Malware Analysis Report

2025-03-15 04:08

Sample ID 240827-hmgh5axhjb
Target .
SHA256 5e107a53ea5381ab003a525dcd00b87bf04cb724019d100457c4ee827b42dbf8
Tags
discovery evasion motw phishing themida trojan
score
9/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
9/10

SHA256

5e107a53ea5381ab003a525dcd00b87bf04cb724019d100457c4ee827b42dbf8

Threat Level: Likely malicious

The file . was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion motw phishing themida trojan

Identifies VirtualBox via ACPI registry values (likely anti-VM)

Downloads MZ/PE file

Modifies file permissions

Themida packer

Checks BIOS information in registry

Loads dropped DLL

Checks computer location settings

Executes dropped EXE

Blocklisted process makes network request

Mark of the Web detected: This indicates that the page was originally saved or cloned.

Legitimate hosting services abused for malware hosting/C2

Enumerates connected drives

Checks whether UAC is enabled

Enumerates processes with tasklist

Suspicious use of NtSetInformationThreadHideFromDebugger

Drops file in Windows directory

Drops file in Program Files directory

Browser Information Discovery

System Location Discovery: System Language Discovery

Enumerates physical storage devices

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of AdjustPrivilegeToken

Suspicious use of SendNotifyMessage

Suspicious behavior: AddClipboardFormatListener

Suspicious use of SetWindowsHookEx

Opens file in notepad (likely ransom note)

Modifies registry class

cURL User-Agent

Enumerates system info in registry

NTFS ADS

Modifies data under HKEY_USERS

Suspicious use of WriteProcessMemory

Kills process with taskkill

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of FindShellTrayWindow

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-27 06:51

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-27 06:51

Reported

2024-08-27 07:36

Platform

win10v2004-20240802-en

Max time kernel

2700s

Max time network

2698s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\.html

Signatures

Identifies VirtualBox via ACPI registry values (likely anti-VM)

evasion
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ C:\ProgramData\Solara\Solara.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ C:\ProgramData\Solara\Solara.exe N/A

Downloads MZ/PE file

Checks BIOS information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\ProgramData\Solara\Solara.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion C:\ProgramData\Solara\Solara.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\ProgramData\Solara\Solara.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion C:\ProgramData\Solara\Solara.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Downloads\Bootstrapper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Downloads\Bootstrapper.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Windows\System32\MsiExec.exe N/A
N/A N/A C:\Windows\System32\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Windows\System32\MsiExec.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A

Modifies file permissions

discovery
Description Indicator Process Target
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A

Themida packer

themida
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Blocklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\system32\msiexec.exe N/A

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\ProgramData\Solara\Solara.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\ProgramData\Solara\Solara.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A pastebin.com N/A N/A
N/A pastebin.com N/A N/A
N/A pastebin.com N/A N/A
N/A pastebin.com N/A N/A
N/A pastebin.com N/A N/A
N/A pastebin.com N/A N/A

Mark of the Web detected: This indicates that the page was originally saved or cloned.

phishing motw
Description Indicator Process Target
N/A https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html N/A N/A

Enumerates processes with tasklist

discovery
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A C:\Windows\system32\tasklist.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious use of NtSetInformationThreadHideFromDebugger

Description Indicator Process Target
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\nodejs\node_modules\npm\node_modules\tar\package.json C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\tiny-relative-date\translations\de.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\glob\sync.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\sigstore\dist\identity\index.d.ts C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\string_decoder\LICENSE C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\docs\content\commands\npm.md C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\node-gyp\node_modules\make-fetch-happen\lib\cache\entry.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\sigstore\dist\ca\format.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\node-gyp\src\win_delay_load_hook.cc C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\text-table\example\table.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\gauge\lib\process.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\read-package-json-fast\package.json C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\@gar\promisify\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\pacote\package.json C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\lib\commands\search.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\man\man5\package-lock-json.5 C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\map-workspaces\LICENSE.md C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\installed-package-contents\lib\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\diff\release-notes.md C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\minipass-collect\node_modules\minipass\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\postcss-selector-parser\LICENSE-MIT C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\libnpmaccess\package.json C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\sigstore\dist\x509\asn1\parse.d.ts C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\semver\functions\lte.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\man\man1\npm-token.1 C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\pacote\lib\file.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\docs\output\commands\npm-pkg.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\arborist\lib\reset-dep-flags.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\libnpmversion\lib\write-json.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\corepack\shims\pnpx.ps1 C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\node-gyp\node_modules\fs-minipass\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\libnpmhook\package.json C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\semver\functions\sort.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\run-script\lib\run-script-pkg.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\qrcode-terminal\bin\qrcode-terminal.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\diff\runtime.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\validate-npm-package-name\lib\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\README.md C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\readable-stream\lib\internal\streams\duplex.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\tuf-js\dist\models\snapshot.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\libnpmfund\LICENSE C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\chownr\LICENSE C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\cmd-shim\LICENSE C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\env-paths\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\@colors\colors\lib\system\supports-colors.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\mkdirp\bin\cmd.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\man\man5\npm-json.5 C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\docs\content\commands\npm-init.md C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\is-lambda\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\cmd-shim\lib\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\docs\output\commands\npm-dedupe.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\docs\content\commands\npm-root.md C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\infer-owner\package.json C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\readable-stream\lib\ours\browser.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\bin-links\lib\shim-bin.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\sigstore\dist\x509\cert.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\bin\npx C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\node-gyp\node_modules\gauge\lib\error.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\minipass-collect\LICENSE C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\promzard\package.json C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\arborist\lib\gather-dep-set.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\sigstore\dist\util\crypto.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\sigstore\dist\util\ua.d.ts C:\Windows\system32\msiexec.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\Installer\e583553.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\inprogressinstallinfo.ipi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI51E8.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI5218.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI5891.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\{EFA235B5-C6A1-42E6-9BC9-02A8D56F1CDC}\NodeIcon C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\{EFA235B5-C6A1-42E6-9BC9-02A8D56F1CDC}\NodeIcon C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI393B.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\SourceHash{EFA235B5-C6A1-42E6-9BC9-02A8D56F1CDC} C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI4C2A.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI58B1.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI7A82.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI7C49.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI7E7C.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI82C3.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\RustDesk\log\rustdesk_rCURRENT.log C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
File opened for modification C:\Windows\Installer\e583553.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI397B.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI398B.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e583557.msi C:\Windows\system32\msiexec.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\syswow64\MsiExec.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\syswow64\MsiExec.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\wevtutil.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\taskkill.exe N/A
N/A N/A C:\Windows\system32\taskkill.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26\52C64B7E C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27 C:\Windows\system32\msiexec.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0\NodeSlot = "5" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5B532AFE1A6C6E24B99C208A5DF6C1CD\ProductIcon = "C:\\Windows\\Installer\\{EFA235B5-C6A1-42E6-9BC9-02A8D56F1CDC}\\NodeIcon" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Version = "1" N/A N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202020202020202 N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5B532AFE1A6C6E24B99C208A5DF6C1CD\SourceList\Net C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295" N/A N/A
Key created \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202020202020202 N/A N/A
Key created \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ N/A N/A
Key created \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14" N/A N/A
Key created \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259} N/A N/A
Key created \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "48" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0 = 60003100000000001b598a36122050524f4752417e330000480009000400efbe874fdb491b598a362e00000050050000000001000000000000000000000000000000d390e100500072006f006700720061006d004400610074006100000018000000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5B532AFE1A6C6E24B99C208A5DF6C1CD\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\MRUListEx = 00000000ffffffff C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1" N/A N/A
Key created \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "4294967295" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\5B532AFE1A6C6E24B99C208A5DF6C1CD\npm C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5B532AFE1A6C6E24B99C208A5DF6C1CD\SourceList\PackageName = "node-v18.16.0-x64.msi" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\Shell\SniffedFolderType = "Generic" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1" N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616193" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\Shell\SniffedFolderType = "Downloads" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\5B532AFE1A6C6E24B99C208A5DF6C1CD\EnvironmentPathNpmModules = "EnvironmentPath" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5B532AFE1A6C6E24B99C208A5DF6C1CD\SourceList C:\Windows\system32\msiexec.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "2" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4" N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5B532AFE1A6C6E24B99C208A5DF6C1CD\AuthorizedLUAApp = "0" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\0 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0" N/A N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff N/A N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5B532AFE1A6C6E24B99C208A5DF6C1CD\InstanceType = "0" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell N/A N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\5B532AFE1A6C6E24B99C208A5DF6C1CD\EnvironmentPath C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5B532AFE1A6C6E24B99C208A5DF6C1CD\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Local\\Temp\\" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616193" N/A N/A
Key created \REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 141911.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 262961.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A N/A N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\Downloads\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\Downloads\Bootstrapper.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe N/A
N/A N/A C:\Users\Admin\Downloads\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\Downloads\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\Downloads\Bootstrapper.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\Bootstrapper.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeCreateTokenPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeAssignPrimaryTokenPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeLockMemoryPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeMachineAccountPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeTcbPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeCreatePermanentPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeChangeNotifyPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeSyncAgentPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeEnableDelegationPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeImpersonatePrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\SysWOW64\wevtutil.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\SysWOW64\wevtutil.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\wevtutil.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\wevtutil.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1744 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 704 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 2596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 2596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1744 wrote to memory of 4688 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

cURL User-Agent

Description Indicator Process Target
HTTP User-Agent header curl/8.4.0-DEV N/A N/A
HTTP User-Agent header curl/8.4.0-DEV N/A N/A
HTTP User-Agent header curl/8.4.0-DEV N/A N/A
HTTP User-Agent header curl/8.4.0-DEV N/A N/A
HTTP User-Agent header curl/8.4.0-DEV N/A N/A
HTTP User-Agent header curl/8.4.0-DEV N/A N/A
HTTP User-Agent header curl/8.4.0-DEV N/A N/A
HTTP User-Agent header curl/8.4.0-DEV N/A N/A
HTTP User-Agent header curl/8.4.0-DEV N/A N/A
HTTP User-Agent header curl/8.4.0-DEV N/A N/A

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\.html

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd2e0146f8,0x7ffd2e014708,0x7ffd2e014718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2696 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5132 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5132 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5200 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3368 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5696 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6064 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5156 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6260 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3440 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1816 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3392 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3528 /prefetch:1

