Malware Analysis Report

2025-03-15 04:18

Sample ID 240824-t6sahs1dnj
Target https://driver-booster-free.en.softonic.com/
Tags
discovery motw phishing
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://driver-booster-free.en.softonic.com/ was found to be: Likely malicious.

Malicious Activity Summary

discovery motw phishing

Drops file in Drivers directory

Downloads MZ/PE file

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Mark of the Web detected: This indicates that the page was originally saved or cloned.

Drops file in System32 directory

Drops file in Program Files directory

Drops file in Windows directory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Browser Information Discovery

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: LoadsDriver

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Modifies data under HKEY_USERS

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Checks processor information in registry

Enumerates system info in registry

Suspicious behavior: EnumeratesProcesses

Uses Volume Shadow Copy service COM API

NTFS ADS

Modifies registry class

Checks SCSI registry key(s)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-24 16:40

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-24 16:40

Reported

2024-08-24 16:46

Platform

win10v2004-20240802-en

Max time kernel

310s

Max time network

365s

Command Line

C:\Windows\Explorer.EXE

Signatures

Downloads MZ/PE file

Drops file in Drivers directory

Description Indicator Process Target
File opened for modification C:\Windows\System32\drivers\SET49C2.tmp C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\drivers\SET49C2.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\drivers\ETDSMBus.sys C:\Windows\system32\DrvInst.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-945322488-2060912225-3527527000-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\is-U07OO.tmp\driver_booster_setup.tmp N/A
Key value queried \REGISTRY\USER\S-1-5-21-945322488-2060912225-3527527000-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\is-R8M8M.tmp\driver_booster_setup.tmp N/A
Key value queried \REGISTRY\USER\S-1-5-21-945322488-2060912225-3527527000-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
Key value queried \REGISTRY\USER\S-1-5-21-945322488-2060912225-3527527000-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\is-HJSAM.tmp-dbinst\setup.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-945322488-2060912225-3527527000-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\driver_booster_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-U07OO.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\Downloads\driver_booster_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-R8M8M.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-HJSAM.tmp-dbinst\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-0QB0L.tmp-dbinst\setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\driver_booster_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\HWiNFO\HWiNFO.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\TaskbarPin\ICONPIN64.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\InstStat.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\HWiNFO\HWiNFO.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ChangeIcon.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\NoteIcon.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DBDownloader.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DBDownloader.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ChangeIcon.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DrvInstall\DpInstX64.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DrvInstall\DpInstX64.exe N/A
N/A N/A C:\Users\Admin\Downloads\driver_booster_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-U07OO.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\Downloads\driver_booster_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-R8M8M.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-HJSAM.tmp-dbinst\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-0QB0L.tmp-dbinst\setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\driver_booster_setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\HWiNFO\HWiNFO.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\TaskbarPin\ICONPIN64.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\InstStat.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\HWiNFO\HWiNFO.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ChangeIcon.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\NoteIcon.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-HJSAM.tmp-dbinst\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-HJSAM.tmp-dbinst\setup.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\HWiNFO\HWiNFO.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\InstStat.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\InstStat.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A

Checks installed software on the system

discovery

Mark of the Web detected: This indicates that the page was originally saved or cloned.

phishing motw
Description Indicator Process Target
N/A https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html N/A N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\System32\DriverStore\Temp\{1cee2eb1-5d4d-1a46-b3b0-9eb7fb0c7564}\ETDSMBus.cat C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{1cee2eb1-5d4d-1a46-b3b0-9eb7fb0c7564}\ETDSMBus.inf C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{1cee2eb1-5d4d-1a46-b3b0-9eb7fb0c7564}\ETDSMBus.sys C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{1cee2eb1-5d4d-1a46-b3b0-9eb7fb0c7564}\SET480D.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{1cee2eb1-5d4d-1a46-b3b0-9eb7fb0c7564} C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{1cee2eb1-5d4d-1a46-b3b0-9eb7fb0c7564}\SET480E.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{1cee2eb1-5d4d-1a46-b3b0-9eb7fb0c7564}\SET480E.tmp C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{1cee2eb1-5d4d-1a46-b3b0-9eb7fb0c7564}\SET480F.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\etdsmbus.inf_amd64_1eb975a88efe3a94\ETDSMBus.sys C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\etdsmbus.inf_amd64_1eb975a88efe3a94\ETDSMBus.inf C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{1cee2eb1-5d4d-1a46-b3b0-9eb7fb0c7564}\SET480D.tmp C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\drvstore.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\etdsmbus.inf_amd64_1eb975a88efe3a94\ETDSMBus.cat C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{1cee2eb1-5d4d-1a46-b3b0-9eb7fb0c7564}\SET480F.tmp C:\Windows\system32\DrvInst.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ErrCodeSpec\is-GHFPC.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File opened for modification C:\Program Files (x86)\IObit\Driver Booster\11.6.0\LatestNews\NewsData_v2.dat.tmp.dat C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\LocalData\is-RQ584.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Update\is-LDJJS.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Icons\Apps\is-MPDUD.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File opened for modification C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanData\scan.dat C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Update\Temp\Pub\rpopconfig.upt C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-32SP6.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ErrCodeSpec\is-6PR61.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-0VTSL.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-D0VFP.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Boost\is-7LUH9.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-DKHPO.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-VR5GV.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-LNSCL.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-U9SET.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Language\is-RI4UP.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ErrCodeSpec\is-2QM8A.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Icons\Apps\is-TFO9G.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File opened for modification C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Update\Update.ini C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Database\Scan\WhiteListtmp C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DBDownloader.exe N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DpInst\x64\is-UV10S.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DrvInstall\is-VTEOM.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Language\is-4GPET.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-GVUU4.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Language\is-L5H0U.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-N867T.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-O5LQA.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ErrCodeSpec\is-179J7.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ErrCodeSpec\is-FKJQJ.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-P1V9Q.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-K48NJ.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Skin\is-QRK47.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File opened for modification C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Update\appver-ac.ini C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\LatestNews\NewsData_v2.dat.tmp C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Language\is-6NEJU.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Database\Scan\initial.wlst.temp C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanData\dev.dat C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ErrCodeSpec\is-4DKGA.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ErrCodeSpec\is-LQ4RE.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ErrCodeSpec\is-AJ5N5.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\LocalData\is-7AU2G.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-36OON.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-LRP87.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\History\is-79BEM.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Update\is-BHGMR.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Update\Temp\flssale.zlb C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Boost\is-FI9E9.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Language\is-CNJGM.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-7K4Q8.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanData\scan.dat C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ErrCodeSpec\is-9D0NT.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Icons\Apps\is-2678A.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Language\is-ETVTQ.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Language\is-0V7BL.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Language\is-A067A.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ErrCodeSpec\is-1I878.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-KHVOQ.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Boost\is-T32E2.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ErrCodeSpec\is-6UD64.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-1LTN8.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-E5UQF.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\History\is-G1NBC.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
File created C:\Program Files (x86)\IObit\Driver Booster\11.6.0\is-K1OUC.tmp C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\INF\c_monitor.PNF C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
File created C:\Windows\INF\c_media.PNF C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
File created C:\Windows\INF\c_processor.PNF C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
File opened for modification C:\Windows\inf\oem3.inf C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\INF\oem3.PNF C:\Windows\Explorer.EXE N/A
File created C:\Windows\INF\c_display.PNF C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DrvInstall\DpInstX64.exe N/A
File created C:\Windows\inf\oem3.inf C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\INF\c_volume.PNF C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
File created C:\Windows\INF\c_diskdrive.PNF C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\svchost.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\DrvInst.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\is-HJSAM.tmp-dbinst\setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\is-0QB0L.tmp-dbinst\setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\driver_booster_setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DBDownloader.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ChangeIcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\HWiNFO\HWiNFO.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DBDownloader.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\is-U07OO.tmp\driver_booster_setup.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\HWiNFO\HWiNFO.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\InstStat.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\driver_booster_setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\driver_booster_setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\is-R8M8M.tmp\driver_booster_setup.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\NoteIcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ChangeIcon.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Driver C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0008 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\DeviceCharacteristics C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\DeviceCharacteristics C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0004\ C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0003 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0004 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0064 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Driver C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0064 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Mfg C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0004 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\LocationInformation C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Mfg C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0008\ C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\DeviceDesc C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0002\ C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0003 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0004 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0002\ C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0004 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Driver C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0003\ C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Address C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0064 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0003\ C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Address C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\DeviceType C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0004 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0002\ C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0064 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0009\ C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\ConfigFlags C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\DeviceType C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0002\ C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0009 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0004 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0003\ C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\DeviceDesc C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0064\ C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 000000000400000096fabf83e47a2dea0000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c01200000000ffffffff00000000270101000008000096fabf830000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d01200000000000020ed3a000000ffffffff00000000070001000068090096fabf83000000000000d012000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff3a0000000000000005000000ffffffff000000000700010000f87f1d96fabf83000000000000f0ff3a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000096fabf8300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 C:\Windows\system32\vssvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Phantom C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0004 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\LocationInformation C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0002 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Phantom C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DrvInstall\DpInstX64.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0009\ C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\DeviceDesc C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Windows\system32\DrvInst.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DB_Open_dbd\shell C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DB_Open_dbd\shell\open C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DB_Open_dbd\shell\open\command\ = "C:\\Program Files (x86)\\IObit\\Driver Booster\\11.6.0\\OfflineUpdater.exe \"%1\"" C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-945322488-2060912225-3527527000-1000\{4D64E7BE-EE2A-4B61-8336-82D63AE71A65} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DB_Open_dbop\shell C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DB_Open_dbop\shell\open\command\ = "C:\\Program Files (x86)\\IObit\\Driver Booster\\11.6.0\\OfflineUpdater.exe \"%1\"" C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DB_Open_dbop\shell\open C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DB_Open_dbd\shell\open\command C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ C:\Windows\Explorer.EXE N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DB_Open_dbop\shell\open\command C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.dbd C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.dbd\ = "DB_Open_dbd" C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Key created \REGISTRY\USER\S-1-5-21-945322488-2060912225-3527527000-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ C:\Windows\Explorer.EXE N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.dbop C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DB_Open_dbop C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DB_Open_dbop\ C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\Explorer.EXE N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.dbop\ = "DB_Open_dbop" C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DB_Open_dbd C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DB_Open_dbd\ C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 178572.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 913094.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-U07OO.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-U07OO.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-U07OO.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-U07OO.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-R8M8M.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-R8M8M.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-R8M8M.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-R8M8M.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-HJSAM.tmp-dbinst\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-HJSAM.tmp-dbinst\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-0QB0L.tmp-dbinst\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-0QB0L.tmp-dbinst\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\InstStat.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\InstStat.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AUpdate.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DBDownloader.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DBDownloader.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DBDownloader.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DBDownloader.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\is-U07OO.tmp\driver_booster_setup.tmp N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\is-R8M8M.tmp\driver_booster_setup.tmp N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp N/A
Token: SeLoadDriverPrivilege N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\HWiNFO\HWiNFO.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\HWiNFO\HWiNFO.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\HWiNFO\HWiNFO.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: 33 N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\Explorer.EXE N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\Explorer.EXE N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A
N/A N/A C:\Windows\Explorer.EXE N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2232 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3076 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 3984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2232 wrote to memory of 4396 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Windows\Explorer.EXE

C:\Windows\Explorer.EXE

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://driver-booster-free.en.softonic.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xb4,0x108,0x7ffd76d846f8,0x7ffd76d84708,0x7ffd76d84718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2780 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5520 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5520 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6008 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6448 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6468 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6240 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6768 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6776 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6904 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7040 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7048 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7156 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6164 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7848 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5616 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8456 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7792 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7548 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7752 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8552 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7128 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6216 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3408 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8576 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6620 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8444 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5204 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6176 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7028 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8456 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8444 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7380 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8428 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7120 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8804 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6876 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7308 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6864 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7528 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7456 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7860 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6864 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6888 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3368 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x50c 0x514

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8804 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8664 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8748 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6560 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8376 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8468 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1260 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8144 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7796 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6172 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9028 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5204 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1772 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7512 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6896 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=9300 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8372 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5724 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7028 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9636 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10044 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=10132 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9628 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4608 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9776 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10028 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8464 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8896 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6760 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6408 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4160 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9132 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7068 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8468 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6248 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10160 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4736 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6936 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6660 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5608 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10076 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9652 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1328 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8508 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9064 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7468 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8124 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9636 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=9408 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2140,14189971653700475222,18380354841010575735,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9848 /prefetch:8

C:\Users\Admin\Downloads\driver_booster_setup.exe

"C:\Users\Admin\Downloads\driver_booster_setup.exe"

C:\Users\Admin\AppData\Local\Temp\is-U07OO.tmp\driver_booster_setup.tmp

"C:\Users\Admin\AppData\Local\Temp\is-U07OO.tmp\driver_booster_setup.tmp" /SL5="$A02B0,28998482,139264,C:\Users\Admin\Downloads\driver_booster_setup.exe"

C:\Users\Admin\Downloads\driver_booster_setup.exe

"C:\Users\Admin\Downloads\driver_booster_setup.exe"

C:\Users\Admin\AppData\Local\Temp\is-R8M8M.tmp\driver_booster_setup.tmp

"C:\Users\Admin\AppData\Local\Temp\is-R8M8M.tmp\driver_booster_setup.tmp" /SL5="$50042,28998482,139264,C:\Users\Admin\Downloads\driver_booster_setup.exe"

C:\Users\Admin\AppData\Local\Temp\is-HJSAM.tmp-dbinst\setup.exe

"C:\Users\Admin\AppData\Local\Temp\is-HJSAM.tmp-dbinst\setup.exe" "C:\Users\Admin\Downloads\driver_booster_setup.exe" /title="Driver Booster 11" /dbver=11.6.0.128 /eula="C:\Users\Admin\AppData\Local\Temp\is-HJSAM.tmp-dbinst\EULA.rtf" /showlearnmore /pmtproduct /nochromepmt

C:\Users\Admin\AppData\Local\Temp\is-0QB0L.tmp-dbinst\setup.exe

"C:\Users\Admin\AppData\Local\Temp\is-0QB0L.tmp-dbinst\setup.exe" "C:\Users\Admin\Downloads\driver_booster_setup.exe" /title="Driver Booster 11" /dbver=11.6.0.128 /eula="C:\Users\Admin\AppData\Local\Temp\is-0QB0L.tmp-dbinst\EULA.rtf" /showlearnmore /pmtproduct /nochromepmt

C:\Users\Admin\Downloads\driver_booster_setup.exe

"C:\Users\Admin\Downloads\driver_booster_setup.exe" /sp- /verysilent /Installer /norestart /DIR="C:\Program Files (x86)\IObit\Driver Booster" /Installer-DeskIcon /Installer-TaskIcon

C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp

"C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp" /SL5="$202CC,28998482,139264,C:\Users\Admin\Downloads\driver_booster_setup.exe" /sp- /verysilent /Installer /norestart /DIR="C:\Program Files (x86)\IObit\Driver Booster" /Installer-DeskIcon /Installer-TaskIcon

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\HWiNFO\HWiNFO.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\HWiNFO\HWiNFO.exe" /brandname

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe" /install /setup="C:\Users\Admin\Downloads\driver_booster_setup.exe"

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe" /winstdate

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\TaskbarPin\ICONPIN64.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\TaskbarPin\ICONPIN64.exe" pin "C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe"

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\InstStat.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\InstStat.exe" /install db11

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe" /autoscan

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe" /afterinstall /setup="C:\Users\Admin\AppData\Local\Temp\is-HJSAM.tmp-dbinst\setup.exe"

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\HWiNFO\HWiNFO.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\HWiNFO\HWiNFO.exe" /brandname

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe" /CommStat /DoCommStat /Code="a602" /Days=0

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AutoUpdate.exe" /main /App=db11 /MainHwnd=0

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ChangeIcon.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ChangeIcon.exe" /0 "C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Icons\Main\"

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\NoteIcon.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\NoteIcon.exe" "C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DriverBooster.exe"

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe" /cnt

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe" /CommStat /DoCommStat /Code="A100" /Days=0

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe" /CommStat /DoCommStat /Code="B100" /Days=7

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe" /db_os_arch

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe" /fix-errorcode-1

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\FaultFixes.exe" /fix-clean-1

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\RttHlp.exe" /stat

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe" /afterupgrade

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AUpdate.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\AUpdate.exe" /u http://stats.iobit.com/active_month.php /a db11 /p iobit /v 11.6.0.128 /t 1 /d 7 /db /user

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe" /CommStat /DoCommStat /Code="A101" /Days=0

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe" /CommStat /DoCommStat /Code="B101" /Days=7

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DBDownloader.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DBDownloader.exe" {"proxytype":0,"task":[{"exp":"C:\\Program Files (x86)\\IObit\\Driver Booster\\11.6.0\\Database\\Scan\\WhiteList.db","u":"http://www.cd4o.com/drivers/wlst/b41502fe19fcf7d50c9f59b901b58f56.wlst","t":3,"p":"C:\\Program Files (x86)\\IObit\\Driver Booster\\11.6.0\\Database\\Scan\\WhiteListtmp","m":"b41502fe19fcf7d50c9f59b901b58f56","d":false}],"downtype":1}

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanWinUpd.exe" /db_gather_driver_tmp

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DBDownloader.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DBDownloader.exe" {"proxytype":0,"hosthandle":786500,"timeout":10,"id":8115,"task":[{"u":"http://download.windowsupdate.com/d/msdownload/update/driver/drvs/2013/07/20578753_999fee3ed6b5ef3a08f51ced090c4827a420736e.cab","t":0,"p":""}],"downtype":4}

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe" /CommStat /DoCommStatEx /Code="a208" /Days=0 /PostNow=-1 /WaitFor=0 /ExParam=""

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe" /CommStat /DoCommStatEx /Code="b208" /Days=7 /PostNow=-1 /WaitFor=0 /ExParam=""

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ChangeIcon.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ChangeIcon.exe" /1 "C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Icons\Main\"

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe" /CommStat /PostCommStat /Days=7 /Wait=0 /Path=""

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe" /CommStat /DoCommStat /Code="a160" /Days=0

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Manta.exe" /CommStat /DoCommStat /Code="b160" /Days=7

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\srtasks.exe

C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DrvInstall\DpInstX64.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DrvInstall\DpInstX64.exe" "/i" "C:\Users\Admin\AppData\Local\Temp\Dbz6F726" "PCI\VEN_8086&DEV_2930&SUBSYS_11001AF4&REV_02\3&11583659&0&FB=PCI\VEN_8086&DEV_2930&CC_0C05=15.21.1.21"

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{8cf3f806-130f-e946-beef-d73515ff9c0d}\ETDSMBus.inf" "9" "4b95281a7" "0000000000000148" "WinSta0\Default" "0000000000000160" "208" "C:\Users\Admin\AppData\Local\Temp\Dbz6F726"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "2" "201" "PCI\VEN_8086&DEV_2930&SUBSYS_11001AF4&REV_02\3&11583659&0&FB" "C:\Windows\System32\DriverStore\FileRepository\etdsmbus.inf_amd64_1eb975a88efe3a94\etdsmbus.inf" "oem3.inf:*:*:15.21.1.21:PCI\VEN_8086&DEV_2930&CC_0C05," "4b95281a7" "0000000000000148"

