Malware Analysis Report

2024-09-22 12:46

Sample ID 240703-ysff1swakk
Target AutoDox.exe
SHA256 aef13f3ec8abf777929e42aa3de86774ab8362f7fbfcc0475c7b912ce253c002
Tags
score
6/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
6/10

SHA256

aef13f3ec8abf777929e42aa3de86774ab8362f7fbfcc0475c7b912ce253c002

Threat Level: Shows suspicious behavior

The file AutoDox.exe was found to be: Shows suspicious behavior.

Malicious Activity Summary


Legitimate hosting services abused for malware hosting/C2

Unsigned PE

Modifies registry class

Suspicious behavior: EnumeratesProcesses

Suspicious use of FindShellTrayWindow

Enumerates system info in registry

Modifies data under HKEY_USERS

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of SendNotifyMessage

Checks processor information in registry

Suspicious use of AdjustPrivilegeToken

Suspicious use of SetWindowsHookEx

Uses Task Scheduler COM API

Suspicious use of WriteProcessMemory

Suspicious behavior: LoadsDriver

MITRE ATT&CK Matrix V13

Analysis: static1

Detonation Overview

Reported

2024-07-03 20:02

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-07-03 20:02

Reported

2024-07-03 20:07

Platform

win10-20240404-en

Max time kernel

277s

Max time network

277s

Command Line

"C:\Users\Admin\AppData\Local\Temp\AutoDox.exe"

Signatures

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133645107185076298" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4116 wrote to memory of 4572 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4116 wrote to memory of 4572 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4116 wrote to memory of 4572 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4116 wrote to memory of 4572 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4116 wrote to memory of 4572 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4116 wrote to memory of 4572 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4116 wrote to memory of 4572 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4116 wrote to memory of 4572 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4116 wrote to memory of 4572 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4116 wrote to memory of 4572 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4116 wrote to memory of 4572 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 4904 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 4904 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1836 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1572 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1572 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4572 wrote to memory of 1572 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Users\Admin\AppData\Local\Temp\AutoDox.exe

"C:\Users\Admin\AppData\Local\Temp\AutoDox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4572.0.1094291148\1368975668" -parentBuildID 20221007134813 -prefsHandle 1724 -prefMapHandle 1716 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {87d82677-81d8-4a0a-a714-765f496b9c31} 4572 "\\.\pipe\gecko-crash-server-pipe.4572" 1812 285dbd0ad58 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4572.1.1694665418\2132235723" -parentBuildID 20221007134813 -prefsHandle 2156 -prefMapHandle 2152 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e69cdd60-d418-4001-8fe1-dd013d6aef6d} 4572 "\\.\pipe\gecko-crash-server-pipe.4572" 2168 285c8872558 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4572.2.485633870\624698674" -childID 1 -isForBrowser -prefsHandle 3168 -prefMapHandle 3184 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1336 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4cf1fa0c-ddbc-4caf-b92c-4f214b1e2cce} 4572 "\\.\pipe\gecko-crash-server-pipe.4572" 3160 285ddf8d258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4572.3.309984985\1029695870" -childID 2 -isForBrowser -prefsHandle 3420 -prefMapHandle 3416 -prefsLen 20972 -prefMapSize 233444 -jsInitHandle 1336 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9348dfce-2aad-4551-8e93-af0023afd429} 4572 "\\.\pipe\gecko-crash-server-pipe.4572" 3428 285de77cb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4572.4.196541784\2031326928" -childID 3 -isForBrowser -prefsHandle 3564 -prefMapHandle 3568 -prefsLen 20972 -prefMapSize 233444 -jsInitHandle 1336 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9e87f31b-cf4c-4df5-97ec-f73cb793250c} 4572 "\\.\pipe\gecko-crash-server-pipe.4572" 3552 285decbe858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4572.5.2041311111\6232622" -childID 4 -isForBrowser -prefsHandle 3664 -prefMapHandle 3668 -prefsLen 20972 -prefMapSize 233444 -jsInitHandle 1336 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ec4b5429-9f7f-4956-a910-5435ed43bc5a} 4572 "\\.\pipe\gecko-crash-server-pipe.4572" 2860 285dedb3d58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4572.6.1746712657\1319233941" -childID 5 -isForBrowser -prefsHandle 4184 -prefMapHandle 4172 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1336 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f7904b31-46a1-4feb-83ae-e6a590bf9dc4} 4572 "\\.\pipe\gecko-crash-server-pipe.4572" 4196 285e043ce58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4572.7.1806168379\1283053382" -childID 6 -isForBrowser -prefsHandle 5244 -prefMapHandle 5208 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1336 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6fe5e376-c0c9-4a4e-a421-c8b36b4a8382} 4572 "\\.\pipe\gecko-crash-server-pipe.4572" 5240 285de2a4b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4572.8.910808812\822352912" -childID 7 -isForBrowser -prefsHandle 5672 -prefMapHandle 5668 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1336 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {48e16b06-1d08-4d9b-a2ed-cb43dbfc4819} 4572 "\\.\pipe\gecko-crash-server-pipe.4572" 5680 285e34cfe58 tab

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ff83e3b9758,0x7ff83e3b9768,0x7ff83e3b9778

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1280 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1724 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2092 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2892 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2916 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4468 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4612 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4572 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4976 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5052 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5060 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5064 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3160 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=4732 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=5096 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=3452 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=4544 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=4464 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=1584 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=4808 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4668 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=5272 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=2448 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=4556 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=5092 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=3756 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=3860 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=5404 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=3156 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=2504 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=5628 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=6016 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=6024 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=6196 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=6208 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=5624 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=6592 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=7124 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=7180 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=7556 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=6952 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=7756 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=7964 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=7892 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=8252 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=8060 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=8560 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=6596 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=8840 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=8968 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=7468 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=9236 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=9488 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=9608 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=9636 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=9616 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=9892 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=10144 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=10272 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=10412 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --mojo-platform-channel-handle=10536 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=10672 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=10832 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --mojo-platform-channel-handle=10860 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --mojo-platform-channel-handle=11272 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=11192 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --mojo-platform-channel-handle=11424 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --mojo-platform-channel-handle=11916 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --mojo-platform-channel-handle=7908 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --mojo-platform-channel-handle=11868 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --mojo-platform-channel-handle=11676 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --mojo-platform-channel-handle=11460 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --mojo-platform-channel-handle=11404 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --mojo-platform-channel-handle=11752 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --mojo-platform-channel-handle=11152 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --mojo-platform-channel-handle=12040 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --mojo-platform-channel-handle=11156 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=11792 --field-trial-handle=1844,i,15115284092333211541,15747141168688439819,131072 /prefetch:2

