Malware Analysis Report

2024-09-11 05:39

Sample ID 240628-brag2starc
Target OPAutoClickerMac.zip
SHA256 c376d4b358dcc87c617ac68b257fb1a2a26baa2abc281ebb458e9d4ce20f4737
Tags
adware discovery evasion execution exploit persistence privilege_escalation spyware stealer trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

c376d4b358dcc87c617ac68b257fb1a2a26baa2abc281ebb458e9d4ce20f4737

Threat Level: Likely malicious

The file OPAutoClickerMac.zip was found to be: Likely malicious.

Malicious Activity Summary

adware discovery evasion execution exploit persistence privilege_escalation spyware stealer trojan

Drops file in Drivers directory

Manipulates Digital Signatures

Creates new service(s)

Boot or Logon Autostart Execution: Active Setup

Downloads MZ/PE file

Possible privilege escalation attempt

Event Triggered Execution: Image File Execution Options Injection

Event Triggered Execution: Component Object Model Hijacking

Modifies file permissions

Executes dropped EXE

Reads user/profile data of web browsers

Loads dropped DLL

Checks whether UAC is enabled

Drops Chrome extension

Legitimate hosting services abused for malware hosting/C2

Adds Run key to start application

Checks installed software on the system

Installs/modifies Browser Helper Object

Enumerates connected drives

Checks system information in the registry

Suspicious use of NtCreateThreadExHideFromDebugger

Drops file in System32 directory

Suspicious use of NtSetInformationThreadHideFromDebugger

Launches sc.exe

Drops file in Windows directory

Drops file in Program Files directory

Enumerates physical storage devices

Suspicious use of SendNotifyMessage

Modifies registry class

NTFS ADS

Suspicious use of SetWindowsHookEx

Suspicious behavior: LoadsDriver

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

Enumerates system info in registry

Modifies data under HKEY_USERS

Suspicious behavior: GetForegroundWindowSpam

Runs net.exe

System policy modification

Suspicious use of FindShellTrayWindow

Uses Task Scheduler COM API

Suspicious use of AdjustPrivilegeToken

Kills process with taskkill

Modifies Internet Explorer settings

Modifies system certificate store

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Checks processor information in registry

Suspicious use of UnmapMainImage

MITRE ATT&CK Matrix V13

Initial Access
TA0001
Execution
TA0002
System Services
T1569
Service Execution
T1569.002
Persistence
TA0003
Boot or Logon Autostart Execution
T1547
Registry Run Keys / Startup Folder
T1547.001
Active Setup
T1547.014
Create or Modify System Process
T1543
Windows Service
T1543.003
Event Triggered Execution
T1546
Image File Execution Options Injection
T1546.012
Component Object Model Hijacking
T1546.015
Browser Extensions
T1176
Privilege Escalation
TA0004
Boot or Logon Autostart Execution
T1547
Registry Run Keys / Startup Folder
T1547.001
Active Setup
T1547.014
Create or Modify System Process
T1543
Windows Service
T1543.003
Event Triggered Execution
T1546
Image File Execution Options Injection
T1546.012
Component Object Model Hijacking
T1546.015
Defense Evasion
TA0005
Modify Registry
T1112
Subvert Trust Controls
T1553
SIP and Trust Provider Hijacking
T1553.003
Install Root Certificate
T1553.004
File and Directory Permissions Modification
T1222
Credential Access
TA0006
Unsecured Credentials
T1552
Credentials In Files
T1552.001
Discovery
TA0007
Query Registry
T1012
System Information Discovery
T1082
Peripheral Device Discovery
T1120
Lateral Movement
TA0008
Collection
TA0009
Data from Local System
T1005
Exfiltration
TA0010
Command and Control
TA0011
Web Service
T1102
Impact
TA0040
Resource Development
TA0042
Reconnaissance
TA0043

Analysis: static1

Detonation Overview

Reported

2024-06-28 01:22

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-28 01:22

Reported

2024-06-28 01:39

Platform

win11-20240419-en

Max time kernel

1050s

Max time network

1047s

Command Line

C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\OPAutoClickerMac.zip

Signatures

Boot or Logon Autostart Execution: Active Setup

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\126.0.2592.68\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A

Creates new service(s)

persistence execution

Downloads MZ/PE file

Drops file in Drivers directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\drivers\rsElam.sys C:\Users\Admin\AppData\Local\Temp\7zS06509DE0\UnifiedStub-installer.exe N/A
File created C:\Windows\system32\drivers\rsCamFilter020502.sys C:\Users\Admin\AppData\Local\Temp\7zS06509DE0\UnifiedStub-installer.exe N/A
File created C:\Windows\system32\drivers\rsKernelEngine.sys C:\Users\Admin\AppData\Local\Temp\7zS06509DE0\UnifiedStub-installer.exe N/A
File created C:\Windows\system32\drivers\rsElam.sys C:\Users\Admin\AppData\Local\Temp\7zS06509DE0\UnifiedStub-installer.exe N/A

Event Triggered Execution: Image File Execution Options Injection

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EUA1BC.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EUA1BC.tmp\MicrosoftEdgeUpdate.exe N/A

Manipulates Digital Signatures

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2011\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.2.1.27\FuncName = "WVTAsn1SpcFinancialCriteriaInfoDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Message\{C6B2E8D0-E005-11CF-A134-00C04FD7BF43}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{189A3842-3041-11D1-85E1-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2222\FuncName = "WVTAsn1CatMemberInfoEncode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2004\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2005\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2130\FuncName = "WVTAsn1SpcSigInfoDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2003\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function = "SoftpubCheckCert" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\$Function = "SoftpubCheckCert" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{FC451C16-AC75-11D1-B4B8-00C04FB66EA0}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.30\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllCreateIndirectData\{DE351A42-8E59-11D0-8C47-00C04FC295EE}\FuncName = "CryptSIPCreateIndirectData" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{64B9D180-8DA2-11CF-8736-00AA00A485EB}\$Function = "WintrustCertificateTrust" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2005\FuncName = "WVTAsn1SpcLinkEncode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2222\FuncName = "WVTAsn1CatMemberInfoDecode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Message\{573E31F8-DDBA-11D0-8CCB-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{64B9D180-8DA2-11CF-8736-00AA00A485EB}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2007\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.4.4\FuncName = "WVTAsn1SealingTimestampAttributeEncode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{FC451C16-AC75-11D1-B4B8-00C04FB66EA0}\$Function = "GenericChainCertificateTrust" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{573E31F8-DDBA-11D0-8CCB-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{573E31F8-AABA-11D0-8CCB-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllRemoveSignedDataMsg\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}\FuncName = "CryptSIPRemoveSignedDataMsg" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}\FuncName = "CryptSIPVerifyIndirectData" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{189A3842-3041-11D1-85E1-00C04FC295EE}\$Function = "WintrustCertificateTrust" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Message\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\$Function = "SoftpubCheckCert" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{FC451C16-AC75-11D1-B4B8-00C04FB66EA0}\$Function = "SoftpubLoadSignature" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{189A3842-3041-11D1-85E1-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{189A3842-3041-11D1-85E1-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{189A3842-3041-11D1-85E1-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Usages\2.16.840.1.113730.4.1\DefaultId = "{573E31F8-AABA-11D0-8CCB-00C04FC295EE}" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Message\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\$Function = "SoftpubLoadMessage" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{FC451C16-AC75-11D1-B4B8-00C04FB66EA0}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{FC451C16-AC75-11D1-B4B8-00C04FB66EA0}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{DE351A42-8E59-11D0-8C47-00C04FC295EE}\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{189A3842-3041-11D1-85E1-00C04FC295EE}\$Function = "SoftpubAuthenticode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{64B9D180-8DA2-11CF-8736-00AA00A485EB}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{573E31F8-DDBA-11D0-8CCB-00C04FC295EE}\$Function = "SoftpubLoadSignature" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllFormatObject\1.3.6.1.5.5.7.3.4\Dll = "cryptdlg.dll" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.2.1.10\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{573E31F8-AABA-11D0-8CCB-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{64B9D180-8DA2-11CF-8736-00AA00A485EB}\$Function = "SoftpubInitialize" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2221\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\1.3.6.1.4.1.311.12.2.3\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\$Function = "DriverInitializePolicy" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Message\{FC451C16-AC75-11D1-B4B8-00C04FB66EA0}\$Function = "SoftpubLoadMessage" C:\Windows\SysWOW64\regsvr32.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\CRYPTOGRAPHY\OID\ENCODINGTYPE 0\CRYPTSIPDLLREMOVESIGNEDDATAMSG\{C689AAB9-8E78-11D0-8C47-00C04FC295EE} C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.16.4\Dll = "cryptdlg.dll" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\DiagnosticPolicy\{573E31F8-DDBA-11D0-8CCB-00C04FC295EE}\$DLL = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Usages\1.3.6.1.5.5.7.3.1\CallbackFreeFunction = "SoftpubFreeDefUsageCallData" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{C6B2E8D0-E005-11CF-A134-00C04FD7BF43}\$Function = "SoftpubCheckCert" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllRemoveSignedDataMsg\{DE351A42-8E59-11D0-8C47-00C04FC295EE}\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function = "WintrustCertificateTrust" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.4.3\FuncName = "WVTAsn1SealingSignatureAttributeEncode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObject\#2000\Dll = "WINTRUST.DLL" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function = "SoftpubAuthenticode" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{64B9D180-8DA2-11CF-8736-00AA00A485EB}\$Function = "SoftpubCleanup" C:\Windows\SysWOW64\regsvr32.exe N/A

Possible privilege escalation attempt

exploit
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\MicrosoftEdge_X64_126.0.2592.81.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{BB044A80-4758-48B8-A069-DC0B5C4E690F}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUA1BC.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\rsStubActivator.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\uqazjnuz.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS06509DE0\UnifiedStub-installer.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe N/A
N/A N/A C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\installer.exe N/A
N/A N/A C:\Program Files\McAfee\Temp1299393342\installer.exe N/A
N/A N/A C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
N/A N/A C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\driverconfig.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A C:\Program Files\ldplayer9box\vbox-img.exe N/A
N/A N/A C:\Program Files\ldplayer9box\vbox-img.exe N/A
N/A N/A C:\Program Files\ldplayer9box\vbox-img.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUA1BC.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A

Modifies file permissions

discovery
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\GrpConv = "grpconv -o" C:\Windows\system32\rundll32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\!BCILauncher = "\"C:\\Windows\\Temp\\MUBSTemp\\BCILauncher.EXE\" bgaupmi=7934EDAD5D0C4C198CA0803472B4577D" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{E723A095-15D5-42D9-902D-A9B35945409D}\BGAUpdate.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A

Drops Chrome extension

Description Indicator Process Target
File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\8.1.0.5236_0\manifest.json C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\F: C:\Windows\SysWOW64\takeown.exe N/A
File opened (read-only) \??\F: C:\Windows\SysWOW64\takeown.exe N/A
File opened (read-only) \??\F: C:\Windows\SysWOW64\takeown.exe N/A

Installs/modifies Browser Helper Object

stealer adware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EUA1BC.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EUA1BC.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\rsWSC.exe.log C:\Program Files\ReasonLabs\EPP\rsWSC.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A

Suspicious use of NtCreateThreadExHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A

Suspicious use of NtSetInformationThreadHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\GameSettings\ModeratedAsset.jpg C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\ExtraContent\textures\ui\LuaApp\graphic\GameDetailsBackground\loadingBkg_base.jpg C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\AnimationEditor\button_expand.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\AvatarEditorImages\Sliders\gr-slide-bar-empty.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\TagEditor\Remove.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files\ldplayer9box\SUPInstall.exe F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\StudioToolbox\AssetPreview\fullscreen.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\AppImageAtlas\img_set_2x_12.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\grid4.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\AlignTool\button_min_24.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.68\dxcompiler.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\ui\Settings\Help\XButtonLight.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\PlatformContent\pc\textures\water\normal_05.dds C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files\McAfee\Temp1299393342\wssdep.cab C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\installer.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.68\Locales\it.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.81\Locales\it.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\ExtraContent\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\ViewSelector\back_hover.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\DeveloperFramework\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\ui\PlayerList\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\ui\VoiceChat\SpeakerDark\Unmuted40.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\AppImageAtlas\img_set_2x_4.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\ui\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\AnimationEditor\ic-checkbox-off.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\ui\Chat\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\ExtraContent\textures\ui\LuaChat\9-slice\scroll-bar.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\AvatarEditorImages\gr-selection-border.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\ui\TopBar\leaderboardOff.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-dialog-balloon-de-DE.js C:\Program Files\McAfee\Temp1299393342\installer.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\ui\VoiceChat\SpeakerDark\Muted.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\AppImageAtlas\img_set_2x_6.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\ui\Settings\MenuBarAssets\MenuSelection.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\ui\VR\buttonHover.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.81\Trust Protection Lists\Sigma\Analytics C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.81\identity_proxy\win10\identity_helper.Sparse.Stable.msix C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\ExtraContent\textures\ui\LuaChat\icons\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\StudioToolbox\AssetConfig\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files\ReasonLabs\EPP\elam\rsElam.sys C:\Users\Admin\AppData\Local\Temp\7zS06509DE0\UnifiedStub-installer.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.68\Locales\eu.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\ExtraContent\textures\ui\LuaApp\ExternalSite\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\whiteCircle.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\analyticstelemetry\context\wpssubscriptiontype.luc C:\Program Files\McAfee\Temp1299393342\installer.exe N/A
File created C:\Program Files\McAfee\Webadvisor\Analytics\Scripts\wmi.js C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\StudioSharedUI\KebabMenu.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\TerrainTools\icon_shape_cylinder.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\ExtraContent\textures\ui\InGameChat\Caret.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\StudioUIEditor\icon_rotate3.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\fonts\Montserrat-Medium.ttf C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\StudioToolbox\AssetPreview\rating_large.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.68\Locales\km.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File created C:\Program Files\McAfee\WebAdvisor\jslang\wa-res-ss-toast-variants-cs-CZ.js C:\Program Files\McAfee\Temp1299393342\installer.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\StudioToolbox\AssetConfig\version.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\ExtraContent\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.68\wdag.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\ui\icon_friendrequestrecieved-16.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\ExtraContent\textures\ui\AvatarExperience\glowDark.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\fonts\Fondamento-Regular.ttf C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\LayeredClothingEditor\Icon_Preview_Animation.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\ui\VoiceChat\SpeakerLight\Muted.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\TerrainTools\mtrl_brick.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\ui\VoiceChat\SpeakerDark\Unmuted20.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\ui\Keyboard\mic_icon.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\ExtraContent\textures\ui\LuaApp\icons\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\content\textures\ui\Controls\PlayStationController\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.68\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe N/A
File opened for modification C:\Windows\Logs\DISM\dism.log C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.68\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.68\Installer\setup.exe N/A
File opened for modification C:\Windows\Logs\DISM\dism.log C:\Windows\SysWOW64\dism.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.68\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.68\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.68\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe N/A

Launches sc.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A
N/A N/A C:\Windows\SysWOW64\sc.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\system32\runonce.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\system32\runonce.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\dnplayer.exe = "11001" F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\PROTOCOLEXECUTE\ROBLOX C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\PROTOCOLEXECUTE\ROBLOX-PLAYER C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\PROTOCOLEXECUTE\ROBLOX C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\PROTOCOLEXECUTE\ROBLOX-PLAYER C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\ldnews.exe = "11001" F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\126.0.2592.68\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\126.0.2592.68\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Edge\InstallerPinned = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files\McAfee\WebAdvisor\updater.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files\McAfee\WebAdvisor\updater.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-AC97-4C16-B3E2-81BD8A57CC27}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachineFallback\CurVer\ = "MicrosoftEdgeUpdate.PolicyStatusMachineFallback.1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-4289-EF4E-8E6A-E5B07816B631}\ = "IUSBDeviceFilter" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ = "IAppCommandWeb" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-61D9-4940-A084-E6BB29AF3D83}\NumMethods\ = "13" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-42F8-CD96-7570-6A8800E3342C}\TypeLib C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{20191216-47b9-4a1e-82b2-07ccd5323c3f} C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8}\ProgID\ = "MicrosoftEdgeUpdate.PolicyStatusMachine.1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-3346-49D6-8F1C-41B0C4784FF2}\ = "IUSBDeviceFilters" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-735F-4FDE-8A54-427D49409B5F}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-A862-4DC9-8C89-BF4BA74A886A}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E3D94CEB-EC11-46BE-8872-7DDCE37FABFA}\InprocHandler32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{492E1C30-A1A2-4695-87C8-7A8CAD6F936F}\VERSIONINDEPENDENTPROGID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-F4C4-4020-A185-0D2881BCFA8B}\ = "IDHCPGlobalConfig" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-808E-11E9-B773-133D9330F849} C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-eabd-4fa6-960a-f1756c99ea1c} C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-E191-400B-840E-970F3DAD7296}\ = "IPCIAddress" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-E8B8-4838-B10C-45BA193734C1}\ProxyStubClsid32 C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-E8B8-4838-B10C-45BA193734C1}\TypeLib C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods\ = "11" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\NumMethods\ = "13" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2E1DD7EF-C12D-4F8E-8AD8-CF8CC265BAD0}\ = "Microsoft Edge Update Core Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-EABD-4FA6-960A-F1756C99EA1C}\NumMethods C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-F1F8-4590-941A-CDB66075C5BF}\TypeLib\ = "{20191216-1750-46f0-936e-bd127d5bc264}" C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-929C-40E8-BF16-FEA557CD8E7E}\TypeLib C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8}\Elevation\IconReference = "@C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\msedgeupdate.dll,-1004" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-80F6-4266-8E20-16371F68FA25}\NumMethods\ = "14" C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-1EC0-4C0F-857F-FBE2A737A256} C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-1F8B-4692-ABB4-462429FAE5E9}\TypeLib\ = "{20191216-1750-46f0-936e-bd127d5bc264}" C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-47C7-4A3F-AAE1-1B516817DB41}\ProxyStubClsid32 C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-bf98-47fb-ab2f-b5177533f493} C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-7708-444B-9EEF-C116CE423D39}\TypeLib\Version = "1.3" C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\ = "IPolicyStatus" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-9849-4F47-813E-24A75DC85615}\NumMethods C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-402E-022E-6180-C3944DE3F9C8}\NumMethods C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\MicrosoftEdgeUpdate.exe\AppID = "{CECDDD22-2E72-4832-9606-A9B0E5E344B2}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.41\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachineFallback\ = "Google Update Policy Status Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-00B1-4E9D-0000-11FA00F9D583} C:\Windows\SYSTEM32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-58D9-43AE-8B03-C1FD7088EF15}\ProxyStubClsid32\ = "{20191216-1807-4249-5BA5-EA42D66AF0BF}" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-1F04-4191-AA2F-1FAC9646AE4C}\TypeLib\ = "{20191216-1750-46f0-936e-bd127d5bc264}" C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-9641-4397-854A-040439D0114B}\ProxyStubClsid32 C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\ = "IAppCommand" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{20191216-6679-422A-B629-51B06B0C6D93}\ = "IUSBDeviceStateChangedEvent" C:\Windows\SYSTEM32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-9641-4397-854A-040439D0114B}\TypeLib\ = "{20191216-1750-46f0-936e-bd127d5bc264}" C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20191216-A161-41F1-B583-4892F4A9D5D5}\NumMethods C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\NumMethods\ = "41" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\ = "IPolicyStatus2" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.41\\psmachine.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8 C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\saBSI.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\saBSI.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\saBSI.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\saBSI.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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 C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\saBSI.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Runs net.exe

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUA1BC.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUA1BC.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\saBSI.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\saBSI.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\saBSI.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A C:\Windows\SYSTEM32\fltmc.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnplayer.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\LDPlayer.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\dnrepairer.exe N/A
N/A N/A C:\Program Files\ldplayer9box\Ld9BoxSVC.exe N/A
N/A N/A F:\LDPlayer\LDPlayer9\driverconfig.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A

Suspicious use of UnmapMainImage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2384 wrote to memory of 900 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 900 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2236 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 4792 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 4792 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2384 wrote to memory of 2972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

System policy modification

evasion
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe N/A

Uses Task Scheduler COM API

persistence

Processes

C:\Windows\Explorer.exe

C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\OPAutoClickerMac.zip

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0xfc,0x100,0x104,0xe4,0x108,0x7ffa7e4dcc40,0x7ffa7e4dcc4c,0x7ffa7e4dcc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1816,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=1804 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2080,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=2140 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2220,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=2236 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3108,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3260 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3164,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3304 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4412,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4460 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4616,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4624 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4588,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4740 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4880,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4760 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4832,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4876 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4844,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4744 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4752,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3364 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4640,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3372 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5284,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5300 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5268,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5440 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=4500,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5612 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=3400,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5756 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4956,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5636 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe

"C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"

C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7Qzk5QTY4NDEtQTUxQy00RUJGLUJDRUMtOUVDRTEwNDNDOEM1fSIgdXNlcmlkPSJ7REEyQzlEMkEtNzU4RS00NzM3LUE3MUQtQTM5ODg3RDI3NDQyfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntCMUJDQzlCQS1EMzFFLTRGNjUtODI5Mi00NkJCMjM4Q0Q2Nzd9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE0My41NyIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjUzMjkyNzQ0NzAiIGluc3RhbGxfdGltZV9tcz0iNjE3Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{C99A6841-A51C-4EBF-BCEC-9ECE1043C8C5}" /silent

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7Qzk5QTY4NDEtQTUxQy00RUJGLUJDRUMtOUVDRTEwNDNDOEM1fSIgdXNlcmlkPSJ7REEyQzlEMkEtNzU4RS00NzM3LUE3MUQtQTM5ODg3RDI3NDQyfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins5MzZGRTNBRS05NDdBLTRBM0QtODdFQy0wMDFEREY5OTkyNUN9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTIzLjAuNjMxMi4xMDYiIG5leHR2ZXJzaW9uPSIxMjMuMC42MzEyLjEwNiIgbGFuZz0iZW4iIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjUiIHN5c3RlbV91cHRpbWVfdGlja3M9IjUzMzMyOTQ1NTciLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\MicrosoftEdge_X64_126.0.2592.81.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\MicrosoftEdge_X64_126.0.2592.81.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\MicrosoftEdge_X64_126.0.2592.81.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=126.0.6478.127 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3C6A0C7F-EDCF-4268-9B2E-E784612D324B}\EDGEMITMP_0F903.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=126.0.2592.81 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff71929aa40,0x7ff71929aa4c,0x7ff71929aa58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5560,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4944 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7Qzk5QTY4NDEtQTUxQy00RUJGLUJDRUMtOUVDRTEwNDNDOEM1fSIgdXNlcmlkPSJ7REEyQzlEMkEtNzU4RS00NzM3LUE3MUQtQTM5ODg3RDI3NDQyfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InswQTI2NUI2NC01MTU0LTRFMzktODdEOS1CQkJGQTlCMjA3RjZ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtWUFFvUDFGK2ZxMTV3UnpoMWtQTDRQTXBXaDhPUk1CNWl6dnJPQy9jaGpRPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxMjYuMC4yNTkyLjgxIiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1MzM4NjA0NjYzIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-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-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe" -app -isInstallerLaunch

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=3332,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4916 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=5456,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5616 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=3504,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5380 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5864,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5852 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5152,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4252 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=4396,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5708 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=5460,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5348 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=5436,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5032 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=3740,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5344 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=5980,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5352 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=6000,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=6168 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004E8 0x00000000000004EC

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=6156,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=6436 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=6660,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=6680 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6824,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=2964 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6844,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=6852 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=4384,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3288 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=6452,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=6528 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=6620,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=6856 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=6688,i,7021788175379131165,12902999712926580045,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=6068 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe"

C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa7e4dcc40,0x7ffa7e4dcc4c,0x7ffa7e4dcc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1936,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=1932 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1824,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=1948 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2192,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=2208 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3120,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=3268 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3212,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=3292 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4128,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=3564 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4596,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=4580 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4712,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=4708 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4780,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=4644 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4592,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=4716 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe

"C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"

C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe" -app -isInstallerLaunch

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1948 -parentBuildID 20240401114208 -prefsHandle 1876 -prefMapHandle 1868 -prefsLen 25459 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {99eb793f-229f-4fea-b4bf-8cf37f8afc30} 1628 "\\.\pipe\gecko-crash-server-pipe.1628" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2352 -parentBuildID 20240401114208 -prefsHandle 2344 -prefMapHandle 2340 -prefsLen 25495 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {88b7db27-455c-4fac-bf6d-b47a1afa33bb} 1628 "\\.\pipe\gecko-crash-server-pipe.1628" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3084 -childID 1 -isForBrowser -prefsHandle 3168 -prefMapHandle 3112 -prefsLen 25636 -prefMapSize 244658 -jsInitHandle 1388 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d10aabed-b465-4a52-8bfc-2c9631227c0d} 1628 "\\.\pipe\gecko-crash-server-pipe.1628" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4244 -childID 2 -isForBrowser -prefsHandle 4240 -prefMapHandle 4236 -prefsLen 30869 -prefMapSize 244658 -jsInitHandle 1388 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b2a57af9-7761-4c26-986a-253561bf7bae} 1628 "\\.\pipe\gecko-crash-server-pipe.1628" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4976 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4824 -prefMapHandle 4816 -prefsLen 30869 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f83b8b23-82c4-4262-b846-f951003f42cc} 1628 "\\.\pipe\gecko-crash-server-pipe.1628" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5208 -childID 3 -isForBrowser -prefsHandle 5220 -prefMapHandle 5216 -prefsLen 27097 -prefMapSize 244658 -jsInitHandle 1388 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4c8467b7-d488-4f30-aa5c-b26450b84d80} 1628 "\\.\pipe\gecko-crash-server-pipe.1628" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5436 -childID 4 -isForBrowser -prefsHandle 5356 -prefMapHandle 5360 -prefsLen 27097 -prefMapSize 244658 -jsInitHandle 1388 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {985baa45-accb-4bc4-9afc-d7f9f3f32e3c} 1628 "\\.\pipe\gecko-crash-server-pipe.1628" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5580 -childID 5 -isForBrowser -prefsHandle 5344 -prefMapHandle 5348 -prefsLen 27097 -prefMapSize 244658 -jsInitHandle 1388 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3fbb2b2d-59a6-42b1-bccc-cd4a5604d6f7} 1628 "\\.\pipe\gecko-crash-server-pipe.1628" tab

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe

"C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"

C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe" -app -isInstallerLaunch

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3444,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=212 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{BB044A80-4758-48B8-A069-DC0B5C4E690F}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{BB044A80-4758-48B8-A069-DC0B5C4E690F}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe" /update /sessionid "{1FBCAF98-59FC-4F2D-B954-1C1A2E41DB51}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MUZCQ0FGOTgtNTlGQy00RjJELUI5NTQtMUMxQTJFNDFEQjUxfSIgdXNlcmlkPSJ7REEyQzlEMkEtNzU4RS00NzM3LUE3MUQtQTM5ODg3RDI3NDQyfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins3NjE3Rjk3RS1ERDY1LTQ2MjYtOEJFNC05NDFFNzlENzgzOTh9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTcxLjM5IiBuZXh0dmVyc2lvbj0iMS4zLjE4Ny40MSIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjAiPjx1cGRhdGVjaGVjay8-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-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-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjkyOTQ4MTI2NDYiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48cGluZyByPSItMSIgcmQ9Ii0xIi8-PC9hcHA-PGFwcCBhcHBpZD0iezU2RUIxOEY4LUIwMDgtNENCRC1CNkQyLThDOTdGRTdFOTA2Mn0iIHZlcnNpb249IjkwLjAuODE4LjY2IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGxhc3RfbGF1bmNoX3RpbWU9IjEzMzU3OTk1MjcxODM3NTczMCI-PHVwZGF0ZWNoZWNrLz48cGluZyBhY3RpdmU9IjEiIGE9Ii0xIiByPSItMSIgYWQ9Ii0xIiByZD0iLTEiLz48L2FwcD48YXBwIGFwcGlkPSJ7RjMwMTcyMjYtRkUyQS00Mjk1LThCREYtMDBDM0E5QTdFNEM1fSIgdmVyc2lvbj0iMTI2LjAuMjU5Mi44MSIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIHVwZGF0ZV9jb3VudD0iMSI-PHVwZGF0ZWNoZWNrLz48cGluZyByPSItMSIgcmQ9Ii0xIiBwaW5nX2ZyZXNobmVzcz0iezJBRTdEM0NCLUNBNDQtNDNBOC1BMjFDLTkxNUFBNkM2QjFEQ30iLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\Temp\EUA1BC.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EUA1BC.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{1FBCAF98-59FC-4F2D-B954-1C1A2E41DB51}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-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-

C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe"

C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\RobloxPlayerBeta.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=3412,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=4560 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4604,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=3800 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4904,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=3432 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=3264,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5088 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=5216,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5236 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5356,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5364 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5520,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5592 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5764,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5740 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=5888,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5904 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=6064,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5876 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6252,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6264 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6376,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6368 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6504,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6384 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=6680,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6656 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=6652,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6800 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=6968,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6984 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=6040,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6952 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=7228,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7260 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=7212,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7392 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=7220,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7544 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=7504,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7660 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=7788,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7804 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=7824,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7952 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=8080,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=8092 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=8364,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=8348 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=8296,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=8220 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=8576,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7012 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=8708,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=8740 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=8824,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=8828 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=7080,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6988 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=7060,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=8636 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=7064,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7040 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=6996,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6484 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=6984,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6528 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=6876,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6912 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=6532,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7112 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=6444,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6868 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=6116,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6892 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=6108,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=9124 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=8968,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=9092 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=7048,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7032 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=9020,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=9308 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=9400,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6580 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=9544,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=9528 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=9668,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=9684 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=5212,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5936 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=8612,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6536 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=8328,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7268 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=6840,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5340 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=4752,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7668 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=8752,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5836 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=8744,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5304 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --field-trial-handle=8696,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5996 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=8956,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6220 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=7956,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7964 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=8740,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7304 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --field-trial-handle=7320,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7288 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --field-trial-handle=6560,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5912 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --field-trial-handle=6392,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=8416 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --field-trial-handle=6660,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6516 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=8128,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6844 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=6920,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6492 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --field-trial-handle=5272,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6136 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --field-trial-handle=9436,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7396 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --field-trial-handle=7580,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7420 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --field-trial-handle=8120,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6440 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --field-trial-handle=9584,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=9632 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --field-trial-handle=9328,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=8276 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --field-trial-handle=9308,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6828 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --field-trial-handle=7236,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=8992 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --field-trial-handle=9516,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=7088 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --field-trial-handle=5452,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6612 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --field-trial-handle=9024,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6248 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --field-trial-handle=8600,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=8524 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --field-trial-handle=8652,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=8900 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --field-trial-handle=9156,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=9204 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --field-trial-handle=9948,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=9160 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --field-trial-handle=10004,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=9956 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --field-trial-handle=10136,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=10152 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --field-trial-handle=10128,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=10292 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --field-trial-handle=10424,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=10296 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --field-trial-handle=10596,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=10584 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=10612,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=10556 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=10948,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=11024 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=11296,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=11316 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=11320,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=11508 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=10760,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=11532 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=11340,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=11800 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=11944,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=11940 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=11336,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=12104 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --field-trial-handle=12252,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=12244 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --field-trial-handle=11212,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=12084 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=5084,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=12280 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --field-trial-handle=11204,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=6272 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=9476,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=11028 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5496,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=12652 /prefetch:8

C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe

"C:\Users\Admin\Downloads\LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe"

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM dnplayer.exe /T

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM dnmultiplayer.exe /T

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM dnmultiplayerex.exe /T

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM bugreport.exe /T

F:\LDPlayer\LDPlayer9\LDPlayer.exe

"F:\LDPlayer\LDPlayer9\\LDPlayer.exe" -silence -downloader -openid=25567197 -language=en -path="F:\LDPlayer\LDPlayer9\"

C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\saBSI.exe

"C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\saBSI.exe" /affid 91082 PaidDistribution=true CountryCode=GB

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --field-trial-handle=11408,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=12364 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --field-trial-handle=11472,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=11464 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --field-trial-handle=8952,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=11448 /prefetch:1

C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\rsStubActivator.exe

"C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\rsStubActivator.exe" -ip:"dui=3d8d521d20e0420170266ce4f4398e094d32e2f1&dit=20240628013121857&is_silent=true&oc=DOT_RAV_Cross_Solo_LDP&p=bf64&a=103&b=&se=true" -i

C:\Users\Admin\AppData\Local\Temp\uqazjnuz.exe

"C:\Users\Admin\AppData\Local\Temp\uqazjnuz.exe" /silent

C:\Users\Admin\AppData\Local\Temp\7zS06509DE0\UnifiedStub-installer.exe

.\UnifiedStub-installer.exe /silent

C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe

"C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe" -i -bn:ReasonLabs -pn:EPP -lpn:rav_antivirus -url:https://update.reasonsecurity.com/v2/live -dt:10

C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe

"C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe" -pn:EPP -lpn:rav_antivirus -url:https://update.reasonsecurity.com/v2/live -bn:ReasonLabs -dt:10

F:\LDPlayer\LDPlayer9\dnrepairer.exe

"F:\LDPlayer\LDPlayer9\dnrepairer.exe" listener=590540

C:\Windows\SysWOW64\net.exe

"net" start cryptsvc

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start cryptsvc

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" Softpub.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" Wintrust.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" Initpki.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\system32\regsvr32" Initpki.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" dssenh.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" rsaenh.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" cryptdlg.dll /s

C:\Windows\SysWOW64\takeown.exe

"takeown" /f "F:\LDPlayer\LDPlayer9\vms" /r /d y

C:\Windows\SysWOW64\icacls.exe

"icacls" "F:\LDPlayer\LDPlayer9\vms" /grant everyone:F /t

C:\Windows\SysWOW64\takeown.exe

"takeown" /f "F:\LDPlayer\LDPlayer9\\system.vmdk"

C:\Windows\SysWOW64\icacls.exe

"icacls" "F:\LDPlayer\LDPlayer9\\system.vmdk" /grant everyone:F /t

C:\Windows\SysWOW64\dism.exe

C:\Windows\system32\dism.exe /Online /English /Get-Features

C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe

C:\Users\Admin\AppData\Local\Temp\DFF8E4FD-F138-4F36-B7A6-B7A78768BD73\dismhost.exe {28247CF3-9CA8-4CED-88A7-7AF91B0ABE11}

C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\installer.exe

"C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade

C:\Program Files\McAfee\Temp1299393342\installer.exe

"C:\Program Files\McAfee\Temp1299393342\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\win32\WSSDep.dll"

C:\Windows\SysWOW64\regsvr32.exe

/s "C:\Program Files\McAfee\WebAdvisor\win32\WSSDep.dll"

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\x64\WSSDep.dll"

C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe

"C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"

C:\Windows\SysWOW64\sc.exe

sc query HvHost

C:\Windows\SysWOW64\sc.exe

sc query vmms

C:\Windows\SysWOW64\sc.exe

sc query vmcompute

C:\Program Files\ldplayer9box\Ld9BoxSVC.exe

"C:\Program Files\ldplayer9box\Ld9BoxSVC.exe" /RegServer

C:\Windows\SYSTEM32\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\VBoxC.dll" /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\x86\VBoxClient-x86.dll" /s

C:\Windows\SYSTEM32\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\VBoxProxyStub.dll" /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\x86\VBoxProxyStub-x86.dll" /s

C:\Windows\system32\rundll32.exe

"C:\Windows\system32\rundll32.exe" setupapi.dll,InstallHinfSection DefaultInstall 128 C:\Program Files\ReasonLabs\EPP\x64\rsKernelEngine.inf

C:\Windows\system32\runonce.exe

"C:\Windows\system32\runonce.exe" -r

C:\Windows\SysWOW64\sc.exe

"C:\Windows\system32\sc" create Ld9BoxSup binPath= "C:\Program Files\ldplayer9box\Ld9BoxSup.sys" type= kernel start= auto

C:\Windows\SysWOW64\sc.exe

"C:\Windows\system32\sc" start Ld9BoxSup

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" New-NetFirewallRule -DisplayName "Ld9BoxSup" -Direction Inbound -Program 'C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe' -RemoteAddress LocalSubnet -Action Allow

C:\Windows\System32\grpconv.exe

"C:\Windows\System32\grpconv.exe" -o

C:\Windows\system32\wevtutil.exe

"C:\Windows\system32\wevtutil.exe" im C:\Program Files\ReasonLabs\EPP\x64\rsKernelEngineEvents.xml

C:\Windows\SYSTEM32\fltmc.exe

"fltmc.exe" load rsKernelEngine

C:\Windows\system32\wevtutil.exe

"C:\Windows\system32\wevtutil.exe" im C:\Program Files\ReasonLabs\EPP\elam\evntdrv.xml

C:\Program Files\ReasonLabs\EPP\rsWSC.exe

"C:\Program Files\ReasonLabs\EPP\rsWSC.exe" -i -i

C:\Program Files\ReasonLabs\EPP\rsWSC.exe

"C:\Program Files\ReasonLabs\EPP\rsWSC.exe"

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" New-NetFirewallRule -DisplayName "Ld9BoxNat" -Direction Inbound -Program 'C:\Program Files\ldplayer9box\VBoxNetNAT.exe' -RemoteAddress LocalSubnet -Action Allow

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" New-NetFirewallRule -DisplayName "dnplayer" -Direction Inbound -Program 'F:\LDPlayer\LDPlayer9\dnplayer.exe' -RemoteAddress LocalSubnet -Action Allow

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --field-trial-handle=4632,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=10324 /prefetch:1

F:\LDPlayer\LDPlayer9\driverconfig.exe

"F:\LDPlayer\LDPlayer9\driverconfig.exe"

C:\Windows\SysWOW64\takeown.exe

"takeown" /f F:\LDPlayer\ldmutiplayer\ /r /d y

C:\Windows\SysWOW64\icacls.exe

"icacls" F:\LDPlayer\ldmutiplayer\ /grant everyone:F /t

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.gg/4bUcwDd53d

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffa771c3cb8,0x7ffa771c3cc8,0x7ffa771c3cd8

F:\LDPlayer\LDPlayer9\dnplayer.exe

"F:\LDPlayer\LDPlayer9\\dnplayer.exe" downloadpackage=com.robtopx.geometryjump|package=com.robtopx.geometryjump

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004E8 0x00000000000004EC

C:\Program Files\ldplayer9box\Ld9BoxSVC.exe

"C:\Program Files\ldplayer9box\Ld9BoxSVC.exe" -Embedding

C:\Windows\SysWOW64\sc.exe

sc query HvHost

C:\Windows\SysWOW64\sc.exe

sc query vmms

C:\Windows\SysWOW64\sc.exe

sc query vmcompute

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2052 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2604 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files\ldplayer9box\vbox-img.exe

"C:\Program Files\ldplayer9box\vbox-img.exe" setuuid --filename "F:\LDPlayer\LDPlayer9\vms\..\system.vmdk" --uuid 20160302-bbbb-bbbb-54d7-bbbb00000000

C:\Program Files\ldplayer9box\vbox-img.exe

"C:\Program Files\ldplayer9box\vbox-img.exe" setuuid --filename "F:\LDPlayer\LDPlayer9\vms\leidian0\data.vmdk" --uuid 20160302-cccc-cccc-54d7-000000000000

C:\Program Files\ldplayer9box\vbox-img.exe

"C:\Program Files\ldplayer9box\vbox-img.exe" setuuid --filename "F:\LDPlayer\LDPlayer9\vms\leidian0\sdcard.vmdk" --uuid 20160302-dddd-dddd-54d7-000000000000

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3444 /prefetch:1

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4044 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5156 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.ldplayer.net/blog/how-to-enable-vt.html

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa771c3cb8,0x7ffa771c3cc8,0x7ffa771c3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6028 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6048 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5156 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6408 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6416 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6672 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6992 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6168 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8284 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8432 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7124 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9392 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9372 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8556 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7740 /prefetch:1

C:\Program Files\McAfee\WebAdvisor\UIHost.exe

"C:\Program Files\McAfee\WebAdvisor\UIHost.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Program Files\McAfee\WebAdvisor\updater.exe

"C:\Program Files\McAfee\WebAdvisor\updater.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --field-trial-handle=10868,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=10296 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --field-trial-handle=5648,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=10020 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --field-trial-handle=4884,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=2620 /prefetch:1

C:\Program Files\ReasonLabs\EPP\rsWSC.exe

"C:\Program Files\ReasonLabs\EPP\rsWSC.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8424,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=8432 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8468,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=10588 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3520,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5704 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10496,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=10308 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8460,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=8464 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11972,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5644 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=8412,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=8336 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=10492,i,10543778498051828142,6025060730675955834,262144 --variations-seed-version=20240627-050100.754000 --mojo-platform-channel-handle=5676 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8264 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODcuNDEiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NzIxMzM3QjYtNEU4QS00RTRGLUE2NDYtOTFENzNGMzZBNDA4fSIgdXNlcmlkPSJ7REEyQzlEMkEtNzU4RS00NzM3LUE3MUQtQTM5ODg3RDI3NDQyfSIgaW5zdGFsbHNvdXJjZT0ibGltaXRlZCIgcmVxdWVzdGlkPSJ7QkIwRkE3RkQtNjg3Ni00NDIwLTg2QjUtN0ZDOTg5QzJFOEM5fSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBsb2dpY2FsX2NwdXM9IjgiIHBoeXNtZW1vcnk9IjgiIGRpc2tfdHlwZT0iMiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4yMjAwMC40OTMiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-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

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9440 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8988 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=6804 /prefetch:2

C:\Program Files\ReasonLabs\EPP\rsWSC.exe

"C:\Program Files\ReasonLabs\EPP\rsWSC.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{E723A095-15D5-42D9-902D-A9B35945409D}\BGAUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{E723A095-15D5-42D9-902D-A9B35945409D}\BGAUpdate.exe" --edgeupdate-client --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODcuNDEiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NzIxMzM3QjYtNEU4QS00RTRGLUE2NDYtOTFENzNGMzZBNDA4fSIgdXNlcmlkPSJ7REEyQzlEMkEtNzU4RS00NzM3LUE3MUQtQTM5ODg3RDI3NDQyfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins0ODFERTA2Qy03RUMzLTQyQjAtQjY0Ri1CNUIwMTdGNjQ1Q0J9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-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-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_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-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTI5MTE5NTUwMzIiIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSI2IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxMjkxNzg2NDk2NyIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEyOTE5Mzg0OTM5IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iODM4IiBkb3dubG9hZF90aW1lX21zPSI1OTQ5NSIgZG93bmxvYWRlZD0iMTgwNDQ0NDgiIHRvdGFsPSIxODA0NDQ0OCIgcGFja2FnZV9jYWNoZV9yZXN1bHQ9IjAiIGluc3RhbGxfdGltZV9tcz0iMTQ4Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\MicrosoftEdge_X64_126.0.2592.68.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\MicrosoftEdge_X64_126.0.2592.68.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\MicrosoftEdge_X64_126.0.2592.68.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=126.0.6478.114 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=126.0.2592.68 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff7725caa40,0x7ff7725caa4c,0x7ff7725caa58

C:\Program Files\ReasonLabs\EPP\rsWSC.exe

"C:\Program Files\ReasonLabs\EPP\rsWSC.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=126.0.6478.114 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B6B6BACE-F981-4D71-8DC1-4BC16D7D49F0}\EDGEMITMP_B2AE0.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=126.0.2592.68 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff7725caa40,0x7ff7725caa4c,0x7ff7725caa58

C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.68\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.68\Installer\setup.exe" --msedge --channel=stable --remove-deprecated-packages --verbose-logging --system-level

C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.68\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.68\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=126.0.6478.114 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.68\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=126.0.2592.68 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff7aa20aa40,0x7ff7aa20aa4c,0x7ff7aa20aa58

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5920 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3968 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,10456531584716225376,18236080868463160120,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODcuNDEiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NEJBODZEODMtNUQyQy00QTJBLUJDOTctRjk4Nzg3QjdEQTBBfSIgdXNlcmlkPSJ7REEyQzlEMkEtNzU4RS00NzM3LUE3MUQtQTM5ODg3RDI3NDQyfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins2NkEzQzFDNS0yREY5LTQ3QzgtOUU1MS0wMDk3RUY1NzRBQjd9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iMTIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMTQ2NjY0OTQyIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMTQ2Njk0OTkzIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-PHVwZGF0ZWNoZWNrLz48cGluZyByZD0iNjM4OCIgcGluZ19mcmVzaG5lc3M9Ins1NzdGMTFCNS1ENTU0LTRENkQtOUI4Ni1GRkI0OTZGQUVCNUN9Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files\ReasonLabs\EPP\rsWSC.exe

"C:\Program Files\ReasonLabs\EPP\rsWSC.exe"