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DrvInstall\DpInstX64.exe

"C:\Program Files (x86)\IObit\Driver Booster\11.6.0\DrvInstall\DpInstX64.exe" "/i" "C:\Users\Admin\AppData\Local\Temp\Dbz42452" "PCI\VEN_10EC&DEV_8139&SUBSYS_11001AF4&REV_20\3&11583659&0&18=PCI\VEN_10EC&DEV_8139&REV_20=6.111.723.2009"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{690aa145-e4a3-7043-90a0-f03f73b9c094}\Netrtl64.inf" "9" "4148bc3c7" "000000000000015C" "WinSta0\Default" "0000000000000164" "208" "C:\Users\Admin\AppData\Local\Temp\Dbz42452"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "2" "201" "PCI\VEN_10EC&DEV_8139&SUBSYS_11001AF4&REV_20\3&11583659&0&18" "C:\Windows\System32\DriverStore\FileRepository\netrtl64.inf_amd64_75df7ba4ecd28793\netrtl64.inf" "oem4.inf:*:*:6.111.723.2009:PCI\VEN_10EC&DEV_8139&REV_20," "4148bc3c7" "000000000000015C"

Network

Country Destination Domain Proto
US 8.8.8.8:53 driver-booster-free.en.softonic.com udp
US 151.101.1.91:443 driver-booster-free.en.softonic.com tcp
US 151.101.1.91:443 driver-booster-free.en.softonic.com udp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 sc.sftcdn.net udp
US 8.8.8.8:53 softonic.com udp
US 151.101.65.91:443 sc.sftcdn.net tcp
US 151.101.65.91:443 sc.sftcdn.net tcp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 151.101.129.91:443 sc.sftcdn.net tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 199.232.213.91:443 softonic.com tcp
US 199.232.213.91:443 softonic.com tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.clarity.ms udp
US 8.8.8.8:53 bat.bing.com udp
GB 13.224.222.58:443 sdk.privacy-center.org tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 91.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 68.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 240.143.123.92.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 150.171.27.10:443 bat.bing.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net tcp
FR 142.250.179.68:443 www.google.com tcp
US 151.101.65.91:443 sc.sftcdn.net tcp
US 13.107.246.64:443 www.clarity.ms tcp
US 151.101.129.91:443 sc.sftcdn.net udp
US 8.8.8.8:53 syndicatedsearch.goog udp
FR 216.58.214.174:443 syndicatedsearch.goog tcp
US 8.8.8.8:53 91.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 91.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 91.213.232.199.in-addr.arpa udp
US 8.8.8.8:53 9.223.224.13.in-addr.arpa udp
US 8.8.8.8:53 58.222.224.13.in-addr.arpa udp
US 8.8.8.8:53 34.215.58.216.in-addr.arpa udp
US 8.8.8.8:53 68.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 200.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 107.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 174.214.58.216.in-addr.arpa udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 www.datadoghq-browser-agent.com udp
GB 18.172.148.233:443 www.datadoghq-browser-agent.com tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 btloader.com udp
US 104.22.75.216:443 btloader.com tcp
US 8.8.8.8:53 h.clarity.ms udp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 storage.googleapis.com udp
US 8.8.8.8:53 di-images.sftcdn.net udp
FR 216.58.215.59:443 storage.googleapis.com tcp
US 8.8.8.8:53 ad-delivery.net udp
US 172.67.69.19:443 ad-delivery.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 cdn.btmessage.com udp
US 8.8.8.8:53 api.btloader.com udp
US 130.211.23.194:443 api.btloader.com tcp
GB 108.156.39.61:443 config.aps.amazon-adsystem.com tcp
US 104.26.6.141:443 cdn.btmessage.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 8.8.8.8:53 prod.us-east-1.cxm-bcn.publisher-services.amazon.dev udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 233.148.172.18.in-addr.arpa udp
US 8.8.8.8:53 216.75.22.104.in-addr.arpa udp
US 8.8.8.8:53 151.64.8.51.in-addr.arpa udp
US 8.8.8.8:53 59.215.58.216.in-addr.arpa udp
US 8.8.8.8:53 19.69.67.172.in-addr.arpa udp
US 8.8.8.8:53 166.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 61.39.156.108.in-addr.arpa udp
US 104.22.53.86:443 cdn.id5-sync.com tcp
US 52.0.220.230:443 prod.us-east-1.cxm-bcn.publisher-services.amazon.dev tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 8.8.8.8:53 api.btmessage.com udp
US 8.8.8.8:53 c.clarity.ms udp
US 8.8.8.8:53 notix.io udp
US 151.101.65.91:443 di-images.sftcdn.net udp
IE 13.74.129.1:443 c.clarity.ms tcp
NL 139.45.197.253:443 notix.io tcp
US 8.8.8.8:53 c.bing.com udp
US 204.79.197.237:443 c.bing.com tcp
NL 139.45.197.253:443 notix.io tcp
US 8.8.8.8:53 141.6.26.104.in-addr.arpa udp
US 8.8.8.8:53 86.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 230.220.0.52.in-addr.arpa udp
US 8.8.8.8:53 1.129.74.13.in-addr.arpa udp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 253.197.45.139.in-addr.arpa udp
US 8.8.8.8:53 98.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 150.171.28.10:443 g.bing.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp
US 8.8.8.8:53 api.privacy-center.org udp
GB 108.138.233.47:443 api.privacy-center.org tcp
FR 216.58.214.174:443 syndicatedsearch.goog udp
US 8.8.8.8:53 47.233.138.108.in-addr.arpa udp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 9048384b755e28f0ac7dfe269c28ae93.safeframe.googlesyndication.com udp
US 8.8.8.8:53 wct.softonic.com udp
FR 142.250.179.65:443 9048384b755e28f0ac7dfe269c28ae93.safeframe.googlesyndication.com tcp
US 172.67.74.173:443 wct.softonic.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 brightcombid.marphezis.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 shb.richaudience.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 partner.googleadservices.com udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.criteo.net udp
US 34.120.63.153:443 prebid.media.net tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 cdn-ima.33across.com udp
NL 185.89.210.212:443 ib.adnxs.com tcp
US 104.18.36.155:443 htlb.casalemedia.com tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
IE 54.220.6.201:443 id.crwdcntrl.net tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
NL 188.166.203.175:443 brightcombid.marphezis.com tcp
IE 52.208.45.33:443 ad.360yield.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
IE 34.252.76.106:443 ap.lijit.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
FR 142.250.201.162:443 googleads.g.doubleclick.net tcp
FR 142.250.201.162:443 googleads.g.doubleclick.net tcp
FR 142.250.201.162:443 googleads.g.doubleclick.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
NL 178.250.1.3:443 static.criteo.net tcp
FR 142.250.201.162:443 googleads.g.doubleclick.net tcp
US 104.18.35.167:443 cdn-ima.33across.com tcp
FR 216.58.214.162:443 ep1.adtrafficquality.google tcp
GB 18.245.143.100:443 tags.crwdcntrl.net tcp
US 8.8.8.8:53 apps.identrust.com udp
GB 173.222.211.58:80 apps.identrust.com tcp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
US 8.8.8.8:53 www.google.co.uk udp
US 216.239.32.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 gum.criteo.com udp
BE 74.125.71.157:443 stats.g.doubleclick.net tcp
FR 142.250.179.97:443 ep2.adtrafficquality.google tcp
US 172.67.74.173:443 wct.softonic.com tcp
US 8.8.8.8:53 lexicon.33across.com udp
FR 142.250.201.163:443 www.google.co.uk tcp
FR 142.250.201.163:443 www.google.co.uk tcp
FR 142.250.201.163:443 www.google.co.uk tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 35.244.193.51:443 lexicon.33across.com tcp
US 8.8.8.8:53 ampcid.google.com udp
FR 216.58.213.78:443 ampcid.google.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
BE 74.125.71.157:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 65.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 173.74.67.172.in-addr.arpa udp
US 8.8.8.8:53 232.154.172.18.in-addr.arpa udp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 155.36.18.104.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 175.203.166.188.in-addr.arpa udp
US 8.8.8.8:53 64.98.95.141.in-addr.arpa udp
US 8.8.8.8:53 167.35.18.104.in-addr.arpa udp
US 8.8.8.8:53 201.6.220.54.in-addr.arpa udp
US 8.8.8.8:53 33.45.208.52.in-addr.arpa udp
US 8.8.8.8:53 162.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 106.76.252.34.in-addr.arpa udp
US 8.8.8.8:53 79.241.63.178.in-addr.arpa udp
US 8.8.8.8:53 162.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 100.143.245.18.in-addr.arpa udp
US 8.8.8.8:53 174.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 150.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 58.211.222.173.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 157.71.125.74.in-addr.arpa udp
US 8.8.8.8:53 97.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 163.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 51.193.244.35.in-addr.arpa udp
US 8.8.8.8:53 129.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 78.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 163.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
FR 185.235.86.172:443 ag.gbc.criteo.com tcp
NL 178.250.1.11:443 dnacdn.net tcp
FR 185.235.86.104:443 gem.gbc.criteo.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 cdn.ampproject.org udp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
US 8.8.8.8:53 en.softonic.com udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 172.86.235.185.in-addr.arpa udp
US 8.8.8.8:53 104.86.235.185.in-addr.arpa udp
US 8.8.8.8:53 234.75.250.142.in-addr.arpa udp
US 8.8.8.8:53 131.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 161.214.58.216.in-addr.arpa udp
FR 142.250.201.162:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 sync.richaudience.com udp
GB 95.100.244.20:443 contextual.media.net tcp
GB 2.18.108.192:443 ads.pubmatic.com tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
DE 162.55.236.224:443 sync.richaudience.com tcp
US 104.18.38.76:443 js-sec.indexww.com tcp
US 151.101.1.108:443 acdn.adnxs.com tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
DE 162.55.236.224:443 sync.richaudience.com tcp
US 8.8.8.8:53 20.244.100.95.in-addr.arpa udp
US 8.8.8.8:53 192.108.18.2.in-addr.arpa udp
US 8.8.8.8:53 108.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 76.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 152.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 player.aniview.com udp
GB 92.123.140.19:443 player.aniview.com tcp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 18.205.0.76:443 cs-server-s2s.yellowblue.io tcp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 67.202.105.21:443 ssc-cms.33across.com tcp
DE 51.89.9.252:443 onetag-sys.com tcp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 8.8.8.8:53 secure.adnxs.com udp
DE 37.252.171.21:443 secure.adnxs.com tcp
FR 51.178.195.212:443 ssbsync.smartadserver.com tcp
DE 37.252.171.21:443 secure.adnxs.com tcp
US 8.8.8.8:53 dis.criteo.com udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 3.230.236.160:443 api-2-0.spot.im tcp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 34.250.109.179:443 match.prod.bidr.io tcp
US 54.197.234.7:443 sync.srv.stackadapt.com tcp
US 3.33.220.150:443 match.adsrvr.org tcp
NL 198.47.127.18:443 image8.pubmatic.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 19.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 252.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 21.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 76.0.205.18.in-addr.arpa udp
US 8.8.8.8:53 212.195.178.51.in-addr.arpa udp
US 8.8.8.8:53 21.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 jadserve.postrelease.com udp
IE 54.216.57.173:443 jadserve.postrelease.com tcp
US 8.8.8.8:53 tracker.open-adsyield.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 sync.aniview.com udp
US 172.111.38.86:443 tracker.open-adsyield.com tcp
US 192.132.33.67:443 bttrack.com tcp
US 172.240.45.78:443 sync.aniview.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
US 8.8.8.8:53 s.ad.smaato.net udp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 equativ-match.dotomi.com udp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
GB 108.156.39.126:443 s.ad.smaato.net tcp
NL 63.215.202.172:443 equativ-match.dotomi.com tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 52.46.155.104:443 s.amazon-adsystem.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
GB 2.22.101.110:443 secure-assets.rubiconproject.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
GB 95.100.245.251:443 eus.rubiconproject.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 8.8.8.8:53 token.rubiconproject.com udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 150.220.33.3.in-addr.arpa udp
US 8.8.8.8:53 18.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 179.109.250.34.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 160.236.230.3.in-addr.arpa udp
US 8.8.8.8:53 7.234.197.54.in-addr.arpa udp
US 8.8.8.8:53 173.57.216.54.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 86.38.111.172.in-addr.arpa udp
US 8.8.8.8:53 117.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 67.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 78.45.240.172.in-addr.arpa udp
US 8.8.8.8:53 126.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 172.202.215.63.in-addr.arpa udp
US 8.8.8.8:53 110.101.22.2.in-addr.arpa udp
US 8.8.8.8:53 104.155.46.52.in-addr.arpa udp
US 8.8.8.8:53 251.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 209.205.72.20.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 51.8.64.151:443 h.clarity.ms tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 connect.facebook.net udp
ES 157.240.5.10:443 connect.facebook.net tcp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 8.8.8.8:53 10.5.240.157.in-addr.arpa udp
US 8.8.8.8:53 0cb73fedd843214341d168c2729b2f0b.safeframe.googlesyndication.com udp
US 34.120.63.153:443 prebid.media.net udp
FR 142.250.201.163:443 www.google.co.uk udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 130.211.23.194:443 api.btloader.com udp
IE 52.95.126.160:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 www.facebook.com udp
ES 157.240.5.35:443 www.facebook.com tcp
ES 157.240.5.35:443 www.facebook.com tcp
FR 216.58.214.162:443 ep1.adtrafficquality.google udp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 160.126.95.52.in-addr.arpa udp
US 8.8.8.8:53 35.5.240.157.in-addr.arpa udp
DE 162.55.236.224:443 sync.richaudience.com tcp
US 8.8.8.8:53 cacerts.rapidssl.com udp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
DE 51.89.9.252:443 onetag-sys.com udp
US 8.8.8.8:53 224.236.55.162.in-addr.arpa udp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 34.250.109.179:443 match.prod.bidr.io tcp
US 8.8.8.8:53 c1.adform.net udp
US 54.197.234.7:443 sync.srv.stackadapt.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
DK 37.157.6.231:443 c1.adform.net tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 231.6.157.37.in-addr.arpa udp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 store.iobit.com udp
US 45.60.14.94:443 store.iobit.com tcp
US 8.8.8.8:53 secure.2checkout.com udp
US 45.60.14.94:443 secure.2checkout.com tcp
US 8.8.8.8:53 secure.avangate.com udp
US 8.8.8.8:53 94.14.60.45.in-addr.arpa udp
US 45.60.14.94:443 secure.avangate.com tcp
US 8.8.8.8:53 crl.comodoca.com udp
US 172.64.149.23:80 crl.comodoca.com tcp
US 8.8.8.8:53 a05d8763ae409d091d590c87d2dcc005.safeframe.googlesyndication.com udp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 js.adscale.de udp
GB 18.245.143.108:443 js.adscale.de tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 www.iobit.com udp
US 52.72.226.52:443 www.iobit.com tcp
US 8.8.8.8:53 ih.adscale.de udp
DE 52.57.54.158:443 ih.adscale.de tcp
US 8.8.8.8:53 crt.rootg2.amazontrust.com udp
GB 143.204.68.81:80 crt.rootg2.amazontrust.com tcp
FR 185.235.86.172:443 ag.gbc.criteo.com tcp
FR 185.235.86.104:443 gem.gbc.criteo.com tcp
NL 139.45.197.253:443 notix.io tcp
US 8.8.8.8:53 108.143.245.18.in-addr.arpa udp
US 8.8.8.8:53 52.226.72.52.in-addr.arpa udp
US 8.8.8.8:53 158.54.57.52.in-addr.arpa udp
US 8.8.8.8:53 81.68.204.143.in-addr.arpa udp
US 52.72.226.52:80 www.iobit.com tcp
US 35.244.193.51:443 lexicon.33across.com udp
US 52.72.226.52:80 www.iobit.com tcp
US 52.72.226.52:80 www.iobit.com tcp
US 52.72.226.52:80 www.iobit.com tcp
US 52.72.226.52:80 www.iobit.com tcp
US 52.72.226.52:80 www.iobit.com tcp
US 8.8.8.8:53 183.59.114.20.in-addr.arpa udp
US 52.72.226.52:443 www.iobit.com tcp
US 52.72.226.52:443 www.iobit.com tcp
US 52.72.226.52:443 www.iobit.com tcp
US 8.8.8.8:53 recorder.iobit.com udp
US 8.8.8.8:53 purchase.iobit.com udp
US 8.8.8.8:53 forums.iobit.com udp
US 52.72.226.52:443 www.iobit.com tcp
US 52.72.226.52:443 www.iobit.com tcp
US 8.8.8.8:53 www.ifreeup.com udp
US 8.8.8.8:53 www.iotransfer.net udp
US 8.8.8.8:53 www.itopvpn.com udp
US 8.8.8.8:53 www.macbooster.net udp
US 8.8.8.8:53 www.vidnoz.com udp
US 8.8.8.8:53 twitter.com udp
US 8.8.8.8:53 ru.iobit.com udp
US 8.8.8.8:53 jp.iobit.com udp
US 8.8.8.8:53 www.easehow.com udp
US 8.8.8.8:53 www.imofone.com udp
US 8.8.8.8:53 www.ismartta.com udp
US 8.8.8.8:53 www.miocreate.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 www.vidmud.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 www.vidqu.ai udp
US 8.8.8.8:53 www.vidwud.com udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 8.8.8.8:53 articles-img.sftcdn.net udp
US 8.8.8.8:53 push-sdk.com udp
DE 178.63.248.57:443 push-sdk.com tcp
US 8.8.8.8:53 uidsync.net udp
DE 178.63.248.57:443 uidsync.net tcp
DE 178.63.248.57:443 uidsync.net tcp
US 8.8.8.8:53 57.248.63.178.in-addr.arpa udp
DE 162.55.236.224:443 sync.richaudience.com tcp
DE 162.55.236.224:443 sync.richaudience.com tcp
DE 37.252.171.21:443 secure.adnxs.com tcp
FR 51.178.195.212:443 ssbsync.smartadserver.com tcp
US 67.202.105.21:443 ssc-cms.33across.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 34.250.109.179:443 match.prod.bidr.io tcp
US 54.197.234.7:443 sync.srv.stackadapt.com tcp
DE 37.252.171.21:443 secure.adnxs.com tcp
DE 37.252.171.21:443 secure.adnxs.com tcp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 18.172.154.232:443 aax.amazon-adsystem.com tcp
US 104.26.6.141:443 api.btmessage.com tcp
US 199.232.213.91:443 softonic.com udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 8.8.8.8:53 dc49f82988bf1df88f9edcefb636d735.safeframe.googlesyndication.com udp
NL 185.89.210.212:443 ib.adnxs.com tcp
NL 139.45.197.253:443 notix.io tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 cd.connatix.com udp
US 172.64.146.152:443 cd.connatix.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 cds.connatix.com udp
US 8.8.8.8:53 152.146.64.172.in-addr.arpa udp
US 8.8.8.8:53 capi.connatix.com udp
US 8.8.8.8:53 ins.connatix.com udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 img.connatix.com udp
FR 142.250.178.138:443 imasdk.googleapis.com tcp
US 8.8.8.8:53 138.178.250.142.in-addr.arpa udp
FR 142.250.178.138:443 imasdk.googleapis.com udp
US 8.8.8.8:53 s0.2mdn.net udp
FR 142.250.178.134:443 s0.2mdn.net tcp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
FR 142.250.75.226:443 pubads.g.doubleclick.net tcp
US 8.8.8.8:53 134.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 226.75.250.142.in-addr.arpa udp
US 8.8.8.8:53 csi.gstatic.com udp
JP 142.250.196.131:443 csi.gstatic.com tcp
JP 142.250.196.131:443 csi.gstatic.com tcp
FR 51.178.195.212:443 ssbsync.smartadserver.com tcp
US 67.202.105.21:443 ssc-cms.33across.com tcp
JP 142.250.196.131:443 csi.gstatic.com tcp
FR 142.250.75.226:443 pubads.g.doubleclick.net udp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 178.250.1.9:443 dis.criteo.com tcp
IE 34.250.109.179:443 match.prod.bidr.io tcp
US 54.197.234.7:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 131.196.250.142.in-addr.arpa udp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
JP 142.250.196.131:443 csi.gstatic.com udp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
FR 172.217.20.162:443 cm.g.doubleclick.net tcp
DE 18.184.119.72:443 match.sharethrough.com tcp
FR 172.217.20.162:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 162.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 72.119.184.18.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
GB 95.101.129.226:443 www.bing.com tcp
GB 95.101.129.226:443 www.bing.com tcp
US 8.8.8.8:53 226.129.101.95.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 95.101.129.146:443 r.bing.com tcp
GB 95.101.129.200:443 r.bing.com tcp
GB 95.101.129.200:443 r.bing.com tcp
GB 95.101.129.146:443 r.bing.com tcp
US 8.8.8.8:53 146.129.101.95.in-addr.arpa udp
US 8.8.8.8:53 200.129.101.95.in-addr.arpa udp
US 8.8.8.8:53 bing.com udp
US 13.107.21.200:443 bing.com tcp
US 8.8.8.8:53 200.21.107.13.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
IE 40.126.31.67:443 login.microsoftonline.com tcp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 67.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
US 8.8.8.8:53 134.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 www.fortect.com udp
US 172.67.75.40:443 www.fortect.com tcp
US 172.67.75.40:443 www.fortect.com tcp
US 8.8.8.8:53 ajax.googleapis.com udp
FR 172.217.20.202:443 ajax.googleapis.com tcp
US 8.8.8.8:53 40.75.67.172.in-addr.arpa udp
US 8.8.8.8:53 202.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 util.fortect.com udp
BE 74.125.71.157:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 h.clarity.ms udp
US 51.8.64.151:443 h.clarity.ms tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.8.8:53 167.154.64.172.in-addr.arpa udp
US 8.8.8.8:53 cloud.fortect.com udp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
US 8.8.8.8:53 21.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 www.iobit.com udp
US 8.8.8.8:53 store.iobit.com udp
US 52.54.37.131:443 www.iobit.com tcp
US 52.54.37.131:443 www.iobit.com tcp
US 52.54.37.131:80 www.iobit.com tcp
US 8.8.8.8:53 secure.2checkout.com udp
US 8.8.8.8:53 secure.avangate.com udp
US 52.54.37.131:443 www.iobit.com tcp
US 52.54.37.131:443 www.iobit.com tcp
US 52.54.37.131:443 www.iobit.com tcp
US 52.54.37.131:443 www.iobit.com tcp
US 8.8.8.8:53 131.37.54.52.in-addr.arpa udp
US 8.8.8.8:53 purchase.iobit.com udp
US 52.86.131.94:443 purchase.iobit.com tcp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 52.86.131.94:443 purchase.iobit.com tcp
US 52.86.131.94:443 purchase.iobit.com tcp
US 52.86.131.94:443 purchase.iobit.com tcp
US 52.86.131.94:443 purchase.iobit.com tcp
US 52.86.131.94:443 purchase.iobit.com tcp
US 8.8.8.8:53 94.131.86.52.in-addr.arpa udp
US 8.8.8.8:53 driver-booster-free.en.softonic.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 104.26.6.141:443 api.btmessage.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
GB 18.244.138.116:443 aax.amazon-adsystem.com tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 sc.sftcdn.net udp
US 199.232.213.91:443 softonic.com udp
US 151.101.129.91:443 sc.sftcdn.net udp
US 151.101.129.91:443 sc.sftcdn.net udp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 151.101.129.91:443 images.sftcdn.net udp
US 8.8.8.8:53 sdk.privacy-center.org udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 116.138.244.18.in-addr.arpa udp
FR 216.58.214.174:443 syndicatedsearch.goog udp
US 8.8.8.8:53 www.facebook.com udp
ES 157.240.5.35:443 www.facebook.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 006f6eea1ff0b8616dd75d242946ae33.safeframe.googlesyndication.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 ap.lijit.com udp
NL 188.166.203.175:443 brightcombid.marphezis.com tcp
IE 52.17.251.242:443 ad.360yield.com tcp
FR 142.250.201.162:443 googleads.g.doubleclick.net udp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
IE 63.33.82.31:443 ap.lijit.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 51.8.64.151:443 h.clarity.ms tcp
DE 37.252.171.149:443 ib.adnxs.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 8.8.8.8:53 242.251.17.52.in-addr.arpa udp
US 8.8.8.8:53 31.82.33.63.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
FR 142.250.201.163:443 www.google.co.uk udp
BE 74.125.71.157:443 stats.g.doubleclick.net udp
US 130.211.23.194:443 api.btloader.com udp
FR 142.250.179.68:443 www.google.com udp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 149.171.252.37.in-addr.arpa udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 en.softonic.com udp
NL 139.45.197.253:443 notix.io tcp
US 8.8.8.8:53 828352f4c5081f8e3298fc0cf39acb11.safeframe.googlesyndication.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 contextual.media.net udp
DE 162.55.236.224:443 sync.richaudience.com tcp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
DE 162.55.236.224:443 sync.richaudience.com tcp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
DE 51.89.9.252:443 onetag-sys.com tcp
US 8.8.8.8:53 player.aniview.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 3.210.110.24:443 cs-server-s2s.yellowblue.io tcp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 67.202.105.24:443 ssc-cms.33across.com tcp
FR 51.178.195.212:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 153.84.255.185.in-addr.arpa udp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 match.prod.bidr.io udp
US 3.33.220.150:443 match.adsrvr.org tcp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 172.111.38.86:443 tracker.open-adsyield.com tcp
IE 54.216.57.173:443 jadserve.postrelease.com tcp
US 8.8.8.8:53 id.rlcdn.com udp
US 192.132.33.67:443 bttrack.com tcp
US 54.164.72.48:443 sync.srv.stackadapt.com tcp
IE 52.208.228.214:443 match.prod.bidr.io tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
FR 172.217.20.162:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 24.110.210.3.in-addr.arpa udp
US 8.8.8.8:53 24.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 214.228.208.52.in-addr.arpa udp
US 8.8.8.8:53 48.72.164.54.in-addr.arpa udp
US 8.8.8.8:53 fb8bdae0f181f0d6b44f4f4061b3b4f2.safeframe.googlesyndication.com udp
US 8.8.8.8:53 recorder.iobit.com udp
US 8.8.8.8:53 forums.iobit.com udp
US 8.8.8.8:53 www.iotransfer.net udp
US 8.8.8.8:53 www.itopvpn.com udp
US 8.8.8.8:53 www.macbooster.net udp
US 8.8.8.8:53 www.vidnoz.com udp
US 8.8.8.8:53 jp.iobit.com udp
US 8.8.8.8:53 www.easehow.com udp
US 8.8.8.8:53 www.imofone.com udp
US 8.8.8.8:53 www.ismartta.com udp
US 8.8.8.8:53 www.miocreate.com udp
US 8.8.8.8:53 www.vidmud.com udp
US 8.8.8.8:53 www.vidqu.ai udp
US 8.8.8.8:53 www.vidwud.com udp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 ih.adscale.de udp
DE 18.195.3.92:443 ih.adscale.de tcp
NL 139.45.197.253:443 notix.io tcp
US 8.8.8.8:53 92.3.195.18.in-addr.arpa udp
US 8.8.8.8:53 push-sdk.com udp
DE 23.88.8.125:443 push-sdk.com tcp
US 8.8.8.8:53 uidsync.net udp
DE 23.88.8.125:443 uidsync.net tcp
DE 23.88.8.125:443 uidsync.net tcp
US 8.8.8.8:53 125.8.88.23.in-addr.arpa udp
DE 162.55.236.224:443 sync.richaudience.com tcp
US 67.202.105.24:443 ssc-cms.33across.com tcp
FR 51.178.195.212:443 ssbsync.smartadserver.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 52.208.228.214:443 match.prod.bidr.io tcp
US 54.164.72.48:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 www.iobit.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 52.54.37.131:80 www.iobit.com tcp
US 8.8.8.8:53 www.googleoptimize.com udp
FR 172.217.20.206:443 www.googleoptimize.com tcp
US 8.8.8.8:53 206.20.217.172.in-addr.arpa udp
US 52.54.37.131:80 www.iobit.com tcp
US 52.54.37.131:80 www.iobit.com tcp
US 52.54.37.131:80 www.iobit.com tcp
US 52.54.37.131:80 www.iobit.com tcp
US 8.8.8.8:53 purchase.iobit.com udp
US 52.54.37.131:443 www.iobit.com tcp
US 52.54.37.131:443 www.iobit.com tcp
US 52.54.37.131:443 www.iobit.com tcp
US 8.8.8.8:53 www.facebook.com udp
US 52.54.37.131:443 www.iobit.com tcp
US 52.54.37.131:443 www.iobit.com tcp
US 8.8.8.8:53 cdn.iobit.com udp
FR 152.199.20.140:443 cdn.iobit.com tcp
US 8.8.8.8:53 140.20.199.152.in-addr.arpa udp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 h.clarity.ms udp
US 51.8.64.151:443 h.clarity.ms tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 update.iobit.com udp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
US 8.8.8.8:53 stats.iobit.com udp
US 52.86.185.198:80 stats.iobit.com tcp
US 52.86.185.198:80 stats.iobit.com tcp
US 8.8.8.8:53 198.185.86.52.in-addr.arpa udp
US 52.86.185.198:80 stats.iobit.com tcp
US 52.86.185.198:80 stats.iobit.com tcp
US 52.86.185.198:443 stats.iobit.com tcp
US 52.86.185.198:443 stats.iobit.com tcp
US 52.86.185.198:80 stats.iobit.com tcp
US 8.8.8.8:53 h.clarity.ms udp
US 51.8.64.151:443 h.clarity.ms tcp
US 52.86.185.198:80 stats.iobit.com tcp
US 52.86.185.198:80 stats.iobit.com tcp
US 8.8.8.8:53 update.iobit.com udp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
US 8.8.8.8:53 ascstats.iobit.com udp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
FR 152.199.20.140:80 update.iobit.com tcp
US 52.2.70.45:80 ascstats.iobit.com tcp
US 8.8.8.8:53 download.iobit.com udp
FR 152.199.20.140:80 download.iobit.com tcp
FR 152.199.20.140:80 download.iobit.com tcp
US 8.8.8.8:53 www.iobit.com udp
US 52.54.37.131:80 www.iobit.com tcp
FR 152.199.20.140:80 download.iobit.com tcp
US 52.54.37.131:80 www.iobit.com tcp
US 8.8.8.8:53 www.cd4o.com udp
US 8.8.8.8:53 45.70.2.52.in-addr.arpa udp
US 8.8.8.8:53 stats.iobit.com udp
US 8.8.8.8:53 www.cd4o.com udp
FR 152.199.20.140:80 www.cd4o.com tcp
US 54.198.88.35:80 stats.iobit.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
US 8.8.8.8:53 s1.driverboosterscan.com udp
US 3.33.231.75:443 s1.driverboosterscan.com tcp
US 8.8.8.8:53 ascstats.iobit.com udp
FR 152.199.20.140:80 www.cd4o.com tcp
US 54.174.45.118:80 ascstats.iobit.com tcp
US 8.8.8.8:53 35.88.198.54.in-addr.arpa udp
US 8.8.8.8:53 75.231.33.3.in-addr.arpa udp
US 3.33.231.75:443 s1.driverboosterscan.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
US 52.2.70.45:80 ascstats.iobit.com tcp
US 8.8.8.8:53 118.45.174.54.in-addr.arpa udp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
US 8.8.8.8:53 download.windowsupdate.com udp
US 199.232.214.172:80 download.windowsupdate.com tcp
US 8.8.8.8:53 stats.iobit.com udp
US 54.198.88.35:80 stats.iobit.com tcp
US 54.198.88.35:80 stats.iobit.com tcp
US 8.8.8.8:53 ascstats.iobit.com udp
US 54.174.45.118:80 ascstats.iobit.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
US 8.8.8.8:53 updatestats.cd4o.com udp
US 199.232.214.172:80 download.windowsupdate.com tcp
US 52.5.129.186:80 updatestats.cd4o.com tcp
US 199.232.214.172:80 download.windowsupdate.com tcp
US 199.232.214.172:80 download.windowsupdate.com tcp
US 199.232.214.172:80 download.windowsupdate.com tcp
US 199.232.214.172:80 download.windowsupdate.com tcp
US 52.5.129.186:80 updatestats.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
US 8.8.8.8:53 186.129.5.52.in-addr.arpa udp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
US 8.8.8.8:53 57.110.18.2.in-addr.arpa udp
US 8.8.8.8:53 74.19.199.152.in-addr.arpa udp
US 8.8.8.8:53 sw.symcd.com udp
DE 152.199.19.74:80 sw.symcd.com tcp
US 8.8.8.8:53 sw.symcb.com udp
SE 192.229.221.95:80 sw.symcb.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
US 54.174.45.118:80 ascstats.iobit.com tcp
US 8.8.8.8:53 h.clarity.ms udp
US 51.8.64.151:443 h.clarity.ms tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
SE 192.229.221.95:80 sw.symcb.com tcp
US 8.8.8.8:53 210.143.182.52.in-addr.arpa udp
SE 192.229.221.95:80 sw.symcb.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp
FR 152.199.20.140:80 www.cd4o.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 0446fcdd21b016db1f468971fb82a488
SHA1 726b91562bb75f80981f381e3c69d7d832c87c9d
SHA256 62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222
SHA512 1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