C:\Users\Admin\Downloads\Bootstrapper.exe

"C:\Users\Admin\Downloads\Bootstrapper.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3472 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3528 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5764 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6856 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6632 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3904 /prefetch:1

C:\Windows\System32\msiexec.exe

"C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\node-v18.16.0-x64.msi" /qn

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7048 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7272 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7288 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7296 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7304 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7980 /prefetch:1

C:\Windows\System32\MsiExec.exe

C:\Windows\System32\MsiExec.exe -Embedding E4D76CD1724956D53F7849B8819E0E00

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding C504EE225FCE94A18EE953F18F430CE9

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6892 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9172 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6820 /prefetch:1

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding FDF4085834EC3AC0C250A6B0232EE058 E Global\MSI0000

C:\Windows\SysWOW64\wevtutil.exe

"wevtutil.exe" im "C:\Program Files\nodejs\node_etw_provider.man"

C:\Windows\System32\wevtutil.exe

"wevtutil.exe" im "C:\Program Files\nodejs\node_etw_provider.man" /fromwow64

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5876 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9192 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6828 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9300 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7796 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9196 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5520 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=4684 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3440 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8008 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5124 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9220 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3592 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5560 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9764 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10028 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7996 /prefetch:8

C:\Users\Admin\Downloads\rustdesk-1.3.0-x86_64.exe

"C:\Users\Admin\Downloads\rustdesk-1.3.0-x86_64.exe"

C:\Windows\system32\taskkill.exe

"taskkill" /F /IM RuntimeBroker_rustdesk.exe

C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe

"C:\Users\Admin\AppData\Local\rustdesk\.\rustdesk.exe"

C:\Windows\system32\icacls.exe

"icacls" C:\ProgramData\RustDesk /grant *S-1-1-0:(OI)(CI)F /T

C:\Windows\system32\icacls.exe

"icacls" C:\ProgramData\RustDesk\shared_memory_portable_service /grant *S-1-1-0:(OI)(CI)F /T

C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe

"C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe" --portable-service

C:\Windows\system32\cmd.exe

"cmd" /c "taskkill /F /IM RuntimeBroker_rustdesk.exe"

C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe

"C:\Users\Admin\AppData\Local\rustdesk\.\rustdesk.exe" --check-hwcodec-config

C:\Windows\system32\taskkill.exe

taskkill /F /IM RuntimeBroker_rustdesk.exe

C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe

"C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe" --run-as-system

C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe

"C:\Users\Admin\AppData\Local\rustdesk\.\rustdesk.exe" --cm

C:\Users\Admin\AppData\Local\rustdesk\rustdesk.exe

"C:\Users\Admin\AppData\Local\rustdesk\.\rustdesk.exe" --cm

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x2ec 0x500

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10156 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10224 /prefetch:1

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,13835947000926552391,3401467454051285584,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8860 /prefetch:1

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Users\Admin\Downloads\Bootstrapper.exe

"C:\Users\Admin\Downloads\Bootstrapper.exe"

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Program Files\nodejs\node.exe

"node" -v

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\ProgramData\Solara\Solara.exe

"C:\ProgramData\Solara\Solara.exe"

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Program Files\nodejs\node.exe

"node" "C:\ProgramData\Solara\Monaco\fileaccess\index.js" 047f09bd16c94fd5

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Users\Admin\AppData\Local\Temp\Temp1_Solara.zip\Solara\Solara.exe

"C:\Users\Admin\AppData\Local\Temp\Temp1_Solara.zip\Solara\Solara.exe"

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Users\Admin\AppData\Local\Temp\Temp1_Solara.zip\Solara\Solara.exe

"C:\Users\Admin\AppData\Local\Temp\Temp1_Solara.zip\Solara\Solara.exe"

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\ProgramData\Solara\Solara.exe

"C:\ProgramData\Solara\Solara.exe"

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Program Files\nodejs\node.exe

"node" "C:\ProgramData\Solara\Monaco\fileaccess\index.js" d3336ddf1a124385

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr consent.exe

C:\Windows\system32\cmd.exe

"cmd" /C "tasklist | findstr consent.exe"