Network

Country Destination Domain Proto
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 42.200.250.142.in-addr.arpa udp
GB 142.250.200.14:443 apis.google.com tcp
GB 142.250.187.238:443 consent.google.com tcp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
GB 142.250.179.238:443 img.youtube.com tcp
GB 142.250.187.238:443 img.youtube.com tcp
N/A 224.0.0.251:5353 udp
NL 128.116.21.3:443 roblox.com tcp
NL 128.116.21.3:443 roblox.com tcp
FR 128.116.122.3:443 locale.roblox.com tcp
FR 128.116.122.3:443 locale.roblox.com udp
NL 23.63.101.152:443 css.rbxcdn.com tcp
NL 23.63.101.152:443 css.rbxcdn.com tcp
NL 23.63.101.152:443 css.rbxcdn.com tcp
NL 23.63.101.152:443 css.rbxcdn.com tcp
NL 23.63.101.152:443 css.rbxcdn.com tcp
NL 23.63.101.152:443 css.rbxcdn.com tcp
NL 23.63.101.177:443 static.rbxcdn.com tcp
NL 23.63.101.152:443 css.rbxcdn.com tcp
NL 23.63.101.152:443 css.rbxcdn.com tcp
NL 23.63.101.152:443 css.rbxcdn.com tcp
NL 23.63.101.152:443 css.rbxcdn.com tcp
NL 23.63.101.152:443 css.rbxcdn.com tcp
NL 23.63.101.152:443 css.rbxcdn.com tcp
GB 18.244.155.96:443 roblox-api.arkoselabs.com tcp
GB 18.244.155.96:443 roblox-api.arkoselabs.com udp
FR 128.116.122.3:443 locale.roblox.com tcp
FR 128.116.122.3:443 locale.roblox.com tcp
IE 2.18.24.25:443 ctldl.windowsupdate.com tcp
NL 23.63.101.152:443 css.rbxcdn.com tcp
FR 128.116.122.3:443 locale.roblox.com udp
US 8.8.8.8:53 96.155.244.18.in-addr.arpa udp
US 8.8.8.8:53 25.24.18.2.in-addr.arpa udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.179.238:443 www.youtube.com tcp
NL 23.63.101.171:443 setup.rbxcdn.com tcp
FR 128.116.122.3:443 client-telemetry.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:50475 tcp
N/A 127.0.0.1:50479 tcp
N/A 127.0.0.1:50482 tcp
NL 23.63.101.171:443 setup.rbxcdn.com tcp
NL 23.63.101.171:443 setup.rbxcdn.com tcp
NL 23.63.101.171:443 setup.rbxcdn.com tcp
NL 13.95.26.4:443 msedge.api.cdp.microsoft.com tcp
US 199.232.214.172:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
US 199.232.210.172:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
FR 128.116.122.3:443 client-telemetry.roblox.com udp
NL 128.116.21.3:443 roblox.com udp
FR 128.116.122.3:443 client-telemetry.roblox.com udp
GB 18.244.155.10:443 roblox-api.arkoselabs.com udp
FR 128.116.122.3:443 client-telemetry.roblox.com udp
GB 142.250.187.196:443 www.google.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.179.238:443 www.youtube.com udp
GB 142.250.179.238:443 www.youtube.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.187.246:443 i.ytimg.com tcp
GB 142.250.187.246:443 i.ytimg.com tcp
GB 142.250.187.246:443 i.ytimg.com tcp
GB 142.250.187.246:443 i.ytimg.com tcp
GB 142.250.187.246:443 i.ytimg.com tcp
GB 142.250.187.246:443 i.ytimg.com tcp
GB 142.250.178.14:443 www.youtube.com tcp
GB 142.250.200.46:443 www.youtube.com tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.187.246:443 i.ytimg.com tcp
GB 142.250.200.46:443 www.youtube.com udp
GB 142.250.187.194:443 googleads.g.doubleclick.net tcp
GB 216.58.213.6:443 static.doubleclick.net tcp
GB 142.250.187.202:443 jnn-pa.googleapis.com tcp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
GB 142.250.187.202:443 jnn-pa.googleapis.com udp
GB 142.250.179.238:443 www.youtube.com tcp
GB 142.250.179.238:443 www.youtube.com tcp
GB 142.250.179.238:443 www.youtube.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.109.133:443 repository-images.githubusercontent.com tcp
US 185.199.108.133:443 repository-images.githubusercontent.com tcp
US 185.199.108.133:443 repository-images.githubusercontent.com tcp
US 185.199.108.133:443 repository-images.githubusercontent.com tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 140.82.114.22:443 collector.github.com tcp
US 140.82.114.22:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
FR 128.116.122.3:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:51338 tcp
GB 92.123.128.179:443 tcp
GB 51.132.193.105:443 browser.pipe.aria.microsoft.com tcp
NL 23.62.61.194:443 r.bing.com tcp
NL 23.62.61.194:443 r.bing.com tcp
NL 23.62.61.194:443 r.bing.com tcp
NL 23.62.61.194:443 r.bing.com tcp
NL 23.62.61.194:443 r.bing.com tcp
NL 23.62.61.194:443 r.bing.com tcp
GB 142.250.187.196:443 www.google.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.179.238:443 www.youtube.com udp
US 162.159.137.232:443 discord.com tcp
US 104.18.34.227:443 cdn.prod.website-files.com tcp
US 104.18.34.227:443 cdn.prod.website-files.com tcp
US 104.18.34.227:443 cdn.prod.website-files.com tcp
US 104.18.5.175:443 global.localizecdn.com tcp
GB 172.217.169.42:443 ajax.googleapis.com tcp
GB 172.217.169.42:443 ajax.googleapis.com tcp
US 104.18.34.227:443 cdn.prod.website-files.com udp
US 162.159.137.232:443 discord.com udp
GB 18.245.246.167:443 d3e54v103j8qbb.cloudfront.net tcp
US 162.159.129.233:443 cdn.discordapp.com tcp
US 162.159.129.233:443 cdn.discordapp.com tcp
US 162.159.129.233:443 cdn.discordapp.com tcp
US 162.159.129.233:443 cdn.discordapp.com tcp
US 162.159.129.233:443 cdn.discordapp.com tcp
US 162.159.129.233:443 cdn.discordapp.com tcp
GB 52.84.90.29:443 assets.website-files.com tcp
GB 52.84.90.29:443 assets.website-files.com tcp
GB 52.84.90.29:443 assets.website-files.com tcp
GB 52.84.90.29:443 assets.website-files.com tcp
GB 52.84.90.29:443 assets.website-files.com tcp
US 104.18.34.227:443 cdn.prod.website-files.com udp
US 172.64.155.119:443 geolocation.onetrust.com tcp
US 8.8.8.8:53 119.155.64.172.in-addr.arpa udp
GB 216.58.204.78:443 www.youtube.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 142.250.179.238:443 www.youtube.com udp
NL 128.116.21.3:443 roblox.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.187.246:443 i.ytimg.com udp
GB 142.250.178.14:443 www.youtube.com udp
GB 216.58.204.78:443 www.youtube.com udp
GB 216.58.204.78:443 www.youtube.com udp
GB 142.250.187.246:443 i.ytimg.com tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
GB 142.250.187.202:443 jnn-pa.googleapis.com udp
GB 142.250.179.238:443 www.youtube.com udp
GB 142.250.179.238:443 www.youtube.com udp
GB 142.250.180.14:443 www.youtube.com tcp
GB 142.250.180.14:443 www.youtube.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 172.64.145.106:443 replit.com tcp
US 172.64.145.106:443 replit.com tcp
US 8.8.8.8:53 cdn.replit.com udp
US 151.101.129.91:443 polyfill-fastly.io tcp
US 104.18.42.150:443 cdn.replit.com tcp
US 172.64.145.106:443 cdn.replit.com udp
US 35.224.251.249:443 sp.replit.com tcp
US 172.64.145.106:443 cdn.replit.com udp
US 35.224.251.249:443 sp.replit.com tcp
US 104.19.230.21:443 js.hcaptcha.com tcp
US 34.120.195.249:443 o1151714.ingest.sentry.io tcp
US 151.101.194.217:443 app.launchdarkly.com tcp
US 151.101.194.217:443 app.launchdarkly.com tcp
GB 54.192.137.94:443 js.stripe.com tcp
GB 143.204.179.196:443 cdn.segment.com tcp
GB 216.58.201.106:443 jnn-pa.googleapis.com tcp
GB 216.58.201.106:443 jnn-pa.googleapis.com tcp
US 76.223.31.44:443 clientstream.launchdarkly.com tcp
GB 143.204.179.196:443 cdn.segment.com tcp
GB 54.192.137.94:443 js.stripe.com tcp
GB 216.58.201.106:443 jnn-pa.googleapis.com udp
US 35.224.251.249:443 sp.replit.com tcp
US 8.8.8.8:53 21.230.19.104.in-addr.arpa udp
US 8.8.8.8:53 249.195.120.34.in-addr.arpa udp
US 8.8.8.8:53 217.194.101.151.in-addr.arpa udp
US 8.8.8.8:53 94.137.192.54.in-addr.arpa udp
US 8.8.8.8:53 196.179.204.143.in-addr.arpa udp
US 8.8.8.8:53 106.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 44.31.223.76.in-addr.arpa udp
IE 34.250.89.120:443 api.stripe.com tcp
GB 142.250.187.194:443 googleads.g.doubleclick.net tcp
GB 142.250.187.196:443 www.google.com tcp
GB 54.192.137.94:443 js.stripe.com tcp
BE 64.233.167.154:443 stats.g.doubleclick.net tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.3:443 www.google.co.uk tcp
US 54.187.119.242:443 r.stripe.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com udp
US 192.0.73.2:443 www.gravatar.com tcp
GB 13.224.132.96:443 m.stripe.network tcp
US 50.112.62.81:443 m.stripe.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 3.233.158.24:443 logs.browser-intake-datadoghq.com tcp
US 54.187.119.242:443 r.stripe.com tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
GB 142.250.187.238:443 clients2.google.com udp
FR 128.116.122.3:443 client-telemetry.roblox.com tcp
GB 18.165.242.119:443 clientsettingscdn.roblox.com tcp
IE 2.18.24.18:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:52695 tcp
N/A 127.0.0.1:52698 tcp
N/A 127.0.0.1:52711 tcp
FR 128.116.122.3:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:52808 tcp
GB 92.123.128.179:443 tcp
US 13.107.237.254:443 t-ring-fdv2.msedge.net tcp
FR 152.199.21.118:443 static-ecst.licdn.com tcp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 34.149.97.1:443 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net tcp
N/A 127.0.0.1:52847 tcp
N/A 127.0.0.1:52855 tcp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 8.8.8.8:53 push.services.mozilla.com udp
US 34.149.97.1:443 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 52.25.243.81:443 shavar.prod.mozaws.net tcp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.107.243.93:443 push.services.mozilla.com tcp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 34.107.243.93:443 push.services.mozilla.com tcp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 34.107.243.93:443 push.services.mozilla.com udp
US 34.120.158.37:443 tracking-protection.cdn.mozilla.net tcp
US 34.120.158.37:443 tracking-protection.cdn.mozilla.net tcp
US 34.120.158.37:443 tracking-protection.cdn.mozilla.net tcp
FR 128.116.122.3:443 client-telemetry.roblox.com tcp
US 8.8.8.8:53 ecsv2.roblox.com udp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
US 8.8.8.8:53 setup.rbxcdn.com udp
IE 2.18.24.9:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:53287 tcp
N/A 127.0.0.1:53290 tcp
N/A 127.0.0.1:53293 tcp
N/A 127.0.0.1:53298 tcp
NL 13.95.26.4:443 msedge.api.cdp.microsoft.com tcp
US 199.232.214.172:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
GB 142.250.187.196:443 www.google.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 216.58.204.78:443 www.youtube.com udp
GB 216.58.204.78:443 www.youtube.com udp
GB 216.58.204.78:443 www.youtube.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
GB 216.58.212.202:443 jnn-pa.googleapis.com udp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
GB 216.58.212.202:443 jnn-pa.googleapis.com tcp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
US 8.8.8.8:53 226.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 202.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 softonic.com udp
GB 142.250.187.196:443 www.google.com tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 23.219.230.135:443 images.sftcdn.net tcp
US 151.101.193.91:443 geometry-dash.en.softonic.com tcp
US 151.101.193.91:443 geometry-dash.en.softonic.com tcp
US 151.101.193.91:443 geometry-dash.en.softonic.com tcp
US 151.101.193.91:443 geometry-dash.en.softonic.com tcp
US 199.232.209.91:443 softonic.com tcp
US 199.232.209.91:443 softonic.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
GB 13.224.222.112:443 sdk.privacy-center.org tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
US 151.101.193.91:443 geometry-dash.en.softonic.com udp
US 204.79.197.237:443 bat.bing.com tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 151.101.193.91:443 geometry-dash.en.softonic.com udp
US 8.8.8.8:53 syndicatedsearch.goog udp
GB 142.250.180.10:443 content-autofill.googleapis.com tcp
GB 172.217.16.238:443 syndicatedsearch.goog tcp
GB 13.224.222.112:443 sdk.privacy-center.org udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 18.172.152.36:443 www.datadoghq-browser-agent.com tcp
US 104.22.75.216:443 btloader.com tcp
US 151.101.129.91:443 geometry-dash.en.softonic.com tcp
US 13.107.246.64:443 www.clarity.ms tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
GB 52.84.90.106:443 config.aps.amazon-adsystem.com tcp
GB 142.250.200.27:443 storage.googleapis.com tcp
US 8.8.8.8:53 ad-delivery.net udp
US 172.67.38.106:443 cdn.id5-sync.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 8.8.8.8:53 36.152.172.18.in-addr.arpa udp
US 8.8.8.8:53 106.90.84.52.in-addr.arpa udp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 27.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 216.75.22.104.in-addr.arpa udp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
NL 139.45.197.227:443 notix.io tcp
US 130.211.23.194:443 api.btloader.com udp
US 20.114.190.119:443 x.clarity.ms tcp
IE 13.74.129.1:443 c.clarity.ms tcp
GB 108.138.233.27:443 api.privacy-center.org tcp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
IE 54.72.120.129:443 id.crwdcntrl.net tcp
US 8.8.8.8:53 htlb.casalemedia.com udp
IE 54.154.252.226:443 ap.lijit.com tcp
US 8.8.8.8:53 brightcombid.marphezis.com udp
DE 46.4.139.58:443 shb.richaudience.com tcp
DE 46.4.139.58:443 shb.richaudience.com tcp
DE 46.4.139.58:443 shb.richaudience.com tcp
GB 142.250.187.196:443 www.google.com udp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 34.120.63.153:443 prebid.media.net tcp
IE 34.252.94.32:443 ad.360yield.com tcp
DE 37.252.171.85:443 ib.adnxs.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
US 104.18.36.155:443 htlb.casalemedia.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
GB 108.138.233.27:443 api.privacy-center.org udp
US 172.67.74.173:443 wct.softonic.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
GB 172.217.16.238:443 syndicatedsearch.goog tcp
GB 172.217.16.238:443 syndicatedsearch.goog tcp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
GB 18.245.143.100:443 tags.crwdcntrl.net tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
GB 172.217.16.238:443 syndicatedsearch.goog udp
NL 178.250.1.3:443 static.criteo.net tcp
GB 172.217.169.65:443 50e5b7eec2f34b64163e2d4d6589f780.safeframe.googlesyndication.com tcp
US 151.101.193.229:443 cdn.jsdelivr.net tcp
US 104.18.35.167:443 cdn-ima.33across.com tcp
US 8.8.8.8:53 27.233.138.108.in-addr.arpa udp
US 8.8.8.8:53 232.154.172.18.in-addr.arpa udp
US 8.8.8.8:53 119.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 129.120.72.54.in-addr.arpa udp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 226.252.154.54.in-addr.arpa udp
US 8.8.8.8:53 150.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 58.139.4.46.in-addr.arpa udp
US 8.8.8.8:53 155.36.18.104.in-addr.arpa udp
US 8.8.8.8:53 32.94.252.34.in-addr.arpa udp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 204.135.128.178.in-addr.arpa udp
GB 216.58.212.206:443 ampcid.google.com tcp
GB 142.250.200.3:443 www.google.co.uk tcp
GB 142.250.200.3:443 www.google.co.uk tcp
GB 142.250.200.3:443 www.google.co.uk tcp
US 216.239.32.36:443 region1.analytics.google.com tcp
BE 64.233.167.156:443 stats.g.doubleclick.net tcp
US 172.67.74.173:443 wct.softonic.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 142.250.187.196:443 www.google.com tcp
IE 54.216.224.159:443 rtb.gumgum.com tcp
US 35.244.193.51:443 lexicon.33across.com tcp
BE 64.233.167.156:443 stats.g.doubleclick.net udp
GB 142.250.200.3:443 www.google.co.uk udp
GB 142.250.187.238:443 www.adsensecustomsearchads.com tcp
GB 142.250.180.10:443 content-autofill.googleapis.com udp
NL 178.250.1.9:443 dis.criteo.com tcp
US 35.71.131.137:443 match.adsrvr.org tcp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 206.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 156.167.233.64.in-addr.arpa udp
US 8.8.8.8:53 51.193.244.35.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 159.224.216.54.in-addr.arpa udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
IE 54.194.45.245:443 ce.lijit.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
US 34.120.63.153:443 prebid.media.net udp
US 104.18.36.155:443 ssum-sec.casalemedia.com udp
IE 52.16.165.89:443 ice.360yield.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
IE 54.239.33.159:443 aax-eu.amazon-adsystem.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
DE 51.38.120.206:443 onetag-sys.com tcp
IE 54.216.224.159:443 rtb.gumgum.com tcp
US 104.18.36.155:443 ssum-sec.casalemedia.com tcp
US 23.53.112.234:443 ads.pubmatic.com tcp
US 104.18.36.155:443 ssum-sec.casalemedia.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
FR 91.134.110.132:443 ssbsync.smartadserver.com tcp
IE 54.154.252.226:443 ap.lijit.com tcp
GB 172.217.16.238:443 syndicatedsearch.goog udp
US 76.223.111.18:443 eb2.3lift.com tcp
IE 54.194.45.245:443 ce.lijit.com tcp
US 35.71.131.137:443 match.adsrvr.org tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
DE 37.252.171.21:443 secure.adnxs.com tcp
IE 54.73.50.175:443 pr-bh.ybp.yahoo.com tcp
US 34.98.64.218:443 us-u.openx.net tcp
US 52.86.229.235:443 sync.srv.stackadapt.com tcp
US 64.202.112.31:443 b1sync.zemanta.com tcp
DK 37.157.2.228:443 c1.adform.net tcp
US 52.87.13.120:443 sync.ipredictive.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 169.197.150.7:443 match.deepintent.com tcp
GB 216.58.201.98:443 cm.g.doubleclick.net tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
US 8.8.8.8:53 132.110.134.91.in-addr.arpa udp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 21.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 175.50.73.54.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 228.2.157.37.in-addr.arpa udp
US 8.8.8.8:53 pool.admedo.com udp
IE 52.210.15.1:443 usersync.gumgum.com tcp
US 34.98.64.218:443 us-u.openx.net udp
IE 52.210.15.1:443 usersync.gumgum.com tcp
BE 35.210.53.219:443 pool.admedo.com tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
NL 198.47.127.19:443 image6.pubmatic.com tcp
GB 216.58.201.98:443 cm.g.doubleclick.net udp
US 151.101.66.49:443 sync-tm.everesttech.net tcp
BE 35.210.53.219:443 pool.admedo.com udp
NL 35.214.174.141:443 a.sportradarserving.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
IE 52.49.131.125:443 match.prod.bidr.io tcp
JP 124.146.153.170:443 tg.socdm.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
ES 23.60.223.190:443 secure-assets.rubiconproject.com tcp
NL 35.214.174.141:443 a.sportradarserving.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
JP 124.146.153.170:443 tg.socdm.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 34.111.129.221:443 cr.frontend.weborama.fr tcp
IE 54.229.28.67:443 sync.crwdcntrl.net tcp
NL 34.91.62.186:443 um.simpli.fi tcp
US 172.67.40.173:443 mwzeom.zeotap.com tcp
US 8.8.8.8:53 simage2.pubmatic.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 image2.pubmatic.com udp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
US 23.53.112.216:443 acdn.adnxs.com tcp
DE 162.55.233.28:443 sync.richaudience.com tcp
BE 104.90.26.20:443 eus.rubiconproject.com tcp
NL 198.47.127.205:443 image2.pubmatic.com tcp
NL 198.47.127.205:443 image2.pubmatic.com tcp
NL 198.47.127.205:443 image2.pubmatic.com tcp
NL 198.47.127.205:443 image2.pubmatic.com tcp
NL 198.47.127.205:443 image2.pubmatic.com tcp
US 172.64.149.180:443 cdn.indexww.com tcp
BE 104.90.24.23:443 contextual.media.net tcp
DE 162.55.233.28:443 sync.richaudience.com tcp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 id.rlcdn.com udp
IE 52.49.131.125:443 match.prod.bidr.io tcp
US 8.8.8.8:53 casale-match.dotomi.com udp
US 44.214.224.191:443 cs-server-s2s.yellowblue.io tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
IE 54.72.66.109:443 jadserve.postrelease.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 52.86.229.235:443 sync.srv.stackadapt.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
NL 63.215.202.137:443 casale-match.dotomi.com tcp
GB 18.164.68.91:443 api-2-0.spot.im tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
DE 51.38.120.206:443 onetag-sys.com udp
IE 54.195.105.36:443 pm.w55c.net tcp
US 192.132.33.68:443 bttrack.com tcp
US 23.220.112.27:443 cs.media.net tcp
US 8.8.8.8:53 31.112.202.64.in-addr.arpa udp
US 8.8.8.8:53 7.150.197.169.in-addr.arpa udp
US 8.8.8.8:53 120.13.87.52.in-addr.arpa udp
US 8.8.8.8:53 219.53.210.35.in-addr.arpa udp
US 8.8.8.8:53 19.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 49.66.101.151.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 141.174.214.35.in-addr.arpa udp
US 8.8.8.8:53 125.131.49.52.in-addr.arpa udp
US 8.8.8.8:53 190.223.60.23.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 170.153.146.124.in-addr.arpa udp
US 8.8.8.8:53 221.129.111.34.in-addr.arpa udp
US 8.8.8.8:53 67.28.229.54.in-addr.arpa udp
US 8.8.8.8:53 173.40.67.172.in-addr.arpa udp
US 8.8.8.8:53 186.62.91.34.in-addr.arpa udp
US 8.8.8.8:53 152.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 205.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 180.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 23.24.90.104.in-addr.arpa udp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 109.66.72.54.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 23.220.112.27:443 cs.media.net tcp
BE 104.90.24.23:443 contextual.media.net udp
US 23.220.112.27:443 cs.media.net tcp
DE 116.202.167.155:443 inv-nets.admixer.net tcp
GB 23.73.139.80:443 player.aniview.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 67.202.105.23:443 ssc-cms.33across.com tcp
US 96.46.186.182:443 sync.aniview.com tcp
US 216.200.232.249:443 sync.mathtag.com tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
FR 154.54.250.81:443 ads.stickyadstv.com tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
FR 5.135.209.104:443 rtb-csync.smartadserver.com tcp
DE 3.75.62.37:443 ups.analytics.yahoo.com tcp
FR 5.135.209.104:443 rtb-csync.smartadserver.com tcp
NL 35.214.241.248:443 ads.creative-serving.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
NL 35.214.241.248:443 ads.creative-serving.com udp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 8.8.8.8:53 91.68.164.18.in-addr.arpa udp
US 8.8.8.8:53 80.139.73.23.in-addr.arpa udp
US 8.8.8.8:53 23.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 81.250.54.154.in-addr.arpa udp
US 8.8.8.8:53 104.209.135.5.in-addr.arpa udp
US 8.8.8.8:53 pixel.tapad.com udp
US 8.8.8.8:53 37.62.75.3.in-addr.arpa udp
US 8.8.8.8:53 182.186.46.96.in-addr.arpa udp
US 8.8.8.8:53 248.241.214.35.in-addr.arpa udp
US 8.8.8.8:53 166.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 88.199.214.35.in-addr.arpa udp
US 8.8.8.8:53 249.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 34.111.113.62:443 pixel.tapad.com tcp
NL 198.47.127.20:443 simage4.pubmatic.com tcp
DE 91.228.74.159:443 cms.quantserve.com tcp
DK 77.243.51.121:443 uipglob.semasio.net tcp
FR 54.38.113.8:443 pixel.onaudience.com tcp
NL 193.0.160.131:443 p.rfihub.com tcp
DE 85.114.159.93:443 dsp.adfarm1.adition.com tcp
FR 51.255.68.171:443 dsp.nrich.ai tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
NL 63.215.202.172:443 pubmatic-match.dotomi.com tcp
IE 34.252.94.32:443 ad.360yield.com tcp
US 8.8.8.8:53 171.68.255.51.in-addr.arpa udp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
US 199.232.209.91:443 softonic.com udp
NL 35.214.191.66:443 csync.loopme.me tcp
SE 213.155.156.167:443 d5p.de17a.com tcp
US 104.18.24.173:443 a.tribalfusion.com tcp
US 35.186.193.173:443 ipac.ctnsnet.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
DE 3.69.181.164:443 1f2e7.v.fwmrm.net tcp
GB 163.70.147.23:443 connect.facebook.net tcp
GB 163.70.147.23:443 connect.facebook.net udp
US 8.8.8.8:53 173.193.186.35.in-addr.arpa udp
US 8.8.8.8:53 164.181.69.3.in-addr.arpa udp
GB 18.165.227.85:443 b-code.liadm.com tcp
GB 216.58.204.70:443 8876029.fls.doubleclick.net tcp
GB 163.70.147.35:443 www.facebook.com tcp
GB 163.70.147.35:443 www.facebook.com tcp
GB 216.58.204.70:443 8876029.fls.doubleclick.net udp
NL 139.45.197.227:443 notix.io tcp
IE 54.239.33.159:443 aax-eu.amazon-adsystem.com tcp
IE 54.239.33.159:443 aax-eu.amazon-adsystem.com tcp
IE 54.239.33.159:443 aax-eu.amazon-adsystem.com tcp
IE 54.239.33.159:443 aax-eu.amazon-adsystem.com tcp
IE 54.239.33.159:443 aax-eu.amazon-adsystem.com tcp
IE 2.18.24.25:443 m.media-amazon.com tcp
IE 2.18.24.25:443 m.media-amazon.com tcp
IE 2.18.24.25:443 m.media-amazon.com tcp
IE 2.18.24.25:443 m.media-amazon.com tcp
IE 2.18.24.25:443 m.media-amazon.com tcp
IE 2.18.24.25:443 m.media-amazon.com tcp
IE 2.18.24.25:443 m.media-amazon.com tcp
IE 2.18.24.25:443 m.media-amazon.com tcp
IE 2.18.24.25:443 m.media-amazon.com tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
GB 18.245.218.86:443 ts.amazon-adsystem.com tcp
GB 18.245.218.86:443 ts.amazon-adsystem.com tcp
IE 2.18.24.25:443 m.media-amazon.com udp
GB 18.245.218.86:443 ts.amazon-adsystem.com tcp
IE 3.254.238.154:443 aan.amazon.co.uk tcp
IE 3.254.238.154:443 aan.amazon.co.uk tcp
IE 3.254.238.154:443 aan.amazon.co.uk tcp
GB 54.192.137.67:443 s2.paa-reporting-advertising.amazon tcp
GB 54.192.137.67:443 s2.paa-reporting-advertising.amazon tcp
GB 54.192.137.67:443 s2.paa-reporting-advertising.amazon tcp
IE 3.254.239.147:443 sq-tungsten-ts-eu.amazon-adsystem.com tcp
IE 3.254.239.147:443 sq-tungsten-ts-eu.amazon-adsystem.com tcp
IE 3.254.239.147:443 sq-tungsten-ts-eu.amazon-adsystem.com tcp
GB 108.156.39.33:443 tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev tcp
GB 108.156.39.33:443 tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev tcp
GB 108.156.39.33:443 tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev tcp
US 151.101.129.91:443 en.softonic.com tcp
GB 79.133.176.211:443 leap.ldplayer.gg tcp
US 8.8.8.8:53 33.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 147.239.254.3.in-addr.arpa udp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
GB 79.133.176.211:443 www.ldplayer.net tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
GB 163.70.147.35:443 www.facebook.com udp
US 8.8.8.8:53 play-lh.googleusercontent.com udp
US 8.8.8.8:53 cdn.ldplayer.net udp
US 8.8.8.8:53 cmp.setupcmp.com udp
US 8.8.8.8:53 js.adscale.de udp
GB 142.250.178.22:443 play-lh.googleusercontent.com tcp
GB 142.250.178.22:443 play-lh.googleusercontent.com tcp
US 104.26.5.6:443 cmp.setupcmp.com tcp
US 35.244.193.51:443 lexicon.33across.com udp
GB 18.172.153.76:443 cdn.ldplayer.net tcp
GB 18.172.153.76:443 cdn.ldplayer.net tcp
GB 18.245.143.108:443 js.adscale.de tcp
US 8.8.8.8:53 76.153.172.18.in-addr.arpa udp
GB 142.250.178.22:443 play-lh.googleusercontent.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
GB 18.172.153.76:443 cdn.ldplayer.net udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com tcp
GB 142.250.187.238:443 fundingchoicesmessages.google.com tcp
US 104.18.30.49:443 stpd.cloud tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 104.26.5.6:443 cmp.setupcmp.com tcp
GB 142.250.200.14:443 apis.google.com tcp
GB 142.250.180.10:443 content-autofill.googleapis.com tcp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
SG 47.236.4.49:443 usersdk.ldmnq.com tcp
US 8.8.8.8:53 invite.ldplayer.net udp
US 8.8.8.8:53 api.ldshop.gg udp
GB 142.250.200.14:443 apis.google.com udp
US 8.8.8.8:53 www.googletagservices.com udp
SG 8.222.229.130:443 api.ldshop.gg tcp
GB 142.250.187.226:443 www.googletagservices.com tcp
SG 8.219.96.60:443 invite.ldplayer.net tcp
US 204.79.197.237:443 c.bing.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
US 13.107.246.64:443 www.clarity.ms tcp
SG 47.236.4.49:443 usersdk.ldmnq.com tcp
GB 99.86.114.124:443 apien.ldplayer.net tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
SG 8.222.229.130:443 api.ldshop.gg tcp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
SG 8.219.96.60:443 invite.ldplayer.net tcp
GB 99.86.114.124:443 apien.ldplayer.net udp
CN 14.215.183.79:443 hm.baidu.com tcp
CN 14.215.183.79:443 hm.baidu.com tcp
US 8.8.8.8:53 108.143.245.18.in-addr.arpa udp
US 8.8.8.8:53 49.30.18.104.in-addr.arpa udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 124.114.86.99.in-addr.arpa udp
US 8.8.8.8:53 49.4.236.47.in-addr.arpa udp
US 8.8.8.8:53 130.229.222.8.in-addr.arpa udp
US 8.8.8.8:53 60.96.219.8.in-addr.arpa udp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
US 151.101.193.229:443 cdn.jsdelivr.net tcp
GB 216.137.44.59:443 tagan.adlightning.com tcp
US 172.64.146.152:443 cd.connatix.com tcp
GB 52.84.90.106:443 config.aps.amazon-adsystem.com tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
CN 14.215.183.79:443 hm.baidu.com tcp
GB 18.245.143.100:443 tags.crwdcntrl.net tcp
US 172.67.38.106:443 cdn.id5-sync.com tcp
IE 209.85.203.84:443 accounts.google.com tcp
GB 23.49.161.153:443 secure.cdn.fastclick.net tcp
GB 23.49.161.153:443 secure.cdn.fastclick.net tcp
US 172.67.36.110:443 cdn.hadronid.net tcp
US 20.114.190.119:443 x.clarity.ms tcp
IE 54.229.28.67:443 bcp.crwdcntrl.net tcp
US 172.67.23.234:443 id.hadron.ad.gt tcp
NL 64.158.223.146:443 proc.ad.cpe.dotomi.com tcp
DE 3.122.134.197:443 ih.adscale.de tcp
IE 209.85.203.84:443 accounts.google.com udp
US 104.22.4.69:443 id.hadron.ad.gt tcp
US 8.8.8.8:53 152.146.64.172.in-addr.arpa udp
US 8.8.8.8:53 153.161.49.23.in-addr.arpa udp
US 8.8.8.8:53 84.203.85.209.in-addr.arpa udp
US 8.8.8.8:53 110.36.67.172.in-addr.arpa udp
US 8.8.8.8:53 146.223.158.64.in-addr.arpa udp
US 8.8.8.8:53 234.23.67.172.in-addr.arpa udp
US 8.8.8.8:53 197.134.122.3.in-addr.arpa udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 104.18.41.104:443 lit.connatix.com udp
US 151.101.65.91:443 prs.sftcdn.net tcp
US 151.101.65.91:443 prs.sftcdn.net tcp
US 151.101.65.91:443 prs.sftcdn.net tcp
US 172.64.146.152:443 lit.connatix.com udp
US 151.101.65.91:443 prs.sftcdn.net udp
US 104.18.41.104:443 lit.connatix.com tcp
US 104.18.41.104:443 lit.connatix.com tcp
US 104.18.41.104:443 lit.connatix.com tcp
US 104.18.41.104:443 lit.connatix.com tcp
US 172.64.146.152:443 lit.connatix.com tcp
US 172.64.146.152:443 lit.connatix.com tcp
US 67.202.105.23:443 ssc-cms.33across.com tcp
GB 142.250.187.196:443 www.google.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
NL 178.250.1.11:443 gum.criteo.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 bidder.criteo.com udp
US 8.8.8.8:53 adx.adform.net udp
US 104.26.8.169:443 script.4dex.io tcp
NL 81.17.55.98:443 prg.smartadserver.com tcp
US 104.26.8.178:443 prebid-stag.setupad.net tcp
US 104.26.8.178:443 prebid-stag.setupad.net tcp
US 172.64.153.78:443 mp.4dex.io tcp
DK 37.157.2.229:443 adx.adform.net tcp
NL 185.106.140.18:443 rtb.adxpremium.services tcp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
US 35.186.253.211:443 rtb.openx.net tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
GB 172.217.169.65:443 7ccefd555368e867c33b9cdf076f5c71.safeframe.googlesyndication.com tcp
NL 145.40.97.66:443 prebid.a-mo.net tcp
US 104.26.8.169:443 script.4dex.io tcp
US 34.98.64.218:443 u.openx.net tcp
US 23.220.112.27:443 cs.media.net tcp
DK 77.243.51.121:443 uipglob.semasio.net tcp
US 104.18.23.145:443 cadmus.script.ac tcp
NL 23.62.61.147:443 articles-img.sftcdn.net tcp
US 34.98.64.218:443 u.openx.net tcp
NL 193.3.178.3:443 u-ams03.e-planning.net tcp
NL 46.228.164.13:443 d.turn.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 104.26.8.178:443 prebid-stag.setupad.net tcp
DE 91.228.74.159:443 cms.quantserve.com tcp
DK 37.157.2.228:443 adx.adform.net tcp
US 35.71.131.137:443 match.adsrvr.org tcp
GB 216.58.201.98:443 cm.g.doubleclick.net tcp
GB 216.58.201.98:443 cm.g.doubleclick.net tcp
IE 67.220.228.203:443 aax-eu.amazon-adsystem.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
DE 37.252.171.85:443 secure.adnxs.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
NL 145.40.97.66:443 prebid.a-mo.net tcp
US 18.211.55.90:443 cookies.nextmillmedia.com tcp
NL 193.3.178.1:443 s.e-planning.net tcp
US 104.18.36.155:443 ssum.casalemedia.com tcp
NL 35.214.191.66:443 csync.loopme.me tcp
US 34.98.64.218:443 u.openx.net udp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 142.250.187.196:443 www.google.com tcp
DE 51.38.120.206:443 onetag-sys.com tcp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
NL 46.228.164.11:443 ad.turn.com tcp
NL 193.3.178.3:443 u-ams03.e-planning.net tcp
NL 193.3.178.3:443 u-ams03.e-planning.net tcp
US 216.239.34.36:443 region1.analytics.google.com udp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
GB 142.250.200.3:443 www.google.co.uk tcp
GB 142.250.200.3:443 www.google.co.uk tcp
GB 52.84.90.79:443 cdn.mediago.io tcp
US 8.8.8.8:53 98.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 211.253.186.35.in-addr.arpa udp
US 8.8.8.8:53 18.140.106.185.in-addr.arpa udp
GB 216.137.44.59:443 tagan.adlightning.com tcp
GB 216.137.44.59:443 tagan.adlightning.com tcp
US 8.8.8.8:53 229.2.157.37.in-addr.arpa udp
US 8.8.8.8:53 66.97.40.145.in-addr.arpa udp
DK 37.157.6.232:443 cm.adform.net tcp
IE 52.17.116.73:443 ce.lijit.com tcp
GB 52.84.90.79:443 cdn.mediago.io tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.196:443 www.google.com udp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
NL 63.215.202.137:443 equativ-match.dotomi.com tcp
DE 159.89.25.223:443 node.setupad.com tcp
FR 149.202.238.100:443 ssbsync-global.smartadserver.com tcp
NL 35.214.168.80:443 gtrace.mediago.io tcp
NL 35.214.168.80:443 gtrace.mediago.io tcp
US 34.111.60.239:443 images.mediago.io tcp
GB 142.250.187.225:443 cdn.ampproject.org tcp
GB 142.250.187.225:443 cdn.ampproject.org tcp
GB 142.250.187.225:443 cdn.ampproject.org tcp
GB 142.250.187.225:443 cdn.ampproject.org tcp
GB 142.250.187.225:443 cdn.ampproject.org tcp
US 104.22.51.98:443 spl.zeotap.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 34.149.40.38:443 u.4dex.io tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
DE 3.120.214.218:443 ps.eyeota.net tcp
US 8.8.8.8:53 38.40.149.34.in-addr.arpa udp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
GB 216.58.201.98:443 cm.g.doubleclick.net udp
NL 63.215.202.137:443 equativ-match.dotomi.com tcp
NL 198.47.127.19:443 image6.pubmatic.com tcp
DE 85.114.159.93:443 dsp.adfarm1.adition.com tcp
US 8.8.8.8:53 aa.agkn.com udp
IE 54.229.28.67:443 bcp.crwdcntrl.net tcp
DE 3.75.62.37:443 ups.analytics.yahoo.com tcp
NL 193.3.178.4:443 sync.e-planning.net tcp
US 151.101.129.44:443 trc.taboola.com tcp
NL 89.149.193.105:443 sync.smartadserver.com tcp
DE 3.126.23.23:443 aa.agkn.com tcp
IE 63.35.32.214:443 dpm.demdex.net tcp
IE 54.73.50.175:443 pr-bh.ybp.yahoo.com tcp
FR 154.54.250.81:443 ads.stickyadstv.com tcp
US 52.203.46.124:443 i.liadm.com tcp
US 3.144.50.134:443 dmp.v.fwmrm.net tcp
US 3.212.116.193:443 rtb.adentifi.com tcp
US 34.96.71.22:443 s.company-target.com tcp
GB 18.245.143.100:443 tags.crwdcntrl.net tcp
US 23.53.112.234:443 ads.pubmatic.com tcp
US 34.149.40.38:443 u.4dex.io tcp
US 151.101.66.49:443 rtd-tm.everesttech.net tcp
GB 216.58.201.98:443 cm.g.doubleclick.net tcp
IE 67.220.228.203:443 aax-eu.amazon-adsystem.com tcp
IE 52.18.50.67:443 obgpm76tt0a0sgozk8l.redinuid.imrworldwide.com tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
DK 77.243.51.121:443 se.semasio.net tcp
FR 91.134.110.132:443 ssbsync-global.smartadserver.com tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
US 172.64.151.101:443 r.casalemedia.com tcp
DK 77.243.51.121:443 se.semasio.net tcp
NL 178.250.1.3:443 static.criteo.net tcp
DE 162.55.233.28:443 sync.richaudience.com tcp
US 172.64.151.101:443 r.casalemedia.com udp
DE 3.69.181.164:443 1f2e7.v.fwmrm.net tcp
US 172.67.40.173:443 spl.zeotap.com tcp
US 34.149.40.38:443 u.4dex.io udp
FR 5.135.209.104:443 rtb-csync.smartadserver.com tcp
US 64.202.112.31:443 b1sync.zemanta.com tcp
NL 35.214.191.66:443 csync.loopme.me tcp
DE 37.252.171.21:443 secure.adnxs.com tcp
NL 63.215.202.137:443 equativ-match.dotomi.com tcp
DE 162.55.233.28:443 sync.richaudience.com tcp
DE 51.38.120.206:443 onetag-sys.com tcp
DE 18.196.251.50:443 match.sharethrough.com tcp
US 35.71.131.137:443 match.adsrvr.org tcp
US 67.202.105.23:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 214.32.35.63.in-addr.arpa udp
US 8.8.8.8:53 23.23.126.3.in-addr.arpa udp
US 8.8.8.8:53 22.71.96.34.in-addr.arpa udp
US 8.8.8.8:53 124.46.203.52.in-addr.arpa udp
US 8.8.8.8:53 193.116.212.3.in-addr.arpa udp
US 8.8.8.8:53 67.50.18.52.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 50.251.196.18.in-addr.arpa udp
FR 91.134.110.132:443 ssbsync-global.smartadserver.com tcp
GB 18.245.143.100:443 tags.crwdcntrl.net tcp
NL 178.250.1.9:443 dis.criteo.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
GB 216.58.201.98:443 cm.g.doubleclick.net tcp
FR 5.135.209.104:443 rtb-csync.smartadserver.com tcp
GB 18.164.68.91:443 api-2-0.spot.im tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 23.220.112.27:443 cs.media.net tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com udp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
ES 23.60.223.190:443 secure-assets.rubiconproject.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
FR 5.135.209.104:443 rtb-csync.smartadserver.com tcp
FR 5.135.209.104:443 rtb-csync.smartadserver.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
BE 104.90.26.20:443 eus.rubiconproject.com tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
IE 52.49.131.125:443 match.prod.bidr.io tcp
US 34.160.236.64:443 odr.mookie1.com tcp
US 204.79.197.237:443 c.bing.com tcp
SG 8.219.96.60:443 invite.ldplayer.net tcp
SG 8.219.96.60:443 invite.ldplayer.net tcp
US 20.114.190.119:443 x.clarity.ms tcp
SG 8.222.229.130:443 api.ldshop.gg tcp
BE 64.233.167.156:443 stats.g.doubleclick.net tcp
GB 108.156.39.69:443 s.ad.smaato.net tcp
US 104.21.48.215:443 adxbid.info tcp
US 34.98.64.218:443 setupad-d.openx.net tcp
NL 145.40.97.67:443 sync.a-mo.net tcp
IE 2.18.24.18:443 csync.smartadserver.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
SG 8.222.229.130:443 api.ldshop.gg tcp
NL 35.214.168.80:443 gtrace.mediago.io udp
NL 35.214.168.80:443 gtrace.mediago.io udp
NL 35.214.168.80:443 gtrace.mediago.io tcp
US 104.19.158.19:443 assets.a-mo.net tcp
NL 35.214.168.80:443 gtrace.mediago.io tcp
US 52.86.229.235:443 sync.srv.stackadapt.com tcp
US 35.186.253.211:443 rtb.openx.net tcp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
IE 2.18.24.18:443 csync.smartadserver.com tcp
NL 63.215.202.172:443 pubmatic-match.dotomi.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
IE 2.18.24.10:443 ced-ns.sascdn.com tcp
GB 142.250.200.3:443 www.google.co.uk udp
US 104.22.51.98:443 spl.zeotap.com tcp
US 35.71.131.137:443 match.adsrvr.org tcp
US 104.18.24.173:443 a.tribalfusion.com udp
NL 185.106.140.18:443 rtb.adxpremium.services tcp
NL 34.91.62.186:443 um.simpli.fi tcp
DK 37.157.5.133:443 track.adform.net tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
NL 198.47.127.19:443 image6.pubmatic.com tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
DE 37.252.171.85:443 secure.adnxs.com tcp
DK 37.157.6.232:443 cm.adform.net tcp
FR 154.54.250.81:443 ads.stickyadstv.com tcp
US 52.86.229.235:443 sync.srv.stackadapt.com tcp
DE 79.127.216.47:443 id.rtb.mx tcp
IE 52.48.156.69:443 ap.lijit.com tcp
IE 54.154.252.226:443 ap.lijit.com tcp
US 34.160.236.64:443 odr.mookie1.com tcp
US 23.220.112.27:443 cs.media.net tcp
US 8.2.110.113:443 as.ck-ie.com tcp
NL 145.40.97.66:443 sync.a-mo.net tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
US 35.186.253.211:443 rtb.openx.net udp
NL 193.0.160.131:443 p.rfihub.com tcp
US 151.101.66.49:443 rtd-tm.everesttech.net tcp
NL 198.47.127.20:443 image4.pubmatic.com tcp
US 8.8.8.8:53 47.216.127.79.in-addr.arpa udp
US 8.8.8.8:53 69.156.48.52.in-addr.arpa udp
US 44.214.224.191:443 cs-server-s2s.yellowblue.io tcp
US 34.96.105.8:443 tr.blismedia.com tcp
US 104.18.36.155:443 r.casalemedia.com tcp
IE 54.73.50.175:443 pr-bh.ybp.yahoo.com tcp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
NL 79.127.227.46:443 id.rtb.mx tcp
GB 185.64.190.84:443 ow.pubmatic.com tcp
FR 141.95.172.216:443 green.erne.co tcp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
IE 54.72.66.109:443 jadserve.postrelease.com tcp
FR 54.38.113.8:443 pixel.onaudience.com tcp
IE 52.215.155.11:443 cm.adgrx.com tcp
NL 198.47.127.205:443 image2.pubmatic.com tcp
US 192.132.33.68:443 bttrack.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
NL 198.47.127.20:443 image4.pubmatic.com tcp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
NL 145.40.97.67:443 sync.a-mo.net tcp
DE 23.88.86.2:443 matching.truffle.bid tcp
US 172.64.146.152:443 img.connatix.com tcp
DE 23.88.86.2:443 matching.truffle.bid tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
IE 52.49.131.125:443 match.prod.bidr.io tcp
GB 89.187.167.6:443 vid.vidoomy.com tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
US 13.107.42.14:443 px.ads.linkedin.com tcp
US 104.18.38.233:80 crt.sectigo.com tcp
US 172.64.146.152:443 img.connatix.com tcp
US 52.87.13.120:443 sync.ipredictive.com tcp
IE 52.17.116.73:443 ce.lijit.com tcp
US 209.192.201.180:443 user-sync.adxpremium.services tcp
IE 52.49.131.125:443 match.prod.bidr.io tcp
US 104.18.41.104:443 img.connatix.com tcp
DK 37.157.2.228:443 adx.adform.net tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 34.96.71.22:443 s.company-target.com udp
US 80.77.87.166:443 cs.admanmedia.com tcp
GB 108.156.39.69:443 s.ad.smaato.net tcp
NL 188.42.63.48:443 dsp-ap.eskimi.com tcp
US 3.229.202.201:443 pxl.iqm.com tcp
FR 45.137.176.88:443 sync.adotmob.com tcp
IE 54.77.47.247:443 ms-cookie-sync.presage.io tcp
US 104.18.41.104:443 img.connatix.com udp
US 104.18.24.173:443 a.tribalfusion.com tcp
FR 5.135.209.104:443 rtb-csync.smartadserver.com tcp
FR 5.135.209.104:443 rtb-csync.smartadserver.com tcp
FR 5.135.209.104:443 rtb-csync.smartadserver.com tcp
FR 5.135.209.104:443 rtb-csync.smartadserver.com tcp
NL 188.42.191.196:443 ads.betweendigital.com tcp
DE 57.129.18.105:443 wt.rqtrk.eu tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
NL 34.91.62.186:443 um.simpli.fi tcp
IE 52.215.155.11:443 cm.adgrx.com tcp
NL 188.166.17.21:443 match.adsby.bidtheatre.com tcp
IE 52.49.76.158:443 d.adroll.com tcp
US 8.8.8.8:53 88.176.137.45.in-addr.arpa udp
US 8.8.8.8:53 247.47.77.54.in-addr.arpa udp
US 8.8.8.8:53 105.18.129.57.in-addr.arpa udp
US 8.8.8.8:53 201.202.229.3.in-addr.arpa udp
US 8.8.8.8:53 196.191.42.188.in-addr.arpa udp
US 209.192.201.180:443 user-sync.adxpremium.services tcp
GB 89.187.167.4:443 vpaid.vidoomy.com tcp
ES 212.36.83.246:443 a.vidoomy.com tcp
ES 212.36.83.246:443 a.vidoomy.com tcp
US 35.71.131.137:443 match.adsrvr.org tcp
US 76.223.111.18:443 eb2.3lift.com tcp
DE 37.252.171.21:443 secure.adnxs.com tcp
US 172.64.146.152:443 img.connatix.com udp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
FR 91.134.110.132:443 ssbsync-global.smartadserver.com tcp
DK 37.157.2.228:443 adx.adform.net tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
DE 18.196.251.50:443 match.sharethrough.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
GB 108.156.39.69:443 s.ad.smaato.net tcp
NL 35.214.191.66:443 csync.loopme.me tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 69.166.1.67:443 sync.go.sonobi.com tcp
NL 193.0.160.131:443 p.rfihub.com tcp
IE 54.217.164.78:443 ads.yieldmo.com tcp
NL 198.47.127.20:443 image4.pubmatic.com tcp
FR 154.54.250.81:443 ads.stickyadstv.com tcp
US 172.64.146.152:443 img.connatix.com tcp
GB 142.250.187.202:443 imasdk.googleapis.com tcp
US 20.114.190.119:443 x.clarity.ms tcp
DE 157.90.33.72:443 push-sdk.com tcp
GB 142.250.187.202:443 imasdk.googleapis.com tcp
GB 216.58.204.70:443 s0.2mdn.net tcp
DE 157.90.33.122:443 push-sdk.com tcp
DE 157.90.33.122:443 push-sdk.com tcp
NL 193.3.178.3:443 u-ams03.e-planning.net tcp
US 209.192.201.180:443 user-sync.adxpremium.services tcp
US 172.64.146.152:443 img.connatix.com udp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
GB 18.245.158.103:443 d19mtdoi3rn3ox.cloudfront.net tcp
GB 216.137.34.195:443 d1arl2thrafelv.cloudfront.net tcp
CN 183.240.98.228:443 hm.baidu.com tcp
CN 183.240.98.228:443 hm.baidu.com tcp
CN 183.240.98.228:443 hm.baidu.com tcp
GB 216.137.34.195:443 d1arl2thrafelv.cloudfront.net tcp
GB 18.172.153.36:443 encdn.ldmnq.com tcp
US 20.114.190.119:443 x.clarity.ms tcp
US 8.8.8.8:53 181.178.204.143.in-addr.arpa udp
US 8.8.8.8:53 113.216.138.108.in-addr.arpa udp
DE 162.55.120.196:443 matching.truffle.bid tcp
DE 162.55.120.196:443 matching.truffle.bid tcp
SG 8.219.136.97:443 middledata.ldplayer.net tcp
CN 111.45.11.83:443 hm.baidu.com tcp
CN 111.45.11.83:443 hm.baidu.com tcp
CN 111.45.11.83:443 hm.baidu.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 20.114.190.119:443 x.clarity.ms tcp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
DE 37.252.171.85:443 secure.adnxs.com tcp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 104.18.36.155:443 r.casalemedia.com udp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
US 34.120.63.153:443 prebid.media.net udp
IE 34.250.17.58:443 ap.lijit.com tcp
US 34.120.63.153:443 prebid.media.net tcp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
IE 54.220.54.255:443 ad.360yield.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
DE 37.252.171.85:443 secure.adnxs.com tcp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
CN 14.215.182.140:443 hm.baidu.com tcp
DE 46.4.139.58:443 shb.richaudience.com tcp
US 8.8.8.8:53 58.17.250.34.in-addr.arpa udp
US 8.8.8.8:53 255.54.220.54.in-addr.arpa udp
US 8.8.8.8:53 151.84.255.185.in-addr.arpa udp
CN 14.215.182.140:443 hm.baidu.com tcp
CN 14.215.182.140:443 hm.baidu.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 20.114.190.119:443 x.clarity.ms tcp
CN 111.45.3.198:443 hm.baidu.com tcp
CN 111.45.3.198:443 hm.baidu.com tcp
CN 111.45.3.198:443 hm.baidu.com tcp
GB 18.244.140.6:443 shield.reasonsecurity.com tcp
GB 216.137.34.195:443 d1arl2thrafelv.cloudfront.net tcp
US 104.26.8.178:443 prebid-stag.setupad.net tcp
US 35.186.253.211:443 rtb.openx.net udp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 172.64.153.78:443 mp.4dex.io tcp
NL 185.106.140.18:443 rtb.adxpremium.services tcp
DK 37.157.2.229:443 adx.adform.net tcp
NL 81.17.55.98:443 prg.smartadserver.com tcp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
NL 147.75.84.158:443 prebid.a-mo.net tcp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
DE 51.38.120.206:443 onetag-sys.com udp
IE 52.95.115.196:443 aax-eu.amazon-adsystem.com tcp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
US 44.239.238.35:443 analytics.apis.mcafee.com tcp
US 8.8.8.8:53 158.84.75.147.in-addr.arpa udp
US 8.8.8.8:53 196.115.95.52.in-addr.arpa udp
DE 51.38.120.206:443 onetag-sys.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 104.22.51.98:443 spl.zeotap.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 34.149.40.38:443 u.4dex.io udp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com udp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
NL 35.214.168.80:443 gtrace.mediago.io tcp
US 64.202.112.31:443 b1sync.zemanta.com tcp
IE 52.49.169.20:443 match.prod.bidr.io tcp
GB 108.156.39.117:443 s.ad.smaato.net tcp
IE 52.49.169.20:443 match.prod.bidr.io tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 match.sharethrough.com udp
US 23.53.112.234:443 ads.pubmatic.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
DE 37.252.171.21:443 secure.adnxs.com tcp
DE 18.196.251.50:443 match.sharethrough.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
IE 52.95.115.196:443 aax-eu.amazon-adsystem.com tcp
IE 52.95.115.196:443 aax-eu.amazon-adsystem.com tcp
GB 216.58.201.98:443 cm.g.doubleclick.net udp
US 35.71.131.137:443 match.adsrvr.org tcp
DE 37.252.171.21:443 secure.adnxs.com tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 54.172.81.62:443 ssp.disqus.com tcp
US 52.46.128.147:443 s.amazon-adsystem.com tcp
BE 104.90.26.20:443 eus.rubiconproject.com tcp
DE 159.89.25.223:443 node.setupad.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 117.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 20.169.49.52.in-addr.arpa udp
US 8.8.8.8:53 35.238.239.44.in-addr.arpa udp
US 8.8.8.8:53 62.81.172.54.in-addr.arpa udp
US 8.8.8.8:53 u.openx.net udp
US 35.244.159.8:443 u.openx.net tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 34.149.40.38:443 u.4dex.io udp
US 35.71.131.137:443 match.adsrvr.org tcp
US 8.8.8.8:53 sadownload.mcafee.com udp
NL 64.158.223.140:443 amazon-tam-match.dotomi.com tcp
GB 23.73.139.8:443 sadownload.mcafee.com tcp
US 34.149.40.38:443 u.4dex.io tcp
US 8.8.8.8:53 8.159.244.35.in-addr.arpa udp
US 8.8.8.8:53 140.223.158.64.in-addr.arpa udp
US 8.8.8.8:53 8.139.73.23.in-addr.arpa udp
US 34.149.40.38:443 u.4dex.io tcp
US 8.8.8.8:53 ice.360yield.com udp
IE 79.125.42.87:443 ice.360yield.com tcp
GB 18.244.140.6:443 shield.reasonsecurity.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
GB 216.58.213.14:80 www.google-analytics.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 track.analytics-data.io udp
US 34.238.47.185:443 track.analytics-data.io tcp
US 34.238.47.185:443 track.analytics-data.io tcp
GB 18.154.84.26:443 update.reasonsecurity.com tcp
US 8.8.8.8:53 185.47.238.34.in-addr.arpa udp
US 8.8.8.8:53 26.84.154.18.in-addr.arpa udp
US 52.46.128.147:443 s.amazon-adsystem.com tcp
US 20.114.190.119:443 x.clarity.ms tcp
US 34.238.47.185:443 track.analytics-data.io tcp
US 34.238.47.185:443 track.analytics-data.io tcp
SG 8.219.48.146:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 electron-shell.reasonsecurity.com udp
GB 108.156.46.124:443 electron-shell.reasonsecurity.com tcp
US 34.238.47.185:443 track.analytics-data.io tcp
US 8.8.8.8:53 124.46.156.108.in-addr.arpa udp
US 8.8.8.8:53 146.48.219.8.in-addr.arpa udp
US 34.238.47.185:443 track.analytics-data.io tcp
US 34.238.47.185:443 track.analytics-data.io tcp
US 34.238.47.185:443 track.analytics-data.io tcp
GB 23.73.139.8:443 sadownload.mcafee.com tcp
US 8.8.8.8:53 home.mcafee.com udp
BE 104.68.84.174:443 home.mcafee.com tcp
US 20.114.190.119:443 x.clarity.ms tcp
US 35.166.186.43:443 analytics.apis.mcafee.com tcp
US 8.8.8.8:53 174.84.68.104.in-addr.arpa udp
US 8.8.8.8:53 43.186.166.35.in-addr.arpa udp
US 34.238.47.185:443 track.analytics-data.io tcp
US 34.238.47.185:443 track.analytics-data.io tcp
US 8.8.8.8:53 cdn.reasonsecurity.com udp
GB 52.84.90.44:443 cdn.reasonsecurity.com tcp
US 8.8.8.8:53 44.90.84.52.in-addr.arpa udp
US 34.238.47.185:443 track.analytics-data.io tcp
US 34.238.47.185:443 track.analytics-data.io tcp
SG 8.219.48.146:443 middledata.ldplayer.net tcp
US 34.238.47.185:443 track.analytics-data.io tcp
US 34.238.47.185:443 track.analytics-data.io tcp
US 20.114.190.119:443 x.clarity.ms tcp
US 104.26.8.178:443 prebid-stag.setupad.net tcp
US 172.64.153.78:443 mp.4dex.io tcp
DK 37.157.2.229:443 adx.adform.net tcp
US 35.186.253.211:443 rtb.openx.net udp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
NL 185.106.140.18:443 rtb.adxpremium.services tcp
NL 147.75.84.158:443 prebid.a-mo.net tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 81.17.55.98:443 prg.smartadserver.com tcp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
FR 154.54.250.81:443 ads.stickyadstv.com tcp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
US 34.149.40.38:443 u.4dex.io udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.187.196:443 www.google.com udp
DE 159.89.25.223:443 node.setupad.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.196:443 www.google.com tcp
DE 37.252.171.85:443 secure.adnxs.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 35.71.131.137:443 match.adsrvr.org tcp
GB 216.58.201.98:443 cm.g.doubleclick.net udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 34.149.40.38:443 u.4dex.io udp
US 13.107.42.14:443 px.ads.linkedin.com tcp
IE 54.247.33.148:443 pr-bh.ybp.yahoo.com tcp
US 54.147.95.198:443 sync.srv.stackadapt.com tcp
US 54.147.95.198:443 sync.srv.stackadapt.com tcp
US 54.147.95.198:443 sync.srv.stackadapt.com tcp
IE 52.49.128.86:443 ap.lijit.com tcp
IE 63.34.134.140:443 ce.lijit.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
NL 34.91.62.186:443 um.simpli.fi tcp
US 8.8.8.8:53 sync.serverbid.com udp
US 8.8.8.8:53 cms.quantserve.com udp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
IE 52.95.115.196:443 aax-eu.amazon-adsystem.com tcp
US 23.53.112.234:443 ads.pubmatic.com tcp
US 8.2.110.134:443 cs.krushmedia.com tcp
DE 91.228.74.200:443 cms.quantserve.com tcp
GB 143.204.176.39:443 sync.serverbid.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
GB 216.58.204.70:443 s0.2mdn.net tcp
US 8.8.8.8:53 39.176.204.143.in-addr.arpa udp
US 8.8.8.8:53 200.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 134.110.2.8.in-addr.arpa udp
SG 8.219.48.146:443 middledata.ldplayer.net tcp
US 20.114.190.119:443 x.clarity.ms tcp
US 20.114.190.119:443 x.clarity.ms tcp
SG 8.219.48.146:443 middledata.ldplayer.net tcp
US 8.8.8.8:53 cdn.ldplayer.net udp
GB 18.245.218.123:443 ad.ldplayer.net tcp
GB 18.172.153.86:443 cdn.ldplayer.net tcp
GB 18.172.153.86:443 cdn.ldplayer.net tcp
SG 8.219.48.146:443 middledata.ldplayer.net tcp
GB 18.172.153.86:443 cdn.ldplayer.net tcp
GB 18.172.153.86:443 cdn.ldplayer.net tcp
GB 18.172.153.86:443 cdn.ldplayer.net tcp
GB 79.133.176.166:443 en.ldplayer.net tcp
US 8.8.8.8:53 86.153.172.18.in-addr.arpa udp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
GB 79.133.176.235:443 advertise.ldplayer.net tcp
US 8.8.8.8:53 235.176.133.79.in-addr.arpa udp
US 8.8.8.8:53 14.160.190.20.in-addr.arpa udp
US 162.159.133.234:443 discord.gg tcp
US 162.159.133.234:443 discord.gg tcp
US 163.181.154.180:443 res.ldplayer.net tcp
US 8.8.8.8:53 discord.com udp
US 162.159.128.233:443 discord.com tcp
US 163.181.154.180:443 res.ldplayer.net tcp
SG 8.219.48.146:443 middledata.ldplayer.net tcp
US 163.181.154.180:443 res.ldplayer.net tcp
GB 79.133.176.235:443 advertise.ldplayer.net tcp
GB 18.245.218.123:443 ad.ldplayer.net tcp
US 8.8.8.8:53 233.128.159.162.in-addr.arpa udp
US 8.8.8.8:53 234.133.159.162.in-addr.arpa udp
US 163.181.154.180:443 res.ldplayer.net tcp
US 163.181.154.180:443 res.ldplayer.net tcp
GB 18.172.153.86:443 cdn.ldplayer.net tcp
GB 18.172.153.10:443 encdn.ldmnq.com tcp
US 163.181.154.180:443 res.ldplayer.net tcp
US 163.181.154.180:443 res.ldplayer.net tcp
US 163.181.154.180:443 res.ldplayer.net tcp
GB 18.172.153.86:443 cdn.ldplayer.net tcp
US 162.159.134.233:443 cdn.discordapp.com tcp
US 162.159.128.233:443 discord.com tcp
GB 79.133.176.213:443 www.ldplayer.net tcp
GB 79.133.176.213:443 www.ldplayer.net tcp
US 8.8.8.8:53 213.176.133.79.in-addr.arpa udp
US 104.26.5.6:443 cmp.setupcmp.com tcp
GB 18.172.153.30:443 cdn.ldplayer.net tcp
GB 142.250.200.14:443 www.youtube.com tcp
GB 142.250.187.238:443 www.youtube.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 142.250.200.14:443 www.youtube.com udp
US 104.18.30.49:443 stpd.cloud tcp
GB 142.250.187.238:443 www.youtube.com udp
US 104.26.5.6:443 cmp.setupcmp.com tcp
GB 18.172.153.23:443 encdn.ldmnq.com tcp
GB 18.172.153.23:443 encdn.ldmnq.com tcp
GB 18.172.153.23:443 encdn.ldmnq.com tcp
GB 18.172.153.23:443 encdn.ldmnq.com tcp
GB 18.172.153.23:443 encdn.ldmnq.com tcp
GB 18.172.153.23:443 encdn.ldmnq.com tcp
US 8.8.8.8:53 apps.identrust.com udp
IE 2.18.24.9:80 apps.identrust.com tcp
US 8.8.8.8:53 30.153.172.18.in-addr.arpa udp
US 8.8.8.8:53 23.153.172.18.in-addr.arpa udp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
GB 18.244.114.101:443 alliance.ldplayer.net tcp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 apien.ldplayer.net udp
US 8.8.8.8:53 usersdk.ldmnq.com udp
GB 216.58.213.6:443 static.doubleclick.net tcp
GB 99.86.114.111:443 apien.ldplayer.net tcp
GB 142.250.187.226:443 www.googletagservices.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
SG 47.236.4.49:443 usersdk.ldmnq.com tcp
GB 216.58.212.202:443 content-autofill.googleapis.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
GB 142.250.180.1:443 yt3.ggpht.com tcp
SG 47.236.4.49:443 usersdk.ldmnq.com tcp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 1.180.250.142.in-addr.arpa udp
GB 216.58.212.202:443 content-autofill.googleapis.com udp
IE 209.85.203.84:443 accounts.google.com tcp
GB 142.250.179.238:443 play.google.com tcp
GB 142.250.179.238:443 play.google.com udp
GB 216.137.44.59:443 tagan.adlightning.com tcp
IE 209.85.203.84:443 accounts.google.com udp
US 151.101.65.229:443 cdn.jsdelivr.net tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
GB 13.224.132.14:80 apien.ldmnq.com tcp
GB 13.224.132.14:443 apien.ldmnq.com tcp
GB 52.84.90.86:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 172.67.36.110:443 cdn.hadronid.net tcp
US 172.67.38.106:443 cdn.id5-sync.com tcp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
GB 23.49.161.153:443 secure.cdn.fastclick.net tcp
GB 23.49.161.153:443 secure.cdn.fastclick.net tcp
GB 18.245.143.58:443 tags.crwdcntrl.net tcp
IE 54.72.120.129:443 bcp.crwdcntrl.net tcp
IE 54.72.120.129:443 bcp.crwdcntrl.net tcp
IE 54.72.120.129:443 bcp.crwdcntrl.net tcp
US 172.67.23.234:443 id.hadron.ad.gt tcp
NL 89.207.16.146:443 proc.ad.cpe.dotomi.com tcp
GB 79.133.176.224:443 ldcdn.ldmnq.com tcp
US 104.22.5.69:443 id.hadron.ad.gt tcp
NL 178.250.1.11:443 dnacdn.net tcp
NL 178.250.1.11:443 dnacdn.net tcp
NL 178.250.1.11:443 dnacdn.net tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
US 104.26.8.178:443 prebid-stag.setupad.net tcp
US 104.26.8.178:443 prebid-stag.setupad.net tcp
US 104.26.8.178:443 prebid-stag.setupad.net tcp
US 104.26.8.178:443 prebid-stag.setupad.net tcp
US 104.26.8.178:443 prebid-stag.setupad.net tcp
US 104.26.8.178:443 prebid-stag.setupad.net tcp
NL 147.75.84.158:443 prebid.a-mo.net tcp
NL 147.75.84.158:443 prebid.a-mo.net tcp
NL 147.75.84.158:443 prebid.a-mo.net tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 185.106.140.18:443 rtb.adxpremium.services tcp
NL 185.106.140.18:443 rtb.adxpremium.services tcp
NL 185.106.140.18:443 rtb.adxpremium.services tcp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
US 35.186.253.211:443 rtb.openx.net tcp
US 35.186.253.211:443 rtb.openx.net tcp
US 35.186.253.211:443 rtb.openx.net tcp
DK 37.157.2.229:443 adx.adform.net tcp
DK 37.157.2.229:443 adx.adform.net tcp
DK 37.157.2.229:443 adx.adform.net tcp
US 172.64.153.78:443 mp.4dex.io tcp
US 172.64.153.78:443 mp.4dex.io tcp
US 172.64.153.78:443 mp.4dex.io tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
US 104.26.8.169:443 script.4dex.io tcp
FR 5.135.209.96:443 prg.smartadserver.com tcp
FR 5.135.209.96:443 prg.smartadserver.com tcp
FR 5.135.209.96:443 prg.smartadserver.com tcp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 104.26.8.169:443 script.4dex.io tcp
US 104.18.23.145:443 cadmus.script.ac tcp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
NL 89.149.193.101:443 ssbsync-global.smartadserver.com tcp
NL 178.250.1.11:443 dnacdn.net tcp
US 104.26.8.169:443 script.4dex.io tcp
US 35.244.159.8:443 u.openx.net tcp
DE 51.38.120.206:443 onetag-sys.com tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 23.53.112.234:443 ads.pubmatic.com tcp
US 35.244.159.8:443 u.openx.net udp
GB 142.250.200.27:443 storage.googleapis.com tcp
GB 142.250.200.27:443 storage.googleapis.com tcp
DE 18.184.31.61:443 1x1.a-mo.net tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 69.5.22.104.in-addr.arpa udp
US 8.8.8.8:53 96.209.135.5.in-addr.arpa udp
US 8.8.8.8:53 101.193.149.89.in-addr.arpa udp
US 8.8.8.8:53 116.138.19.162.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 e4e5292cb534b03b055fffcf99c1bc24.safeframe.googlesyndication.com udp
DE 51.38.120.206:443 onetag-sys.com udp
GB 172.217.169.65:443 e4e5292cb534b03b055fffcf99c1bc24.safeframe.googlesyndication.com tcp
GB 172.217.169.65:443 e4e5292cb534b03b055fffcf99c1bc24.safeframe.googlesyndication.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
DE 37.252.171.85:443 secure.adnxs.com tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
US 74.121.140.211:443 sync.mathtag.com tcp
US 104.22.51.98:443 spl.zeotap.com tcp
GB 13.224.132.14:443 apien.ldmnq.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 52.116.53.150:443 8proof.com tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
FR 154.54.250.80:443 ads.stickyadstv.com tcp
US 52.116.53.150:443 8proof.com tcp
GB 216.58.201.98:443 cm.g.doubleclick.net tcp
US 34.149.40.38:443 u.4dex.io tcp
DK 37.157.6.232:443 cm.adform.net tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
DE 159.89.25.223:443 node.setupad.com tcp
DE 159.89.25.223:443 node.setupad.com tcp
ES 23.60.223.190:443 secure-assets.rubiconproject.com tcp
FR 178.32.210.230:443 ssbsync.smartadserver.com tcp
US 34.149.40.38:443 u.4dex.io udp
DE 91.228.74.200:443 cms.quantserve.com tcp
NL 89.149.192.200:443 rtb-csync.smartadserver.com tcp
NL 89.149.192.200:443 rtb-csync.smartadserver.com tcp
BE 104.90.26.20:443 eus.rubiconproject.com tcp
DE 57.129.18.105:443 wt.rqtrk.eu tcp
US 52.46.143.56:443 s.amazon-adsystem.com tcp
DE 85.114.159.93:443 dsp.adfarm1.adition.com tcp
US 64.202.112.159:443 b1sync.zemanta.com tcp
US 8.8.8.8:53 159.112.202.64.in-addr.arpa udp
GB 142.250.187.225:443 cdn.ampproject.org tcp
GB 142.250.187.225:443 cdn.ampproject.org tcp
GB 142.250.187.225:443 cdn.ampproject.org tcp
GB 142.250.187.225:443 cdn.ampproject.org tcp
GB 142.250.187.225:443 cdn.ampproject.org tcp
GB 142.250.200.27:443 storage.googleapis.com udp
NL 178.250.1.3:443 static.criteo.net tcp
US 104.19.159.19:443 euw1-assets.a-mo.net tcp
IE 108.129.61.179:443 ice.360yield.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 20.114.190.119:443 x.clarity.ms tcp
US 8.8.8.8:53 images.mediago.io udp
US 8.8.8.8:53 cdn.adnxs-simple.com udp
US 8.8.8.8:53 ams3-ib.adnxs-simple.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 52.84.90.79:443 cdn.mediago.io tcp
US 34.111.60.239:443 images.mediago.io tcp
US 23.53.112.216:443 cdn.adnxs-simple.com tcp
NL 185.89.210.122:443 ams3-ib.adnxs-simple.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
NL 145.40.97.66:443 sync.a-mo.net tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
NL 193.3.178.3:443 u-ams03.e-planning.net tcp
GB 52.84.90.79:443 cdn.mediago.io tcp
NL 185.235.87.17:443 gem.gbc.criteo.com tcp
FR 185.235.86.124:443 ag.gbc.criteo.com tcp
US 104.19.158.19:443 assets.a-mo.net tcp
US 8.8.8.8:53 122.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 setupad-d.openx.net udp
US 104.21.48.215:443 adxbid.info tcp
NL 35.214.168.80:443 trace-eu.mediago.io tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 3.229.202.201:443 pxl.iqm.com tcp
US 8.8.8.8:53 match.sharethrough.com udp
DE 18.158.213.12:443 match.sharethrough.com tcp
DE 18.158.213.12:443 match.sharethrough.com tcp
US 151.101.2.49:443 sync-tm.everesttech.net tcp
GB 216.58.201.98:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 image6.pubmatic.com udp
NL 77.245.57.72:443 sync.adkernel.com tcp
IE 3.248.136.82:443 ms-cookie-sync.presage.io tcp
NL 198.47.127.19:443 image6.pubmatic.com tcp
US 8.8.8.8:53 49.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 82.136.248.3.in-addr.arpa udp
DE 37.252.171.85:443 secure.adnxs.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
DE 51.38.120.206:443 onetag-sys.com tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 172.64.151.101:443 ssum.casalemedia.com tcp
US 8.2.110.113:443 as.ck-ie.com tcp
NL 35.214.168.80:443 trace-eu.mediago.io udp
NL 35.214.168.80:443 trace-eu.mediago.io tcp
US 52.46.143.56:443 s.amazon-adsystem.com tcp
GB 195.181.164.16:443 vid.vidoomy.com tcp
US 104.18.38.233:80 crt.sectigo.com tcp
US 209.192.201.180:443 user-sync.adxpremium.services tcp
GB 89.187.167.5:443 vid.vidoomy.com tcp
US 23.53.112.234:443 ads.pubmatic.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 35.186.253.211:443 rtb.openx.net udp
DK 37.157.6.232:443 cm.adform.net tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 ap.lijit.com udp
ES 212.36.83.246:443 a.vidoomy.com tcp
ES 212.36.83.246:443 a.vidoomy.com tcp
IE 34.242.194.205:443 ap.lijit.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
NL 185.106.140.18:443 rtb.adxpremium.services tcp
NL 185.106.140.18:443 rtb.adxpremium.services tcp
N/A 127.0.0.1:6463 tcp
N/A 127.0.0.1:6464 tcp
N/A 127.0.0.1:6465 tcp
N/A 127.0.0.1:6466 tcp
N/A 127.0.0.1:6467 tcp
N/A 127.0.0.1:6468 tcp
US 20.114.190.119:443 x.clarity.ms tcp
N/A 127.0.0.1:6469 tcp
N/A 127.0.0.1:6470 tcp
N/A 127.0.0.1:6471 tcp
N/A 127.0.0.1:6472 tcp
GB 142.250.179.238:443 www.youtube.com udp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
US 52.116.53.150:443 8proof.com tcp
US 54.68.33.66:443 analytics.apis.mcafee.com tcp
US 20.114.190.119:443 x.clarity.ms tcp
GB 18.244.114.57:443 now.gg tcp
GB 18.244.114.57:443 now.gg tcp
GB 18.244.114.57:443 now.gg udp
GB 18.244.114.17:443 cmp.inmobi.com tcp
GB 23.73.139.42:443 cdn.now.gg tcp
GB 23.73.139.42:443 cdn.now.gg tcp
GB 23.73.139.42:443 cdn.now.gg tcp
GB 23.73.139.42:443 cdn.now.gg tcp
GB 23.73.139.42:443 cdn.now.gg tcp
US 8.8.8.8:53 42.139.73.23.in-addr.arpa udp
GB 23.73.139.42:443 cdn.now.gg udp
US 35.190.88.7:443 sessions.bugsnag.com tcp
US 35.190.88.7:443 sessions.bugsnag.com tcp
GB 18.244.114.17:443 cmp.inmobi.com tcp
US 35.190.88.7:443 sessions.bugsnag.com udp
GB 23.73.139.42:443 cdn.now.gg udp
GB 18.244.114.17:443 cmp.inmobi.com tcp
DE 52.58.158.46:443 api.cmp.inmobi.com tcp
IE 209.85.203.84:443 accounts.google.com tcp
GB 23.73.139.48:443 sadownload.mcafee.com tcp
IE 209.85.203.84:443 accounts.google.com udp
GB 18.244.114.57:443 now.gg tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.179.238:443 www.youtube.com udp
GB 142.250.179.238:443 www.youtube.com tcp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn1.gstatic.com tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 108.138.233.30:443 www.bluestacks.com tcp
GB 108.138.233.30:443 www.bluestacks.com tcp
US 8.8.8.8:53 cdn-www.bluestacks.com udp
US 151.101.193.229:443 cdn.jsdelivr.net tcp
US 151.101.193.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 cdn-bgp.bluestacks.com udp
GB 23.73.139.42:443 cdn.now.gg tcp
GB 23.73.139.42:443 cdn.now.gg tcp
GB 18.244.114.17:443 cmp.inmobi.com tcp
US 34.120.235.88:443 webapi-cloud.bluestacks.com tcp
GB 23.73.139.40:443 cdn-www.bluestacks.com tcp
GB 23.73.139.40:443 cdn-www.bluestacks.com tcp
GB 23.73.139.40:443 cdn-www.bluestacks.com tcp
GB 23.73.139.40:443 cdn-www.bluestacks.com tcp
GB 23.73.139.40:443 cdn-www.bluestacks.com tcp
GB 23.73.139.40:443 cdn-www.bluestacks.com tcp
GB 23.73.139.75:443 cdn-bgp.bluestacks.com tcp
GB 23.73.139.40:443 cdn-www.bluestacks.com udp
GB 142.250.180.10:443 content-autofill.googleapis.com tcp
GB 18.244.114.17:443 cmp.inmobi.com tcp
US 34.160.86.181:443 cloud.bluestacks.com tcp
DE 52.58.158.46:443 api.cmp.inmobi.com tcp
DE 52.58.158.46:443 api.cmp.inmobi.com tcp
GB 142.250.187.238:80 clients2.google.com tcp
GB 142.250.187.238:443 clients2.google.com udp
GB 172.217.16.225:443 clients2.googleusercontent.com tcp
US 34.160.86.181:443 cloud.bluestacks.com udp
US 216.239.32.36:443 region1.analytics.google.com tcp
BE 64.233.167.156:443 stats.g.doubleclick.net tcp
GB 142.250.200.3:443 www.google.co.uk tcp
BE 64.233.167.156:443 stats.g.doubleclick.net udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.200.3:443 www.google.co.uk udp
US 34.120.235.88:443 webapi-cloud.bluestacks.com tcp
US 34.120.235.88:443 webapi-cloud.bluestacks.com udp
GB 23.73.139.25:443 ak-build.bluestacks.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
US 104.18.41.104:443 capi.connatix.com udp
US 20.114.58.89:443 msedge.api.cdp.microsoft.com tcp
GB 23.73.139.35:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
US 20.114.190.119:443 x.clarity.ms tcp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 brightcombid.marphezis.com udp
US 8.8.8.8:53 prebid.media.net udp
DE 37.252.171.53:443 ib.adnxs.com tcp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
IE 52.49.92.206:443 ap.lijit.com tcp
IE 52.214.128.20:443 ad.360yield.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 172.64.151.101:443 htlb.casalemedia.com udp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
US 34.120.63.153:443 prebid.media.net udp
DE 46.4.139.58:443 shb.richaudience.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
US 104.18.41.104:443 capi.connatix.com udp
US 20.114.190.119:443 x.clarity.ms tcp
US 20.114.58.89:443 msedge.api.cdp.microsoft.com tcp
GB 172.217.169.78:443 www.youtube.com udp
US 172.64.146.152:443 capi.connatix.com udp
NL 185.89.210.122:443 ams3-ib.adnxs-simple.com tcp
SG 8.219.136.97:443 middledata.ldplayer.net tcp