\??\pipe\LOCAL\crashpad_2232_ADGCXGTJTNNTCDGL

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 9b008261dda31857d68792b46af6dd6d
SHA1 e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3
SHA256 9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da
SHA512 78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2c26991e6f95487ce714d2c3bb97559a
SHA1 6f2b40bad9a05d005976179ee1d1d1eccc33179e
SHA256 2aa74d47f2a5da7fefb953dbf028d9b57e0e32cc8bb6c372a35f4f4488a03bab
SHA512 cfd5dc033bdfb798b976025802b0d09a2b62e0eb15252159abf57daa03937ca601ec194deff18a4a582d5b81f00e00f6d11fa76be7a2d6c946255432838a8287

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

MD5 2257803a7e34c3abd90ec6d41fd76a5a
SHA1 f7a32e6635d8513f74bd225f55d867ea56ae4803
SHA256 af23860fb3a448f2cc6107680078402555a345eb45bc5efb750f541fe5d7c174
SHA512 e9f4dc90d0829885f08879e868aa62041150b500f62682fc108da258eee26ad9509dcbf6e8a55f2d0bdba7aa9118dd149a70a7d851820d4ea683db7808c48540

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 dbb2d93dc77cb9aafb5b2622424df9ce
SHA1 ac815d5df1862abedd2e41770fe8c977e15c788b
SHA256 96983077d90477b6cd40f4acd765129871493ebb843dd627f0cd93d4e86019cf
SHA512 032b2564ea900a20840d42c2f3f974b86ded42d59cb692364eb5939def653961df0101711d9a12c481ce16c76a378cb299d49657687e65205b915346200b8f2a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e21330bb73c271b2f141d21a314fe926
SHA1 72e96d46ef1ba65ea78707fe4bc84cadd32cd08f
SHA256 fdeaef876f52a843fff3f41b7a96502d78b175ce085f78819aeebab67def08dc
SHA512 d951077cf3734e32032e11fe11cdd851d5049e8408a240a9b1d4ff0aa3797a74903d93c5c73ce5f331c33eeb06a6cf205cf54990e111667569feca55038fa1ee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

MD5 8266eb9d769b0040c61f9107b9233d0d
SHA1 7d84098b0f5a6b1fb73333838e071558086938da
SHA256 389603813af8808ae7ec8ca4f2bc326b15e4c2ad5d86eeabfb271ac4d170b923
SHA512 82854e09e38363bf682d1426cd72d2efe770a58531f8b006c80c32718229cd9699c6db6ae4afe0a5ba64504a08b16568e53ec8fdf2702b5abc41ef7711f011b0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d

MD5 e4cc1ece2f2425b10ae2ccc212c1dafc
SHA1 92609e6d0093693110baa23758382889bcb30da6
SHA256 92e9415d8bc8529e2a3f335258ef7ff159cce2965ce3b2b7c15f73720efee809
SHA512 2848dee3a6da891b7044518bc97aeafd340705cebe846350b9a7f314b52450f1eb977b8b492638965ce4674ebaa341e4f832438199c3cad2fb0a0793ef83a619

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025

MD5 8eff0b8045fd1959e117f85654ae7770
SHA1 227fee13ceb7c410b5c0bb8000258b6643cb6255
SHA256 89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571
SHA512 2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ddc3161fc3855dfe68e6f97258228790
SHA1 7e0ef6fa310262a3b0096bceff381dcab0b1f53e
SHA256 7f4f34a37aa30f2d710201de5191c31027f882e39372aa8329889019749a1f21
SHA512 5ac938a43f2962c6b0a7b6a32e04c24a370726fd7475d03e63b6ed3ff70db5a360e7c713317dbb9909f8f0c4d8d7db926a088622d32feea8fdad331fdd31e433

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f5374854328842bf13ceca78a11917c5
SHA1 57ddb64464c9ebfcbcd5e183fbef7b7c122b0711
SHA256 c34b36015d0058f06f903c1e9db2f320ff8e7505b267c7d46e5098eff239a52a
SHA512 4527e57e567089fbd76045ed534b7b19affb8ff9709e84767be8eb4ec4753e0af1e208e87f796aad44851f3cba1d6397aa650d5e873b59e54b91134e48054812

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580635.TMP

MD5 451e0b022730787b26093dee9f3478f1
SHA1 c8dba03bc42b8fcefa1aaafa1ae28839ca9d6e1d
SHA256 7ad9a2a2b9e8d4d7b8ec64db750124e5a5ee7c52af109a1b8e8dac3927a80ed9
SHA512 0d45aede7378a57c7ace6807fea1e7d8db3b4aa07c6a1e39318db5417ef96d2a03e131ef3178c5e823416cc8bb90056ca4232ecd0548ed806a8357c58f0a725f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 67e30bbc30fa4e58ef6c33781b4e835c
SHA1 18125beb2b3f1a747f39ed999ff0edd5a52980ee
SHA256 1572e2beb45d2de9d63a7e7fe03c307d175b2b232bad2e763623dceb747729ba
SHA512 271d4a65d25b0a5d2ff2fe8f3925fc165d9b4345893abfd919061d78ffc5ffe8890ded35e41274ad8b860f06264b027cfea6030ec9411a4e03bc6d7cb4d4d228