C:\Windows\system32\tasklist.exe

tasklist

Network

Country Destination Domain Proto
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 8.8.8.8:53 73.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
GB 95.101.143.182:443 www.bing.com tcp
GB 95.101.143.182:443 www.bing.com tcp
US 8.8.8.8:53 182.143.101.95.in-addr.arpa udp
US 8.8.8.8:53 getsolara.dev udp
US 104.21.93.27:80 getsolara.dev tcp
US 104.21.93.27:80 getsolara.dev tcp
US 104.21.93.27:443 getsolara.dev tcp
US 8.8.8.8:53 27.93.21.104.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 147.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 file.io udp
US 45.55.107.24:80 file.io tcp
US 45.55.107.24:80 file.io tcp
US 45.55.107.24:443 file.io tcp
US 8.8.8.8:53 www.file.io udp
GB 18.245.218.117:443 www.file.io tcp
US 8.8.8.8:53 hb.vntsm.com udp
GB 143.244.38.136:443 hb.vntsm.com tcp
US 8.8.8.8:53 24.107.55.45.in-addr.arpa udp
US 8.8.8.8:53 117.218.245.18.in-addr.arpa udp
US 8.8.8.8:53 107.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
GB 143.244.38.136:443 hb.vntsm.com tcp
US 8.8.8.8:53 hb.vntsm.io udp
US 8.8.8.8:53 hb-vntsm-com.global.ssl.fastly.net udp
US 104.22.47.142:443 hb.vntsm.io tcp
US 151.101.65.194:443 hb-vntsm-com.global.ssl.fastly.net tcp
US 8.8.8.8:53 getsolara.dev udp
US 104.21.93.27:443 getsolara.dev tcp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 216.239.32.36:443 region1.analytics.google.com tcp
GB 74.125.71.156:443 stats.g.doubleclick.net tcp
FR 142.250.201.163:443 www.google.co.uk tcp
N/A 127.0.0.1:6463 tcp
US 8.8.8.8:53 136.38.244.143.in-addr.arpa udp
US 8.8.8.8:53 200.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 142.47.22.104.in-addr.arpa udp
US 8.8.8.8:53 194.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 ad-delivery.net udp
US 104.26.2.70:443 ad-delivery.net tcp
US 8.8.8.8:53 cdn.exelator.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
GB 143.204.176.17:443 cdn.exelator.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 mydmp.exelator.com udp
IE 34.254.143.3:443 mydmp.exelator.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
GB 108.156.39.15:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 156.71.125.74.in-addr.arpa udp
US 8.8.8.8:53 163.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 174.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 9.223.224.13.in-addr.arpa udp
US 8.8.8.8:53 17.176.204.143.in-addr.arpa udp
GB 23.53.174.156:443 secure.cdn.fastclick.net tcp
GB 23.53.174.156:443 secure.cdn.fastclick.net tcp
US 8.8.8.8:53 34.215.58.216.in-addr.arpa udp
US 172.67.36.110:443 cdn.hadronid.net tcp
US 8.8.8.8:53 3.143.254.34.in-addr.arpa udp
US 104.22.53.86:443 cdn.id5-sync.com tcp
US 8.8.8.8:53 onsite-tag-logs.apps.nielsen.com udp
US 8.8.8.8:53 load77.exelator.com udp
US 3.224.96.103:443 onsite-tag-logs.apps.nielsen.com tcp
GB 84.17.50.8:443 load77.exelator.com tcp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 104.22.4.69:443 id.hadron.ad.gt tcp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 proc.ad.cpe.dotomi.com udp
FR 172.217.20.206:443 fundingchoicesmessages.google.com tcp
NL 63.215.202.146:443 proc.ad.cpe.dotomi.com tcp
US 8.8.8.8:53 a.ad.gt udp
US 104.22.4.69:443 a.ad.gt tcp
FR 172.217.20.206:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 15.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 156.174.53.23.in-addr.arpa udp
US 8.8.8.8:53 110.36.67.172.in-addr.arpa udp
US 8.8.8.8:53 86.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 103.96.224.3.in-addr.arpa udp
US 8.8.8.8:53 8.50.17.84.in-addr.arpa udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 146.202.215.63.in-addr.arpa udp
US 8.8.8.8:53 206.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 117.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 116.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 pastebin.com udp
US 172.67.19.24:443 pastebin.com tcp
US 8.8.8.8:53 lh3.googleusercontent.com udp
FR 142.250.178.129:443 lh3.googleusercontent.com tcp
US 8.8.8.8:53 clientsettings.roblox.com udp
GB 128.116.119.4:443 clientsettings.roblox.com tcp
US 8.8.8.8:53 24.19.67.172.in-addr.arpa udp
US 8.8.8.8:53 234.75.250.142.in-addr.arpa udp
US 8.8.8.8:53 131.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 129.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 4.119.116.128.in-addr.arpa udp
US 8.8.8.8:53 oa.openxcdn.net udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 p.cpx.to udp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
US 8.8.8.8:53 secure.quantserve.com udp
US 8.8.8.8:53 pub.doubleverify.com udp
US 8.8.8.8:53 cdn-ima.33across.com udp
US 8.8.8.8:53 static.criteo.net udp
US 34.102.146.192:443 oa.openxcdn.net tcp
IE 34.248.228.76:443 p.cpx.to tcp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 104.18.22.145:443 cadmus.script.ac tcp
US 104.18.35.167:443 cdn-ima.33across.com tcp
US 104.18.167.224:443 pub.doubleverify.com tcp
DE 91.228.74.166:443 secure.quantserve.com tcp
GB 18.245.143.100:443 tags.crwdcntrl.net tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 8.8.8.8:53 www.nodejs.org udp
US 8.8.8.8:53 apps.identrust.com udp
US 104.20.22.46:443 www.nodejs.org tcp
GB 173.222.211.8:80 apps.identrust.com tcp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
US 104.18.167.224:443 pub.doubleverify.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 rules.quantcount.com udp
IE 52.51.104.112:443 bcp.crwdcntrl.net tcp
NL 185.89.211.116:443 ib.adnxs.com tcp
US 52.223.40.198:443 match.adsrvr.org tcp
GB 18.245.187.41:443 rules.quantcount.com tcp
US 8.8.8.8:53 i.clean.gg udp
US 34.95.69.49:443 i.clean.gg tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 s.cpx.to udp
IE 34.248.228.76:443 s.cpx.to tcp
GB 18.154.87.148:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 cdn.edkt.io udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 34.120.111.33:443 cdn.edkt.io tcp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 apex.go.sonobi.com udp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
FR 5.196.111.64:443 prg.smartadserver.com tcp
FR 5.196.111.64:443 prg.smartadserver.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
NL 145.40.97.77:443 prebid.a-mo.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
DE 18.199.220.232:443 btlr.sharethrough.com tcp
DE 18.199.220.232:443 btlr.sharethrough.com tcp
DE 18.199.220.232:443 btlr.sharethrough.com tcp
DE 18.199.220.232:443 btlr.sharethrough.com tcp
US 172.64.153.66:443 elb.the-ozone-project.com tcp
US 34.95.69.49:443 i.clean.gg udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 192.146.102.34.in-addr.arpa udp
US 8.8.8.8:53 87.70.96.34.in-addr.arpa udp
US 8.8.8.8:53 145.22.18.104.in-addr.arpa udp
US 8.8.8.8:53 167.35.18.104.in-addr.arpa udp
US 8.8.8.8:53 100.143.245.18.in-addr.arpa udp
US 8.8.8.8:53 224.167.18.104.in-addr.arpa udp
US 8.8.8.8:53 76.228.248.34.in-addr.arpa udp
US 8.8.8.8:53 166.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 46.22.20.104.in-addr.arpa udp
US 8.8.8.8:53 8.211.222.173.in-addr.arpa udp
US 8.8.8.8:53 112.104.51.52.in-addr.arpa udp
US 8.8.8.8:53 198.40.223.52.in-addr.arpa udp
US 8.8.8.8:53 116.211.89.185.in-addr.arpa udp
US 8.8.8.8:53 49.69.95.34.in-addr.arpa udp
US 8.8.8.8:53 41.187.245.18.in-addr.arpa udp
US 8.8.8.8:53 148.87.154.18.in-addr.arpa udp
US 8.8.8.8:53 169.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 33.111.120.34.in-addr.arpa udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 image2.pubmatic.com udp
IE 54.229.112.66:443 track.venatusmedia.com tcp
DE 37.252.171.21:443 secure.adnxs.com tcp
FR 172.217.20.194:443 cm.g.doubleclick.net tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
NL 198.47.127.205:443 image2.pubmatic.com tcp
US 8.8.8.8:53 pixel.quantserve.com udp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 54.239.38.253:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 csi.gstatic.com udp
US 8.8.8.8:53 api.edkt.io udp
US 142.251.177.120:443 csi.gstatic.com tcp
US 34.120.111.33:443 api.edkt.io tcp
US 8.8.8.8:53 nodejs.org udp
US 104.20.22.46:443 nodejs.org tcp
US 8.8.8.8:53 gum.criteo.com udp
US 34.120.111.33:443 api.edkt.io udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 c77d594f820c8c3b5bff71305610ecff.safeframe.googlesyndication.com udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
FR 142.250.179.65:443 c77d594f820c8c3b5bff71305610ecff.safeframe.googlesyndication.com tcp
FR 216.58.215.34:443 ep1.adtrafficquality.google tcp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
US 34.120.111.33:443 api.edkt.io udp
NL 185.235.87.59:443 ag.gbc.criteo.com tcp
FR 178.250.7.13:443 dnacdn.net tcp
FR 185.235.86.102:443 gem.gbc.criteo.com tcp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 66.153.64.172.in-addr.arpa udp
US 8.8.8.8:53 64.111.196.5.in-addr.arpa udp
US 8.8.8.8:53 77.97.40.145.in-addr.arpa udp
US 8.8.8.8:53 151.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 232.220.199.18.in-addr.arpa udp
US 8.8.8.8:53 176.168.78.3.in-addr.arpa udp
US 8.8.8.8:53 162.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 64.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 66.112.229.54.in-addr.arpa udp
US 8.8.8.8:53 21.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 194.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 205.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 253.38.239.54.in-addr.arpa udp
US 8.8.8.8:53 120.177.251.142.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 65.179.250.142.in-addr.arpa udp
FR 178.250.7.13:443 dnacdn.net tcp
NL 185.235.87.59:443 ag.gbc.criteo.com tcp
FR 185.235.86.102:443 gem.gbc.criteo.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
FR 216.58.214.162:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
US 8.8.8.8:53 cdn.doubleverify.com udp
FR 216.58.214.162:443 googleads.g.doubleclick.net tcp
GB 173.222.211.18:443 cdn.doubleverify.com tcp
FR 142.250.179.97:443 ep2.adtrafficquality.google tcp
FR 142.250.179.97:443 ep2.adtrafficquality.google tcp
US 8.8.8.8:53 162.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 18.211.222.173.in-addr.arpa udp
US 8.8.8.8:53 97.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 142.250.179.68:443 www.google.com tcp
FR 142.250.179.68:443 www.google.com tcp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 8.8.8.8:53 102.86.235.185.in-addr.arpa udp
US 8.8.8.8:53 13.7.250.178.in-addr.arpa udp
US 8.8.8.8:53 59.87.235.185.in-addr.arpa udp
US 8.8.8.8:53 68.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 5.44.211.130.in-addr.arpa udp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
NL 145.40.97.77:443 prebid.a-mo.net tcp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 sync.mathtag.com udp
US 151.101.1.108:443 acdn.adnxs.com tcp
US 8.8.8.8:53 x.bidswitch.net udp
US 76.223.111.18:443 eb2.3lift.com tcp
US 8.8.8.8:53 p.rfihub.com udp
GB 2.18.108.192:443 ads.pubmatic.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 216.200.232.249:443 sync.mathtag.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 52.71.88.198:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 match.sharethrough.com udp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