Files

\??\pipe\crashpad_2384_HODWUUEVGJPNBCML

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

MD5 453630893651031cdceefd9bc5985139
SHA1 e49c981715cd9432b9755d85f7cc2a7766a6f47f
SHA256 f08a1495f33d6aba27b1d9832db947aea1ed1bc061d412869e58adf09adc68d7
SHA512 2261806dccac410552400be3588c5809feaa4e6375edb40cc5606dcfa07e9599c0c6a8a9b52157dc8040e9ad747c76c9ad41603cef4b1e28b9688816ac1c59fb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 87984f292bc1d907d84e07ea94283cee
SHA1 64f008f17cbe8291c7d6f3bdfc3c2df40af52b58
SHA256 dfc65ec78b4897b1665ff4973eddc088260d01d1e31d1f59c1ecf8f60900da3c
SHA512 286e66fd9605031fb4779a1eca331d601c0b0ed6dfc293fe3cf94634d86d2e272ee60d5185401380853e4f3157269b3e478add944f5a38b5b4b4108af37a04d6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 70ce49b542708c81b31f5ef64ac70982
SHA1 635bf16cf29542545a5444a3a09ee486cc462d46
SHA256 e2f61f7f26d7f5254ac1fe346cf052dff3959575fe9ce4331833abe3b6a7c987
SHA512 9102031f339c89ec4d4b7ccf6ffd47ef6d3253bdba541359e78deaa5dd212680f59ff7e1e3ed53a2cd6a5f869dc60fd2db759f735f8e16ba601f0a0a03a46bf7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 02cc25d7ef0caac55599f18d95b95405
SHA1 b4ba415b499f1654c5725de7ab19dcca6157f48a
SHA256 5e752ba9d619fc16df8c059bfef049fbe08ba9b412d9dc4c9f05b421e2f719cf
SHA512 2315834ea46f162b599960812b1308e5dd1a0b92bc8c01ca0078025396233546807a71434b3756061af2914c557514bb05a8435baae108fdd97cdd8cdd038084

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 726c71c55974d87d2ef081b6451d7884
SHA1 8286f740da651de089a08b5ea80a232b4e375633
SHA256 c75b44ab52677b09d6b60629327a6ecd176f0996c8543165bfcd62b59a09b6c6
SHA512 a8d650dcf9b0f60e616006d6c90d40b349f5f25a86bd135e7bca04d082cb3fd131b85fec90d03b25f9cd2568c0ccf84e32f0a2b8d2400d7fac803780b46a6fa7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e0d66a737281a82302bbaa29a7c0b6af
SHA1 05dc8bec6bd1872a7bfe57a7256f946f5937a56b
SHA256 5136be735eb0fec89e30cfd83a0debbb49558c6fbf163dde62ce52a73ff8a757
SHA512 8a2459e72174757d2c71614359a95d3fbde7f2a6d5bc280613e886c5997793079d2d311fa70a560fc13eaf35aec5ebe38b8c77285dabbda96e32f70733595da5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 cde961f77c23a7e07c16966d262cf21e
SHA1 5e3c9a04e077e0fb677a17248e31a6796d6dff67
SHA256 f8c1a8be8e1d172513e4983064dcdef8959d7ce8fb6ff8309e3edfadfb719dd5
SHA512 f409c52f97e499bb7e8d3cacf7df2aa18488c1b8781903b8a2c71376e61099dd2e79d9b2709b1c8f90b43f18e9882325f246be0e85efaa431d98c7b648107073

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 f23f42bd81752ab8fbbeeebfdce70be6
SHA1 47d55ce0885d1d5ca6a653ceaa0ff477b2000c30
SHA256 ff8db40d2c50a67ac87213cf4840ec16a23d20f6b4e11079f3a2a4ff2a022b71
SHA512 35e02782f65ca93b331990984ad2a1dcf343aff439d6bb20072878f06c7024bfc0bba0c2d0bdc9c6d3f812ebed2d8a795621be9fad0deda85314e6b2b4edd494

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c

MD5 65e56706c75f6e9a6919adb6a758b8ee
SHA1 10a88a193c4a11bc6ae69e032061fdf62b564173
SHA256 4b9169f4e8dc65736458fb1d2d74ff0254cf5e3d883be7dfd05606eea40092c9
SHA512 2049960c061dfaec124791e5842985662d70ac7fe7996448c7ca6960243f3fa09da77561c0840a32677f55656d3e96a330f6a5fea579c17b3643929588e583e4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 222e469418459e8eedf48f1156ff0b24
SHA1 ca8903d8318fd615d802aaae5545f23ffd004694
SHA256 4f23faa21944b2cdeecbe879c1109d984db9e9791cc180002891c0a4d1dac599
SHA512 ba037a7ca3f0402fc03bb03fa6ff55ce8e4a99558ef31ccebbff1ba0609ebc082997f884bee7da5ba5d88c50437d168597f1f48ea9b9401268d9ac1f25b76ced

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d5a150469bd4083532d195b15772fbc8
SHA1 b7f0e707a67263d2ecb59d8863a1b2fccd5b05ec
SHA256 d9bb5bb077099e0252c2a0c56bf2e466a45b578dc1a8f9154068d4834a0dde36
SHA512 822b335a6fa70e4c43b928a6df2fd9e6facb88633ed3cd0f59e8843eeb9fe5239df05ec4495c1afde0733bbd1a4310ca17c31d5148c6a15b5d07170ac9d87a5d

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7d891c94cc8dafc5fd3f4797e3803b52
SHA1 26e61c93a91b5ad533c8930a111245c7a17477ab
SHA256 70246be0ad25601427da96790c6ba86da4baae27bfa4d81f64c1e713bef6a0ee
SHA512 0e3aa0517f27c7f1ca7502ab9dba3d994b13e74eec2ca9d2ec1b1c1466dd7110de08055b399afa1c64896f2b0965b32bc34d5293708adc9cc4a1c93b2acf4943

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a00aeb05a7137274f010ea2fbb24ee1e
SHA1 1af3909e26157ce81dc4a8ec3731aae3f340eaac
SHA256 d24bdc810e075caace0076f6f4735302f5a06d2afeafcb825b40a9137835c9ea
SHA512 ab77ca85209c68c0162962bc2f28135840c7048e5d5b982011ac81e3a0dd16ca8a6998889930bd0222267f51e286a2078fb86e8a3e3a4aa8ee4f85b333334c2e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 54f008d7669ddb13fd6b8c999b4d5624
SHA1 259d507efee7141ad575da0706ce0dc3182ba4eb
SHA256 adca3b5221aebaf7245b5bf611c78af2c9369756e7ca8666bc6bc80444d67152
SHA512 659e6a5d20ab4d7f49055c30c5d2644afdd586bfd350467cd315e76c3565e2f629061fcfe80c4d23f739b0f73175fb1e373996f07febc2cd945a53c919f7f7b7

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe

MD5 94740510822524d579f869a81e02f5ea
SHA1 0e87d714e9eec2eee7c3af028e8e66e7478a107f
SHA256 ad927962330c2d2cf2bf7c33c1a5395df5ccd4ceabfb10c72db240041d773dda
SHA512 7cb3e72b0f1bdcbd53096fdec470fec9a6aa56d56b5f4bfa86b6afaa3ddbd2be6878f7874feb2c15647a627cea34a1fee7be35f6d1dffbf6a5a9c0bf8efa1d24

C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe

MD5 4fa63f4ccb9b1fca93ab82e51c6d4750
SHA1 1f26018c15ed5e14140ed44c28cf52a7b892fc86
SHA256 685f8b14eb645f892a666cf61cf691d086fe0d3e344a245323f1fe75034869fb
SHA512 a25031fb2afe1baebe9b46266192574c6c73b7fcd8e3e2897873d97b3f6232c5228fa4f633b1df98b9410808d5afe1dd470cd8f3f6dbc0c52526311b769554ab

C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\b022682dd39d113f2d5a65a172dbd28f

MD5 b022682dd39d113f2d5a65a172dbd28f
SHA1 aa874df3d3d0a9539c53a8a0c96c4c119bae2c52
SHA256 47a2e8bbef18d5491be3c449d9a5464a8804d9d1a85bc7e24ff80876e85104a3
SHA512 d6746ca7c1e10b1ed7fb48d857210ce5cd0f0542c81fdbf00a6afaf4607f30020ccc09f4c41ef9f50bc2562bf6e4380e7abaef1d5a5b1e91773281bcd9e58525

C:\Program Files (x86)\Roblox\Versions\version-1088f3c8e4a44cc7\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MD5 610b1b60dc8729bad759c92f82ee2804
SHA1 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552
SHA256 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08
SHA512 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdate.exe

MD5 4dc57ab56e37cd05e81f0d8aaafc5179
SHA1 494a90728d7680f979b0ad87f09b5b58f16d1cd5
SHA256 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718
SHA512 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdate.dll

MD5 965b3af7886e7bf6584488658c050ca2
SHA1 72daabdde7cd500c483d0eeecb1bd19708f8e4a5
SHA256 d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19
SHA512 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_en.dll

MD5 4a1e3cf488e998ef4d22ac25ccc520a5
SHA1 dc568a6e3c9465474ef0d761581c733b3371b1cd
SHA256 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011
SHA512 ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\NOTICE.TXT

MD5 6dd5bf0743f2366a0bdd37e302783bcd
SHA1 e5ff6e044c40c02b1fc78304804fe1f993fed2e6
SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
SHA512 f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeComRegisterShellARM64.exe

MD5 7a160c6016922713345454265807f08d
SHA1 e36ee184edd449252eb2dfd3016d5b0d2edad3c6
SHA256 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9
SHA512 c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe

MD5 60dba9b06b56e58f5aea1a4149c743d2
SHA1 a7e456acf64dd99ca30259cf45b88cf2515a69b3
SHA256 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112
SHA512 e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\EdgeUpdate.dat

MD5 369bbc37cff290adb8963dc5e518b9b8
SHA1 de0ef569f7ef55032e4b18d3a03542cc2bbac191
SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
SHA512 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_af.dll

MD5 567aec2d42d02675eb515bbd852be7db
SHA1 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37
SHA256 a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c
SHA512 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_am.dll

MD5 f6c1324070b6c4e2a8f8921652bfbdfa
SHA1 988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf
SHA256 986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717
SHA512 63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_bn.dll

MD5 7dc58c4e27eaf84ae9984cff2cc16235
SHA1 3f53499ddc487658932a8c2bcf562ba32afd3bda
SHA256 e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98
SHA512 bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_cy.dll

MD5 34d991980016595b803d212dc356d765
SHA1 e3a35df6488c3463c2a7adf89029e1dd8308f816
SHA256 252b6f9bf5a9cb59ad1c072e289cc9695c0040b363d4bfbcc9618a12df77d18e
SHA512 8a6cbcf812af37e3ead789fbec6cba9c4e1829dbeea6200f0abbdae15efd1eda38c3a2576e819d95ed2df0aafd2370480daa24a3fe6aeb8081a936d5e1f8d8ed

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_fil.dll

MD5 7c66526dc65de144f3444556c3dba7b8
SHA1 6721a1f45ac779e82eecc9a584bcf4bcee365940
SHA256 e622823096fc656f63d5a7bbdf3744745ef389c92ec1b804d3b874578e18c89d
SHA512 dbc803c593ae0b18fd989fdc5e9e6aee8f16b893ae8d17e9d88436e2cd8cae23d06e32e4c8a8bf67fc5311b6f2a184c4e6795fed6d15b3d766ef5affc8923e2f

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_hu.dll

MD5 f4976c580ba37fc9079693ebf5234fea
SHA1 7326d2aa8f6109084728323d44a7fb975fc1ed3f
SHA256 b16755fdbcc796ef4eb937759fe2c3518c694f5d186970d55a5a5e5d906cb791
SHA512 e43636d8c947e981258e649712ad43f37c1aab01916539b93c082959fb5c6764c9c44979650092202839e812e6f252c6c3eaf66d3d195c1efd39c74c81ad1981

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_hr.dll

MD5 0b475965c311203bf3a592be2f5d5e00
SHA1 b5ff1957c0903a93737666dee0920b1043ddaf70
SHA256 65915ad11b9457d145795a1e8d151f898ec2dcb8b136967e6592884699867eb0
SHA512 bec513125f272c24477b9ddbaa5706d1e1bb958babac46829b28df99fa1dd82f3f1e3c7066dc2fe3e59118c536675a22fc2128de916ca4c478950b9992372007

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_hi.dll

MD5 34cbaeb5ec7984362a3dabe5c14a08ec
SHA1 d88ec7ac1997b7355e81226444ec4740b69670d7
SHA256 024c5eae16e45abe2237c2a5d868563550ac596f1f7d777e25234c17d9461dd9
SHA512 008c8443a3e93c4643a9e8735a1c59c24ba2f7a789606a86da54c921c34cbc0cb11c88594544d8509a8e71b6a287c043b1ffe2d39b90af53b4cde3847d891ba8

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_gu.dll

MD5 f9646357cf6ce93d7ba9cfb3fa362928
SHA1 a072cc350ea8ea6d8a01af335691057132b04025
SHA256 838ccd8243caa1a5d9e72eb1179ac8ae59d2acb453ed86be01e0722a8e917150
SHA512 654c4a5200f20411c56c59dbb30a63bfe2da27781c081e2049b31f0371a31d679e3c9378c7eb9cf0fb9166a3f0fba33a58c3268193119b06f91bebe164a82528

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_gl.dll

MD5 84a1cea9a31be831155aa1e12518e446
SHA1 670f4edd4dc8df97af8925f56241375757afb3da
SHA256 e4eb716f1041160fd323b0f229b88851e153025d5d79f49b7d6ecb7eb2442c57
SHA512 5f1318119102fcee1c828565737ce914493ff86e2a18a94f5ff2b6b394d584ace75c37258d589cce1d5afd8e37d617168a7d7372cfd68dd6a2afcd4577a0bc51

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_gd.dll

MD5 c90f33303c5bd706776e90c12aefabee
SHA1 1965550fe34b68ea37a24c8708eef1a0d561fb11
SHA256 e3acc61d06942408369c85365ac0d731c5f3c9bc26e3f1e3bb24226d0879ad9c
SHA512 b0c1a9d7df57d68e5daf527703f0b6154a2ef72af1a3933bda2804408f6684b5b09b822522193243fd0756f80f13d3ab0647c90d2bed1a57b4a9fea933b0aa9a

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_ga.dll

MD5 3b8a5301c4cf21b439953c97bd3c441c
SHA1 8a7b48bb3d75279de5f5eb88b5a83437c9a2014a
SHA256 abc9822ee193c9a98a21202648a48ecd69b0cb19ff31c9bbf0c79dab5f9609b0
SHA512 068166cfdf879caf4e54fe43c5265a692fcaf6a9dcbf151335fd054bbec06260bc5ed489de6d46ca3fc0044bc61fa1468fea85373c6c66349620618ee869383a

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_fr-CA.dll

MD5 b534e068001e8729faf212ad3c0da16c
SHA1 999fa33c5ea856d305cc359c18ea8e994a83f7a9
SHA256 445051ef15c6c872bed6d904169793837e41029a8578eaf81d78a4641ef53511
SHA512 e937d2e0f43ade3f4a5e9cdeb6dd8c8ad8b5b50a7b6b779bda727a4fe1ced93abd06720395cc69a274ce3b0f7c6b65e1eba1ecf069db64edb80d007fbb4eedbb

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_fr.dll

MD5 64c47a66830992f0bdfd05036a290498
SHA1 88b1b8faa511ee9f4a0e944a0289db48a8680640
SHA256 a9b72fcb3bdb5e021b8d23b2de0caeca80ddc50420088b988a5b7503f2d7c961
SHA512 426546310c12aeb80d56e6b40973a5f4dffef72e14d1ac79e3f267e4df2a0022b89e08bba8ab2ffa24f90b0c035a009bed3066201e30fe961d84ed854e48f9c5

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_fi.dll

MD5 d45f2d476ed78fa3e30f16e11c1c61ea
SHA1 8c8c5d5f77cd8764c4ca0c389daee89e658dfd5e
SHA256 acf42b90190110ccf30bcfb2626dd999a14e42a72a3983928cba98d44f0a72e2
SHA512 2a876e0313a03e75b837d43e9c5bb10fcec385fbb0638faa984ee4bb68b485b04d14c59cd4ed561aaa7f746975e459954e276e73fc3f5f4605ae7f333ce85f1b

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_fa.dll

MD5 cbe3454843ce2f36201460e316af1404
SHA1 0883394c28cb60be8276cb690496318fcabea424
SHA256 c66c4024847d353e9985eb9b2f060b2d84f12cc77fb6479df5ffc55dbda97e59
SHA512 f39e660f3bfab288871d3ec40135c16d31c6eb1a84136e065b54ff306f6f8016a788c713d4d8e46ad62e459f9073d2307a6ed650919b2dd00577bbfd04e5bd73

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_eu.dll

MD5 a7e1f4f482522a647311735699bec186
SHA1 3b4b4b6e6a5e0c1981c62b6b33a0ca78f82b7bbd
SHA256 e5615c838a71b533b26d308509954907bcc0eb4032cdbaa3db621eede5e6bfa4
SHA512 22131600bbac8d9c2dab358e244ec85315a1aaebfc0fb62aaa1493c418c8832c3a6fbf24a6f8cf4704fdc4bc10a66c88839a719116b4a3d85264b7ad93c54d57

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_et.dll

MD5 b78cba3088ecdc571412955742ea560b
SHA1 bc04cf9014cec5b9f240235b5ff0f29dbdb22926
SHA256 f0a4cfd96c85f2d98a3c9ecfadd41c0c139fdb20470c8004f4c112dd3d69e085
SHA512 04c8ab8e62017df63e411a49fb6218c341672f348cb9950b1f0d2b2a48016036f395b4568da70989f038e8e28efea65ddd284dfd490e93b6731d9e3e0e0813cf

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_es-419.dll

MD5 28fefc59008ef0325682a0611f8dba70
SHA1 f528803c731c11d8d92c5660cb4125c26bb75265
SHA256 55a69ce2d6fc4109d16172ba6d9edb59dbadbc8af6746cc71dc4045aa549022d
SHA512 2ec71244303beac7d5ce0905001fe5b0fb996ad1d1c35e63eecd4d9b87751f0633a281554b3f0aa02ee44b8ceaad85a671ef6c34589055797912324e48cc23ed

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_es.dll

MD5 9db7f66f9dc417ebba021bc45af5d34b
SHA1 6815318b05019f521d65f6046cf340ad88e40971
SHA256 e652159a75cbab76217ecbb4340020f277175838b316b32cf71e18d83da4a819
SHA512 943d8fc0d308c5ccd5ab068fc10e799b92465a22841ce700c636e7ae1c12995d99c0a93ab85c1ae27fefce869eabadbeafee0f2f5f010ad3b35fa4f748b54952

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_en-GB.dll

MD5 d749e093f263244d276b6ffcf4ef4b42
SHA1 69f024c769632cdbb019943552bac5281d4cbe05
SHA256 fd90699e7f29b6028a2e8e6f3ae82d26cdc6942bd39c4f07b221d87c5dbbfe1e
SHA512 48d51b006ce0cd903154fa03d17e76591db739c4bfb64243725d21d4aa17db57a852077be00b9a51815d09664d18f9e6ad61d9bc41b3d013ed24aaec8f477ad9

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_el.dll

MD5 ac275b6e825c3bd87d96b52eac36c0f6
SHA1 29e537d81f5d997285b62cd2efea088c3284d18f
SHA256 223d2db0bc2cc82bda04a0a2cd2b7f6cb589e2fa5c0471a2d5eb04d2ffcfcfa0
SHA512 bba581412c4297c4daf245550a2656cdc2923f77158b171e0eacf6e933c174eac84580864813cf6d75d73d1a58e0caf46170aee3cee9d84dc468379252b16679

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_de.dll

MD5 aab01f0d7bdc51b190f27ce58701c1da
SHA1 1a21aabab0875651efd974100a81cda52c462997
SHA256 061a7cdaff9867ddb0bd3de2c0760d6919d8d2ca7c7f889ec2d32265d7e7a75c
SHA512 5edbda45205b61ac48ea6e874411bb1031989001539650de6e424528f72ec8071bd709c037c956450bb0558ee37d026c26fdb966efceb990ed1219f135b09e6e

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_da.dll

MD5 d34380d302b16eab40d5b63cfb4ed0fe
SHA1 1d3047119e353a55dc215666f2b7b69f0ede775b
SHA256 fd98159338d1f3b03814af31440d37d15ab183c1a230e6261fbb90e402f85d5f
SHA512 45ce58f4343755e392037a9c6fc301ad9392e280a72b9d4b6d328866fe26877b2988c39e05c4e7f1d5b046c0864714b897d35285e222fd668f0d71b7b10e6538

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_cs.dll

MD5 16c84ad1222284f40968a851f541d6bb
SHA1 bc26d50e15ccaed6a5fbe801943117269b3b8e6b
SHA256 e0f0026ddcbeafc6c991da6ba7c52927d050f928dba4a7153552efcea893a35b
SHA512 d3018619469ed25d84713bd6b6515c9a27528810765ed41741ac92caf0a3f72345c465a5bda825041df69e1264aada322b62e10c7ed20b3d1bcde82c7e146b7e

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_ca-Es-VALENCIA.dll

MD5 2929e8d496d95739f207b9f59b13f925
SHA1 7c1c574194d9e31ca91e2a21a5c671e5e95c734c
SHA256 2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df
SHA512 ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_ca.dll

MD5 39551d8d284c108a17dc5f74a7084bb5
SHA1 6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884
SHA256 8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07
SHA512 6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_bs.dll

MD5 e338dccaa43962697db9f67e0265a3fc
SHA1 4c6c327efc12d21c4299df7b97bf2c45840e0d83
SHA256 99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04
SHA512 e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_bn-IN.dll

MD5 a94cf5e8b1708a43393263a33e739edd
SHA1 1068868bdc271a52aaae6f749028ed3170b09cce
SHA256 5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c
SHA512 920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_bg.dll

MD5 8375b1b756b2a74a12def575351e6bbd
SHA1 802ec096425dc1cab723d4cf2fd1a868315d3727
SHA256 a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105
SHA512 aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_az.dll

MD5 7937c407ebe21170daf0975779f1aa49
SHA1 4c2a40e76209abd2492dfaaf65ef24de72291346
SHA256 5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9
SHA512 8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_as.dll

MD5 a8d3210e34bf6f63a35590245c16bc1b
SHA1 f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693
SHA256 3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766
SHA512 6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\msedgeupdateres_ar.dll

MD5 570efe7aa117a1f98c7a682f8112cb6d
SHA1 536e7c49e24e9aa068a021a8f258e3e4e69fa64f
SHA256 e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01
SHA512 5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8

C:\Program Files (x86)\Microsoft\Temp\EU8E7F.tmp\MicrosoftEdgeUpdateCore.exe

MD5 c044dcfa4d518df8fc9d4a161d49cece
SHA1 91bd4e933b22c010454fd6d3e3b042ab6e8b2149
SHA256 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2
SHA512 f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

MD5 c7b00471da26c7a3f0c21ead466b91b0
SHA1 8f04614fffea09d7442f3509f3f3daed85de210c
SHA256 56232cabcea923a7df984e44f5026b146754a09929eb048da2b8b38b827a27af
SHA512 26e1bffa48e23fadbf19c1a17266587e43ca02a43edce103a89edf72dce7b072b31db08b9cb135302ecc2fa43b49e6b391b808e5100b98914e37dee030e0fb1a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 98ef87465da293e98669edc32d5cdbce
SHA1 6e7863bbcb4f4cc5f6575f9ea02ee603e58a82b6
SHA256 ae96a92c4a384b94bf6da765eb7c81769192d3e4c56f188edb01e01e6c1ddfc2
SHA512 625220556a1e70c07db2e526455d139feca65abca9cb7cdec7b34f0a96a3b4619a4ddb544126ae60ecc911f60b19f3f4eda3514d8f1e420190556c71121406ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 97517c3b5f83813c9b7ef4458c6820cf
SHA1 c68f84185f0f7968744857bee86af2c5be830364
SHA256 a5c0aeca75122e9c615e5b18f14644d7ec5e492ebdddb8e55374e32b451df045
SHA512 43169c061001f5843a56b0fb5b2cb00819ce1e79955f7c734c35bed06265690ae2bd36935f50b63b25c56014dcf50cbea9069d038ccf82d7ad2b566385222a04

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0b4f48147b44fa5d8381e4602abe7858
SHA1 91d2ff91de252ebbe5f845e3f5fed4d1ecc96bb2
SHA256 b16e3e0dfa63cfa82af1e5e0926ca4535ea0aede5a988a14d02dbb913b0dc30a
SHA512 57d50a1581a439361efb1f1bfb9d615675423ea7fbcf8a0bc9ad54128cd2cc2d8734af6097ad82352a6717ff9d158f2cd04cd080874e062f0745c22adbaeb4ed

memory/4404-945-0x00000000005B0000-0x00000000005E5000-memory.dmp

memory/4404-946-0x00000000730E0000-0x00000000732F0000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0e0d4f63af33fcc5de73adeba9c224f9
SHA1 c32b436e5246e29bc6e4feff68d07b20573bf876
SHA256 75ba00569a8edcc9f3160a89942175c9cb0674d7b3e69f0767053a958321ff58
SHA512 25e110c1ab58ccf138d938cffc80c428b16067fb9be165b8057eb3a0aa65d71ec96ff7f167a89209978a1bce843b29aa7fff3382ab15099732d2c88048a06789

memory/4404-963-0x00000000730E0000-0x00000000732F0000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8d30a1f56547df5931415a6b23a64471
SHA1 6e29e635991c7c17c05fa8b6f2f30fd03df14ac4
SHA256 9ad825c19f9734b217faa1c7a76341d487b77343044cfc346066bd3177e26fce
SHA512 8e4f42cf865168b7cf899247b8e2f781738177a602c5aa0acebe10a5cc4e35974d9b1d299afb65751b7c4746a4e93e71fbd262a6833b04f457791a1fbef3c3cc

C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat

MD5 6a8bd790485aec8506ab4e4a352cee63
SHA1 924b644d3e0c348b2603a24194dfe8fa2daae043
SHA256 ff0d82b2b114da96a1a6a81720d2d8c54bc75425decf8c13177566a9147518be
SHA512 e0b49e2a09523c98812d6b266715cdfaaa68e77ce646f42e9c2230e38b6579b83cd2dd15e2661df5d4ffee08d59354b1d3602aad642cb38375e8a98aa81da32b

C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.81\Installer\setup.exe

MD5 7c44a5cba89f38d967b1f4e11225da0f
SHA1 44837f2ff9b3ebc7c371ee5f9e0cd5dcaad508dd
SHA256 a10c3e0b2ec1286bfe6b3fe9005a9132fad01be9afc4bdd5adb29f174b8fb706
SHA512 25b4cae7fc6d200dab70e94461b7f2e7899813975cab498fb367a32aa2e187fb7b1330545b60f6340d53fe5e04a1ecfb5d6b8bf004ac26ecaa7a8f6e387dfe99

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 dac9e2c87c0640581b98b1cd7f0e4228
SHA1 8e230a53310824e0b5617684c484481293fc0a12
SHA256 ec7a05a0b19b252204c3ff67dfa2be6cac6706989794be1e1767ca8dd6c517ba
SHA512 0fc392029e56d508063761c49b2d84bb84b19b61590a0373a53630d7a8fef6d0611fdfbc534bd26c395636fd8fbd14f28960fc0c4b4f5a819177f6e51f542b2a

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

MD5 b5ad5caaaee00cb8cf445427975ae66c
SHA1 dcde6527290a326e048f9c3a85280d3fa71e1e22
SHA256 b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8
SHA512 92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

MD5 d222b77a61527f2c177b0869e7babc24
SHA1 3f23acb984307a4aeba41ebbb70439c97ad1f268
SHA256 80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747
SHA512 d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fdcba66c2b3eade3db0812f94caa5f92
SHA1 9131fa07bbffaba01b05dce9db414c07589a42ad
SHA256 f6687af65feb788db3fa6c9dda307639182f430f5c52057a5932209a67bee6b4
SHA512 e96015db1d673f138c5964bf3b1f06007f82eb49cf747da6e24365a0ca7b5dc0c93f2442524a7170fa8a6797cc182207d5e0beabb4823d9fe48a849784757ad4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 e95a66b1da03e2ee7b5cb3c1aa2c493d
SHA1 c5c15fbb92f679335bc4bd6c510bcedf34e9f394
SHA256 519011f71fbe190f2dddd292abfcef61a4c3787d81a255877a370f28309a6eb3
SHA512 11cba99a179e5aac05cb5c50a47489d64ed6c1e77e1e8b1b833501b856524d251e82a8cf19ca32a415d3c32dfeae4cf353e4aea1352f5b2f36a44a93786b0639

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 71e73b267c49a00331f8bee02236ca98
SHA1 80fe3411499182eaab105a04cf438c1cc59814e0
SHA256 71f662abfbb47c10e86ff519ed40abecf75db7031a38ce6b81f68bf7eaceebf8
SHA512 39271ec369587f7c3ff9907881715bada7ade9c63d5098f415dd284467c7fbfce11e4146bfda748a532893c0b37d9757a7121d7dd05b62fcbb0f502b17a68d61

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f0502c2d340e024674cf5e034a236318
SHA1 b7775dc650a3cb512c607fe2237853722138f331
SHA256 54919f669b983ffa3f431fb7be9060216405b977f52e70b3e0c02ee8d5b4dbc8
SHA512 6d54adf316bea575e72f86cdee3d4206036dcd208d1d18afffcbb61adeabac0c9c6febd8110ea4c50fd54884c57c16933408a1937e5a3963ea8cf907e614826d

memory/4404-1081-0x00000000005B0000-0x00000000005E5000-memory.dmp

memory/3648-1086-0x00007FFA9E920000-0x00007FFA9E930000-memory.dmp

memory/3648-1094-0x00007FFA9EA90000-0x00007FFA9EAC0000-memory.dmp

memory/3648-1095-0x00007FFA9EB20000-0x00007FFA9EB29000-memory.dmp

memory/3648-1093-0x00007FFA9EA90000-0x00007FFA9EAC0000-memory.dmp

memory/3648-1092-0x00007FFA9EA90000-0x00007FFA9EAC0000-memory.dmp

memory/3648-1105-0x00007FFA9D220000-0x00007FFA9D22C000-memory.dmp

memory/3648-1115-0x00007FFA9C200000-0x00007FFA9C210000-memory.dmp

memory/3648-1114-0x00007FFA9C200000-0x00007FFA9C210000-memory.dmp

memory/3648-1132-0x00007FFA9E860000-0x00007FFA9E869000-memory.dmp

memory/3648-1134-0x00007FFA9C5E0000-0x00007FFA9C5F0000-memory.dmp

memory/3648-1133-0x00007FFA9C5E0000-0x00007FFA9C5F0000-memory.dmp

memory/3648-1131-0x00007FFA9E860000-0x00007FFA9E869000-memory.dmp

memory/3648-1130-0x00007FFA9E860000-0x00007FFA9E869000-memory.dmp

memory/3648-1129-0x00007FFA9E860000-0x00007FFA9E869000-memory.dmp

memory/3648-1128-0x00007FFA9E860000-0x00007FFA9E869000-memory.dmp

memory/3648-1127-0x00007FFA9E840000-0x00007FFA9E850000-memory.dmp

memory/3648-1126-0x00007FFA9E840000-0x00007FFA9E850000-memory.dmp

memory/3648-1125-0x00007FFA9E840000-0x00007FFA9E850000-memory.dmp

memory/3648-1124-0x00007FFA9D060000-0x00007FFA9D06D000-memory.dmp

memory/3648-1123-0x00007FFA9D060000-0x00007FFA9D06D000-memory.dmp

memory/3648-1122-0x00007FFA9D060000-0x00007FFA9D06D000-memory.dmp

memory/3648-1121-0x00007FFA9D060000-0x00007FFA9D06D000-memory.dmp

memory/3648-1120-0x00007FFA9D060000-0x00007FFA9D06D000-memory.dmp

memory/3648-1119-0x00007FFA9D020000-0x00007FFA9D030000-memory.dmp

memory/3648-1118-0x00007FFA9D020000-0x00007FFA9D030000-memory.dmp

memory/3648-1117-0x00007FFA9CFB0000-0x00007FFA9CFC0000-memory.dmp

memory/3648-1116-0x00007FFA9CFB0000-0x00007FFA9CFC0000-memory.dmp

memory/3648-1113-0x00007FFA9C200000-0x00007FFA9C210000-memory.dmp

memory/3648-1112-0x00007FFA9C1E0000-0x00007FFA9C1F0000-memory.dmp

memory/3648-1111-0x00007FFA9C1E0000-0x00007FFA9C1F0000-memory.dmp

memory/3648-1110-0x00007FFA9C1E0000-0x00007FFA9C1F0000-memory.dmp

memory/3648-1109-0x00007FFA9C030000-0x00007FFA9C040000-memory.dmp

memory/3648-1108-0x00007FFA9C030000-0x00007FFA9C040000-memory.dmp

memory/3648-1107-0x00007FFA9BEC0000-0x00007FFA9BED0000-memory.dmp

memory/3648-1106-0x00007FFA9BEC0000-0x00007FFA9BED0000-memory.dmp

memory/3648-1104-0x00007FFA9D130000-0x00007FFA9D150000-memory.dmp

memory/3648-1103-0x00007FFA9D130000-0x00007FFA9D150000-memory.dmp

memory/3648-1102-0x00007FFA9D130000-0x00007FFA9D150000-memory.dmp

memory/3648-1101-0x00007FFA9D130000-0x00007FFA9D150000-memory.dmp

memory/3648-1100-0x00007FFA9D130000-0x00007FFA9D150000-memory.dmp

memory/3648-1099-0x00007FFA9D110000-0x00007FFA9D120000-memory.dmp

memory/3648-1098-0x00007FFA9D110000-0x00007FFA9D120000-memory.dmp

memory/3648-1097-0x00007FFA9D080000-0x00007FFA9D090000-memory.dmp

memory/3648-1096-0x00007FFA9D080000-0x00007FFA9D090000-memory.dmp

memory/3648-1091-0x00007FFA9EA90000-0x00007FFA9EAC0000-memory.dmp

memory/3648-1090-0x00007FFA9EA90000-0x00007FFA9EAC0000-memory.dmp

memory/3648-1089-0x00007FFA9EA40000-0x00007FFA9EA50000-memory.dmp

memory/3648-1088-0x00007FFA9EA40000-0x00007FFA9EA50000-memory.dmp

memory/3648-1087-0x00007FFA9E920000-0x00007FFA9E930000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e