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 b44ae10069bcc3f69241236bf77cf12a
SHA1 84460f394a5de239b92735cfa2295fa91317c071
SHA256 13a04a3904e9c14f5e191f247ebc229d2af511e3a036b79ce3ea5ba0bac3c84d
SHA512 61588590e2a1022bb8eb4830f8785ecdf9d2a3ae17007f2cf0460f1f46fc08ec579c682c08ff19c45d0caf0099ad520a110e2e1fd783fac4715b1af3b8ebffe0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 78280e0728c2021056c93954af683365
SHA1 f422d6f6682d904f7905b1cd7308f9f59062db44
SHA256 d5424e6657f959e1c026b7c119249cffedeff2e272912dfd6d0e0f7e04bcbd81
SHA512 aa64da37e187cac342d5c5cdd33d76d2bdf1bfd8cc49257ce1a4c0877a527aedab28ecfa0eaefc5c7f803bf3f51d94544bf8662430be50d2101c32c5d11f4b93

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 7aacb457e1031075179ecd797de462c5
SHA1 7d4496e4bd342ec72df2c5b2effca7b77cd54601
SHA256 9cb8c474a33d1c2b3f215867395d87e6a91d60c31df7d1a6cbceac3269cfeae2
SHA512 1e52f2137bcc5a4cadbde90eeb37ddf3059094d7f1cd9d0fba8f7d026357f542e52a10d5cd4c9d5fc2804dbf060852e4921a69e804afce8cd7a110521b6cfcdb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 4ba86a857f7f8f6cdbba7ec4142795e0
SHA1 d0aa9ec6fab3987d917bf506c2680880f8d195f0
SHA256 f51b70163eda0b588c9c21ab3339cc81ad8d07917b69dfd0e3b5769d4c726026
SHA512 6c6daa54055f147f735aa100ca99df97d63087fe87e53eaca17ff37b404307b5810626914c37a8e643a4f9574d50d8fcfd308b4dea96162d0badc8803ef03d66

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 372fc6529ad0e6c9ba5efb8e247a50b2
SHA1 8e424c6d3e8bac95d9fce24251c6eb156eb5cfa2
SHA256 9503608e92951137f3684ee8980d3df41a5e4f88b00bdbc95c5344f85c3a5c34
SHA512 b27303510aec07da4c2c7c819f0811c8ceaff7454d232d34c342971066e9c46fb4f8ca0bb1b2753ce9f5f7f27c87d904f3d9b3f2d13abf6df0ccc84929e9070e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 7651b1187bb58ac4c7be625337b35e5b
SHA1 307d969ef4137a66fe2793737dc1c546587c7f43
SHA256 0632850d01a46bc2f8c223155a4bf6c398b33596bb711e098440623f118c3968
SHA512 a81d2f768af155bdc642941404e7ddf95a2cea33c9374acb5fe32f6f5266e337fbef32f904551f61fcc9f9ab5a1c6a5ad130ab85b38bc2258e2f82c0ca1e9c7a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

MD5 bf8611891e077067f589f926738ae56c
SHA1 21791d3c8b61d9450a930e9f1c473bf29e9c6fc3
SHA256 78857b459d4622c0a7e7834e6b096a29370c64d97b72fc47c76540b7252f41e4
SHA512 b504c0ed7e8f69a4e6efc4ddb6b46c721b0f7e652d0972926ab75fa4853c20d994642b02c75a3b9cc16ac19372e46685ccd8f3c54a5094ec8e88b804c5adbd34

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

MD5 131427faf783a8337d39211a26beb7a2
SHA1 7d3c256574351272f30734d9fa08cc1e63173c9d
SHA256 5c15d15abb46e6862d494ffe987623f874ab21a457b152d557cd11de41644b55
SHA512 d6c992fab918ccba2fd7212f5a55f530358f3221c51ddcf405c513040f09808f7f07d0ab89ce5690083fee56c4c38184096fa1a9691b4c628be6f2494820deb3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

MD5 d4300a880e3881a88ef897c353d8968b
SHA1 25df273b9b230ccaa62d202671322be5e7d98207
SHA256 62daa64fc17a916850ef084ae9fb14a0c54419333a5309cf87126b73266587ce
SHA512 d42a0de426b33f82f7f7f60ac8b88c513603acf18215c08cdb437df09b297f5ca9208b82d94e6e42ecd74cae42fbb70595d44e4268f4abdb016960e04eb195a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

MD5 d92d00f1c7b41441862fbca0b14bd475
SHA1 179157c5e152a8d3493f825ee92b2a476ccb79fa
SHA256 c695767ac4317044b37bd3b983fd362571589986ed88bb5bf813b143c43708e1
SHA512 c8522f3607feaaed621fe5157fd3f060a98594fdf1739ed367745397c1d0173a72a2ec21b8907eaa24c9c11e1104de6f3cdc50e30586212ff6ba8bbef3c64ed9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 b787bd69348e38aad5a2c0f0c899e1d7
SHA1 bb99c84d3929a939f79ca1caa9a4922ea9367b8b
SHA256 e3957b9ca5ebaa433f3516423ceb881b6828c757a613ff8889f01836adfc33c6
SHA512 d5e26f83e0778a086109794defc26a3f23bcd86427c37e26d7de565d061649d5a7a8cf22c0b7e9120210b78f87fe003bc45a352a2914537776e2a5f2e7f46c8d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

MD5 3859fdcc9dfc8ee238149b68a1cb2f98
SHA1 4c78ac8554c35cdd4ec8a0318bde9bba8b670b67
SHA256 9a2ec9b64eee6bfdf104fe6b873c26c8ae22b90c9ef77ce61217030f16d81d31
SHA512 dc15c3e84175327f6e99ac1130927b0cd1f194e4759553151bb54b6f7b3256f35a690f8650a3d0806a34f3b4855b6936c3373180b9f9c838dac8c7fbfe6e681f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 97a3bed6457d042c94c28ed74ec2d887
SHA1 02ce7a6171fb1261fde13a8c7cbb58992e9d5299
SHA256 ae56cf83207570afbb8a6ab7cbc4128b37f859cb6f55661e69e97a3314c02f67
SHA512 6c8cf955ec73ad9d97bbb36c7ce723bfa58c9aef849aa775ee64ce15afa70afb40e8cd45989dadec420d2e8edda9ec0f05cc76a0602df0b6c4e5d45de0f4ce7a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

MD5 d44b00eaf066eb7050989509fd4e36c7
SHA1 f9c5a6144aefdc63afdadfdfba432a7f2921aa72
SHA256 81d81f58eace71c343daf95f8a2756fa914556bcad33ca241c127c4ae68c215f
SHA512 99f9f4b102f6eb4c6ff8868fc598c536397d247de9764a67548739662ae302ea79cc2f730d63b8ff40c8c285b2c9783bba96e37c72d9922623fae83219d6694d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

MD5 2112b675af3b8ee65b18e99ca39a509a
SHA1 03b2636480895761e9d8e96fab3d671371f573b8
SHA256 cf45bd676155851a2601ccc71040545572128311829ae6bde6597f6247f25836
SHA512 91e3d1dec8a6f916fe7950725acdc12cb803b58c9872ae2294c51dc973ca35ff152a0dedf7a43623ed3eeec91d968410000084fcf2988e827dece8ab178e1cf8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

MD5 79cf44db94eb465700d65a45a527b379
SHA1 a9ea6a3d2b3a3a61bf80caa643b077dc7fc10787
SHA256 78996e6ffff1656b85b4b50393b4a9f1133550694f87e66f9c2b937bc7dd2c4e
SHA512 7a2edf730c401e21b69b86528489adf587f4b830ceba0af2834bc7c69937e754c0a3e18ee9a174910391846a94394fc87bf927fb101fe899275bf072c804a519

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4c80adde104f338e13165fefad4d91e8
SHA1 1b30110b9af2d4df626d7fc352dae66f77fe1aac
SHA256 12e2c330ec7f91a213ec2c752f8400064e7d3c186d48850bce90c5ade6aaf365
SHA512 4668ebc115b69a52a1fa5fc0f484189431b431111a67db3d0783a59629de9063149ffc4a365830b50c711912d694f64be079beb1c095142fbc5279f17441f906

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004a

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 265d53828af5ee4da45cd2bdcfa55380
SHA1 ebffa9a71b68978b73520584d37561f8ee61e154
SHA256 f8728d2b8b40f75481e7dcd606bdd46148e7434e78f74700eee79a87a6d44488
SHA512 ee32d476b3f89d52c4dd1299d49423b09843261e490d1ff328e498dffb3e8c1c78a78fa6278520383793a39840feb387223d9f645c0ee776167a5726d6038ee8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000027

MD5 9c6b5ce6b3452e98573e6409c34dd73c
SHA1 de607fadef62e36945a409a838eb8fc36d819b42
SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000026

MD5 c594a826934b9505d591d0f7a7df80b7
SHA1 c04b8637e686f71f3fc46a29a86346ba9b04ae18
SHA256 e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610
SHA512 04a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 892670c094599e95b33c9aa8752dcd9a
SHA1 e670f90241de68aee4cc3971ea1642fb4ec3bde9
SHA256 84bab9173cf464479c1c95072df5a210f3c5776c6f259e4ce1a0478c557435bd
SHA512 e9df0fc88a337569d3d85a885f39e8c40239dc99a54af01f36d1ce1e85353e8539d4ffa26aca69c216587ae1c66504733701253a3feb10021c8635871fb767c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b53a1e81c9e13d7ba89a22f170fd4a06
SHA1 72c2219a61e05a1a0edde31b2657adf680a9f34b
SHA256 a89be9f19130cbeda232d0aa62eb2086217d9b286f52b8573de7b4071b8d01b7
SHA512 44d0d6fc26577e1ec6dc78831480e305cd94608f961f52678a2064fcf571a478b248f7c7a4a6f24d065f06e221613c1b8d9d00a783d5fc62c18184e38049da66

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

MD5 bd17d16b6e95e4eb8911300c70d546f7
SHA1 847036a00e4e390b67f5c22bf7b531179be344d7
SHA256 9f9613a0569536593e3e2f944d220ce9c0f3b5cab393b2785a12d2354227c352
SHA512 f9647d2d7452ce30cf100aeb753e32203a18a1aaef7b45a4bc558397b2a38f63bfcfe174e26300317b7df176155ae4ebaee6bdf0d4289061860eff68236fe1bb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 23d5f558755a9d58eef69b2bfc9a5d99
SHA1 fa43092cb330dff8dc6c572cb8703b92286219f6
SHA256 6e5bec69b1c6424972a7f5481ac57049811f0f196535b707613126c11292c5cf
SHA512 9c56c94d059a27dab9f69c9dfd718382a8eb192b8c0ce91cd6db6ec0769b8756acf9c0956a35561474b87d6278b13fbe88a6e4df6260c278b1ae06e9be55dd6d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

MD5 e02bf15dade68ca72b9d3175597eb295
SHA1 8fc6e7d1100496f8606eba28de93102ebdbb140d
SHA256 20bd99c2a2bd20281bc589c32e2f9c2ae18a3ab01abf8ec7a307a31a59f89f28
SHA512 e12bfb12dfd2bd22c07350083f346aff121937e75c0fe306f5c03773a42c6e14b31c211c83e7cb6711fda4d20eab3060f9255ac361eb1fd0eb79ea517e4b54df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a03adb3d2167b4c2cf93bbbceda7afa3
SHA1 873cd9cbc602d1261239e89f41504979d8d64079
SHA256 38ff02a1a7671c6c3c70fef03bcad7bd1c8d94e9c1d77799d9400bcfc99f518c
SHA512 910adda7fdf5a1001e9acba1e49bb905e28dacb82ea2599180bfed27321bfb006714713b8c1eb435a71b2be565c5b33b6586d4ef109239f4b93d319ebb4ee436

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9f1977a3-801e-4a7d-b804-905559cb9737.tmp

MD5 2dea477eb0fdcb0495a23498ae1b9e7f
SHA1 10603e04e13e08408dd3544e8f3a068aa90b21e7
SHA256 cbbda6002415b713876d77642e9273eab417a2e0a9548a5882ae35f2c3c2782f
SHA512 ba4743bc86c3549851ee74db736442c20899910eaa0235a04e9b37456499033ad3b3d003ee0703ef01a35f2e292c53ee3959100dea65185be9844bd2fdce4a5f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ea7f0d45e1a07dcc29a6ee4a7869e272
SHA1 f23e8e4f796b0f72ac6e8bf10807365ba43166b3
SHA256 2169f5abb67c73b9975bd1c571f127a1470f048e8f0b22abbe7922e12c660ff4
SHA512 4897b0f9d2d78919cca7ea04a7aa2f8d739ba70b59b1428781528e7e1d05596b0f7f5a0c0ad0a6d8662d2c147e7cd1638048dcd7aee887d9ed11fe267e6ecfac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6c262b969f7677dc0a31f3eb512dd5b6
SHA1 f544ae81217d9a2f7733618c92d4b1c97d120acb
SHA256 20a50ff2820d45b654fc1253e2b59f4939a7456c8cf7f4423e32b4ffcdcdcc7b
SHA512 01c49b8d93404941569dae3fcdf8e563f963410bc5c2d37b65cf9ecf64c9ffa28cc10c6c1485a5bde7ef96e403f707bbc7fd7bcbe6c098315523f464529d2097

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 57f6c35a4139f48588f2b26ab61c50c8
SHA1 7c41edd86a901f55060cecfdc8d1c367fd8cf18a
SHA256 56368aee566af8b734f3ca41df9083d0dd9f281891621c3740751db12d6536eb
SHA512 d947de641fc9299f0124dca35261355f8d3d734a94fe802f05e3c9eb9f95dcda00bb9b47473a42a7b5b0f85ea27d322f4e07396d0f7baf8f0b63901092e58c25

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.fortect.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.fortect.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 dc33be3dfd81b74724f35a521201e56f
SHA1 43a585d5787796302e18e36caec45bfdd94cdbaa
SHA256 639184f8eef54b353a5b49ebc7acd41ebca88bd2246ffba35369296721158730
SHA512 29f4a03e0744f03187dd59d4ee00c55aa6345c8984bb8c72fdd1b079a690f2a09137e16b8502aa80fc09e8858415128d3bdd6ca5d8625752e94839e7ec8fe489

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 34c00628cab85b5b9334bf2c2a387cac
SHA1 23a1afc87c61459a3683eac7d9acf5aee1824384
SHA256 e37d1603837252f8446eaa18d298ccae852501458410f0bd2452b9902cf5b467
SHA512 b1172ab8a086be081b028a1664c3cc26490a95ba3f128bf69a8bea121c0e760de25ef55081cbc972350b608b5262f11871810f707608e86d5071d1813f3ae5cf

C:\Users\Admin\Downloads\Unconfirmed 178572.crdownload

MD5 745dfc19a7a8ce32812211f17b792fa6
SHA1 8a627b236f531c0ead419effc1c589e0f5a624b6
SHA256 8cc95ca92f0e702dda28a9177e2f0ec7e38e5fde133542b3d7d1aa92e291da17
SHA512 5104ef4d52662ed16992eb4aac3558ec090352714bec660e7bd2d764a3744e1ae69fb073864d357c8c5467f710c91ff6cb76997d52607ffdf5a796751199a0d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 601f042e50480a4e14547d56efdc6c7e
SHA1 899cbcf9b3dab0727fba4111c0e365e9501de4f3
SHA256 90afb2729c8b727acf87eb07653a44655a2bef6f7e1281352632df849422547b
SHA512 2d2de8f8d9516fdc9e2c690e62db20f99223136536061d068896312e7b1b5515e0df230620eda05a688c6a4753cef4444b7e71c6137fc6844df10f7d4aba6e34

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 84a1d103751e13a199ce840f7629801a
SHA1 43d2f6dea2d108cb234e0685d27157b1fea6565b
SHA256 3a165f89d1ca5d8363c7363bd96f6a432e522eabbaa0f2464a7e2d71d80c8a09
SHA512 88941c240e77ce84b32317eaeda3fb4b32c4934445a24ee4db197f58f5983963e237e9cd16935b22b2485348fd56f57b14d1847103542c07e0de8f2169c5525c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a29f25ee035d05dad4011d72f720410e
SHA1 ea697ff686c8fc544ffc149072b9e8c2044c9fc8
SHA256 4814b20650f49a969f346b0ba3a30e02ef52dc09c801529e76691b8566fce3b9
SHA512 ace03c968c1c32ea962f3633ab616dde73703fc519ef4b6a5595bca291ffc5c8c32d414f57518e2444da77b2d0b2ac85d813150602992c39f9c274ab7dab040a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a4

MD5 49866a773f510b9d095fe9ed013cd4a6
SHA1 e495b3a7f7424787d0b516149befdb4ea2e560be
SHA256 25465c2e5241ad8498ab1eb72f09d1c3c28a4265d083a9016f068df05242f135
SHA512 a612acf98ce4dd5dba6484c398b6a4b4b9fb2150b0fa63d4c0d176beae12754f5770a972f77830caacb74687e821e5db19278f3b51e376b2403c6fe755f96441

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 50cb530279e70a729d1600ebae9d380e
SHA1 542a7c34590e1ef053c10f3877493f5bdf81da0a
SHA256 78f14af7799ef4a24e7cad81edfd649cb7d36a844d25db1235d52083d9e838b7
SHA512 d5f41eddc872429452ea5a9ccec9c0c30d75b275eda9b728fe6ddf480157a64cb92682370854ff1cd0d96e44d7dbd1b7bbe39ea44ba4464e1511a39d6527fa68

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0c349bb349a9fffffa09cca468ff369c
SHA1 1c3990c56aaa8e5669b49666c4b0963ac626aac9
SHA256 87cb1c634fa6f40ee5ad49dae550f9100407e53cdb2620b750594cdded42f0c9
SHA512 0cd6c4bdbb776e7989d4ec7cec025df3fdfbd5cdf80dde956ab93ba65bd3b10eeddef79ed7c2924175c28aa75040abfb6881902acfb2d97f15224723e3112baa

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 4b96b725140e903a60e0b278724eaa5e
SHA1 4a1b2035d94897448c75129964537b1bebfad420
SHA256 aabe44dfef6b8ea8fdd376e03ad9c1187657401e30aaf606c7d0765b395f10b2
SHA512 f57c210ecef2b894fe5d6e0b47f26aab13808a747e40fc7559fe80b0dd82ec608bdb08b888212a4696669376a9a6a7355860243172fa44639d43b9394684e01b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 d8d8e2d1ced25552c5302b72f527306d
SHA1 17738235e083b992962ece3a2528f6fbcc1f89a0
SHA256 901b5235deb093ed470a79362462b51e370affc0fd229ab95cf913fe9c9991e6
SHA512 920e437ff283bb4a9722720c325eb4251a3f060d0512e8038825e4a85a8445b6eb59b966056f5cb3a12d0170f96e66e75daeb87a43d2c0f25a67ac57e0e4bcdd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a

MD5 c7499ca185afb8a4b149196d729b7d1a
SHA1 515a63fde84030ddad31b84390f9ab655637705a
SHA256 517f12733d8c3f36f4acf51221bba37f77af472a283b7e65e9c6fa6ec8615ead
SHA512 4737416dae70e637999ec218c38d176ce2571cfe892b704bcb3a68cfe4c0a8a2deea50f9e1cfc2f70da05126d748df73747e19d72f983eb335ddd350068e23e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fabc71b2fea7cf68_0

MD5 01b1ed8208e6d4c3caccf3b20dd98f12
SHA1 0df4420c0d520bb5ecc1aa5e8067a453b6c0b3a9
SHA256 520d8027c59a0124f46cd9180b01937b274f08ee1114bffe72d777790122e0a2
SHA512 fc3c0f8e8b2b46909fcdd27034ea2cf81a42db98780261ea9d1e84a871711ad1d28bd8cb819b5321e8c9cde99dd58d0426fc96442dc866f70b7567d8522eaa4f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1224a3513b186381_0