NL 193.0.160.130:443 p.rfihub.com tcp
US 34.120.133.55:443 api.rlcdn.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
FR 172.217.20.194:443 cm.g.doubleclick.net udp
DE 18.195.234.25:443 match.sharethrough.com tcp
DE 18.195.234.25:443 match.sharethrough.com tcp
DE 18.195.234.25:443 match.sharethrough.com tcp
US 8.8.8.8:53 153.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 108.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 192.108.18.2.in-addr.arpa udp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 249.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 55.133.120.34.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 130.160.0.193.in-addr.arpa udp
US 8.8.8.8:53 198.88.71.52.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 25.234.195.18.in-addr.arpa udp
US 8.8.8.8:53 sync.go.sonobi.com udp
US 8.8.8.8:53 c1.adform.net udp
US 69.166.1.35:443 sync.go.sonobi.com tcp
DK 37.157.3.26:443 c1.adform.net tcp
US 69.166.1.35:443 sync.go.sonobi.com tcp
US 8.8.8.8:53 gum.aidemsrv.com udp
US 104.17.43.93:443 gum.aidemsrv.com tcp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 8.8.8.8:53 player.aniview.com udp
GB 92.123.140.19:443 player.aniview.com tcp
US 8.8.8.8:53 onetag-sys.com udp
DE 51.89.9.254:443 onetag-sys.com tcp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 23.214.129.249:443 secure-assets.rubiconproject.com tcp
US 8.8.8.8:53 st.pubmatic.com udp
NL 185.64.189.221:443 st.pubmatic.com tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
NL 185.64.189.221:443 st.pubmatic.com tcp
GB 95.100.245.251:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 s0.2mdn.net udp
NL 185.64.189.221:443 st.pubmatic.com tcp
US 8.8.8.8:53 35.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 93.43.17.104.in-addr.arpa udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 19.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 254.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 221.189.64.185.in-addr.arpa udp
US 8.8.8.8:53 249.129.214.23.in-addr.arpa udp
US 8.8.8.8:53 26.3.157.37.in-addr.arpa udp
FR 142.250.178.134:443 s0.2mdn.net tcp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 35.168.53.250:443 cs-server-s2s.yellowblue.io tcp
FR 142.250.178.134:443 s0.2mdn.net udp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
FR 142.250.179.98:443 googleads4.g.doubleclick.net tcp
FR 142.250.179.98:443 googleads4.g.doubleclick.net tcp
FR 142.250.179.98:443 googleads4.g.doubleclick.net tcp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 67.202.105.22:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
FR 91.134.110.132:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 dis.criteo.com udp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 ap.lijit.com udp
DE 138.201.8.249:443 sync.richaudience.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 64.74.236.31:443 b1sync.zemanta.com tcp
US 64.74.236.31:443 b1sync.zemanta.com tcp
US 52.2.98.215:443 api-2-0.spot.im tcp
US 8.8.8.8:53 tracker.open-adsyield.com udp
IE 34.250.109.179:443 match.prod.bidr.io tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 8.8.8.8:53 134.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 251.245.100.95.in-addr.arpa udp
IE 63.34.115.21:443 ap.lijit.com tcp
US 8.8.8.8:53 250.53.168.35.in-addr.arpa udp
US 8.8.8.8:53 22.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 132.110.134.91.in-addr.arpa udp
US 8.8.8.8:53 98.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 tpsc-ew1.doubleverify.com udp
US 172.111.38.54:443 tracker.open-adsyield.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 8.8.8.8:53 bttrack.com udp
DE 138.201.8.249:443 sync.richaudience.com tcp
US 8.8.8.8:53 id.rlcdn.com udp
US 192.132.33.67:443 bttrack.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 cacerts.rapidssl.com udp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 t.adx.opera.com udp
DE 51.89.9.254:443 onetag-sys.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 spl.zeotap.com udp
US 80.77.87.166:443 cs.admanmedia.com tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
US 104.22.51.98:443 spl.zeotap.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
US 8.8.8.8:53 sync.adotmob.com udp
US 8.8.8.8:53 cms.quantserve.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
FR 45.137.176.88:443 sync.adotmob.com tcp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 sync.aniview.com udp
US 172.240.45.78:443 sync.aniview.com tcp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
FR 217.182.178.234:443 rtb-csync.smartadserver.com tcp
FR 217.182.178.234:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 179.109.250.34.in-addr.arpa udp
US 8.8.8.8:53 21.115.34.63.in-addr.arpa udp
US 8.8.8.8:53 215.98.2.52.in-addr.arpa udp
US 8.8.8.8:53 31.236.74.64.in-addr.arpa udp
US 8.8.8.8:53 54.38.111.172.in-addr.arpa udp
US 8.8.8.8:53 249.8.201.138.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 67.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 98.51.22.104.in-addr.arpa udp
US 8.8.8.8:53 88.199.214.35.in-addr.arpa udp
US 8.8.8.8:53 115.158.57.154.in-addr.arpa udp
US 8.8.8.8:53 166.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 52.46.155.104:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 73.80.16.104.in-addr.arpa udp
US 8.8.8.8:53 88.176.137.45.in-addr.arpa udp
US 8.8.8.8:53 234.178.182.217.in-addr.arpa udp
US 8.8.8.8:53 78.45.240.172.in-addr.arpa udp
US 8.8.8.8:53 104.155.46.52.in-addr.arpa udp
US 8.8.8.8:53 token.rubiconproject.com udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 8.8.8.8:53 ade.googlesyndication.com udp
FR 142.250.201.162:443 ade.googlesyndication.com tcp
FR 142.250.201.162:443 ade.googlesyndication.com tcp
US 8.8.8.8:53 162.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 c6ff8eb7.solaraweb-alj.pages.dev udp
US 172.66.44.59:443 c6ff8eb7.solaraweb-alj.pages.dev tcp
US 8.8.8.8:53 59.44.66.172.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
FR 5.196.111.64:443 prg.smartadserver.com tcp
NL 185.89.211.116:443 ib.adnxs.com tcp
US 8.8.8.8:53 240.221.184.93.in-addr.arpa udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 8.8.8.8:53 ib.3lift.com udp
GB 18.245.187.52:443 ib.3lift.com tcp
US 8.8.8.8:53 52.187.245.18.in-addr.arpa udp
FR 142.250.179.98:443 googleads4.g.doubleclick.net udp
FR 142.250.201.162:443 ade.googlesyndication.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
FR 5.196.111.64:443 prg.smartadserver.com tcp
NL 185.89.211.116:443 ib.adnxs.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 45.55.107.24:443 file.io tcp
US 45.55.107.24:443 file.io tcp
US 45.55.107.24:443 file.io tcp
US 45.55.107.24:443 file.io tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp
FR 5.196.111.64:443 prg.smartadserver.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
NL 185.89.211.116:443 ib.adnxs.com tcp
FR 216.58.215.34:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 www.file.io udp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
FR 142.250.179.98:443 googleads4.g.doubleclick.net udp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
US 8.8.8.8:53 74.239.69.13.in-addr.arpa udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
NL 185.89.211.116:443 ib.adnxs.com tcp
FR 5.196.111.64:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 ep1.adtrafficquality.google udp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 ads.pubmatic.com udp
FR 142.250.179.98:443 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 tlx.3lift.com udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
NL 185.89.211.116:443 ib.adnxs.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
FR 5.196.111.64:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 ced-ns.sascdn.com udp
GB 23.214.129.249:443 secure-assets.rubiconproject.com tcp
GB 92.123.140.96:443 ced-ns.sascdn.com tcp
GB 92.123.140.96:443 ced-ns.sascdn.com tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 apps.sascdn.com udp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
GB 95.100.245.251:443 eus.rubiconproject.com tcp
GB 92.123.142.232:443 apps.sascdn.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
US 8.8.8.8:53 www14.smartadserver.com udp
US 8.8.8.8:53 96.140.123.92.in-addr.arpa udp
FR 149.202.238.96:443 euw2.smartadserver.com tcp
NL 81.17.55.161:443 www14.smartadserver.com tcp
FR 142.250.179.98:443 googleads4.g.doubleclick.net udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
NL 81.17.55.161:443 www14.smartadserver.com tcp
US 8.8.8.8:53 232.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 161.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 96.238.202.149.in-addr.arpa udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
FR 5.196.111.64:443 euw2.smartadserver.com tcp
NL 185.89.211.116:443 ib.adnxs.com tcp
FR 216.58.215.34:443 ep1.adtrafficquality.google udp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
FR 149.202.238.96:443 euw2.smartadserver.com tcp
NL 81.17.55.161:443 www14.smartadserver.com tcp
FR 142.250.179.98:443 googleads4.g.doubleclick.net udp
NL 81.17.55.161:443 www14.smartadserver.com tcp
US 8.8.8.8:53 region1.analytics.google.com udp
US 216.239.34.36:443 region1.analytics.google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
NL 185.89.211.116:443 ib.adnxs.com tcp
FR 5.196.111.64:443 euw2.smartadserver.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 eb2.3lift.com udp
FR 142.250.179.98:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 32.1.166.69.in-addr.arpa udp
FR 142.250.178.134:443 s0.2mdn.net udp
US 8.8.8.8:53 tpsc-ew1.doubleverify.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
NL 185.89.211.116:443 ib.adnxs.com tcp
FR 5.196.111.64:443 euw2.smartadserver.com tcp
FR 216.58.215.34:443 ep1.adtrafficquality.google udp
FR 142.250.179.98:443 googleads.g.doubleclick.net udp
FR 142.250.178.134:443 s0.2mdn.net udp
US 8.8.8.8:53 ade.googlesyndication.com udp
FR 142.250.201.162:443 ade.googlesyndication.com udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
NL 185.89.211.116:443 ib.adnxs.com tcp
FR 149.202.238.97:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 www.file.io udp
FR 142.250.179.98:443 googleads.g.doubleclick.net udp
FR 142.250.178.134:443 s0.2mdn.net udp
US 8.8.8.8:53 97.238.202.149.in-addr.arpa udp
US 34.120.111.33:443 api.edkt.io udp
GB 92.123.142.139:443 www.bing.com tcp
GB 92.123.142.139:443 www.bing.com tcp
US 8.8.8.8:53 139.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.142.161:443 th.bing.com tcp
GB 92.123.142.161:443 th.bing.com tcp
GB 92.123.142.137:443 th.bing.com tcp
GB 92.123.142.137:443 th.bing.com tcp
US 8.8.8.8:53 161.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 137.142.123.92.in-addr.arpa udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
IE 20.190.159.75:443 login.microsoftonline.com tcp
US 8.8.8.8:53 75.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
US 8.8.8.8:53 rustdesk.com udp
SG 45.76.181.120:443 rustdesk.com tcp
SG 45.76.181.120:443 rustdesk.com tcp
SG 45.76.181.120:443 rustdesk.com tcp