MD5 759ab24cf5846f06c5cdb324ee4887ea
SHA1 41969c5b737bc40bbb54817da755e3aa7d02f3c6
SHA256 7037e6c967c38477a5fcd583c74892e16b7a9066cd60287c7035bf0760d05471
SHA512 3470ae07eb7c54feee1e791e63a365cfb0da42f570a66e6c84faf5db6bf8395173c6cb60e8c5cf28eae409f26ea5433c3c5d6ea32eb07e5997c979c6e3ccf4be

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6a128332dc52a0c1a35f6f4d76459dbd
SHA1 2d33aef05ad9f0e10a35cbd3f74d0c855874e569
SHA256 dac13f1b4ee59e8eb8266332cc2f13c25757d670e402ec1c06dd868613f00612
SHA512 ebc2a357b283ba3a9ecd7d3479e46b8f9d8b005b8571d4a427d8aebd491d9260ac28097d0b3e688bd8c903f1cf88e6dd0b0e2d0db15e892bc22596b17e479a6b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 11a1c087ac07ba985b7896c81bbc4f97
SHA1 da1f37abf064dbd27f9576234e4fffd6f99d3a5f
SHA256 376931f0212663bd849df05c54686547703ccfffde0d864f9c52a5e7a16d4826
SHA512 38c810ad6424f9b6ddd516039e590f8c7bab04dff5267a644fb563fbcea6c00d966550378a1e5e84bd2b10135030454e7545e4010d4a63d63c071c3936fea8d6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030

MD5 87c2b09a983584b04a63f3ff44064d64
SHA1 8796d5ef1ad1196309ef582cecef3ab95db27043
SHA256 d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0
SHA512 df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032

MD5 2280e0e4c8efa0f5fc1c10980425f5cf
SHA1 1d78ccb26fef7f1bf5bf29de100811e1ac8bda23
SHA256 b9225cb1f0df94ebe87b9eb2ad8c63cf664d2dfdb47aeaff785de6c7ce01aa74
SHA512 b759fcbf578947c0290ab703652df9f37abb1f9f5cf6140acaa8c4d4ee655ee0ee1f9bee9d4fd210d9e12585a51358b52e0e9c0878abf2713e6fd69a496ac624

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000033

MD5 e528a1e67535b4ead0a8491b360042ff
SHA1 ceae81778ad2470b4331a25a9af43cf233768cdf
SHA256 4ced27562d2fae83e8916d24184325499ac838d9f58d09c0ea4973e384cf0743
SHA512 dc7f52fbfdeb74b03dbfda97bcf1332a9c38f85b824f8feb027589a136cba7c124381fefeb27f533789c85a00d130caa570e7f85337dc738fab6f9b916cc0745

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000034

MD5 b9295fe93f7bb58d97cc858e302878a9
SHA1 34c6b1246cad4841aa1522cbd41146f9a547e8c5
SHA256 c0233c9b273aae7df532a992e710aaec409455b4b413b89a25854e9fb215c36c
SHA512 4c44ddbd35807653a60e2718dbd2ea85f09d7107b270045bcc2484e2a0ba977fbbb5739236ce7edb71d584c8f68df31fa3bdd03229eeace60c19662469adafc5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt

MD5 a7a2f6dbe4e14a9267f786d0d5e06097
SHA1 5513aebb0bda58551acacbfc338d903316851a7b
SHA256 dd9045ea2f3beaf0282320db70fdf395854071bf212ad747e8765837ec390cbc
SHA512 aa5d81e7ee3a646afec55aee5435dc84fe06d84d3e7e1c45c934f258292c0c4dc2f2853a13d2f2b37a98fe2f1dcc7639eacf51b09e7dcccb2e29c2cbd3ba1835

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe5a0919.TMP

MD5 3b615ca8c77d9530479a4144279c7f45
SHA1 874c877065b5687d77f3bc2dbbadb2d8376a95e7
SHA256 3bbe6feafa4895b9a9056de859b0976cbd4f119d2eeaf925841314f21891c2cb
SHA512 8b2a51ccec85f5c07325c1998cb1916f33c353dbb097aad874a948a84824b9dcbf844f8ff73e80f2ee08fe96af347c7561347c45cc5b88e96ccf864bd6109e71

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 777f5e002224492e88904da965a70199
SHA1 89ce05a31418bec4b5bdd01ffbe5235db0bacc0c
SHA256 5bd6fdb086efe5901829c7d0f6390dd0a48b7d1d0ac900fe0909b0322273757b
SHA512 da7730c6b82d281aebe3df5fbf25497e96ec0dff98992f504e409f1c4418cd80e11bd3dd4e476355abe6e2ff157229eb0651144691cfc210f9709a51961b45ca

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 3c7d2c5b444bf6110a02b7223f5f5cff
SHA1 5313b42c6eaea6ef866fc248ea5b4886aaec2cec
SHA256 45b083336c375048965415aaa8b8dbf93d29ed46fac080a47a5ea09dca7ed2c4
SHA512 677e0f68145c4d4bcff20991d5fbe4a9dc86b8d28d2f4a2ad9fc3185eadce496e5bb068d8e00ffaaad3927c7aaaead0f1b859a879b26d2f623ca12657ef9cd34

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 44dce155edc422d9af94c3b39296b4f6
SHA1 cf19a0c50a408713040defd86d70510b08a3b4f9
SHA256 0a6799680b4d1563e84cf3736d8d83fa382b6c5bc0e7e1260160a90f8fc903ac
SHA512 2a5f683c9cba311b29d955339aefb10a674d00c265ef5b58d3291ea185d54557ea22af2961e76b0bf20a38b0a6822e1d7311288e20567ac22152415339db2b92

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2d97aa0cefb99a3b196d3996ec59058f
SHA1 c377dc72b56107e758388de01f379946c856e2ae
SHA256 8bc2d7aa8e1e9d6788f0f32f2802ed96ced0cd4ea69132ff0eb5f5cb9d270b4b
SHA512 9363f9f31e2340424fca6e82aee3bcd90d90723d01efd0ea6cb8859966f65f9f0a77807fb0fac4f702ad4226983e79e4b34c7ae5475d3d4604433ae50b10b4b5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7931a691a7fb4ccf9b5cb0170be129c0
SHA1 c89e64164d0ec2850951a43f9fc88b60a406af09
SHA256 7951a79e4bf00839c30c71e37dc8afc466926ac2e91f0395a2d54a223c62b565
SHA512 92e2c00aa6263ec7b6e3543e0f9edf34d4209efaa00f26395c59954cd488068c57ae454775e79fc0f0278410ffba6cb43e78355775d04f52339f3bb04ccabfdc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 2b1f5df0701665b3bb1d23069ff44ae2
SHA1 9f05fa4f0c83aebe2f8a2870ba274b673e921123
SHA256 303ed27fb293aec313ad8dcb3a75220c227e502940457527322260d595d78721
SHA512 b2391154b3554c0cab1a0c90bd8f7b60b3cad3656180961d5361eebb0ad0a2b93f826dff0bec2142bb0ceb481dec767ca7f43ebd55bf8be9c45177cc3b7f40d5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000043

MD5 62ab63b0f464e4826a9e17e3bbc493c8
SHA1 da77e250297369d81b64b524b749a6a8505efb94
SHA256 10d59fbe6b85ba9ba5123572b338bbaf25b8db3b6bbfbe7777d668b837b651f0
SHA512 9492789f5323ff4c7f1a3201fb118d8df175a2a68e691da27c8873033b4a795b1b258d6ad3bc1554e42bdd3116c4947e4e423dcef3a672fd9ac9f54a1dab0f26

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000044

MD5 e46bbcea45e37e595a5f88801e351691
SHA1 b1b64547963c8154fa8ee765b1869c0cbf746299
SHA256 25d5f35a2dc5516193ad87207872a1dbedc00e7adfb25aa10dfcd7f5b8f9d68c
SHA512 fa02818ff2b3ddea287a2c32777a1611319d7566a0a0e07ae5961d1cc0bfb96c6a9d6eb82ec20fb90c67a4dbf1b657dc21e0ea3a16efafbb87ed209af864842d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000045

MD5 10497a6582db9930c510c3829f2b031c
SHA1 9f6261697a902ef0f13d1f0167630c8ac3d3e125
SHA256 46abc964e77324cea558dc8546e6074a14167052c891ff4479d16e068fe0015b
SHA512 e7c2c5e06df389cfdf9cad6d4b8b2288b2ac638075c4cee3ed6e311e638b168925658b662e486d15de29c242915e05fd153b7295dbc741a5535622c609fa39a4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000046

MD5 acbb80da268a4c5187c695616dd8c935
SHA1 f4c985d094af4e5bb7390b33ab146a0b2846c34c
SHA256 5a8ed99ce44b23080ba2d650901ab08cc129e671507c7b9a092a72fb35c5ec24
SHA512 80b4749778bba3955ce92124974df30054ba0f383856a89bd4dd305ca4d673021c0ba1413e629f13748d9d1b09854b9aeba92260561fab10a303bc41509333fb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f59bba692105104983b0031aaebc327b
SHA1 b32694fb323d29b07bc0f17dd053a3060e1b6a40
SHA256 83e25a680012fe65eef3933f02c9435bf3e342f1b6dcc09d892542382274b600
SHA512 786e7359871050d491e436b5dfc62f03d0e602450310e78d279c9a512e3acce000b510f514d3efb3f868d25a01b69798950e8addf001969c75aef91bf41823c0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 d837d715701779bb4742016f73c25805
SHA1 06f43baf08e62d41f8909c7739f2e31819751c80
SHA256 ac489d5a26724e7bba66f441a5f49f8fb39e35e2dc7deb7682c3d7a2fd02adb9
SHA512 c6f03b8caeb8a43d11ff19e9ec4eb8507a36523421dcd8d3046342cccad20e39ea235b128bf40a8d031b2c67cac90468eb2b241ff7aeb52b256b27b369507551

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a553182e1a80f95623d10e85ffd4d0d3
SHA1 aa14fe7a1f95238af2d45dda54d05b93b0e813f9
SHA256 6195c874101d4dc829348124c09db010cf113e9b52064132eacf04c797edb148
SHA512 4e2a61d32901b54d529c06a03fca070d7f15416405abd6c3b817cadc002e1f54d7e4f722bdfec7545d5d10ece649099f2328c922fdb9f9a0303e77b92f458786

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 528bf521b45522921a27b6e461db4edb
SHA1 73b13742cafad5befdfbf34d186f3d6984d313d1
SHA256 9de5aef3427028a0bb85139693b4a4200514e02ff0a3eddec694269b04bd3d84
SHA512 77f11c1b7955b637b1ddf9dcba04fff56a93f8d85031b758e5d622e54643492172309b3d6f4fbe0c28370072caccad6901c2c1b7148a7003031b1f86ce25016e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

MD5 1d5f57b36984d3bc13513937212f7c85
SHA1 6962d480bc6216080b90505c9f25c8a3ed4c8df0
SHA256 7c5544c2101aa4a9ab3bd0ed98d6d1126457f802c8073333d2e7fb7be273dc30
SHA512 dcb01342a2eb9ff3ed03a23b7e0914ccb626e1136c2a24dc4e8144cd785c90acdbffc877408a922519055f0a375b4a31172e3120744de656d55dcd83b84a4f4a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

MD5 cfd2fdfedddc08d2932df2d665e36745
SHA1 b3ddd2ea3ff672a4f0babe49ed656b33800e79d0
SHA256 576cff014b4dea0ff3a0c7a4044503b758bceb6a30c2678a1177446f456a4536
SHA512 394c2f25b002b77fd5c12a4872fd669a0ef10c663b2803eb66e2cdaee48ca386e1f76fe552200535c30b05b7f21091a472a50271cd9620131dfb2317276dbe6c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 1bf59fac993359bed622ee1c002ba6d5
SHA1 dddfa2305da81c7193d742e7b71709ec928a57ae
SHA256 4454d57334b8cac5f7c8579f846b746fe8c466198336f4ce343937f24f483609
SHA512 77ef4396b4b0955383486137b4a8dd8b23519c597e136e011d58f1e6dbcca860c14785c9939d353aa0f70516e348d1dc23d2c46912b2e13a9c92b54db1a685cd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 55acc544133708c0eaf1ff029f7fdd0f
SHA1 3f2d66b76ff5ec27cb115fb3970ba8da95c4a1fa
SHA256 e4fcd39ec53ae36df1741d7bfb7ee49674066e31fe1356e31f7c35b03c948753
SHA512 8a1084a8a2871191a4e2c17ad348332bb51898704f495c1ef2720038623c91a8298b73601d19b999120fcbbd457bc65ee856e433f7c967a4b18e25d31f3b55f8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8b2f606e4b47cd947e3c7a821740063f
SHA1 ef7f2443121e0046cc55b0d5ea8bf5f0961313f0
SHA256 4b654d6e4112cb4f577462a0f8847109b522ffc4fefa49886cedc888ce3bbee0
SHA512 10ceb6ba683730c8db3910218916cbc31227c572f27f15c73aff3472d163736380e53136e0de62460eb5334348063301e0a858fdc532ede53b9c877bf6959772

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 fac5cc34f7d61f2fe10141d85ae85ba1
SHA1 226460248d2f18c7ee9c1f3cc94381a5b61a3ed3
SHA256 55971eee9df89616a51d268353effa9cc9e308a4ffc2245c6aa873516c88545d
SHA512 67545526041d70d67cf7882430add351bba861db5858f7880bc15f2f4ad53dfa1b1e1b860b76f89a26eb06c91c7f6c8782a19368cb39f2d61ded82f306ffe87f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt

MD5 e535d374e0dbe400d1c2e14f567d0c6b
SHA1 31c2e50fe2e08aef774436ca511bfd29112cb914
SHA256 898736394305a2c09db9a5548ab8f16b8d37e950722967105cfade2c79939107
SHA512 6fd2ca42849d075b0d400dc18a88a7d38a5a3167a09b88ac9acc7d810e37945113475afeea01c1be0ba611fe30f91856869818a8b60c41405f210bc12da9aeb6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ab4c4be7edc9a1ab87c4ef5e29deafa0
SHA1 d105f11af9b60ccc43fd7c4b6dcefda00b887823
SHA256 ea64ed16102d58b500557d4a3749e6192dbcede62a0155a9e7fc48a4209662ee
SHA512 227d874aff542760bbb4ce1b429b8e673ba324aafd8b7417d0cfe06127cede07fb9aa033a272e418b76443b697044ec0a0111b64ccabca7332da5cb72310362a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 558353102689b3cd64c17006162e4a89
SHA1 d2ef7bfae597aab178bb25150f08a680d523567c
SHA256 feb2ccca75be5ec6a536bdff548c5b0bdab68e49b57ad3f0f27fe685363316d8
SHA512 eb4be8e17787bb2e9f2286291432f4fc55956ccc3e2cbf7657c177c0d20170151d301ee3e9de8a95ecc0c810b81d0b76bac1f2bf257662c2a7b006ef636b4c4c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fd840959ed8b3535_0

MD5 0ab3cfce255a260f3432ff54dd86765a
SHA1 a5f755d93ad4a48ee48b02ffc7eeec57fabfd38b
SHA256 4bc68883d2b664b151914f743744f9cc74f3864d8b035ccc3f79cf444f86848b
SHA512 fe58f6a18ef897611c30aad240b6e00348e1ef7999d115911c3a7b079b92a7aa7c1f61cb40e9818ebd95d5c3d210b4cdcbc6ef5a06c6eeb45d22911ef28a4142

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b61e60ea35140a32_0

MD5 83c4b45de30cad843aa9fcb75556c5a8
SHA1 2fa6bc375ae4bf710546169d37d34a97abb78000
SHA256 89a340400af7dfaaffdb1ca77b4b5dc19dab02071be524060efc7d21f559ab31
SHA512 984ca1ab3888e600b8c1c3c8925c1382684feca0b0a097109e2966d8612c908bffa16890e983e0bbb930dc3f52cc3d26df8600b8765df9e96d5a834bbc5669dd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4065b9ba568d9859_0

MD5 1885deea2d5e2f06d4f9893f11ee47a4
SHA1 3b4c0e90a5bd0fc28b780dfb87a8e87bba25cc38
SHA256 5bbe8d6e8ec1f22c280f1342463abea558e050bd95b0a772c8b866b605305c2a
SHA512 deb23e30aa7e941872dc95830c05c1c28673e4cc0f7540dc9647af120436c3ba9c78f53e24b83aad8207e8ce0fb78f9c43d39e4a75b706ec09c3304074e9cd79

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d0e8caaa10047fd8_0

MD5 912ae8c14610ae10a0f5efe52bf5d0e4
SHA1 61f8144ab8c9882d2c9cd8ad0022ffad802d4e7a
SHA256 ce9bbf362d5dc1dea1feeb83523db131cc4fc708d2af6456cb88b3551667b25c
SHA512 e8b48dfea8906d766c119f4c98ec03fe85850db410f46bdb6559486a2b84ebee97d0ae5677270f7b0f552d25d6c4bff20bfe9c5c9d1e8d2fa3752655849ab8a0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004e

MD5 1af625b5988f4098155457b42c9e7604
SHA1 f101a2737ad079176c92bc2684f8961b074ad710
SHA256 44d44ea3935d534f44d0e33117954cadb08b712269e12e10093755e3d4885014
SHA512 b81654c38578ee6acb3ef12ced4fb5edaeb698add94d68a6745db933582494170ac6a048022eeb2dd734372232673f7ed50102fc8fc3094e3804110b20172d39

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004f

MD5 ca4d58ce5365a119df31bc5d06755b01
SHA1 84dade904e921395db78e36642ebdcc7d0b9d488
SHA256 8beeb926a6e1609b53b9a1b633fd6d1c6717b239a7a4b4412b879bdfd964caa6
SHA512 6e64484310d8cb66bb2e4faf4f4b293f021e413c878d94484a5a860e1f9471d2f4324839c7643b32a1442ca15826984946d42dce8fdaf5123a8c48dd716bdb45

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000052

MD5 fe0cb11576905a924b316b72b715c2e3
SHA1 31a833346d235602a4fc51b49ef9bf57d9d1409f
SHA256 ee9fdfd767036158d8d3bc22f6c3095c5bfa6c17d4611eaacd45a5a829a864b9
SHA512 0227816287e01021bc07b84db89642ed0cc5e1c3a653a8be2c38bc53dcb17cd62b1a45051cf143ba9c2a5880df961d281192547fbb0788d95659ec5169e98ac4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt

MD5 55c5f4336722a424a8c1733b1cc291f7
SHA1 4f784123834813a72305644f6bb9ac0964664aaf
SHA256 b53a00c2df7a88813dacb512f971c44f699b82c94355980269ad92e6c2aea829
SHA512 f5860a9ba09422b1d0d4eb4af58d51d061237c59a0f18eda42b11de5f35492f0882793e8d81a9f69ab139761fd2feacbad10b2dd065cba1b3fe055906e9473f3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d00585b45352939189b26c726a4448e0
SHA1 efdc8b8c00989226b7490a646e42274ae73c46bf
SHA256 60c52cf19f8c6c7204137b2a67986e8cda77e6f3f44bf240bd9e84cb8fcc2615
SHA512 586a98d34e1d8ab699febf67d6b67ff79836b4c4dad0665ccc4dc37d394ca4535711f54868150a2f4719096b091bb7ce66e37ced6acbca39af781f0de3bab695

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c0f573a2398155772c564f32a31380c1
SHA1 8bfa699db31ec5659f1151b1bdfd5ce7d4d68c3a
SHA256 87fd642cc0b8117900855a96e4fb5ad2951151fc06d6db04ed8072417cf18f78
SHA512 2a0a6fd284f37b6b85580d6b3f63a500610c42b8e49f1521a53d7ef8cb8da068cc045e334629b77b9ae441639dff65aad214ead37a9e2b4509ce1936888463ad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_replit.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000cc

MD5 151fb811968eaf8efb840908b89dc9d4
SHA1 7ec811009fd9b0e6d92d12d78b002275f2f1bee1
SHA256 043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed
SHA512 83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 b61311a0e96f9438dd2365ad7ff43c8f
SHA1 ca9638f90011b55b916dcbce1854a88283de095e
SHA256 17170cded4f9167138c0eb0656bf266a3be0e527127be0f699204a51019885ab
SHA512 a45e864f6f094587042867a8b0da6558d6da6162d40e772cd71e435a9461b0db8a004ce7a06122a3dcedf885dd73e5c5008631ce4c0189471991d48d72e47f19

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 780b9c605e1f732ebf687db8e3d5f46a
SHA1 6e24c0f995e3d8f1b2f92fedfbd4c11ff22e57e6
SHA256 78f886e17fb81492c740a7b6dd240c67a7383f9cedafe57e16813e3dd260d821
SHA512 33dfe17b6fe7925da0c1cbba12734cc2f5d212635ab10393c64fded4d5f355796262725d008031fe76777d0efca4cbe4cbe6e81ad281caafae5ea7bd072ff0ad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e59b7e98981b8dfaddc4f7741ec156fe
SHA1 69a8914a55fcb589c89e84e4099d36e99ac8d73d
SHA256 6c6d12207f3c440013aa95b59901b58928360e5318bfbd75161c6e484861df03
SHA512 a89ad28d4f55c32ea0fc0a8a042a391a069dadc8f0b7ebfe616ab56df1355ad5bb2388a89927260a1f3ffa3fb52127bfb8ce1a5f4439359887082737583582fe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 5f5645c0149697d08d9d9f053d078246
SHA1 e858263a283cbbf050509eb28410c75e55862257
SHA256 c6882314ad8fe3db5c635ac7ff7675e4f75b51767f1c2ca092c5d7005986cce5
SHA512 abeb07148df8215097f46af8d0e6c2f5265e94860e26f9d4f64d2fec3b1a0a842ae10c3f6ad0dc25fc119c1bac175462361228d0cf67f4f7590aecfa771e358e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 586773c9744fe9a9555bac4ca5eda365
SHA1 d7c639eef5f9d0c0e2d7261b6dbfc339ca0dc404
SHA256 7acceb65f474ac0358f23f4679f82c4ce4c32514c1637b32ab4afc5feb4a5621
SHA512 703f9bde64f50678c0f25dad1879a3c3d80db0ea0fb0fb5a1994af482b16591e3b46036dc2f4036aed545193ed068611d38d119735967158923c4065c37d9bbb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\c88326c16da025a4095d66138d90a725ead722eb\3abcbdf4-1ce9-4002-9584-6022d0ee68b5\index-dir\the-real-index

MD5 af6e7aa85871bf73977a3888735a38a3
SHA1 e1291db4e9fe0d07ff1161242fcac22f4f5ed380
SHA256 e825532ccb67ff40185322e0253c64bfc863b0731cb90986dd9f18ed131990c3
SHA512 1a35a66aa144095e55153d9d6cc3b57b4eab2166f29cdae84c2c2f96cf0b425fd73100acf72b9678c0b2aa0652624692e6a450303717c22cf3c7445b55aac1e5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\c88326c16da025a4095d66138d90a725ead722eb\3abcbdf4-1ce9-4002-9584-6022d0ee68b5\index-dir\the-real-index~RFe5bc919.TMP

MD5 d1bb192525734b587d7b44a014c7ad38
SHA1 56e38335c10cb16d5f40a2dbde5dd1176da1932e
SHA256 447a20e46ce6f836b65c920287b62191a41e0057d7089f96d80fb77e05128bd3
SHA512 4a08bf7e74e77c7ef0cf838f4eebb65a159e37ab8b74e32bb878ce371fdfe2df934b82f293e1126bd8922830841855fd9879eec81851166d6dbb049ed9404082

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\c88326c16da025a4095d66138d90a725ead722eb\index.txt

MD5 b7272917ca3fa6aee35a9636fe86de7c
SHA1 1af85ebd375fd99409e654a26dc748ced8b82819
SHA256 8fcb9f816daaf613b4b308da07433da333d7d6f540a72b25f2710167ee63127c
SHA512 4cea66a8c2d88681521e7b3973e54bdc50e3bff0adfe260576c99d0bdbdc4c1fb57ebc98ec1964345ea6841d621476582d33ab49eb9bc5abfd9baf574b1f609b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\c88326c16da025a4095d66138d90a725ead722eb\index.txt~RFe5bc948.TMP

MD5 fa669f79a5650eaab8ea9e6a891b253b
SHA1 a24e5ef4e3dcd100653f8ada7fbcefdb6fd42f1c
SHA256 0f277ef69a50e731ad6b8847661d58b4b03526acaeecf00dd219c50ad5ed8294
SHA512 0682738c28a6da73960581a897f82cb947bfe59e86a5ff10e887439001feec2d36771d4202dd64cf48b672dcdc5aa8905c110a14f17c28d7ba671948daab5ef4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 22ca375e05dcdac1a90a0c542186eb25
SHA1 6edc5130b6f34c6af244f4112f63fc12b719dfc6
SHA256 34069aa78ba35f93345b8c96c406d82f2b4c6319f7acf2182232346f5e7431a3
SHA512 a4a93f45f36c35eb017212d0846800ec9a77ac6e068416f7d326e2248b0ed389a8a96930e813f1b905e1a53954498dc1cc6e1cd428cef788f49e81f4f1c2562c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 0c0c78f4c8e87fcb57a19e027cb162ab
SHA1 799cdd0e363682e093384a203221dc6fc6f7d553
SHA256 0761eadc565c3ffef93301fb1a28095fc5bb86d6f14ff97813b9675642ee5de7
SHA512 559367b8930005324208afb30a5e99b7ac20f804ed5de3fb51db4a2a52924653a72d25094c164f0d69309bfa90364290d95245681786129b5e6d5be89f761510

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

MD5 3597f00198ab7087538c2a380da735f8
SHA1 1ebe2c53a5b8c7a32c8ab73f914c4f305f6ba80a
SHA256 4f7f9fd42d734b76b5c07969397d55ef09394dcb4c88fecc2ef9235d7085a669
SHA512 3b6626eaa7bd8c3034f2a6950d31f32870d2e31de6fae1fb860ee6cd7019f6e23d6b9b1a72fce56c0f3b091f4dcbc74474e2221307e982d8f7bad0b61479da2a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 8fa14cd67f44c18b96281d82128f5f50
SHA1 cea2fe3aa818242f1d9e5a845d5eecfdaab34d86
SHA256 c4ee47016ad2168a3c29dc161817eefe9ba96c12926cad5c9dbfabc2a9fdced3
SHA512 b14b5c7c13346d387023a1b1e16fc84f97fe52feb58bd63249db2266b6867b7971f078cff14b7d32e26a17d81b77818fa4330ac622b85843f70954ea26997080

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 b6b5e472ed2b8737717b73eca4ee5978
SHA1 60fb545b25ed467f4eec2bcaa03767582520024f
SHA256 1a8760b653d92f911d727df1354499fe8e62434f7ca03d110e94eb3649e4da91
SHA512 5bdc6eafcb6e29551b25fea53156fd740eec03ed718dc592d915ac156dbfa786a9e17b458ba9031103a5038b8c5e8a308a046923c0c4c35cd1ac74361e541fd7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8b2ffee9f11bbb25d3f3429bb239ce5b
SHA1 299c9f5c8520790d10d1c31bc600977389b2df50
SHA256 6f113602c7a3fdcc12d6ae1309503a9eecacf157bd5e3e5f5f23b698c566c86d
SHA512 22ed92ec7314a35572b3f9bc31a677d57f2e5ad8c65d7b59f9b02fb2fd453dc5124cd9cb37f24bcaface001e09f7fd43429170e4d41e4dc4960361109effc096

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d6adafe55b00e062907ee6bae435c06d
SHA1 9918c5f50cb85b750172f98b107a064872f9381a
SHA256 bf4b2af9be8ee790abb0fa704a22a6c991e90529480593a4221b818469d8b14d
SHA512 a87a96dc686b462bcaf81b674a87f03561747f239a7831df804247c37f7c385c4dd6214229e664bf62aad0636d690e21d28f22ab0e6ea211b7d660319ce89be5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 56a0d9c8d02d7280e94d45e4d364d2a6
SHA1 e4cd61821979a2379c54f047dd0a3673797a4751
SHA256 ad9b0a2bd89ecbc546ba7a14eac8eaea69edcdfdcdc18bddf7bbf07a6ee02b7e
SHA512 9548d26257ff11c85420732ff51aec68733d5b86f2b03f338c1683809fcf1713e9dfe4fec66d5c9c792c8158a21b229f124ccef6faf716095cab0492f3687803

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d0a046a8db0831047682f73038caa64f
SHA1 445e679435bad261b4603c995811661ec944d3ca
SHA256 efc30e727751a24a90541143a757a0495f8ee28ef6722331297121ebacffb1cd
SHA512 99d80532ba3298fafa3da6e00957058de72bb116b12d5e70ad02e7b92827b369666965d019e066b9e3e646f9d772e9f7face71c153cc450958f7e9b60efa8554

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pz5zwzp5.default-release\datareporting\glean\pending_pings\df365b51-4d69-4ae5-aaaa-c79ccfe9a6d9

MD5 6da52a6afde93f465dea7d5ae032a533
SHA1 b4744fa443e13e96de8ca988070d6e58e91e5b25
SHA256 3d36708d89d756099edf33976a86cf16fc0556606046c1accd044fab1e63f75d
SHA512 ea27da928d09ea674086f12d15f3b91a06740c9e9c3c6b08c28dd06c9dc6971cd6bf7ce6cec3771185819f28935608bfd6e1678b6f32ea3c793abcaf621116b5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pz5zwzp5.default-release\datareporting\glean\db\data.safe.tmp

MD5 c6ca09f68099ba0b8b4182acd64cc403
SHA1 0598151aec6d564fb40aeec12af810bee9a77e03
SHA256 38737e4a4225910fee45c3a802002a7f5e6270b065a9e527947fa286ad77c782
SHA512 a25fbd0eb3b87dff0dfe2fed4bb5e52c458d69da5e927ca0f14703d8a68266d1bacebdf3670338069e640f30269a2ea817b5b15b8de41b520cc652d493895a4f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pz5zwzp5.default-release\datareporting\glean\pending_pings\e6de416f-9f6a-48f3-88ca-ef81364671b7

MD5 186bba6547f84e5e90050312291f23c2
SHA1 eab2af444e6cd31e454495eec155dd136149beb5
SHA256 8b4d92d71e8db9d04a994bee1a39ce9d22f5b937367ec831299775b271df053b
SHA512 b71ce563cc3eec32d175bafd59ed1cadc5dea8f9961db9415059776000811bda2776571cb81ee02d4aa840634320bee45718099ea790ebaf7ea095848239a4bd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pz5zwzp5.default-release\datareporting\glean\db\data.safe.tmp

MD5 c7aaf168d6780966747a3b46c13f292c
SHA1 415d80b983ba96f587064ab0a970b821918b065e
SHA256 bb1c5b0d5fc52ca142097685a242016f67e8693d3ebfa7be3e0ced61bbe3e7d7
SHA512 43ae4eba27cec34a21405b62df9cc8eab24846f1dc7906f21a4639857fb1d5f0d978d6546a38cf9d2865c52921afc4497191292641edc051a0185433247eff1f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pz5zwzp5.default-release\prefs.js

MD5 0bfeaf39ae0794471a255bf5301546c9
SHA1 7bdcf26cf0c211e4bb731e177f59e75da68e407a
SHA256 928d0ba46f23791bdc8409a00bf31c27fce97ed29d8b2a1294e10d9ea85e41a9
SHA512 3505d52b7cf188044116d5f781edf575c0e8bd359e08b2f20e807c1a68b0b40547fdf58a1a1af3c2b088cbb1e0997b26eaafaf05804d3440823c69fecf0cfaff

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pz5zwzp5.default-release\prefs-1.js

MD5 0df7419c256dd97655e9b5f184e22162
SHA1 858a6ff731353bfb4b8eae2699b9d6fb9188ec2a
SHA256 2ba92d0e13d200a09e3d5d83f6becc017aa8527130ebe6ea42bc9a8867b80023
SHA512 52b820c78a1dd897a4a666cf9ded78e727126bed0d702f9d5366db973d0b91772787a14891092d9b6f8e0827a5c3548074bad320f964c4e1b1c6fca2f221ce1b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2819ab08272556dbfde24e1d443d1a92
SHA1 541f3470ee606a71814d728ef17ac089d872e21d
SHA256 c2b012146f329f80d4ffd822db6ecf2606b3a99233c106f68a5697f2caf16ee8
SHA512 5b3b2a0f6e9ae43033b18aa0b2682cfa0a408bf765a8f93fd5eb243db4b3ff1169995d5d85ae9f55a900583f24f9a13266f022fd945683535f2ad84e7a398df0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 b1ebce70612007df1ad622d9884410b6
SHA1 4f75b7190eb7b8126a7e9a661161ad2c53fab364
SHA256 9f1f8ec5e1cd71535456a55ad0355f4174fe6f2b1448c49ddb2f813f7ddac6e8
SHA512 44ce3f591acc2a32bf14a728256e283e0b822c1c23f4c030d3ed4a6a4a9ebc08fb34aee727fe93c3a7b504d78726c78134bd10c1099f5a3e6007e64dd7267f94

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ee3b25d1f6d02ec0be6f889fd8f6cc79
SHA1 6fddd338fd7347f6244ad28e8fd82c1302b4c4ca
SHA256 020c509f5ef9fdd2400523d7a4040c9e7dc6d87dce7b67857fca47b9930bdfaa
SHA512 7058689e0b01fe27ab593d2a186f7679f55830ed826c0bc3614775260158c3f7fdc5c2d8f4ad969bd65140dcdf11d759cf3dfb65093931b024ca74767690cfa1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 eebad158ef1bc8e9c3469c8da5df46fc
SHA1 8b84bb192bfa7976ad12600d8c6b351a42da9916
SHA256 f5ff6794a0db9ac369deeb950200e3a502d06a6ac6ec82cd56501ff014836965
SHA512 0f2e1180a5947db6dfbd99651a10ef992bb4f77bb4114b2183b670c309a2a72a71fb767797fc0d01555e771d4a8b61a01709fc8b43b0985a6b3a06d9e778edd1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 450e034790035569f6f5b84b9fdf04c9
SHA1 0527bd43237634a3d9dac36a5385315243b4b425
SHA256 1fd0f78ab2cb15d846887b8861fe19db93a294f02a670b5aa2191e68610b1fa0
SHA512 5e51991b51dbc756f41f830694afe3bd80319eb492c945c4b2723414bb4e8d80cb68c10f8a622bf5bf263e95a727079820f1e850d11049a07c2979e5d8241f33

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}\1.3.187.41\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe

MD5 a9ad77a4111f44c157a1a37bb29fd2b9
SHA1 f1348bcbc950532ac2b48b18acd91533f3ac0be2
SHA256 200a59abdeb32cc4d2cec4079be205f18b5f45bae42acb7940151f9780569889
SHA512 68f58a15ef5ba5d49d8476bee4a488e9a721f703a645ddd29148915d555ca2eb451635c3b762e5a0f786d69bb5cba9bffac3eeee196f1ec7ad669e2d729fe898

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 083e72279aec9af2fbadd737f789d57f
SHA1 fdb407e99f78113b0ee19025357373a53a8a5193
SHA256 47f9c03d5ef502bd1659b210897271a06710dbdf69099325b2299cb9829fcbc1
SHA512 898a31838b9d8f1d6c440043c6fec5502b884853a985f09ffd37ad6cfdfcd0d82d1a4385846840810c97f47c095d634f3035ed50b3d95ce6e989aa87cd7973b9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c6e950a989a34f5698cc39b677744d5c
SHA1 b000dc9bd1d3500a35334739a47819c4b544b989
SHA256 c1de94d01ad1b04f28e4aee462d72d21678c036625456961ec92d58553476cfb
SHA512 773b5a9b969bb34df46fc2915fe1f1eaac0d8e037e8fa444dfc356c427eb9d97d6591f119c9eec47b375a551d3c2f5438e077e6ed2cce074c748d9a6cee8e211

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt

MD5 7a45317e0cf75046482f4cb110a9caca
SHA1 08b4bdfca53c187096df7b79c773c67d30e424aa
SHA256 5a02c0092ca4a2274224f540f582c83b5f226909c9d99ebae12c56462daeb22e
SHA512 5d6e9a863f7a3e80998e25fe425867a4099dac7425e5c3566481b2cd9beea2646207f7988882109285f64ba558aeb6abd3a2a80088e6599fadaa9d45f6e965ab

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\c32a61cf-a612-4be7-80b5-87c7a16fb5fb\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3bd7c6a6e01424a83cd4dd1b1d3a4c0b
SHA1 c124f72cc71962947f16ff68d136730ab73ccd61
SHA256 233a181cf60354a0732480226aa88247fc5d65c12e8925bb565864bf0e25efd9
SHA512 5b968029be41bd328187c90c17f6f4edba23176ed3a6a830923cffb898b03d08475f95d859e0ff6eb4ad4008778bb8e1b7f3d13c16304236bab86ed3cad155d9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 60f1b12f29dcd868b51b14fb854bed5d
SHA1 ad35cbee01719a371237a9d60c5174fb216fec97
SHA256 ff3ecd31f8d92a698ef9a55ee2b50118b0c06899246b239d9676d62b7893651e
SHA512 738ea652f2c735d34736b952bcd3773cde6682629ea59e60eb7254e2431bdde97415735c0e0b74a1c022ce819427a4540b8c2e26fd7a5e039a1415193dbdbd51

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\66400706-ac6e-4b44-806f-031e39cb01a8.tmp

MD5 6ce51c877a6b21fcbd4ab527bd999281
SHA1 d1293e2c837cfec0d5dc4cf43ef5a0220a754320
SHA256 ef450235ccd4471c1380c1915ae11290b14f3db5945db679063d4ff42e3e17fd
SHA512 6386fbee3aa9f2c8a7ff7dda07aab66e08a4774b4160e826d197f58d5d87cc2f8a3e31e2ec177d655267f52d19340cdfa30df9392305de9494f64f48ad90f918

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000f4

MD5 a91c8acf084daefe905c538075d9e3ff
SHA1 398a0d67e3e87fb1f01a644a5b9820ab5d5d69b6
SHA256 9901aba2e46fcf181f9b641590df7bba839243151e8747c1e6798703798bf4af
SHA512 2c0aaa2bd478af9cd3424bb483260dfe174f1c02ee1638565c6dfe43f7181e12e0788dfcd19316c6a884dbb02144ffb35fb886caedcf29f8a2c65ba70079fc0e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000109

MD5 db84724258a81c77c5ee48b9d4747f8a
SHA1 7a9311c9bea7c9ac8da7616a7efb24f13dfc14c8
SHA256 1b755f7e15af74bd819055d90bbcb1cbcf72b09bdf32860c6679e77054e0ba69
SHA512 e3c596b33e0cbfd887818ad37b79bf3c2c7e19a7f51e63ed20cde3522cbd0bb2ca18466d2d01e32c8425b0018de90e61d3275188b8e9a310a5f74abadc055db4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d3

MD5 67e30bbc30fa4e58ef6c33781b4e835c
SHA1 18125beb2b3f1a747f39ed999ff0edd5a52980ee
SHA256 1572e2beb45d2de9d63a7e7fe03c307d175b2b232bad2e763623dceb747729ba
SHA512 271d4a65d25b0a5d2ff2fe8f3925fc165d9b4345893abfd919061d78ffc5ffe8890ded35e41274ad8b860f06264b027cfea6030ec9411a4e03bc6d7cb4d4d228

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d5

MD5 efbe7b6d187dea0d7f803276c6bcf37c
SHA1 de5905dea9fdb2ba98cace82fe80eaf4385f233f
SHA256 a04d2b858190dccad1f3bf431b96d150a10a87d0e436249347f9ebe8721a85a9
SHA512 3f627e3b4b59fc9b2f8a787b2095e71c0fbfbc43c61c60b19eae084186bef531b05043d65a47d60daf60bcf805078870335585df388eb631bb6d983fdafdaf0c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d8

MD5 7897c7a5002fadf2a9923ff3d4ac6647
SHA1 ab8544a66b1ff1093a6824bc344591c9ddc6e2fd
SHA256 0057596d22e200d7ca89ae9d591e51fa54adff2749ffb6f19091a2b033cdb35d
SHA512 6ac86060990a9c007db1697a70cebdc4a2ef19e05187972d96a1f3a9652ceb3d4fe4cf494034423ca943a18a4d72cbac6fb4c6d5fa4aaeba1a013278eef4e207

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d7

MD5 34e89c956182d17333c955c0c99f450b
SHA1 fbf3f070180472e021f02fb68b1875dba293ef0f
SHA256 571ef87b9fa22e7a4376eda16e8fa0064c4a2d4049f2670456234caa68b7f1a7
SHA512 437566fdd47996540f941d2f0bcdeb57e25b670aea9ed615a889156f18c7e600a122f78623382c5065a3ec50eda0e6c6b3f8117764696fef17dd2b12c4145cef

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d4

MD5 e7789186ec22ea8caf2d9978b893baea
SHA1 ed0f94668dd8e43e8bc4f3c2e50654ec3029255b
SHA256 4ff5155985f6257327889a66f2974aba80fa396dd9d6245bf5cc92fe48343eaa
SHA512 d1c798badfa37be51ad621d7b2b34bffc041dbbeb38631f00765310689fca14e1a37831b209ac7332d537d4ce8893ec02ea2990de255400d843f4402564ef93d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000da

MD5 7651b1187bb58ac4c7be625337b35e5b
SHA1 307d969ef4137a66fe2793737dc1c546587c7f43
SHA256 0632850d01a46bc2f8c223155a4bf6c398b33596bb711e098440623f118c3968
SHA512 a81d2f768af155bdc642941404e7ddf95a2cea33c9374acb5fe32f6f5266e337fbef32f904551f61fcc9f9ab5a1c6a5ad130ab85b38bc2258e2f82c0ca1e9c7a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000db

MD5 57b5c2ad91fd2ed1ce6ea84d1a1e0142
SHA1 040e55652ca4c980a5c01102399ff50094a2f7e4
SHA256 91ba84a987c7716456cd6cd7436367a7c09330deeeb693b9666a3e664757a3b3
SHA512 1ca8b7402fb04d2cf35d71056cae63f46be40b8f298a2b727bfbe3121e9d5e27f52f2d8b0686925c073f049334f358cc37d61c4243b1ce616cc1fbea39718340

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e1

MD5 0df9077c628100feec3883bd3f1c4a95
SHA1 259b8b5a4d4c471fd5b9cf90949b55be108754c3
SHA256 3a86a2872cd807dbcada78c622348beb60d1d09edf6dd13010216cfe9c81b1a5
SHA512 4acf630bd5d70d8821d2bfdeb5e034852646692c8702254ffdf1eeede454caf090a5a6c49536af09cd23a0dbc0322d823a6784567e24f3bb91ecedfb942a55a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e4

MD5 14f33848af4c37ec317aa817da7fe26e
SHA1 51cb5bf9dbcff596ac23b33fe727dd1946cd6326
SHA256 40798de8c899cc5261a00a82e750c830892e5ae438f6b8528d0c78d654fcbac6
SHA512 fb3135384d0e1bb7674d33cf90e50065b6cf139dc9a7624a1d9746361484b32e2d5dc3c1900726860d8d5cf7d7b14f555e7a832e43472a2a03385ba866a5c5a4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e3

MD5 5a190bcc391d75eab7b0a13f0713a1a4
SHA1 6ada28dadc5c26ddc0048380142a6cabc243590e
SHA256 ec2d793f888758cfb084d56f4db0a97d62fd5ea85131465e1664802479b3ec75
SHA512 9cf38ed1c1ca382f4896c40126bc5e3bb9e9041a4b55e5de41d6bcf17f073379ba2476c6db4a90f8118028ee029804ae59ff0b622e1a44892547c188b362c364

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e0

MD5 be1b1da91c160c38b423ef2406da6a86
SHA1 1242600ef264a5067461348b339208d8d9c3bd9a
SHA256 29e6f055c969ef9a936aea6cdabdeae6c0776511901f6164c31c7b10e8a1679f
SHA512 44f1c088b95888b0f07bfcf795ccb02695f23ebd9f83ef6d184359cb8b89b6a038cbcc192121a35272e3ba9d21df8145f47b3e4b9ad06b16870275f1d462546a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e2

MD5 94c7c664be3ef90e0f060e6234c98412
SHA1 e2af079235dd7aae2823cbb839a986dd2e84c576
SHA256 6472ebab720451e4d970413505fded8647956c49864e872d324e081da573c495
SHA512 b78e527951c4242b3fb738bd8c40db0f166ffc64da255bb8e8f488872d529568b1ec9badad8e9716cc5ca6d54101e9d74b9b4246efe747944238ea4ac3a7f922

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e6

MD5 b7a2ad9645afa7b6047557956d9540e2
SHA1 afe9d2f2c53149890784506e97057536dc39bd8f
SHA256 127539d026f851bef3cb66520c714050802898d52a93504114b74da81e197454
SHA512 612416421dffab66c38e80bb3b26884384e5029f906f1d7ef8b3f9a38948b52dc3c0e31dcd9a704f76416c8b8119addc1783d0bb229b229dcf539f0361c05a52

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e7

MD5 40c230055765ba2a815d9b48515fa21c
SHA1 2208585977c5c953328514d2357019eca4b477ac
SHA256 33f9c037b2346984eb800e95409562c96d04f2993c01963bccbd86c80fc1fbca
SHA512 9aa9465b71f306059a82bcd863895d5a884a081081c71225172316b34afc47764154f381a7096e6b55c4252c9fed8d89b99b285263622f6fe4da6d5dd86ec600

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ea

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e9

MD5 46e6043b3a70e5986f0b72a748d9e3e2
SHA1 5d3ac460401a49fb84286e0f8b9edf6167530fa6
SHA256 171b12a8c0900d5f0d9e700eb668c02f167ad6f7adce4b9c36201ee10aeae005
SHA512 c0f875ed0d9e05a7439ac9d160edf59ed3b1b384b87dca5b75de3ba11a47a94d543f108ee60aaf421c965c0635408003535795e0f6601afdef4010d982724385

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00010d

MD5 89a19568b9ee3b98fceaacccbe5f55e6
SHA1 fa44dc663fe19422e5a407e476698de2c42c1876
SHA256 5f5ab0134afb58751d51f0eb35fe8bf3142f5b8399371eafd9af9593e72ee8ad
SHA512 cf6ef64b480a2f59073ef77abdfb01611f59d5cc1717460eacfd6b488b732f91cbdcb6bd549b6f556960f5452c227defadc0b48ab37a69d4f29f9d15820938e4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d1eed51fd30a293c_0

MD5 08fa9b0f5f9c33ba7ea757064321cd09
SHA1 17b2e3b88b9107d56b88e073747fc8366238ac8a
SHA256 23eec7cb3967be1a8da2db6bd71cd9226e6a597731166274cc91fdaa87fa2eac
SHA512 e71c14471911363f714cdaf732a19ad948c2773330e94fe0c47f95e3691a5c2cf06a1489eacfa38cf05e8d281d11eee9ae1595c98c2229cee1d1911543120bcc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8f6e097e1c9e58f8_0

MD5 6eeaaf04ca15afa269fdef950b2ba3d7
SHA1 27ffa60545281c376355d31cf504c1dc626f5f5d
SHA256 298eb4475534f4d976d9594c7c12527eece1ee00a20b2704c171ea3547dcbdda
SHA512 d16fecffd2b73f30530fd22d1df23bbd20fbbd75bba877813308340e287c5695621a6842e10e89bc62c28306a24f31ace9a91aabeb840699b7acf4639b1e3ca4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000134

MD5 1b7ac631e480d5308443e58ad1392c3d
SHA1 95f148383063ad9a5dff765373a78ce219d94cd7
SHA256 7fb66071ac6c7cfff583072c47bc255706222c2a4672c75400893f4993c31738
SHA512 15134314dfd36247db86f9b3d4dcb637e162f8fd87c0ce73492ffdb73a87492fc80330655617f165dd969812ed2ebcc42503f632d757bb89ba9116137882119d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 3b8b63b0c9a7974a95a5df2b199f440b
SHA1 bcf01ba371daefa0cdb05273b004042a2f352284
SHA256 99aa63815b9186fdd6bbd2f0fa55af6de90c1bb702898db41ce43f3a409b0091
SHA512 6e78efca016ff0e120edf560bf4f48190750cbd4297026d5fbca70781fd82e4caec64c261bb2ff0589554ab67184c0879f8c920efee114091f7b84ef4cb8f1cf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ad65f8cc700f771e_0

MD5 9dd045be9e23d728d5068475ebb3739e
SHA1 ff2b25e995fd4353bbd5606831c0f6a92ad72f5c
SHA256 67c0d3a00c7f40c3f3703a5684238ddfa252939b9534cda4be15c3728a1b4634
SHA512 4ece7e35fab8cb324ecbd908d1db3be70e40e990f3140d09716ecb44fb2aba0c56c9bca83a08220d528fc77f1fa1eeae267a451938dcad8ae24d09e5473a6787

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000156

MD5 ce1093c800c0933d7c9674eda75790d8
SHA1 371c2dcde092f51b18852e2617bc6c0c176f5873
SHA256 57781a723db9a2483067bcbc89d1f30f7e2f22ae2d18aab1e45ad894d8cdab89
SHA512 fdbb31c607cc9a4bd75c42cbc552fb40d82e53804d156244ed2daa124c75e1680b908589f7a3ad8888b9b03ebfd1f4b3e83e19f84e3a746cf210d0b8a1678533

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00015b

MD5 05e9679509b61424a07cc4d4efb7247f
SHA1 db4fcfac1d89c7e4f0bdbea9023034b64a9dbd81
SHA256 31798b2630a882be758010dfa51b12026c8fd81f0e4068b38fd739cac78cba0b
SHA512 1cbe7343e19b41f3f116a93d598d7b67779d29c6bc0a7b086d112dfcc76fee60811290b67b5d2561751700be483f6cd460b9b4c8325397813314ba064e4c2208

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f0e1c14ebc48a3a3d50d964b7ba81833
SHA1 34615580e9c83d1180a74ef56ea045cee18b9b21
SHA256 d4af359ce1655a7e7da1485aa590ca5eefb985b1c172c39fc14f634a2c3eebd2
SHA512 c6f304c649a5b29c1fb7c7ee3862ac6e4f371e3115abed079ea6546f4729931a3a46066f1f97fc060aa5b5b3b8e25d6947347156edc2bf20e103a6a94f168cd2

C:\Users\Admin\Downloads\2cceabb9-8226-4c22-9d78-4d5a510a18a2.tmp

MD5 86fca06e090f8017dd323ccc516a7ed9
SHA1 720fd4f4d0ac09308d19d229c8fbfde71313ce7d
SHA256 5516ce5826c34dc1d89b1373f09a5eb490cf1dab55f98da02bdc53a73b772874
SHA512 05f6ea47c48a2da3304a2d14a741403200ccf47e1f1b7155a2eba3fe694e4f42b8a327010fbc20b720ba06e4f84ee96b39d885989ae7cd20cc459261cd02b34b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 cbdac96e5c63cdb7bd70f638bdfea372
SHA1 a6904ffd80db3f5f786ea91f5137d4702d0ba401
SHA256 49e60ebc9623923f3ec83ebcad3060c5dd57404bd4faafc237686362da1cf830
SHA512 d24bbe02d3a5091fd4925adcb4e9c0a53d1219005bb9b52df0cb54535f13d8eec88d94d7a319497b94881095f233846e78c57bdd46dce8095cad17d26c664c99

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c3243519f0f689b2449a7d1167ad2a1f
SHA1 c2522dd486e2f5532a5f485c3d91a6829257b753
SHA256 8b6a03ea9aee1c66a2a17166c1baaf72145e38c74be7382a8ddee4d9f3f7e8d3
SHA512 dba1e2283fa3683999e21a4eda0ab18e765fa523dedb7e87b4665236be6f5dc1e930f12a1d147070e5ef3c3e17d3eaf7ee438dce49e92841d999bd95a955bb83

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00016e

MD5 9a23e02c51224896115a872ee5f62800
SHA1 447ac79a43947ca2519a6a9e4d63333c81156c06
SHA256 f6acbc67934394aa13122f6cb281e96a0765dca464725108b63b046da126831b
SHA512 9d1e4546a4ced1959212bd1c0f0f8f8a09e6d69b85db5d9cd0172c614745c46143b269ac9a47253fadccfd5834f2db03d35398db16419607b4e749fbd8938321

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 41f737181090680373d7a7923ba89539
SHA1 f76a4618ace60ebdf8cc04487395100a23307e76
SHA256 9fd55f84a97b37b267086a3d9b94c5fc8e6a587a4ffd975983f93a7984531b45
SHA512 8306da1ce795dd6ddf319840d6d00623caf77980a85429fdc555939ed0558fe9528c04aacb3fd2cfa0304e4bab8597155f81190e1cba8d34fb38aa17abd9a31d