MD5 d4fc8c97860027e5cdadcf3bd8e240ff
SHA1 62b69ec7b06498bedeede3951c8a693c342bcb77
SHA256 4ed56edc10ec00d4353c54abae08c90c01d5a5e7d74c3e03f178b40ffcdf4b86
SHA512 cfc2263a12dde44af353f8c1c06ce670e71c3bfd4c3839d40fa48c985057595e76581ff9c8ba8d0baae18a48aff1b96b55232dbf9461db056f7837e7c9326bc0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cd395aa419a5eeaf_0

MD5 2c6b7667f7e3c27358a017f300590477
SHA1 c534e1beef4a65b03f8b14c9d9e61ebd5139c1c7
SHA256 c55f63582578b9245093507d8cacb9ba8acec23e5766a208cb5e1c46eeea50bc
SHA512 50b38efb76a81ce05534ec8f30b86689f4a0ea36a575a444988dcb9ab984330d219d3219980a0441d810ae77d66e730d491b764ecbdf657c17778fef3f36c193

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b0084a98da4ca477_0

MD5 1a3ba7421b8f3e8b2122067368f5dba2
SHA1 0ef58d33fc7a853139aeff4d52f1b209ad525ab8
SHA256 901e93dc0a162e1c650a9c22e5e02097293baf89683b721415d74414cedc29dd
SHA512 890b5849bd0cbbf87d60736e9274174e24b4fd7a9ed67771182a8222b5b46949cf384a036c16f8dfab3004695e43d4e0dfb6dfd0e7df434b571dd0ce652fefc5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fe0d6e29cd46bd53_0

MD5 e5f443178281c7e7f5ac7c08da84755c
SHA1 1acb2a9fd57ed74c4f422ec2ad1c4ca1d3afea9f
SHA256 dc02a7492ef3f445b76d7382fc76fb3b4cdc69eb2669dd9de05d112d42c65b5a
SHA512 5b8fb6a273a2be9326a19668fa597adea3745d8f2a9b61030e7585989a6656ae16f4e69cd77e8e7d459da646c37d33d12b12194703fe8b043adf849794f6125c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2f488644a96fc495_0

MD5 ac6e6078a2fbe0ea8942f54337f4b381
SHA1 923e05578862e9ff19bc6e17d8af4c57b30fe0cb
SHA256 01733987314a70ddb5630f1e006db049549b5adc02d657f9e71d6a164fc60a1a
SHA512 b1b3d4bb30bee3ba94fe1a92c098d4b05efdfb3e8577e129bad165f79cde5e47d4e62c5d58c2149750fcfddbbf2ad62f64a231f029864079199d40550603cdcc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2bd1dea4bf8fa83b_0

MD5 8370c2d3caa0afa38266d0706a3ce704
SHA1 a0525694a0c970df92d0c7f5666dc22156a1eee5
SHA256 c47d238e4216033c622075ad894210e4212c90faee75128dbad61a98040aa9d6
SHA512 0cb280a3047640c2a1b52241251e68ab967577dd71681677335605c5f2f85e547dc44c109f79f736ba41566ee7a941a55857b1e877cfdc15c12a01164206a2cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bc0276656709e65b_0

MD5 a6994c1d4dfb165a788dc4ccbc60cd09
SHA1 86434e275f199f9b8ad9f6ae613c1289b4e4a6b1
SHA256 de5cb0e1e0d1ca2622a9140aa33ed606da94bae78c5886576d9defb595da90cf
SHA512 3e53f26b153122b96f7024f22e1e585d0aa4d7387beebf35812cc9b235e5df094bfcb262f909e543ed7cc682ba628c068dfc1ac530a8cdd39487c9ba357f5107

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\27f0662142b79588_0

MD5 3fc983e0f2661d12e10f4ee0b3de4494
SHA1 29f0b74be804a3b07213aa8c75d54c40e9339418
SHA256 63c78dd876687d5002f01c57e146a463eabef1fe874667f73229a94c39d81e02
SHA512 f34a2da9a01b688b6e8694b81b71a7fd481e11293fd7757a825da38b0d2bfaf40d8c8b34a34225345f36fa4f0efa23538c5c84b767c7c9717a05c3576501b987

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\37d38d16583fac28_0

MD5 53e3fa752874f8ef2bafd05f8b47558e
SHA1 7761a9dc6199c41f3196352d1de201ef78571464
SHA256 d1f971134747b325c1b37039438a8fcc6c46a2643b5b651f4a6cab5ddbdb5006
SHA512 7ca81fc1003331494e1b44f34b60aa2c62ef39ab97726a68281cce4079936583df8324e7d22ecfc11320a0855d2df108f3a9680d4a72fd79d006cc59c0a3b370

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ece11891256c047b_0

MD5 a473eb32d95e0a010be538671a9b618f
SHA1 4274d7c298369ac369e713b6d029dcc25a24294f
SHA256 5c2fbc1d41a0bb840e99f3cbeae71e85a52f19b57335b81200bae3751225f44c
SHA512 77235afc3cb0a1f6a90c6980d4071c37f7c13dfbcd9f90fa174c764b7edff12956e2396114903a2062e7f8c718a60f798b36f21fd0a7eb8145c69d49a73d9d04

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4006a28d73136ad5_0

MD5 2036b06cf4181b22c308bdd11d5029e4
SHA1 becbe2c1252135232aa297e41cd1a3bae70763d7
SHA256 92f256481899d55595c7ea8e9cc12f2a996db0f8402c4d96fc229a658606f646
SHA512 f03cd6eef3caf1463b44668941366e25f6c105314a81cbba5e1dcd2356bb7a778c00491821395d5774cbfcf8e0b273ab64a7eb51703c8470ba4df25d8015e84f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3425c78049afcaf7_0

MD5 5db0a53e930f64771d57e2be5f2b3937
SHA1 d870aa2a0974927c829e6d908bee507ed3c60487
SHA256 b68a0da3c2bb8e65757730bbbe5f4be6bc0a2396c8e0de7682aae917e24d09ae
SHA512 f3f4ad22b5cbadc8e2db9c3abe677def330ef4496e16ca88a6345541c534c51c3ddf2a25117b4f28e9c494368836dac234aa57e5eaad4f8f63c6f5ddca73cbe1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\80c6b91f1a22ed90_0

MD5 cd270d18609ee4c10ce51ef1f2bf4015
SHA1 c73d648da95df8ac173634ca2d85290783c46010
SHA256 15d6d80a792c32d08dedc22713755d8e6a9d0a6c33683d9b739d7b1be78b281e
SHA512 6de6dcc26e445e64c7aeec427a84dd02e76f066cdf63c2e25d59c97f002f76b8dad9f66a09f10e812abfb1aa8f180e383b3fb6fae2b67da770f4204b25767b82

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c39911045d5b2643_0

MD5 4c37ebc6c797d9c4fd68240d75ecb601
SHA1 47962bd29a671474da46f766d50e0611a102c650
SHA256 6fe1b8e012bf8c8fad06a0ae143f3de2a81b09c5e1b9dd3613c0dbc171d9184a
SHA512 3ae3788bb7937b1701727d0d5c7181452cef76d4d725998b6f03e5148af6f1fb175a0eac6b7d4a4c4c209b0ef23c038f218b6b6fd80cc62d34947bb22ba7d70c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9e04f19de8f5d184_0

MD5 e360629d51a495d9d957944ce6d60396
SHA1 02771f4bdfa22bc6af8cdfccae765ecc1bf5c3b9
SHA256 e839a0dd76f68d09fd047dfdcf5fdbb5068113e7d97ecb3f3940eeea2e2c07ee
SHA512 d151a1ed47b893626f38f1e7d80be5c8960205bda71a8cf2d71b452ebfa68d0d9f527dba735aa06046a54771822fa491556197d76f9375f65342536c1141c3d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3b7bbe9d8fc55f67_0

MD5 39e18461c38a87ec2caddc4a31261b8f
SHA1 fc864555d07867f7e290fe9d66ebb27df01da540
SHA256 2225797648478bd775b99dc52fc4f634eae9c9879145fe0785455c004f9d4fcd
SHA512 0292da5c7631fef9b359196f93dfa383f78b822b275daa389f74efa264073924fe5408e436ddf97ef0a34c1814a67d68669aa48ad26583f33004c7ec4a994ace

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e201db4afc7e2e56_0

MD5 4f132df8f6d1db86c8438850a5c194ca
SHA1 ab55ff5663157e53e5d00c468e25a89cd2e2e5a4
SHA256 728a2f2ba71a7cde4d7efac0c25a1809202179b33dd4dfb06dd05aa73030aaa6
SHA512 38b026ef5ff211647fdb4b3a06ac060699b3520a6b5d237a547c0ef37137913ffe3039dc9d20bf76efdfbd461db87af327ff6bac7e2d6220566b028c76087da9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2ef87d7edfa1a7ed_0

MD5 3e4e086cfc916cc68ce399cf8284ff1d
SHA1 38642953eb27cf21dfb154ecb76d22b3ba27b4f9
SHA256 ba561e1e65ac53887927409c6ff4ef18a510330074817423da2129dbee1997e0
SHA512 5de55851b4e9fb48eda2957e34210be01a45f3d3055c4f8e5c1f222827110cca21febc84ed9489301ec48a268e102a7d2a47277dacf6cdbb599364ce89bee8ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1aebfb8cfcb8ad1d_0

MD5 42c06ea50cce1e9e36fec0da669bf7ed
SHA1 c3b2a05a5837d8a1eb83a9772710295ebabc2f76
SHA256 6585c9614230958f51f75212abb283e308a75acf277bed72740ff94ea842a7b5
SHA512 19d9aa6958698f7abcd2df4695bbace748b51ab85f48fe744a10e3e8519e30d4f42c0b86bbfebb34a57b2643270a515cb6a69e7ae5cb6d6be8731b78e50e7261

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029

MD5 e349a6e5012c38de817963da4f4df575
SHA1 aa3f43683bcae334d412805996fda1f913def81d
SHA256 3262f33b60ba07912bc21efc5ead2f0e05b51281e5e65db7055501acf434018e
SHA512 18146be189e90a264fc675abf514db6a4c9772e64fb69132e099bfd22af9fb7b2137772b8c4e72b3124b4fd88979edc0ca7b405254370f1fefe434234a8a0d81

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028

MD5 24aa4ecfe0356f78a48e9d19fe570b2c
SHA1 6cd1b558051a29afa94238cd0a8747484bc31747
SHA256 6d944d0187f384882c98bbadafb769d904a8eae7f861a81cb7bf1e4d5d759379
SHA512 ac7254b550c10a7eda38ee4a67dd124ae3ad57bae362866ce7a34f9960c853b0e763864e5080818137b0b60c847f4ba926f639dee9970c4acc4627f23719c1cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\85327eb41de4f877_0

MD5 263587297573f66427a430b1a3933ff8
SHA1 0eae15c86f5896f91dfd944fc628152a44917b8d
SHA256 4717316568fba941bb6590337bcbb75685dd613d9356e30af4241fca8b1e8ea2
SHA512 a6dd10b49bbfa95f9901abb7e287857dc33e79601e7c9b6db2372dac5bec815a79cbd420d691dc0eb9803881726c75cc36097385504de63c5a4c6210edc87e68

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b6d7318525efb2a2_0

MD5 3c938840f14b1272e3649a581c860502
SHA1 8549359fb8b816dde0e0f5e3c806227dc4c80406
SHA256 07b98a54dff42d92a8cc67e9a0986fd4d17d4aee3555cc73a0bd54228bbdd8f7
SHA512 3298493437fc18e4a1510e648b70bf071365a8f65c5e522bb2dcb56b52427893ed5ee49bda51d364f21f0b7b0d15a6293ad7abd4b436d7adeda858a69867ab4a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8f8a77b3d021e469_0

MD5 bb4d86d1dd4c5eb2011ee09d7bcb9d6d
SHA1 bae8056655a74e5db60a690bc601be0e8be90c42
SHA256 ab68a723c0a886c61ae483516b6aea27d885494737b65cfa074eade7ae79f6ae
SHA512 ef7897451162d6ce9fe20841395b533bfba2ddf2880d600f425931b8a42eed0e49f40d0765d4131abd77c7702f473688b39c6b7dd5426790bc284fa1fdf360b6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b8fb7f17faf71513_0

MD5 c4d03e6b238c805c90cd51c0860da5c2
SHA1 06abccdd1573e4567f225ecc03bd8bd811b6e929
SHA256 4979e1e698c5a17f39d3b6d4db7d164f40b187ef24ba321cae2a59ce23670285
SHA512 102385e02f193f64992622ac16f736559e58c738338a5c7c979b91bc6d5a267618f2f133eb2584b73a07e451177a3b29910fd67a419b40d156ccffae9cd68ab2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cfc77630ae33104b_0

MD5 f6ef03638f6f83ab3715b252df851d9e
SHA1 04bc130b2354a42cd2adbc2e0382e16d8c483075
SHA256 4f55c438cd6299a81f72488ebe30e5ddd1534b0b7ce58353956c4feb8419221f
SHA512 bbac2269d2f79a9b383dbdafb47325b66381fa59152d43546be99ac811ef6a5e96581f9c95d38036bd1f1209324ca674c0c45795b04362854903ed228bf97eb8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7b786ea00bc52ff2_0

MD5 3dc65de8426243a4d05b6196a8a81fa5
SHA1 fda4f00090207a2fbbc595708b384a0568df8eb3
SHA256 adaed9e397f2bf47cc91976b645371e165221904fb66411b68e6b4777b9dda06
SHA512 18ea3655c5d153cd2a0b49f07360765345e9639e05c7e96dfe9de42dcf8ba8dd0e700f8fc617c11a7043b6ed5ee6357ba465b1827318425c8b42ed95cf8c54cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bb34fb3cd96ade37_0

MD5 75f8b8546ded9553c158023b778b2538
SHA1 30761132a577f1cfede1704b6e45d8308212ee67
SHA256 38f8664513af2701ed94d3d3c302968d93c5434ef6e5a264e9dcc880fa785620
SHA512 d93573c0a76213e788f5fe1878713039bbba66e01c609444a0fef70530529a1dd364e49c12640fdc84c7d0ad55ea16619b04de25fbace08adb5e3e2ef2ed72ca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b3e871d98d035867_0

MD5 a6ade18b7f5eecc31b5518b0a10d89fb
SHA1 b6a718cf69a8e6d0bf96f2db723dfffb2a1ae347
SHA256 fc8278aff20c3a9aa94037d4227df225fffe6258db30a5a5f74d337c579ce580
SHA512 a7f97d366af9c41652e0155a399b9d1bb5a690a40c5e03fa79bbd3c84663462ae338c0aee1e789ab9a0fba85840d14cbc496b1b2e8e267e8fa5f15d3ea00979a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f8ce13f641911741_0

MD5 36a284f187937657109572cf91d00209
SHA1 ca60905592becfbe47131365d65b55ab9061eab7
SHA256 3a702e4b5b42c401785e39fc2cc3b68addf1b91f95e9f8941da282e67d9c2b66
SHA512 93a3042e0decf6085174bcd7b50c9ba06cdff3c17f8248247ecfaff523c10118cb4ecb16ce0d7f9dc3965aa9c6f10ee2e17b3f64698f7d429d1e25f9db8aaaa7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\30d939700ecc59f8_0

MD5 fac3204c6d51625c91e1ee25eab7b409
SHA1 bfc5f8028c7eeef8a16914ca6831caf5b741a6fe
SHA256 ffabcd29e0efee7432f59470642c24d7dcf365b9d95bd4ca69dbc8763ab08ebb
SHA512 d8e3a265fe6389bc0cad8440fc1871d44a0737a82d0d8caf0ead401181ecaa2d3127c49c95b89de2758510cd01f03da1721868325b9e2cbc5855bc6946f6940a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3a63f0964855c62d_0

MD5 63a14801f514331ba782d440980f8b4a
SHA1 eef20b0b4734a6b64125bd2816ace377e2108607
SHA256 70da2376fd60c0cd9d2e36c81efe750f4c2829ed3ebe33518ffe46af2f6876fb
SHA512 649659385fc3a6b9045771fd469cff3c294eaf8c84161aef61617ad26c424cb9d7d643da6280502e970325e546f627d9c238cb04184286fa79013af3c2b1460a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d2d4f84b4ad3f702_0

MD5 85a72e2a545e945bded2d82e28544895
SHA1 c57c80d067ba55dd046b909365c585f26ec3bf4d
SHA256 ccc576d8ef99ea7654061e85fbbeb9eb6bc849e785f6a04c5f80c3b9020fa4c6
SHA512 f2a9095dd89ff2fc4a37e822ac1c04b23115d546c8c81eddd1db87a273ef35e73c11b5b3082235d3b14f8fb7c930ac3d4cfe1dfe8e8b7a36bad430bffbb6112d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2540afbd4b0d9754_0

MD5 a4516137ccc426d6c5beef7862e5040d
SHA1 6293b9b8c0ada6ee7e9b752bbc8b3403652aa2ce
SHA256 2e5e4877e8c47c1bc18f6d43e46ed56d0f2731a6c78061e8fe4504a402131da9
SHA512 27b5ec28da3416e2ec54425e1d6e4ffb1332bcb6338c067476e7f8d3f748aa2c6fc34f5599ba9158f975372b5b6a9133e4f33c5d9991cd6a250958076b94ea3f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\10e7f09a1dadfa79_0

MD5 5e94b78dea10eb158fdf03fb4eedf71e
SHA1 4aa8001303684e1ce0664e723ee91c7f481d8618
SHA256 ffa98a0176e5e13d93aed025b96849f9547f31be39af7e38ca821fb257339258
SHA512 ab3965e5f3ca3f941099bd63dd936a985ac633694ae8e1d819c5e9a5d49545295f60cdc50db2c9c7d921309d6f5e375655744c9782244a11e34eceb361c7d7c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\24029b20a1b39be0_0

MD5 87633562751c0739d35e2fd6a06302e3
SHA1 569a57416c290df884cb213d5b0257c71b658a51
SHA256 7aa060919b78bb57a0c691367e4c048f150129314f835817ec90501eec68da6c
SHA512 7f420eb15ba0fe926407cfdccbf5c14bc73a67f1af7889a9fa7d5617bf65431ad48855a5fd5f78659bbdef8579405cb6889df22c4e7c80e2b628c4c9686b1491

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\df284e7efc9ee0fe_0

MD5 1f50a63a44fa9fbe2c9ccb5ab67ea4ee
SHA1 a5ebccd012be0b779493fac482d907f8c679f63a
SHA256 1c5f5eb5d67e286d305a1aa3d586a2660d6bee24b54da664ee1e4afed3901675
SHA512 03b13ebb71070adde763b89ea8afb4b49eee4bccbc72956119837738d4c32fc1da5a5b870ee70ef80e0e31ad67b6875fdb83eb596b944c7ee898749b42852a5c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\563794ae89368f77_0

MD5 aaee01777379dbbc074b17c2a84c679a
SHA1 ca0a43b7805ba13b98444eb56be43fd50aefbd55
SHA256 e06c0f350338bfe133c0af4781a532ae0eefbe3eee89053d4a00869adf34f91c
SHA512 78544c3ec98601dfac9b13b5c8db20a24fae339a2d69917337fdb0162ff6f2e1eb8aa7f7de16b03568abe9b9e9e6be1fca7af28259a7e4df8fbe8f17ebf0a265