Network

Country Destination Domain Proto
N/A 127.0.0.1:49766 tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
N/A 127.0.0.1:49773 tcp
US 8.8.8.8:53 shavar.services.mozilla.com udp
US 8.8.8.8:53 push.services.mozilla.com udp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 44.242.121.21:443 shavar.services.mozilla.com tcp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 34.107.243.93:443 push.services.mozilla.com tcp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 8.8.8.8:53 166.188.117.34.in-addr.arpa udp
US 8.8.8.8:53 21.121.242.44.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 11.173.189.20.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 apis.google.com udp
GB 142.250.200.14:443 apis.google.com tcp
GB 142.250.200.14:443 apis.google.com tcp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.238:443 clients2.google.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.200.22:443 i.ytimg.com tcp
GB 142.250.200.22:443 i.ytimg.com tcp
GB 142.250.200.22:443 i.ytimg.com tcp
US 8.8.8.8:53 22.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.youtube.com udp
GB 216.58.204.78:443 www.youtube.com udp
GB 142.250.200.22:443 i.ytimg.com udp
GB 142.250.179.238:443 www.youtube.com udp
US 8.8.8.8:53 bonzi.link udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
FR 151.106.4.82:443 bonzi.link tcp
FR 151.106.4.82:443 bonzi.link tcp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 216.58.213.6:443 static.doubleclick.net tcp
GB 216.58.204.66:443 googleads.g.doubleclick.net udp
FR 151.106.4.82:443 bonzi.link tcp
GB 142.250.179.238:443 www.youtube.com udp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 6.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 img.youtube.com udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
US 8.8.8.8:53 encrypted-vtbn0.gstatic.com udp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com tcp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com udp
US 8.8.8.8:53 14.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
GB 216.58.212.195:80 www.gstatic.com tcp
FR 151.106.4.82:443 bonzi.link tcp
FR 151.106.4.82:443 bonzi.link tcp
FR 151.106.4.82:443 bonzi.link tcp
US 8.8.8.8:53 scratch.mit.edu udp
US 151.101.2.133:443 scratch.mit.edu tcp
US 151.101.2.133:443 scratch.mit.edu tcp
US 8.8.8.8:53 apps.identrust.com udp
NL 23.63.101.152:80 apps.identrust.com tcp
US 8.8.8.8:53 133.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 152.101.63.23.in-addr.arpa udp
US 8.8.8.8:53 82.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 api.scratch.mit.edu udp
US 151.101.130.133:443 api.scratch.mit.edu tcp
US 151.101.130.133:443 api.scratch.mit.edu tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 cdn2.scratch.mit.edu udp
US 151.101.2.133:443 cdn2.scratch.mit.edu tcp
US 8.8.8.8:53 uploads.scratch.mit.edu udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 133.130.101.151.in-addr.arpa udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 id.google.com udp
US 142.251.179.94:443 id.google.com tcp
US 8.8.8.8:53 94.179.251.142.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.109.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 185.199.109.133:443 user-images.githubusercontent.com tcp
US 8.8.8.8:53 camo.githubusercontent.com udp
US 185.199.109.133:443 camo.githubusercontent.com tcp
US 185.199.109.133:443 camo.githubusercontent.com tcp
US 185.199.109.133:443 camo.githubusercontent.com tcp
US 185.199.109.133:443 camo.githubusercontent.com tcp
US 185.199.108.133:443 camo.githubusercontent.com tcp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 133.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 154.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 collector.github.com udp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 api.github.com udp
US 140.82.112.21:443 collector.github.com tcp
US 140.82.112.21:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 21.112.82.140.in-addr.arpa udp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com tcp
GB 172.217.169.67:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 enterprise.xcitium.com udp
US 45.76.14.60:443 enterprise.xcitium.com tcp
US 45.76.14.60:443 enterprise.xcitium.com tcp
US 8.8.8.8:53 60.14.76.45.in-addr.arpa udp
US 8.8.8.8:53 static.klaviyo.com udp
US 151.101.130.133:443 static.klaviyo.com tcp
US 8.8.8.8:53 snap.licdn.com udp
US 8.8.8.8:53 static-tracking.klaviyo.com udp
US 151.101.130.133:443 static-tracking.klaviyo.com tcp
GB 2.19.252.133:443 snap.licdn.com tcp
US 151.101.66.133:443 static-tracking.klaviyo.com tcp
US 151.101.66.133:443 static-tracking.klaviyo.com tcp
GB 216.58.204.66:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 fast.a.klaviyo.com udp
US 8.8.8.8:53 static-forms.klaviyo.com udp
US 8.8.8.8:53 px.ads.linkedin.com udp
US 216.239.36.181:443 analytics.google.com tcp
GB 64.233.167.157:443 stats.g.doubleclick.net tcp
US 151.101.2.133:443 static-forms.klaviyo.com tcp
US 151.101.194.133:443 static-forms.klaviyo.com tcp
US 13.107.42.14:443 px.ads.linkedin.com tcp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 133.252.19.2.in-addr.arpa udp
US 8.8.8.8:53 133.66.101.151.in-addr.arpa udp
US 8.8.8.8:53 181.36.239.216.in-addr.arpa udp
US 8.8.8.8:53 157.167.233.64.in-addr.arpa udp
US 8.8.8.8:53 133.194.101.151.in-addr.arpa udp
US 8.8.8.8:53 14.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 js.zi-scripts.com udp
US 104.18.37.212:443 js.zi-scripts.com tcp
US 104.18.37.212:443 js.zi-scripts.com udp
US 8.8.8.8:53 ws.zoominfo.com udp
US 104.16.117.43:443 ws.zoominfo.com tcp
US 8.8.8.8:53 212.37.18.104.in-addr.arpa udp
US 104.16.117.43:443 ws.zoominfo.com udp
US 8.8.8.8:53 43.117.16.104.in-addr.arpa udp
US 216.239.36.181:443 analytics.google.com udp
US 104.16.117.43:443 ws.zoominfo.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
US 142.251.179.94:443 id.google.com udp
GB 142.250.179.238:443 img.youtube.com udp
US 8.8.8.8:53 www.bleepingcomputer.com udp
US 104.20.184.56:443 www.bleepingcomputer.com tcp
US 104.20.184.56:443 www.bleepingcomputer.com tcp
US 8.8.8.8:53 www.bleepstatic.com udp
US 8.8.8.8:53 a.pub.network udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 104.18.21.206:443 a.pub.network tcp
US 172.67.75.139:443 www.bleepstatic.com tcp
US 172.67.75.139:443 www.bleepstatic.com tcp
US 172.67.75.139:443 www.bleepstatic.com tcp
US 172.67.75.139:443 www.bleepstatic.com tcp
US 172.67.75.139:443 www.bleepstatic.com tcp
US 104.18.21.206:443 a.pub.network udp
US 8.8.8.8:53 ecdn.analysis.fi udp
US 8.8.8.8:53 ecdn.firstimpression.io udp
GB 18.244.179.58:443 ecdn.firstimpression.io tcp
GB 13.224.222.114:443 ecdn.analysis.fi tcp
US 8.8.8.8:53 optimise.net udp
US 8.8.8.8:53 d.pub.network udp
US 8.8.8.8:53 api.floors.dev udp
US 8.8.8.8:53 56.184.20.104.in-addr.arpa udp
US 8.8.8.8:53 206.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 139.75.67.172.in-addr.arpa udp
US 8.8.8.8:53 58.179.244.18.in-addr.arpa udp
US 8.8.8.8:53 114.222.224.13.in-addr.arpa udp
US 8.8.8.8:53 cmp.inmobi.com udp
US 34.111.152.239:443 optimise.net tcp
US 34.160.152.31:443 d.pub.network tcp
US 34.160.128.112:443 api.floors.dev tcp
GB 18.244.114.118:443 cmp.inmobi.com tcp
US 8.8.8.8:53 widgets.outbrain.com udp
US 172.67.75.139:443 www.bleepstatic.com tcp
US 34.111.152.239:443 optimise.net tcp
SE 23.34.233.58:443 widgets.outbrain.com tcp
GB 18.244.114.118:443 cmp.inmobi.com tcp
US 34.111.152.239:443 optimise.net udp
US 8.8.8.8:53 cdn.firstimpression.io udp
GB 216.58.204.66:443 googleads.g.doubleclick.net udp
GB 18.244.179.69:443 cdn.firstimpression.io tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 api.cmp.inmobi.com udp
DE 3.127.15.130:443 api.cmp.inmobi.com tcp
DE 3.127.15.130:443 api.cmp.inmobi.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 239.152.111.34.in-addr.arpa udp
US 8.8.8.8:53 31.152.160.34.in-addr.arpa udp
US 8.8.8.8:53 112.128.160.34.in-addr.arpa udp
US 8.8.8.8:53 6.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 118.114.244.18.in-addr.arpa udp
US 8.8.8.8:53 6.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 58.233.34.23.in-addr.arpa udp
US 8.8.8.8:53 69.179.244.18.in-addr.arpa udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 130.15.127.3.in-addr.arpa udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
GB 108.156.39.64:443 sb.scorecardresearch.com tcp
US 8.8.8.8:53 cdn.confiant-integrations.net udp
US 8.8.8.8:53 freestar-io.videoplayerhub.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 104.18.43.90:443 cdn.confiant-integrations.net tcp
US 172.67.74.207:443 freestar-io.videoplayerhub.com tcp
US 104.22.53.173:443 cdn.hadronid.net tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 cdn.edkt.io udp
US 8.8.8.8:53 secure.quantserve.com udp
US 8.8.8.8:53 s.ntv.io udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 34.120.111.33:443 cdn.edkt.io tcp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 btloader.com udp
GB 104.103.207.236:443 s.ntv.io tcp
DE 91.228.74.166:443 secure.quantserve.com tcp
US 104.18.43.90:443 cdn.confiant-integrations.net udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
DE 3.71.149.231:443 ups.analytics.yahoo.com tcp
US 104.22.5.69:443 id.hadron.ad.gt tcp
US 104.22.5.69:443 id.hadron.ad.gt tcp
US 34.120.133.55:443 api.rlcdn.com tcp
US 15.197.193.217:443 match.adsrvr.org tcp
DE 162.19.138.83:443 id5-sync.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 172.67.41.60:443 btloader.com tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
GB 52.84.90.40:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
GB 18.245.189.34:443 aax.amazon-adsystem.com tcp
GB 18.245.189.34:443 aax.amazon-adsystem.com tcp
US 104.22.5.69:443 id.hadron.ad.gt tcp
US 104.22.52.86:443 cdn.id5-sync.com tcp
GB 23.53.174.156:443 secure.cdn.fastclick.net tcp
GB 18.245.143.83:443 tags.crwdcntrl.net tcp
US 8.8.8.8:53 s2s.t13.io udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 bidder.criteo.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 34.107.140.113:443 s2s.t13.io tcp
US 34.107.140.113:443 s2s.t13.io tcp
US 34.120.63.153:443 prebid.media.net tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
US 172.67.41.60:443 btloader.com tcp
US 8.8.8.8:53 rules.quantcount.com udp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 ad-delivery.net udp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 52.29.33.90:443 btlr.sharethrough.com tcp
DE 52.29.33.90:443 btlr.sharethrough.com tcp
DE 52.29.33.90:443 btlr.sharethrough.com tcp
DE 52.29.33.90:443 btlr.sharethrough.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
GB 18.245.187.38:443 rules.quantcount.com tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 c.pub.network udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
US 8.8.8.8:53 api.edkt.io udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 34.160.152.31:443 c.pub.network tcp
IE 52.49.45.15:443 bcp.crwdcntrl.net tcp
US 34.120.111.33:443 api.edkt.io tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 a.ad.gt udp
US 8.8.8.8:53 pixel.quantserve.com udp
US 104.22.4.69:443 a.ad.gt tcp
US 8.8.8.8:53 64.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 90.43.18.104.in-addr.arpa udp
US 8.8.8.8:53 207.74.67.172.in-addr.arpa udp
US 8.8.8.8:53 173.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 9.223.224.13.in-addr.arpa udp
US 8.8.8.8:53 33.111.120.34.in-addr.arpa udp
US 8.8.8.8:53 166.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 236.207.103.104.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 217.193.197.15.in-addr.arpa udp
US 8.8.8.8:53 55.133.120.34.in-addr.arpa udp
US 8.8.8.8:53 69.5.22.104.in-addr.arpa udp
US 8.8.8.8:53 60.41.67.172.in-addr.arpa udp
US 8.8.8.8:53 83.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 40.90.84.52.in-addr.arpa udp
US 8.8.8.8:53 34.189.245.18.in-addr.arpa udp
US 8.8.8.8:53 83.143.245.18.in-addr.arpa udp
US 8.8.8.8:53 86.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 156.174.53.23.in-addr.arpa udp
US 8.8.8.8:53 113.140.107.34.in-addr.arpa udp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 jadserve.postrelease.com udp
US 8.8.8.8:53 4.230.157.18.in-addr.arpa udp
US 8.8.8.8:53 90.33.29.52.in-addr.arpa udp
US 8.8.8.8:53 8.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 34.160.152.31:443 c.pub.network udp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 38.187.245.18.in-addr.arpa udp
US 8.8.8.8:53 15.45.49.52.in-addr.arpa udp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 34.120.111.33:443 api.edkt.io udp
IE 52.48.220.237:443 jadserve.postrelease.com tcp
US 8.8.8.8:53 6467fe805ebd2e401a90322c9c858ef4.safeframe.googlesyndication.com udp
US 34.107.140.113:443 s2s.t13.io udp
US 8.8.8.8:53 a.teads.tv udp
IE 67.220.226.234:443 aax-eu.amazon-adsystem.com tcp
US 34.120.63.153:443 prebid.media.net udp
GB 172.217.169.65:443 6467fe805ebd2e401a90322c9c858ef4.safeframe.googlesyndication.com tcp
BE 23.55.97.75:443 a.teads.tv tcp
US 8.8.8.8:53 p.ad.gt udp
US 8.8.8.8:53 ids.ad.gt udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 image2.pubmatic.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 token.rubiconproject.com udp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 ad.360yield.com udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 54.213.6.218:443 ids.ad.gt tcp
US 54.213.6.218:443 ids.ad.gt tcp
US 54.213.6.218:443 ids.ad.gt tcp
NL 185.89.211.116:443 secure.adnxs.com tcp
US 104.22.4.69:443 p.ad.gt tcp
NL 198.47.127.205:443 image2.pubmatic.com tcp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 ads.yieldmo.com udp
US 54.213.6.218:443 ids.ad.gt tcp
IE 34.246.71.240:443 ads.yieldmo.com tcp
BE 23.55.96.24:443 contextual.media.net tcp
BE 23.55.98.169:443 eus.rubiconproject.com tcp
SE 23.34.232.193:443 ads.pubmatic.com tcp
US 13.248.245.213:443 eb2.3lift.com tcp
US 151.101.193.108:443 acdn.adnxs.com tcp
IE 99.80.199.11:443 ad.360yield.com tcp
US 172.64.149.180:443 js-sec.indexww.com tcp
US 54.213.6.218:443 ids.ad.gt tcp
US 34.120.111.33:443 api.edkt.io udp
US 54.213.6.218:443 ids.ad.gt tcp
US 8.8.8.8:53 onetag-sys.com udp
US 104.22.4.69:443 p.ad.gt tcp
US 104.22.4.69:443 p.ad.gt tcp
US 8.8.8.8:53 match.sharethrough.com udp
DE 51.89.9.254:443 onetag-sys.com tcp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 52.86.229.235:443 sync.srv.stackadapt.com tcp
US 52.86.229.235:443 sync.srv.stackadapt.com tcp
US 52.86.229.235:443 sync.srv.stackadapt.com tcp
IE 54.247.56.69:443 pr-bh.ybp.yahoo.com tcp
US 8.8.8.8:53 sync.1rx.io udp
DE 3.127.95.65:443 match.sharethrough.com tcp