C:\Users\Admin\AppData\Local\Temp\Setup\ds.dll

MD5 d9cb0b4a66458d85470ccf9b3575c0e7
SHA1 1572092be5489725cffbabe2f59eba094ee1d8a1
SHA256 6ab3fdc4038a86124e6d698620acba3abf9e854702490e245c840c096ee41d05
SHA512 94937e77da89181903a260eac5120e8db165f2a3493086523bc5abbe87c4a9da39af3ba1874e3407c52df6ffda29e4947062ba6abe9f05b85c42379c4be2e5e6

memory/5140-5023-0x0000000005860000-0x0000000005876000-memory.dmp

memory/5140-5024-0x00000000735B0000-0x00000000735C6000-memory.dmp

memory/5140-5026-0x0000000008100000-0x00000000086A6000-memory.dmp

memory/5140-5027-0x0000000007D30000-0x0000000007DC2000-memory.dmp

memory/5140-5028-0x00000000091D0000-0x0000000009214000-memory.dmp

memory/5140-5029-0x00000000092B0000-0x000000000934C000-memory.dmp

memory/5140-5030-0x0000000009350000-0x00000000093B6000-memory.dmp

memory/5140-5034-0x00000000098F0000-0x0000000009E1C000-memory.dmp

memory/5140-5035-0x0000000009860000-0x000000000986A000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 73be30af367c41df2de515c04f07f533
SHA1 a2ff4222f2d7c495a9370d20a78f706f78de48cb
SHA256 25bb5c25b3c81b15a9d7972c792c0c64f3e17d68e86dd0c506e384b10ac41207
SHA512 2462c26e5f3b2215c27a5dda07ab4afa7dc551fbbfa639488b3c06c0bad09d8a264dbcbeb82c3fb8334b42af7693da3a36c63b71e4ec907cf3ba989434e4cdf0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a4b54d1d4d2ac6f4c49de04e0bfe950d
SHA1 1eebb0e3ab0b4443faa07d86de7f991fe08e2821
SHA256 6398f5e7747be89a427385e7ffbe4371598139efa692bf0d438e33dbeb8f08b2
SHA512 1a206c8b62e4ca109fbc514bc652698f327612699a4556bfa24ab2a4aa038f710bb8675ce4dfc9b8aafad1d528073932efa1de55503d6b88cde75655b6f6e54f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 70af626f13151a88d4152421e65516ef
SHA1 70ab7ec70056e5b6624f6afb8ec496d27e3c80d7
SHA256 36ad91096d0dca0847338c0189771bb88048b54111379d5f4a42b5949341a109
SHA512 d588e48d0410c22adf9353a3d26dfb565fc343e2a7336b3c129da1cf25d0b87de045525eb5ecae295ba9024212994d5f62c75e629ed6bd4d77e44dd071bffab2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0814047b2bd8cedff25547caa9578988
SHA1 f6277c5b714d31cb47488ef4747e8ece9bdc9a6b
SHA256 09485a5abe074b23ca1f9d913e7480b92237fe2dfd54f7131323228f40339683
SHA512 e807a95ef77c360b0cab13962f3d9e20571d33821dd2a9963627ce5b5eb8a79f7f3e846f037719786f969f1b6da1f5579991305f64e2f330f576662b31526e07

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 2cb26e2872ea75e32148e0f249090893
SHA1 5bd965aa0ab996d318a3c9a43583182e05c5567c
SHA256 cb70677177b8b8a8f4a42de2b80fd86d6a25a9fe074a20bc33ed9eb71c2fe4a9
SHA512 5a2127049327e3f7093fafc712cb73c2861e0e41f881c3a3e39763e21a0383bdb054e2f3219905469c212e953370cad1fd06579238d543cce7a3630c822ca433

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 265f4a52f8577e691e8e7cb13dfb632c
SHA1 bf92ea4b6a1fbe503c58b247a61a1d6fde6525fa
SHA256 ea8a73934256b23c0a3e39f98c78cebf091640d7166543c818bb714882790b17
SHA512 04c245af6ce518ad0aadbaddac4d7067333afec34372fc434f454103db1ef5b8267e28c4391f54342339a1cae534be78a67cd80cf646ce1e5c52310a599fe50d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ff6595659605d7a3890c3bd7e9a303ba
SHA1 15f7137b7029b8939cec74dd88048ec341c099c2
SHA256 69afcd23485b94a3f535049d8d55bacc96ad039299964ad8ff9a4e4b1ea9bf45
SHA512 a86ad57fd03022b2cc059e8ff65721a5ba6b482eadbe5ed11bf8435495c80c09657cad43e9983e39f92553df0427ed58b3a70d13fec26d7229e129eb9bf4aeed

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 11c99af4195e026ada0bbe12950999a5
SHA1 41ea1789e0736ed90242b571b7e3a70c0f36dde0
SHA256 93181623eccce8bfb795705a614ccc5d1fad159cde9220d38b1c7b988747c26c
SHA512 9d5faa027ebcbc0c830a41a8ef9d856b83d2b4bc7f62c453348e76e4230eb15922f087e55723e6ebd88cb0e61f685bf7ca097e043e1fa0b6a59e01510a1c67d9

memory/2480-5168-0x000002593F300000-0x000002593F308000-memory.dmp

memory/2480-5169-0x0000025959CE0000-0x000002595A208000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\uqazjnuz.exe

MD5 8054a9b04e14969605ca3386ce13f809
SHA1 8cef9872df4cab1544e8414fb6567d79641d70d2
SHA256 5f1c96fe058662e2dbebb05134b6dad9245a7e105cacbdc6fe1d7a54b1a0e680
SHA512 a34f0c6a79ec63fb94e4f1edd1370b829c290fd22013c8cbd0ca2b42892e6a373fcb34a5862fdeccee51f4f41ee919635549b3dbfca440922f341f798101de55

memory/7456-5321-0x000001C61DE30000-0x000001C61DF40000-memory.dmp

memory/7456-5324-0x000001C6383E0000-0x000001C638422000-memory.dmp

memory/7456-5327-0x000001C638390000-0x000001C6383C0000-memory.dmp

memory/7456-5364-0x000001C638430000-0x000001C63846A000-memory.dmp

memory/7456-5367-0x000001C638470000-0x000001C63849A000-memory.dmp

C:\Program Files\ReasonLabs\EPP\Uninstall.exe

MD5 8157d03d4cd74d7df9f49555a04f4272
SHA1 eae3dad1a3794c884fae0d92b101f55393153f4e
SHA256 cdf775b4d83864b071dbcfeed6d5da930a9f065919d195bb801b6ffaf9645b74
SHA512 64a764068810a49a8d3191bc534cd6d7031e636ae306d2204af478b35d102012d8c7e502ed31af88280689012dc8e6afd3f7b2a1fe1e25da6142388713b67fa7

memory/7456-5383-0x000001C638990000-0x000001C6389E8000-memory.dmp

C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe

MD5 cc7167823d2d6d25e121fc437ae6a596
SHA1 559c334cd3986879947653b7b37e139e0c3c6262
SHA256 6138d9ea038014b293dac1c8fde8c0d051c0435c72cd6e7df08b2f095b27d916
SHA512 d4945c528e4687af03b40c27f29b3cbf1a8d1daf0ee7de10cd0cb19288b7bc47fae979e1462b3fa03692bf67da51ab6fa562eb0e30b73e55828f3735bbfffa48

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 eef0bd0ed4655371cc767c0dbcbd21d6
SHA1 7cfc95e5526f4b9f65a849a1c4774caf981d73e3
SHA256 c9e90a380fd7989ab5d9b83aa0847ba1cb4014c7c66a4322c64bfb8a783408ce
SHA512 0d45821370ce92f208ffb8e9de218841eee4cdd7b68934f3f50ebbe803da03485206373ae5dae42d1c41a2a93795419533bf579c03ded166f67f60a0e7879281

C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\installer.exe

MD5 8d6d7d2b4b15a56c187288485d57f2a3
SHA1 06980d9bb48deb03fcc34734d45a12a7e73a174e
SHA256 eeed21499b9903b7d8d09392db96475c432ada134afc8ac68099bcf4238dae05
SHA512 e6c3a2d2e956ff8cba77b824e1e9daeb25bce8350c85bd26f5184d5ce9d08e0c76bbdb3772e671a87eb50daeaa45966064cce09374bd6b68985bac90dfefd41a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 816401669d3a563ecca32d08e3457535
SHA1 3d7c3a8f89d3a53e5ffd0c1403ddd54894bfeb16
SHA256 7215829ac0ecf2b81b4306fa14a7e9ccbe4b9ff98871f3ec78028691220a2618
SHA512 3b7d289e97a05d54b0ee4ed40e9ddea489faddc73bee1bd6dfa398203a9c9cce517cb4723137c0658c4f34a421bef7009f5be05915aa447a51e728dc69583ac6

C:\Program Files\McAfee\WebAdvisor\Analytics\dataConfig.cab

MD5 582cb55f1d5488c19de8a02e5c22e1b1
SHA1 107898c4b33c797fbdeaccf0d4c73c18e30fe81a
SHA256 7740054020dd617171342f29863839b1ab9e7666ea5e5467039f30306bd409b1
SHA512 ca3abfb0ba9b34bd006dc9576b1d56294ccf2b3086483277a15e6b96ed7ed206a858acfa618d6188f76214d86b2f2f40b43f2f10b3026dc3e5bcbe223186357c

C:\Windows\Logs\DISM\dism.log

MD5 cf4ced5e31258e027043ba797a80af15
SHA1 24dafc6f6d27b5942cb9d2ec4e5a04f1920f6e53
SHA256 9528f279b5ba246c43e2f08b5a2ec009de23645e0439e1ec88a485796fe23bd8
SHA512 dab10f8aadc6c931156ff21bfe5ddf4a6943fa6749056a0e9ddc685629c826bbcd29d408c7ed464cad7530678b189334c8b088d8e7dfe0b92909adb3fdc50a20

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f533b8c939debfc448db2e83dce581a2
SHA1 0a9ecb18bf2ac49218f19782dffa10f3a4342ea7
SHA256 be8372cb6321c38e4dc11d8ea4cba63124c34a627a58c03b87864ae3e6302ba8
SHA512 29b838fe81cb169013f278645a5c3b44a308c5befe329b247e9ad9b08cbe51123b9f62806c844b97c363847219e4c22ae936ba2117a5ccf1195f2699c3a0145b

C:\Program Files\ReasonLabs\EPP\InstallerLib.dll

MD5 747e9fea893d38221e003fff69ca1581
SHA1 071a0dbf2fca5a685aaa459c364ed1db2113b16d
SHA256 28957f90652e842e5705125b10b56be5b53f818be212e5c2c764fb4491c3227a
SHA512 eda637a69b128c3f46e190945abee5fb632d5460ca482273266138088b2e66ed42c76bade8724eda37389129555c07740c5e58548cb55400218d157e34042d5f

C:\Program Files\ReasonLabs\EPP\mc.dll

MD5 eaeca6b0b5d667fb2eb511bc10efd72c
SHA1 65656fb5325d9142e6405bb9cc3bfc0b91fece99
SHA256 f62dfbfd9c53204a6217407279f22bfc55b46258a27cf5198357e5e1cba72a43
SHA512 0e06e8ccfa3e765d8b6f4d1c521b0ae06ff174f3a885e440f99787d5760f8646b130bdb9e9f2f5db5f7281873862e0a874b4b7232095637326b3079a531920e2

C:\Program Files\ReasonLabs\EPP\rsEngine.Core.dll

MD5 1c54a439d22e2dd58798712bdd1f2997
SHA1 33e4ab63aafa949c9bd9f1c4cd8c9381b4a97c64
SHA256 c0ce2aafdbf664383f6b6403e0c73a6a311733a1d3180baa4314c31bc2a62980
SHA512 89857fac027a2ad88499fbc8db9e491719814afc1bfdc8fa593a4516573212f86d598878b2757c541a3fe8d469c7c255b7c14bf25069035d269cc93b2bbfa128

C:\Program Files\ReasonLabs\EPP\ui\EPP.exe

MD5 09cb0f4f077adc38f8af8550eed69319
SHA1 c97cb066a313df0c9384782924c15eb50ad5e1a7
SHA256 af4cc3bfebb4f886c77ae9140c3c47d7274fb720db31f16240f42d79050101dc
SHA512 bca50e8b975789a17faa2114ce2c66955cf7bd0d6cbbefe14e8416031e2f352fce542521bf545d64b270034980fd58a99c5ba690a9cccc018f44c8785b2fd69c

C:\Users\Admin\AppData\Local\Temp\7zS06509DE0\7568e486-f15a-4812-9645-dadd51560ef4\UnifiedStub-installer.exe\assembly\dl3\5d022729\47105276_eeb0da01\rsStubLib.dll

MD5 fa4e3d9b299da1abc5f33f1fb00bfa4f
SHA1 9919b46034b9eff849af8b34bc48aa39fb5b6386
SHA256 9631939542e366730a9284a63f1d0d5459c77ec0b3d94de41196f719fc642a96
SHA512 d21cf55d6b537ef9882eacd737e153812c0990e6bdea44f5352dfe0b1320e530f89f150662e88db63bedf7f691a11d89f432a3c32c8a14d1eb5fc99387420680

memory/7456-8082-0x000001C638C40000-0x000001C638C96000-memory.dmp

memory/7456-9710-0x000001C638CA0000-0x000001C638CDA000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zS06509DE0\7568e486-f15a-4812-9645-dadd51560ef4\UnifiedStub-installer.exe\assembly\dl3\f05c9f08\b7f11a20_fbc8da01\rsJSON.DLL

MD5 2ec13fba08ff20ac219f762509a766ff
SHA1 7a62fda6e3ca22d1edd181eca1c1a090accd1b28
SHA256 a66998441cf5a6be98d78abe2d2f3121012b7b30a45ffc9111dbd812c9a6d795
SHA512 86f2e480ef397ac48e376115f65c06d9b41e5daae2d98e27480cadb13474d86fa3acea20f9ced640344b3c6d3a5f4bc3072b8b529e55c52ac793da9d2c09dbff

C:\Users\Admin\AppData\Local\Temp\7zS06509DE0\7568e486-f15a-4812-9645-dadd51560ef4\UnifiedStub-installer.exe\assembly\dl3\e2efc1f3\b7f11a20_fbc8da01\rsLogger.DLL

MD5 bdf6337eef10d89ead58c97c4cc86eac
SHA1 d7ec026d4587bce1efd0fbd9d1d0099f6410b8e4
SHA256 247f904657ae110f6158598725de7de006318822e2f4739c6dc3407347a839cf
SHA512 185da0bb41b85192c7e79537d8796a8a56b0314a2f90a6a9f1fb9146bd673050e30315b4a7f1f50d090962fed334a76a49932e392ac44d3857d6997998f9b0cf

memory/7456-9721-0x000001C638D20000-0x000001C638D50000-memory.dmp

memory/7456-9733-0x000001C638D20000-0x000001C638D4A000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\7zS06509DE0\7568e486-f15a-4812-9645-dadd51560ef4\UnifiedStub-installer.exe\assembly\dl3\ff6dbf2c\8a2c1620_fbc8da01\rsAtom.DLL

MD5 ff00eb531015f056aa090d84c51cbeb5
SHA1 3eefa935448df905cdb9bbc8caf64e681185d638
SHA256 3ad34654b29f9b72c110a1e02f8b49546603a16175bb78e3635ab767dcc4c81c
SHA512 1e2c0bd5650717d3318b06ab22c2371ebbe734fef90b220ecdc14b79caa64022c166c799c7e5657ac0523ec9706424a67237942897feee775df2bdc98640afdb

C:\Program Files\ReasonLabs\EPP\rsEngine.config

MD5 7d5bfa735b37c024084376ffc80265ab
SHA1 bc174aed63f19aee2eaa7356e2a87faf7d00834e
SHA256 6bf70561c66fe78df0d7453ce789b0f176a9bc229b2997821a24904c733d1a74
SHA512 5441f765d32da2ba20e9440177619abb91cf7c75d004616cf3103b5b864ab7f012140d7a0d48ffef7998af5b813b15eb6f56778a5c77a7adc5e16a4dbadf9571

C:\Users\Admin\AppData\Local\Temp\7zS06509DE0\7568e486-f15a-4812-9645-dadd51560ef4\UnifiedStub-installer.exe\assembly\dl3\b0dfe41c\b7f11a20_fbc8da01\rsServiceController.DLL

MD5 9da18dc90cdc783e4d0c503949f25375
SHA1 ed0be1a19eb6391abe073901d6b54ef8292418a4
SHA256 4e7c131ee4c738212d3a6944543ae9a12c4edbbc5a892b39dc070292ad9fac47
SHA512 9f151d9d36f88aa01c9161874957ebd0a26735c8cd2eb5e7bd96930aecc6e556af56c644e84910a3e6b8aa644d4d63871f23ffe7fb48e7fd7c23e5bb3d1c0f5f

memory/7456-9746-0x000001C638E60000-0x000001C638E8E000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 f742bb47d43759643ac869edede11a6d
SHA1 9c4e5bdc7bcff098aab590d18314154bc62aa364
SHA256 21febe9f966c334d31b39d6f0a5a4030f2872aa06c24f7f1be44f9ebee74dee3
SHA512 f7a71d3e3c265c3efe62e6f2b2d7d5f1ca01488fd3ba98e66ef57bd9a59b498eea4bb3df86376986c8666a6b24c1180fba71353d2f74cdfd9331e51d399d02bb

C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt

MD5 8ce0deda8ae52090477cec1367181e4d
SHA1 7532983bb22ed4d6a032fb7f78d4f2d0ea2857f7
SHA256 a8c746444f945a4652546fffc0721a804dccca3ac3737651efa2131f900d1e47
SHA512 0ae86b6ebb7db6c0127b460e9888acbdc0126065abb583766515e17b8a83f74c4c08a2b215b6987284d945564e7b05241ffa8f49d9f09c2ffab9f867744cf9f7

memory/10048-9778-0x0000000004A30000-0x0000000004A66000-memory.dmp

memory/10048-9779-0x0000000005170000-0x000000000579A000-memory.dmp

memory/10048-9780-0x00000000057A0000-0x00000000057C2000-memory.dmp

memory/10048-9783-0x0000000005940000-0x00000000059A6000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_3gr3xhjc.feo.ps1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

memory/10048-9790-0x0000000005A20000-0x0000000005D77000-memory.dmp

memory/10048-9792-0x0000000005EE0000-0x0000000005EFE000-memory.dmp

memory/10048-9793-0x0000000005F20000-0x0000000005F6C000-memory.dmp

C:\Program Files\ReasonLabs\EPP\elam\rsElam.sys

MD5 8129c96d6ebdaebbe771ee034555bf8f
SHA1 9b41fb541a273086d3eef0ba4149f88022efbaff
SHA256 8bcc210669bc5931a3a69fc63ed288cb74013a92c84ca0aba89e3f4e56e3ae51
SHA512 ccd92987da4bda7a0f6386308611afb7951395158fc6d10a0596b0a0db4a61df202120460e2383d2d2f34cbb4d4e33e4f2e091a717d2fc1859ed7f58db3b7a18

memory/7876-9804-0x000001FA41970000-0x000001FA4199E000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e464e96ed3ae355963824c8f9581590a
SHA1 cdae62ad5b7210a957853de623cd7e07cd9d29ac
SHA256 f9fec5edaa6b920944deba3c40d2800c3bc72870e81f4b73063974e1279f88ea
SHA512 751f84809cc9f02c38ec6f624afeb411b3719f4c719e2585b4bd3fa6a92a88413c1079eecc7c566c17ca1ae303b65aea856cc4248f1b221c2484efd81deededd

memory/10048-9815-0x000000006DD50000-0x000000006DD9C000-memory.dmp

memory/10048-9814-0x00000000064C0000-0x00000000064F4000-memory.dmp

memory/10048-9824-0x00000000070D0000-0x00000000070EE000-memory.dmp

memory/7876-9825-0x000001FA41970000-0x000001FA4199E000-memory.dmp

memory/10048-9828-0x0000000007100000-0x00000000071A4000-memory.dmp

C:\Program Files\ReasonLabs\EPP\rsWSC.InstallLog

MD5 b2ec2559e28da042f6baa8d4c4822ad5
SHA1 3bda8d045c2f8a6daeb7b59bf52295d5107bf819
SHA256 115a74ccd1f7c937afe3de7fa926fe71868f435f8ab1e213e1306e8d8239eca3
SHA512 11f613205928b546cf06b5aa0702244dace554b6aca42c2a81dd026df38b360895f2895370a7f37d38f219fc0e79acf880762a3cfcb0321d1daa189dfecfbf01

memory/7876-9840-0x000001FA5BE70000-0x000001FA5BEAC000-memory.dmp

memory/7876-9839-0x000001FA41E10000-0x000001FA41E22000-memory.dmp

memory/10048-9841-0x0000000007880000-0x0000000007EFA000-memory.dmp

memory/10048-9842-0x0000000007240000-0x000000000725A000-memory.dmp

memory/10048-9843-0x00000000072C0000-0x00000000072CA000-memory.dmp

memory/10048-9844-0x00000000074D0000-0x0000000007566000-memory.dmp

memory/10048-9848-0x0000000007450000-0x0000000007461000-memory.dmp

C:\Program Files\ReasonLabs\EPP\rsWSC.InstallLog

MD5 43fbbd79c6a85b1dfb782c199ff1f0e7
SHA1 cad46a3de56cd064e32b79c07ced5abec6bc1543
SHA256 19537ccffeb8552c0d4a8e0f22a859b4465de1723d6db139c73c885c00bd03e0
SHA512 79b4f5dccd4f45d9b42623ebc7ee58f67a8386ce69e804f8f11441a04b941da9395aa791806bbc8b6ce9a9aa04127e93f6e720823445de9740a11a52370a92ea

memory/10048-9869-0x0000000007570000-0x000000000758A000-memory.dmp

memory/10048-9868-0x0000000007490000-0x000000000749E000-memory.dmp

memory/8148-9870-0x00000138A2C40000-0x00000138A2FA6000-memory.dmp

memory/8148-9872-0x0000013889FD0000-0x0000013889FEA000-memory.dmp

memory/8148-9871-0x00000138A2A50000-0x00000138A2BCC000-memory.dmp

memory/8148-9873-0x000001388A040000-0x000001388A062000-memory.dmp

memory/9624-9887-0x00000000061B0000-0x0000000006507000-memory.dmp

memory/9624-9888-0x000000006DD50000-0x000000006DD9C000-memory.dmp

memory/9284-9900-0x0000000005C40000-0x0000000005F97000-memory.dmp

memory/9284-9911-0x000000006DD50000-0x000000006DD9C000-memory.dmp

F:\LDPlayer\LDPlayer9\dnmultiplayer.exe

MD5 330013a714c5dc0c561301adcccd8bc8
SHA1 030b1d6ac68e64dec5cbb82a75938c6ce5588466
SHA256 c22a57cd1b0bdba47652f5457c53a975b2e27daa3955f5ef4e3eaee9cf8d127a
SHA512 6afb7e55a09c9aac370dff52755b117ad16b4fc6973665fce266ea3a7934edfb65f821f4f27f01f4059adb0cf54cc3a97d5ff4038dc005f51ecee626fd5fadd1

F:\LDPlayer\LDPlayer9\ldmutiplayer\7za.exe

MD5 ad9d7cbdb4b19fb65960d69126e3ff68
SHA1 dcdc0e609a4e9d5ff9d96918c30cb79c6602cb3d
SHA256 a6c324f2925b3b3dbd2ad989e8d09c33ecc150496321ae5a1722ab097708f326
SHA512 f0196bee7ad8005a36eea86e31429d2c78e96d57b53ff4a64b3e529a54670fa042322a3c3a21557c96b0b3134bf81f238a9e35124b2d0ce80c61ed548a9791e7

F:\LDPlayer\LDPlayer9\dnplayer.exe

MD5 2061141f3c490b5b441eff06e816a6c2
SHA1 d24166db06398c6e897ff662730d3d83391fdaaa
SHA256 2f1e555c3cb142b77bd72209637f9d5c068d960cad52100506ace6431d5e4bb0
SHA512 6b6e791d615a644af9e3d8b31a750c4679e18ef094fea8cd1434473af895b67f8c45a7658bfedfa30cc54377b02f7ee8715e11ee376ed7b95ded9d82ddbd3ccc

F:\LDPlayer\LDPlayer9\fonts\Roboto-Regular.otf

MD5 4acd5f0e312730f1d8b8805f3699c184
SHA1 67c957e102bf2b2a86c5708257bc32f91c006739
SHA256 72336333d602f1c3506e642e0d0393926c0ec91225bf2e4d216fcebd82bb6cb5
SHA512 9982c1c53cee1b44fd0c3df6806b8cbf6b441d3ed97aeb466dba568adce1144373ce7833d8f44ac3fa58d01d8cdb7e8621b4bb125c4d02092c355444651a4837

F:\LDPlayer\LDPlayer9\fonts\NotoSans-Regular.otf

MD5 93b877811441a5ae311762a7cb6fb1e1
SHA1 339e033fd4fbb131c2d9b964354c68cd2cf18bd1
SHA256 b3899a2bb84ce5e0d61cc55c49df2d29ba90d301b71a84e8c648416ec96efc8b
SHA512 7f053cec61fbddae0184d858c3ef3e8bf298b4417d25b84ac1fc888c052eca252b24f7abfff7783442a1b80cc9fc2ce777dda323991cc4dc79039f4c17e21df4

F:\LDPlayer\LDPlayer9\ldmutiplayer\ssleay32.dll

MD5 0054560df6c69d2067689433172088ef
SHA1 a30042b77ebd7c704be0e986349030bcdb82857d
SHA256 72553b45a5a7d2b4be026d59ceb3efb389c686636c6da926ffb0ca653494e750
SHA512 418190401b83de32a8ce752f399b00c091afad5e3b21357a53c134cce3b4199e660572ee71e18b5c2f364d3b2509b5365d7b569d6d9da5c79ae78c572c1d0ba0

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcr120.dll

MD5 50097ec217ce0ebb9b4caa09cd2cd73a
SHA1 8cd3018c4170072464fbcd7cba563df1fc2b884c
SHA256 2a2ff2c61977079205c503e0bcfb96bf7aa4d5c9a0d1b1b62d3a49a9aa988112
SHA512 ac2d02e9bfc2be4c3cb1c2fff41a2dafcb7ce1123998bbf3eb5b4dc6410c308f506451de9564f7f28eb684d8119fb6afe459ab87237df7956f4256892bbab058

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcr110.dll

MD5 4ba25d2cbe1587a841dcfb8c8c4a6ea6
SHA1 52693d4b5e0b55a929099b680348c3932f2c3c62
SHA256 b30160e759115e24425b9bcdf606ef6ebce4657487525ede7f1ac40b90ff7e49
SHA512 82e86ec67a5c6cddf2230872f66560f4b0c3e4c1bb672507bbb8446a8d6f62512cbd0475fe23b619db3a67bb870f4f742761cf1f87d50db7f14076f54006f6c6

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcp120.dll

MD5 50260b0f19aaa7e37c4082fecef8ff41
SHA1 ce672489b29baa7119881497ed5044b21ad8fe30
SHA256 891603d569fc6f1afed7c7d935b0a3c7363c35a0eb4a76c9e57ef083955bc2c9
SHA512 6f99d39bfe9d4126417ff65571c78c279d75fc9547ee767a594620c0c6f45f4bb42fd0c5173d9bc91a68a0636205a637d5d1c7847bd5f8ce57e120d210b0c57d

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcp110.dll

MD5 3e29914113ec4b968ba5eb1f6d194a0a
SHA1 557b67e372e85eb39989cb53cffd3ef1adabb9fe
SHA256 c8d5572ca8d7624871188f0acabc3ae60d4c5a4f6782d952b9038de3bc28b39a
SHA512 75078c9eaa5a7ae39408e5db1ce7dbce5a3180d1c644bcb5e481b0810b07cb7d001d68d1b4f462cd5355e98951716f041ef570fcc866d289a68ea19b3f500c43

F:\LDPlayer\LDPlayer9\ldmutiplayer\libssl-1_1.dll

MD5 e8fd6da54f056363b284608c3f6a832e
SHA1 32e88b82fd398568517ab03b33e9765b59c4946d
SHA256 b681fd3c3b3f2d59f6a14be31e761d5929e104be06aa77c883ada9675ca6e9fd
SHA512 4f997deebf308de29a044e4ff2e8540235a41ea319268aa202e41a2be738b8d50f990ecc68f4a737a374f6d5f39ce8855edf0e2bb30ce274f75388e3ddd8c10b

F:\LDPlayer\LDPlayer9\ldmutiplayer\libssh2.dll

MD5 52c43baddd43be63fbfb398722f3b01d
SHA1 be1b1064fdda4dde4b72ef523b8e02c050ccd820
SHA256 8c91023203f3d360c0629ffd20c950061566fb6c780c83eaa52fb26abb6be86f
SHA512 04cc3d8e31bd7444068468dd32ffcc9092881ca4aaea7c92292e5f1b541f877bdec964774562cb7a531c3386220d88b005660a2b5a82957e28350a381bea1b28

F:\LDPlayer\LDPlayer9\ldmutiplayer\libeay32.dll

MD5 ba46e6e1c5861617b4d97de00149b905
SHA1 4affc8aab49c7dc3ceeca81391c4f737d7672b32
SHA256 2eac0a690be435dd72b7a269ee761340099bf444edb4f447fa0030023cbf8e1e
SHA512 bf892b86477d63287f42385c0a944eee6354c7ae557b039516bf8932c7140ca8811b7ae7ac111805773495cf6854586e8a0e75e14dbb24eba56e4683029767b6

F:\LDPlayer\LDPlayer9\ldmutiplayer\libcurl.dll

MD5 2d40f6c6a4f88c8c2685ee25b53ec00d
SHA1 faf96bac1e7665aa07029d8f94e1ac84014a863b
SHA256 1d7037da4222de3d7ca0af6a54b2942d58589c264333ef814cb131d703b5c334
SHA512 4e6d0dc0dc3fb7e57c6d7843074ee7c89c777e9005893e089939eb765d9b6fb12f0e774dc1814f6a34e75d1775e19e62782465731fd5605182e7984d798ba779

F:\LDPlayer\LDPlayer9\ldmutiplayer\libcrypto-1_1.dll

MD5 01c4246df55a5fff93d086bb56110d2b
SHA1 e2939375c4dd7b478913328b88eaa3c91913cfdc
SHA256 c9501469ad2a2745509ab2d0db8b846f2bfb4ec019b98589d311a4bd7ac89889
SHA512 39524d5b8fc7c9d0602bc6733776237522dcca5f51cc6ceebd5a5d2c4cbda904042cee2f611a9c9477cc7e08e8eadd8915bf41c7c78e097b5e50786143e98196

F:\LDPlayer\LDPlayer9\ldmutiplayer\dnresource.rcc

MD5 d4d2fd2ce9c5017b32fc054857227592
SHA1 7ee3b1127c892118cc98fb67b1d8a01748ca52d5
SHA256 c4b7144dd50f68ca531568cafb6bb37bf54c5b078fbac6847afa9c3b34b5f185
SHA512 d2f983dde93099f617dd63b37b8a1039166aaf852819df052a9d82a8407eb299dac22b4ffe8cab48331e695bf01b545eb728bec5d793aeb0045b70ea9ceab918

F:\LDPlayer\LDPlayer9\ldmutiplayer\cximagecrt.dll

MD5 66df6f7b7a98ff750aade522c22d239a
SHA1 f69464fe18ed03de597bb46482ae899f43c94617
SHA256 91e3035a01437b54adda33d424060c57320504e7e6a0c85db2654815ba29c71f
SHA512 48d4513e09edd7f270614258b2750d5e98f0dbce671ba41a524994e96ed3df657fce67545153ca32d2bf7efcb35371cae12c4264df9053e4eb5e6b28014ed20e

C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt

MD5 a7fab040a5c01da92c3697b9f5e56628
SHA1 7b2882f0903cafc7598d560cd5e02e1348d77409
SHA256 bb47e0789b2d07907f9b825f9bfac6011e83a4867b2da3ab0715c98ab0dff41a
SHA512 7f9e829544de127e590d1ae3e6f59dbf83dca1f445096a66ddadf190427b6072c437c06b41b6da9f79e2cbd96e93d8806f9ee06b4cffe9dd2d1987b8b67fd331

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 fe74ded44e40a27aab3c23b1b27ef4e8
SHA1 afc1b0a4b8a7413a6526bc42a3824ddc2e89638a
SHA256 61c06682d910673452201dc95abbe073669f65d622153da4cff817f5d082f453
SHA512 56d7a9bf54d4d479a4cb7881ee24fe6a08a3437cea0cb39002120726b29ce0e42d38e4f9b82f8937bbc99afbe6aa1ce223ef8fea8ba4d1acbfd05561c31c0aaf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 efc40668452cf4fca4a63086bbb9e64a
SHA1 becf727fc07eac6a09f28f93a15e6f24f4f4f733
SHA256 f90205c42b2b65c2a627f00413885a39d1265514d5d6b538b548560fa0683201
SHA512 5948af5ea930dbe5a7e5a0f6bf36fa30cee7d971b9dde76737997560be65cdf50cf8479120f2de464c8f95b296f3d464ba4436651025f8fb63545ab98d01396c

C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt

MD5 544475b79fccbd17812a763992a45610
SHA1 59f0190307decb095f9e5b3bc5a6e9619a20562f
SHA256 9e70f69a0ef3af5079135c20babf8349b2e3ca799421381acc64bf04a8bca395
SHA512 fa59a3b0718532d9506d119a590fc055e65f565554c34daa6199428405f0c7e0f4de189d5f54124e095e07ba5e7866c93e818033b22249a3ca5c5f688b9e5fc4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 66af53a90e6fb4aa200ae035a59320f0
SHA1 1243c956b9ccd24786122f95c3b21d476c89817a
SHA256 95a5af9b7e2c7976f12ade277292dda20c2c4aadb1dd1399f288ec7ce1ceb9c1
SHA512 4def92ba05aa8f30bc891ab2b952caa75e7270e95f6bcb24ac09aab2e9d2c0f6b08fdc9612a38bf1fc91f16c985d48f3fee93d77d14d4f5d60bc0041d51774c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 d0f84c55517d34a91f12cccf1d3af583
SHA1 52bd01e6ab1037d31106f8bf6e2552617c201cea
SHA256 9a24c67c3ec89f5cf8810eba1fdefc7775044c71ed78a8eb51c8d2225ad1bc4c
SHA512 94764fe7f6d8c182beec398fa8c3a1948d706ab63121b8c9f933eef50172c506a1fd015172b7b6bac898ecbfd33e00a4a0758b1c8f2f4534794c39f076cd6171

C:\Users\Admin\AppData\Roaming\XuanZhi9\ldopengl32x.dll

MD5 b001f88504c8c9973e9a3b4dc03e6d1a
SHA1 a54b3046a70a4f2c792ad6a382b637b599f1dc48
SHA256 8ee4cbed114a588e934b5043f95c9c06f40468c2300fa0d1d938d16c1d46a8fd
SHA512 390e53be657fc35fb2e9f41b76b3b07c161a860d72445a4b1425ca973a6d8c0f32f6de6844719c6e9813e8d949ab65263642dea01c800a00285bd45595bed4d8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a26b239-b924-49ef-b4ee-0883f68c764e.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

F:\LDPlayer\LDPlayer9\vms\leidian0\sdcard.vmdk

MD5 4d592fd525e977bf3d832cdb1482faa0
SHA1 131c31bcff32d11b6eda41c9f1e2e26cc5fbc0ef
SHA256 f90ace0994c8cae3a6a95e8c68ca460e68f1662a78a77a2b38eba13cc8e487b6
SHA512 afa31b31e1d137a559190528998085c52602d79a618d930e8c425001fdfbd2437f732beda3d53f2d0e1fc770187184c3fb407828ac39f00967bf4ae015c6ba77

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 ade01a8cdbbf61f66497f88012a684d1
SHA1 9ff2e8985d9a101a77c85b37c4ac9d4df2525a1f
SHA256 f49e20af78caf0d737f6dbcfc5cc32701a35eb092b3f0ab24cf339604cb049b5
SHA512 fa024bd58e63402b06503679a396b8b4b1bc67dc041d473785957f56f7d972317ec8560827c8008989d2754b90e23fc984a85ed7496f05cb4edc2d8000ae622b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3f8b36df43779d5a2ca12234a0126f46
SHA1 9a63f7e6b504e9dd952bbab096dfe197d1e906ef
SHA256 b669c9c4382cace0fd7c414d5b082c9d2cf520c49a5009ccf8c0c24f7ec1526b
SHA512 4bf786cda8c5c651f9756b5435e0d33e962320e68fa9ed86e112b57f8db00277598936fe1bf844127ed2186523e4e086bfb9bfe5acb59ba7d76c570e5f6f9686

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031

MD5 e81eeedd13981aac76c7c0e4ecffcf69
SHA1 a67466139842be74b92f134690dc689b0c0cc7a7
SHA256 b7d649cce8765708ac264b9639845e0659e41b235abc2c04df8a74f89761ec1e
SHA512 5993eafa98af425824174ee53f440640445df086340679381332bf9e7411c03f1b10fb96951c7ff55d81d9c63b00f87916cff17ecb963258fa848adcbe848b3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 7bea783428a6d268b0bf0e74d8da889a
SHA1 f56013472f76d0eb5021bc7b5020928c6d561587
SHA256 811d6ad99ab1c386396bdf28b3dba21705a8239408a5cf05ade5803227664cae
SHA512 bd6b23e79431156e4c85721e8d3fb02c4f000d5f8145e043d1b314cc03f5aca584c3efc072eccf0ce586965ccbb1840d670acefc3217fd7d1f12426ded77d741

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 29635196790a1d25b24ffaf3bdd90f5d
SHA1 f1824b0fc00a25a28717882f798751acc4531745
SHA256 1e3fa85f9e64d5ceea523acfbbe42d1c800c679d1c798137ae96b3a01a6454e3
SHA512 d1593a752f45a3f91bab09f5a10f2a425cd5b04cf96ad6cc8deed3bfc757f738c15db445d1a567f736ebf709f72020a64cba1e991848f01e24408d5f9caa3bf2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e34ba062-9520-4294-a7d1-e805c2f3aee7.tmp

MD5 472a3546805d932a6d2e19dddbfba84a
SHA1 4f6604af7dd99a76afccd0aa8e71b654f584ad3f
SHA256 e3e148a408e335298f491104390b335f8b4408c10e8398a8db928d5c72e9c80a
SHA512 45886786b35c022bdcf0f4927f0303388d13c041354639c380b8fbddb16d135bd80ee40061de8beedb1a01dd5468542468fdd7d34fc90b656f7004f4159dba01

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 264b7809db54c199cd31e86398150073
SHA1 d4d4ef901cfe8feb9adaeac865667f9dfbc83a74
SHA256 da5717b2984dbb218b3a23f7818f5ff29ebec09b8e373455da4afe8ae60a8ae7
SHA512 ef8eff90c8a98658ee6a4d352759989965f60c308fafe362b5f36ffe3530db8ba8456cd283c8de2fc8ec5ec41a7444b6be07e699fd8e3eca1dad223ccac28732

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000051

MD5 d453eca18d366c4054d2efd57717cf9d
SHA1 c7b0dfc73bb89d8f0a94e2cde0eeba2b5e07d5c4
SHA256 be8f4fac2d40747a0adaecc6f1befe81b254a2b12bf25ce01d7194b374a457fc
SHA512 a6f770c9e4058e8c17f3f72a245f76075441e07507ef05d455108e1768ca2a93f851b92335b33c1de61cf941cf135b0be4698d3d551b54132b2d5c882fd34835

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 5bd953fbec750a1fa61ed03319a47061
SHA1 3aa4a0133c6b0d51484c3b5d5274d8f306be5190
SHA256 524a4261e2fdf837dfaaadd88e5187dfff97b4974d4f042a11b15819795f196e
SHA512 16d9fc30d7e4467d7fdb8aa745749eb7c1d378343c51b30635648cb590bb325bcc285e67e178e6422c7fe377bad0fa8487a0995f81f8fd8395dde0821f170ce0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e43412317c9f6b106265413f1b3844ad
SHA1 20d41096f7cc963868682d949d6ce46c33c30ed2
SHA256 eb7df8ccc65f13d53368bdcee29a85cf3b078ea5ba86fca41e6b429679e63d37
SHA512 8747b3950f93f9c0cb68eab05c613c4d018981bcfcafee9f300b76f18be2e91766d84996a26a0032d84687e840d19704c03946aab10f13265a67d1a9aca221d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe620308.TMP

MD5 3eeee09f41d4676345cd45528e2c7d10
SHA1 671f29f9f418f3f8f6f774a03bd20ba909b8af74
SHA256 8a358de136c7e07cc68f45538a742a5ffa3e567a9d75a82d499d459d9d7b9611
SHA512 00cafcbf858071fa771f3e7b944c1d48b991d505dd460d5967b05bb15cc793fc6c37a7e10a848fa9c12277d998376c3b550ba6f76cec37052e5ae3e8791e1498

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5756b085090965e14a0a1822e6a6b864
SHA1 2a170c4fe2d815d899c5f7f7da24f58b01a6a9ec
SHA256 123c0ae47d62675de0576abe245a2d2b5602eb1167868873e90aec058d1755eb
SHA512 7218c01cacce091a5cf32c6582c77cdb56760e1ba2ff5872a3137d909b957f1789f09829207b80453cc23dd631a8a9beefd5c3ca0f0f8232ac29ae68368bf611

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 951f9569e37a4113519750c4ab5fcda3
SHA1 0ddc58edde137dc267186a81a6a99b22bc052072
SHA256 e82e3c2cb9f551ebd65e01e6770e8154fc5df89777bc0f56b9e43647181dcb6e
SHA512 687a181e42c461faba64fcb07ae1151018e45b29453cf967864e844959c074a42f91025be97a8c44820a29ba9bfe392be98e86b0476d90af437a398ac31de655

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c19523e37eb7005b7376f7926b2e5cad
SHA1 8b456dec0a078665797276ca356d0fc527d02938
SHA256 fd382ee844cbb1b323cf731a0711bbc17b0fbe6eeebd2eb1bf3b6d985ec23259
SHA512 1d7dbae422d2a073178c068deb5ec31fb6936d5d75594456b2f1fb6e60a03ffa638fc709d7de8ff7a4ad8a62ba8570fc9ade5cf191c8ae1957d3fd53b2ec520c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d64302fc925c42a618587ba18e5da787
SHA1 65ff400bf2accc355cd518805670b39c867c587f
SHA256 0a49f7a132fb3bac9939c6565bac4f6d7e96fcb4932b37770f5c79a50ea9b2e9
SHA512 a3369abef5f9ce6f437a4f92f6e3a32e0282c1157b39a158d6dfecddb42aeacd1f83fc10d0925e89663a9a4c2f13c9d73a9641e81863b77ad97dc930c1d6b6d4

C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt

MD5 3f35ff0be09f11dbcee501ff225af613
SHA1 e61737763aee33e741479485e65aa2abbdb7897d
SHA256 eb9be6df27b7ddcbe82c912ed92c6d84792cefb4f139c11e76b753e31ec51550
SHA512 1aeef0c1efbaa37fe123f2b30bb90e991bbbb140591f21c37c1ef4ccfcaad703163c0b18ed61b724a50fc161400c9d98f0be0d25bb37db11a3d184eb936368d7

C:\ProgramData\McAfee\WebAdvisor\UIManager.dll\log_00200057003F001D0006.txt

MD5 7395472d27eb6e35087fa391e00cf9e9
SHA1 fa5e0bd37459f59d09eb3756b0e93939ebd9129a
SHA256 155e44d959a7b273b1d510edcd3c14d5aa4f09961fe15bfe5e54f054f4245080
SHA512 f6f7d0b9b28aae53c413ce91d3ccd518daa0cc4d3e233ce4ef1e88f866c662878291c44be94bd51e5d25c67e1d562cc2b0f4eabf538e0de4988728f4bb159cde

C:\ProgramData\McAfee\WebAdvisor\UIManager.dll\log_00200057003F001D0006.txt

MD5 2fc880950377f6c558a1391f0eb84f2a
SHA1 68e7b7a90fa5f0c669e8e07190dc3dd51c112cb2
SHA256 d3a14b0e10425155f22545cbe5a25ea4671abd4e256b08c05c0e233dc4573e4f
SHA512 546e96d985610df40e9abb516a3a7a2c105652e101c80bb202703faa0c3ca6a3d143d0d338b42e49d35cc78e68c057e361863cda8a6bbf6cf7f609918daf00b4

C:\ProgramData\McAfee\WebAdvisor\UIManager.dll\log_00200057003F001D0006.txt

MD5 d4c1662c26571abe17a2d4948415031a
SHA1 045501037018fb510509409046aa005d5d859bb3
SHA256 04005a58bc7ce179cacf82634b56ce67a4c53fe6d1ebc065f2e27400ddd9db9a
SHA512 e6163b260746ba0dc893aea697c3612c1347454f5cb811c5fff0af363cc494d5fdd4476d9e6b7b45d2577f625d0d1a91fc916ff3371943adad304e762298482e

C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt

MD5 d065219532a3d1507e5b5bb3af39e027
SHA1 29961fc458cc663213fc1282360d7a1607bdd96a
SHA256 990123039eb39393b74f5f0e2b091d71d34f810bc1513a13eda1685dbaceaa27
SHA512 b287709546fc36b6bbb3399a2de6d390d02e071b72eb627468756442e81f560e03d5d6543b624921557f2d91c06bb04a26b7172be68750077d827700700d32d6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 644bb1d06d9b59e84d9aa709561b92b7
SHA1 48ed3797653aff91b8e4edaec0f430f7cd5eae2c
SHA256 8a2600e065b8cf133a5947f81103c5ef480b0e3799e4a6fd24d597e9d2c05665
SHA512 ef84466d62adf19d6e75f2410ed294d927ddd760f5c2a660688a904fd087e5d1954756f89f23c6051b3dbc4f15ae05bcdc0c79059adec510bde7bd55b65f6315

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 47e2fb3abf7083f883d8b6e5501e2cea
SHA1 92da9b75119c8516eaba52ace2aedc1c288885ee
SHA256 b01d37ae1856bb419a7d6bc1c13dc24d6f68c8f76b60f0b903adbcdf57b5f87e
SHA512 13ea4a782f94c766227a38367316b5e25e262c65fc9e9c0aa5c4660e65a075e5090e1c2396e54bc839234496963c0488ad5ffd91e2e889636e0b970d589cc99e

C:\ProgramData\McAfee\WebAdvisor\WATaskManager.dll\log_00200057003F001D0006.txt

MD5 dec5af0a0d77a7e900938acc68f31eb0
SHA1 5497223d99550bbd8b6690a832439e66f50870b8
SHA256 3ea8f8e3f65977a305e728715b14e1d7c0e92098f315aa40262d60f8d444359b
SHA512 be86563b4c8ac38621b5b0b7df3b61400b9ceb99b1b47d94307a2fea6cbb337c3ede655104696a88fda4e18bfc549b2183f8c9215a62edf6b7ef1b098904f83e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 eff135fbf98f8e084789f66dbbf48a05
SHA1 029275855f8a074d447954ba256eec96a4e78e39
SHA256 b542d38c76e653548189ad0e464a385c66d1f602930f1e410c2e1a69d0ed09bd
SHA512 a37eedb95dead6aa26774e0fa5c900aaa1a0d5721046ac21a4ce9b30cc8cb7509c2b6231f8b8eb7520fff2625cdc1e5b0b85beb782ba354343ccc98d820970cb

C:\ProgramData\McAfee\WebAdvisor\WATaskManager.dll\log_00200057003F001D0006.txt

MD5 c6bdd5daf92707b6c7aa5700c870c0a8
SHA1 f30aa9d99e3e7d981d02e2abd7e1ce6c54ec4aca
SHA256 f44c428c42c8571658b7a7874ccdc15f97caf8d905b11444af3fc8a135ba73b7
SHA512 7d735939c1030ec27aaa6264d966eca3aff030c7399b027f7498d088504bebb8a53ac40525a4a52adce7be3a20612c780f703b707b9fcf458ef4328a56b1581e

C:\ProgramData\McAfee\WebAdvisor\updater.exe\log_00200057003F001D0006.txt

MD5 a5f7cd2686cf82792613aae2986b397c
SHA1 e6a7685cfe40c9e15e2303b7a76a74b53fdf4b4f
SHA256 41c340bfd839b3981ea986602e4e496c0cc129b7569562c2be8c84f9f8cfe14a
SHA512 13576b692ce02aa4487d60b18a5a3057010310158e57b04b30d86171e54dba2d9405ea9f8223d7fd944370126b9d23e9cf220f0070f61a2dec54b657e5442177

C:\ProgramData\McAfee\WebAdvisor\ServiceHost.exe\log_00200057003F001D0006.txt

MD5 2e65b37aa613de8ef17f9f12fec75073
SHA1 e2b298920559e8c6969a1f8ea9bb5598fd360cc0
SHA256 c5f248dc2530d9e86ff89b224011038491d858b72f24e3e77e789efbb71b2e1a
SHA512 fadff1750ea19b577d673547040193220f17a81562ca15491e6035724ebab840603c25e2b1a4aac67d847617c82cbd4f21a2ccf0bb25064552bcfcb897b68e48

C:\ProgramData\McAfee\WebAdvisor\WATaskManager.dll\log_00200057003F001D0006.txt

MD5 ae30b0657ed30daf6b1117a99bfa3fb6
SHA1 6c052fa56bd43c8461d021f96388d7255a0c5271
SHA256 c6700cbd0666b049a6cbcc26e152c545cc5e655f9ee1f1cc39802d74e58cc0ca
SHA512 cb4cbf749fae34f9ecb1f26718206adb7109e02a159795b4f83e32703fb67e1628e03155989ac90dc2badd48d13e9e5f1e1cb96e03c4f5299f4919ca255bd622

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5abea29f623697dbcce4205f6f5d717e
SHA1 f88dcaf551ab7f84c0615c1020ac958296e0b26f
SHA256 94e6fd3c5746a1b10ab5924c3a786d95708be059839555b90bedca58d8f9adc6
SHA512 3391f86556e67fe52cb5b7118b80c63cf0debdb9077a2e16b365c5acf8b35de06476a327b840be7d9c1d9fb002a46dbd18b774d7b3cda2e6dffdfa31afcaa317

C:\ProgramData\McAfee\WebAdvisor\WATaskManager.dll\log_00200057003F001D0006.txt

MD5 db3fc18e4bf1b1659854dbb09b5bb12b
SHA1 228122e5177becd69aa6339bd2b967e92add29c4
SHA256 65ca494da7513e107eeea03bdf4e359e803a64daba6c26a2911e4842d0c7c7d0
SHA512 68c20bedf196c5c58f84155bf17427d22214abd71a93bebc52f9690a64332e8e3d35fe36cbc58ec6a83e0950be7725c7550f525bef5016a7c85e2815ea72db75

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 94cf1f02e24193ebfcb7251c13e1fd55
SHA1 71d67929f860c9963e61126d602496c727647a3a
SHA256 6d90aec6f0772d097c54d0bab2ea3236e99615673948beffa99119df8daa2166
SHA512 28440c5d67c457118f4a734f32b34b63e5cf1a829870a694887b793b20279b0e10133eb4cce50df2af10d0c34dba367a339300ab9c86a328a0cf65521a2efe5d

C:\Users\Admin\AppData\Local\Temp\scoped_dir3296_1047022868\6762123d-55d2-49fd-b3b0-b1e06e68556e.tmp

MD5 cf49ded7fb421bdb57611ec6e2fa9877
SHA1 575fe64f1eb791f68764ff3a06d0c3cf079dcc67
SHA256 e50343a51c48a4b4d33f62ca9703b9e820352ed2e78b8316862bb217ef63eacf
SHA512 5784ea225a4286f6892fdb51f2ff60c0a8649b86f4b0f7968e9fe395c2ef12a03169aed806fbbe897f935ab2d25c26bd15d06412eee1a1b46f95f508f78f42a6

C:\Users\Admin\AppData\Local\Temp\scoped_dir3296_1047022868\CRX_INSTALL\interactive_balloon.js

MD5 8811c08dba69f3dd5c1be93169bd13ba
SHA1 e00f8bebcffecdad1a0efd4cf297989b5424cb14
SHA256 5a1312afd6924fa1ddd84e14e420c13cb94980886a3fee322647e29a3a7325fd
SHA512 872cd6836cf9d43c9a6e7b3cedf75fa3b81f907ce322f90b6d80f5b07c28ab6ed8b70d7ff6fc2a673535c499d695ae3f2d82ee9e144e15b66cec6b78074e3708

