff7a3ab3d531a282e0150e5f09aa947aa78d427b12eb05a64f8fc8a83

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.virustotal.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.virustotal.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 46ff6bc90cd4e6180ec036aa974b66ec
SHA1 9834c99ffaac76d2f1178cd5600d4cf80a999bef
SHA256 a809e9c1e73ef491ac473703d1e794fdeb87e43291404c733364429b233b4137
SHA512 3d5d2061a6f2f4793bb6608e82f2c2596ac566eb26918c7178ace011928e5778cee729c75018581afcb1b7b38af6f3fed3d50f769dd3cb31e0f0f6d5c8345e81

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 3c983aa98a73268cfcb8dbad9731dcce
SHA1 d51e0bf942da21cc406be7adeb5e0925d3b0c1b2
SHA256 48095ce4a1a96e21150d7cec01b173441b36ecc6375b9eeba0124d802338c9d9
SHA512 12b1749ef17710f4e6788fe35475f1ab6cc3319a3f8847f49776c3ce2827a4bfd5ef7190790336b89d74a92456e6a1a5dec10ed6f3151ed77920d39abc884dce

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b2686beff6ab3e2cbe316c40953b5067
SHA1 43f773bea309666a8d6fc202f7fa43b76f579be7
SHA256 83e09454bbf062cb9c0e6ce7d422c4214391094324edc89e3d391ae8ee540225
SHA512 4cf8f658beadc903939ccce43bd5ebbaa77c0592c57d1fa7a2c403b82bcc26850f26127fc2a179d9da6180c5edd2362e5ebdcd5ad73797c9857c6daa058ab4e0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\198b1dbef7ece2ad03770a72810f2b485859f245\ea4c9a94-b30d-45c6-956d-e3bf009d7ac1\index-dir\the-real-index

MD5 581343add549d6dad26d0fe891c7be3c
SHA1 f6fded43a08f74aef36a56f1a5d05074b0542567
SHA256 f6c0e8dd7f45f0103184cd70d645ec6bef70b96dc7bb144b9f8c8e1ca39ac390
SHA512 b3000072076cc64a774865f7aeef9303ffccc798f60cc004985a3000661559b2b4a357c53f840d94929befbe778b183e062d0261c832f6fd3341dae892f48257

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\198b1dbef7ece2ad03770a72810f2b485859f245\ea4c9a94-b30d-45c6-956d-e3bf009d7ac1\index-dir\the-real-index~RFe6313db.TMP

MD5 6be725299b0f7e738d0b210baa6f4299
SHA1 ca768699508e91fea030809b449966ba1e6b1531
SHA256 b8091acb54bec3024a89ecd9de6dbb614efb346609e3d3e9b8e632e63d920306
SHA512 6b361f22ad81d2dda998a7b8f03387dd54e2c2c8583f19f419cabab3fc2efe6e449d785a4b8a77fc83192423574647b221cc96faeeee8c2a6da1de275ab67b71

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\198b1dbef7ece2ad03770a72810f2b485859f245\index.txt

MD5 4101894c159e4bb8c6c361a26ce41aa8
SHA1 061886b65762350203b083b71b5e7cd3f3608823
SHA256 9e9797fd35caadadd40e1944b06144023000835b4ea05fbe681ef894e66f1614
SHA512 3c681a13ac5e2eec313fb964e1a992ba5f16e42ae99a9b51e895226c0021aeda3151fd640c17b4a4ca1958f7d386beeb7374f6b31e2b6911d7827724e3a1b5ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\198b1dbef7ece2ad03770a72810f2b485859f245\index.txt~RFe63140a.TMP

MD5 a4a9bc99ce26af99ec29970b1efddf3d
SHA1 db81b7b8cb8ea1d02ecc75d7cb62c69fc7a79d62
SHA256 a51d690e3c3614df7cf9f48b4faa7fe5137b29d6e15a5d51c694f2d69df8ee9c
SHA512 d772cbca8c0073941154afd2f39b46337ecb8373cc75e7c65f106f084bc750c13cb6e5e9411e2e91d9302a1e3a60194f0d4984f0a3290e7a7631ebb6be381b50