US 8.8.8.8:53 sync-tm.everesttech.net udp
US 80.77.87.161:443 cs.admanmedia.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 151.101.2.49:443 sync-tm.everesttech.net tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 192.132.33.67:443 bttrack.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 104.18.36.155:443 ssum-sec.casalemedia.com tcp
US 8.8.8.8:53 cs.media.net udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 s.ad.smaato.net udp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 ad.turn.com udp
US 104.18.36.155:443 ssum-sec.casalemedia.com tcp
US 8.8.8.8:53 rtb.gumgum.com udp
US 8.8.8.8:53 ms-cookie-sync.presage.io udp
SE 23.34.232.19:443 cs.media.net tcp
GB 108.156.39.69:443 s.ad.smaato.net tcp
NL 46.228.164.11:443 ad.turn.com tcp
IE 52.49.131.125:443 match.prod.bidr.io tcp
IE 34.241.118.49:443 ms-cookie-sync.presage.io tcp
US 8.8.8.8:53 pixels.ad.gt udp
IE 52.212.2.7:443 rtb.gumgum.com tcp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 237.220.48.52.in-addr.arpa udp
US 8.8.8.8:53 234.226.220.67.in-addr.arpa udp
US 8.8.8.8:53 65.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 75.97.55.23.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 205.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 116.211.89.185.in-addr.arpa udp
US 8.8.8.8:53 240.71.246.34.in-addr.arpa udp
US 8.8.8.8:53 108.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 213.245.248.13.in-addr.arpa udp
US 8.8.8.8:53 180.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 24.96.55.23.in-addr.arpa udp
US 8.8.8.8:53 169.98.55.23.in-addr.arpa udp
US 8.8.8.8:53 11.199.80.99.in-addr.arpa udp
US 8.8.8.8:53 193.232.34.23.in-addr.arpa udp
US 8.8.8.8:53 218.6.213.54.in-addr.arpa udp
US 8.8.8.8:53 254.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 69.56.247.54.in-addr.arpa udp
US 8.8.8.8:53 65.95.127.3.in-addr.arpa udp
US 8.8.8.8:53 235.229.86.52.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 49.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 161.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 155.36.18.104.in-addr.arpa udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 104.18.36.155:443 ssum-sec.casalemedia.com udp
US 104.22.5.69:443 pixels.ad.gt tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 sync.targeting.unrulymedia.com udp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 dsum-sec.casalemedia.com udp
US 8.8.8.8:53 dmp.brand-display.com udp
US 8.8.8.8:53 sync.adotmob.com udp
US 8.8.8.8:53 euexchangesync.digitaleast.mobi udp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 cm.adgrx.com udp
US 8.8.8.8:53 csync.loopme.me udp
US 8.8.8.8:53 s.company-target.com udp
US 8.8.8.8:53 dis.eu.criteo.com udp
FR 45.137.176.88:443 sync.adotmob.com tcp
NL 35.214.129.203:443 csync.loopme.me tcp
US 34.96.71.22:443 s.company-target.com tcp
US 34.95.81.168:443 euexchangesync.digitaleast.mobi tcp
US 34.160.19.107:443 dmp.brand-display.com tcp
US 209.54.182.161:443 s.amazon-adsystem.com tcp
US 209.54.182.161:443 s.amazon-adsystem.com tcp
IE 52.215.155.11:443 cm.adgrx.com tcp
NL 193.0.160.130:443 p.rfihub.com tcp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 35.244.159.8:443 u.openx.net tcp
NL 178.250.1.9:443 dis.eu.criteo.com tcp
NL 89.149.193.84:443 ssbsync.smartadserver.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 209.54.182.161:443 s.amazon-adsystem.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 8.8.8.8:53 sync.ipredictive.com udp
US 8.8.8.8:53 cdn.ampproject.org udp
US 54.161.57.47:443 sync.ipredictive.com tcp
US 35.244.159.8:443 u.openx.net udp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
IE 67.220.226.234:443 aax-eu.amazon-adsystem.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 209.54.182.161:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 sync.inmobi.com udp
US 8.8.8.8:53 d.turn.com udp
US 20.253.0.30:443 sync.inmobi.com tcp
NL 46.228.164.13:443 d.turn.com tcp
US 8.8.8.8:53 amazon-tam-match.dotomi.com udp
NL 89.207.16.201:443 amazon-tam-match.dotomi.com tcp
US 8.8.8.8:53 ce.lijit.com udp
US 8.8.8.8:53 image6.pubmatic.com udp
IE 52.48.143.233:443 ce.lijit.com tcp
US 8.8.8.8:53 67.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 69.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 19.232.34.23.in-addr.arpa udp
US 8.8.8.8:53 11.164.228.46.in-addr.arpa udp
US 8.8.8.8:53 125.131.49.52.in-addr.arpa udp
US 8.8.8.8:53 7.2.212.52.in-addr.arpa udp
US 8.8.8.8:53 49.118.241.34.in-addr.arpa udp
US 8.8.8.8:53 22.71.96.34.in-addr.arpa udp
US 8.8.8.8:53 88.176.137.45.in-addr.arpa udp
US 8.8.8.8:53 168.81.95.34.in-addr.arpa udp
US 8.8.8.8:53 203.129.214.35.in-addr.arpa udp
US 8.8.8.8:53 130.160.0.193.in-addr.arpa udp
US 8.8.8.8:53 11.155.215.52.in-addr.arpa udp
US 8.8.8.8:53 8.159.244.35.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 161.182.54.209.in-addr.arpa udp
US 8.8.8.8:53 84.193.149.89.in-addr.arpa udp
US 8.8.8.8:53 107.19.160.34.in-addr.arpa udp
US 8.8.8.8:53 193.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 47.57.161.54.in-addr.arpa udp
US 8.8.8.8:53 13.164.228.46.in-addr.arpa udp
US 8.8.8.8:53 30.0.253.20.in-addr.arpa udp
US 8.8.8.8:53 201.16.207.89.in-addr.arpa udp
NL 198.47.127.19:443 image6.pubmatic.com tcp
US 8.8.8.8:53 sync-amz.ads.yieldmo.com udp
IE 52.48.143.233:443 ce.lijit.com tcp
US 8.8.8.8:53 pixel.tapad.com udp
IE 52.30.120.118:443 sync-amz.ads.yieldmo.com tcp
US 34.111.113.62:443 pixel.tapad.com tcp
US 8.8.8.8:53 pbs-cs.yellowblue.io udp
IE 34.243.83.209:443 pbs-cs.yellowblue.io tcp
US 8.8.8.8:53 cs-tam.yellowblue.io udp
IE 3.248.68.207:443 cs-tam.yellowblue.io tcp
DE 51.89.9.254:443 onetag-sys.com udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 64.74.236.159:443 b1sync.zemanta.com tcp
US 8.8.8.8:53 us-u.openx.net udp
US 8.8.8.8:53 match.deepintent.com udp
US 64.74.236.159:443 b1sync.zemanta.com tcp
US 8.8.8.8:53 c1.adform.net udp
US 169.197.150.7:443 match.deepintent.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
NL 35.214.129.203:443 csync.loopme.me tcp
BE 23.55.96.24:443 contextual.media.net udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 cm.adform.net udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 ap.lijit.com udp
DK 37.157.6.237:443 c1.adform.net tcp
IE 99.80.119.232:443 ap.lijit.com tcp
US 34.111.113.62:443 pixel.tapad.com udp
US 8.8.8.8:53 uipglob.semasio.net udp
DK 37.157.4.28:443 cm.adform.net tcp
FR 154.54.250.80:443 ads.stickyadstv.com tcp
US 8.8.8.8:53 capi.connatix.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
NL 198.47.127.18:443 image8.pubmatic.com tcp
BE 23.60.223.190:443 secure-assets.rubiconproject.com tcp
US 104.18.41.104:443 capi.connatix.com tcp
DK 77.243.51.122:443 uipglob.semasio.net tcp
NL 145.40.97.66:443 prebid.a-mo.net tcp
US 8.8.8.8:53 cs.yellowblue.io udp
IE 99.80.119.232:443 ap.lijit.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
DK 37.157.4.28:443 cm.adform.net tcp
NL 198.47.127.18:443 image8.pubmatic.com tcp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
US 64.74.236.159:443 b1sync.zemanta.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 sync.adkernel.com udp
US 8.8.8.8:53 tracker-shr.ortb.net udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 tr.blismedia.com udp
US 147.135.71.24:443 tracker-shr.ortb.net tcp
NL 77.245.57.72:443 sync.adkernel.com tcp
US 34.96.105.8:443 tr.blismedia.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 8.8.8.8:53 19.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 233.143.48.52.in-addr.arpa udp
US 8.8.8.8:53 118.120.30.52.in-addr.arpa udp
US 8.8.8.8:53 62.113.111.34.in-addr.arpa udp
US 8.8.8.8:53 209.83.243.34.in-addr.arpa udp
US 8.8.8.8:53 207.68.248.3.in-addr.arpa udp
US 8.8.8.8:53 159.236.74.64.in-addr.arpa udp
US 8.8.8.8:53 7.150.197.169.in-addr.arpa udp
US 8.8.8.8:53 237.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 232.119.80.99.in-addr.arpa udp
US 8.8.8.8:53 18.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 80.250.54.154.in-addr.arpa udp
US 8.8.8.8:53 190.223.60.23.in-addr.arpa udp
US 8.8.8.8:53 28.4.157.37.in-addr.arpa udp
US 8.8.8.8:53 104.41.18.104.in-addr.arpa udp
US 8.8.8.8:53 66.97.40.145.in-addr.arpa udp
US 8.8.8.8:53 dis.criteo.com udp
US 8.8.8.8:53 cms.quantserve.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 8.8.8.8:53 dsp.adfarm1.adition.com udp
US 8.8.8.8:53 t.adx.opera.com udp
US 8.8.8.8:53 ad.mrtnsvr.com udp
NL 35.214.129.203:443 csync.loopme.me tcp
US 8.8.8.8:53 d5p.de17a.com udp
DE 85.114.159.93:443 dsp.adfarm1.adition.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
US 8.8.8.8:53 ipac.ctnsnet.com udp
US 8.8.8.8:53 sync.crwdcntrl.net udp
US 8.8.8.8:53 cr.frontend.weborama.fr udp
US 8.8.8.8:53 mwzeom.zeotap.com udp
US 8.8.8.8:53 um.simpli.fi udp
NL 185.184.8.90:443 creativecdn.com tcp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.8.8.8:53 pubmatic-match.dotomi.com udp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
US 8.8.8.8:53 match.adsby.bidtheatre.com udp
US 8.8.8.8:53 sync.go.sonobi.com udp
US 104.18.41.104:443 capi.connatix.com udp
US 8.8.8.8:53 core.iprom.net udp
US 8.8.8.8:53 cm-supply-web.gammaplatform.com udp
SE 213.155.156.164:443 d5p.de17a.com tcp
US 8.8.8.8:53 green.erne.co udp
US 35.186.193.173:443 ipac.ctnsnet.com tcp
US 34.111.129.221:443 cr.frontend.weborama.fr tcp
US 172.67.40.173:443 mwzeom.zeotap.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
FR 141.94.242.204:443 green.erne.co tcp
NL 34.91.62.186:443 um.simpli.fi tcp
SI 195.5.165.20:443 core.iprom.net tcp
NL 64.227.64.62:443 match.adsby.bidtheatre.com tcp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
US 69.166.1.66:443 sync.go.sonobi.com tcp
NL 63.215.202.140:443 pubmatic-match.dotomi.com tcp
US 8.8.8.8:53 simage2.pubmatic.com udp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 sync.mathtag.com udp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
US 80.77.87.161:443 cs.admanmedia.com tcp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 spl.zeotap.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 usersync.gumgum.com udp
US 74.121.140.211:443 sync.mathtag.com tcp
US 104.22.50.98:443 spl.zeotap.com tcp
FR 149.202.238.101:443 ssbsync-global.smartadserver.com tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 8.105.96.34.in-addr.arpa udp
US 8.8.8.8:53 72.57.245.77.in-addr.arpa udp
US 8.8.8.8:53 24.71.135.147.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 93.159.114.85.in-addr.arpa udp
US 8.8.8.8:53 6.163.102.34.in-addr.arpa udp
US 8.8.8.8:53 164.156.155.213.in-addr.arpa udp
US 8.8.8.8:53 173.193.186.35.in-addr.arpa udp
US 8.8.8.8:53 221.129.111.34.in-addr.arpa udp
US 8.8.8.8:53 173.40.67.172.in-addr.arpa udp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 204.242.94.141.in-addr.arpa udp
US 8.8.8.8:53 62.64.227.64.in-addr.arpa udp
US 8.8.8.8:53 186.62.91.34.in-addr.arpa udp
US 8.8.8.8:53 140.202.215.63.in-addr.arpa udp
US 8.8.8.8:53 66.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 odr.mookie1.com udp
US 34.160.236.64:443 odr.mookie1.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
US 80.77.87.161:443 cs.admanmedia.com tcp
US 8.8.8.8:53 ice.360yield.com udp
US 8.8.8.8:53 pixel-eu.onaudience.com udp
US 8.8.8.8:53 image4.pubmatic.com udp
FR 54.38.113.4:443 pixel-eu.onaudience.com tcp
GB 185.64.190.81:443 image4.pubmatic.com tcp
US 74.121.140.211:443 sync.mathtag.com tcp
US 8.8.8.8:53 eu-u.openx.net udp
US 8.8.8.8:53 rtb.openx.net udp
US 35.227.252.103:443 rtb.openx.net tcp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
NL 89.149.192.74:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 ps.eyeota.net udp
DE 3.125.70.222:443 ps.eyeota.net tcp
US 34.111.129.221:443 cr.frontend.weborama.fr udp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 8.8.8.8:53 simage4.pubmatic.com udp
US 8.8.8.8:53 idsync.frontend.weborama.fr udp
NL 198.47.127.20:443 simage4.pubmatic.com tcp
US 8.8.8.8:53 a.tribalfusion.com udp
US 8.8.8.8:53 matching.truffle.bid udp
US 8.8.8.8:53 pixel.onaudience.com udp
US 34.111.131.239:443 idsync.frontend.weborama.fr tcp
US 8.8.8.8:53 98.50.22.104.in-addr.arpa udp
US 8.8.8.8:53 101.238.202.149.in-addr.arpa udp
US 8.8.8.8:53 1.15.210.52.in-addr.arpa udp
US 8.8.8.8:53 211.140.121.74.in-addr.arpa udp
US 8.8.8.8:53 88.199.214.35.in-addr.arpa udp
US 8.8.8.8:53 64.236.160.34.in-addr.arpa udp
US 8.8.8.8:53 4.113.38.54.in-addr.arpa udp
US 8.8.8.8:53 81.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 103.252.227.35.in-addr.arpa udp
US 8.8.8.8:53 222.70.125.3.in-addr.arpa udp
US 8.8.8.8:53 74.192.149.89.in-addr.arpa udp
DE 23.88.86.2:443 matching.truffle.bid tcp
FR 54.38.113.7:443 pixel.onaudience.com tcp
US 8.8.8.8:53 tg.socdm.com udp
US 104.18.25.173:443 a.tribalfusion.com tcp
JP 211.120.53.206:443 tg.socdm.com tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
US 8.8.8.8:53 sync.colossusssp.com udp
US 172.240.155.108:443 sync.colossusssp.com tcp
US 8.8.8.8:53 cms.analytics.yahoo.com udp
US 8.8.8.8:53 hbx.media.net udp
US 8.8.8.8:53 c21lg-d.media.net udp
US 8.8.8.8:53 medianet-match.dotomi.com udp
DE 23.88.86.2:443 matching.truffle.bid tcp
US 8.8.8.8:53 hb.trustedstack.com udp
SE 23.34.232.19:443 c21lg-d.media.net tcp
SE 23.34.232.19:443 c21lg-d.media.net tcp
BE 23.14.90.99:443 hb.trustedstack.com tcp
JP 211.120.53.206:443 tg.socdm.com tcp
SE 23.34.232.19:443 c21lg-d.media.net tcp
US 8.8.8.8:53 s.tribalfusion.com udp
NL 35.214.129.203:443 csync.loopme.me tcp
US 8.8.8.8:53 ssp.disqus.com udp
US 44.217.5.77:443 ssp.disqus.com tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 8.8.8.8:53 239.131.111.34.in-addr.arpa udp
US 8.8.8.8:53 173.25.18.104.in-addr.arpa udp
US 8.8.8.8:53 7.113.38.54.in-addr.arpa udp
US 8.8.8.8:53 108.155.240.172.in-addr.arpa udp
US 8.8.8.8:53 99.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 206.53.120.211.in-addr.arpa udp
US 8.8.8.8:53 77.5.217.44.in-addr.arpa udp
US 8.8.8.8:53 dsp.nrich.ai udp
FR 51.68.39.188:443 dsp.nrich.ai tcp
US 35.227.252.103:443 rtb.openx.net udp
NL 35.214.199.88:443 rtb.mfadsrvr.com udp
US 8.8.8.8:53 sync-openx.ads.yieldmo.com udp
IE 54.229.215.252:443 sync-openx.ads.yieldmo.com tcp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 8.8.8.8:53 188.39.68.51.in-addr.arpa udp
US 8.8.8.8:53 google.com udp
GB 142.250.178.14:443 google.com tcp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 216.239.36.181:443 analytics.google.com udp
GB 64.233.167.157:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
N/A 162.55.120.196:443 tcp
N/A 162.55.120.196:443 tcp