C:\Users\Admin\AppData\Local\Temp\scoped_dir3296_1047022868\CRX_INSTALL\about.js

MD5 2fdfe23e0bdf0b0d9b7d9f79c1ddb806
SHA1 427278389f92e127018ab6d3c990957d93a3a95e
SHA256 ef8d6acf796f3c3051c5a86d1c4551e2748976be9869a1c7a4f9ea9b539a040d
SHA512 cecdc80f93aa751613d6451a8b2cd7086b55be25979bda521fcf8d19cdf1cd275bbbce95c731024d68250be742ced20588ca70c80d3bc4379358e694386dd355

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\foreground_sidebar_main.js

MD5 99a047caec3d5a09a4d826950f6772a9
SHA1 94be4982caa268c23c3f6b47372e0d126b1f0995
SHA256 04ffc42f5a772d1fd98a4bd059d3ecbd6f8252a5c823384c376c6ff2c3771389
SHA512 550d9bb09233e8941f1407165f5c3f91644755129ccfd87802a19b6cbab503ab53ef227f0af28e857d51c98949502b071e308269a5e247b5ea251fb6196540af

C:\Users\Admin\AppData\Local\Temp\scoped_dir3296_1047022868\CRX_INSTALL\ff_policy.js

MD5 65ab95ea097eb045ede98a5a9911e11d
SHA1 4e2f7880681bae2d929d99bfd18f1c4e75b30d76
SHA256 cd09e4f07f25389e0ecb44e82ccc672c84065cfda3a09dcbc63df5eea3b926bf
SHA512 322c891114d3242cca615cce80cfbbe6f04089e7cbd8e92a83004b9e1437a752c9104e47e5926d540f45ee211681dbac3b1bb75589c47884b46f019c7ae72573

C:\Users\Admin\AppData\Local\Temp\scoped_dir3296_1047022868\CRX_INSTALL\scripts\content_mb_precheck_injection.js

MD5 3a08c629534b7fbf0a909d9e7ad8e692
SHA1 7aac3f5ce0f09c0eeab14777a0400acb1449ac88
SHA256 0c47bd76fcdeebc9f2185f2fe6fb67508c5ec6f3f4c8a230c3f2d1dc52561373
SHA512 096ae746358bd9d834365443dee82ba1b39dfa1631abde8d2112b573930e24923cdb1c8bcf511d78034846d59b6ecd6fb68b18365a9bd7a6e536bc8f4a206d76

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\site_status_block_page.css

MD5 90a02c68cb9471c313487e296572223f
SHA1 937bfa77ae5ea12772daa5332f700af632e1e15c
SHA256 ef6fcf6e424f02b5cbce437bd6fcfef2fadd11ed8188537264117fdc675372f4
SHA512 ebec11bcbd02d6dab852fa03a2fc0b6e424fab3d7d3e9238b1d8379751e8b2f38630d4cc180364acf411089b4c871cef5d1ab83f52dd007e5bc94e6bc8ee6821

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\statistics\downloads-blocked-icon.svg

MD5 160550c817acbf5cabbdd3b20e903e37
SHA1 1c771f935ae29004400dcd83dfa8db1adeeed9d3
SHA256 f330184ef8b79ada42f82c0b0bf77a24046c6b74a69fec0fc2605224a12dd062
SHA512 b8d746e3a3dcea7685eca1f9cbbb44dd8b18343612ac0ce4aaa4a2d19ce318af3fbd6a746ca23d5fe1d2b2bbf1bb36f9345037cac84a2352a1b27efc8d368be6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\scripts\content_mb_page_banner.css

MD5 72f4d8062f45b584d87a59407346c7f3
SHA1 3a9aed3d286a1a84424cbed265554e350d2b1348
SHA256 dcade32aee263bece0b0a8ad0e19b7b7cf24aa6861dfd3a943ec4e39afb80327
SHA512 da81558eca0dd3e9698cfd17b6d17ace41a88678c1c851d0e8d77c77bec7b535bc37152293df80059ab0a839d8f0d10ff17dc5e1f9e842737735ecbd8b0e100e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\scripts\content_mb_activate_banner.css

MD5 db85187b78165c17f3b641165c198b1a
SHA1 b4ed668856d98b3c74f4fb446a28240f7044534e
SHA256 dd8cee2344337e1dcfcd036fe5994bef73d1b0f7d4791b6f869acafb79113728
SHA512 16359dd5b4aba395e27c0f278327ab80099805b25df8d7ce530c81808d17cd2dea5e782b9d26bda849aca9e1d73a535d0e3c5a24888b1da8461206ccb26ff057

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\topbar_iframe_block.css

MD5 db4682244b17ad95a607fc0fdc147c1b
SHA1 86debb7dc600df78230e790a4f43eb9289ca46de
SHA256 320e6dd481beb9edd0cace112f85ba879548541b1fce0faee2b61ea28099dfcc
SHA512 7a3302cf1128520b47014fc0003007ee7d92b118473de84db95fb0223559d7c91f68d8bb00aa10b9802d7d461ba8bc6429bd1ecd220729a7802638834aa7f399

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\sidebar_rat_detection.css

MD5 96f2086625cd2c9e535a567b4c946f0d
SHA1 ff3291bf60e9ce2c6264af89b54a092cf17db9db
SHA256 ec7d7ea7f7c3ad197bc275c82816bb56ab77770689f2da67b995064b97a42495
SHA512 73b857fb392c810e51007a17b5455b56571faa124dfb022b26c1de00780a8d7e38c9749c50d633d9d834eb0636d8fd1eb77a1620d147a41e11802367d22bbeeb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\sidebar_mb_faq.css

MD5 6941ea23d3660328dc63f8681506a035
SHA1 1ea8bb9cd6c305e3e0dc70d6bbfc40b1fd11e19d
SHA256 170774232b8bce6d229a2d675d30cfbe3319dcdb0448602b38335b7e726882ee
SHA512 59dfec1c5cd6df1f09351db3c8baa282c07c75132f87af7381cc28298bdda3276a5471bdc018394948c734cdc657d6022620bca9e31aa2cad189587c565c68e9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\sidebar_mb.css

MD5 79b6f907801d0810df97771cb4e69ca9
SHA1 2f10bd91d26641332542153d16f824cfdde1eba1
SHA256 c560eabf6c2e650487518e5c3a6603c5145154ca71c4af142d2d08624eba384d
SHA512 051ce8e0580bf1034eb34bf1d3afca235e29bac6f1b88b31fb5580a57ab72d34bd7857b19cf3c6db84cafc3500e7bc42a9d40bbcf06f8f7c3f976a1458699da0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\sidebar_main.css

MD5 c7d49f9190fa4a288d3002851683c8ba
SHA1 1325190d60b20d3205d34e05b0d44966c80e2218
SHA256 4ecfd3263681555657ed907fb703d46485770e3fee2c99dc562e7b2ec4e8253c
SHA512 7a87ab3b9d4ebe6fc83a98d4a0dadc8534bbbfec59be100357854d057089712228e62fbf71bf745610ca4725464f9e2c299fb9f8b19fce32cacd6a90ee09d717

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\sidebar_home.css

MD5 70878ffd25bbd9fb9026ae519c46d935
SHA1 f9be3c0663e5e6d710491fba8496b9a29527d3a1
SHA256 49db8eeb3aca9a0af4d5cf2b17639f700ebadf72cf2f7521b7213b373b3f8380
SHA512 141475629a7578687ba67cabf94f8cb3265eba7ee69c101480b1f243c5ecaa3d9b64ac251deedeadfafe733b27ea455a2a40116b437a9fcaab2494df1a10619a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\settings.css

MD5 452891b049ed18805bbe7648d5456a92
SHA1 fbb6ace83f515f0fbb91cd54e123d1d59099ccdc
SHA256 d7d44e5b9bf10f995167283f1b321fb98d7f4871c24a4d020539eb35e03812aa
SHA512 ec56891290663136c8b2dcce88ec49712c6063dd435d2e6d91563595782203edb02d7a7d21e03de91d651eed0e9c733b515fdabad76d73519cc20d9725b02d7b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\score_meter.css

MD5 a00989118e2b2dd8e726b8125fc88b0f
SHA1 d0a6f3306325bfd88d1abe0c61cbdcf1d8a5fbfa
SHA256 7583459d88181639e207e43c5280327cea90c1c79a03536e5cc35219802caa41
SHA512 ab16d8b672dfa52467e94b8ed9ed5bbd7a715ea727b73e69b690f24e593d4b80a4fbd96e92fa3daac24e159c6eeb5959f202a228b291255a0ffb7161e5f4be93

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\page_banner_mb.css

MD5 248f347ea7c6177a3691e94ab8f0411c
SHA1 c54a946d69a97e09d95e09955f58c0e4ac5c79b9
SHA256 f7c5f6ae9c7274e3c5b5121b98a0ad18de7edf3934ee32185a9c200e2b111416
SHA512 4f23668fb1ba3a82237d752ce96bcb420219f6ff12c5b1e0d6d5d81c374ca3458f8ed0b83b9adec1b1f802b4dd3a21ae4aa568aff482acd6448969100e5b603d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\no_native_toast.css

MD5 3720957cf83594e60cc5aaccdbd546ff
SHA1 e83d2d6a0468999b9c6bf3bd68e64efb26996488
SHA256 70c7c9f5ee97a1e770d0e055a4b8a5205a32341e61038a4df7a5eaabaed09c8b
SHA512 e9f95229112e92dfcb14aab397a5c43d872356344bc6bda1fc9bbce3cb62103d573b38c5197eab42ce6ea5c6d49d2f20e2522d4e18b14b2b07b0e488fb3be42e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\mb_page_banner.css

MD5 a2cb8679d79338fb125764e8a89069c2
SHA1 8a1ff2a12f193dff1cac51e9adfde0c4183e62ba
SHA256 e2315506a26a6628af1a8c42dcce91255dc2ea08095457336454b478a91e7633
SHA512 8e5817fc823c8a755285a6b5a212cbed269436c798350a5c709a24ff8a17939d771003d5bc6b409b47c45ad1127d729e24d78dfec6a542fc635cb38935b92b16

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\mb_activate_banner.css

MD5 a3be1b4b11b4312ef3f5635d55b6fa2e
SHA1 715d7408726f7ccc22854c9631c8040dec24bb77
SHA256 c4639677af409e7349e2873a167aff084a0240d3502b1c915d5b6f8e25c4b7ea
SHA512 363d802b040d05ca6c9f95783576018afc08815e485301ec32fd9461691493abc851ccd91c8db2aa8cc0b9d1a69d22dba080385754e8cf7c2b03afae586cc1c6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\interactive_balloon.css

MD5 62a449df10eea0586f61bef393297f24
SHA1 fd9b3c40201457de0badd1ed6bc893d62904a59a
SHA256 c6bbf75bcc3148ea0467de755be65ecc1846c363a8a01d8072857e668464a6c0
SHA512 f991664c130e553dabd670f61368c78946aa531982a7fde98c82f65141e29c932ced2585684d3a687cc4ee0f0ceef5a8ca76b79c0fda04705ac5427d86d9c935

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\iframe_block_page.css

MD5 966dcfa8fc4e421e548f64033b374a9d
SHA1 b0c8c5a895c74f2f0461be8189073d7165cdb01b
SHA256 d0a4d6d80768a79c6088d95827ea4914bbc78678fdd347fb64b9fa379e935f16
SHA512 c33f05267a0b8727c355612a77881713e7373cacf95821bdbb44d5ea418319375b5e683b8fa3d2bd7464843942e5a9ed355e64486e292caeaa8704ea452d6a86

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\how_it_works.css

MD5 7c5f05a62cf1093ca46738ad9d8a24af
SHA1 7f0782cc644077af551e789cae9b1233b2ca2a8a
SHA256 060932fc76201b566cde5c14d59109d643f2f2a8e90b2510a10af7d6b33c4871
SHA512 52f91f34bcefa82aa87f51eb229247c8d355deb9353cb317c27ae5665461f83e31052789d42e89ace9adac4024946ba57cdc95c75eabedb592b58efa9218244d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\foreground_sidebar_main.css

MD5 ba2246d636b696811ef21c0ccc0d640e
SHA1 69092b44de0fffac200ac1d0bea8c465a1146a05
SHA256 e6501107e8757f4747c5e71726fc05260ff8b21ac25be1c4c3bd47977e23cf5a
SHA512 4afc01fa1f7734b8b47d7db223b1c3911106b0202908767704a1a663876ba6614ed4e21c9a42d603dd997bc37bd9ec9f1afa85c623d6fe4fb01d832e9973da9e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\dws.css

MD5 fc74805c0a5d1d12c45e6f7a8e29f531
SHA1 8fa36758e6501e4134177f860981affe11691d2d
SHA256 d2b17716d9fcba12a5f07535a7495a3cdbd825e4496f168988e0bac8db6fcd0f
SHA512 eb2d289d0863bf84a312ff5d252dbf8736567da2952a9295f7d04e24573348fa9879656fbff8adf030b2c60f6d82d0ff87a49d3eb09e809fe4a71882925836bc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\download_scan_popup.css

MD5 57ef6c3e83aee7c42236c15897f58bf0
SHA1 f08239802d5b71e9e24247ffc7d6a208c1f32fa9
SHA256 fad7d1df11534d51102db7eaf4494eba51688e34cfe1842bb38aa5f25682d2b3
SHA512 965704fe17a747cc9529a0d697a66431d1ca178ce4ad1d6ebd5bc99f4ac0c7dcc7496ca221709fdccc9220122f3f70eb4b44c63934316e42ba9914b1fef2fc0c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\advanced_protection_signal_toast.css

MD5 0098e3712dea4501553cd35f14089c3a
SHA1 4b51dd6664fd38f412024c4169b20a2a94b67d02
SHA256 ac11f6fec6b713d433de92ac42cffce837ba6ae1876650ae8f1fc6bca854aa69
SHA512 e683eb82b5b8270e91bced5a1e1166d802ef7b94a9b752f92b579748762b6e8c66dd6da47aba6a886d47b2b78b9d83b37b68aa869d633ee9e80e479ad4785e2d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\advanced_protection_signal.css

MD5 171033eb5306b468e5e4d8b3453d768f
SHA1 bc521808df219b309f3f2621d209e8b4e27852e5
SHA256 1663a2ee1f3befc83238e3572ef8429c1663cb67a07ad71bff4e8f323543e36c
SHA512 833081dc7846210523079c510d3f195de4de4219ed892d81ae4dc5abdc5937776eed1849551b46db4910a4f332029f51794571d1492503bf8b390b5ca7dce840

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\css\activate_banner_mb.css

MD5 47cf04109e1033ed9f4cfcfac24e9226
SHA1 d0bb9a333d3d58b62b50a3f5f1c7f9e2d29fa31c
SHA256 484d70fd64734cff3a05cd940780cf28a39c9b0d56ff2d9d988c7114adfd4498
SHA512 69803921aff0f60e57df320f98e9f3b0a04d3506c0e96280916f19eddfa4fa3f2c959fbf812c0b8c6287086039b5604d4edd1d09000d837e4fd7c29f356cb5b4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\fonts\Poppins-Regular.ttf

MD5 8b6af8e5e8324edfd77af8b3b35d7f9c
SHA1 01d319c533f62ea29f03b5df8adfd4d93d2d2a38
SHA256 78f127277756ae464f4eb665ce214cb6315746f6f4193e95b31f18f4b3e97527
SHA512 cbe58e542d1a0d61edc5d0fbcf70aae127c73d5354d6f566c7f1887076063cc85440e8cebb2a76272d7c15558482a9524c6ca5522de89c1e093a580f204ff945

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\fonts\OpenSans-Regular.ttf

MD5 d7d5d4588a9f50c99264bc12e4892a7c
SHA1 513966e260bb7610d47b2329dba194143831893e
SHA256 13c03e22a633919beb2847c58c8285fb8a735ee97097d7c48fd403f8294b05f8
SHA512 ce9f98208cd818e486a12848b2d64bd14e12d42d84b2e47436a3c4420a242583eefc4a9b42401b51cc204146c6133645975682e4bb5d48527b3796770efa3397

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\balloon_message\no_native_toast.html

MD5 f4d8a4034627ef71e909b91c4f6ec3eb
SHA1 d16a1c5894c979e8ad8a0cbeb2e6edcc5c0cd303
SHA256 581c1eb7fb4ced4f1f38acf103dac1877916b19c88e5944995a29f4a125fcc60
SHA512 7c01d7dfc99d602d6428c3506ebeb049e154ac86a5b29a84c7fe284421adabf827a5ae59350bf4ab9ca0f5942f76d52434223ea8a1b42680685e4469897d94c7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\balloon_message\dws.html

MD5 d04478fa6b77f6a24a4fd53e204f95d7
SHA1 5f4507e7d1519fe8990971cc3b205de43fa4da69
SHA256 ab8c30846a98eae162a5018d92541b79d055d24b2b87bfec9d6a7a81db5cabeb
SHA512 5b9d98297153ef11075e764a0528bfdfdd69121e50551cb3b18f7895ff02ca1fb8ce4d8b667dde41c10c05e4ab7c677b0bfacd2a635e7c5dec1886fc960dc5a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\balloon_message\download_scan_popup.html

MD5 571c7ff2f447ff481a533d7b7da844f8
SHA1 a2d3f289dd9ee2adc11e26d58c2c746eeebe24c0
SHA256 ee278114755d401526f2546eb31938c59612ad0509854f48b58ba084f7872d37
SHA512 5fb2e9f29a5f8f989a943e7a0d289bd73a675698144cb46ef68502f1214c782e575398775c84cad5974e70bb44032f42ac570bed0e47c28371fbfe5391cdb705

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\balloon_message\advanced_protection_signal_toast.html

MD5 66fbf205033d6012ea53852489ad53f7
SHA1 16635a0da98aba32cb90f461066229278b37eb1e
SHA256 3a5a37596f87fbbec98b526c78e532e7e35818a27ec054638c9b30c138075110
SHA512 c777b5ab4197ca3519c9f9d9abfc5a766426f52bfa4acc919844d2eefd29000d85220cad6ad89b751ab4a0c79adad408ca414014693e4fa10336a3ffedaab8fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\balloon_message\advanced_protection_signal.html

MD5 f48166ae870ae1235ae9524556fd3ad9
SHA1 0add4427744c154e1c030b0c9191a08006273e37
SHA256 742fa6ec8afc0936124dc3e642f1241cd5750729864d4bbb1ecd7a1e806d15e0
SHA512 7b766c6994308d9a8fc3ccf5c64e611b5a763cb9424358cc8f03e7acc2dd693c1dfb3fbf2a4d34cc5a2250cf0ee5e70c990662548bdc3d1137bbe59d487fca78

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\sidebar\sidebar_main\sidebar_mb_faq.html

MD5 9cae0a036208ebce6318dceacb239912
SHA1 9b20c3e5211f8973411712cad96755ce74e651a2
SHA256 72333366f4f931b095b1c78f22403992f5c515e8711e697fb44920b38dd83640
SHA512 fc39dc0e6e88032250f153454b07602a17adfbc13bab200507aa6b4cd2548b7e26bd3c4a332b56ae2517ca84a21aae055cba7f27861a4fb5df291e1596c58bdf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\sidebar\sidebar_main\sidebar_mb.html

MD5 27dfd23cf31d9b2b519c34aa0db6e5ac
SHA1 d8e58ed1c7a03165204a9c5b1fc2f5da72ae0ebd
SHA256 06b54e071c212b197bae39ce71db2f7044bdede863b7bed6f98243420b69f56c
SHA512 493b111764da77a9d092b47505928be7d6f50fdd5eca096a76a961872cd45ee3729b6e924f028cf5aa5bbe2c5dd3e9dfd4a70bbd2d98069bd14e21362a480031

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\sidebar\sidebar_main\sidebar_main.html

MD5 8f06f48d6b675a6aae8017a590a32e14
SHA1 2352bc49ced269971cbfc5061be0a6be19051190
SHA256 5c84f70622a7830b13be188f5eacc3cf359abfcd40a7a0faa82d65fd47effdd0
SHA512 0c0e2932bc85bd2d33c9c319f1880aed0e9211b3928e86f852c3ab50cde606cdd76811ed6c8bce1e22e55675a8e42e44da5cd43190aa472c5297f2714b00bbc3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\sidebar\sidebar_main\sidebar_home.html

MD5 7895011f338cd527c27b180253189123
SHA1 3f203a20e1bb719aeb0a0a17c7441535f68c3c9c
SHA256 4e655ef56537376bd6b2d3af15aeafab6d36f8d2641b6e4580a32d2acae8bb52
SHA512 b44345864f5eeff1fd778d99e82a2315121ac2878f1572320edb598ba8d13d89bd791e1902c0445de642a0f8f9bab9b831b98465a2d9fb0c21e47d4f2b1a1755

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\sidebar\sidebar_rat_detection.html

MD5 749a35a60dc0a330502d824155b6672a
SHA1 917c87525b5fbeb4265154f2cb4724dc11877f87
SHA256 29fc536628520061f61637badbc1f46861f53dfb489aee29658e8c1a1b46fc6d
SHA512 de8c4e7a16f51483db96518bb1b26d17d1ef9101d212e190c0e081661be8a44b8f3ad6a2ac13d2fd86f6c458d8f9e6792dc89cd30f1d32f8d40b835ae0df1faa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\topbar\topbar_iframe_block.html

MD5 356afa7be11255b3b53600f868e2c6cc
SHA1 d8eec6621b727f4ccb7602a6618ecefdfe9461d4
SHA256 034a1b86c206346d71caa0f48c7504cc2629645160deeada1098aca5e9bd68f2
SHA512 2f441de5fd81bc34f89313aeaf810955bc396219b8b4cad5d3b89d6beddc3b8c4f5e0139798fa3a505cb6bf033543a1f0124257e53f42fb136ac2f9767f5d575

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\whitelist.html

MD5 bac4d735fdabc6bee1d9353b4ad71b87
SHA1 b84c4256e556d8077113971db17c7a4575810637
SHA256 5af01e6ee63a6feedc1c3c6b6cb995325ad428f76de2d7a0815414e07561b553
SHA512 4b26e7308097546b1dcc34e99d4696efa7e510ada1bbec70f1fadecc7a8f8b2c225465256b15e69bda285a3565c7c3ffaca84764a38fb1494b0d4318d4b01def

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\statistics.html

MD5 0fb8b621003b72f5048bf81893b3c903
SHA1 527764d5b527e8c296cf8227ee0adda6b457de54
SHA256 e3c22394e39b89ff3ac4835ef3fa88e739f7fda118114c25898e64765f07b0f8
SHA512 cf2dc74c5d778a336c8ae25b27a33ef4f6fe806ae0694349941101b701a4c2b268942a4d4a0b665ce397e8846c5969330fcfc6cbc338b55defb95b626ef0deaf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\site_status_typosquatting.html

MD5 bd56f05050672aad218d979589a32887
SHA1 f0d3f2858fa531721dd84650ca08e5762a8db117
SHA256 9c2d54d1485be028008959015cad7dd1d7f9a2ecd5adaac820059c1262c13351
SHA512 c95e3fd336765595a5031f04963591c2dd7c85eb49b6877e3707b507415ef3e5caac869f719c6de29339f6fc77d3a073cb01ff12be00caeffb7473e700ba88bf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\site_status_site_report.html

MD5 25142cccfb7232f0395190c8bb18c6dc
SHA1 176c801b72c1ef7f5b0e54492ff9a49e16a0bbb0
SHA256 574c5e03279ae4d5b842fa3fdb7324f77a95d23e76c7c06a7a12be53acb2ebcc
SHA512 3c085bdfcba35135748a7c296d3e8ef25ea5258f7738c58abc4815c61fc6119f932f68e385ebf63dc16e19edf13d58786e4d650156db3d5c10e430e003449ec6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\site_status_block_page.html

MD5 2d7f6347bd2a528d0938bc4ef6312bb6
SHA1 397f31e99ba0d3ea954d00bd9305369b30816e1c
SHA256 dd513b8fe8e99a5d1f72a731613e7013096a9cceffeee7689b444b1d9baa9ea2
SHA512 e173c791b354eb6ef7b56f29c5e3cb0c0294e752dfcea88b0fc72266383ee97ddaf0ac7a8b60db5951567ee19e7f26f67344976128eb6b959852d80cbe95f020

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\settings.html

MD5 af3000f72fdcaeaffc087902501caeec
SHA1 9034bfd6f177de5a372332d9a2fe07330573388e
SHA256 6477002e391108ee21a11b9612d5fbec5a4e2b18420de6f44331037f62679a4e
SHA512 79114a64bf5359cc48606b6a1126620d264c7101375d6e7ef2daf8284a25be0cc222f37442cd75081760c74d8e34f16e5225b425c1ec9e2f82be39d44ba455aa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\preference.html

MD5 eabc0d18d4c835cb5aab383a7d0644d4
SHA1 1910eff32b81f64c136dc269b562015c289df74b
SHA256 276ec48998dbbeafe87ff11b751505a95fe42970275602a5ed849e75f6ac6433
SHA512 dd6cbcc98f9c722fec2367491764086861d3a1c6b1a8463cc508395d60e1eac56c8af994dd4b7b86e750e8422b670ef710934b2dd9a4d696f647694edf3823f9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\page_banner_mb.html

MD5 0715eb9f682cd4f14b4d687579bd9996
SHA1 57e20eca87795ab406c65713806bee6915d14146
SHA256 905ab2b89978e22dd74077d178a161d67297675b3c88c84ea143966af1a0bd96
SHA512 b3cdde33bfc6b1c0b63566b81187a1f71a3cec44c356d7cd749de833f1b3912db389891675fb20befd228c252e7d282e0c7f7dcbf59c5839ea3fc59c492d8989

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\iframe_block_page.html

MD5 5f79955b3effeffc3bf27d356c1b460e
SHA1 caa29518c909dbeb7728834ffa80f041413252d7
SHA256 d0e292e4c787a0855e6c6531746c77fb3b857634ede424e2d1da23cddf2adaba
SHA512 4ec2eb5ca65d0b89d412fd13abb1808d5e298c25d972060257e06313829ec61b3ccdfd68ab20b00f5ae0a889166954ec15e09592b4e9d0b18a7706ccf1315aca

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\how_it_works.html

MD5 bc2bb83175dafe065d571a352b466fd3
SHA1 8d90df48b9e6fb324562d687bb838958d2b74c97
SHA256 7ba194b337de48abb6b8044a0a7833ff12a286e6ac0f5aa71f6426592dc2a641
SHA512 3a0010a0a677dcac78b4d7d3a1ae35b0612271dc486357f484a642bd949aa54fe8f1247713ccc93f429584dc850b790cd2473ecac05ed426f087bec4c10a743f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\foreground_sidebar_main.html

MD5 169795a357565de1bb66348c81ebdd98
SHA1 9f0a33b3ec5c2fc05f67ae4da9361d1d776342a3
SHA256 b618545cb49087d585d37b5c0a92ad307d2f85238208f10cdfcf51204d2213cb
SHA512 dd70caabdab07f8905b780c3982194e70a3ed221c01691b74dcfc7fd983a9794f067ed6f72e4c63d7c910c0ca77154cf1620df18d754045be26da9ce09e32028

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\ff_policy2.html

MD5 5f77472567379524ca8a6063ac3bdcfc
SHA1 720281853b760245622e795a27b5bcad3da62f12
SHA256 18e1698c83bcd8b4be11807703fa96154cdc94938b92a96ac6c098e2ffb84cbe
SHA512 a7a17ed2f922022f3d9f879a4f1b182daa83ac383c930b5da8cf2b04ee661d94f7abf88d92bba54d1591bfd07ce5ed98a45ea9bde898d2b52e289f050d90981d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\ff_policy.html

MD5 49f1b6807a50254e0c94706205df1ff0
SHA1 a6a3fb78cb22fb7c6220cd0db701699e324a09df
SHA256 29edb822f86f3e95b4164413c2472d779e9422fd0521aaa835e4d0d45830dd86
SHA512 b6194adf6574046c0cbb5c0e65b65bdfc96741938667c6be6de39e1a09de86776697a6afab91bcd2c5c8cb6fc64a89502a78cbb2782db54e3fdd92715e8a3739

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\activate_banner_mb.html

MD5 019551f173c41bfb88c78ca58cf63677
SHA1 0da39acba630ab82ef126c2a98d05732038f4b7f
SHA256 21ff588520ff9f0d15b7d37468f65c09573a442b49fd13ea5eccbc5fbf964c98
SHA512 6fe4e39ad4c9b577d39d9f31e53a3a23fc543f5391bae61aedcb32fa0f311c6a6f0e0d320af6a57bbd9390353a5bb1f46e649827a6dfd1bc7a94bd05860071fa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\html\about.html

MD5 dd0cd300eee1e02e3c169357b8658110
SHA1 e017f762115bf370c8b4f2f90e0658324cc8a93b
SHA256 c0d7c21c3991f53bdec8d0645fc354ecbc33d7bb65cea2767020d509d9bdf4de
SHA512 49ee5d85e927c3a9acb2ade005ef99d426848dac1a700b10b359d99ee33072831d53935e086a1c5b45f2eaa013bb3fa5de5e7fa3efdcf66985a5b29573706a63

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\8.1.0.5236_0\images\action_panel\x-icon.svg

MD5 7301d2e8ceb505be25e2d20ce3c92466
SHA1 46eb43711906065f56f8d97b38545b61c1b0a6fa
SHA256 40f3837b4464532b4a500380fd134826349a87c3c92b2f329b82da8bc3ce9246
SHA512 bf1de37f714e80b175b7f86be8f1607aee9bd67a3d42065f9e8e38a8c635be5e53263b86006b883e492198a1ebad668d91d0f849087307c2a3d126a3d96c9db4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\action_panel\info-circle-icon.svg

MD5 16991d6d8d07165a6bf5921d48a33c4c
SHA1 107bd9d4dfbf3c50a080d7cf16325aff0bd4f7f3
SHA256 c1f809b57c384262f0289aa2049a8fb206f897361a0b62bfab8c8ce4fabb1b2f
SHA512 230d5eb8c61dd916bb74297853ca8ba75a9e837a823304f6ab194c1b4bbbe6379fb2799cc879e5eedc3947e445ff7ca37910ca87eef4bf168c73b05d271cf0a8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\action_panel\ap_jumbo_rat.svg

MD5 7d7baf0b5707fd387853c8eaeb7b2fad
SHA1 86622c1a7a867226cc9023aa6f810214b5db2b71
SHA256 3973725865c3ae769d586406ae0b8b2dce72f3e9ffc5c7d4ecd713fa4bf4807f
SHA512 a07b6959e16baa67dfc1450c535124dae50236c6759f35e4180b7bb8619b3c52357557ae63be5a8ed97672fe28c2c55bca647f45d0ec934d41688f15efe68005

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\action_panel\ap-overlay-logo.svg

MD5 444999a8e3a0f392e6f1cb935d89dd8d
SHA1 1c8a585bf725e32acb8ee8641a615638ce5ef33c
SHA256 d852932ea3383467c93f17faf05f90848b124c245c088cf67b8f49c0ec929883
SHA512 4247aa4e2f9dced3816fec128960f21e082e9dbee84b439b7311a07836698264860b9d47565add576b25a0ecb3e48fe904b12b24aca7a8948295c929b75b45ad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\advanced_protection_signals\scan_for_you.svg

MD5 a253e8273c7184e575f769d31b8ad010
SHA1 7e6c1d0277aae08b2cf2a8f7af57a668adc60077
SHA256 19227e7f909b6b97c5b9d0f9ff2331d676a5a639664a7b25b3498d7a53187be9
SHA512 233c7de0592b1660559f952408560a6a37be46ecf438d207154af54adbc2faee1bfff0bfdfcd3dcbc99bb7c9a144e3b32898e6a742b6837b721aa60a3a2389d8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\advanced_protection_signals\question-mark.svg

MD5 c32451a00fadef2efa6686e01020243f
SHA1 266282c4ff4239eed6789b4643c589b85e040a50
SHA256 0b2b264ca5fe4820ec901be1ef38703edea8ba8c971570efc6b8015808718751
SHA512 fe04b43ef03600103ea481cb9a46c20da6173ff27255baf463f694d7f7885787225e4c90fd30d66fc2d60c448f0f0b80d691d60e17096afee3f5c02a1478b3ea

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\advanced_protection_signals\mcafee-logo.svg

MD5 d140f7d6a0eafe2262be880ae0ce776e
SHA1 3f0d58592bf919ab021ccf516ef8faec1ec8f23d
SHA256 5c6069dab14ef36a0903556cb9205f17c82eda2bce30653955a5132345f65602
SHA512 2318e87f23e1e90c65072a427a0e5cb5234da9bde6d9c571597cf67f83fe5deaf941463404715eb220c0b038e6377bac502e2543f6f14376802e485344632ddc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\advanced_protection_signals\close-outline.svg

MD5 1cb98cb5d4f511bdaefa90948f267841
SHA1 7d6d9e297471536f1f3778dc2a10b67b3e7beee2
SHA256 0f2927ecd197e38779e06c6bb46b748dcc7f3a3a317ac5e68c5c03881e32378c
SHA512 0ea99c682884848a35d329ea03363c92b2099077db7321397f2d6e26e23a362d39534eef820ff45781b9a0a875d2ab945f321122c07aa5d07a794718a90eaf85

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\advanced_protection_signals\checkmark_bullet.svg

MD5 474522e4e9d5e6234dd620fcf9d0fe54
SHA1 e3ed75af7bf1ee444f6de9a55dcd6d83d29d89da
SHA256 2818f27403cfc7e148d6851ffc7e5eb483ec4cf1e435f0130d10ff9dea6457f0
SHA512 8a2e6733e872ffb5eb8f287e1d0e51d9e816e89f75111c957bdc50c5511e46d52bec96859463b93f97fbb29b5bc8e82c517f0de198345d3470d0d4e0299f7896

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\advanced_protection_signals\checkmark_aps_signal.svg

MD5 347fcc52fabe187dd2874ac17cc338c8
SHA1 8dd274842efd21cd8aa8a74e0b9a9d8f84d7908a
SHA256 8c2964ed5a983edc6c61d53dbbbabef568f47585da92b1ba82157a3863e66244
SHA512 10067023d68903d6ccb655e93525b81d4a11990ec3a7573bd649bf44d56daeb2bfe43359243b6e33cf88dddf6e9dd61c0bdbbe9277352bca4d087df125848ac2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\annotation\yellow_icon.svg

MD5 2077bf5b959e912ec79cb5c860e5305e
SHA1 d3f994e9b97aa55426262456a86f98e7a7b52b66
SHA256 36c77c784525e41189abc95e8a7fa29849b3ebe0aff8581a57956e4a755d661e
SHA512 1035bbe8a7e4d614a018a275427edd45f018c8faa84aa9762bc0eff3590dd051f17a0bf04f083ebca90de3672b7cc8491e581ad1d661812c2618aa044af6ca34

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\annotation\red_icon.svg

MD5 6874abe7a6d62d5e2c1861fa95c66b2f
SHA1 bfdee904fc9aa92bfbb705d43356b66253826e4d
SHA256 c3f07a1bea96756dae1182ef31bd63bf02fba89d6e49165c3068d4b51f75a53e
SHA512 1786572d3525093563f60b344641ac2b0ed81e45b82220501299d3f41d5bc9bc3a0db40709e173555047f55df5e92f977438942ae35f984e73187930018d4e33

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\annotation\grey_icon.svg

MD5 fecfc0c8d736d8ff1c122bc2365fe149
SHA1 646e7a3bf5df61254e990af3f2c9bd5f69e87729
SHA256 95064660d558235d12132eb7b9e5a13bfac9c41058310a0f6f0a8fabda426efc
SHA512 dd77c12623ca8173fb5848671de026a75e704ab5b194ec5f80e4344f741502598702e74e5b00f089eee3703c789ff83285b0564bf8ac852f437c447510b96989

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\annotation\green_icon.svg

MD5 444850203d1734f8e373f38848fe0b02
SHA1 0550b5e0baea3a64e8aab94cfa0474ef2a9a5cbb
SHA256 354bb055e779ba141e877976285f98a2bef88b5920631980cc02b9bd282e479e
SHA512 43559833e5a54df05b6476c5b973b6a4851d09c5f3d00cc253ef1f1779b6118707b7e4abfc5b2c61de20d52df90d5dd4cde937b6bad86c96aed9dc3145d39bc7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\balloon\yellow_icon.svg

MD5 7040e9073a835f3d857096fd5c6b42d2
SHA1 2a578c98a38a417cba8697c43451c6d584f13687
SHA256 ac7937afc52cf9336e3459055ae1407617b6d7ae8a253c71e90b1fde6885fed1
SHA512 aeba788d17f3f083e893baf10a92d44d608b3efa2a433ba4d47278973ae869da9ad3df37d8d5edd5e84ca983893c2bbf27adabb71c604d43e4929b20b2956314

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\balloon\red_icon.svg

MD5 9d8f6bb24f4b6a8ee3fcded82a37b161
SHA1 82f9ed29cf85548888bdacf1137ec129aed43bc5
SHA256 9b2288d7cfed9b567d6f6f1b9f3f7b1550fbc9157a519323d7ad4f1eaa84f5fa
SHA512 d5bc008a85c17cc4fe30e2be7ddad9c046848cce1ba0e0446d1d5cc38559effac802ae5b5cc5ecfb7c2e95d2c0615d0af04742568bcc08db7cfc0997c3b9dd79

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\balloon\logo.png

MD5 b90992ca471a92779e6bfb4c3f19f354
SHA1 f50778c2068149ece08758601b157f24002e5e58
SHA256 0712a74a294be497fa3c8776e26c12a1193c8621568405c0fc9a4859e065f396
SHA512 2166109a4e68759d6515e4d893dd5d6a65187450a80fd47e4a8ea050e2ba5f0326c8ef9c54db443e1a81e8d8343c67795cd4e3ccb6965f23317c3f2348a84be7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\balloon\hackersafe_icon.png

MD5 49bb82aa46e9383807dbf1fcb4c5038e
SHA1 79ef500c5bf345e0b4fd7c2b9ce591c855960df9
SHA256 c344e776f86f369d4ceb7e38250f0626ee52967943620fda157d156ff0941ec9
SHA512 ac151702aa332ab43d7ae867d8c70770a48d7d5514a992eb348b39b0514a3938a081ef5f4beb49d1ff4bb95a7c0f768453445ff720a05c1011ccef0ca54d0dfa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\balloon\grey_icon.svg

MD5 f17cbfe43840090fe3db39c1817cfc28
SHA1 4644694faf769a48beba1a4c29dbda5c1bbacc4a
SHA256 ee84a3ae6209694503a0e7b8c8a52af52c30adf0efb33e69d89e977d8ee6bdcc
SHA512 fffdf486dfdfa7a68cf3cf15ce95a2d6872d9b5ab7af444e86826d46c7287bd4fcefb26e3a096e2893ff8f7f4ff317c636c08412338166f931c36f87551eca38

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\balloon\green_icon.svg

MD5 eb73f8788c1708065a7dcda2fe21dffe
SHA1 c09f41ff45007c4f3cb208585a56fa9d4ff0b2fe
SHA256 31d5db151bc0274362b76935a80f1e18475a8766a1dfe6acdf5f7298b43f3a6b
SHA512 5984f95c9d6d5340c961ceab6e1d906f94c20021757913b83602b2f9e2db243ec4dfa90a26b76974bb1dd43bca46c62ac9ca33534964727f69d4c2c69e75d71e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\banner\mb_page_banner_img.svg

MD5 486c4892d582de0dacc7c47c589587d8
SHA1 65fe19a9ae5a988e4f74e1ff22db18f7add1efaa
SHA256 2b03deb4d0f2f138a40cdcbf953b64c71a09193623b45e12ab572b5f1b94911e
SHA512 8f3dc1be83665ca7cc525adbb007094135c669e4ef4f481d147bdfad12a2c30d28c5c0af2abf1e50df2fe217bf0034d25d34db14b09060d2b98960310412ec32

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\banner\mb_banner_close.svg

MD5 90232aa36f6e52e814eccb4c2702e1a1
SHA1 116b7ffa63d907bc8b929375d586a6105cd75e12
SHA256 580ad10d7498531238915332142d9b5d9cf9ba285fc8ff78b4f1a1cc5526aab6
SHA512 edcff6e99e88c20d89faf3b422dc9914ee446e92ab0d2ce70961432e859cdd3c89be470275c1ab1582dd84d2e2c3c43d860b38579230c85dfd04c2f250c3251b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\banner\mb_activate_banner_img.svg

MD5 2aa0e012eeaaaee0416606e9c3ece661
SHA1 9b3e32156c52f9283b3c3800c1057ef2082001c5
SHA256 086c812859a14ec07fd40f7886dd5d6f241b2cd9abee495f5b3a666a973ff61c
SHA512 5dcb77f3fd12c9e24718c5456d8149ef3979e8ead05d62d8f37fa29f74fbd4f5dc17e365b44e9d8b9f94166d102973b5f4c28576d4cff566296bbbc308eb5c0e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\banner\close_icon_white.svg

MD5 50d1122c2820dd23bca8236a7dc961ed
SHA1 d13c17cc035a4f753305688b468550b7cc16e921
SHA256 7498cb98cfb650e2c409794e7a3eb378f83f401821fb90e062754a2ca2835fff
SHA512 7dddf76bb86161987c428edc782cc7f43fdd813a60ff58e1f37750aa7be5809b763654f731ed187098bdb1f82199f219abe9ddb31f3aef4f6429aeea845bb7f5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\banner\close_icon_black.svg

MD5 d94fd7f63dada80edb405ea3eb056533
SHA1 d473fe5ab2c9dcfd5073fc746fcfc1bcf8c132b8
SHA256 77f9f86eec6b539c8c6c7abfa8b0b58b7463c2eec86ff4d732fba451ebdc2f58
SHA512 24d4bdd911475493cf1dc99162f68a4fc8c2b787c445277b3e8430d492f272445dc7952babefefc027b304a7f763ee3a9996d59351ce52625e40103081f39258

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\banner\close.png

MD5 c2b58e3a8a5af8b740a61e4c054a9e26
SHA1 5bb475c29dbe19a78ca2135e5f477da375b5018f
SHA256 2df3fa9311562e80c73708e325b23a2538f2e9ce9c1315de4f459517272e0b9d
SHA512 ea35f9f1f04d55d3b55cbe2df356e2faf9d4de7ee97976c53c06155e36481c962e155a6506e0dccbcb948ff04c1c803a27a02c05a0ef0e10d0c629b3a905f39d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\banner\ai_icon_white.svg

MD5 2f5261de969a350c5a96fa46ab8b146f
SHA1 f4c3dd5f91d54da9f2fedd9c7770a6ca35516c85
SHA256 bc73fb46437c51e03044cf66de2b312bd31952025de41fe3d1949421589ff8d7
SHA512 32365bbde88698caf044bbf7525aabe6ecd5d367b2dad21ad3563e5ef479af4d9c02fde232d1d6ddf5bdc1eaf0794e05b67c1038614b75420d15f6e486b6bb3b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\banner\ai_icon_red.svg

MD5 b75e3529d1c0772ca280d4a01ec6578a
SHA1 edcd6f0b7180d231aaeb36da4722d7c7aa243d94
SHA256 b26bf4226f19d52435f94d51b122f624cfb9f2110add41f5862e54171271287b
SHA512 1bcd35276cc55e3720088cfcd743719f865c1d755f8cd7853859d6dd4157584ff013f31c8825ca7b9c7191b20a096d01bd0ba4a9a61d7b16dd1185f5b1f787c2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\yellow_40.png

MD5 a0cdbcae4006b221911f15fabdf28896
SHA1 c70708f133c52629ce389191da78bd2fbe7cf692
SHA256 1d9231710b2f4f3bb8c36ca93a02262ba8d2861672c79f95960dedf9a15879ba
SHA512 0bd400cbba5d6548604e9936d1db7a4fdba28c6333ab6f1b41ac728e0c37ff5c65af112bf8c3b600ccc6a411353b56294fdb03120c2f0a4dcf1a308343a16a75

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\yellow_32.png

MD5 ccd1384dacb82fdd12fe34ad50479933
SHA1 66b271d08046b637a79c2081ad3b28dd4ce9941f
SHA256 90a6f9e02fec898468fa32a9ddc51443fba828362cda8082e7089705318a6ab5
SHA512 7ae0e187a42c8c892b10727f3c40c9ef2b1d8d8c4dbf83a9c2c2025a7ce7f9c4d8bfa566ee5d10abd6b21bdea46d3109ab6b256d15493f4a3ee9e1c91328d36a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\yellow_20.png

MD5 626fc8d00fb42160da3429671e641732
SHA1 e18c2363a7ed0f40d764b8759da5e3179caff3d2
SHA256 836df926c2b31d262487bf03d7d39aac84b1e6016c6102d585f1590f8b3c7a83
SHA512 7ceae166761a5a06ca46ba61e0473dbcd03c457037ed68d45d7800737dd0629b6fa281703a1307ce49f4fc73d123ae74f29e6fbe48aadc9f333175acb05614f7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\yellow_16.png

MD5 882f79f6dad6ce52dd41f3996e0b2c8c
SHA1 ca9a262f6d8c45fcde2ccd174ecd21fdbff848a9
SHA256 87603c2520b498e090eb1feb2253d5f982565c958f80106e16d58e9f6411622a
SHA512 54e521086012cc1f9e73ca3bb003e6bd22550e036c2bb5dcea6ada9052fe3b96d7f49decfb8fe7ba6c223c7d47aa09d3b905e8a3530fa26ef886fa064ba47f25

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\red_40.png

MD5 ac9e077afb0a4c3a13d92992318904dd
SHA1 43c0a522abcb58349c4fa21a24a60fab6e581569
SHA256 de4fa77630c39914c178a24b44edc266c84c2c8eee14683a35b3bb083c83b3d7
SHA512 a0accac7a3c3ce3f50dbe22c57fc216a15cc72cc65ce56e1352f7d8061b3576dd1881bd78052ad1c75ceb28eddecedaa6b74d557895ba164be226314e99718ef

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\red_32.png

MD5 3fa1923cb874a4138b1b07d83ff989be
SHA1 7add70363058af580edc3395c62ce1eb9206ffeb
SHA256 0734a4e584b57ee2d712fd41c5c14e8e24803cd170bb47324de7411f608d53ac
SHA512 398c815399a42154ac1dec13f47898fa0d9a1bd466309dcda13ca3628812c154c217e2e7559e90e7a7306472c8b8c05459482410f5cf2547bcc7902cd443ef13

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\red_20.png

MD5 279a0be45f69e5c53f7424c704c825f1
SHA1 e3352d8356a4e4886e28bf3818719fe3a35f83ba
SHA256 5e3ff0bb95c60b49a9c1a91f473ba6084fd57a0cc8957eb54a2a0356d9601a1a
SHA512 8370b9392fdf45e19a5f547cc04d4868df235bd7af1b5e90452418216a7db8d377a25f00305625a7408fb14d2ea243686eb7f9613635639e4930d1ba56365d24

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\red_16.png

MD5 f0df6f75d6f90b2de500837c6627db34
SHA1 212b109b779a0885da08a0959e27c68de4aef043
SHA256 9080fcc550cad54f1a7c5b559898ca69ab9b3d762f2ab0fce0a65f5c8ed943e8
SHA512 995d28a813940b4362814670b9b94ea50bfac2eea20d26144e46e71e33796af19136c81c683fec9347856bd791f1ecf5baccf0c9bcfb9446eb0276ec16f1a83f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\grey_40.png

MD5 bae59237da0bbbdabcce1497df6ea17e
SHA1 41af46bbedfef67ee4b78fd0a9c04f65bec08f0e
SHA256 e1eb0be733c2f45a2ddece29908830c197622a130fc9ae6a1404e01a3d7c6238
SHA512 f7eaf0862a947ed712971976f492df813d5c389322aa500fa2a1c5e9af0dc8604674b31c98680bb42ea111451d06c6ed8e8a2f20fe49a79e913c12a866305289

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\grey_32.png

MD5 95436926367c0138f001ddc4361bfedf
SHA1 88c0e3b0525bdad6ca53a17d2b8a3c750dc9b61e
SHA256 8e8cab2fb80826fb45a9db3e1d48d05e3fdc208f02a35f68e8f26b1df841ac82
SHA512 1d5d02112e38de9f81ddf9b13239082459814e16b81422c3872cbce3f4e51b9862e8a4b47bf53d15d4615f175fc1877c35617130e916a37376b81a05fe2ef007

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\grey_20.png

MD5 2443e421470af435608c99af44852157
SHA1 ce014d7d39e19f21b63acdb88d6778d3b4c643fb
SHA256 861af3cf0e4309b3e29b8cb71b6f031c1fb956faa2dac2a38e24b7c29d426c75
SHA512 4e8482dd242f2fbf40d3d3913bfa39670d411b7da948807b76c4ff379228ec5252c297364b2c4f81fdfeaeb5d813426d48b51d02b5ba189875d04fd98aa142e3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\grey_16.png

MD5 9296be76cb5d33fd677e956eb01bd3d9
SHA1 5a07cf95bc611cc7d6155175e2e1b3b94a44f25d
SHA256 876810fdfb23e4f010e10566b1cfdfee8a7e9d0f46f7b525f1a9d56948ac2394
SHA512 ee463e6c147d782776bca5e2667aaf3511eb9348f7cb4a4d461b624dd0917d27080f6c76fa11956b6ef37d40c3e56acdb222437f4f4e845b6a52cea42967bea8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\disabled_40.png

MD5 b7c6e336b833c4ccbf5626ba167c9128
SHA1 b37808e3fb72ce2aa42750ea740f623b3c5c7455
SHA256 56953173a2237381de9a454fb2609a3c1eae7636e2dcb86ac497b63600b2f661
SHA512 9a059cd1b70415a0f38967cac5c70867d80561e962821511c4d1f15bee213674f646f6ef342b5c7085eb492b1443ba7809b4b062e9f35662c289c5edfd658a9c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\disabled_32.png

MD5 453db4da9e01eca0a7b8d2ca23bac936
SHA1 a2aa109281a38fde7551702cc4716b6e7b59e3c2
SHA256 c6e05c900b520ac923116c022cb2f524e3ec8295cf7e6d6b07b551eae90d8062
SHA512 4b8f2749424eb278761bb33923d53d3fa4933eaadd8f0f0dcc020d28995a03543da78f99a433cb98b7d8e1dd972c3dca717bb70232e9134c6e697d013355cf0f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\disabled_20.png

MD5 c4c8fa194823f8a6bdb4ad41b944110f
SHA1 064160fd6c5548c665f4183faddcd1277bf7b7c8
SHA256 5eab6a9e0eb02d50c2af920ba4f3021975c6a296d000fdfaff04664d7119c9a8
SHA512 b310fd0390ce28d8bda018d279c2c2e5d09c0ac7b98ff2eadbf98875c17b9d96700c8c70195ccbc9183815ee36284da6cce95d439d697c1f4cd85e670cbcf228

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\browser_action\disabled_16.png

MD5 3eccef0297c8839c8701d77db6f74e9d
SHA1 0dc8d9bb5a81f432d15d05520b611fb3a2eb328e
SHA256 1cae56ab357f8c9ca1a47d60d1f2b2e3a32c41b7d45af55b7867dc7b4342d0c4
SHA512 8974e1258b06a28444aaa9557cc33a74e0adcebaeaabac7cc86e6aa110481e04fedcf58494e310164abdda265bccb25c975672dbc9f77171a2b6a58f3714317a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\download_scan\webadvisor.svg

MD5 aa94fe6f7192aac14be72ac6a98b437a
SHA1 e996bfe46d56845febbf638514edb6fce8457c8a
SHA256 a4279bff1bbaaaadb2f89b2dbb2c77be7daee304ebeb776885607bcb4d8613d3
SHA512 4d0ca0371558326bb18d888721f923fa83f793dd9d53b7d98c2fe7972fcce0257bbfab150c284d26d10648b2df92e8dc4cdf89709c0d4c93bb336a0fbd9003b6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\download_scan\seperator_line.svg

MD5 20de99f72eed4e646c823f6683f7efd2
SHA1 98d0df7f2426563eec5584da4202216fa3d929d8
SHA256 3cd89daf88eb5ccd1fa1054fd10a872d0c01e40491125d20ec26ecf96712c573
SHA512 e3433a4879789a787f9409a3736098ac6c181d33b22d7ce830a0edf49409858097ccef28d3bfac71ed26ae6adaaf82bb52557c2630a90baa63f7648955935a09

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\download_scan\mcafee_logo_white.svg

MD5 7be675b6e967d8d55993ecc5d0685e03
SHA1 1dbc9a3a299c6d88e5a51b7fea4225cc2dbd618e
SHA256 855cfdfcfca492037c9bf50e813f431594eb408750759a644c1ded9348c07559
SHA512 d28a32bfa95dfe4ab4cd42c970904b8f73f59af8f0ba1d7a2f257af2f5ab93207bb18a81f98a2025c0ac83535f32b7ba8501427cf2f2140b4cda11911b2e909b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\download_scan\mcafee_logo_red.svg