US 8.8.8.8:53 68.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 d3e54v103j8qbb.cloudfront.net udp
GB 18.245.246.114:443 d3e54v103j8qbb.cloudfront.net tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 120.181.76.45.in-addr.arpa udp
US 8.8.8.8:53 114.246.245.18.in-addr.arpa udp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 89.33.18.104.in-addr.arpa udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
FR 142.250.201.163:443 www.google.co.uk udp
BE 74.125.71.157:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 img.shields.io udp
US 172.67.173.89:443 img.shields.io tcp
US 8.8.8.8:53 157.71.125.74.in-addr.arpa udp
US 8.8.8.8:53 89.173.67.172.in-addr.arpa udp
GB 18.245.246.114:443 d3e54v103j8qbb.cloudfront.net tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 185.199.109.133:443 avatars.githubusercontent.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 8.8.8.8:53 private-user-images.githubusercontent.com udp
US 185.199.110.133:443 private-user-images.githubusercontent.com tcp
US 8.8.8.8:53 133.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 154.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 133.110.199.185.in-addr.arpa udp
US 8.8.8.8:53 collector.github.com udp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 api.github.com udp
US 140.82.113.21:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 21.113.82.140.in-addr.arpa udp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 8.8.8.8:53 crt.sectigo.com udp
US 104.18.38.233:80 crt.sectigo.com tcp
US 8.8.8.8:53 rs-ny.rustdesk.com udp
NL 209.250.254.15:21116 rs-ny.rustdesk.com tcp
NL 209.250.254.15:21116 rs-ny.rustdesk.com tcp
NL 209.250.254.15:21115 rs-ny.rustdesk.com tcp
NL 209.250.254.15:21116 rs-ny.rustdesk.com udp
US 8.8.8.8:53 15.254.250.209.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
NL 209.250.254.15:21116 rs-ny.rustdesk.com tcp
AU 101.183.228.139:53831 tcp
US 8.8.8.8:53 139.228.183.101.in-addr.arpa udp
NL 209.250.254.15:21116 rs-ny.rustdesk.com tcp
AU 101.183.228.139:53838 tcp
NL 209.250.254.15:21116 rs-ny.rustdesk.com tcp
DE 116.203.239.11:21117 tcp
US 8.8.8.8:53 11.239.203.116.in-addr.arpa udp
NL 209.250.254.15:21116 rs-ny.rustdesk.com tcp
AU 101.183.228.139:53849 tcp
NL 209.250.254.15:21116 rs-ny.rustdesk.com tcp
DE 116.203.239.11:21117 tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
FR 5.196.111.65:443 prg.smartadserver.com tcp
NL 147.75.34.177:443 prebid.a-mo.net tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
FR 142.250.75.226:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 track.venatusmedia.com udp
IE 3.248.98.103:443 track.venatusmedia.com tcp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 180.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 65.111.196.5.in-addr.arpa udp
US 8.8.8.8:53 177.34.75.147.in-addr.arpa udp
US 8.8.8.8:53 4.230.157.18.in-addr.arpa udp
US 8.8.8.8:53 66.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 103.98.248.3.in-addr.arpa udp
US 8.8.8.8:53 226.75.250.142.in-addr.arpa udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
GB 92.123.142.170:443 www.bing.com tcp
US 8.8.8.8:53 170.142.123.92.in-addr.arpa udp
FR 5.196.111.65:443 prg.smartadserver.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
NL 147.75.34.177:443 prebid.a-mo.net tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 66.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.file.io udp
FR 142.250.75.226:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
IE 54.229.112.66:443 track.venatusmedia.com tcp
GB 18.245.218.41:443 www.file.io tcp
US 8.8.8.8:53 41.218.245.18.in-addr.arpa udp
US 8.8.8.8:53 getsolara.dev udp
US 172.67.203.125:443 getsolara.dev tcp
US 8.8.8.8:53 pastebin.com udp
US 172.67.19.24:443 pastebin.com tcp
US 8.8.8.8:53 clientsettings.roblox.com udp
GB 128.116.119.4:443 clientsettings.roblox.com tcp
US 8.8.8.8:53 125.203.67.172.in-addr.arpa udp
US 172.67.19.24:443 pastebin.com tcp
GB 128.116.119.4:443 clientsettings.roblox.com tcp
US 172.67.203.125:443 getsolara.dev tcp
FR 216.58.214.163:80 c.pki.goog tcp
US 172.67.203.125:443 getsolara.dev tcp
US 172.67.203.125:443 getsolara.dev tcp
US 172.67.203.125:443 getsolara.dev tcp
US 172.67.203.125:443 getsolara.dev tcp
US 8.8.8.8:53 163.214.58.216.in-addr.arpa udp
N/A 127.0.0.1:63602 tcp
N/A 127.0.0.1:63606 tcp
N/A 127.0.0.1:63609 tcp
N/A 127.0.0.1:63611 tcp
N/A 127.0.0.1:63615 tcp
US 172.67.19.24:443 pastebin.com tcp
GB 128.116.119.4:443 clientsettings.roblox.com tcp
US 172.67.203.125:443 getsolara.dev tcp
US 172.67.203.125:443 getsolara.dev tcp
US 172.67.203.125:443 getsolara.dev tcp
US 172.67.203.125:443 getsolara.dev tcp
US 172.67.203.125:443 getsolara.dev tcp
N/A 127.0.0.1:63686 tcp
N/A 127.0.0.1:63689 tcp
N/A 127.0.0.1:63692 tcp
N/A 127.0.0.1:63694 tcp
N/A 127.0.0.1:63698 tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 8.8.8.8:53 www.file.io udp
GB 18.245.218.29:443 www.file.io tcp
US 8.8.8.8:53 29.218.245.18.in-addr.arpa udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
GB 18.244.138.116:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 csi.gstatic.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
FR 142.250.201.163:443 www.google.co.uk udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 142.250.189.131:443 csi.gstatic.com udp
US 8.8.8.8:53 116.138.244.18.in-addr.arpa udp
US 8.8.8.8:53 131.189.250.142.in-addr.arpa udp
US 8.8.8.8:53 hb.vntsm.io udp
US 104.22.47.142:443 hb.vntsm.io tcp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 104.26.3.70:443 ad-delivery.net tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 pub.doubleverify.com udp
FR 172.217.20.206:443 fundingchoicesmessages.google.com udp
US 104.18.166.224:443 pub.doubleverify.com tcp
US 8.8.8.8:53 rules.quantcount.com udp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 ib.adnxs.com udp
GB 18.245.187.41:443 rules.quantcount.com tcp
US 104.18.22.145:443 cadmus.script.ac tcp
NL 185.89.210.46:443 ib.adnxs.com tcp
US 8.8.8.8:53 i.clean.gg udp
US 8.8.8.8:53 70.3.26.104.in-addr.arpa udp
US 8.8.8.8:53 224.166.18.104.in-addr.arpa udp
US 34.95.69.49:443 i.clean.gg udp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 script.4dex.io udp
GB 23.53.174.156:443 secure.cdn.fastclick.net tcp
IE 3.248.98.103:443 track.venatusmedia.com tcp
US 172.67.75.241:443 script.4dex.io tcp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 8.8.8.8:53 s.cpx.to udp
US 8.8.8.8:53 pixel.quantserve.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
FR 164.132.25.176:443 prg.smartadserver.com tcp
FR 164.132.25.176:443 prg.smartadserver.com tcp
NL 147.75.85.97:443 prebid.a-mo.net tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
DE 3.122.113.82:443 btlr.sharethrough.com tcp
US 104.22.4.69:443 id.hadron.ad.gt tcp
IE 34.248.228.76:443 s.cpx.to tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
DE 91.228.74.166:443 pixel.quantserve.com tcp
US 172.67.75.241:443 script.4dex.io tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 34.120.111.33:443 api.edkt.io udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 image2.pubmatic.com udp
IE 67.220.228.201:443 aax-eu.amazon-adsystem.com tcp
GB 185.64.191.210:443 image2.pubmatic.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 34.120.111.33:443 api.edkt.io udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 8394c98e4671d1e159c2c5cca73b84f5.safeframe.googlesyndication.com udp
US 8.8.8.8:53 tg1.aniview.com udp
FR 142.250.179.65:443 8394c98e4671d1e159c2c5cca73b84f5.safeframe.googlesyndication.com tcp
GB 23.214.142.107:443 tg1.aniview.com tcp
US 8.8.8.8:53 46.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 241.75.67.172.in-addr.arpa udp
US 8.8.8.8:53 176.25.132.164.in-addr.arpa udp
US 8.8.8.8:53 150.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 82.113.122.3.in-addr.arpa udp
US 8.8.8.8:53 97.85.75.147.in-addr.arpa udp
US 8.8.8.8:53 8.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 201.228.220.67.in-addr.arpa udp
US 8.8.8.8:53 210.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 64.98.95.141.in-addr.arpa udp
US 8.8.8.8:53 107.142.214.23.in-addr.arpa udp
US 8.8.8.8:53 83.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
FR 172.217.20.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 ib.3lift.com udp
GB 18.245.187.105:443 ib.3lift.com tcp
US 8.8.8.8:53 105.187.245.18.in-addr.arpa udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 track4.aniview.com udp
US 8.8.8.8:53 player.avplayer.com udp
US 8.8.8.8:53 feed.avplayer.com udp
US 76.223.111.18:443 eb2.3lift.com tcp
US 172.240.45.75:443 track4.aniview.com tcp
GB 95.101.143.233:443 feed.avplayer.com tcp
GB 92.123.140.19:443 player.avplayer.com tcp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 hb.vntsm.com udp
IE 34.254.143.3:443 mydmp.exelator.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
FR 142.250.178.134:443 s0.2mdn.net udp
US 8.8.8.8:53 onsite-tag-logs.apps.nielsen.com udp
US 8.8.8.8:53 233.143.101.95.in-addr.arpa udp
US 8.8.8.8:53 75.45.240.172.in-addr.arpa udp
US 54.237.163.72:443 onsite-tag-logs.apps.nielsen.com tcp
GB 92.123.140.19:443 player.avplayer.com tcp
US 8.8.8.8:53 player.aniview.com udp
GB 92.123.143.216:443 player.aniview.com udp
US 8.8.8.8:53 play.aniview.com udp
US 8.8.8.8:53 content1.avplayer.com udp
US 8.8.8.8:53 www.google.com udp
GB 23.214.142.107:443 play.aniview.com tcp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 go1.aniview.com udp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
US 8.8.8.8:53 i.liadm.com udp
US 8.8.8.8:53 sync.mathtag.com udp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 creativecdn.com udp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 p.rfihub.com udp
US 52.223.40.198:443 match.adsrvr.org tcp
US 8.8.8.8:53 ad.360yield.com udp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 18.210.25.160:443 i.liadm.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 172.240.45.81:443 go1.aniview.com tcp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 216.200.232.249:443 sync.mathtag.com tcp
IE 52.50.71.3:443 pr-bh.ybp.yahoo.com tcp
IE 34.241.217.109:443 ad.360yield.com tcp
US 54.197.234.7:443 sync.srv.stackadapt.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
NL 193.0.160.131:443 p.rfihub.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 72.163.237.54.in-addr.arpa udp
US 8.8.8.8:53 216.143.123.92.in-addr.arpa udp
US 54.197.234.7:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 dnacdn.net udp
FR 178.250.7.13:443 dnacdn.net tcp
US 8.8.8.8:53 sync.go.sonobi.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 image8.pubmatic.com udp
NL 178.250.1.9:443 dis.criteo.com tcp
US 54.197.234.7:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 tracker.open-adsyield.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 gum.aidemsrv.com udp
DE 18.197.30.174:443 match.sharethrough.com tcp
US 8.8.8.8:53 ssc-cms.33across.com udp
NL 46.228.174.117:443 sync.1rx.io tcp
US 69.166.1.67:443 sync.go.sonobi.com tcp
US 23.22.234.152:443 api-2-0.spot.im tcp
DE 157.90.211.246:443 sync.richaudience.com tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 104.17.44.93:443 gum.aidemsrv.com tcp