Files

memory/2444-0-0x0000000000EC0000-0x0000000000EEA000-memory.dmp

memory/2444-1-0x0000000000EC0000-0x0000000000EEA000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\datareporting\glean\pending_pings\fe876edf-8fec-452f-8c09-2183aa00d2bb

MD5 f725ed0efd3331f8d2e4c82fa3633a66
SHA1 0f8c898e7defcaa121ebab06bafc631866b26ca0
SHA256 457c983a001f9de599f43d5062e7832ef93e63e06a5f045441012954cd16781f
SHA512 3d7aa57f49decfe55123705e17da7ae7ce4d8f18a94e63986d059a8696648720b2e58856861e0aef92149ba1cbba72a26dfc5d924d3f5c37e60a38b51329aec5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\datareporting\glean\pending_pings\2c93927d-7da0-4a17-b8d9-4ffedeb1df43

MD5 dfe0bb0e07b58e4317b97d161a328e23
SHA1 b146a12e04a7a64bf9deb1aae713796f14c1a603
SHA256 9edc4bdf3276734a86b6a41062c5cd1908f3e928fdc226ce9174395974162b84
SHA512 1f866a7efb4feeeb804eff1fca80893a77e56b6070050451ac2a127775675f163672850e927c284475816e94d8edac5e948ef5a1a2463c5342c1169b615e7538

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\datareporting\glean\db\data.safe.bin

MD5 4c82dc074c4f1c0d5893167ecc87a2e9
SHA1 a42746dd592bc3f09dbfeab11d41109dc2f88c65
SHA256 380eb0eabd2d7cca35ae316a6a665242fbd60d4d4754f0053a5da8ef5240d554
SHA512 f30ea415dac005af4e0752a2c2b32419987b4655b171665cdeb121419c7da23a5d0b7c54f59deae060b07f90c8b0589c8b8041b46806ca9a223b5b81ee3a1b7a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 731c0e733fe1e3123d366af7c8e578ae
SHA1 9756304ea773dd9cd96e5996dc79de2ed6a9ae9c
SHA256 8f426b4be5e3440fa14d37480f018b7dc3d1a547b0e91c2fbfc6e31d9054a359
SHA512 d29e0f2356a3226f64692b390c122d4d70f09f677d9f5d086f2babaeba6574d670171edb24ff52f928871ec489680f57910e21fac1ca8ec08783a07d21b1f427

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\prefs-1.js

MD5 862c52bb3149ae47176a08a91318b3a4
SHA1 c62fdb992b2c048006a4c12ec3e8754d15619cfb
SHA256 e6f4235cfe36e67a641b5083c10b971cb3fe4a38c47b4f77e9fc9c536634b773
SHA512 b1a0020cfd3aa96ffaced6f4079b038598e8ecae63f1e0034647a710c7c04d22f4917ccd559452d880d6b36c362187a048cea469ef2f83e1e5fd3e3de32d2f32

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 a5262e0991ab17019da8efd569e88e04
SHA1 22c3b6f637e694bd7ded0774e742a53f8d003ae7
SHA256 f90858a016e327165b2bdc7c1edb351ff326f4b3d7484e626740388184a3f6f9
SHA512 6c5fa179cdb2d958123a1aadf1515030eac8b45ae84ef8c0ff64c7160c76da27c8829219988cc7df7a05a062a0899f46e0969df7821835f16afae9ceff7abbe2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b215f8d7677e2531d529f1f7dbcbb87a
SHA1 3d6db2e8eb85ae61a56eb6b6ebce6d81696c6a23
SHA256 bbba831a9e430fc08699a4075c33274596d00e7db338279a69c4da8859c01d96
SHA512 cdae9d0c50181ef38397e663e744b9923b471dd60182cc74b4d93f3d0360565cc3843a095472ba782a44e03832f8b0d8bffe11ea725122e3bfb824bfc9e7f977

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\prefs-1.js

MD5 92954762a574a654db3fcf224ec1c299
SHA1 d8b034979fff4e71cd29a86429b9fbec710274a9
SHA256 bc3b2bc4eba1adbd92de7a06fee663bd55bd11134f8ae067359e9c9f9207dfef
SHA512 eb3cd9f161d12628eaca50b4d0040746149023098384c4f557afda201202516db0c865de30110722771f352da9d725890379c6933980ab4631a963dbc48c8deb

\??\pipe\crashpad_4868_MSRNAGNNGOASUZMK

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 874ebda04435a5a32f9be91cb4189665
SHA1 e2acb6dd062d84c237d485d80d40f1bfbd688202
SHA256 85ac65517656c966e927ea8de0ac2808125b56818a8195ef0b8ec5dc6ed0295c
SHA512 c63527ee3c652ca305ecf4005df86bd3500928a926e396b9d4b99dd538461c35ebe6b924050ed0ed38e245a4fb5d240bda6626ff0b88e8da477361b758e30613

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8397675780385b3df740f66937e347dc
SHA1 263fb48f56a1ee6aebf7b447a091fe80444f4324
SHA256 4cb3c20c53d3d3b8ca96d428b5d369189836a210e67e233384dcfcc64a51ef94
SHA512 6d75a489ba610a3c5ff972bcae8cb5a2a682f02dec9863367fa786e2ecad14f9fe65c427e14800f7ecb7b2c8d726e3352ce384bc6e2b9d56335b9ee4a9e036c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 da30d26daaf573b4afe3bccacb6934c5
SHA1 9d58b5493fea5da9be69d89d0b0ebeb425badf08
SHA256 d952ebb35418b143741def976dd2eeeb5be9ac847f5d8e19612c5b564f50f9d3
SHA512 44b6fe1f44e58134ef24d296336b91e333ba76824953dc4eb2a49fbef42da746df51c7d3b56d606443edafc0639d1b7016533a9a9675aeed70f2739c8d8366ec

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 b49ff50ab2162c33a6d3f29f4c31854e
SHA1 567290365216a535036d04d1032de4cc04828261
SHA256 b1ef72d737b1080e3361ae7485b0e835ac958a8cf57a62f9b71f675fbe73843f
SHA512 0c8c68bd94a97c5cc2a185d097ae8a2283e1d816aa3a8464f7668cfa75e55ae5518899e37e18d47be7cf457c2db5e7e86bfcc3640e9ee24a0121dfdad6bea859

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe59c5b7.TMP

MD5 929cafc448eb2c8e758d758c65e64f9b
SHA1 851e68bb9fad349bd64ea88b4ea1b1110dc8809d
SHA256 38b35f5b7017740ff778242d2449584901c037f9ecf84aa4b88cc6c3a1f57611
SHA512 513a62aa1db513835a1cddbdba1c96ab80736f368ae6a5746b728d16aee6b1ae72092abcc0eff4d53e677d15d96b7960d0683008716403ac468d61a93ab02911