MD5 23868054d056d5052692b09fe9e4e5e5
SHA1 b3e5caa5593e87f3306afd207ec765cdb5b6ae48
SHA256 634cf5fbabb8573d98046d26efb66556a1d38a1ddd27da51e3187c785c07114a
SHA512 7cc1c3ac3b86d1bc690b1e4c86359de072cb5f62608b805ba6a3630a8f3cba78447f115974520eacf312b68be42423431cce695dc6f10ab763fbb5aaf77422ef

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\download_scan\download_scan_icon.svg

MD5 e152a06f544c2445e476f9245721cadf
SHA1 fe537df1b8ab747e4f69fc7b90f6e65ee57cb7a0
SHA256 afb3cb99272b60d9ce409d2db3584f29db0de5e50776db99e9118f9fa18dc943
SHA512 d2424563faf06896cc63849cf8418423c6470e36fbe23db0549ca74a927f7618bde2ac605e795a3e553941471975006eeae1b2f4a5aee12cac7366a6ce3d9dc9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\download_scan\close-outline.svg

MD5 854d9f4841f3fd6b71c8f0c216590549
SHA1 c5543d1eb7ecfb19e24e5e26d070e26d02efc3a2
SHA256 9d14b866099d21c67b28a6c870f3a4a535f81b88bd97102c32edd346d2f15868
SHA512 74278b6d68184c8e9d04fe25b4d40703d04e4d085df18a3baf0f03bcbcde20e4a1761a7d68abfe442d661ceafcd33bfe46a47cb22ecb614f8c60e1e28fba1129

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\dws\scan-email-logo.svg

MD5 ea6e8b4848adfeb2eaaa27de5962fc37
SHA1 2a0edb8bedf9d57bf39e8e028233407ce424e538
SHA256 baf530440ab599a4db465a9e41d2da8ecda41f0218aca01e9aba98f3ba81e705
SHA512 83f32fcd1e14eb840abd57ed5aa11eef415f1b3981f2efb227ec5b968388f07052d1c434f432ec0a0c337d257040928dd4efbb26aaff0d88c825c2a290049063

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\dws\external-link-logo.svg

MD5 52acb8689812d4b46cb56a248eeb9f65
SHA1 dc2cf7c46cbb87a917fdad6904547ecca0871aaa
SHA256 d3d5aac3a584ea056f6b372c2ed6e923e37c11aa5f7a529ccd0dc8ecfc2874d8
SHA512 af09ec04dabaededb5c40cd12f3849009e7d855874ddece241b1bc073324f9d6733419964c5de1fc5b7c82b41522edf3983100eabb5ee574575a085d28180dbc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\dws\error-fill.svg

MD5 3cb989496c8ddc97be225c95cc37c439
SHA1 508df201964be2d37feb6c6888c53cc639520117
SHA256 d19b7b0fe7a1344005a9fbb4c43e62067e4a7aaf648d91f6cc20bc8489870ffb
SHA512 0f2bb1e8c9438301b7167311baa2eadb55ef3c6a32e903f99e9b461150f4e5d4ca020e4ea92fc7623cf45f408a7e088f8fbdfa5b256eacde7566124cae382720

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\dws\confirmation-logo.svg

MD5 69bf1ef2983de97f65c4aa42e7472f85
SHA1 b734db797e7b53014907831b6250573a2da5910e
SHA256 7f3512a5cf0022bac65b5d70b92b63e5e92066b748371be9ae293f8000a2be93
SHA512 cd2c4c803e702b15dbec84bd2cf1dac6c9debeb96ae9a9ac491777539f9290ed6eccdf9f9595e52bd154770fb0bd66c7558c185a300bd325ac668170b5d10579

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\ff_policy\warning_screen.png

MD5 7aa3f70a85dc324c718aca5f5b7550fd
SHA1 5ea50652a9f1f03ef952b3bc8521265a9886ea6c
SHA256 82689d858aa23889913b86277a1ce2e93e61a2ef56513fa982029e18caf3ff44
SHA512 94773f73fe61e8c5b44807ca918c47ce6c6761c849b781edc26c89dfa36f7baa477ae900dbabf1eb2279152cb7b1bf76d0e200e11b3b9e2adee3833d2ccf9403

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\ff_policy\happy_laptop.svg

MD5 db6809b78d2ce694866854df42cafe20
SHA1 f194c987b33c82fe59096a4855570301e275aa73
SHA256 a99affc0df5814b03a8992d86bf91de675ff5e8a15ef45d3a536fc55317af4e0
SHA512 66f3f864bc924f7b3ba6e29fe02a783ed4e13b5c0fbec82c381b3f71919f7d9070fd2e912309192695669b929b298f0a1397ee906f703fbea1947f68999e3490

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\ff_policy\alert_screen.png

MD5 12fca4c20c37942db74987c8a0fd01d7
SHA1 52de7a95f2af5d4e529eb9eb5f62600118e43eef
SHA256 3b1a9b3aa7efbb556e23ca353cd0d05cc82384d411b4e47567f8c6968c69c3c2
SHA512 dc78ed1f6e0c23d8296c84680efa294c12b2076f7fb7cf4a8cf17860e6a110466bcaf6613e8f261e93fed3ddb3c1cf89b5b5003f4a5c5d1cfcbaa7bbc790e7d7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\how_it_works\youtube.svg

MD5 da42649358713f7d5fbf23c73791c09b
SHA1 0898292dd6f3ba291230c8f79ffe0f52524ae91f
SHA256 92bda42a1ec1032c7ccd17c8c8851583f6f1caa4927db744c4c022f69e1717a9
SHA512 de0d53ad1bb9df33cdcd0cbc2ddac12a5e0aa8631bb3e8c9d337df32367d2576c7a2e770e538e1e7dd912835e064db95d78c21767c6531f2eeb7ea906f325e76

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\how_it_works\urlhijacking.svg

MD5 bc2d8ea056bdbd741342cb93079e96c3
SHA1 8caefb53af0b68f8be2328c2f4cd5c78535fcd14
SHA256 00f6d507053a8747274debb069c02501642d102e597cd5a27c3daa56568e69e2
SHA512 df05ecdfec6549c0d1fd6d9d29a822be7b69f1fe11307d9cc257ed1b9f027f603c589dccfc810b3e05c5326b751dd70f7d0f5e07d8d4c39bd0dfdcd6e1fecb38

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\how_it_works\twitter.svg

MD5 90870165c0eb49b66ff6b7a5854f2dd5
SHA1 75324bc9579b0c3c15a82c7cdf070857a64fe99b
SHA256 78c333235dfd5ac6174fcb5e778e6a3b2d6a6f3fb1c2e62f272beaef95622fc6
SHA512 5106df2f9b97e531acdcc2eb6a48e9a81d6a99baa4644ac1a41deda9ac14f9e5972d5c1c385c678094378f6c77029d0e585e69dbcf8da7112602bebd09a32f60

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\how_it_works\socialmedia.svg

MD5 ca93a52102d359a45dde07653df642d3
SHA1 dfc0f23bfb27a3594829e3b91c5ea2d504211fac
SHA256 f0e67190ce067c30af0039bc1a62ba5e33701644777b329d29a2e6c2d00b00ca
SHA512 5f0c34d58d342d9358294b042a2325325e75dfd1d929d1ead9243a4b4750b46b3350140ab724ab849f2d722fa5dc2f691e6ddabad5b89ff30eaaa93de3331562

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\how_it_works\securityalerts.svg

MD5 3102cea620263b4ec9550765f201361f
SHA1 c7a6054dbbf5fd799ba4bb53a78fff8a4ae7d6be
SHA256 0446b3c4e074bb1a0b43ef9a655273f6b5033d84970ea1802a21804949d22c3d
SHA512 4965a6e37ad9f96fdf6074fcc27f0e1ba041b7a9753bfb5071fe807090bc654cb5aa29814a2b771845ec3efec560c0f9d823c8bc91d7cdca974c180142de5c64

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\how_it_works\saferdownloads.svg

MD5 535cf3e3104ca11b733ecd85c288be4a
SHA1 6204d97f515832ed77cd522b25fa197e3714e098
SHA256 e25cee5930fac5d01e23bf80a9b2159dfce55d0b99e0f001a4f65433b9eace1e
SHA512 cd6199728b48321e548366629c74a2956706a3e60c4f5e748a33b3d925449ef2b0df18ebfc4024b8d43072cd909a16cd9ecfaaee442090dcec62be58bcb7cd5b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\how_it_works\phishing.svg

MD5 d5ac8d0033d0e73693484d210a1927fe
SHA1 ab5cc965daf2e715c9f95fda886cbe32bfe82fa9
SHA256 fc0d125482a0b5e7a003d92b693c636780e724c5a79db36c941a05c5d42835c9
SHA512 2f0321266f137372e6fa49e8e87916a3d109bfc7556948ce745736810e27cd3e293e4bb131f7cd93746fb5591dc61333690a34447738d5982077c9694c22e291

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\how_it_works\facebook.svg

MD5 f2b7c996810fd9e7b0698fab23df1943
SHA1 3bdd4cdae9379d8262fc5c9c3a58127f8b391635
SHA256 b90b8cb8fa98bad759d6868b3cccbb99ff3404e0fe5e4371e5b422caaf95602b
SHA512 5a7eb3a3cb94b3eb21e77c0bbedb23ff144dc110e3b72bea6e5cfb22b34761f2c155b4392491c903595e0b9870021a23b314622c717b6150f3d4432a81623a14

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\how_it_works\background-human.svg

MD5 92b7e1ac77450e5eedce133729c54eda
SHA1 952f069f83093aef8eb2bb80fe76ee6c7828fd03
SHA256 77fda79cadc42c3896cc9f8912cb0a4a31380944a8220aca7b51cacf33664b70
SHA512 44350a425f2758f2c46aed2195c99ae0a32a4ad3da3d0ead6cfb42e194d4853c018f012dd690d377ec4b9960c54cc88effa5543f6e6004907d761391da1de1c9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\how_it_works\background-bottom.svg

MD5 3b1a1232507e6bd4cd280944a71f1471
SHA1 171ae3970304d1911ddee40e47e5627b2d4fa197
SHA256 31ca680330d42c3a21b02b0681f077a7d0b7c9530a8236708ad21b917a0a498b
SHA512 baae280fe94e6726c879bbcf450f1c23e6a417b3d37a0e1dfee83980765b7ca7bfdc5c8145902c150384a465cc07e8618593c6019808586e9c7b4109c75f4a25

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\iframe\diagonal.gif

MD5 aeeca2f21a1eb806a8fb1b305cbd8490
SHA1 1eb1534778af34c0aa2d6ddedc923e7dd4c9eede
SHA256 ebe37863c45d88a32d3b15a220a6ba3c18ec46271e4c675ea6b6d2330a6eff21
SHA512 68930ad82e8dd9ee3c5a0ca85d9b0e06df7f21ad36d33a8be516787049146b18239200f0f7600288ecefc182b12329bb1a44766f30f9767e7b03f710214c3d86

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\iframe\block.png

MD5 64a5a282d53b093562d16c27d2fb0866
SHA1 2b5d22bcf322629447d8bbf244a632918cb37e04
SHA256 b7533e7192c16c92e0efec5e38bb4c9479a487d6f6334ea1878df4b0287739cf
SHA512 84666e2811babad3cc30b9c2e068450a94fa92f0964db8668aaa85a8cb33f4f83a535d1755e90040dc97724b36283b9b00d5478bab0de14398ab4b36c383d78b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\mb_dropdown\ic_snooze_notifications.svg

MD5 2060d707414c50bd334de5b9e874528d
SHA1 f65cf8f27e6816f1a8e9ff60c0365d017cb4607f
SHA256 131ec1a59139e1993c30fd3058a900754c9d8f9dc9aad761909dbb697e121a97
SHA512 0e505955ee66b0345a8683f40a2ecd42f3dffb8dccdf5e7f5f44e6c38a5037629948b4d111cc061f259e8d116f0cfd3bb9dd1ec2bf49a4ce58167278c33d326d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\mb_dropdown\ic_notifications.svg

MD5 2b6d200b766f5a3ddfe4529a48797df7
SHA1 a38d8403d73a9d73a489b9b3af5e808bf6664004
SHA256 5b141ce171183828dcd2c8b64a32329493161e231594436d97d290521ed123ed
SHA512 8935be25e1d2dc5078dadf08f39f4fdae19d16f426230eff4026058a975f1d74b8481d60ab954b5e6ce447319a0d57dc2e2b88411c8af000f9361256c16c2801

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\mb_dropdown\ic_close.svg

MD5 3e13e2105b39165dcf85684398e8ca08
SHA1 7cb84745208025e337f7d2d63bc7048568619b62
SHA256 a613f9a6f9bb09d76160c03ab2e59db5a854ac3aac61bfa3580df49c60e9ddee
SHA512 b1380ffaddd05810735fcf1c67483ec48dba5a6a689c309b7770797cf7ec6c045e9746fd07156ab793453f15a1ad0769a7c86b576da41667912b883b7fb895f4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\mb_dropdown\ic_chevron_down.svg

MD5 6dfc625c4dc5d74b20716bae8f2ba74d
SHA1 25fc7d2614e31d1f28749b7d854bb6785f470237
SHA256 9c545289402f2802df4bed38fa936e4a849f4d23b87730142322cd56e8a26dc3
SHA512 ab488e905eb89971077f6b74d2082a39f8c193930ba7c33cebd5ad6027ac845ba39e67f39217bfc8f7d589e5faec403c6431a7ba00db129e70ba803bba77b9e8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\no_native_toast\mcafee_landscape.svg

MD5 de2e3d1d3d340dd79149003f9604acaa
SHA1 91e26ec2db5f9895070565f12de70d034302788f
SHA256 3fcdcaa254e6b96313bad0f31acee9e09e3bffe596b6de855a25df4b45cc26c0
SHA512 45f0bbf386cdfbf02ccacd3ff17fbbefa58f0240a0981d5246a7346b26947aafae960887a58ad4d444342cd242bb9dd41880a5f7911c0f579511d1bb45615854

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\no_native_toast\install_native.svg

MD5 ba62dbfb7b82197469739cd547828859
SHA1 278833bb0c854412a066216200225cb708303099
SHA256 7d525193664c518933def7afb44f2d8810d24aaf940e32dae5b1777d37c793cc
SHA512 99d919032bf019297612b0908a0ec9df2331fbe40b4837246047bd9297fb0c2b864808d34f7becb441583da9bb16c677cb18b4734b8f07d425a27837909a9606

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\no_native_toast\download_native.svg

MD5 c8ef16b50a70d00e82fb1b146827ed47
SHA1 3610f8b0e9d5bf0819740f4a6dcc548bb804bb4a
SHA256 0674b07783bda3911a905cd35564a8d6cae9fcd76a1bd97648da8ea46f19189e
SHA512 158d1ae406add704cbd857d99424612e22349e3370d2ea0d74fe595686f5769f7e6c5f9e164ed43bea616e3d9a4429f5d6182441930c3f554e30e36dcadafa65

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\no_native_toast\close_btn.svg

MD5 2d597ec8fc3fd28cc675a767331d83a0
SHA1 5c7e8782fd64f471d030f4d20ea35b4b58c5f993
SHA256 a821b14cdb81cabaede76ccffc6494748729f561d243dea9be8b08423c3c5611
SHA512 dde4dce5f6f932a392f19f390b32faa7702b6364d13f7f92998fbb28bb3ab050a1b7549d067a05d71901c122b1431a3b4c0685d9f42f112d804af6a8918c50ed

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\overlay\arrow-up.svg

MD5 4cf3a1b20964ae2b7150ffb77db9d094
SHA1 99e0efb3195d3eac4b450a36ec334c1e14809a3d
SHA256 553e55b2d10285f54dd2faf204751af38f7f0da2a79060b5e82c8bfe2c2f7f31
SHA512 10a30f15cdb8a99b5d5d06a18f856a2d8f1c4b749e2821517cd0c91f373872fc89e3b2606b38cdb71916fc1f162a1e2e9a337b65f594ce9d5e99bfcf8f5a8d9b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\youtube.svg

MD5 95ab7ba91f3f8d8e331bc046bb9a89b7
SHA1 877b5ba3e36585db17043357cae76516df476458
SHA256 72f99ed3d833dacb35530d45fb5be816f02a7cb19d93c19762981b4001a8ca68
SHA512 f1aa009a36a33add029c61a812a68fd415a4ceb438e7e4561c6ca9eddf3d2d8725b6cee173e4df0cb3c9273c16d42dc0003568554da1973160d6f12cf7082fc0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\youtube-disabled.svg

MD5 1da29c03897d34a49a2859ee7e5144d1
SHA1 4305531e08c68d2b892d1e4eeb0e7495ab1b05ea
SHA256 59644e8db54b3d4a1fa8f71f15367fabb8d8715f8ed76b3f9c7b4a2b3e1eb565
SHA512 a559d95b5b1f6de463da0406a19e20c1ff9fe3ef42f6ec16d1217d86defe6ed454c7d85a0512e075c83f2628c520622e6c292c15a65ce230e77aece97ed2d76a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\x-icon.svg

MD5 3c501ad9f83b68417c35b0c6287d6b1a
SHA1 6e8c5f254609123e6b77e0b609746fce2208a51d
SHA256 993247a60eeb729732329d8a1c87683629195a55560c91c28bceb8ffc38482fa
SHA512 c0a9388af7dacfa5b24d51ca987f539e383ee3d2503357f5453812458acc0102fb13d46fc552ff3fb057056f271a369456f3037e9b9c84e3528bfbf7bf6f6d65

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\remove-white.png

MD5 b14973ab6e5372cba0d017b2555906d1
SHA1 f33f0f03cda1b3689722b6edc3b26a4447728350
SHA256 d0616a4d04f40964b1d64a6a4ce419f87fc16eaba8bb94156a66abe361935b92
SHA512 c04cff1f3353fa02940a8e56fac1c5b86a266211cecbc23f0703f0a16d30f9f4ba3e188e74bd11165bb6daae895a26c6d1df29651af9166d1fad1606ebec8cb0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\remove-gray.png

MD5 10a8b5a8a34affacae5ccd390b4cf437
SHA1 a5a7c0cab2e2531deeb0ee691fda0f4e0c0acc5e
SHA256 8a0ac48fa60727d3decba5b405df3acd05eedbefde23ecd750ef3d5bf45e754f
SHA512 ccb9a2f1be0f1a29c9f5c1146f5b05e23bc972104ef35959e726f59e302e288a454b6876216e8ee09f96c0f0999cb2eb695aee6bfc5dca58e0e5e158377a07e7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\reddit.svg

MD5 8d9f86a9a69c4e2362376ad038e02b72
SHA1 c55cd50ef5cb7120b40e61562b26735c0956927a
SHA256 ea22146ca6462024b2edf567ddb0b411e0f2da4838aec95771e375eedf7d12da
SHA512 0ad8c0981167746fa30640bf8dbf257cd1a5731a9de6667fced7e2e58735ba58d3ef62c460ab36be6974f7511e6582b6a4fbd13fbb71c0cf6beaa6040b921778

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\reddit-disabled.svg

MD5 8a54fb9d38e1072b28619e29b430cbcb
SHA1 7cfa6c000a324064289ceca1756886ed393e95d4
SHA256 2c0d774c77336d1359467b9ae86bb69bf3200814268bf4984ada050fd5a51fb6
SHA512 88d966c0a1f4ccff61897f1d14d5570322be7d7224add262c5965859c385203f46edc074a63f4c324e498ad1ddb828cc7310392b916f50daa0658faaf188425a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\mcafee-shield-pattern.svg

MD5 33a6b33703566cf94eb42b8af280aa67
SHA1 5e35b60f7ecff1cbc9c97a23b3a6bc3c3c429207
SHA256 d9b86ec7a86abfbee38265d0fa5e4fe6b5c09e3e6a8301f51269f18b7a3d4712
SHA512 eb30e52ad6181081388c41a490d8864b87eba34745a7d0f9343f67f8dfb86b08cf351d68835a4c2788860fd0743985acfd4d3f02ae1377f8e554583f412223da

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\linkedin.svg

MD5 3fe661e5de95005a38824476ecc23e85
SHA1 d6282115581c0e282cb0fa3134ef52ec45f5c1b4
SHA256 db2b2d6edc31e2eac165d11fc30df2932186e79d53ffec004a43225501bfb4e8
SHA512 449debfc95619b5bff6d8e3411e42918afe1269e7b23763e39b5f1205ae906b0e85aab3becc5719df016126a5d09e0ae6edaade1253625651f62e4f4aac6e962

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\linkedin-disabled.svg

MD5 e03ba80f2fa98e92241d24d881391ff7
SHA1 1d9c79c6878e022ca5aa08ed63760d87fbe4df40
SHA256 725140d10f0836acd3ea352722ab08c56d45e9f69a20133ec5429035273513d7
SHA512 ca73ada6655facb3561e30a0f8f71f572b8f68f765a7450c18ec9b533dc41e7acedaeb21c905d035beb4646dcce999b456744cc0637dd77f1d30b7e0789a2883

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\instagram.svg

MD5 8f4c6e3f3a5a571f7f76de7beb1054ec
SHA1 336e4ea41ca48b13fbbbff115ef77c37f2978aff
SHA256 1428af01f67f406ece2d31831f7e25d65d8eeacec04e03de96a9659d49a133d5
SHA512 dba346b78fcdc694b7c17659aaec336920e6ce116006d6f7f5fe17242e00a140d6dd1101ebdb052770c56c38de4964120e5ad0f374191ffbbd3a1139143e82f5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\instagram-disabled.svg

MD5 494be2e5f9239b8b4a08ed072d9d81f7
SHA1 9396526589a12e18e914c66902e0a01aad911bfb
SHA256 aeca7a435408051f8ac1be787fcc286bf422dd6d661a17155d00f2a5c1ea3953
SHA512 36accea0088b0b3a26adbc390b233a7e1d859d52dea8a8922c79e0aa7ef1f0cd84b82bc75053b5b98d4f4ac3b521a9456b73a96170ac1ee8ac30d8f6e302f417

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\facebook.svg

MD5 f569bfbf7409b40b64f3ece7dfe2582c
SHA1 ad1fe2a23418896651e79422c031e96d331ee123
SHA256 0f7450652e611e8aa86e8e6b3e89e00aff6f8757d7820828d94f9d7d04f449e5
SHA512 ccc663dd354e16a3b8b0d5a381d1e49f9bf4d315416e7d37be82dca722c76503166a2d226a0fcec82495dbc3ab42294c247c7f7fcb2195b968fde4d9f4d27751

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\facebook-disabled.svg

MD5 fe2b7520a61092c32badff400f00d496
SHA1 1735baeef0548ff304669d82ed537a9b6939131f
SHA256 2e6468409d66b796af3095010f94aa55e8d8c810947289ad376e4167d19afcc9
SHA512 4757dd3c666c399003a660cf5bf53b2f6fbd0c06a50bcd48e784ffa8510a4d4c4b9629d1e279adacab4f77053b9d6866666c7a5fbdabad2d96b9e0dc8b6bb67f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\checkmark.svg

MD5 8252bfa40d72b6d1ed58fc100eac6e63
SHA1 a7408f4145588ee8a7b444ae6f222fba7deef5b2
SHA256 fe4a18ba692b3fbf4aefd5512cc3c9eb58b56561b3079c56b1e2b101a7023902
SHA512 0ca4ab2ab92438344a6ec7eb00f71a2433b1e2fd88a1adc055edc392dddbdda4619f71305cda21a1169d7521360b9833a278a2f2c54f5dbcc9035143155689ad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\checkmark-disabled.svg

MD5 1d6686bfc594e62391c7d5c2b1b3cdb8
SHA1 a8b7d88d6f2e3add358ead563a022e90a8861a30
SHA256 0e452d7cb43d92add3ae9631e2a1d32cfa042efd6a04cb71a29d0166d21cafc3
SHA512 1bfe3117f6f9ba7f5597d960d63926daab167b2697d0f608d4074447583b617ef844ff2c2c467089b5ae0939654855cb1c5c76343bd53115c42d7ed828fb3d4c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\add-white.png

MD5 7fa9e475ab0f70f1715f97f458399b9f
SHA1 99b9f148d7dc68bbd28e410e8c50ad85c8206a5a
SHA256 e9561a833692998f7179af1a4909b3d38c7423970b2a329ca26d7470cba4d90f
SHA512 f5e4f38e18636f3581cd0b9f8f183e2e4fd6b34a473fc3fbd882c5c3371e0a5529950a40f45b854f388c19f302f2a011e1a7b7645c8a954d2e3c3397402acf33

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\settings\add-gray.png

MD5 290866c95a92068264d23970c501e005
SHA1 8c754920f13ef23c0fef5db8e66f871c0be3a655
SHA256 7c7a7933f67fd514d67bb717333d31fc280d0c0fb46270bd45b85ce9d38e42b4
SHA512 e65639ba538c43baadd64eefc0eef0631ca14941c4ba81cfcd625bf39e40eb528e786f600a60d63c2ab0347b01a59c50684d799fb7dd29856d66de42db32f244

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\social_x.svg

MD5 c5d67f046cde24f6b2653be12f8a0ef4
SHA1 8ef015c184c1ef3203f081b92d7ee9eb0922ea62
SHA256 fe1353a68a7d89002e60f01899e9be72184d09d7f1e32501c8da62c260f8ce57
SHA512 77bc416ac87792cd0c2eca5794a71ee80a454bb66c12ad59303cb98e5256a71755fd21dedae432d5b70b6a0dbc05d6bd072b64a4b4fe5dce29b9e05f9aec86ed

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\social_linkedin.svg

MD5 244c302f18a26a287c13375c24d84c8e
SHA1 1e88b3a0a541948481eb709a5d591ac3562ec8df
SHA256 3e21583b1074d9a3b217184c295136e17872f3fe9ed6062b3d1175be5fa57bff
SHA512 56442ea4b2a730d934c010d648abeeb79672bfb21be47b6edbb6d25605ecae0bdb273d9e8833a1a4e7cf640469c75379932edd5ac70b35f9f9027bb14ae02974

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\social_facebook.svg

MD5 4624a2e4b9b2ddf885c9680860523c67
SHA1 1404e5a0356f398fdce9cf3fb521f779800c0c85
SHA256 7c2709426e7cb36894d4874b94bdfe39fa051b3fa77c09b3eafc972232155265
SHA512 995e006208b6462f151a7658d78ec2a77276fbe25be1d1f6b13bc9dacd65f80c00af1d7c477671f98a2220c3b870faaf4df1b0e8f380c4c86d8e5429f2ed2ace

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\sidebar_logo.svg

MD5 3e58f3f4abc887f82e200934f8f2db4c
SHA1 59208d42abf2516413648488580ee82f5d84c609
SHA256 b9c985c56c09ccf318f5301c35a37d988bc717de9de21ae4c7dd817fa2252cab
SHA512 2488442b14baf25401bae9c3bb27bd5742a538f15ac4fd0cfb5e9eb20840651118b99d1afa9553ed4acf927352d63a5a11ded840e6a2772e6c0a19a0670da508

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\popup-logo.svg

MD5 650d3a2956d151d8cbb9b84b76f74ac5
SHA1 14b1fa01a91b5f47bf9b33c949c09d46fca877c1
SHA256 6ba2ccc2dd26ea71b6ef652fab7d3994c2641dd74c0228308c0ad6935b9f3249
SHA512 5557e53f9cd2d10fe05fe7610de5939a8075e929394a025d4c9efbc0725e56e3cef020f71306aee248eb599299f23896e432a8d906028dd2bd3b0bd94cc98574

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\ic_settings.svg

MD5 1dab673817e0fc5c863efb0793d7b1b1
SHA1 fe2dcdb5155c5db9754e4193298afc1b1dfc1801
SHA256 2552afc14c0d44d5ed40a49ce2e3c2ee067d88298cf17bde665b021fd16613cb
SHA512 ed02f8275776df1be8aa634a280a23053ba5afccf11781d957367310dd675605d0377c73ab50f254f1c24ab7fccf00e524d62d14336c724962d340c85c44ba7a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\ic_search.svg

MD5 712dc1e4820e4b66d1197182ae159f99
SHA1 639391d0ce8b0f7bab4bb26ce8216c40f7d0f3d9
SHA256 f48d9e4eb136bb945a50085e7cf9405c188a5b3b27973542aa7f23e699d79da0
SHA512 43caa1bf725ff029455b4e184da5251f9c2c49a9a0bf7a7da84223542185557215e06c574594832195f7b455bbcdf764af72f6283470e44e662cdbcdbf44ee69

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\ic_info.svg

MD5 77df97dd24db39a6ad87eab57dfce8c9
SHA1 e1ba714b7e572fd5e7fff01dcc2409c3993d5755
SHA256 b91800791ed8fac522c1087c0f3b3bcfc09935415bf2407d1d56a32bfb867b65
SHA512 ef898580e727b4935ae8806719b1dfccd3ff43b3e790d0999d883e9f5214a56cd3d662f5fd842870da309a46b1eb6328cd1b530ffabe7f62e3aef83a429b17a8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\ic_ereader.svg

MD5 c3a8d05c5f318caa9ae7669d77a39a4b
SHA1 65c3a56a6336aee4f618cbb0c5631771adc88fa9
SHA256 20bb95b2d1d0912a4c1f0981fa32cbc0e4306b2d4c7440278c44904935c7f4e2
SHA512 62552debd41c6eb1d8d97feb0eefa47d0a652c660c5c165344f4473b6e35a1f081ac2349d5f9ae04d47bd48e7360b7c958ba77d05c1d8ba25fb9424a944fdaf1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\ic_chevron_small_right.svg

MD5 42540256abb194eb88e97dd56de85dcc
SHA1 d712b984b1abe588cd71535adf19e139497a02e8
SHA256 0dfb82df7409da4b63c196f8937bf1490dd728ace092414fd82505f44b25a3b6
SHA512 6f2643941804f8a2051ea4badad4832ef5fea751585c8a250bd17a0df88234fc184938c52426080b0bf578dfe6ebd1933bd0e301d49dceb62430670eccd95667

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\ic_browser_security.svg

MD5 4acfdde68ac89ada9f7b57e11f16ffa7
SHA1 83accdd30f050ba5aeb3eca943eccaf20c8c496b
SHA256 72a5529f5d2435cb99ca5fea0a343cb64ba17536bda43163af9cde90f20468ec
SHA512 e08e7808bcb9b4448305f7d2015f88edcf2d1759ed517ca5c9e132e8d8f57e5886ce1855ac6887194adbbd4d14bd35ff8644793601cb1e9cab6df851979bec1e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\ic_browser_history.svg

MD5 d293c1d1191875ddc377b994ab1041c7
SHA1 6a5dc1d7c8f518b47dba965467d44d7268d015db
SHA256 b6104d80df687b685b290ec033683f2ced3d016997d30efe302f5bf1e68670c8
SHA512 bcf62649933db50efa0de2c67fb9ee17257193e1ded73227e8d889833af96311cf9694257cb0aee5433d0b58b2e9bcf84cb7dbb05ff966bba065dbdfd44544e4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\ic_ai_detection_white.svg

MD5 6a40d677a200d395cc7498a5cc671cba
SHA1 c32aeb5acbd6194fa8f8c9bc28d3460e80de9ccb
SHA256 89d19cabe3ad5227f029745710504b714719a5fb9e7f1f30c8487328cdbb7746
SHA512 4a97ccf2ac94edeb63da3ba4225dd36c3c220163f6ec82e653e1e43a806cdfc5d7dd0f5229fa5ee1e877da9671d5e17ab79b6fcf295a8fd2ba45476324eaedbb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\ic_ai_detection.svg

MD5 7078ef55fd90f1aac13affc6c243436b
SHA1 5b6dcd0b4b4b936054e600482eb7d60b3272ff59
SHA256 ee90e35a72b87c81550b24f6358f6c3c786128e87da22f2eeb7ca7de1f671ba5
SHA512 7905de40ba0e255eb157b78ca58ad5065263080804a6e758f7da4130daf4cf3acbae150232034c4a04a0febc1475a16e4eb1b2d93caa2c31a4a74f7eb866a8ec

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\icon_open_window.svg

MD5 af40e91792c0f98fcc31a187869affaa
SHA1 4d3cafacf20902776a1e7ffb6461e20f70007499
SHA256 73a8adf17045889239c0db1c44786077910f63db755178e7b190fec37e9f2726
SHA512 090ef419626c61a4545b24d3d60bff28659efbadc15988f151e7cc2698cdf9576a5d4d59449012f81c4d77a0a810037071e7dae90c2d2dc727ce0dcfc258a455

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\home.svg

MD5 d0ecdff375c24f74221f68225039b36c
SHA1 bbfd3c9315144f38d6097d9bd21a0c6da795000c
SHA256 f9598b5b10ea88a26757dcfd8ee2e2022dd7e1170980418505b98e837015f023
SHA512 06a21fb271c3d2a1f9bead6d0ea6f77bcf18033ab25c039ec2303b959d103277671dae386ef1905c9b68d1e710f42a499a2234b548995ca531f67711a05d4aa7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\graph_red_icon.svg

MD5 8fd03463adb60d452df47e352f2ce4c7
SHA1 640d6e9ecad8ce1557267b76cfd6161cca28f2d5
SHA256 2ed8d54b805c65f0108c73a30cc3fa627fc79446b1f964ebe69042f89fa84e28
SHA512 06dd67654c2c8f78338e371d8375c9ff36df9225ab67f8a55324ee1214ced6b3373c9928bab716bb873e64cad72072df405a4bdbe234df296087b0f5bcc7eacd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\sidebar\arrow_forward.svg

MD5 f995441602bbfa894146b13db27a6d7e
SHA1 768243ae3d0737067883b7e21010fbaf141e13cc
SHA256 568f058d7e8ac2211d2226d2e422a3f6a9bd2fff80f870a26bed4215317a694a
SHA512 9ece1aa3bb3c4a439ed530c0015300a0dafa99602087d7e8359ede529c41a10a210a239326a4823637822d37f6d79081d388f25d1094a9f0e835ae6cf2ff9d2a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\wave_yellow.svg

MD5 11d1f40a53bbd6eb84c41caa4f18c989
SHA1 214154b9ea931c8f23e84e549fbf6de4b156da23
SHA256 e339489ec7cfc3142d62cd46c14185cc990f2a66d2833f94aaf1543bf23a9bc6
SHA512 c7e7f6ef317f874b38da86a0e29d280f77f782b6c4cf3fc8a7dd02ace2d62578fea7ed692641f9665debd9d1e9074fcafbc637411684e0b3199ae43ac0162531

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\wave_unknown.svg

MD5 59d0ed068bcdf2d9d046765ba93418ba
SHA1 ff16c32872df7cde003cd2946b0f809d8aac3056
SHA256 44aef871c7ba47dba8e8c79b921442339e1a954bde7ee52da857d11f723e76e9
SHA512 cb2463b93be53fd85c67ff6a48aff9275c5e8e4e5a04e2028d26ff1318b7b7d5e9cf5fd0993431f687900260e3a5346217701dd969907f5a158bbac7d8dc852b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\wave_red.svg

MD5 11e63557a03e92aafaf2a9e3ec1a6f10
SHA1 4963df7c26135be1d1aeeabde78efdb00e6af988
SHA256 a1dcbd3bf0eec977abc532cd32ca1ea81b3832cdc353a800413ea2b1785d8261
SHA512 639cf73e43017f5cceff9789bc26f40ecd0eb07f2a5ef79474e220f1929f1191dff98acae3a0ee6c824e8873e1daeed41d601f44305d0756fe1c938b5ce05f8c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\wave_green.svg

MD5 4c5d32afdab60c45a088141dbce107fa
SHA1 964a81b73f599aa0301d9430ce006f01d4dc8917
SHA256 dc63328dd136cc3582f7dadeb580e9c00b62f937ea05d0fcc75808f1b0fc057a
SHA512 38ae34c068b538def1b742109b00bfd6524483289d62e73a854c3418572f23fb7f0ecd9aadc6028a80c9934dac9ef0424f6d25a684da3492532e3056a592ce6e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\warning_yellow.svg

MD5 c6c7c219d1f7f74addcec8ce48f193a5
SHA1 0ecc4ae1f29027928f9bbad299942fc6bcb11c60
SHA256 02584615a227a5bcffec51320549404a772df8f2d78f6e13779ec91f6da70ed3
SHA512 5410ef0cb7efe69a8dbe54d7a9c79b4233f719c893cff15b8d55a886d0ec88362be4fc707c4754aadfef9bdfee0f50facccca2ce3eea12eed83fde6d3f528a4e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\warning_unknown.svg

MD5 9b1966801500c78203a89885aaa1a528
SHA1 a3f59595c710d16a88b111ea4b87d7ae5b670bab
SHA256 298e1d2b8ea48987a2df6c4ccf0a3aa0a3feeec429ce68b66d4cac617b45f4f3
SHA512 e9b328aa214bdce039694b6936b2f55b926d0379fe01d757d870b2d303727c6349a3a0e6074d76694c6470fb95e4a3df4204863121f9531d5fe245f9eb747ec8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\warning_red.svg

MD5 c5fb6e2c21002496cf142f66ac2c5e2b
SHA1 13fa6674097eff4a7730746c5862e0067f77a1b1
SHA256 c301ddee10d154d56eed3e8e1b0d84ec685b55f1bfe0f9e12e5ef46f6589b0c6
SHA512 e1d12242e5ff6ffb8ae262fc146f8e60a6ed11117ff6e23228bb836e9c705b9c6321830aa171d77001393639bf342a4726bb25590f7c30d48f5fb6edfb388f51

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\warning_green.svg

MD5 3d867c84e1e6d2fd30e61072133eeda8
SHA1 61b9740db47dea7ddc7c8929d03b9c927067d77c
SHA256 5068c87fdf7e527035dbf48e28c16e97a64e4d2e71dc869cb798b9b6cb926fdd
SHA512 96b77b9b89067a00867074dbdbbc42c84e9c529a7c0d3a70a53b8918ad76babaa953c84d98881a57be61203f44b8dda606329f41d205cb6236d15edb7c79e12c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\thanks_feedback_icon.svg

MD5 398983b7e7c9ff221847cc8916f6b0ef
SHA1 f1fc6d77f305dfbbc9c3bc1cabf254c886effb6a
SHA256 0dd21dfeb6ae5368a599f2ff0828e04a4f095394464c244a89376b854055cc9c
SHA512 3d0eaaa67f99e4beb24f15fa2f5ef86d193278774a0ad8db256e2b223dab2db9e0fc2615bc2df631df2c29bd7a9f95e131f83d36a95a3317b84da413995b23a5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\smile_face.svg

MD5 f01e50bab229fa30c2780904ad2d89aa
SHA1 8de1d01e2746419a20c59adba80b7552b19f97f1
SHA256 3f0f3fd76158e1e010f4a8de042b0bd57f9aa1ab0a6ca7e076eedbfe44dc3698
SHA512 af98663da6f17a8fb47853063e36cecf992c0ae1e0777517c656a23fa161a08ae5e9e346979e5f85e1a427a38cf915bea88e55fdefe0954ae70c3637413afee7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\side_logo_yellow.svg

MD5 e16190dcf46d5a978b83fa873cf5c6d0
SHA1 a757fd5648ebce07f8c1271a58f648e7aa45ac35
SHA256 cf0f2ed2ecabe6894cf40093bdd82fac51a26ef754c3a597f6dd9f215647c454
SHA512 3984563f0d5a22e6c1bf0212e2bb46f2ad43694b5379eb44bf7dce6a701e02cb51c96350c686c65a6800561db739cd216c75b81ac73deb914ed7c6d10d0bc4ec

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\side_logo_unknown.svg

MD5 eef13b8c98033b4d6e7bf020fd0c7a72
SHA1 612dc1cca9b3f3e037f771efa920a74615172591
SHA256 56509f804340038f1abe9b56deca61d110a3f9020805fe31621492ac7b87fd6e
SHA512 b73e6b0fc19e688fccf5932113abe257a7bc5022fec66d596954626272a81a297070016c9d580256cd01b193354f48085a2b6c07a46ce6062ec3a1ba1a356919

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\side_logo_red.svg

MD5 f14e3d0982634c59cdf07afceaa4f5e1
SHA1 09937c430395dc2b26b22354d9c49cfd29bf912e
SHA256 c16eedb1e76ef8d8ec21fd9080e0d1bcd529c05a6565c6fb9838728194bbb16b
SHA512 48311c5740f6481987bd1c2af33fde8b4a1adc98521642f5e36c50d8e6df2e637052d0b940255fcdb2da376dce5072303fbe94719c2cc81ce31cdd7f674312ae

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\side_logo_green.svg

MD5 c497ec5bd201ed39d481d45806966867
SHA1 9b83d45664af236386322d3df77ac826475e19d4
SHA256 3665a2cbffd36668b06f473c2924180bdffdb97774ee62c6764c83878fb6a7e0
SHA512 a08a1b3ece19973ffe484f087c276ecb9171cc8a9d7664f880bf8637a7f5d54976053cb933fad344402d5e21f7ea4a0544d89c1546c5279a23b76aa8dcf5bad0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\search_icon.svg

MD5 60b2f7207496a45ff9d0c56d3196477d
SHA1 296727c74f6cec5223e77a1d4ed95bcb4561dbfb
SHA256 c145b6ddd558318f0cc8eeb11f6ea474c690769cde2271677e1005a0fb00f532
SHA512 7f8d46b0e52efbd7853ad50e4a0b733d155e82264664633affeafb374c906a69a8364c002eb1ab111330787b4c975403e0708ba2b9dd5f8f0b05188c7d0c4ed2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\sad_face.svg

MD5 7cb45d712d0d3da14b000209bba4dfd6
SHA1 6ba4472c9fcf1e1ff4d6b782d743493e8cdf5cfa
SHA256 c19d804fab52bc557024db7c4c0034e01fdf45cab1ba34eefc5bbca37e987d1b
SHA512 a78e8df9728b826550d986bfd1804edd7cd36da826be188f7776336197bc72a217986354fe510cc5aa9391ddf6aaf2c6395aad71f44d0161e44d04c156b26948

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\logo.svg

MD5 ed708c571abb2920ea9e8777d072d33d
SHA1 cb224b6794e7cbc6b092b874e45d057b466145ff
SHA256 c7b585a3f5d3f0fcc6d99d09b2a03ab0a47cfdf40702a5a9b0899ec2e422d95e
SHA512 942807a857b82ae22e1dc4a7205713e4365f703a07a8388ff1ac843868b2a17bc5f12ce306cc07ddc9e7a96ee4140d02b46eed334aeb229da0d2e6491ddd542e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\site_status\close_icon.svg

MD5 097943f80730cca1a88700e0d73250b6
SHA1 df6296484e33a1ccab52f477e9e3f28a53869536
SHA256 9ce40ec068ef3eb9bc375a51d80d2d10aca5fda5ba839e83e1a1b8f2eaf02b92
SHA512 6c2b23dc013fa6ab92aed6a8a8f970ef04b5c2e98623b2d1e6ce0919a94bddfafd484a44eadc909cf03d6782aa1c1d6d38872aa9da907094936d5eb9ae730aba

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\youtube.svg

MD5 f3c95f1ee512e5b481fa664db72a0072
SHA1 517c78a4a90c91d7057fbc80bfbd1da11cd712a0
SHA256 b58a353116e1fda690fc595ad5a43c8f389edc10fe5bca49bb4375222fc72455
SHA512 a08870bee50f39df2f3517b5b6f6f11f7ce899821fa0b5761742b690fc588716b0085dbc6cb08503ca45ceb49b7b1f1900afab7ca4ae4423f2651ae94467dea1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\youtube-unchecked.svg

MD5 649374ed8f7b7d6f7077b08fc33361b6
SHA1 89781fe4150a9f295e56ffb1496ae8248022849d
SHA256 bfbfe1db8f3a86a17ffba3a316b31860dfac33ccbbff7da850f986bc2455a1b1
SHA512 1e7f5cfe0375116d4594ede7a239d85deb3df2cbeb323a258fb557df053948001ddd55e7f40ac75898330fd8e6c7a46fdaada6ae58c8ac2de6aebf0363888f28

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\youtube-disabled.svg

MD5 79dbc4016cfa7af54854fd87f17b9fe1
SHA1 f3a8dc59c9f49fed2e8ea8bf8b545dee717b99d7
SHA256 48a0372476a73e3802ccc5c923c1f59cdead04df96a9b8a3e601e97e5bff74d9
SHA512 d1f82c7074008dd519af186ece466d29764c2d0a6f514fdf37dd0d803b1750e82d7ab5aeef62d59b50f399ff9a14ac117dd4dd1d0970aa00ed7b7ad8bd7653b3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\twitter.svg

MD5 3b61fb4e8abd2a4b48beb4e992344dc1
SHA1 99f51f7613479683b0d66299f65bdb9d94cc2f31
SHA256 61cc9bf74aa7fbefe2386868a799da9d132e826f09f17ea082b2029fb193b6e2
SHA512 a7dbdfa9218231d74a80e62968472643b38c8a35d7eb533c623aeaf9f7e865418dcbc486168463fa60bf1205adc9b83197aa2ea0d6e001ae79613ea4d2d4c609

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\twitter-unchecked.svg

MD5 49c4d32f0e66654208381ea6b518c921
SHA1 1867abaebb561c02316b71425ddc74cec57f6f13
SHA256 59c28fa052c96d215cc420ce2ac9fe572381206bb25a38749705595f7bb473a3
SHA512 0a4b24d9e058f78542d4b4273cdab0cb3e410463a3e827e44bf98acfedf8d6d0b84b4148e8bd5ae03d5a3e3641403f5a21ccbb727467559d25dbfef2d18166e8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\twitter-disabled.svg

MD5 7d822b99ca9e51042ffdaede8a5a254f
SHA1 dbdccfa7ade6f0a3eb56cd7317ac407abdf0bbf6
SHA256 6f8318d5de526eb76530b42e9ce055f59cd4e47cd419c571309d215a2f65a252
SHA512 a9d33fef6183ed28e6b8f22e19fa70084bddf3ab95b6b05fcc4349c45bb86ac7e30b7743afb82218d0a8c049d1ac5ccca3290f34c81038759cc5fe07de086b45

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\reddit.svg

MD5 fe709438d1fbb05fa19700835f27c170
SHA1 873889e53db11489adad0831d7eec2da09396d39
SHA256 1e683942e2ab6bf905719f7f5ccaab451caf8b978b63666014df66ffd25c1b46
SHA512 b14a991c57d2a627f06c2dad7fefc9d32ae6c4134c1c95649bdf02a21a3ee11d6cb4eb7c37a3025ddf35b73454082da297ba64f179bfbd51800f23c680bbd21d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\reddit-unchecked.svg

MD5 2e1a647ad3777312e5d7b84f70230501
SHA1 75d5e0ac26aceb125d3acb20ce668f11cb121cff
SHA256 95f3634e5c1798fb16f6b7a6b56e9b3374d4357506b48fea1999d53e97f9dafd
SHA512 aed533953cf36e99bfe551ac5759670f365cf3616b7fad36197312d9d7aeafc7c5789c6260d1427a9c7aa4330679088d98ae0ba4d17e40e99daaa07d88a5c5a1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\reddit-disabled.svg

MD5 0a940b4fce5870418e3a07f68a205365
SHA1 a2f1adc4c0872ae151d95427ea7963042eedcd79
SHA256 9fda50b768261bb956594e4ff9aec0bdbb6c6156d530bd4ac5ad095848bc3f6d
SHA512 ebb2ebcd9eb4350d7df5e4d5e4662da49e51f1f45361963404f1ef1265c09d9a69461ef129e74af932354362cd13c89ef3e850c030add750670d2f99da4fa4f7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\linkedin.svg

MD5 39bd4cde50ab7548ef22496b60ac253c
SHA1 b83bcddedf49f70205f3784ee311ee0288e64475
SHA256 84dd4440b78f9f27a4e3324ca111b7dae3d3d61395f3b15f77aad6eb90f9a970
SHA512 6f8e35866e0dd9c071d59cddf995421ab974e7281ef0ab1f874e8ff125c6eb94414e944da83cc702e6ec50c01702fadcbb47739ede8bf93a43f35a8b5516a2ba

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\linkedin-unchecked.svg

MD5 1fa339c46439b60bf6add8b64c4a0b66
SHA1 850e2f99d80107e5ed111da44424717cd97cfc86
SHA256 bad9131c52180e0c04e7422aa0c1ca4e74591eca508d282ff13ea1482d8ebba0
SHA512 3362e659863743e6a75f02c53c80d62cc781268f04295f77a72e4031a82b07e3f89c1719e6568c2ee11fae9ac4fa70360a4ed4208a01fa8bd850c29e975f4c66

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\linkedin-disabled.svg

MD5 bedece397325b64371952b71ac9c71eb
SHA1 c18a90a282a4c972e35aa8fde8b3415a283193ac
SHA256 39835ca910e695adf4bbe6757db12aa12c7a0092dc7747f9cdbe17b100ce4642
SHA512 6c222832120a822d637631ecb58aee47d5c9e3b566562fdc7fb86e5d9e6ed615533e9d23485fee0b030a476ff98ec5f02af29cbe9701b4c8f6d661c646ab7afc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\instagram.svg

MD5 b7e5ead698b9cf7cf78845c94e7173d6
SHA1 2f3c3e38b0941c2cf1106bd96d53b06fd6e4c127
SHA256 e6912780b400cd01f5d9f9c2e99a8f5720c45c772ebfbd4417cad15d5d481f9f
SHA512 f2effc116ba13c21d5cf5100ee00269127c490c84cfcae1221b08ab11c9fbf62a59831c10a78735d12bdd42547e55bfb0827545820752ecb134aedb229c75b98

C:\Users\Admin\Downloads\Unconfirmed 919175.crdownload

MD5 f81719092d3de67dbb703c4d7de0b4bc
SHA1 7591f7ed9e61f921df2bcd961aabd2bc92911d0b
SHA256 497fb57d6d983b1189b91486e5a4f1898753d8d4d086093913a426bbd9a7a9f6
SHA512 e51cc252be15cd58788319777782577b3a8ce61eaa4b871d6a1f82e6c5178829b53fee814398714b42136d1fd462522fafbd0cc28b712e83afa41f62245219fb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\instagram-unchecked.svg

MD5 ecf3516cf67f667176040cc186fdcd2a
SHA1 581c0905c382039489bf98f8f9386ef73076ad79
SHA256 b3bb02e9a212d25fb481f46ba2f3255aa59d5f954ae71d52c6fb8babc5122d4c
SHA512 a77cdac57c711bba2e570535ca8bba5b94285989eaa462b62fe7feff7f26244a1e92d39ff028ec900d3d54d4a57041ba24423e5133c72794115e3acda874b706

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\instagram-disabled.svg

MD5 600c76c70ca6b17faaac5ccfdec7c478
SHA1 23a1ef44bbab865f4dbc343178a66a2f8cead620
SHA256 054bf6ef7441312c83965511cad648c27bdeda82bcec365ff7a3343f4c374450
SHA512 8a5515343736da079db4ea0bec0d5bb6d0272be6c4f04ff5ca41286b76fa29fbba7d7b9c59b4e0d11b5be4fba1589b30da8bb5c726c7c8f74880e6939ecf1e19

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\facebook.svg

MD5 763803444f3005e0faf8f4aa76bdca80
SHA1 352a65debde91eecdad9040c7000bede3c102403
SHA256 bb7dc0e71bc5cc7f5d979b00837855653aa0582b7d8d2bf3866246123ff44ee4
SHA512 4120b60be1f40acf8d64ee7a9528ea8a147820dc069a4cc3376b4272e76cc494e6c1a5a32d697cc03074fc8461139a1f107498eb58e4a439bbf9e3d42d99d55d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\facebook-unchecked.svg

MD5 c37f963fd30c8fd6c1bb752364107183
SHA1 cbd1aef0c5b99a158f7befdbfb2d8999b441995b
SHA256 b0e118aa819ff4db65b841b3b205bd90e90348a05ce6bb350a1b7548a2c9251b
SHA512 78253ebee64fb79405c207614fc4c0d4eecae7f73b748a084f9c15ac6857b9fae7e7ae9e9e339c007ce25ebdc6d7bba7bdfdf7d2638d79b4706d3dc658164fd2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\socialmedia\facebook-disabled.svg

MD5 814d8b8c7e574e45f5d52f19f80b75e3
SHA1 97a5a7e4dd6db4c4a9cb578a721deb653e18f21d
SHA256 64ee3637e6c7aef16e327ec6934b90466170d35d5c607076eea93cc7ebf9325c
SHA512 b102e8c6472cb5821d7b5a9c8b3304bf104ea62858de090e12113c48956fb6d32690e1cb686269de4a0bba1f78b3414a3d25da9ab30a843d210d87fd453b109b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\statistics\pages-scanned-icon.svg

MD5 9f74e34b99cfe1c362f09f5142836939
SHA1 44c714a4441f0a7a130e6cab0e75cc811545a66f
SHA256 05c700272b683ca1670a5e039cfe5098b58b4a33b64e19e639e68e9f61f47b8d
SHA512 91b80315a53e0809b801067eab17c5eb38e44d7214be778cd2522d5a198d2b63b2cf3db2552d02e779dbe3ab70313da8dade61dce096105f9bfd20647c1b9bc0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\statistics\pages-blocked-icon.svg