US 67.202.105.21:443 ssc-cms.33across.com tcp
US 50.31.142.127:443 b1sync.zemanta.com tcp
US 50.31.142.127:443 b1sync.zemanta.com tcp
IE 52.215.131.87:443 match.prod.bidr.io tcp
US 35.244.174.68:443 id.rlcdn.com udp
US 172.111.38.111:443 tracker.open-adsyield.com tcp
IE 54.229.86.78:443 ap.lijit.com tcp
US 192.132.33.67:443 bttrack.com tcp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
DE 51.89.9.254:443 onetag-sys.com tcp
US 69.166.1.67:443 sync.go.sonobi.com tcp
US 23.22.234.152:443 api-2-0.spot.im tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 50.31.142.127:443 b1sync.zemanta.com tcp
DE 157.90.211.246:443 sync.richaudience.com tcp
IE 52.215.131.87:443 match.prod.bidr.io tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
IE 54.229.86.78:443 ap.lijit.com tcp
US 172.111.38.111:443 tracker.open-adsyield.com tcp
US 192.132.33.67:443 bttrack.com tcp
US 69.166.1.67:443 sync.go.sonobi.com tcp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 52.22.3.193:443 cs-server-s2s.yellowblue.io tcp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 52.22.3.193:443 cs-server-s2s.yellowblue.io tcp
FR 5.135.209.101:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 3.71.50.52.in-addr.arpa udp
US 8.8.8.8:53 160.25.210.18.in-addr.arpa udp
US 8.8.8.8:53 81.45.240.172.in-addr.arpa udp
US 8.8.8.8:53 109.217.241.34.in-addr.arpa udp
US 8.8.8.8:53 131.160.0.193.in-addr.arpa udp
US 8.8.8.8:53 7.234.197.54.in-addr.arpa udp
US 8.8.8.8:53 174.30.197.18.in-addr.arpa udp
US 8.8.8.8:53 93.44.17.104.in-addr.arpa udp
US 8.8.8.8:53 87.131.215.52.in-addr.arpa udp
US 8.8.8.8:53 78.86.229.54.in-addr.arpa udp
US 8.8.8.8:53 67.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 152.234.22.23.in-addr.arpa udp
US 8.8.8.8:53 111.38.111.172.in-addr.arpa udp
US 8.8.8.8:53 21.105.202.67.in-addr.arpa udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 s2s.aniview.com udp
US 8.8.8.8:53 optimized-by.rubiconproject.com udp
US 8.8.8.8:53 delivery.redpineapplemedia.com udp
IE 54.78.84.248:443 delivery.redpineapplemedia.com tcp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 172.240.45.78:443 sync.aniview.com tcp
US 172.240.45.70:443 s2s.aniview.com tcp
DE 18.193.17.175:443 optimized-by.rubiconproject.com tcp
GB 2.18.108.192:443 ads.pubmatic.com tcp
GB 23.214.129.249:443 secure-assets.rubiconproject.com tcp
FR 154.54.250.81:443 ads.stickyadstv.com tcp
FR 154.54.250.81:443 ads.stickyadstv.com tcp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 ssp.disqus.com udp
US 8.8.8.8:53 cs.krushmedia.com udp
US 8.8.8.8:53 u.openx.net udp
DE 3.71.149.231:443 ups.analytics.yahoo.com tcp
US 54.197.92.238:443 ssp.disqus.com tcp
US 8.2.110.134:443 cs.krushmedia.com tcp
US 34.98.64.218:443 u.openx.net tcp
DE 51.89.9.254:443 onetag-sys.com udp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 spl.zeotap.com udp
US 8.8.8.8:53 193.3.22.52.in-addr.arpa udp
US 8.8.8.8:53 101.209.135.5.in-addr.arpa udp
US 8.8.8.8:53 248.84.78.54.in-addr.arpa udp
US 8.8.8.8:53 81.250.54.154.in-addr.arpa udp
US 8.8.8.8:53 175.17.193.18.in-addr.arpa udp
US 8.8.8.8:53 70.45.240.172.in-addr.arpa udp
US 8.8.8.8:53 231.149.71.3.in-addr.arpa udp
US 8.8.8.8:53 238.92.197.54.in-addr.arpa udp
US 8.8.8.8:53 134.110.2.8.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 172.67.40.173:443 spl.zeotap.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com udp
GB 95.100.245.251:443 eus.rubiconproject.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
US 8.8.8.8:53 dsp-cookie.adfarm1.adition.com udp
US 172.67.40.173:443 spl.zeotap.com tcp
DE 80.82.210.217:443 dsp-cookie.adfarm1.adition.com tcp
FR 51.178.195.217:443 rtb-csync.smartadserver.com tcp
FR 51.178.195.217:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 sync-tm.everesttech.net udp
US 8.8.8.8:53 cms.quantserve.com udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 151.101.130.49:443 sync-tm.everesttech.net tcp
US 34.98.64.218:443 u.openx.net udp
US 209.54.182.161:443 s.amazon-adsystem.com tcp
US 151.101.130.49:443 sync-tm.everesttech.net tcp
US 8.8.8.8:53 sync.adkernel.com udp
US 209.54.182.161:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 targeting.unrulymedia.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
NL 77.245.57.72:443 sync.adkernel.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
GB 108.138.217.61:443 hb.yellowblue.io tcp
US 8.8.8.8:53 173.40.67.172.in-addr.arpa udp
US 8.8.8.8:53 217.210.82.80.in-addr.arpa udp
US 8.8.8.8:53 217.195.178.51.in-addr.arpa udp
US 8.8.8.8:53 161.182.54.209.in-addr.arpa udp
US 8.8.8.8:53 72.57.245.77.in-addr.arpa udp
US 8.8.8.8:53 61.217.138.108.in-addr.arpa udp
US 8.8.8.8:53 150.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 115.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 imasdk.googleapis.com udp
FR 142.250.178.138:443 imasdk.googleapis.com tcp
US 8.8.8.8:53 0467944fd80a429f98ee58221917303c.safeframe.googlesyndication.com udp
US 8.8.8.8:53 token.rubiconproject.com udp
US 8.8.8.8:53 s.company-target.com udp
US 8.8.8.8:53 ms-cookie-sync.presage.io udp
US 8.8.8.8:53 eu-u.openx.net udp
US 34.96.71.22:443 s.company-target.com tcp
GB 108.156.39.10:443 s.ad.smaato.net tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
IE 108.128.82.205:443 ms-cookie-sync.presage.io tcp
FR 142.250.178.138:443 imasdk.googleapis.com udp
US 8.8.8.8:53 138.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 246.211.90.157.in-addr.arpa udp
US 8.8.8.8:53 10.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 205.82.128.108.in-addr.arpa udp
US 34.96.71.22:443 s.company-target.com tcp
US 8.8.8.8:53 track1.avplayer.com udp
US 172.240.45.76:443 track1.avplayer.com tcp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
FR 142.250.75.226:443 pubads.g.doubleclick.net tcp
FR 142.250.75.226:443 pubads.g.doubleclick.net tcp
FR 142.250.75.226:443 pubads.g.doubleclick.net tcp
FR 142.250.75.226:443 pubads.g.doubleclick.net tcp
US 8.8.8.8:53 22.71.96.34.in-addr.arpa udp
US 8.8.8.8:53 76.45.240.172.in-addr.arpa udp
US 8.8.8.8:53 e10ed109fc18d8494b83a4206c0c1e06.safeframe.googlesyndication.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 de027adfd78150396a47529f2f667fe3.safeframe.googlesyndication.com udp
US 8.8.8.8:53 172405e4da5e8fc26ad9e1b08380ea82.safeframe.googlesyndication.com udp
US 8.8.8.8:53 file.io udp
US 45.55.107.24:443 file.io tcp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 cdn.doubleverify.com udp
GB 173.222.211.11:443 cdn.doubleverify.com tcp
US 8.8.8.8:53 tps.doubleverify.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 8.8.8.8:53 11.211.222.173.in-addr.arpa udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 ade.googlesyndication.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 164.132.25.176:443 prg.smartadserver.com tcp
NL 185.89.210.46:443 secure.adnxs.com tcp
NL 185.89.210.46:443 secure.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
FR 172.217.20.194:443 googleads.g.doubleclick.net udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 172.240.45.81:443 go1.aniview.com tcp
US 172.240.45.70:443 s2s.aniview.com tcp
US 8.8.8.8:53 delivery.redpineapplemedia.com udp
US 8.8.8.8:53 optimized-by.rubiconproject.com udp
IE 54.78.84.248:443 delivery.redpineapplemedia.com tcp
DE 3.123.139.210:443 optimized-by.rubiconproject.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
FR 164.132.25.176:443 prg.smartadserver.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 210.139.123.3.in-addr.arpa udp
US 8.8.8.8:53 www.file.io udp
FR 142.250.75.226:443 pubads.g.doubleclick.net udp
US 8.8.8.8:53 5b871506995d7f614a81eaaeb88266a1.safeframe.googlesyndication.com udp
FR 142.250.201.162:443 ade.googlesyndication.com udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 86fb7c13f3483f01d18c4795f2f44b95.safeframe.googlesyndication.com udp
US 8.8.8.8:53 e5812ec5e3d81ccdd645d6088bf7c4df.safeframe.googlesyndication.com udp
US 8.8.8.8:53 8f2f795fb62a038bd535a0a7690b1f6b.safeframe.googlesyndication.com udp
NL 185.89.210.46:443 secure.adnxs.com tcp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
GB 88.221.135.49:443 www.bing.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 34.120.111.33:443 api.edkt.io udp
US 104.26.3.70:443 ad-delivery.net tcp
US 8.8.8.8:53 c.amazon-adsystem.com udp
GB 18.245.189.34:443 aax.amazon-adsystem.com tcp
GB 54.192.139.162:443 c.amazon-adsystem.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
US 8.8.8.8:53 49.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 34.189.245.18.in-addr.arpa udp
US 8.8.8.8:53 162.139.192.54.in-addr.arpa udp
FR 172.217.20.206:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 pub.doubleverify.com udp
US 34.95.69.49:443 i.clean.gg udp
NL 185.89.210.46:443 secure.adnxs.com tcp
US 104.18.167.224:443 pub.doubleverify.com tcp
US 8.8.8.8:53 pixel.quantserve.com udp
DE 91.228.74.159:443 pixel.quantserve.com tcp
FR 164.132.25.176:443 prg.smartadserver.com tcp
FR 164.132.25.176:443 prg.smartadserver.com tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 s.cpx.to udp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
IE 34.248.228.76:443 s.cpx.to tcp
DE 18.199.220.232:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 hb.vntsm.com udp
US 8.8.8.8:53 mydmp.exelator.com udp
US 8.8.8.8:53 159.74.228.91.in-addr.arpa udp
IE 34.254.143.3:443 mydmp.exelator.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 34.120.111.33:443 api.edkt.io udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 8.8.8.8:53 secure.adnxs.com udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 onsite-tag-logs.apps.nielsen.com udp
US 3.224.96.103:443 onsite-tag-logs.apps.nielsen.com tcp
US 8.8.8.8:53 31721f7340d8e9571da3e785fcd28894.safeframe.googlesyndication.com udp
FR 142.250.178.134:443 s0.2mdn.net udp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 8.8.8.8:53 ba16f3fea3fff4580ea89bf788e8dd03.safeframe.googlesyndication.com udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 8.8.8.8:53 match.prod.bidr.io udp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
DE 80.82.210.217:443 dsp-cookie.adfarm1.adition.com tcp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 80.77.87.166:443 cs.admanmedia.com tcp
US 8.8.8.8:53 sync.adkernel.com udp
IE 52.208.228.214:443 match.prod.bidr.io tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 52.223.40.198:443 match.adsrvr.org tcp
NL 77.245.57.72:443 sync.adkernel.com tcp
US 54.205.147.202:443 sync.srv.stackadapt.com tcp
US 50.31.142.127:443 b1sync.zemanta.com tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 50.31.142.127:443 b1sync.zemanta.com tcp
US 54.205.147.202:443 sync.srv.stackadapt.com tcp
US 52.223.40.198:443 match.adsrvr.org tcp
US 69.166.1.67:443 sync.go.sonobi.com tcp
FR 51.178.195.217:443 rtb-csync.smartadserver.com tcp
FR 51.178.195.217:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 match.sharethrough.com udp
DE 18.195.234.25:443 match.sharethrough.com tcp
US 8.8.8.8:53 152.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 214.228.208.52.in-addr.arpa udp
US 8.8.8.8:53 202.147.205.54.in-addr.arpa udp
DE 18.195.234.25:443 match.sharethrough.com tcp