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 ae1bccd6831ebfe5ad03b482ee266e4f
SHA1 01f4179f48f1af383b275d7ee338dd160b6f558a
SHA256 1b11047e738f76c94c9d15ee981ec46b286a54def1a7852ca1ade7f908988649
SHA512 baf7ff6747f30e542c254f46a9678b9dbf42312933962c391b79eca6fcb615e4ba9283c00f554d6021e594f18c087899bc9b5362c41c0d6f862bba7fb9f83038

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 be4421c82b5f2f9d3017004d92c92a6d
SHA1 77459cefe3f50962bb8a55fd6ae6f7e701bf8828
SHA256 f2f4390406d05d8653c3c2fa5900ee96cceca9a8b42c2e49451e0253d5dd8834
SHA512 985932511f0c6d894491efc21d7a0d570ab7949e89cfc45802b9d050975abd509ffc85a095a30b9ca0d26227fdd5540bfcac363f8612680a0e995a398a5d3d5f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5cff2bc63dd78b48169982e98e347752
SHA1 350fac8931c262604072f8931f7368bff7517c85
SHA256 0cb3de5af461ddf42439ed105959465dd8f5ca0b2ce97a8a0299c45ddb2b3823
SHA512 f27f44f19d0c37869d845b8764142bedaaccd727a178d8ec8270d0f2503f69c9ca2779ff94a024b5f3f5682702ac7425c1c1428a99f982a392d7b2f966c93967

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\je1358xf.default-release\sessionstore.jsonlz4

MD5 44112b2417ee4309931c097aa1929715
SHA1 8ed77e1ef1b0a06f69fd40e0dbab634c6b9211d4
SHA256 7b4ad4a200760cd6784ba377d9cef28f4cdebec9d52fcfb01a7bb320a940c3df
SHA512 3c9d4cb8a1600a697c279c0b8c77933d4cb5bf270bf143634b45b2935c05afdf2406f7c4e6ae6a7889aecd3ec9985d0b3a762f2e487d6b808050995d18ba0278

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4521a57bafb3ae07c929bd705282080f
SHA1 cc1d0688c4c4b70bd75bd19f52d0a73d456c290d
SHA256 5dda4523965b907c5ac5777b660866543254cc9ddeae30e6bfe1b48fe2be1295
SHA512 6b60089cf3623f481c8e4de2e0f7974efb9b135992e8da956fbffcd82a2d8a5b13e49575ef6a1874ea2431a2daa1b7133b4c5259b4d570e0d05ff8a79e176409

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 0a999d24b8f92edd2eeffb881ea7a284
SHA1 2f91fe6302fea6859be5e4e3d8ab3c2883735376
SHA256 6c5a9cd58e50b36c16976bed9306d0ae8aada8f6b8387a4ce6af4b55e9dda7be
SHA512 2781816c64e70d4ccec2fb3b5fc5659a1a32b1f19b9e5c987e1bd9e0a9fca407344c2ab7cb9099522f2c7ff5d9920bc4dd85b4e3a40421df39f8e73aeb1ff296

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e51d0351b9cc491125a64ff2036700ba
SHA1 6eac4f169153bb2ad2eb23e2e820053c812794b9
SHA256 bb8f6abde3fa7693c85daa38c3be21428e8cffb95c8e0299fad6cbf149f5ec3d
SHA512 d0051440f12a24b96aba80f55f9f48233ba37b85551ef7694f1b0e77f28bfef67611827fcd87b720855248858d17f9e8298ef12bcc9140c938ffc5d30f3d311f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 cf738255355289ee01bbce18b757046c
SHA1 6043d6ff9486e368051e553b9a792e9f350f24f0
SHA256 7b4701795589a721f73d9758c266d60a330c34df18c18eb96fb9d89add0844ca
SHA512 994d17df61867b131dcb76b757d3e9051ac4beaa1da1cf6686ee20d07dbcfd26486270c1607022bbfc9a57034d90c67d1f74a8330e22441218e30fa9a039e01b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 6ac1b41ce439dfea731e9ccf6a4779e8
SHA1 94758d24de8affc0ca786f8d86f6cfc7ccc93fbd
SHA256 87fca33aeb649b04a957b3dc8c716b758ab5930e18502212c590ed5eaa38cccc
SHA512 8f9909d15002be0c399035814221b3c74d39c7ec426c9e974ab558e6cb3933e722f7df33c6748c15cbe862cdb2c8f931fb79ba77c53d39f63c4c1dae37d094b7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5a69f6.TMP

MD5 e2a5ce6207a8a5300b791cbd874669c6
SHA1 c59b452f80bbb2acbbcde0ee7220ceab0f985a94
SHA256 a80df15de2ce20c3f9fcf676ad5892a365af731ec4a91a197500a0ef7d027b2a
SHA512 24417b396d6167aa8318de6b336420107471f9966c0163ebb05ee4c4e66678004a286c45045cc61df0aca626ef77c5da96a015acd6833d517004fb82bb63c45b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9525faebe0265a0857f8cd8e57a95294
SHA1 c3b8bfc03da6296f2bfaf3b292a2ffa82ba26eb7
SHA256 e017feeb0a718bce7db2158bcedd2af6ffb74a1e5a683cede063b4bd18aff7c7
SHA512 6e2c58d6a9ca5dacd19a077266dee311d7ab6404b01de70e5ec844010352732e77341a118579bfc9b65a1eee0f9baab59120127b0f68bb8eb180edc3403b2660

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004

MD5 87c2b09a983584b04a63f3ff44064d64
SHA1 8796d5ef1ad1196309ef582cecef3ab95db27043
SHA256 d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0
SHA512 df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

MD5 c71e661f482d2a7bfc565060281b324f
SHA1 4f66536e4d59091e4ce33e84207965c51330ecbb
SHA256 60edc95aa4f8233ce27dd1b122a78632a0b9aa5be0f183b27a08dd9fc58a4932
SHA512 7bf62c927d45ba24d1465977e8d741b2aba4faee95f7d3767fbbd781c62b3c6bc97e1fb9f525d43f3c77202ae6f8904f3389c3ffc84c306c43be876ce4a180c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002f

MD5 389bc2bf98582752a4b510949998b379
SHA1 22d770c03a3dc8f2d09a185cb54cc12539a8d5a4
SHA256 a19c339bbf0a2c72fd8a8649199a72738ba8e76592d1346d55d0caee436fd391
SHA512 164c3ae54ffd18dbdb692480ae3e028bfcfc39bf762416dab64ba6991dd40250344ad36c0c15f73074609fe0072ca770642697a666f27397d95594f843904477

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 092f694febdebfd45752a587b144dbb7
SHA1 9a046951cbe5b3fcd6808057e1acfb0ec4cca13b
SHA256 9fef961cdd00034743f6b87da7e2a768e064541672398f703e6cb14f8b041df8
SHA512 d0aa8ff4853b15d63a1e3aad81fc1ae67b770de709fa6d4dafd72730fd29d3c3dfdc754df2db98ee89ae96f2537e6048ba39f309c407aa489bfebf4977375fb6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 6f06c381e4d8b92efe3b6ed92ea0ac0e
SHA1 10573fad308c75df21daeac4123ad46c4f4a625d
SHA256 a5fc776a7c7bf4c7988c3829e2334d28571cec3fd6ec5e978142b3623e516ed5
SHA512 022927f36902ef9990ecbc302d7456bdaec4a0c21f9289c87099a3051845b555632e85f99bda45bdf8a6e731487ae24ee1f120596f6ceeff138b54463a06004c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e1cd2eecb4d25595ed5e3f440c3b09cc
SHA1 f839e1a7412b50487e595f4ba8bf090715010e99
SHA256 80c4daad833a8fd31874c6d01975f648d8ac948bd111b98c2348bd0c6bd4de16
SHA512 f828eb8d75b118a25b2c038cc00d9419dc46037685673d1741fabece34bc6acebb422dea3db665b40d1bf616749370c35136516b442d1026705474e2c2be3678

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4d3608701c1a5746318317c56a24b0d2
SHA1 0981899da84d3963d5539f80294fd1d35d23e8e8
SHA256 f5a1a4204520066d79f285f11cd22cf1cdfa33cfb3b753ae9e00d417af1efc4b
SHA512 f35f158b33962b3e38e8125be5cd4826cba3abf60af61e4cace6306bd01358dfcf062f0c3d63aee9b944741ba5e8fb26ab941739c9f3bb8166a4d2ee9e05ff5d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1f701a48205dff8de3001d41eb9cc594
SHA1 9c8e031b27c660041473c3a9598a91b24c54fb02
SHA256 eb4c35e3fe2511909820062fcf70efdf68ad52d8dac80b078a1f08219a9b9066
SHA512 9e29c4faebc1d0414c9bb847e27bf27670cc79d6f4c8895de2c9a1f69693413c8e7b63b386ef5f4fada105696d56f4612076f7ed83e84e91eacc669cd047b39a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 dbe12d9c6db043546b3fea0e816160f9
SHA1 17c783491cdf670fa47cea06cc53ad3cdd39bc71
SHA256 b0d4441ba38df3ec4aba09b10ab7901fd1b57497cdc3599eeea57297aaff957f
SHA512 7eef8fee588c34642d8b1d142ef36ed2fcfb11870300d96dfb5da46711c9c8ae87deeb1ee196c95d51174aa70c1932ca72f5e37b1a81eecb0b03341c791ebfd8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

MD5 12db4747c919800260d71579c658c235
SHA1 62cd7b4d1646452e4fcf800e5c726785fb3eafbf
SHA256 1db7e1a8992d246c5f8f45ac7bdede320af040b05933ea88452b2363e7cffa5c
SHA512 cb7cb75b01d6eb46741c083de628a3a378b5a8f1c93c89fe2249fa37c37fed7f1060799a354754b365cb53da74ac270fa9e586967ea9dbb44a2bb9d9ec4d01cd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000057

MD5 14a32802c868f4db6f3c09eb16eabc41
SHA1 495baa8f962b8a3398a104d71130704d16813fad
SHA256 499351b522533faba7cdc5906c25df3c6251e119a964e1cfdcc10ad8badbd6f4
SHA512 cca1ffb880acb26e17aa032bbf05c65fc56780bcd076aae23eb61e3327eb591e79426a7448329b11814c2cebba406b48712d3fe1d6a4ad7c83d1e0196f53338e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000059

MD5 54476cef20aa3e041c5b14de32a5ab6a
SHA1 032a1be25a46f795208b0365455d34e1e3b17760
SHA256 189be432c6fdba1e70841382153b3b2ac08aee391c80f6259066364be3ec461c
SHA512 0b8ba7bec920a0b73393fdcdb8fe399473965646b32ddee7a6734fa222476780c40b8ff74e528b12b2844cc15278bf0c065ffef32c227243829950623946d56f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 21198fd8d445fed474d9ac85aa43f324
SHA1 f9dbf2c6f96b31d2e43a4b2fc607a354442520a3
SHA256 b524b97ac29361a779493428b01c1ba9b5341a3171a8b05f2b61ffff276cde0f
SHA512 bfee55bd031da083e1c5ce111ec119d8bd7354aa64069c1f0346febaddae10827c7d2c6051dd4abcb7b90c16e85ecb5007dffb4e3c9cf8dbc05876c375946bea

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\954491e4-9fd9-401c-be8d-50eb1b23b64a.tmp