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b8

MD5 e40b67551b78389a92dc95137d7c41cc
SHA1 8717855ce162f0f1cb1fe1809a6392a68443d41c
SHA256 d74fa61372625e53cab964cac5c36d1fa07c504c1eca8277d168927313c91987
SHA512 622cd0caaacdc4c2b8109aed8ea096c2bbb450f74b3b42f43be40c65bf70778c097c37c6ae38d3171f983e3472cb22ea36a77f691b9abdf058d256660bdd2f25

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1453e2c97f621961_0

MD5 802b33ea000c618e0c45affc62a8e0e3
SHA1 d3998a8d872dbcaeed203bcbc9cc8e920b40f873
SHA256 d28489a89a772d9b7062fc32c52719a025e67692e116a6b97f4b43bc55403df3
SHA512 b8b296fc46e86d0f7d642d25d59259e848478c485c4fb8eec2970b8481a86cfc510f96b0d5397bca9729cc468daab613207bd315904a5eaaf97223153fff5874

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f3fc4a91ede41ae1_0

MD5 4c809c1342ca66bcaf04b7100c0fc311
SHA1 79d6498b4bcfea380b6b9b8d68607eaa052b6135
SHA256 ee50cd6ff3cd776be7523859f04c504172b5d7cb004ff755dbceec9defb5e7a4
SHA512 533a6220b4f37566f666a47e5c25f5d9fc379ad32c4a751f77186621fe1dce490770c65f754842a6dac118ebb2539bd9b19c32f38efaecc8652095a4570881cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45f26ee2a6b0bf6d_0

MD5 8bb03df8d79212bf201fd7edc6510de8
SHA1 4d3df32d4c39761a02a0ee8f60b543c6d9d0e711
SHA256 7e8ed655981798da0e021fde30f95c35ee1c18bb721dff5a3c1dfffc211afc52
SHA512 e0f28fbc53fe59fe2b547cadc5e393d0aea27b9fbf264f9b8e9a53ce2266b9877f1bf10bc3ea057caf3710cbdb01cb5ca834ea1655ce6f1e5c3b6f5eed2c5be4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dba6cde175fe47ad_0

MD5 fc587cd3aa151943708f468bdcd1dc5b
SHA1 02e737c5f5c15199c509236ce7231713a4aec736
SHA256 fd690b73f93037535cc1aafc10f6c17af159ab8b99655021cad844bd98e31a18
SHA512 e308edafd16627685096d80b696376e33d5ad2ee00726d3461be4189aaf02e8ca4c37a4a1b0fdc9a8d82a23630be67e725af258ba70a39db6b8e4879e3c6c517

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\336a68eaaf209f48_0

MD5 e1b5588135dd90d9a2ad5f2ca660d35a
SHA1 1cf0dad8f1e5181a30570d92b350027cdce4772e
SHA256 dd84caffe72490494506df7a27277f725b9cf6a8c1fad7345ac1636ce73a7742
SHA512 5e1cfce4ca1dbe4a01b9dd6a126c22ee6d230484d5d4a4e7f4b16495d05f7601aeca756f5b1d12efda4ab2297ae009a4c155c85c97d9a1a3765357113ebd4900

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4c307b02b4dcc58c_0

MD5 5ebbb28a7801269bfe10687c2e646e20
SHA1 c84f81cd6b0fb330568273180b145ba093c25394
SHA256 e0a06ea60ec6c5f0cfe5dedcd2b1e91aecfab9c4655936ecc11b22e333d47e36
SHA512 17e853638d33c4bf98edcc8c3daaf84e8a86717d9a49f9c52bac50ab1bad026f42ade43cd23694db9f53e70da0ee10e9cd9b58f4a9c205009018c773224461ac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0f043d6f8b2ebdc2_0

MD5 aef6ae617af0e86edf73e8a268e17749
SHA1 75f24123346b70e2eb853139866fbbac269f6a19
SHA256 f03d545a9f5274a7b38cca52ccdf6cdef07f34db48c0bc36db65e8b64599897b
SHA512 844ebb0b23fd74860203e58e6c7766e503d44137932d63e266ffba5a612bea86ec323861613e4ebd62d9bed9e8b4e2aff48fc1dcf175174a84950dd12f037753

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d782f305bb50c377_0

MD5 790c5455c1477be444ac5b67715454d3
SHA1 6760a4fce267a7036d19173326a6f1533fe9e722
SHA256 95f4865ffcb16b8815132f849b7df3c42d46243faa234eff0dc5bbcd307e9ae6
SHA512 08699c5b45a51f6c54cdf9a43168c433bd59d05d2db455fe2675c82f6d8444859bbcc12dc089e329edf2070cd24aaf5e869744249869b8ccb7bf428e207dad20

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5e0c7a66940487ac791bf0bc3130e616
SHA1 17a023c1e37b6cba5a37e7b8b4db55b0ab86ab2f
SHA256 b08b6e3d931359b4f9ab286165e291091f70844a32ba857ced43d9d89d43f7fb
SHA512 c674c64e96f5b2c7c725ab8c547605d4f45e02f4355409e7f4534ec63514046901aa45dcd167332cae1f3e5c3ef7830f0e11c9605382baa5a1615f874edc2baa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a5185ac1f959168b3aa8d1d8738f64bc
SHA1 f08209776d97fdb6ed83173040de4dd38aab795f
SHA256 614d6bcf90ccbc3f0202d2f0a943a11429a2d34225a04ec6d804c4ebcf6405c2
SHA512 da87f256a305d593262fa7aeb518225a51d55810c20b9c531dcc10d4f3c288c5948eeb710e77285863a05b624a75e5ba9e5d2868d7634f2ad6cd1c2fc7265dba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 7074ecb4dabe57dd4e5db5e0d432180b
SHA1 cfb2236b838ff3f6d709476bac5d6dd47dbaaad2
SHA256 331bdbe19429c858796d88af057294c5818dae3cf4050d5682ad140e83e915e5
SHA512 d828ff6c91301256fa5e17c455b7b4d2dfaefba450fd45cb02eaf0b9a2ddaef9de3caf955a7bfbb15c3fe5967fe002969594347d9aed36f53189d0a230382887

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b366c7255e5e3c7b_0

MD5 d54d07c67c0f5019289ba11d68e72ce6
SHA1 ec8b64fb5a66fa1a23c336058f6a50f998d7bc4c
SHA256 7cf566b1791b2a73f5cd5b15a1b13ae92e836d8e13c4831228020abdaea1bf89
SHA512 5f8f49af0b00add623c5369cc2562d17b1cec7c8b6a0acd9096175b6cb6defa53df3097f3a293224f3d4e3d5b77c5dd3847ddee68432cc3f049c7604f9501afa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ae

MD5 af88b6dbbd452ac2a122c0bb8335c542
SHA1 19e6efb93ce8f49ee6e7e9f47e07d6c7aad54ddf
SHA256 41f775d407cd25d7813602d420385f29edcdfc22464feec0073f231cf4c1fbf7
SHA512 41e056b4167575cf1ee00d5967dca5316beac1f94542d42f91501a6b8d3a0cb92cf49f5517a42161cc7c9d2ed99ac6f195abc639d9515b1eb1cddd7306ba6482

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f29c62f8880a66a6_0

MD5 3cf908c27fb0d0d988a1082cac2330e4
SHA1 172d99e8a860c1544a0f0561400a8dee2827b32b
SHA256 20b4301a35964afc4e73726ff58ebdd695005953a5e43fa016411c48e7684d3a
SHA512 37a7bbc4c8ef8be4c6e2579e536af9e83a01e3674324fa4569d44b48ae33d39cdf614670949fbba76a60a5bea2f5effa3724a82e41d79c649e92f0ac18f2bf45

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003b

MD5 843de0079cd7b9df75a4687da359feb5
SHA1 1a353a4d5da4359c9ea2881510177d39f3671095
SHA256 9a2249b1e08ce7c8d099b8cd25f4fd2f91f2b40566639865918a74123ffff6d5
SHA512 1d424745a1843a2e20480e8d569e6051436671336910c269cf219dd2081f0d29e21cae6da16016b703d6d8cd7b3426c64742a2c7365c5106c599f472d7ed24b4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 cf1e2f2b039494ad661a599577edaea6
SHA1 6dbff8a173132e486ab97269c27457321dab1479
SHA256 725f3cc84bee6ec4458485e6fc174b11769db6f4212b6994507ad9b0e4d6aec2
SHA512 ac019a272ee49fbf5672d9e937ac65316520bd87e83ae32ed6418b47fe6beb136486c762d12b2fb7edef0a417123d412b779fb64a225b3af1fa3314eacdb518b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038

MD5 d14be983aef72659bee1f06cb89ba660
SHA1 9457f99c65dfdfca3f99d45a64879a995943bdec
SHA256 2ade90e01e59939329c19e43bf97a33f82b6de5f6119354e06c24cbd5d0ec4d6
SHA512 a1df0b2f0dffe3928ca737c07b6d282228ae600efba67944165d7cd51c5bb9b823b13997a55a014535e21d75f8955fb28576808ade8be40f99186f4db3b69100

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003a

MD5 f99cf8ce5706dd23931869b5d0c650d6
SHA1 3526c2dc0e9aa1c35effd20b7cbbdc61a0a59a0f
SHA256 26076b8dcf664350f41e752c672d3063ba52ad1ef1c99ff3eb46d9860d976614
SHA512 0f2c04011b2f68b9612d42920e55f2363782f2a3af5ea5eb2c406393920d8d2332f02bbbcffb4d5cc3fee9dd6a5a8bb3aed3e0b83f403d20d81b80b4624d1cac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036

MD5 b750955908da2894125bbd83a7c65bc5
SHA1 5b3265bba9b3413905c1a44418b725cddfb2387f
SHA256 988c4cdd75305bf2e9d94c87043e9b2dfbc4486790f493df9b8754d9382a2081
SHA512 03276ea4c011c74f14a0f6558fff4a15b86af6219529df3b854c676ff911e6f2ff76a95e95f8fa9301f9df5ceaea463c061cafa25e53e4ff88672cf8430524df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

MD5 f926e7f23bf15e1329480dda1f354a40
SHA1 27fe33bf13b603429cf4a111197282abd92f23cb
SHA256 5bc2ab09d14a5723feee8eed63462b0ef668a9db963a8e36d267098fca43315f
SHA512 50b33192e9948e43cace7391fdf529810b1d3266bba24df9cfc8480a97050fc3f0d740f2d21d73b997bd13954e078f5a78325ce9e24f141d2b9365b94c0850b0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000037

MD5 1d5912ae635b4e841a1274c144a9dacb
SHA1 00c72c409ade323e943958af030e0b7ac860942e
SHA256 bccf05002a9728518248465b643b6f7e5ed1ee42058a9cf2b4f1819ae6328104
SHA512 46ce86b1dd6db620b0bf51f59fda0d658ee16839253e2f1fe9ce4f98715242122965fd9454f19da2a9746b4d16493025639d28cb13fccf1c436b195d3c1fea6a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034

MD5 327b72d2170fa1c832a770b5a6e2d7ad
SHA1 a035f3a728950fefabfa295df7e3aa371c9451b0
SHA256 448a55ca93f0596c93fd6506663f901876ec8ddc126ef6331087ccbef3cd4517
SHA512 381834c097cbccf06c5cddfa0e4435dcd6f3ee65d1fb6d7be887467f507b967d29c7320e4cc04fea89964aa989b5d7ee5110e9971448bae8a71c0bb63b520134

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000040

MD5 2c827b3f5f1a270c2c8fb77e4e5f609b
SHA1 fc6d9bf3441256cdb5fee816c75167813b77e6cd
SHA256 08af723167a7754742e7d25994e228c101cc4aae292755f10d6fca8454e0d28c
SHA512 9c4b1b57952bf5682a2d3fd8d1f5fa5d18d4f418e393653a1729eddd5a12a6a6426c90f6c92ef68980c1c2048b4a4165e9a74796ef6fc69bf3a23fa983988ab7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000046

MD5 7ec72fe6aeb544c4e1aae9fd29159f1d
SHA1 b5b8ace80ac7619fa901a3156c9e2afd0bd69b6c
SHA256 ddf576381442777303e401405c2e817ba37a3fcb5ac9746368d07286efa63261
SHA512 25fdbc96971c17f7e4e49f14742a1a87d2ea01d92b2abbbdecd70d4c80c4a348e073600db27927925894fd1eae8faf2f65e1b1fd143ceccba531014c582a1afc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f

MD5 912d847b273705ddadee685e9a2aac0d
SHA1 dc1bd176750548ef39467de6ae09abd10747446e
SHA256 0d9321fae4894c265b85462984a30c323887946a35ccb71a847532fbdd181b83
SHA512 71481d89749848f0af5f9985995c787f665f816327a6cb712fee9dae58db8c20bf578d96f12088f7b58d6cc9a5b9d18eaaa1f23b4b5ae05551b4cf5872ab5f9a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

MD5 ed5d75453ca2ec5eb360e91eac4989cb
SHA1 d14ab89411ab4f26730980049daf10e02617307f
SHA256 5713916aecf4b1592b6837c11445d5723bcb41e9bbf29d6aac7736f1aaaeda47
SHA512 88d8b55ff7e2078095821fcb082c31ae294ad4ff6bed5d4871492b9922a59d5fc4c2d5b0c188764e11f21f7e4a9cd15e6a46991bd6acfc24943f6ef4e6a2f879

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000048

MD5 4b5a84aaf1c9485e060c503a0ff8cadb
SHA1 574ea2698c03ae9477db2ea3baf460ee32f1a7ea
SHA256 3c4a1bb7ce3234407184f0d80cc4dec075e4ad616b44dcc5778e1cfb1bc24019
SHA512 05196036c41398616c077925fc4bf252e81f11b6ebef8745047d75cb2c8b80441b8c3593f4d5b2617089e9f3d8d957f9edcdf8e43993661a277be8f4b6a32111

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c603f7e452f4847fbd91db5bb46ea325
SHA1 9bf126600612af643d08aac23a2f8415c12ab8df
SHA256 39929f3c31e09c040b9cd6c0c7b62c3e2c6d2eb6fef9a5682c0e5fdd6090f5d6
SHA512 8edf6d5abb78396be5e0a7101027bce9bbf0ee212dfb6f94fe6ffc4b11add1c93452ab5c49e1922a80d664b44d85c2e478318737fc7493bc884716656f798690

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ec698b6c787fa348_0

MD5 960b0006c1b9fbe775ea7eb0588aeea3
SHA1 24803e09716da81ef75384ff7ef5965d2100fb7c
SHA256 f77ab03e142424b7e73a40a69bfbed50d8e60258a1bd4a2dca6310e444fd1f6c
SHA512 f2c56aadb0941fd080bcdec1735c7e0f24103cf40760c24f2132b442d035aef9a1e19c128848999c7d6a0c98876d8e2606775f52b887e10767e58aa25a297687

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e60c8ce092414c00_0

MD5 f5a7b0137547fe97e75e341a88b1fba6
SHA1 e69e1876020c5533afa23936661f0a109a74f676
SHA256 56ee6eefb3ddde681a145639b80623793abbc2593826dfd65337655c9f9538a7
SHA512 42b96cd969607016f296c00609a2df53309c7116c36c2ef296b14ebe286323e1d3951ccd18b92042aa801decaa312bb9a6de8fbdcbea82dcd0cbf8fabb7ffc6a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e9d575733bcfd6c0d386641f87c811bb
SHA1 9bc8b2bc6a89e52720415280dd91d055f20243c2
SHA256 6090fee6d94afd56f717769e015ecf76047cfe2dc85325282731a0b8be5763d5
SHA512 04b3c5cc34cf234cae178341dea02b3aea0d6470a3544c81b8aec97075362eb64103eb0b6d1a63fafb3ff4a65d0e46bd198b54b72e2ba95a7c2b0b031e68b576

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6b03b29ac2a7225f7edaddf6d723fa43
SHA1 f834e1da0055625becd465f3f5e738acd07ccaf4
SHA256 3e0f2d62906bcc1debe898509dc97be58e8be2fd1853281f56ed80b0923063fe
SHA512 75fd147686386196c4bdc398445b47456c923969635cebc1ff5acee68e62b9d7930496cbb1020749387a400aa334e3e0fe57749025073cb55aade345a9a01f49

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

MD5 203ccb8dab7b18482e6fd94980d09ba4
SHA1 3dc8cbe9a33661d8f71485ace9ca87c504a58a4e
SHA256 6365bd7149d28c90e7435e0be1d491e4970be6daccf88667e459366f930fe94d
SHA512 f1d928c6dc8389894c6ee2f5b522a8ddaaa5a88b1b7f21637ab8a0a1db2e3654da1c56afce59e25ff35ef91bbf618cc70bc06f9c26f1dc33dd3f5212dd24a4be

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c0f2834e4de62fa584559e3a2b9fe596
SHA1 0cca02824ed0d8bcce829e2e5bdb0022c539bd36
SHA256 26e80736a860e3a99eb6a6c9fae7188cac7d633bf902c2bbe2597ec7ca7f8fa2
SHA512 9f2cf99963e92007ec9c90864f485175ced5c85309623794ba4cd7ec989bb3aafc42ea727849d538c3c10843c46961397799f44846a54bbe1d894b3b2d2d3c07

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1a0b3080912af09188cd913d668360c9
SHA1 a55f5a9dc6a22bac358b574c3fbdeadd3449bdf9
SHA256 ce3e1d91fe74a851db8fb2270d5405e9ee5020510733ce86b0426347e5bf9a2d
SHA512 bcf657cc650b67a923d8fb48b0e07762a4c6284bb7b37ab5f85bd5da4eddc3b1142e80fc2f88d565713b086752f75531b237f8c7c2a62737df27cce224dd9c38

C:\Users\Admin\Downloads\driver_booster_setup.exe

MD5 2c99c30d6e3805acda4235e789b7d089
SHA1 0a1e695ad2db32c91773599c1a8d637c8a975c57
SHA256 743881f014d40332960f205a12a438e90f45b0f01516d2948b3e3ea1b460e109
SHA512 4ddb9e8d090593d380df94c59ff4604a0e6ee40417e5ecfe451baa8b05a5df48b42d26fbdda742f4ec0335222193e7a641d1b9377259d9376a534c7d6a89e69e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 380858b12ad4e50f59aa7e21a1ed8ff7
SHA1 7ef3c812c08bc7c3af928aa66be10a5324851fe7
SHA256 04f8769d04795dc9a481cdc92d02e1845d292c48346a3955b4086ec113450b1b
SHA512 07e3dc63f56b53f0b4faa6aa25e3eca6a10b9139053a20b8e567b0d575bc8a03fc1de50bee07e6ea6961359f79d0b7b8f643ded98997dba640f01066ce8449a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 d6d01a67a5388157141ea93cdeea1ec4
SHA1 866e8ec9c9ff9de28d9b71974d9014018be15817
SHA256 195fdd7bb9c8af8a9fb801a30fab7b3206edf837c9cb33ed4a10886ac533e627
SHA512 786e53b9d91c0c6fa6aca2f8640571943bf38e20ded46c2e367a2814424cf2bb84b18f53932b64138971dd2bbce72923290d370d3e604b53148992349f82b73d

memory/6544-2478-0x0000000000400000-0x000000000042C000-memory.dmp

memory/6108-2483-0x0000000000400000-0x000000000042C000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 eafe28ce52fdf0afed07b265b2f29603
SHA1 ba817196d5f6ea307a30cdb918f5ec868d83450e
SHA256 59b74358c80acfd0b462c061b6f2677956613bb6951c99b5fdf0bea631b34427
SHA512 ea7f92664b6b15814dfe80effa9ccf88902afbcf834376ef699d005410780c43e1b6fa92c60bf19404a583c4428ba6083b3d5e0c885971139c51cfad23d65802