DE 18.195.234.25:443 match.sharethrough.com tcp
DE 18.195.234.25:443 match.sharethrough.com tcp
DE 157.90.211.246:443 sync.richaudience.com tcp
US 172.111.38.111:443 tracker.open-adsyield.com tcp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 192.132.33.67:443 bttrack.com tcp
US 8.8.8.8:53 bid.g.doubleclick.net udp
IE 52.49.93.139:443 ap.lijit.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
BE 74.125.133.154:443 bid.g.doubleclick.net tcp
US 8.8.8.8:53 player.aniview.com udp
US 45.55.107.24:443 file.io tcp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
DE 51.89.9.254:443 onetag-sys.com tcp
DE 157.90.211.246:443 sync.richaudience.com tcp
US 67.202.105.22:443 ssc-cms.33across.com tcp
US 3.209.126.202:443 cs-server-s2s.yellowblue.io tcp
FR 5.135.209.101:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 139.93.49.52.in-addr.arpa udp
US 8.8.8.8:53 154.133.125.74.in-addr.arpa udp
US 3.209.126.202:443 cs-server-s2s.yellowblue.io tcp
US 67.202.105.22:443 ssc-cms.33across.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 a.ctnsnet.com udp
US 35.227.210.113:443 a.ctnsnet.com tcp
US 8.8.8.8:53 202.126.209.3.in-addr.arpa udp
US 8.8.8.8:53 113.210.227.35.in-addr.arpa udp
US 8.8.8.8:53 3dea7f285f225829acc58daa5db0e1b9.safeframe.googlesyndication.com udp
US 8.8.8.8:53 uas.ctnsnet.com udp
US 8.8.8.8:53 tps.doubleverify.com udp
US 8.8.8.8:53 2ce4dacbd21c6ac44d0aec6db767461e.safeframe.googlesyndication.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
FR 142.250.178.138:443 imasdk.googleapis.com udp
US 8.8.8.8:53 cdn.ctnsnet.com udp
GB 89.187.167.38:443 cdn.ctnsnet.com tcp
US 8.8.8.8:53 www.googletagservices.com udp
FR 142.250.201.162:443 www.googletagservices.com tcp
US 8.8.8.8:53 38.167.187.89.in-addr.arpa udp
US 35.227.210.113:443 uas.ctnsnet.com udp
US 8.8.8.8:53 i.ctnsnet.com udp
US 35.186.193.173:443 i.ctnsnet.com tcp
US 35.186.193.173:443 i.ctnsnet.com tcp
US 35.186.193.173:443 i.ctnsnet.com tcp
US 35.186.193.173:443 i.ctnsnet.com tcp
US 8.8.8.8:53 173.193.186.35.in-addr.arpa udp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 cms.quantserve.com udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 8.8.8.8:53 diagnostics.id5-sync.com udp
DE 162.19.138.118:443 diagnostics.id5-sync.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 8.8.8.8:53 118.138.19.162.in-addr.arpa udp
US 35.186.193.173:443 i.ctnsnet.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
DE 18.199.220.232:443 btlr.sharethrough.com tcp
NL 185.89.210.46:443 secure.adnxs.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
FR 164.132.25.176:443 prg.smartadserver.com tcp
DE 18.199.220.232:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 tpsc-ew1.doubleverify.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 8.8.8.8:53 cdn.ampproject.org udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 8.8.8.8:53 161.214.58.216.in-addr.arpa udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.179.68:443 www.google.com tcp
FR 142.250.201.162:443 www.googletagservices.com udp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 81.17.55.112:443 prg.smartadserver.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 8.8.8.8:53 www.file.io udp
FR 142.250.75.226:443 pubads.g.doubleclick.net udp
US 8.8.8.8:53 9706eff0e997088287d07c581f7d3357.safeframe.googlesyndication.com udp
FR 142.250.201.162:443 www.googletagservices.com udp
US 8.8.8.8:53 112.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 ebe4421e5aa441550be0cd74aa5c0a57.safeframe.googlesyndication.com udp
US 8.8.8.8:53 ded0021894bcade17efdc4620fd138aa.safeframe.googlesyndication.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 b182da8d8b61d910417bc08ffa5362d3.safeframe.googlesyndication.com udp
FR 142.250.178.134:443 s0.2mdn.net udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
NL 81.17.55.112:443 prg.smartadserver.com tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 tlx.3lift.com udp
NL 185.89.210.46:443 secure.adnxs.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 8.8.8.8:53 234.78.72.3.in-addr.arpa udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 8.8.8.8:53 www.google.co.uk udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 142.250.201.163:443 www.google.co.uk udp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 tps.doubleverify.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
FR 142.250.201.162:443 www.googletagservices.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
NL 81.17.55.112:443 prg.smartadserver.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
NL 185.89.210.46:443 secure.adnxs.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
FR 142.250.75.226:443 pubads.g.doubleclick.net udp
US 8.8.8.8:53 65e7c0ee7e35aaf9cc15afa0eef195dc.safeframe.googlesyndication.com udp
FR 142.250.201.162:443 www.googletagservices.com udp
US 8.8.8.8:53 9841ab1efedfb718bff0af4dc28e81f4.safeframe.googlesyndication.com udp
US 8.8.8.8:53 95860cc503303fe1afe5ab34433dd0f0.safeframe.googlesyndication.com udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 142.250.179.68:443 www.google.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
FR 142.250.201.162:443 www.googletagservices.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
NL 185.89.210.46:443 secure.adnxs.com tcp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 prg.smartadserver.com udp
DE 3.120.207.148:443 btlr.sharethrough.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
NL 81.17.55.161:443 prg.smartadserver.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 8.8.8.8:53 148.207.120.3.in-addr.arpa udp
US 8.8.8.8:53 www.file.io udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
FR 142.250.201.163:443 www.google.co.uk udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 www.google.com udp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 tps.doubleverify.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
FR 142.250.201.162:443 www.googletagservices.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
NL 81.17.55.161:443 prg.smartadserver.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 8.8.8.8:53 b5f8d1e2ca0444921a205e68ab94da6c.safeframe.googlesyndication.com udp
FR 142.250.201.162:443 www.googletagservices.com udp
FR 142.250.75.226:443 pubads.g.doubleclick.net udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
NL 185.89.210.46:443 secure.adnxs.com tcp
NL 81.17.55.161:443 prg.smartadserver.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
DE 3.120.207.148:443 btlr.sharethrough.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
US 8.8.8.8:53 apps.sascdn.com udp
GB 92.123.142.232:443 apps.sascdn.com tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
US 8.8.8.8:53 www14.smartadserver.com udp
NL 89.149.193.96:443 euw1.smartadserver.com tcp
FR 164.132.25.176:443 www14.smartadserver.com tcp
FR 142.250.178.134:443 s0.2mdn.net udp
US 8.8.8.8:53 96.193.149.89.in-addr.arpa udp
FR 164.132.25.176:443 www14.smartadserver.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 8.8.8.8:53 cfa3d4688dfd79528e87dcbbd46b8bb7.safeframe.googlesyndication.com udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 tpsc-ew1.doubleverify.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 142.250.179.68:443 www.google.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
FR 142.250.201.162:443 www.googletagservices.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
NL 81.17.55.161:443 euw1.smartadserver.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 2060557ffa2e026cf5edbe61e869b008.safeframe.googlesyndication.com udp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 8.8.8.8:53 content1.avplayer.com udp
GB 92.123.143.216:443 content1.avplayer.com tcp
GB 92.123.143.216:443 content1.avplayer.com tcp
NL 81.17.55.161:443 euw1.smartadserver.com tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
NL 185.89.210.46:443 secure.adnxs.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
NL 89.149.193.96:443 euw1.smartadserver.com tcp
FR 164.132.25.176:443 www14.smartadserver.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
FR 142.250.178.134:443 s0.2mdn.net udp
FR 164.132.25.176:443 www14.smartadserver.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
US 130.211.44.5:443 tpsc-ew1.doubleverify.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 6d35d1f5c9db55ab3dcdc59576ff8b9d.safeframe.googlesyndication.com udp
US 8.8.8.8:53 www.google.com udp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 81.17.55.161:443 euw1.smartadserver.com tcp
US 8.8.8.8:53 3e6bd3991502c5ad496c52045576c06c.safeframe.googlesyndication.com udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
NL 185.89.210.46:443 secure.adnxs.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 8.8.8.8:53 apps.sascdn.com udp
FR 164.132.25.176:443 www14.smartadserver.com tcp
NL 89.149.193.96:443 euw1.smartadserver.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
FR 164.132.25.176:443 www14.smartadserver.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 tps.doubleverify.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
NL 81.17.55.161:443 euw1.smartadserver.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
DE 18.156.199.224:443 btlr.sharethrough.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 eb2.3lift.com udp
FR 142.250.178.134:443 s0.2mdn.net udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 224.199.156.18.in-addr.arpa udp
US 8.8.8.8:53 123.172.252.37.in-addr.arpa udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
US 8.8.8.8:53 targeting.unrulymedia.com udp
FR 164.132.25.177:443 prg.smartadserver.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 177.25.132.164.in-addr.arpa udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
DE 18.156.199.224:443 btlr.sharethrough.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 142.250.179.98:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 ib.3lift.com udp
GB 18.245.187.52:443 ib.3lift.com tcp
FR 142.250.178.134:443 s0.2mdn.net udp
GB 18.245.187.52:443 ib.3lift.com tcp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
GB 18.245.218.91:443 www.file.io tcp
US 8.8.8.8:53 91.218.245.18.in-addr.arpa udp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
FR 164.132.25.177:443 prg.smartadserver.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 8.8.8.8:53 www.file.io udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 apps.sascdn.com udp
FR 142.250.179.98:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 www14.smartadserver.com udp
NL 89.149.193.96:443 euw1.smartadserver.com tcp
US 8.8.8.8:53 token.rubiconproject.com udp
FR 178.32.197.49:443 www14.smartadserver.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 8.8.8.8:53 49.197.32.178.in-addr.arpa udp
FR 178.32.197.49:443 www14.smartadserver.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
FR 164.132.25.177:443 www14.smartadserver.com tcp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 targeting.unrulymedia.com udp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 142.250.179.98:443 googleads.g.doubleclick.net udp