MD5 0e9486e2c51e3d950876ccc42c0342a0
SHA1 0abaf29977670b85c7dcab697f8ddaba263ad7da
SHA256 061df9946809a7131ad36ba98feb80f5dba08a14f71f9025e51e60c24329a791
SHA512 7bc259a97f82e3e45be2cb4f65db3e03b55ba398ddb3b2bf98ec021c435fb432e71bb4c9eaddf9a74ef24af190bcea5d30f245cfa70f6df03d50491b680d281a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b0167e4dec49bb184ede318ecdfee8b0
SHA1 0b9aa30149828e92724365a71af37ce0e0958eb5
SHA256 c8566ff76f3a531468ab3f87bfbcfe306dddd44b11b2c1cb6525557822c2eac0
SHA512 917369f7cc0467ecf14e349fc090b77b3815aca9e17de4e59c53a2cc18df3f4856369a71d3b6d078fb43686c33b6e9426713f9ed9707a00c19e7845e90d35c97

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 cdc13d09711d7b5b4869187c6e2c78d6
SHA1 ff270a0ce27796a73e480c277d47bb423e20f25d
SHA256 bce30da5dd22743d94cf03d00b722a391caa0df5b09086214830129f4cc57973
SHA512 943c886164ab7074de9cbcb35606b7bb8c3703ab02f21df61f8b8236aff0438d0a66be2a83362e7acc702dc20e1594c9edb2c9a92d80de34f4906128d59089cd

Analysis: behavioral2

Detonation Overview

Submitted

2024-07-03 20:02

Reported

2024-07-03 20:07

Platform

win10v2004-20240508-en

Max time kernel

299s

Max time network

300s

Command Line

"C:\Users\Admin\AppData\Local\Temp\AutoDox.exe"

Signatures

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133645105796785054" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3076 wrote to memory of 2332 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2332 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3076 wrote to memory of 2984 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Users\Admin\AppData\Local\Temp\AutoDox.exe

"C:\Users\Admin\AppData\Local\Temp\AutoDox.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdec2cab58,0x7ffdec2cab68,0x7ffdec2cab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1664 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2248 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3064 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3048 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4332 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4468 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4620 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4724 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4608 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4952 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4992 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3244 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=3228 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3160 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=3152 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=4068 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=3632 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=4808 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=4992 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=3652 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=4100 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=3244 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=4848 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=3244 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=4848 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=3260 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=1156 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=3264 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=3636 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4496 --field-trial-handle=1956,i,17139403422717329259,16208400917250776828,131072 /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 8.8.8.8:53 91.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 71.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 apis.google.com udp
GB 142.250.200.14:443 apis.google.com tcp
US 8.8.8.8:53 195.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 234.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.238:443 clients2.google.com tcp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.179.246:443 i.ytimg.com tcp
GB 142.250.179.246:443 i.ytimg.com tcp
GB 142.250.179.246:443 i.ytimg.com tcp
GB 142.250.179.246:443 i.ytimg.com tcp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 196.249.167.52.in-addr.arpa udp
US 8.8.8.8:53 246.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 142.250.179.238:443 play.google.com udp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.179.246:443 i.ytimg.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 216.58.204.66:443 googleads.g.doubleclick.net tcp
GB 216.58.213.6:443 static.doubleclick.net tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 172.217.169.10:443 jnn-pa.googleapis.com udp
GB 216.58.204.66:443 googleads.g.doubleclick.net udp
GB 142.250.179.238:443 www.youtube.com udp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 6.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 10.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
US 8.8.8.8:53 encrypted-vtbn0.gstatic.com udp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com udp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com udp
US 8.8.8.8:53 14.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 58.55.71.13.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 56.126.166.20.in-addr.arpa udp
US 8.8.8.8:53 92.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 id.google.com udp
TW 142.251.170.94:443 id.google.com tcp
TW 142.251.170.94:443 id.google.com tcp
US 8.8.8.8:53 94.170.251.142.in-addr.arpa udp
US 8.8.8.8:53 bonzi-buddy.updatestar.com udp
FR 5.35.253.150:443 bonzi-buddy.updatestar.com tcp
FR 5.35.253.150:443 bonzi-buddy.updatestar.com tcp
FR 5.35.253.150:443 bonzi-buddy.updatestar.com tcp
FR 5.35.253.150:443 bonzi-buddy.updatestar.com tcp
FR 5.35.253.150:443 bonzi-buddy.updatestar.com tcp
FR 5.35.253.150:443 bonzi-buddy.updatestar.com tcp
GB 216.58.212.195:80 www.gstatic.com tcp
FR 5.35.253.150:443 bonzi-buddy.updatestar.com tcp
FR 5.35.253.150:443 bonzi-buddy.updatestar.com tcp
FR 5.35.253.150:443 bonzi-buddy.updatestar.com tcp
TW 142.251.170.94:443 id.google.com udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
GB 142.250.179.246:443 i.ytimg.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 e2c7.gcp.gvt2.com udp
IN 34.131.78.121:443 e2c7.gcp.gvt2.com tcp
IN 34.131.78.121:443 e2c7.gcp.gvt2.com tcp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 121.78.131.34.in-addr.arpa udp
US 8.8.8.8:53 beacons.gvt2.com udp
US 142.250.69.3:443 beacons.gvt2.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 3.69.250.142.in-addr.arpa udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
GB 142.250.187.238:443 www.youtube.com udp
US 8.8.8.8:53 img.youtube.com udp
US 8.8.8.8:53 bonzi.link udp
FR 151.106.4.82:443 bonzi.link tcp
FR 151.106.4.82:443 bonzi.link tcp
FR 151.106.4.82:443 bonzi.link tcp
US 8.8.8.8:53 76.234.34.23.in-addr.arpa udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com udp
GB 142.250.180.14:443 img.youtube.com udp
US 8.8.8.8:53 82.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 11.227.111.52.in-addr.arpa udp
FR 151.106.4.82:443 bonzi.link tcp
FR 151.106.4.82:443 bonzi.link tcp
FR 151.106.4.82:443 bonzi.link tcp
TW 142.251.170.94:443 id.google.com udp
GB 142.250.179.246:443 i.ytimg.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 172.217.169.2:443 googleads.g.doubleclick.net udp
GB 172.217.169.10:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 2.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 google.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
GB 142.250.178.14:443 google.com tcp
US 8.8.8.8:53 beacons3.gvt2.com udp
GB 216.58.213.3:443 beacons3.gvt2.com tcp
GB 216.58.213.3:443 beacons3.gvt2.com udp
US 8.8.8.8:53 3.213.58.216.in-addr.arpa udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
GB 142.250.187.238:443 img.youtube.com udp
US 8.8.8.8:53 google.com udp
GB 142.250.178.14:443 google.com udp
GB 172.217.169.2:443 googleads.g.doubleclick.net udp
GB 216.58.213.3:443 beacons3.gvt2.com udp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.200.46:443 www.youtube.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
GB 142.250.178.14:443 www.youtube.com udp
US 8.8.8.8:53 46.200.250.142.in-addr.arpa udp

Files

memory/4396-0-0x00000000002F0000-0x000000000031A000-memory.dmp

\??\pipe\crashpad_3076_SOIYUTJHMRFVWENL

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 7fc2992ac35ebdd53580ac584a0d5761
SHA1 e8025d328d76f4317580d1bd455b150c342afc03
SHA256 8bff67d36f456abc92b531c86989500e6eaab2a3acf4d25094d385a5fec08a57
SHA512 0cb0823079ddbf63cd6090128db3729e937c71c155ad91d39d87dd5f7cf427f99060442e69960aafad69a9c02dcca5159227758fbc4b82f0f17b2ad8d8e9c1ae

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7c6787088165d425ca37259d9f54095e
SHA1 f1833a9dacfbcc4b2b127c05b26954d4ff31342b
SHA256 8a5d153bf53ad4fca48853a23f4f7fa9a6dfbb85d93a83486837eb27fdcc5795
SHA512 12b1e8aaeed747a1105ea19496c348dab66a64d268d934d92d101c3afa356f5fe0e27579a93ed7b08cea08ef62c52aa31ffe52a03d084879cdeb82e92d4bf960

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 9c6f0edc222e0166d2c9bb13ed260999
SHA1 f721bb46cd5c8791235652f2fa6f5b7a2edd4426
SHA256 ba60fa71ce9fdf03568863143557ad35fc2c77ea99648dbd9a7104315eed14dd
SHA512 6ba23c3727f57988d6faae93d6b684558c2a371850e34421e08d25b02bb76a2257426f5c8b58a4715df2d7ac52530d6e49fda07475b19e89554871cf321bdaac

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 ae1bccd6831ebfe5ad03b482ee266e4f
SHA1 01f4179f48f1af383b275d7ee338dd160b6f558a
SHA256 1b11047e738f76c94c9d15ee981ec46b286a54def1a7852ca1ade7f908988649
SHA512 baf7ff6747f30e542c254f46a9678b9dbf42312933962c391b79eca6fcb615e4ba9283c00f554d6021e594f18c087899bc9b5362c41c0d6f862bba7fb9f83038

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe578405.TMP

MD5 cef266e05b696443a88758c9d4ebb341
SHA1 e9b1779fbfe43aa60f02ba873988e5119ad34e13
SHA256 f953a5b1de999d316942adc5b9bb40cc39715d604cf0d671fe047bf26fc6f798
SHA512 c84737b5cc658f630157b219c168f4f20c54ffba83435d54a4c5d8e4385307a2bd48c54901a8f5d8408899b06f844a4b25c02fd136505c1f686a2abc4072b98c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 d3dee55ea3af8409ed3f7623299f94e9
SHA1 c2df614b834519823cbdc2722a04a7c678dbd123
SHA256 4736dbea4894a54cf4caac73f6e7a397f18d1f6bdf16e1a67ac7d5be6c7f7e3a
SHA512 864da66aa503dc4870921630594b3709e8bd9e0dfe8569516219b714390e0cfd1b5597822bfae0785603707a42f55c3efbdbd513e5b72961a5adb70dd5cc188f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 800540472894a8a4049773b532ee960d
SHA1 6dd79e83ea824bbf5c4bf9c600bc8ded50cd326a
SHA256 eb57156b899d77a56fbf2b9099af1ae7559f8b638a4e3568d07e4e70323b7d69
SHA512 f03c18dfe98bd6bd1fc6f8a074fc076ae9d1b7b22409f6201cefa65cf84a1a7e67e4dee6aeb687b01820a5d3b1259686a4779d285e9e524e6bf1806f06bf61c4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 964c4e3697562859affc24cae7a214d6
SHA1 9432074aff7b4f9d63b043c16eceb23253d40837
SHA256 f5236e7e8319f5b76b8f6776d0534a6618b3bd25455c7e8b577936ad13ad2d1d
SHA512 f43ca7084862d9394b3c06177a2b4485d586ff5f495275cd878af5f853ea0525152d3e61dd63f95130aa4833c7463b02501ad9dbd20c746a574be788b1e32b63

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 be6edddb98a1781c916ffc529318b047
SHA1 f26512689a41fffce697c85b7e3aaada13ef56be
SHA256 203170de24b3082cd8cd6a5a3c25a290773e57477273aeeb966e1db2c9b31012
SHA512 9b97d9c6e9974323a6c6c52905e183d9d74494359475e042c1718f51f431a55af4c1d41401e36c681cde86472d0f4fd916429869a7d3b317f6958c10d97bdace

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ffb708063065c0f1c2d559186ca82824
SHA1 616c05e8567a609b4e9cc5695955ecce1adef1db
SHA256 5d89231a85a992d0be377a1a0625d68deefe0ad32bc231faad9b565c336c26c9
SHA512 f339694e4a2813ee0d45ef70fa24d1444e5e7027f45a3d82ed00d895ef87498fe1ee34f855027c41f84f73bdd905edbf22c244ec63c8064e0ef6333d31bebf67

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f2dc73636aeaf6b5a81211facbc4384f
SHA1 24b16891c66877b399cf072ae1f2f0bf82fa728b
SHA256 3d8ec412ffece4227d4f60a74a5bae0d497464192f633c36c3b2483c170986ac
SHA512 48edfbe8bbbc93407c6842ab20c4eccdafc61c8dfb0b814637bf2fa89055d8c7ae7fd8de5ddf47982dfad2688138a43bf34f572367b2e8d8d8404e93aa3b46cf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a