C:\Users\Admin\AppData\Local\Temp\is-HJSAM.tmp\EULA.rtf

MD5 b0381f0ba7ead83ea3bd882c1de4cd48
SHA1 c740f811623061595d76fce2ebb4e69d34316f3b
SHA256 44bc9472169403484a0d384f1ca81989ef7e4b07441758e8a0110078933cbcb5
SHA512 6cfb8bc562d22843d043411720db97d0b4cbac96a20983d83d19e59b8428ec202f2532cc5af254438dc34fca4161abbd3f6bac8d397590e41b6d41e60700e78a

C:\Users\Admin\AppData\Local\Temp\is-HJSAM.tmp-dbinst\setup.exe

MD5 2e169828a673a1141fec2a966a3f7aa3
SHA1 78ca1d53fcce00a7f0271aa1237fb95041509f76
SHA256 23c1b303adc0fa0f93c53a33ac82ae38cdb93f4067d0d04205e8dadbe73ea50a
SHA512 dd27f81311c71510af3b271c2625dd4d59c1a753daba13d6fe33e91824bc709741936e500d44ae7339f428e8429a811e287d21a1f9913ca080a1a4441ad0c09b

memory/6088-2552-0x0000000000400000-0x0000000000532000-memory.dmp

memory/6544-2553-0x0000000000400000-0x000000000042C000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-0QB0L.tmp\Inno_English.lng

MD5 4014e584f7eb5936a6d2b8b75ade700f
SHA1 4a4b6017c27727aadb8e3726805cdfab11e97fb1
SHA256 5acf921d2b7d33d5fc9ab02569be5f46b5f3cf8656bf1c245f2f61f55529bb3b
SHA512 f9b8b8ca6c2e52bb8aa29c1d313874f5f66672838530d2d6f8075ec4c53132a5b195ade82105f831e4151ce317f174ba27026800ab4c6c8f67521a3c0eea1693

C:\Users\Admin\AppData\Local\Temp\is-0QB0L.tmp\DriverBooster.exe

MD5 9d547220e340c5b4c8cd6300ffffddca
SHA1 e23189683a92c51189eeb3fcd0624fc27cfe2f15
SHA256 42f94d425c2574d3b4672ca68483841cc9f86f4d865ed4a64c4a616fa677e8d1
SHA512 ff5d07dbee05ff5ff096c94bd1914e4a5c3eeee4606f425b33dcc19fcaa7bf952d0b27a42bf8de211db4032cb11f639c7428068bf2c81fe977778334e242b2d4

C:\Users\Admin\AppData\Local\Temp\is-0QB0L.tmp\libssl-1_1.dll

MD5 beae2f18755207f855bd745a95a0e0df
SHA1 4a97186d28354bebb8879a31a675764da456e272
SHA256 76eb04aa269163a918e09a82717d39f51bfd9934f4671f8b81eb7a71cf1b3ba4
SHA512 b0743b6a7e4f0a334ee753c26b383b521838700438da71ea6a2b4bb2e9019bac53a0982fc76e8eddff4c9a4e99a2f51f8653b12d602e5d91cee152bc6bfaf31f

C:\Users\Admin\AppData\Local\Temp\is-0QB0L.tmp\libcrypto-1_1.dll

MD5 902385503375a1c52787e2c88895e030
SHA1 d3b7fab10695c7c70a611572a7f6593d3a391533
SHA256 078d662af771a3b93c44415447294db364e22710cedc274b685ec639783ac928
SHA512 48cfd677a51691906daddb5034d9098dfe7b09b35507812c6373d17bbec76618b5f914fde2d1b134d89705a03d8135f6d6ac10b87ed5f40e726479c3ed94e89c

memory/2620-2673-0x0000000000400000-0x0000000000532000-memory.dmp

memory/6108-2676-0x0000000000400000-0x000000000042C000-memory.dmp

memory/5304-2675-0x0000000000400000-0x0000000000A0D000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\appver-ac.ini

MD5 bbdaf441cc66dac0c6907a760d3ce131
SHA1 5c3bf7602d6a8e6b5bd461ff873ba89976694404
SHA256 0ee2094390df55dd84c9eb58ac39a64407a31e84e92d2968a7fb10e92a5677f2
SHA512 5f38c71bab6073bafeb9fe71fbe144b390b863e43d7803fa86812bf6ace503566027c25384a0f76f1da19d9da160833f7f6ca18ac734c32a83da8f4f9893f041

C:\ProgramData\IObit\iobitpromotion.ini

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Temp\1724517848\ENGLISH.lng

MD5 db9aeac1d5b95fe0a91de7109052bb1c
SHA1 be4936d76a69a21a31c06c87b560c454a1eda5d2
SHA256 e22df1557d7a50f85c96cf4a2c2c843a737433a56447aa0423f41ec201232d4a
SHA512 41702e00071df9aad72e19010638a89d3bcf43473754a57ab393c90f8f952b511aec2a531893e6ff94dc14cf0cddb7146cb7e1add0c55166eb07f253035e335f

memory/6864-2700-0x0000000000400000-0x0000000000A0D000-memory.dmp

memory/3692-2710-0x0000000000400000-0x000000000042C000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-59F14.tmp\driver_booster_setup.tmp

MD5 048f89f1be0ce17f10350b121c08b6bd
SHA1 d0746f79ab4c1c6712e787d30e7896cf02439d1a
SHA256 8dfc033ff5a1ebac9282f15f14ab048b73fb058fec927a1f5d188a359315c6eb
SHA512 f21b627324fb58f2a585c99df6309e11ae11f895e6f5b6f0d4f9b02368ec9982728e43a3aba5d346d3ca45419fc593293665305f067d9d9f41753d201a9ea90a

memory/6864-2726-0x0000000000400000-0x0000000000A0D000-memory.dmp

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\Icons\Apps\is-24DDP.tmp

MD5 a364eb8919ad57f2278960cf6a062862
SHA1 dd7fa8dd5894960fa47e8c74e2acec034da803d3
SHA256 ac4531a4b4fe3b34054eb33f2caabe2776be0ea5fc5056670c139caffd51b4f4
SHA512 68e06dcbf244211caac4e386bc73856a7b4da97681e58de3470d6f1000abd336c2d13c84ee11e2bcda9a48afd176efc34f9567ef3bebd5577731956402ead96b

memory/2628-3164-0x0000000010000000-0x0000000010237000-memory.dmp

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\SetupHlp.exe

MD5 c457865cc2c3383111800d592992ff26
SHA1 ee54eb87102b8b63a60a2c268f6404e8555f4492
SHA256 791f2cbb8913d5314d9251ff20f7cace0c2a92b6475aecc8074a92639b58e4fd
SHA512 c358fefb02dcfd9e404a73c35b61cee160ef5575d4c15c31b2c11c66c709879f22dc7860c79ae9d14856903a6c18d6d0f6fe39afafc96e48a5f18668eb6cf4e9

memory/2628-3185-0x0000000000400000-0x0000000000431000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\HWiNFO64A_151.SYS

MD5 b8b796586c1c177ce49dac10c57088ea
SHA1 37df4c40300da4ef18971ef4dff96c864c3e463a
SHA256 a6e75c3a21436941e9a6a111fe3a708be1753ab656ba247a40b401206096641c
SHA512 e4039f6cb66115fcd01845ccc1cf3d0cff5791f2c7b5aa32a6fe741d8317e865e608e99174ecb13d5bd1130f0b12811c8f7bfd60b0e00b869c4d84d0265ca9d5

memory/3632-3186-0x0000000003E60000-0x0000000003F6F000-memory.dmp

C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

MD5 d79e8e32c72c8abb1b15c64dfa6a2a42
SHA1 5370c22adbb36d3c6932443899b837b803d8d5c1
SHA256 fa7549a3de1e855cf85469cc0577c27b29d139f38e43601d5d32912b749ac012
SHA512 aa2de01da758cedc466c2344d7e6d39ccef4fd23937fac410f16774451ca7d6b9a3f7a5831064bbc4a954ae91fa945a1022b5ff111359045a8cf61714bd3c9a6

C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

MD5 5ce1d7f823a20cbd79f515952bc1b527
SHA1 f2a2b8483753ded79ca68ed3e6b1bd5de571046e
SHA256 26c3b24926c6135f8391ff8feb31bb35727db6e3076b084d55098573931b7985
SHA512 b7f90b7019d0642c82891074c08e53edc12cf91196cc114dc4c2057c81b5faea2bfdc7998406e91ffeb42688440372f798ee230824a225ba16a4155f54480934

memory/1804-3210-0x0000000002870000-0x000000000297F000-memory.dmp

memory/1804-3221-0x0000000002870000-0x000000000297F000-memory.dmp

memory/1804-3217-0x0000000050120000-0x000000005030D000-memory.dmp

memory/1804-3216-0x0000000050000000-0x0000000050116000-memory.dmp

memory/1804-3215-0x0000000000400000-0x0000000000421000-memory.dmp

memory/3692-3230-0x0000000000400000-0x000000000042C000-memory.dmp

memory/5000-3231-0x0000000000400000-0x0000000000532000-memory.dmp

memory/3632-3239-0x0000000000400000-0x000000000064C000-memory.dmp

memory/3632-3241-0x0000000003E60000-0x0000000003F6F000-memory.dmp

memory/3632-3240-0x0000000050000000-0x0000000050116000-memory.dmp

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\TaskbarPin\ICONPIN64.exe

MD5 04dbe777a2ee9d35c452b959b17f2b5f
SHA1 07368e63efb8e2169b0dec6732d476c0b598dbbe
SHA256 0b63193c6556834c0043cf27c592eb2e76584617a17ffa4cab5f3a0f13afc473
SHA512 7d1f42b5441a9cdaed0d52bcbef216972d59a1dd9100311aaaa6006d02f92d78520ed5969fc5a61a36bb8f9255bd6af8f77f74d8bb5cfa1b5af93ba2c11c250a

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\InstStat.exe

MD5 b8cd832013322d22c4c026383eefcec2
SHA1 406706f1cc5276f50dea4e32d7db27c326ca37d3
SHA256 13db9a072473c27380b917b94d441cbbd34b8d8558f370495f7f6de27dcea225
SHA512 2c316adfdbac0184233b3f4bbc4babe813daa5e0d4684fdf4c959152a3bb938334db05504e8b79a56f417865666db0506b59b8fd64a708e4aac548fefb87c039

memory/3496-3264-0x0000000000400000-0x00000000004A1000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Setup Log 2024-08-24 #003.txt

MD5 697e9073f110da02b341ad7ba7941483
SHA1 eb5b042488d28f98301d204fc6b88aae1a420ce8
SHA256 1007a67f44bfbc1a74116b1de2b1e585ab5f484bae42f1a9f95026bf3664c6cd
SHA512 90b8df58d9a1a69e852e5a34f223abc53874a90d3eef89f5ad0fa78c69d0f2bf99b89270e7001185aff81a97729b67c495bbed06021c81c3d34b3c350c490fd7

memory/5000-3279-0x0000000000400000-0x0000000000532000-memory.dmp

C:\ProgramData\IObit\Install.ini

MD5 27cb491ad7c209aadc830aaf6edbbb6e
SHA1 185f7d7c326753cf7fc6292003c333735d007c36
SHA256 4274544227f027907823cb03e7e28bb228bcbf47f116ebe5a8fcf2a4b493856f
SHA512 89fb8e84ff695369ed4a4e7ba8b9689b2d530cd7ab26d945c87643209f03a759685d4bbc077d8e5a2aed79ec2c04b5eb8467504f97c67579d0bc1004e1cb5abc

memory/6532-3270-0x0000000003C70000-0x0000000003D7F000-memory.dmp

memory/3692-3280-0x0000000000400000-0x000000000042C000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Driver Booster.lnk

MD5 e9b85004b82fe456fab695df1e9b5f21
SHA1 1af8550331546931ef342a43950af5153ee66df1
SHA256 eab7a405027ab0091b201543bab2ef868943fa509afb7f720806d7cfcda26cbe
SHA512 70b5bc814286c47295fd12478c32bb6584c404c00f6f9381b607c996440daa9eb8f036c9ad83a599e68d1e0d117557f85770c196c6f18f06861040a11cd6f225

memory/7032-3287-0x0000000000400000-0x0000000000599000-memory.dmp

memory/6532-3296-0x0000000000400000-0x000000000059F000-memory.dmp

memory/6532-3297-0x0000000003C70000-0x0000000003D7F000-memory.dmp

memory/6864-3298-0x0000000000400000-0x0000000000A0D000-memory.dmp

C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

MD5 e0e11539257dc0b663bbcb4981f48a92
SHA1 99f2aff23ccaefeb45ce50dbdbdf91fdec531f93
SHA256 2df9914cbcebeb7312bcf12e75c1a8e44bcc37deab519bd0e32138c0f7ded88d
SHA512 39f8e04637fc93e7d46f69c503d478912cf00b4a7d6c5f88aef4889a859cc40d54962530a2d77074b528b925e6503e3020f836b1256f61d900dc06cac41375a9

memory/6864-3306-0x0000000000400000-0x0000000000A0D000-memory.dmp

memory/4076-3315-0x00000000013C0000-0x00000000015EF000-memory.dmp

memory/4076-3314-0x0000000001320000-0x00000000013B7000-memory.dmp

memory/4076-3316-0x0000000005E70000-0x0000000005F7F000-memory.dmp

memory/4076-3317-0x0000000006700000-0x00000000067D1000-memory.dmp

memory/4076-3318-0x0000000006290000-0x000000000632C000-memory.dmp

memory/6864-3319-0x0000000000400000-0x0000000000A0D000-memory.dmp

memory/5440-3320-0x0000000003D20000-0x0000000003E2F000-memory.dmp

memory/4076-3321-0x0000000009D60000-0x0000000009EB9000-memory.dmp

memory/5440-3322-0x0000000000400000-0x000000000064C000-memory.dmp

memory/5440-3323-0x0000000050000000-0x0000000050116000-memory.dmp

memory/5440-3324-0x0000000003D20000-0x0000000003E2F000-memory.dmp

C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

MD5 c10e51079454bb242c3a3c8509fa641b
SHA1 b8b30ac98420aaeac6f6d7d0b7ec82fa1c708f2c
SHA256 3c335e1ece91eb25e5cdb1e045e223b6262b5ea6266af1b44ebb07b80acc2f6a
SHA512 2d37520a1c49b1b7fe0ec29e8448f5bc9606c956c767d0bd07cb6c01b6c79bfdb239df0ca309b5fea002f073cec0a5c49179603fb4f8a4b557c1ca6bb658c186

memory/4076-3332-0x000000000BB30000-0x000000000BB44000-memory.dmp

memory/32-3342-0x0000000000400000-0x0000000000431000-memory.dmp

memory/6788-3344-0x0000000002840000-0x000000000294F000-memory.dmp

C:\ProgramData\ProductData\StatCache.db

MD5 2fb2fc9e41d46e2b0dd2031a85194ac6
SHA1 fad003c2439399226b50a95a3b990e387c9aed90
SHA256 7696a9684f5b8dc2c28db5db924e11377414160097caf316392feb9db6cc54d6
SHA512 aad1f720cf3d7614c508411661a48c1d52c714c021d5d0c9045e429555600d8a466b6bb5c3c60784360344d1eb56af6f78183113a32d4b06e0e3f04e2d1d55e5

memory/6788-3362-0x0000000002840000-0x000000000294F000-memory.dmp

memory/4076-3374-0x000000000BCD0000-0x000000000BD62000-memory.dmp

memory/6788-3355-0x0000000050120000-0x000000005030D000-memory.dmp

memory/6788-3354-0x0000000050000000-0x0000000050116000-memory.dmp

memory/6788-3353-0x0000000000400000-0x00000000004E3000-memory.dmp

memory/4828-3380-0x0000000003DC0000-0x0000000003ECF000-memory.dmp

memory/4828-3417-0x0000000004080000-0x0000000004094000-memory.dmp

C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

MD5 556718fd8ca75c28d5c4f2d4a9ecce08
SHA1 0c71c5365cf01e05bf86535002358e4e32737fa7
SHA256 20b513abaea5806b38a3f6cbebef69229437ac2c38659864b816f4df9a0d80c1
SHA512 77c38f30c9e843859b58c8cea21109e3135f703fdac652995a1b5ca982aebbaf5200ba6113a8892b65724801558b6f9692be87fc5e3cd3a054ebc7563b7bf97b

memory/4828-3424-0x0000000006570000-0x00000000066C9000-memory.dmp

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanData\scan.dat

MD5 f18619c87309301a492d083a3685a667
SHA1 168745a635a159181068024dec63880180a4c838
SHA256 bb7caa6db4bf960fca67bc5590d7859885646d64d01ee14a3b48c0fcb431fea7
SHA512 2145c9c45e3a5c1b827492c8edfe0a88e29912b6ac9a353d5dbd8ce3171a70bf9578f00ba5b75ae62043e69d7e72ea379938433cf12665b4d929e99b202bde22

C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

MD5 76a8d5135771b3fd2c315524f96c557e
SHA1 bf68380c87746a9c3ee62195e550d9508aecd415
SHA256 0034d6b047638384566dc025bc4a714b10ba826a978fc60dc70121600f0fb0ef
SHA512 8e986135d6f9ea61bba80ae0bfb26c4dcaee8d2f214cf23e23fc0cbf900a8f002833ab22a900f5632f6ee0c45a02608cac4b1968897ba7b1aa6b7d68dc445603

memory/6952-3446-0x0000000000400000-0x000000000043B000-memory.dmp

C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

MD5 008f084e3e3aea701e48ff25da55aa70
SHA1 d098db00f8936a639699ac88cd0971d200fc47cb
SHA256 13f07f888e5c03d99963b31e46456612f9acb3d22bc3dddb111832d2983867fe
SHA512 f2f9a9888a99c7ac5090cc3d86a775c6fec97e3b75e1937400453545f078202f2007152e0d8c73fcabc6cf5fed7d92f31b4a5199a23967e88272d2558bd04732

memory/6316-3541-0x0000000002770000-0x000000000287F000-memory.dmp

memory/6316-3554-0x0000000002770000-0x000000000287F000-memory.dmp

memory/6316-3552-0x0000000050000000-0x0000000050116000-memory.dmp

memory/6316-3551-0x0000000000400000-0x00000000004E3000-memory.dmp

memory/2644-3542-0x00000000026B0000-0x00000000027BF000-memory.dmp

C:\Windows\INF\c_volume.PNF

MD5 8b0c8f54383cef8ac91d3c21663b21fc
SHA1 0bc698df786a3396c58ecca34207a4c81985af10
SHA256 41cef722ddac2159237cc6c4adc318e75d5b1159373d616e9bdd35f807d2280e
SHA512 80a87ef617b5fb2e8ff1cc63b45d2f7f8a368da382bb9bf6d5863f83748f3ea1ade79c6ac7a0de8203d1d43eef01a603bfbc9d47a0d3b9fa56bd71b235c6c8b0