MD5 711a2cf02bec3f69dfe89909861a62e4
SHA1 6ad9f51a9f2713d17bd93f78083702c9a5c9cf7b
SHA256 31bfdd4098f6606a017d6c598a638ac5191186c0c7ea491bf38e59dff249d97e
SHA512 387aa3ccce05b92b21c455ecfe725411e1258617e610b00f53327a53c63be3ec7c016b5f03a631287183c94d6eabc2c20a7e8382f78592f1132dedc00ff237d7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\statistics\downloads-scanned-icon.svg

MD5 6ea0c55b5563cd9feb4cc13c8e5bad8f
SHA1 b21a5cf2dd61bb95b156b24c56e6a311458dde35
SHA256 3e6482187200fe72e4b063d0f25a5f14b4492047f90aba44fec9be64ab68772e
SHA512 899a6054aac2a06f285a553ce6c76a22b8653c4b8b8ded429b1f5a2be002176574c3c63b8aa21b2c2dc8c02c4f778cff6f8ced027cf13105c9b25a8443c0219a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\web_advisor\x-icon.svg

MD5 15c44de5bf34f917db329b931143b02d
SHA1 73e7f9fcbf7d139a6e701ac0c1c8971d29ffc72f
SHA256 d04bc6cda16e1e3d292bfb19148d7f0cad21cb96bfebe0ed9e2a0341d3750953
SHA512 e42e9725a5a3c80eacc070f6b8e1c4d304b136c4ba55353d36e6e8af8ece534f7325b1e835ce3ae844584f346247070b6180dc35728cdef7b97336059e3970af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\web_advisor\white_mcafee_icon.svg

MD5 7c7f3d088209c673b10b2825c943233e
SHA1 a844ffb567f9d730814df4cad20b3aef7643829a
SHA256 50229fc494498f88523c723063e67490dc1e4776b6d3b0876fd7931c1e1b5c75
SHA512 9da0e3ba21bf441b7a07a0b6f66f550e00cf686099cb00ec9e4684370cfee3669951793af4aff0bca5b2595f0932852027bf56e6fc4e3d6f7f71c530e53e27aa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\web_advisor\search_icon.svg

MD5 51a47620b1c48b4c432921d35d02d123
SHA1 14297a9827ce5ba874e4097ff8840f06b109ba44
SHA256 ff1a4e5ad768282559f2c0575c36a49e3c5c846bc5717ee07853e34fc7494235
SHA512 35a9fb65204eb66ea548f6aba6bd468d8d24f6fcef9633211dfb88bcd81084a799c5bcd26b73cf74245b11117c0fa74b980065f0927a291c2724cda64d81b711

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\web_advisor\mcafee_webadvisor_logo.svg

MD5 602508266d365ad23c2c9bf5e352054f
SHA1 1dc20de9ca11a5ec24017b3cc6aa077cf85cfe77
SHA256 f09f1b00347486afacaec4e9cf7755986b8bbd6ffefe1e464fd7bb9928f16b2c
SHA512 b20c2ee4c40d1e611bd9cade5e2b29a04787289e70336044240c88824e454f46379c4e5bcd94169a53fdc4782f7cb2d9af31ea07ab59507f0c1db15b8c189696

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\web_advisor\mcafee_slogan_white.svg

MD5 10f404e036b0309e755d77e4e0348d5d
SHA1 820ec8420fbf5de31ace37d22c61d23fca73d3b2
SHA256 c4f3ebf83f24aba4843a588d064fadfe68e4cfadc925833e16c1aa0e30b9eecf
SHA512 d70de232e46f3c44bc544c65a6f46e46fc465243f3061e0a450f04a53f9309f5910f67bdd736c6322901ff2fea6fb6727963f6407161125a6fc585ad7a97a2d2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\web_advisor\mcafee_logo.svg

MD5 9bcc6f675f54cde7cafb533091009f32
SHA1 3cf028339a1627fec086a438ca4e7718d890fc91
SHA256 fad79478bad5e3484804e956f3678b2065525f26e032939a4e03af0e274553f6
SHA512 a80072b5a697b81aa6019ced2c501584e2330c8d4f4fa8675133f161dd1e181507ea8a6b375871c28cdcfef1166e5cab92b7906baeeac9f30c218824d651fc97

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\web_advisor\mcafee_brand.svg

MD5 16405c6c43a4537a23405324de6ec0b3
SHA1 b5995e25af58e19deb9fd85b739d10fd8cfbdca3
SHA256 db412f891da3f9e41bea3a05dbe5d013cdcb21bd3091b7f4780d1c51b1ec44bb
SHA512 66bdc7349964f5a08d52a437a22ab2c806dc86f62bc06e1cfa6b863ff7de0000cdfaa340fa1d6b17f26c5a72f0e7c49993b0109eb82c86570ba9b1d88a94153f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\web_advisor\info_icon.svg

MD5 805d40b882a7ca79ad60df3d018b0e6f
SHA1 e65a069d1bff4ab4b0eace108a6a47e039ece7ad
SHA256 5b036dfe0243742aeff3f5ef525ec9d0c4c25d30591a1f5b7b071c72332a6f84
SHA512 3b250b00041ded9b0d87dd74eaf5f05843375ffbc1b3e4f45e76d29ff78e663abbd944b41d845f820bff541fa6c4a6aadce83e6619cc731b72079ed86fdc26b3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\web_advisor\danger_icon.svg

MD5 d25c35fbd95038c5c82f2372980faf48
SHA1 76d0c8c5c5c3cf89a17a5d2cf04c7948230d1dc2
SHA256 9c5f1eca9c4e95c817a9fe4f581c607318150d611f08107f612b7adc366ae7c4
SHA512 0f7d90cd13c38fb2bb1eaea574e7a6887ad8221596818612a3405971bfed169c951614946f1500cd98f439efbad34bdddc3bdaa3e8dc612248dd64a6b99531e8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\images\webadvisor.png

MD5 5d71c98e5628a398c359918a39698ab7
SHA1 d552c8967cc38c42c316fe3cdce197d1529b2853
SHA256 9e41e1234b3dc6430bf77d8b3806bfe54de2b52bac007b82acacb34e767959fc
SHA512 a87a57c4f88b18e7b7d5c44885cfbc82a1145ca16a27c0b6963431e8235f801db18a9c005bb01316008801701214019a7686a2de448057fa28a7d5ca560ee36a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\json\engines.json

MD5 0d22d490f8cdf1d378ebc498b29ec5b5
SHA1 f0d718cd5c96a4bf85d75bcc4e182386251328d2
SHA256 b0cba5a43e4598d3dc9aa5ed344dad5bb8e66c04a495226f7bb2102f437d043a
SHA512 da28cfce1f2d3a374207aaca5f40838af0b0a0a9d1f60ac738b0d821e222913ad952466d3622231b6704da19f3492e961b9904708cb68e3f1f17d291015d91a4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\MockingBird-Package\scripts\worklet_processor.js

MD5 2fb6d21c7e7236b5b41b081a546d994a
SHA1 2e87f26e15231787b79361a85b9bff7435c6454b
SHA256 c64e5af37b6e98ff2b864faa3367292bff08d9ed3b74d74a9275831cb3749c4a
SHA512 a089c541fbd6937ed701ded702a8d34bb7fcce057daba326f420bdd1addcc4c1188ae3564355d4f53efd925ad32ca7337cc05d403c67e3027b39915a74e4b3e0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\MockingBird-Package\scripts\mockingbird_content_page_inject.js

MD5 f473935d76520616924d804b1db97506
SHA1 03f5103a59f3fa0221301bece2d9f1c6819534d1
SHA256 b8be9a0b30785ad5e3764e775fb3d94ff4c3583a1877b143e23b485effb11dc1
SHA512 bcb5dfc1c2bc6fb423477247d6dc7dae780d4578d70b53ac0a5b26f4070cacd79b9f9fc57d0d253b60fca99910483fe93a6168f3f05109ad26b28671c7df303e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\MockingBird-Package\scripts\mockingbird_content_main.js

MD5 4409a41e66298b6690afa99b3b04fc88
SHA1 65fc833a415e4022b680fc77c3a30408aa13c781
SHA256 7f7e630cea6d8d6d0d3ee99e51e28af2caa674f310ee6e5ec1a10c5da2b58ea1
SHA512 23d3a575681284e71a080c1d03534b259ea70593224feee4def375dc8873473546454018727cbbb2d0b1cf78d732171cebcc781700957e4054503201ebb66f5e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\Sailer-Package\feature_collector.js

MD5 78d57885e5e4d3f8aea5b2ec1635e965
SHA1 abba46a8d2ed14d38dd004d866f472da80b6b79d
SHA256 d29f575650cf543ce89dcd43e657c1a97f6dc8c0af8f85248cac4b3ad4f36954
SHA512 18f1c3880c5415872b2f443431f55a632e3d8f3952d3b8eba3d72e367ef16dec803ea1404d598c503a97931c0e7242cfb53124699a839e248374259b128b63b3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\iframe_form_detection.js

MD5 fa6ec08702aea0862e8bbda5313e2a8a
SHA1 726ded59f9696d66b9a810d0907b3d16d3e1112d
SHA256 642e07b8b34850662660e4e44e5b24fda8693dbe3c673bda6d7c8af07eb51ec9
SHA512 0459d6463e0d8d33cb008a6eebaa71f9050e4d301c99ab84f1a7ada06a909db96687a7dbeac77cdc581b1628e5710c83d6570c4459cf5ac0816dbd4b8360a691

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\iframe_form_check.js

MD5 1581267b777304e77cefd0db60c03128
SHA1 558dd38b77ecd340b4dd037c869746aee20b2c8e
SHA256 c1647bc29d310e642f0c40c0e444ec69ed869774cd36a318f57accd93e8e1fa1
SHA512 1cd276de14c796796425af14bd270bfba6eae86e8fd2cb4d440690ee69ddcaf85bc56e7a1dfa33ae53a331bf9ca991b0d3a25e0ef488d07c5405dc5c888fd4d4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\iframe_block.js

MD5 248531ed5a983e430fff1579a14986ed
SHA1 c69df75c32b2ed3816fe8da1ebd67d12f08c422c
SHA256 59961a7b89936b95ddddd4951fa6ad7860cb4c53c83d6dd751d38d9055e77ea6
SHA512 caef2bd37bea0ea1039a71866d4b9ddf70617b510e71d159c881f5ad84abeef975340ed10c7fd208a0f1ef72259f6ade76dd2b22847361aa8c1909abaae74655

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\content_site_listener.js

MD5 5477408b9d99e05948d3c2f8c1805e3a
SHA1 7906db08c2bdb5e850b6e0d7839466a26862aba6
SHA256 6b45066e494a91626bde9e1d0c4c27306ccbf86195195b8a9308dd797b18e203
SHA512 0d95b10eb6fa82d6f44ea7532011841f0a9b6bb2b350587bcdcdd5348c1b1fedccee99eaf3286d5bcb95363db620788ccc70678ea64e5de52377ed7dc556c606

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\content_mb_video_check.js

MD5 e97f5acb8d64a922b30cc9bb7f13467f
SHA1 b757cd9a7188b6242f9579d2e523e7b4aa56b0ae
SHA256 bb10f7a635e72ed2ea640c3e37ca4d709d9bcb0c7e7de0a57c8e9504e32641a1
SHA512 db62d1dbfe5dab2490eab298435f4dd658e7a17d4d36b05c812720d872a72a2c6c25fbac7c948951b1fd9cb129a6edee0e66287fcd5d130899898c22a0b619d5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\content_mb_page_banner.js

MD5 37fb32077ff78dc43a1f86a58eee6bd8
SHA1 5df27112c36a3ebf48fdc57a8f6a714804e98073
SHA256 dcc5a7a03796fd955e1d60a1243f7c1354c5db5c6a1e7ef6f882169b73cbbf7d
SHA512 d5b2b704f2ddd8df6aa651f2a9ab358f0cdf7630b4e8a78529ef122909893962440f248f663caf986c93ec41b8903e9d767c43e11be4d5af800ab074fe7291db

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\content_mb_activate_banner.js

MD5 5864718a2f60d180f3a26d2d0a76f3c9
SHA1 008fa90b3625b6c10e3dad9992db2c756e9b4eaf
SHA256 a2b7a8ca69c80f8217b5d1f6a282cbeb9795972388d201508742e3e5e80569c2
SHA512 3e1e42f10229b6d1c531537c7ac2464b1d34961a358e5080ccf353bba0b2593f8a67ab4e4a8775672453c2b349ca0d1cbf643fe95f61744cd8ac85c525a292a9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\content_injection_check.js

MD5 9ddf0288b1c8668ff55fdb38f3072c02
SHA1 e76add5f884b7e370bb2dc7005b8a63297151348
SHA256 9350dd08e265186007bcea995ddacb0b2afb603ea042a9da2c6f256a0e5a47a6
SHA512 df4057cbfde2f4cbfa7dd5353011e1b870abe1088a5b96bc8797491d5af5d49953353b05138153497230dc2f6085525c1b358793de7424adf1a14112e8437903

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\content_iframe_banner.js

MD5 eef63268b72677b87f63551b56e6fc23
SHA1 899f147dcd17af3a21f56d92f13e9a0fae49ab14
SHA256 f116f6d81344df7c8789865cefac459fbd21983eefb84cf702689982c292c7c9
SHA512 7694c940a39770461ffb8c575df319b4b5fb34d84d1fedd5dbdfee0c1bfc00c245640db8f4e0fd911f22b6517cf37138412166b8aa960198e24f87e1d1ecf6c5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\content_idps.js

MD5 a640865f8980fa0fcd19d57bd03e4bfe
SHA1 32ada0e78475c62881686810b6308918ca1d9c25
SHA256 787e5415ae33e4660ee07e20ba23eee459abd590160afb97db15f7906a6aaa52
SHA512 0e7af6ce0aba386accd3891bb43d90175719387a8249b181100e3cb8d48103fd76a7bd58eb306a1b2eb3c396996c013f408fbfa9739a3ff9115be7634af7e690

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\content_autoplay_detection.js

MD5 9b9ef5d54afe700b9045609c421e8cb1
SHA1 fecca08fed4e4e46bf187bb8a99d73a3cbd8a7c9
SHA256 d3f3715e9a81dd68b791cb58238a7e959d3457de85de93faf863f4ce4f830cbe
SHA512 66ad45ed89ea0395a7cd6264dbaf35c57fc69dacfa681ae08439d885f701a22053647e16fc7de513deffa2fe8e6bc520603472ffeca9e0f74494ae1e7dc7c1a8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\content_aps_observer.js

MD5 bdf1a5d997819b666aa4d3056024f9c4
SHA1 34b7038c0ae4870362dbb15289a189fbf8d06837
SHA256 20962b76658955d36f798c25375ea22de3105390c7a44e46a5ebb106b30dac7d
SHA512 09acd229a836f123fc34bf4e97a4786ed38f4e416c1c6107fbef713ed4411daabaddab17a0d72c75beb68cce7d5264a1501c39b161aad789565aab7baee610b1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\content_annotation.js

MD5 69a8b3c47f119eddce68789708f3e05b
SHA1 e067183f226116b901a23482667fddaad55189e9
SHA256 0c8a6bff85f4375b1656b123580cf0cf2d50e49ddd91c6c5b242f036f7475c0f
SHA512 bd00b5d7a109d38cd47d3c0aab8e2c6fcf233d0e3b4c9b089a762426cf867ecd5fc4836ca65d86535eb444fe62272528a8648bfd2eda699414f0f021b1311956

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\cs\messages.json

MD5 8c5c6fd0ff5566b17891299e6ec912c6
SHA1 1ac1fd6eab6652963f187cf038a3c3cdd41b3515
SHA256 2f66acd9e90fe321372c9d81bfc8192b6c88d07179432f88218fbb522c49966e
SHA512 f2efd6d802fa283a1a1c3373888db8bb4f0e872d4f15145311fb27958111ce839b748ba7ab226f6ea8debd8903a8b3f447e7282ba692c6467998d317cc74a296

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\da\messages.json

MD5 64823d82253e95f7d072ff7d2ddf557d
SHA1 7d8a7ded1061ceceb7bf2f2e05818d4bf3a845eb
SHA256 55d7aa51e49c0ad85518c0325ef9cf8d20ab408f8e27ce70bfac41678696846d
SHA512 e2c489e125573fb60699a7a698299818ba338d3c0dc3210558b633dd5d890c100943407e0ca86ac3a5fce5fc09b38cacd3348cf0c3eed0977cc63b23c8eb5c87

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\de\messages.json

MD5 b5e14d7aaff68f904ec70524d48de4cb
SHA1 33aece14c75c7945e5efcac84e5f3ca0ed2d9a8c
SHA256 7c5b5d309d44dea032097c915d522acb44c748b02a573d3d5782634b406b6705
SHA512 dd4a67e9b4a0c7ba57454884695a9e0bdfee5da5b03377547772c5c3022a44cd020e821c2b738f96af99c1ce0945f33aa587ea890f244c8c35c82b3ccbbdaea7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\el\messages.json

MD5 b97e385a1fdb8f2dfe3026b128348d42
SHA1 729ac5da03cb8e3ba18ae46dd8721604dfb328b5
SHA256 7baaeec52068bfd9672ca378a29d22898aba080a46eb649fd6101f86461f919c
SHA512 464e2767d71d2176b0989adae313a0c5cbd826ccf089f6deea7180fdfdf1c1bbd3b956b068dc6d52512a2a5b2408f2675bde3712c70728767535d316efe57c83

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\en\messages.json

MD5 61d544ea0120868f710dd819f43c960b
SHA1 175dba601df6079163bca7fc48a91d7190f346b3
SHA256 d77b4c094176a8da13a5986cb8c818f89111d55d87b942e3538f4b957037c6b7
SHA512 34da15641c38088bd408133e5c0fa419345d2de7f87aa717b6fa6b176c7695aa6887409cf7886a8647f841083f306b034c39946e32094cbf103cd693ea0afada

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\es\messages.json

MD5 e784323ec9c9690491f2d62141836c2f
SHA1 3ccc50fced47b08183671a460006a32c5b4513ac
SHA256 87a0a5aa4b27e12a1fde8263017e929668a1f0880b54f456d99a5559806aa1e7
SHA512 b42a4fbbb9d90a4f97c6fa4e658f1d8c5920750c3d0aba91c78820d318da121ef0e5741aacc83988d06fd4500c237fe873eed2cce2fe8e1de93f1114986049d3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\es_419\messages.json

MD5 3b5e05ec5d73c1e55624a6c7f51af10c
SHA1 296c5c266295cc47ce1d13fff9f0dcddbc715df9
SHA256 9fafa0c86ca1c5ac3bf1f23a30212f2069fb67b042c6975084b40503807f3b02
SHA512 5a0ddc285ea459f319da866a1566319ea95efbab52e106415b3dff776df1a7f8c3ed66ffbfe3cf0d1376e1979b729bb99e07e3086e734889bc7fb847e03dadf2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\fi\messages.json

MD5 53ff5c711f362dd30205cf93f1f51f86
SHA1 611b9937413ce70d10be0ac606f004d9bb716dbd
SHA256 f5e0794e60dd0fe149f34916518802bbd528bf4cdad9388e70eef13946995f07
SHA512 4dec49f2026466b4c2108b68f645a6aba7ecbf30ed696a731e96962f966b18534c58e9196383d9c34c52f86dcd6723731245281f9e80d3b2abad2af98d584f74

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\fr\messages.json

MD5 0d0edd8e008c87577b52783d8e9a1646
SHA1 f4855dd21f9cb1324488958f3519fdb0ee9f9fe3
SHA256 4f30803138ff93735d812cbd3a1e8c1fa0cd5d3384089aa1bc20d27786439ac1
SHA512 489d38d4c291159e8d6c15fde89fdad4c92d56797d720e91485478d018eafefb7ba0b08f8f31c93bc23979bd63de7da143ac938011583dbcfa87eb8053327b4b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\fr_CA\messages.json

MD5 5c5db79d5444a9d7f6fd800bcc23fdb8
SHA1 48bc08c2fe2c71d0593cb600e9ea6d68df992346
SHA256 bee534eb4364a49fcc7bdc07b3ce9eb537e95edf0fe254b7ff870fa185cc3e51
SHA512 00a0435104a0e0601dc1d5033dead78b80840bd2b5694aea2e9debd8354819f89139d74826450aa8107d7a70c5455a836f452b4a1335a33f82ba5938b8cb7288

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\hr\messages.json

MD5 0a79ba9ff40da35fbb8e48b11c0f2b14
SHA1 8995930877aafd26615642e1dbf1737a90ddbe68
SHA256 2f3e9c8f641430e8f53db65080a9460c80f43c0d0833db17269570905de2afdf
SHA512 764e0f962ee424c6015eed694dcbba16cb82f62f14a72e250e0f26abcdd127de5bdfa037d7d24612fc2df710fb6171654b9cebbaff1427f2a70ead97dc9f38df

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\hu\messages.json

MD5 c4b6fb1715907c06d905e05eb99ad256
SHA1 ae993d7f4b9da0e7bd774ef2063e211841bf46c9
SHA256 c0a65a9c1ef5230359ab6c2d74d9bb69a658d38c5949ecc322b896e8b95ba1c7
SHA512 fe2a7beecddf0976181343efce0d15f0ce5e2087fb3a8941452dce718e92f2c9d7f56e42804e25bfcda5f53a07170df828cec949cdaa0bc9d42ea3ee96fd0dde

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\it\messages.json

MD5 bc20290b3c8d90a8bb7da36d970946ad
SHA1 c510948167c51e4a2919fcfae50e84ab3cdaa456
SHA256 33643d3986e8ed6ad656c10cae4662c92a95903a00233e56b2ba43a094a38b48
SHA512 850319e579f49242a2f775c672daf882df116b0d38ea9cac6d6288359811e64e5423a0d0c3611e10a7f64e9569417146c7c9f69c21eb56eb4b82c4216218d72f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\ja\messages.json

MD5 e276fade2b07dffcd458e0f2fe31022d
SHA1 a94e31ea67e1d1f9dfa12fc0da3d5abdfe4b25ad
SHA256 9562fefeec3e975b8da43a82746581fb4d4fdf2f61d37f5afc8af3c23e12057c
SHA512 b337c02ba6dd27fe5ee0d8c3eb2c3d67ffbd6a6e36ebf09f3674e42308f2c99a4dc977334295a4f435cc7ee64c6f27a74dff48e74493fdc1dc4f64def6163a87

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\ko\messages.json

MD5 ffabe1cf4dde5600bc747c44ba4983ab
SHA1 8137e8f8681e13c607bbd150282360c4f6e79092
SHA256 de486faa3fb52b712e8b3befd0c47a5a6706abe255ada23361277580fc732143
SHA512 f0299dcaf275fdf4e1c0d403ef11f4556636a72cf6d086ae3f8c4b09ee2a7d4ebb4e028b8f69e1a8797baa80c0826b6ec73478d107bfc63643df8da7747b9e66

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\nb\messages.json

MD5 6a65cc4806bf067b9a2ee7e3c4c14e61
SHA1 79827a4756d6cf45aa638879d00c5dd50b2e15fc
SHA256 d191db06a165cff18fca6d2f73ffb58f3ba5b10c52ff77d089c97a5e4892a5e6
SHA512 549885e78b0d28cf39bf8763c8a044780a63ae681c1297c0387d6e4f1dbd4ac3335081453f89863afe33c628e317f8eabae81d31ea5f19bcc55fc21e5a8cd6f3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\nl\messages.json

MD5 bb11132a94d08b0388ee4fe7f28f532e
SHA1 904a70c5d035d4455e63aa063cf9fe1e0a30d012
SHA256 5df5b5b278eafc00ec19e349a8f2c68cdd6c43f914209b14c8f59e816ecc98fb
SHA512 afa94fe7a8cbdb848d24c5c1f0efe296d3892988ae9b00d4bcbf72a45225e459a419c0015aff1f7683dd5465915b17439b406095763776ed27cebc44ebaac290

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\pl\messages.json

MD5 88eda8badc680d9bb6b11f0c1bf36d82
SHA1 669da6e8c49b1e5769d932ac00b98fe33331208a
SHA256 936695715f05e73c3242c79f9c9a87676edefcfa1ade03d319eb375952c9c205
SHA512 55834e310ed3bab2e7c7c3f1aa07145b27c14978dc2d8457a456937b69cefcb3882e63b748d2e760b0ab1b97f6012b3c2686259c442a9394e9bd34202617d729

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\pt_PT\messages.json

MD5 3956cec584afd7416af5de4c4ef33d88
SHA1 faf5f955eaa6018b612dee42cc538958415f60cd
SHA256 c3a77e80afe5b186c8052eee82c200cea780e0b3e3704c2659935193eb55ee3a
SHA512 b97afb03f3f04ec29a581b1fef7e96038c4e7c6d16d919fc123e1641e2bf58fc91fde1e92f7ecd7f5ab99b7027ba2f1bf6024e6ecc0973f8080cbef6ef25d906

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\ru\messages.json

MD5 c80006a22bf2c0969546281f72fbf243
SHA1 67a66fd234f7e79699b521b66474d788aa83b8cb
SHA256 71a4050b25eb9edbf9e487cd53decc23093770c135cd2b0d14853700545520fc
SHA512 a5ce4399ab585ebfd34828b283f07f23ae7722e47709b0cde015eb2c46e676a19a13fc2249e28572fdea891fa30cd5d58bbd58316b801b3c91c4d8e6910e483e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\sk\messages.json

MD5 8f2c18e2a051a53e7185b55b2247bb86
SHA1 af7ff3772426836599a94f75e62338fdfd6ae316
SHA256 7ab379d665ca2a312d6239d4dac708795fc5908ab91f11f6e019f6cc1da079f3
SHA512 105db86e37bd08dc12a565673e9c8c0fcf52b29d883146e8a9e64c62e23f7a1ecb3df58ce4c76abfff1af8780dfb11062e0c81b4529f9e402f9a1261526384d6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\sr\messages.json

MD5 902339e3e08d9b51bda781c116919065
SHA1 08edd441bb7a6fe243ef99f45dabb3f575da0c32
SHA256 05d26726f205b6b1fb417377cb5a7ff9471195517c20bf382a73b45f03cf35b5
SHA512 7d02fe8d91962a2cc5b1ceab18a7af2b36fbf7d107e89c0ebf0f102bd6baebc2f9b9582378b7f1f3fa79fbe6b0c00fb3598fb39b5efea5e820a5c7e9b52debb4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\sv\messages.json

MD5 149e3da2a5ec6487a3a6100cf1fa0041
SHA1 45a810f4b2993b855f75a7b0f635c4b34ab721d3
SHA256 42e3e168c68faeda1ba10fc3ab190a6b1cbec93614c1e3053e6bf7dadae1c8ce
SHA512 029c0f7f8cfa94edbd5072d21544224edeb48fb3e6cd776ae4f466e35af55040d481929cb4c23cc8954a785f425429e10deb6ba4baf77001416dde51c6b22364

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\tr\messages.json

MD5 85b89e76e757c91681de625e2e1e2143
SHA1 170f735e8eba9768024d119e03aeaf0d9ebb8dad
SHA256 babc4b4777477e6975eee6bd72bc208b01894e6d5ca789f2819c0d94255a6dfe
SHA512 af8118e473e3fbbfbd21fad367209945b5cd2b7e63cb4c8f2ba3ab74a1705694d179b7a482d4bbeb87fbe3df0c6118fd90e1ef8ae9ae78f2f18f4c62a255fed8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\zh_CN\messages.json

MD5 9fdf4828944199a682617fa7ff2ecd54
SHA1 877e8023357ac49f165c33781bd36686944d13f8
SHA256 a784a41771a528b3f04ab1beb4aa64c9b3d26a540bbabdb8ebec4787e844742e
SHA512 33b0bcf6e3c2d7e1ca11b0d996667038a45861cd25d11bcd67ffc071ebfbd9f4f137cc8a284964d5c660eaa05dd2221f96fba55bcadf1df460a178e130fa9e53

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_locales\zh_TW\messages.json

MD5 5d7b067e7a48e210eb1cdd3ea4b29fe4
SHA1 64df2081c292726ca28a55627891c2560210858a
SHA256 4b420cc80affe21d22495fd8ac53272009c0a040d6b298c15b750213cf92d058
SHA512 a0f0f7ca7f0c464c51e520dfdd52d25a8f154d7a5294770d851e33c477e78426af831aeebfce3085bfd030802ec2bf9889fa05ddb5832ad6ec5e88b135847f17

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\_metadata\verified_contents.json

MD5 d3f199730af50d06b992afb5f9bee8fa
SHA1 c8c8436feb6e68255877bdcba983a789c8446179
SHA256 657679785c9fb0abaecfc2124136e7e39b6018ad4b9e5452b01d9066a0493b50
SHA512 dfed3fcd813f6b48ee50f3c0c0a6b1c401cbb85534490db6607cf8a075380915fe19f99d58dd7fa916702f927bc2acbd88b393e9db34214bd3c29c9c7e58341d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\wasm_lib.wasm

MD5 7612f49806af38acaa081f3056ef2e1b
SHA1 4e9b8711b0be39209d22ff647ba67803886e8dec
SHA256 c0324e0e92c5dbc019e4274a0f93774c8fa7767d02a26eb74116835f57948418
SHA512 876d39369fdf7ffcf4bd3b7856735425bed85a49444b18edf010fd6bb65f79a20d8b13ad6b854015a7b4502443945a776c4741e19c7301d4d1990ab242935cb5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\wasm_feature.wasm

MD5 7b3c4f728ad69b286da8074a9ac18d48
SHA1 3cf9ad45f2ba38479d2dbcf0e534798c0f7be5ab
SHA256 13946aecf894abf712069e5ff9f3f00433a446f781a3219ff7d92c18dc334c45
SHA512 820eb8e17634553ee9e2e03760a71d33588d83c8c162cddc1176113f21e0c6220dae9798fe80004c03d0698737256070dc3c7047a0ca72e2422c7be4873b6b0d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\site_status_typosquatting.js

MD5 dfab0021c0752ddf6d5ae64d7304a559
SHA1 f9c12b487422d1da21438eb53327d8c37e0e305f
SHA256 2cd6f39bf364a97b8f086dc4a726c52f93f16c7e3785f3b4b57b9bf3ee93b760
SHA512 9ade7a5b37dcc13357fb800490acc08f25293a14c2f59e40dc7c0890cad90358cb7fd36c73f5d0c1b55c8e122b3553352bfef51b8f3484436597c00918a2da1f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\site_status_site_report.js

MD5 ff52015e993448ac26972885495946f7
SHA1 bf8987910346a0a9754fb78772fdd4233008b7e1
SHA256 dff593f633fbc39316e604d2c0032f2875c0265626c1a60ce62dfab9e22e4d98
SHA512 c139b2926bae4e5a23663ddfc494c55807a60245e93bb443df6f5fe8780fe276c009c710334535c2ee33ea0a76e87176b561a4a3cbc0663ff465eb7ae4d09da2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\site_status_block_page.js

MD5 b68b22728431f16d95c1362232117c92
SHA1 c07bfe695be462971a3e7f5a5ed0750d3ee72530
SHA256 cc284fd50fec97c8d2c4270c91ef35b019450c98daa46d90a4cd893355204c71
SHA512 ab2a773f90e8e79de56db00ea6a4709ad7866ca7bfb4a0b94dde454d82a922ade9e0d343046db4fbc0ca6d49d172600d59fb3bff38391f050dd2b030cd187087

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\settings.js

MD5 b0d4294043139b360196075679ee59ea
SHA1 05d3176597a3caa59eb5debb4ea5c6228a83c632
SHA256 8aab291ba4b6188718ccd57b9e6c1a72cb72ce06d7f9ac57b12cc2d1b0c9de53
SHA512 b2c6b53623b98737ff35f22389f28a09df0179f94db6eda11daf2298577c3399a23e6eaf2e179a23fc76e6bb520673a253daeac123a19ee407796f1b5951df59

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\page_banner_mb.js

MD5 a1eedc7e0a667473283610fbd3ec0c39
SHA1 d075652511ce4ef152224deed7f06f9df3b832bb
SHA256 daf9f9d32306f695953ccc8462693897d892bdb018b9b20402b7838ecfb09a39
SHA512 badd2bd340c4b0c982b1425e9bdd15c49c489e3ca1a1011484965ce2a10bb2ef4ae55085f22351f6fc9050cad73e1aeb24a24ed5ce751aaad3950f3a3eed74b9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\manifest.json

MD5 10251313f96373f91b1377522598be3e
SHA1 d9a865dd4ee17d405f7455eefe12941db1598cf0
SHA256 7de0e004be0bfd5bf5a8d14697e80d797f5b45153ca3a98a1bc303f26faf8b75
SHA512 e075137399daea74f201f10fdccb73a4877e2d80ed32c2044aea937621445ba6afa789c427d92606f359f356363f0222653e71b029de82733913f61730bec1c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\iframe_block_page.js

MD5 caa59401fd4cf428f16cca0734ea567b
SHA1 c1dacece2b62b40cbfe9be213858924f0515a44b
SHA256 005f69129394c010facbe81ebfa59598f7e844d2f7e173965a7f99c31d29a79c
SHA512 731f8b89b651bb0a7257fdf45106b0e9ae6bb5bede0e65bc42f641de1d76a509f1a5945009c7e0f4c4163f6b2367366c1712c64b8a4dfb8fd9a5a0314bbbb05f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\how_it_works.js

MD5 dc04e05ec7ec2cb375a2300f3125408a
SHA1 a12e12e024030cb166351c2ec511d6941660debb
SHA256 0c4b22d571ffb9e21c5aa3e6a41f13c1c4c05410419f997af70d8774c95c252b
SHA512 9bd13f1de9dba2aca795ea737c0678925f471f99a4d378f005099827d6f5e1e45f78bf3cc468fd6875199c151532523ccf6cbb309bc2cacd93ada99261b04378

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\background.js

MD5 19497daf44e10ee5312ba7e5a52e5592
SHA1 e9e8fcdc06584597b033167f8a8217a3ef6c7827
SHA256 8d35365549843cc3ca5f838c0d7be808bb790346471762d3b14258835a00757c
SHA512 dc498af261d4a04e96cf4d268ca3d3d0c3d96085aa3027f5574cc3fa6ccca1c3dbef6dbdc9dfb99ec7e684e016aebb2d25dad3a9f38d4aa9898136ed3f76215c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\activate_banner_mb.js

MD5 bb4b6691a984eaad33cd4d948ac9c876
SHA1 2ea8aa1aff226df8df47b498162858e70902c61f
SHA256 56e6ec6fd0f7c58308f985cd25114b9bc710c3f08f25f32d02618ce2055fda7e
SHA512 d9257d7eb860671c85b7a019ac0357dcdb134056dfa618c33139017691d045fa7362e4bf9c02fd3049c7c7c3f8a8fc0165030503934111f5c14a8c53de301e8f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\8.1.0.5236_0\images\sidebar\ic_chevron_small_left.svg

MD5 e8b741dc79b08ad9c15e9ceb0aec6458
SHA1 b0c45ae87d161d849dadcb24ad4f5fc7030cbffd
SHA256 1d35dbda1d0ae0ca61bb46974ee322b41461f9708cf9afd4fd8e8b4a156adbd7
SHA512 2a4a481cbcf15be6cb23daeda6362d4fb0a2f53a0dce22721bbb7705f148bda8cb25f89ff46005543b862901e7c899b2b800ee6bae215157af0d7c13afc26cf0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\content_mb_banner.js

MD5 edebc1d5189548ecea304bf23cf14bab
SHA1 ba96af37d02616c687ce7fdfc91304145f7132ce
SHA256 de9388f50960053db488378d0899ac2810a1fe9875d0b6472545a3290745e4a2
SHA512 d2b6837c2a3a0c4965d4de7fd1feeaccf4dead644c52e6d014f12057181be1c1f6560d25d6cbabf512df61a596082537fad0fd2174481cf838fb919edf345698

C:\Users\Admin\AppData\Local\Temp\scoped_dir3296_1047022868\CRX_INSTALL\css\ff_policy.css

MD5 feceb462e4133beda13a210ea234ee51
SHA1 e32e8ad6bc1d213a3b444c4f017583189c3c4e5d
SHA256 1f2923645b40e5ea60a00f29945e03144656603bc064bf10901cdad1b5491896
SHA512 28aa3eb3fa94b508f838be2af0562b19d4146aa820e264f908e221904048d47cbea4bb66dd60c161e838fa511a6f9d7e96299dd20ad92590739cc0603afc307b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3296_1546897942\CRX_INSTALL\scripts\content_iframe_helper.js

MD5 39fedb52b253744fa6ae5ef84107a559
SHA1 c4b6241fc57f1846385ae539b98a877af7608e4d
SHA256 65cb7f832d180b069eabe53a0befb1b801655d5e825a206bd9bcda582212e563
SHA512 d59d4ccb24167bf3ee9e9215966a9d12e6b0e6f54b13c3ef87f64dabd779bc62f6ae6e2ea62cc6ce425b95e66324ef312635747da95465036838843b43564772

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\8.1.0.5236_0\_locales\pt_BR\messages.json

MD5 70e55405dcebe4772576aa0e10e20d32
SHA1 a5dd3f96b70a98c2f19ef37868daa941de37d68b
SHA256 fd4baaa95740ffbde28626cfa708b913b3c5b801a17e098046e18e68bd594b72
SHA512 1f1effe153ee666463ac3a905b6576881d50f1e0dbd6e54d42fbed6954d3db5186a1ccfb28d071531099cc1c457a9033e22c8078ed3b65e757483f8b844d45eb

C:\Users\Admin\AppData\Local\Temp\scoped_dir3296_1047022868\CRX_INSTALL\images\browser_action\green_40.png

MD5 844950e5c560a509d18d08fde84cae1e
SHA1 f6b9fe291596760c54ef3bda7e86539ed1bc174b
SHA256 fb5b7a7cf4511a085f10c7892c30cd6e96bc1dfcfa77130187203012975c4b32
SHA512 b9e3b0efe15fe08dc36f715379f85e4152656bfa5cfcfb68ead4053c64c7c713c7c01cfc473147ccea64c2d210b49dd9078ca37b42c56353bc52939011a6c64b

C:\Users\Admin\AppData\Local\Temp\scoped_dir3296_1047022868\CRX_INSTALL\images\browser_action\green_32.png

MD5 a646de09c67221f0b5635b208852fa43
SHA1 4dd709d378ec9e3b7b88d3400c7c0d159dd7a46e
SHA256 0337efdfd486d0877b3eae8a9c251e8c56c1e6787f48a412ad4b32504a46e1d5
SHA512 cced6b598b00ca4bb968234b8b08ad40fd2f8ea075a76ef6b14644f48b012ff7f95eda4317e1827bfd5517eb70cda95dcd40c0b110a28739a3e166d7ddbfcec8

C:\Users\Admin\AppData\Local\Temp\scoped_dir3296_1047022868\CRX_INSTALL\images\browser_action\green_20.png

MD5 d498609be39540e6b441da31c3de20af
SHA1 1780747374c57bf886b33e957d561ae2367ee09c
SHA256 8526ea04f38e5632fb77272d9b03c0ba6bc4baa7fa25fef8adae81769e87f078
SHA512 74b567d12a49e3e984b2801eec23cd12c26383ffdaaba56b2971288e2e9d7da29fc94bc35eb12c8e00795d599ecc81154c606e9e5acac883f5e474e2fef7454e

C:\Users\Admin\AppData\Local\Temp\scoped_dir3296_1047022868\CRX_INSTALL\images\browser_action\green_16.png

MD5 916575e87ca461fde65edc2dcccb0134
SHA1 bd0a7d65b1511b0124ad926b51dd2c98d47d1f5f
SHA256 073a0ce56d034c829b3c09102dbf50b4a9760118a3a49a5885fdb44abf36a58e
SHA512 99dab1542909ffd3c0fb81dc68f9563dc1be20bfa1e3fd1c96e63261ea2b40a5bc814281de42d17a5924f20de8d1ab97cf1c55eca676416e4cb5421229475efd

C:\Users\Admin\AppData\Local\Temp\scoped_dir3296_1047022868\CRX_INSTALL\scripts\content_aps_balloon.js

MD5 8c522f603f9558cad5a9af1d4671977a
SHA1 425b1eb95b1aa43eca0e6ce4aa2cb47d76d469bb
SHA256 96b23f0144982daa0c109ff5a1970a7645f5f430dfe492f72024ea6c65549aab
SHA512 11c70997b537627bf2006ef85b28240cb9591790e1585ba28c3f3fa7f37fa32f9da6809e59b93a0deb56de0056203532d2f38a2f516a5c3bf4c60b86cce0ba79

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a4962561969cdea6751efd83dd513136
SHA1 3d28a1bddf81a1b3f6068eaefb436e1192ea7b68
SHA256 49066b8b73a76503f2b5b56a445f8b8a8c951e71db925d42c547251e9840e732
SHA512 5d5819bd8e612a61abf9835f3c367899a679da9711a9affca01e2d7772467f8b31193f73030323555584a7590d56c5168aa138c4717aa0e50e26b6c1c4bcef3d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 99bbf153fe6bf867b2c328670dc40812
SHA1 18d3d6a30d8be7d0114e5add3de4214a5780f7a5
SHA256 56151622ca48f36e5f8282cba25647535917ec3dde6eae29f9a3b8e5dd75459a
SHA512 e45f06b6315d15cd6c690295a252ca1bdcb1d8f7dfe5f43ed090bc91afae315667c0bee4037223108b3cb8f4887c1c6e5c08ee3b65f35f24e960ad9f415533e0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f56c6ab65a0baf82b832af4de9dc8fe0
SHA1 e964ee0ed8dcd73a900b719369b3a36577fd63b9
SHA256 d20bf77fb146052d20f376f632b387a6e51602300b996ee35512fc875a7091ce
SHA512 8574c55570b423d569f852edc8062e0ae45ea2958dc9ac8a737c8fc12595b48998c1401c9b99285ab24e8c27ca2120329df0efc5d5e88d6751671d12b6f200ce

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e8269cb8fbbee68d0ca8ccf4bf901aa4
SHA1 db8f085f77735841562a8fd6b1a5c75d60ab43f4
SHA256 fbc8fd827e8b277cac420723dcee47459e413790cd6b957c36640f315a79fc38
SHA512 899f70a47cfcce55d876e993f4351c153e120c4b91209326c7412d8c28431cc68fe6c53795e8b6a8abe66420537c8524a983bf7337b4d767bc3224c02b5f1c77

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 aad84878404cf7c4d044c0ecafa2f308
SHA1 3efbde817efe008d228ada8acf7b2a070928a456
SHA256 019b1289343093fea3f4f5eba8e2c3cf3d51cba3fda468ef8c7f43825b6b17c3
SHA512 ddcce6da6eca5813adf9546599fcd2dfa9fd2a81ba28e6860fd198786a13f8aa803365d2a0ba195ccc6c1f66695f473aa7d0348134fb690dbf3ad6b2abcd48d4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3531621c1a65e164ee8f56525e00b1ca
SHA1 38b910a49540647a58d36bda4aa0542615edb904
SHA256 8682d033dd6cf7446fbd664df9e786a977d515a27c4db602f31794644cd39198
SHA512 c82253be5f4c15501ef2ae970a7d3fb4474b5ca7ca5a7fd06293d8aff00c315a15a3052356a15ff224083b072d3752f31a677c125f358664f653f0044ae9aaa2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 42d8a1d758f9ca07d4faa5470a40e95c
SHA1 bff6dea068eadc7267f82f34eabec68d6094a303
SHA256 54ea82c4e4930ff966e2f1dfee46ab15f38a87b1f83b14a63f8ebd68f92c7452
SHA512 9a0731482e400be0307ed3e88c35c26f8274ae9b99584ae43f7a205dcd2193e2fcac0ed8fcca4629f9622bdf4fd57a9196f7bfe634920d837740f5c0ecfe0bdb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6871fc863c369ca7908b928270719ebd
SHA1 b7c3e8e925a8236d5a350840983cc143333ec0a5
SHA256 ed2b9fdd3b04694a4fc78346129b6f095da9dd193f27c2ba723344bdf57a90b1
SHA512 6f9a9fa26c03d17a94d886306866ace846d46b0073dc372cb8a883dba621a3ac30539df9b2aa90de50ac23042fb31f5212693436fd7dcf8d25e2428c2996c53e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e842e57a3917c4861e1f74541f757d4a
SHA1 6eb2eb7e2ab4231a7760850386b45230e9f530ae
SHA256 544f7f4041123be8e77cf857be50d8c8b86874a966637a73592198ad09c8f9c6
SHA512 19252cf7aa2e21ffb8d3f27592b2014f76a63b5c5f1dab60e4d7041a49c1b849852b7ac5cdd9dde1ea8ca7659e240091d29cf08795c15f3708f77e5ef7b9a9e1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{1FAB8CFE-9860-415C-A6CA-AA7D12021940}\2.0.0.34\BGAUpdate.exe

MD5 3f208f4e0dacb8661d7659d2a030f36e
SHA1 07fe69fd12637b63f6ae44e60fdf80e5e3e933ff
SHA256 d3c12e642d4b032e2592c2ba6e0ed703a7e43fb424b7c3ab5b2e51b53d1d433b
SHA512 6c8fce43d04dd7e7f5c8bf275ba01e24a76531e89cc02f4b2f23ab2086f7cf70f485c4240c5ea41bf61cb7ceee471df7e7bdc1b17dfdd54c22e4b02ff4e14740

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6f37eed3dd028b326d148a571efe9c4d
SHA1 45026854b3f3f72d3111f51eb00dffe50274bd90
SHA256 e7efe585ddb36743a4a757dd25d9678721987e3e557c03fab7ff1ea16c283f29
SHA512 0c9694c95c29c30d3e1c34a54f571439a47099bd6107d74c6619d9c958779946c3a3eb8ae4ff5ec380abdc77a8337404e90e0bd8d1f45f8b85990d70faf50940

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 00daaee87e0503077c038790dd117606
SHA1 7bc220ed9addd73d7b6ef729638b7fe3f7e7d226
SHA256 9ee21f8ca758a2a435a1b2ecc5ff938809cb32c80dba67ce144dde4efe771e99
SHA512 6d62279b4a2c24253f87b1631fe0de6d638f881c1e2e84e12f6f571692f6c02ecca27f5e68fe2e18459e31cc7fbe724a4531334a18e299d25f142f0c92dc7c58

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 abfa9afb06a96d1eb93ec3775490f3d7
SHA1 bc6757f662e20c121571e7e244b4cb81a1f04ce6
SHA256 63d68922256243356b8192b4db90daa19daf6f3cb9d777848a81db94ed7b1598
SHA512 e26bbcdc4c2cff741cd2c00fb145e9ff81fda130eb8dc320e29419562e7304e7e73c448c1b371a08d5ed998ea9ec2b6ee13bde82c92ea1ef669203385ce23fb5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 c3ee0ba50219feae2102be5a60aadd9d
SHA1 fee24c21c18330b18b1f66c51feb22318bf0f4d8
SHA256 3891d4673800296aaeb0cc6fa63985fd7f2e4fdd4eb3e9de04d13d9bb94dcd6b
SHA512 6f2be58d774a901ace3612ae29a74d17bc11c12c5bc5a0b005580393c9fce78b04473c2c6c69896ab401f89b4b1fdd9eb9f48eb913bbda1ab41e4fc6fdc1d86d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 eaab7a961e87345d48e75a91077c7de7
SHA1 a4fddf21c616ca4df810030d3a155dcaf5374a4e
SHA256 614e4cc98c931bce59eb4ad3311539ba0a67c8efaf12a4b87cd5f8df995dbdf6
SHA512 8751574d1336ed60ce3210040cdd07805e4559ff59a364e420e37078449dc9de909942bdd2fd0cc7823c7ebdc2d26e98bac01681d3045aa05d16e59f5e103c23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 47c2b3671832a66c7a56c43c5a527c02
SHA1 4d4b07fe27aba61c2928d5e420b16cf5cf832f03
SHA256 06656cba85f38e4ee4cd468f37c195effe26672969a37a773d97da955b5487bb
SHA512 43eb821591d15f15d35a7713d44a6329cdcfb3850223e0a91f19148623254e8fad87f1ba4cc0685728e1bb71ee92f946cd7d0b82fca12095a23316ee29722fa7

C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.68\Installer\setup.exe

MD5 05e320ae544022adea3f8c441646765d
SHA1 3c6266b8a8c0132a97b2785bcb9ae7546ac02cc9
SHA256 e1618f31f476932871871ebc6e63d57aad643b74ea892d3d305e4125df1e6f10
SHA512 c1cf5c001ddd6b3b3c68b697f8ec9f1cbd48b5881f9fc805d74eb14a13eedcdf71e958ca1b790353a4edc64008558295741cfb785e0a3824a8f3a62bc985d387

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 81dde9d941f670438352f8f248a376c9
SHA1 71c5355646bc032650bad4b282417b348e2c3f64
SHA256 7f34f6bd77aa5a840991bca350dfec8d735db62826d3143793205d171ee9561c
SHA512 55e9f1e7be97d3b2c5e6909d600fa99b4014a7a6e3e807703e92c4452e7dceb451e909669af62d50ac6eb51ba516fafbe02035388c19d7293e63769ecb1c73f1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bb0556bd37392504a8a4bd9392a07db3
SHA1 b829ae7914788a7a7cc0938e9c898c1c484644bb
SHA256 b7b05a4a5c52e051a006fa7df7f4bd3cc33b44cb666c16b1ed0ac024c97d396a
SHA512 17a9c727b71bcb44d1518bc4be07bbec33faee3cfea902ba6de1dac6d34f5921f9e91332df7f05b5c0d2f5073af065fa551060d426018b81d3b419498e39cd69

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 41493cbb9e84c476a468b213daaaec89
SHA1 f56d22267e3c3d0344f02682f937f36239866382
SHA256 a3631ac5b067f8d89d769eb6f2d845d120282eb4c0a172d16bb77a4c042fe35d
SHA512 da66571c6c6a2dd203e97994a4e210fe24e1d0c58edbae32dda1fc42f243864fe1eade097147d31da3f24342a61b808515b8764fb6ab6560894351fce6ae80b0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 de897ae075556ce6535fb5620738de44
SHA1 95b25ecf168144ca6da92c6692e7ec866b0c6cdf
SHA256 85f944e10149dffafd3e958fdae67f31ac474067cd53154582e79d43eedd8153
SHA512 12579f8706251ca343c5fb4dc266aa34a48bced9d617d5bd0d04218363ffcb60c40690711544522ec59d3a31793286a7392069ca18bd8d7e3f66870feb41d2ac

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5fb80ebcdcda138d06fd2216e61ffd26
SHA1 7d8ec0485989d3bbf5a916a91a30fa563a7dba09
SHA256 449210f47b49cee972dee5dcac14be92d43b6b65df8122dd6b8fb3e1d8e28e34
SHA512 e2fae0d43bf29817b37e737b3eaeeea50dd2e29dbb17dea82afe2cc5df901a4c2f178316421d025ed136693f7a7fe3c9af54d6a49ae1570b80b5b946bced3fa3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c4eb7cfa69ca33bfe49ca4b122ae7fbb
SHA1 442ad1cf96c28600e3cadba90c6eacad86c16ec3
SHA256 edb972e5599c0cd51a80d066b64559f5a7a7e9c03a1a7d1a0ba8114599e08928
SHA512 c1dea1774180266910dc2c36b80237cc526b1a2d6527d67b9e10d5f074c14838fc7d53113afbf239ca936945f18345b9ba75abb4351f6b4a1656f2d620c76550

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 67f283c7e4ce579c05515f88f1e98347
SHA1 7ea8322cc1f16cc0ffb7c34f633754d3dcf31704
SHA256 af3f95d24bedcf2420ac122015613c3fba9c0a263537d62cfa1b1c47cacad2aa
SHA512 5da7df59d265073150cfddd2c451c2004e5d25ab9b31d740d1eec8e840bf0bc848520336ea8d67a17aad119baf50ad908054f8663c437546835e35df49953001

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3b2269366c003cd63b19fa2b14cf86f5
SHA1 1f17ba3616cf8bd9d87388cf286ed8d29b0ce4f4
SHA256 ae287cdd60eff6fa4848bfd2b0a0970445cd98ea0392b0bf928d676f25c2952d
SHA512 75747f91143d5b99b356620796aab42824ce9fb8fa6a0017e6a1d7776ddb1b4baf98ec5e0bd08c60327e95ee0ae763dd7baedad74c380bb9aa7e9cc171f9a445

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6cf1004ab35e71bfcabdd72eef40986c
SHA1 67081e420594e689f413b5d786e69f52505acac6
SHA256 a761cc833964aa5b55d6c4d40ff58482ffd7560d5afdd1b015d423be6f9f5737
SHA512 3eccc61b882814a1587ef6d73a5a432446981fc7f748a550ec2ba442a336eb5d44a11ef8a2e9cbf2a3206964302f9cbae730c8a54e7aee014246b642423d63c3