MD5 c71e661f482d2a7bfc565060281b324f
SHA1 4f66536e4d59091e4ce33e84207965c51330ecbb
SHA256 60edc95aa4f8233ce27dd1b122a78632a0b9aa5be0f183b27a08dd9fc58a4932
SHA512 7bf62c927d45ba24d1465977e8d741b2aba4faee95f7d3767fbbd781c62b3c6bc97e1fb9f525d43f3c77202ae6f8904f3389c3ffc84c306c43be876ce4a180c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d

MD5 389bc2bf98582752a4b510949998b379
SHA1 22d770c03a3dc8f2d09a185cb54cc12539a8d5a4
SHA256 a19c339bbf0a2c72fd8a8649199a72738ba8e76592d1346d55d0caee436fd391
SHA512 164c3ae54ffd18dbdb692480ae3e028bfcfc39bf762416dab64ba6991dd40250344ad36c0c15f73074609fe0072ca770642697a666f27397d95594f843904477

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015

MD5 b270604b1d5666bb4ed3a4dd0fc252a7
SHA1 0450c6081f535332da1a116f26ad4ba9acdfd7e5
SHA256 ff80e0885214205e10e656ebcea80dfce0f9b0332a1ad7a8b766b934bc13f7f8
SHA512 f178465ef061b81c926833084d742d573840bb2b67f3a9ae05fe1c6ada3973b514ab95c07745600ef0aed70f131fd7f1f8de2dd15e88f7dd8eecb67a31f90cb2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016

MD5 d5d7675604340f99633218bbe4793104
SHA1 ca1df39b7a903dbb856a555db75770f6222e7dce
SHA256 f7d966e98dacbf184660988f6b4482396b517d391e4d0475ffae4fa6f40971c6
SHA512 bd202a6a44ba24d784e3a55556b02d7c20738553832bb42d7aa3205b069913e524c08cf0a348e255b6f0c697f118f190bb5056695ee9d37d37296b9675964236

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018

MD5 32ecb13bda551279ae923ba25d8bddc6
SHA1 a0dc84902a2b96b4e253309f2607dae9555a382a
SHA256 f96a67c4e69e7679ff7921b68f6d07b28e9532ef49655c0df4f361a534107ed5
SHA512 e0906f6bc0979e6b9f87c39f7081d4e61fefacff62fba398cf23a860f9fff4e80d6659502181e42eccaa8a724e53d6646726db755bdc9291d02e5f93ed140ce0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013

MD5 29acbe9123a51dff777c399b93c4aae6
SHA1 5381a0c5bf2dee2b2ee03e624e342eedff732834
SHA256 999510a8eebc7a4b5b397fa15f85ad35569c4fa626db0639093f0db34357aab5
SHA512 08caeebe0787ea9d8e94d52f6e9ab2cc641befe590ace6d2bc243933d0575c74dc9c54ca32415dbd3cfd7f78078d84dbaf131877e3c18052341c6fa7d8d441aa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011

MD5 127b7a9f7009939d0ae5dd1a48386985
SHA1 f9e981f2fbc6df7e304803153fb6fe40f0dcb6ac
SHA256 9d8e3219c036313e8b27ecb7b91befc49de6a32352a5349656945a7525a89962
SHA512 b1a442d78f6adc7a67f8ee299d46817309798ff2a38a66af2ff03eaa276b3a7967fde34e801dc8488ed75b3110fd01b3a9763f792ce75e21fae190d4779c1287

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012

MD5 241379a911bde1dff4e08f2cb521e220
SHA1 d296b9bff172a84febde0d306294d6ce0c63ca1d
SHA256 b0bc11054a6e14544e3ef33a7492f9cd7be99cdf8dd7bf10c6d73f188436e653
SHA512 fe5f999d90254bd50284a349c3a5c9dfc28edb95ffa724f18d28f5a5758df3dea2d596c4e5ea22fa02b26723edcdf7c55057a2e35aa1d347efe7a258a6b761ac

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019

MD5 54476cef20aa3e041c5b14de32a5ab6a
SHA1 032a1be25a46f795208b0365455d34e1e3b17760
SHA256 189be432c6fdba1e70841382153b3b2ac08aee391c80f6259066364be3ec461c
SHA512 0b8ba7bec920a0b73393fdcdb8fe399473965646b32ddee7a6734fa222476780c40b8ff74e528b12b2844cc15278bf0c065ffef32c227243829950623946d56f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

MD5 c0637a08f2ba40c56260782d2bb3ace4
SHA1 a2bf4298414a764ff1342b3f48f45b4dc1669a96
SHA256 d6ab12688ec8cfe7f9235b18c7d7a4730d86278ba1efae0d715c0d054465781e
SHA512 736d1ac8987102028baef59d43ceb2fde71b3aab2f8f2d8d306846a457e2ac224908968ff7bfe34bb05beb7998223d393244cf5da84f9d64f8b71c9f0b2ca6e2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017

MD5 cd3756106418d9e83a2baff9904ba221
SHA1 4c2ed1c1ebe119027db0fbaf7a64b408f1779b4a
SHA256 57ec0895e1bcaf08c769e2d6872f3f3657972f87fac081063445213dae4541ee
SHA512 5bf43ccaaf99505f7e8ecf2eda18efe260125accbc12f655601e2acabd822513e153f4b81cbf03a65d13572f11e9f13fd471006a0ce8f2665e8a594ff2d769dd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 1c0341c2cbf1c852e5283a5aa5fbfc97
SHA1 86aad3640f161f032fe8c2654f132dca39063268
SHA256 c9951707396ad5404036e80f83a8aff8cb650bde120b750bbe9d8e39d1119fb5
SHA512 ea309f568abf81189bb20b075e595e46f8001a75410eebc30f830421fb4c65b2e068d6c140366788b0d2b10c88448643021c2215a6432139fe5b8c733b2dc743

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG.old~RFe58405f.TMP

MD5 164c3f44a1d8cffc60f1bafd8f187c08
SHA1 046d58224f9b02f4e701e5ceb3e176b3c064aab4
SHA256 d5b05ebf8cc3bcdbb8df834c18084f2e75503ef6a6295658948027a8c5755c4c
SHA512 b4bc5348ddfdb6eab1d47680a6f24f64385fc84a114bdcdbe75d32d58a9aa164682723b6fb5a6c0d9d4b0113821d8db68d8fbdd14b6baa8c9ad3b52384a779b3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG.old

MD5 9b4db8e0da8df617e96d087316d69707
SHA1 86211556a868d203b8b9d4eecb4bb96038e53167
SHA256 0bd0348d0a296a1adf5be7b12fe1abf7c9ff98ff6f77c52b0f0e0fadfd3cdc3d
SHA512 34093bb2e99eebf0f9f09a1023b81747d2c75b84544b868ce96972d9ea7f6d1786b98fa9e5c9096ce7482929f64a1fd5151b9f4e55ad2f030767e53e6a4c2538

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027

MD5 350fb550ade324063115fe876e9067da
SHA1 4cb9faa8da80e7da4e61530c3f6b4f6c3715ec57
SHA256 9a0c262ad3fb1580675e85833ef91c61cc48f33d5ebe072ab93d8b7ef1859835
SHA512 ee5b6109b49e3847beb34a520cff88eb5978dbc2e744d8d49d0bd4dcff9edf22eb590cb4300bd472cfd1b3bc77f43d5c3e2aa0658ef8bbc2069077bc820751b9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 83e75fbdf68e3e638ff3f811b9715bae
SHA1 e085a4e2d489e27df6a979ab27bd1ae8cb949ee6
SHA256 ca7c375582716cc1c93251f5d5f34e2efc948589ed73501fd2daca3689f4e1f5
SHA512 236dee1d97a6d7a0117f3f59234d1319aa74673eaf07e5e22da1ca826ea3e1831aa6edff50acbabf001fd4cabb967ea06c9c3d8cc709fef247001b3b20ef594c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6bbe58a9e48613240fa3e77ac4ca8819
SHA1 d57dcb5e9fdbc4f8414ca35f94437ea6804fe2d4
SHA256 b0acc0229cfb1736096453a81e8077bd055158fb4104b2d16a8bc474371df37f
SHA512 5ce914826b407bf2f189a26e7f20f81e29f0c08e514fe2fec928bd05be44e361a82e94bd2ea4351f395be952662192bf171ccff018fd8c9ba278d45049db44da

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 cf6ab28577c86a996107e171331f8da4
SHA1 81808e28abe9da23bd4ccc3b257f938397850de5
SHA256 9985f524c2538239dcae30ab8039d269b7a0a7ea8762c2f61b39f374c640bd96
SHA512 e558acdd24624ea1452515129488d29b4a03a40f01d4666df31c99c4f4cb4ea7c443575b82c63a6c36b600a8075da679cd738829ac8ef4b508e9a8042eee5f20

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 4f9b2e85a1f53c03c8355a626a2a6ce7
SHA1 93a77f674bc964630dfda315efd558bc2cb539cc
SHA256 18eb796aa5dcc2925ddde04bd6078160f96cce66bb2763bc1d123b698e6ecfa0
SHA512 2d4c3fbfbcf0ddd697f1cff3f6efdf72023b01ed66b127b86f7936ef8deb3da0bd1c6b15a4146ae72ae1b53777a24677ae81f3c150b7aec850ba27038967b3c9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\fa991d11-33a1-47fc-9f4e-4ce63dd72b2f\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 063d8af6e116b966b914cf60259cb3b3
SHA1 08ec5cbc2744842f5a1f0c7d214967870b6f7907
SHA256 97e76a045807454c9383a1d5ac15c6223d76f3e00772b8730789a57db991f7ef
SHA512 77608f528c8f56e647a67089a379fa46087528353f25b7d56d3218c6950b8f9b43cc225bf90a191c82a47d65115147151483b0aadf2ca845f6626bb371dfa545

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ab48758cc77df6de691a9e159fe8e113
SHA1 384bdc9a27f42e9b1d3cb6bb8d63537eabe50b6b
SHA256 6274598d5617df31ee52ba8424af5c6377e80328ddd9562fcb2e44e22ae28635
SHA512 e4e8b71a70cedd9a9bbac916a108e31adcfee4ed768c70b3a971caa9359257ad4e7c419e7077f6edf5176e25fbcd750b2bca72ad9e9ae2a560009588c5d1946d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6c10d02c3db8f89fe2c75e7eb8b43703
SHA1 2415ad92472188ab0e01abf1782220caad73ae90
SHA256 f8b7ac9c9ed09bf0b8deeb314861783ea8f630fab4c558cd812894366889a59d
SHA512 09fdde6c639b34a0a89d53bfd712a147de5be08da2655189f0ce36c6e0a12915e3ee224aedead9be1ff5d5641e3315dac3e56d48dd19bbc453d6d255d43a1397

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 0602b5ee40a9b1a7cf85042bc260aecc
SHA1 0f9ba2a4fbd6a56c1e96023f71056df6b17c2933
SHA256 7371b07b0701c7b86841eb19742d4f75c541f61595a4b9e52975dab629713bbc
SHA512 3a42bd40fd73ae9638745560c13189c947a64a879e2fb5e28231e266d36997b3fed2919a7cc54a360fe8098cc95ac975f5b7ccbd2af53303edf96583bc3d1639

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log

MD5 4929e2df41266e051bdd2030a2a668ba
SHA1 79cc239a17fbdd458388d10d2fe6b0f6c5b17c19
SHA256 327ecee3b0c8436e1f48d7da65a1c61c7e5f298f667ffb14a41c635f00221460
SHA512 7d4abb9383ab22c22d5951a58cc17499a12e3aca91162abbaf75295dd69f2fadfa14762ca9c52132f1c4e0ab68d8a1d48fea05963907f7f468ca7fcf697d290c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4feac8eff6cd9c1e_0