C:\ProgramData\IObit\IObitRtt\DBRtt.ept

MD5 9d6724d9de9aeff87c2ed83477edb88a
SHA1 580801fae7373c5f6fecaef4cba70bcc4ed0a567
SHA256 6943e948be0326d4347cf20aaa39b7782afb2e652100a51feb675562adf46db7
SHA512 28e2dd415cb048eaa79f17d23ae8fab67caa28627bff4efaf8c0fb8597eadc2cda554bfdc315f86c4acafc4564a87cb38eacfd5182baed5d7ce862f4d52d2ffd

C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

MD5 b1233bde87212d77cd33c32140049a56
SHA1 fd9a90f53c5a988924e22a2f0da55d1d870ea8e2
SHA256 faed6aef2aae4c4712ca06daef4b917491aac46634e0b8ff387ea5841bc14421
SHA512 d2a7028fa69f3816c25675e90e6119403bb5a7a282e404fe57eefe50544cdcce6a6f6d1a31ef4cf58a7a75e3b4680f56cf6486c265076c9f8a79e90902d45411

C:\Users\Admin\AppData\LocalLow\IObit\AUpdate.ini

MD5 e4bd35623cee99aa9fa4566966fd82e8
SHA1 2af74cd9c23f161c4db19033dc884ed8976e23b2
SHA256 1d39a174b64eac133aff098bcf30ef2ea4c9cb063ad6d7fbdc9fc5fcd2193733
SHA512 e640e8ab6e63571f1a92b0c226f959ed13d9e7be6baec09503f084b026ec7fffc6bbea9e7aa62d38e25b632da315a3a838ee8b75e742ce957463f3e541bb59e9

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\LatestNews\NewsData_v2.dat.tmp.dat

MD5 ea308d6dda16bfea3d4b796e2b76d35d
SHA1 b9cee892576e17fa25995c43ef3b5c6a2fcca269
SHA256 3ca011deb4aa1042ba0ee2a3c537486a4f3f5e0de98aaefc9fd18565d8e85938
SHA512 fe156abe32e6fcb2a6b36e1e5635e34f863fcfe9e7eb4806086ee6424d8c8f5e7c88ea68683114885ed124f8b0167808726d8660e18d1c4c52771a3810dc36d1

C:\ProgramData\ProductData\NewsStatV2.po

MD5 1e85478c23ed12c948e05b8180dbfe2b
SHA1 fce2cf18cc1f255433a55ba04dc997b4935324f9
SHA256 ee5e462c34939f6447df3717ec92dfb2f432a52e60a88b13101ce8eb43a8921e
SHA512 327b14f87db9628fcc99fc405c20c5e56ab9e78eb44fa7984f90d1b5bce2950c94835f916de8060b3a2aa62cfd779a5473cf623096045faa8ad0f0f7013339f9

C:\ProgramData\ProductData\NewsStatV2.po

MD5 dc72bdebf3016a463eb4e209af1aefe1
SHA1 9bde7acc8b748a89daee4d756fa57ce3007e82a9
SHA256 472e48643c0b957bb7c612448330f07ce0cb71e14541c6b0b9ce789bc82e91da
SHA512 de6999ebc8dd931a4417c6861e36127a6b7caca1543f1db94eb90c3624045ee57398d2fb1a4841e0647ac0191ab41a04d6dc8642c7f1b888743a03a985c65ea5

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\HistoryTemp.txt

MD5 74c0a20830d28829d8e9012888aaf219
SHA1 8dc9e28b355c8cd0152bbdf0ba2f3f58a4a2cf07
SHA256 fd33149b6bf34dce9313529282a5d88d298962638679acd4d97f36a4f24b0761
SHA512 37f546653468f7307fdb2fefc267f6589565d11690303b912791fb2c15f6e36d654fd4e9fe620c35bb68d6a6b35dc8627734652df1cd2c1f12061f562cedadda

C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

MD5 4c649fa66f4564080696e32d15a41607
SHA1 3f788dcd880fbfebc528890cc87557c936001716
SHA256 0103101468fc776fdb15b540ca37bc86d5a70b9afa581abb3db5fbc2dd17db94
SHA512 e7f5e97dacc295de0769b976425a2e05e63abf41a806da7a30ed54cdba01dedd8273824fbfc987411011bed39ff699a25ab2de82eb1beec8cad1a734e3222c71

C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

MD5 4f162a86ba7e7a7c602e557b9bc8af9e
SHA1 cb022d05f6ed3c39da7cb315cd231593dda58117
SHA256 14f51048759e03cf3b13569dff6e09b0d3750012ead0d307b2e94f2ee0e07510
SHA512 eb17851e9bba31acc8248935360c8300f15c109134275c9181986fd677bb25a9dfb765f42ce941f0ee6c2a768bedbc07c3a4592a46b861764dcfa19901bf31a7

C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

MD5 47c6cdaaf5e993b12739b5d9f64b97b8
SHA1 b2727f6e38937d6b5886b092da254289f8a50da2
SHA256 d4de2c18ea41fec99e792aa2a9363e05b8a74b52e84bf22db964c949974e435f
SHA512 9d1b8db011b89b3856e41fa297058aa2c65df5b8eb7a4200e59d10ffe5f317e3921ccc25e01ce9d0f72a798e391d746977f5847ea56f78b43ac95b0ee0a70a91

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanData\config.ini

MD5 8fa4a9e0207feadb3e13f368a2470a54
SHA1 a75af75bb422de16ec5a7d6e104629d42becee30
SHA256 fcc1c6332b0d82af593b57a135e58095119ed9ce1c535728a505730ac7d062a6
SHA512 25443f8304afc536d709483ed514083dfbb7c2078e01815b91952d991828a9fdfc8cc60dffbc561f02e9fb8bc122c5b285a2c0096d39f1bd8d68a5c9544dc0f7

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\ScanData\scan.dat

MD5 0f3d44c199d5bd1c17a9bf27bbf93157
SHA1 7d72ef88afc8b5561161457b20a5ca51fbd60bea
SHA256 59a734c0bd264cda572074f5f5ea79779213216adf4f97b531d3d73f813ebfa8
SHA512 02b4c17cf167596ef2aa864acdbd41fefc8dbca01de3046d79a7587a80f36422549bfba1d0efc725c574b0a8010971e781fe2c9d39e112b4bb45f81e7c0183e6

C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

MD5 de2dc7b76ec09d082bf6d99fa552ed3a
SHA1 ce536f4d479dcfb427a8faa7e6eed302c12f3d7e
SHA256 5c94b09b66cdf5c84b659685f58538beb745f1f0bcfa63a1c7b858385c186c10
SHA512 c65337d2f5cbe81a2b535dfb4f063a69081d91f0ee0dcfb5065963721ad9bb60a947690de34a26b39758c649c508b7ae71a7573c6dbaead999db9b3d6fabe852

C:\Program Files (x86)\IObit\Driver Booster\11.6.0\LatestNews\NewsData_v2.dat

MD5 d36f322f5a2fdc7f2c27982d393b2067
SHA1 34958a4abe346c50fb41e85afe3ec57fe67e6acf
SHA256 59cfa45cd04e78b85ebc7765b21d71c49b08d66590ec13a286796f093dd8ef86
SHA512 b4fc4a5ecee41bfb2fc08751f91b20f1e8f854417d25751f4395a6849c5a2cd783a1b4aeac7fc0de8408a8c2e9f1f652dcb4f976adea0881a4035272c8ed10ee

C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

MD5 3031305184323db3abcdc61b1292c38b
SHA1 e1a90f4eb0b47195383a3ad90aa99eb8fb4bc1f5
SHA256 c344efd530127f49ecabfb448f7cbd84d89b954d7443886a052f0b6336b9b7e3
SHA512 efe539a7b14025eb52dfa3886b3390a3206facd3c5ee4203c336e109bc50b855c9d63eeb50a3ff85c088db66d97a014eacd9dba8751e1923198916c1533bac6d

C:\ProgramData\IObit\Driver Booster\Download\9C023508AE8498346F5F7096134A56C6_9c023508ae8498346f5f7096134a56c6.dbx.cfg

MD5 b34e5a50da8914a224cc23ad0cb9425c
SHA1 a655692c66b4036cee0d4eacf56e98eef59563d7
SHA256 04b202d1e6081ec41aeda098c368810debb13061a0d7d05152dcba22ea70c54e
SHA512 4e37234f6e0319b6bf8be72c56e9efee9fafc995463f318a3fcd0311e0797c2b91e78f8357ece8f837d33a5b868e4a47e5a7eba773f2e6354666fd83fad34ce3

C:\ProgramData\IObit\Driver Booster\Download\C2B583C1FB6EEBC2F354CA1E1CC84F1C.dbo.cfg

MD5 52f0eaae391dc1a72587fcc6f45afcd3
SHA1 c332c9948b245a71dee9f743e85941b42ffb67c4
SHA256 58b7f583dbda19b460b7ae91e5b8939c4cd9cd5e284a17d8d3181135d711ead3
SHA512 99f0584081d9f3c9f93e5f33b502818f0f1e2c53dbc09cf5077892bfcdb65b31e617346be9a05a6ff304d99090da9f48b31ea3cb60dfd2e4c182c58edfddfeac

C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

MD5 c08eb319f490ed9dabd55f63894960a7
SHA1 034f171f3f346c487445b02448c24b022dcb26a1
SHA256 2006e18f5221535f6cca97bc2c4a8c481b56dfbbe9f6f32b9910c590528f9ea1
SHA512 a30ca5b88e3754e7d58050d237c69e8fbbf7ca8e63db4f5497070fb4dbcf825036a1ba393961e8e5e0f1ba2f272f2d8fb965eb8bd6222aaa7d028c207cc8b21d

C:\Users\Admin\AppData\Local\Temp\{8cf3f806-130f-e946-beef-d73515ff9c0d}\ETDSMBus.inf

MD5 acb62a35c64c08fca8b1a74e378ca04f
SHA1 3e66cfd4532516763208c12e5e27ef121cb19b8f
SHA256 4aa95913938b9de1a20b8ba3b25c19766511670c07880f790eea07fdb98a4fca
SHA512 6bef055fa88717a93eb50f1261c7f1e92de94eeb3a2ae65f7b70869f139d85cb449ed0f8dcd69b72abbf43cdf56b34f01ee29121a1f2a961d3a64ac309554fd9

C:\Windows\System32\DriverStore\Temp\{1cee2eb1-5d4d-1a46-b3b0-9eb7fb0c7564}\SET480D.tmp

MD5 fc1460af597e7509646cce7457751544
SHA1 9888098a9f296c55f8e2d338583a99862cb5ff6a
SHA256 a75e8c4e68c50b8b1e11f22f40c0e2ed2409262f955f1e676cb80519638fe24a
SHA512 463fcf7a16f5f245307fc24b1abb9c632daeb9d6f1088ef5aa50a833797986352a32adbbf8fd20090c4a667e46e888dd6650660d6957f5c67249e855687557fb

C:\Windows\System32\DriverStore\Temp\{1cee2eb1-5d4d-1a46-b3b0-9eb7fb0c7564}\SET480F.tmp

MD5 3b79738e1a5bc3bfd8e9a14f4c08be24
SHA1 22fdd3c1fb49a1a40d11ede5e41538a2ea7d5659
SHA256 1a3cd49f877a26b814665cfb47f54c622652c64597b99f469f2bc7b4e147030a
SHA512 6055ca0ee41a8ec5742a14ba3a971ee72411459252dda24ef692acc09b9fbbe6c80a6fbae1c8438c540a3e279579aca98b9169b9c3fb566731cad874b66c5b50

C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

MD5 765cf9f8076d26732b4adf75a4671666
SHA1 bf18c102d746d031e8f0eb03b8448857728b2e1c
SHA256 91d47c179a7c6d1c2de7e604ff4539ab9a517928f7269ea6526d93967fe18708
SHA512 c86c365da31b2a609ae23d9bc82057414f7f3038008f4eea26e2969d7fb361efff61933c3f031408fffcf20bf2bba995a075814dcc15d1320b1acb674819e201

C:\Users\Admin\AppData\Local\Temp\Dbz42452\Netrtl64.inf

MD5 5c6f6099f97458a722e5b34caac38b1b
SHA1 a40dbda8e58b61d4a39abc9663d61ff2109031fe
SHA256 4791b5b6d781ff5b257fbc8ea4cd0e050d8fcd21737cb015b2ea651c5c282c51
SHA512 2fc62b221235068d81018e350e6d74c4b895f0341ce5dc838b348190805e5f1a263e72f9491ae6d17195d99e41c6180be3511933df64459fcc24e8bc7a7f2a7e

C:\Windows\System32\DriverStore\Temp\{49c375f1-f124-4447-b4b9-d9260f125af0}\SET6D48.tmp

MD5 04c2d5bd8d0776320230978a0aec3bd0
SHA1 7349c1471fc9f76a4a7500a69973d6fe7ff793d0
SHA256 88a58e4a2ca66cbe5bf07cb82800b25206c90955067187e96adfee5263bd0612
SHA512 c9dda00b706014ac6ac04e10a4239a91a7df7be36b5a846ddc9f6d7ac77a30765a93f782b165776b52ec06c51a02170aa93fa2270d2721dccac936666f5e0581

C:\Windows\System32\DriverStore\Temp\{49c375f1-f124-4447-b4b9-d9260f125af0}\SET6D4B.tmp

MD5 45fab8bac606608166f774f3970cc17c
SHA1 06bc3d94bcfb0c764cb34355c91dc2b5812e0226
SHA256 740e5ce1fc7749daab3e44505248cadd303f05aeaddb5ebceb922d51f6dc30bf
SHA512 ac05d29368c80507b72f4a6f0326f53b119360a0e0aeb456da977984688e20abb01be9c0a61cb0222b1b6e30dd8037c23d2547b139886751c1ad54ec320ef24f

C:\Windows\System32\DriverStore\Temp\{49c375f1-f124-4447-b4b9-d9260f125af0}\SET6D49.tmp

MD5 c947115bd6114b156151fb64ebf8f87b
SHA1 4c0fa9f93cca70713a50e1dc9e72ab157593c9e5
SHA256 57f326e363fc8d0dee9425021ffa1798b022367638fc91b7a8306a63fdf2b0e9
SHA512 608732d7a081d7f9d33b864dcb41a9f85d141d631eab2cf4ccff262144aa42568915eba02e935f5f4e4bc48190830d8bcbbe30667132ce2c0edb316a6ad0ee0a

memory/6544-2478-0x0000000000400000-0x000000000042C000-memory.dmp

memory/6108-2483-0x0000000000400000-0x000000000042C000-memory.dmp

memory/6088-2552-0x0000000000400000-0x0000000000532000-memory.dmp

memory/6544-2553-0x0000000000400000-0x000000000042C000-memory.dmp

memory/2620-2673-0x0000000000400000-0x0000000000532000-memory.dmp

memory/6108-2676-0x0000000000400000-0x000000000042C000-memory.dmp

memory/5304-2675-0x0000000000400000-0x0000000000A0D000-memory.dmp

memory/6864-2700-0x0000000000400000-0x0000000000A0D000-memory.dmp

memory/3692-2710-0x0000000000400000-0x000000000042C000-memory.dmp

memory/6864-2726-0x0000000000400000-0x0000000000A0D000-memory.dmp

memory/2628-3164-0x0000000010000000-0x0000000010237000-memory.dmp

memory/2628-3185-0x0000000000400000-0x0000000000431000-memory.dmp

memory/3632-3186-0x0000000003E60000-0x0000000003F6F000-memory.dmp

memory/1804-3210-0x0000000002870000-0x000000000297F000-memory.dmp

memory/1804-3221-0x0000000002870000-0x000000000297F000-memory.dmp

memory/1804-3217-0x0000000050120000-0x000000005030D000-memory.dmp

memory/1804-3216-0x0000000050000000-0x0000000050116000-memory.dmp

memory/1804-3215-0x0000000000400000-0x0000000000421000-memory.dmp

memory/3692-3230-0x0000000000400000-0x000000000042C000-memory.dmp

memory/5000-3231-0x0000000000400000-0x0000000000532000-memory.dmp

memory/3632-3239-0x0000000000400000-0x000000000064C000-memory.dmp

memory/3632-3241-0x0000000003E60000-0x0000000003F6F000-memory.dmp

memory/3632-3240-0x0000000050000000-0x0000000050116000-memory.dmp

memory/3496-3264-0x0000000000400000-0x00000000004A1000-memory.dmp

memory/5000-3279-0x0000000000400000-0x0000000000532000-memory.dmp

memory/6532-3270-0x0000000003C70000-0x0000000003D7F000-memory.dmp

memory/3692-3280-0x0000000000400000-0x000000000042C000-memory.dmp

memory/7032-3287-0x0000000000400000-0x0000000000599000-memory.dmp

memory/6532-3296-0x0000000000400000-0x000000000059F000-memory.dmp

memory/6532-3297-0x0000000003C70000-0x0000000003D7F000-memory.dmp

memory/6864-3298-0x0000000000400000-0x0000000000A0D000-memory.dmp

memory/6864-3306-0x0000000000400000-0x0000000000A0D000-memory.dmp

memory/4076-3315-0x00000000013C0000-0x00000000015EF000-memory.dmp

memory/4076-3314-0x0000000001320000-0x00000000013B7000-memory.dmp

memory/4076-3316-0x0000000005E70000-0x0000000005F7F000-memory.dmp

memory/4076-3317-0x0000000006700000-0x00000000067D1000-memory.dmp

memory/4076-3318-0x0000000006290000-0x000000000632C000-memory.dmp

memory/6864-3319-0x0000000000400000-0x0000000000A0D000-memory.dmp

memory/5440-3320-0x0000000003D20000-0x0000000003E2F000-memory.dmp

memory/4076-3321-0x0000000009D60000-0x0000000009EB9000-memory.dmp

memory/5440-3322-0x0000000000400000-0x000000000064C000-memory.dmp

memory/5440-3323-0x0000000050000000-0x0000000050116000-memory.dmp

memory/5440-3324-0x0000000003D20000-0x0000000003E2F000-memory.dmp

memory/4076-3332-0x000000000BB30000-0x000000000BB44000-memory.dmp

memory/32-3342-0x0000000000400000-0x0000000000431000-memory.dmp

memory/6788-3344-0x0000000002840000-0x000000000294F000-memory.dmp

memory/6788-3362-0x0000000002840000-0x000000000294F000-memory.dmp

memory/4076-3374-0x000000000BCD0000-0x000000000BD62000-memory.dmp

memory/6788-3355-0x0000000050120000-0x000000005030D000-memory.dmp

memory/6788-3354-0x0000000050000000-0x0000000050116000-memory.dmp

memory/6788-3353-0x0000000000400000-0x00000000004E3000-memory.dmp

memory/4828-3380-0x0000000003DC0000-0x0000000003ECF000-memory.dmp

memory/4828-3417-0x0000000004080000-0x0000000004094000-memory.dmp

memory/4828-3424-0x0000000006570000-0x00000000066C9000-memory.dmp

memory/6952-3446-0x0000000000400000-0x000000000043B000-memory.dmp

memory/6316-3541-0x0000000002770000-0x000000000287F000-memory.dmp

memory/6316-3554-0x0000000002770000-0x000000000287F000-memory.dmp

memory/6316-3552-0x0000000050000000-0x0000000050116000-memory.dmp

memory/6316-3551-0x0000000000400000-0x00000000004E3000-memory.dmp

memory/2644-3542-0x00000000026B0000-0x00000000027BF000-memory.dmp