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 af5db9bb0674ad78487c7d72a8e3a0e7
SHA1 da4767291ce9a0f6790f5bd3c7644c5b7a5a8539
SHA256 57073b9689e03c6a402bb87c934fb438ca2ce06b4daa897b8717ff252c890281
SHA512 3ea9489d9e1e36d829d0df31e217dd052d49794f89c2f483b4e5f396b3347532855d3770e82b3a3390d3c35ed29866eb486401e7fa6ade478101c5dda700a100

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 1f8e7499ca8b839a5cf9cb5904c8b485
SHA1 524e66f62c6d6ea1aaaa497d13e177e0d05b2c83
SHA256 2a6f0af0388fc81dec9cca4663ca455b17e5cd8db1bd7474cd75345b4a44ca5f
SHA512 12dcbdec610970be0ad3233ffaaf600a1e6f3132ebda9df90ab0d1bf4077ad0df8d35b7427492051663da782e30f85936d90e791bd8293b75e20db2b77eb6202

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\198b1dbef7ece2ad03770a72810f2b485859f245\ea4c9a94-b30d-45c6-956d-e3bf009d7ac1\index-dir\the-real-index

MD5 e7cfdbf07557ca81da289f8dd9a5e622
SHA1 3bea1b3c355504d95c408581f78b2e9846984564
SHA256 058fc6e5e806618bfaa6eee78fabd2e1008dc31311ac511f7f0fe0cec71b0192
SHA512 4cd95f541cbeca28de68cfb379c313a3c78700d434ab2152f2fb3195da9d3b7f0bbe80e1e05a4e5fca902b048c70de3e314b7973464c8d1290ae1505a1ee4c68

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\198b1dbef7ece2ad03770a72810f2b485859f245\index.txt

MD5 c5e2ca89dcf3943bc3ae2ec1d7720db9
SHA1 e3fa37a4bbb25b4ffcdd28d7e34765b806f16fb6
SHA256 be8f853013818821f7c0307add4f310e7683bfbdddd687ab69ba0c166de9c5a6
SHA512 9fb596114663f30b4296d685a8080d34bda803567f018366861ed966af0f5bfa41ddd39b10b34d7cc9cdcc819ba9ce747ab080cd2faf9b0a66f1eb69bcbef896

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 cd30a3e4284617c14e5db65e55011dd3
SHA1 53b53392acf93adb4a5bef79d931e055911b52ca
SHA256 b659f5e810ac48935c0190491219f47efce9b5c8cdfb96de5e9c69375b9ee81f
SHA512 eb4c257bfff51e731b35a23e62a82f61db612d3baad53931cb4395d4a5185283b803b21ad76c05e14192773015f9fdd0c51723fa25f3e2dd462b66d22055241a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 3fb6f081b28db7d2421bf41de377525d
SHA1 cba66a81c1395d5e8e7aa1d5081adff865dc6011
SHA256 378f9aef6566dcff1d542122e40a06f923061aa876ec57fda424afcdf5c36d2e
SHA512 50d42b25214463713f7dd8bb76c8b9efc9892d25fc39b05d7412d094306eba8ec8d4008cf13cf568e345d9b6d056db2004e0f090d9303ca5b79c987798f652ba

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

MD5 9c8f5a32112ef1af740b3e6decc63cd2
SHA1 34b88aea69daa445c5f6bd60bab101179fc3f361
SHA256 4f5108b9ac9f7c905b91e3f63e48e00db8c1f0fe7f092d1b23f3d73dca103f91
SHA512 e274cd8e60677711d5e1127b0f47a82d5b86fa1d2f7e72bca434410c52ab2b3d0302037ecf82569a17c754e9251142df4d5148d2f40a827624ad36f5ada7e838