MD5 98fa3cea67b7d99de23445a9e30c51a5
SHA1 91ee32f2eb59e075e939126949bb27073d9482ad
SHA256 9f73edbc6daf60c39bb8e7fc1fc77e0c1eba21965ef6556f1ba8b311ffc34866
SHA512 4c7024f44de063d808448529b65ec22f9d22de8e2ef22e0694b12710e45267425b7efd2eb816d5af296e7bdddde9bf5adc21abd579971462504f7f4ca1bb349e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5dd0ad6188a1b357_0

MD5 0b9aa12bb0934dfa3f57b921d18d021f
SHA1 49079f8b8a2e7ebe6c2f0e61b0a38248093fbcb1
SHA256 dd04ab503e1f96ce544defce8c5f05c267426a0b95179782371ede9c5de467ca
SHA512 3355fbbecd8e2768775c00c1eed4889dbc4f683f0eed1d7cbbf4e67cf3eefff57dfe79abcd6e55b2997ca0aa13737ed19380265e6c5f1b91c0d676a8e76357fa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ff9a64a492052adb_0

MD5 14c84e4ce4bbb2c18322c544fee29a93
SHA1 892fd37243471cc991c19f303c51c6fabc427c59
SHA256 0f5bbb431c8cbafc0bbdbde4d1b8c06c2c209174d3186314ec85ffa1bf9186a5
SHA512 bec404929eb9c213e208e6ac303ff03e7ef6562e91516cf5b4b991d7ca5bd0d765ec841038e56e09cace05e7e4d1611f1335a99a19a1f46ead7fc996bd7167ca

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8ac7c4475e562805_0

MD5 3d384a6d4bc88b09f5778f0baf862c9c
SHA1 2dafee4ccdccf945f2e97ac08d9b3ac56a5a0f99
SHA256 31dff20d360a5befc74c548db250de00cd54466014b72492553cef49832fb103
SHA512 5a6fde9b5d295aac2ee7c418e68717f4462db7f34aa0a29b0fc89e218e4a0a96f0a27865af9d8b62cbfcb593315291edbdf283d39fe37fa812161980f95ceb10

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\736abcdb274a1cde_0

MD5 72fc4a470457c6e4e9f8fe7d88c40f45
SHA1 ed6bfb56aa79ce072136bfd5d412dbd5247ffb73
SHA256 bd465f3879e938b01884aec72ffb0bc72ba1f4c9f2af1054f56497629a91b91f
SHA512 1eecd6c9c07471e236ca347f897a210ec0003e881b9c19b5f4568848047a236604ba3b75edc94446cc10413c30f90bc3ee197c35c486e64e0cf8bf4c91c5baea

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\60264de1adf6c8a9_0

MD5 772f7140b2ca01d428db5638d5a9125a
SHA1 5523fa4f03f4191c8bf877c78413a337198ed390
SHA256 848051f1f0a2330d28be67d57849e9c8b45ba2a4d93fc5c6ed17c1e09cf9616b
SHA512 f29b29a5fe375be0a519046ea8d57e9744511fded989a8432a8ce3d61ca9e2a0c51dcebecca5856c93920b61115fa245c210b47fb1d029c233835a16d7ae990d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b95191dc6d707c06_0

MD5 be9f8af8793e9aeb65fcd85df65cd7b7
SHA1 fa32d3835539aa20fe3b872c5be23aa852e59b9f
SHA256 7568cb69b02d4943c0fc6499467d2a1ee95a39ad884e1b9be7fd26eef5a7b7ed
SHA512 ea010084d9f435a96df14b2c03d49c97486aa193b731dd347cba295e263e0d852fdd7710efd06087e17c7191fa9c126b7bdfaf205d96dcf1d125bfec2eecad3d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\300156a1a67d069e_0

MD5 6d3d9b5f89b962468dd3a300b9d578c4
SHA1 e8079a39d7b8f7c245c7c846ee7f4e02032ce614
SHA256 5048966dd27c53b82ba1595a0405050394cf032ee6e54d45e1d917a4a689d0da
SHA512 e011e6e7c4acfe2e6089686c19906cc88529e26a2d227a8a9b7efe06610e24cb45441eee74ae8259d010d1d1fd777bd96b038d1b5da0e7041e4e4c72fd4da430

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\391d0cdf5d8aceb3_0

MD5 5e74b90b6b4f859c499c19a981015ab8
SHA1 4b90667ddfcc822b2e0f84df40e1ceddefdb86dc
SHA256 675ad6747f607e055c721f0318aa8bbdd9c6ec0bf89c87df2b3af95c7993f047
SHA512 b7173f81680dd738bc67b8fe30700f43653ef6309868e9519e7cabe731493f0a1fbc2eded2bea7fd8e3856096aefd0fc3dc83c5fdd7fbf46ead01d44da39d958

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5d521ee9ee9bcfb3_0

MD5 667e6ff6399c25bbff441331599bb480
SHA1 e8756d56089a22faad70e5adb1b62464b1224cb2
SHA256 b0fa2e0d89d0df49e019a79c179266a90c1484e1955645e2bda61c9dea819bb3
SHA512 84cb87a79813d09daddc75fb2a9339ca126b6de69411c472666cc6e3a2b453b1d562277e0c04cec56a4c118b377575635a6421ce015e45c46e0440015e1692fa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fe4ed1192944146c_0

MD5 e95d0b4146812574f71e8c91d9dcf53b
SHA1 9ded1821b2ed162580a2a4b2bcbb1b1a2b4fc445
SHA256 b362a241620ed7f8b3b7c16367cc8d9ea0cba588d40fe755ce916c9bb5c94f05
SHA512 9bd53f98be21364a52471b9249fde240dee1558457bac07e89c95843e93ce3167bcc340a69d513313a7a7c24e9b983e6d908983894f97ea88e444b636a4ad786

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp

MD5 d900283243f50e2dcc14d6667f63092b
SHA1 63e04ef9d2166df8e8623b532f25c0f20693b2d9
SHA256 bdec52948baa6504e1c12ef60ea4e4c6ace0071170325a0d84df0b9b1c748a21
SHA512 b7eb85be9cb7947163cc72aee1a0c5bc39d6a85e32e2068710fffd5255fbf72f9190a3dec751c5d08075f6347b21c894aecb670da9b4a9e8066a99cf881ddf56

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG.old

MD5 06b8ca90e269910c15e72c4fe48211b0
SHA1 ed568f634526c834564a3b682593b3488cfb60c5
SHA256 847156a9d525356f5a695942a7a07be0ecdaeea44fea6edf08b52fda3d7f8f56
SHA512 3774eae31a934913db13cd029820ea8b709378bd4f7145313fe502e92b2d76f91490b1dc33898975c584c9b044d001f23138358a06dfd264e5c8ff04172c2268

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\46aa00ce8a0d1cfa_0

MD5 b0c62e05f6651c571b2d55bfa09b4553
SHA1 24d45d8b68e8d1ebc55583f6e88742a94dc55a41
SHA256 296aaba095aeb96757a6ed482594ead3737aae5ff99fc9cc6ed925a5a850209a
SHA512 e86b662c88c662e4d6e4546b5377b53640f23a85392e4cc88c8afdf89438a671723a3dbbae7b2e506c07b9c9973d892c5fcc5d00d5d9c7f617d129ed1c68c2fa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\335e69ddec2b9ac6_0

MD5 800c2aebe3d4d11542b8dc5c26289804
SHA1 91d905bc9ca4a0c312f098bac23b31e172b664f7
SHA256 2155dede8ec9aa4c50c9bef14988bbe8d5b9ef8afbf023f54c7001f7c77f2343
SHA512 2f535427394bee7c588b631e6723c5f28c42adb95889885384a05e68fe08b99dc2f620a1b7411816379db9d539f38273e72e50f32f662557c61b87501caacbf2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b2ee8896d4732a7b_0

MD5 52311abd3224daaea9b43e41c0c710d6
SHA1 79dcdf05e6dce3ce78fbf06ccdaab20c4099a7c1
SHA256 b69552062ed3b37613cdc99ab28e6f727c9d1620ede4e9da7f9b72591640c9c7
SHA512 9c048db744b3df04a99b8cbb5bc7ae5799575331d2ab747c3163b3a468e2ea56bc7404e9f76ef853f059d203f9f62103b516037d7d438d5aa6db32e3a7c4c233

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b5a4cbeda3f42093_0

MD5 f458e0fbf3f2e54489d7ffd597b1a11e
SHA1 378496ff55e5c15206dbcd72fc17954cd716421f
SHA256 525d9b5463328f8cb9197d339209f11393c495240eeed421ec818355459892a2
SHA512 e06d092120fbb96ebd8c08118d91cfaf95de0d36c89846af888eb604a1737fac43146488a79150a64eb10643cdc05e5f134c25f5a4e1e0b603dd1acff2a09973

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 27b35c931e31ca0b1ad9eb75bfcc3291
SHA1 2c24c13b96de5171f9f8f4de9348f1fe7004e802
SHA256 045a7a5e3cb8ce64ff61ece1491223a52da836e06b7e7d6d453b4639af95d627
SHA512 7f9887a641129ef7481af3d8645ab3b34a4e35c1f5d9abdccf9289c646fdaa2995c87796f839658b2f5c2830b860f04b78455583eeaa8ccd32206742042fff51

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a742188cf07db4a741ffc4c8a1f22a45
SHA1 24c2bb904836b23d63247d9714037f80a62e989d
SHA256 4429585981579372093a88a89138990f73dabccd838b38deb8a1287ba680e827
SHA512 10a8bf88da9b1e8a8419de5ec0cde84c490e609bab61e29e6089861939409e15e4a498c60995065c3b9b7f630318d472689144e3996480181511de3f1318c14f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 66da0aa7af74833736889d35c0544aa6
SHA1 54645f780b717b15add5ef166b3f7cfb9820b821
SHA256 9bc5b2f813d25949a943ce0a6b0a3393376c6b7fb44fe80feb1bb9247e0cdd57
SHA512 81e89a19d3922c078f1310e44d1d26b2c605267d000076506f36f2b03ad0a7b6ef6974a0774cef1c7271c8858b3346e7e1d84f920fff1ebee6369b2fd338a392

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 88732f8d930b43f43ef6aa05f6a2396c
SHA1 07937436cacb55cfaf2eb91793269033f02d9982
SHA256 b37281a1f5abeacf9fef204a8a7979478645a892d457852083213e73f8eec861
SHA512 f522daf08f90ba6e6dfa9e1a73a37883d1160168501ef33632fdf7dcab5a1e3fc77ded7e4e8a3dfd737daecbc3da3589102224390cbf55a854a3ceeb95017014

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 1e99d3f4f367ff8255fc5bf0c305315e
SHA1 a78c5c83513c164092e0518d0bd46a87b35a095b
SHA256 8fefb4dd47bdc66a329041733222ebc52a965bfe359ce8b95ae2ecae4ac5ed99
SHA512 93532ac5da9e51499d010465361fa8f93d26b3375adafb22de2e749f675c4ff2f7a957e202923c1876f45dfe45a7df1e5ba2e33af67d97ef0f4a1e29cde21a62

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 d4bb534100f0ec254304b97a9ffbd49d
SHA1 f72316aee00b6e68806527246bb004b9e3faf212
SHA256 7f6f270359ed2f99461315085a36ca91307f0159a22d4883264a41621de0c532
SHA512 a86bb414cc660229a185cbaefdfca5cfb4bb65b203726a53fe74f52725ce67e8d2f390529dd1647d48884a82abb98d861ed42543d46fc8375bad9512bb2680d4