NL 89.149.193.96:443 euw1.smartadserver.com tcp
FR 178.32.197.49:443 www14.smartadserver.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
FR 178.32.197.49:443 www14.smartadserver.com tcp
FR 164.132.25.177:443 www14.smartadserver.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 ade.googlesyndication.com udp
FR 172.217.20.194:443 ade.googlesyndication.com udp
US 8.8.8.8:53 prg.smartadserver.com udp
DE 37.252.172.123:443 ib.adnxs.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 164.132.25.177:443 prg.smartadserver.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 164.132.25.177:443 prg.smartadserver.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
DE 37.252.172.123:443 ib.adnxs.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
FR 164.132.25.177:443 prg.smartadserver.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 172.217.20.194:443 ade.googlesyndication.com udp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
FR 164.132.25.177:443 prg.smartadserver.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
FR 164.132.25.177:443 prg.smartadserver.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
DE 3.122.113.82:443 btlr.sharethrough.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 8.8.8.8:53 53.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 pn.ybp.yahoo.com udp
IE 34.249.87.102:443 pn.ybp.yahoo.com tcp
IE 3.248.98.103:443 track.venatusmedia.com tcp
US 8.8.8.8:53 102.87.249.34.in-addr.arpa udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 www.googletagservices.com udp
US 8.8.8.8:53 cdn.js7k.com udp
US 8.8.8.8:53 s.yimg.com udp
GB 87.248.114.12:443 s.yimg.com tcp
GB 87.248.114.11:443 s.yimg.com tcp
FR 172.217.18.194:443 www.googletagservices.com udp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 st.pubmatic.com udp
US 8.8.8.8:53 pixel.adsafeprotected.com udp
US 8.8.8.8:53 194.18.217.172.in-addr.arpa udp
US 8.8.8.8:53 12.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 11.114.248.87.in-addr.arpa udp
GB 185.64.190.89:443 st.pubmatic.com tcp
IE 52.213.92.105:443 pixel.adsafeprotected.com tcp
FR 142.250.178.134:443 s0.2mdn.net udp
US 8.8.8.8:53 static.adsafeprotected.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
GB 18.245.253.100:443 static.adsafeprotected.com tcp
FR 142.250.178.130:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 dt.adsafeprotected.com udp
US 3.219.211.8:443 dt.adsafeprotected.com tcp
US 3.219.211.8:443 dt.adsafeprotected.com tcp
US 3.219.211.8:443 dt.adsafeprotected.com tcp
US 8.8.8.8:53 166.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 89.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 105.92.213.52.in-addr.arpa udp
US 8.8.8.8:53 130.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 beap-bc.yahoo.com udp
US 8.8.8.8:53 100.253.245.18.in-addr.arpa udp
US 3.219.211.8:443 dt.adsafeprotected.com tcp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
FR 142.250.179.97:443 ep2.adtrafficquality.google udp
US 8.8.8.8:53 8.211.219.3.in-addr.arpa udp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
DE 3.122.113.82:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
NL 81.17.55.99:443 prg.smartadserver.com tcp
US 8.8.8.8:53 99.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 nrb.ybp.yahoo.com udp
US 8.8.8.8:53 ib.3lift.com udp
IE 52.210.59.245:443 nrb.ybp.yahoo.com tcp
GB 18.245.187.105:443 ib.3lift.com tcp
US 8.8.8.8:53 img.3lift.com udp
GB 92.123.142.96:443 www.bing.com tcp
GB 13.224.245.31:443 img.3lift.com tcp
US 8.8.8.8:53 245.59.210.52.in-addr.arpa udp
US 8.8.8.8:53 96.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 31.245.224.13.in-addr.arpa udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 prod.tahoe-analytics.publishers.advertising.a2z.com udp
US 54.70.103.160:443 prod.tahoe-analytics.publishers.advertising.a2z.com tcp
US 8.8.8.8:53 160.103.70.54.in-addr.arpa udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
NL 81.17.55.99:443 prg.smartadserver.com tcp
DE 3.122.113.82:443 btlr.sharethrough.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 aefd.nelreports.net udp
GB 173.222.211.40:443 aefd.nelreports.net tcp
US 8.8.8.8:53 40.211.222.173.in-addr.arpa udp
FR 172.217.20.194:443 ade.googlesyndication.com udp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
DE 3.122.113.82:443 btlr.sharethrough.com tcp
NL 81.17.55.99:443 prg.smartadserver.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
NL 81.17.55.99:443 prg.smartadserver.com tcp
US 8.8.8.8:53 apex.go.sonobi.com udp
DE 37.252.171.53:443 ib.adnxs.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 3.78.93.150:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 150.93.78.3.in-addr.arpa udp
US 8.8.8.8:53 9.1.166.69.in-addr.arpa udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
GB 173.222.211.40:443 aefd.nelreports.net udp
US 8.8.8.8:53 prg.smartadserver.com udp
DE 37.252.171.53:443 ib.adnxs.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 3.78.93.150:443 btlr.sharethrough.com tcp
NL 89.149.193.97:443 prg.smartadserver.com tcp
US 8.8.8.8:53 97.193.149.89.in-addr.arpa udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 89.149.193.97:443 prg.smartadserver.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 18.159.212.21:443 btlr.sharethrough.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 ads.eu.criteo.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 track.venatusmedia.com udp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
IE 54.229.112.66:443 track.venatusmedia.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 8.8.8.8:53 cat.nl3.eu.criteo.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 imageproxy.eu.criteo.net udp
US 8.8.8.8:53 csm.eu.criteo.net udp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
US 8.8.8.8:53 17.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 6.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 14.25.17.104.in-addr.arpa udp
US 8.8.8.8:53 15.1.250.178.in-addr.arpa udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 18.159.212.21:443 btlr.sharethrough.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
NL 89.149.193.97:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
NL 89.149.193.97:443 prg.smartadserver.com tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 3.122.113.82:443 btlr.sharethrough.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
US 8.8.8.8:53 aefd.nelreports.net udp
GB 173.222.211.40:443 aefd.nelreports.net udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 3.122.113.82:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
FR 149.202.238.96:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
FR 149.202.238.96:443 prg.smartadserver.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
DE 18.192.67.89:443 btlr.sharethrough.com tcp
NL 185.89.210.244:443 ib.adnxs.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 8.8.8.8:53 244.210.89.185.in-addr.arpa udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
NL 185.89.210.244:443 ib.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 18.192.67.89:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
NL 89.149.192.241:443 prg.smartadserver.com tcp
NL 89.149.192.241:443 prg.smartadserver.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
NL 89.149.192.241:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
DE 3.124.64.248:443 tlx.3lift.com tcp
US 8.8.8.8:53 248.64.124.3.in-addr.arpa udp
NL 89.149.192.65:443 prg.smartadserver.com tcp
NL 89.149.192.65:443 prg.smartadserver.com tcp
US 8.8.8.8:53 65.192.149.89.in-addr.arpa udp
NL 89.149.192.65:443 prg.smartadserver.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
DE 37.252.171.149:443 ib.adnxs.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
DE 18.156.199.224:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 149.171.252.37.in-addr.arpa udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 37.252.171.149:443 ib.adnxs.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
DE 18.156.199.224:443 btlr.sharethrough.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
DE 37.252.171.149:443 ib.adnxs.com tcp
DE 37.252.171.149:443 ib.adnxs.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
US 8.8.8.8:53 225.178.182.217.in-addr.arpa udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
FR 217.182.178.225:443 prg.smartadserver.com tcp
DE 3.122.113.82:443 btlr.sharethrough.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
DE 3.122.113.82:443 btlr.sharethrough.com tcp
DE 3.122.113.82:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
DE 3.122.113.82:443 btlr.sharethrough.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
DE 37.252.171.149:443 ib.adnxs.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
NL 89.149.192.193:443 prg.smartadserver.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
US 8.8.8.8:53 193.192.149.89.in-addr.arpa udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 37.252.171.149:443 ib.adnxs.com tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
NL 89.149.192.193:443 prg.smartadserver.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
DE 18.159.212.21:443 btlr.sharethrough.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 8.8.8.8:53 ib.3lift.com udp
GB 18.245.187.52:443 ib.3lift.com tcp
US 8.8.8.8:53 track.venatusmedia.com udp
IE 3.248.98.103:443 track.venatusmedia.com tcp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 track.adform.net udp
US 76.223.111.18:443 eb2.3lift.com tcp
DK 37.157.6.243:443 track.adform.net tcp
IE 3.248.98.103:443 track.venatusmedia.com tcp
US 8.8.8.8:53 s1.adform.net udp
DK 37.157.4.21:443 s1.adform.net tcp
US 8.8.8.8:53 ad4m.at udp
US 104.26.10.209:443 ad4m.at tcp
US 8.8.8.8:53 243.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 21.4.157.37.in-addr.arpa udp
US 8.8.8.8:53 209.10.26.104.in-addr.arpa udp
US 8.8.8.8:53 rs.ad4m.at udp
US 172.67.74.129:443 rs.ad4m.at tcp
US 8.8.8.8:53 129.74.67.172.in-addr.arpa udp
US 8.8.8.8:53 as.ad4m.at udp
US 8.8.8.8:53 assets.ad4m.at udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
DE 37.252.171.149:443 ib.adnxs.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
DE 18.159.212.21:443 btlr.sharethrough.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
NL 89.149.192.193:443 prg.smartadserver.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
DE 37.252.171.149:443 ib.adnxs.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
NL 89.149.192.193:443 prg.smartadserver.com tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
DE 18.159.212.21:443 btlr.sharethrough.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
DE 18.159.212.21:443 btlr.sharethrough.com tcp
NL 185.89.211.84:443 ib.adnxs.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
US 8.8.8.8:53 84.211.89.185.in-addr.arpa udp
US 8.8.8.8:53 129.110.134.91.in-addr.arpa udp
DE 3.78.168.176:443 tlx.3lift.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
NL 185.89.211.84:443 ib.adnxs.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
DE 3.78.93.150:443 btlr.sharethrough.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
DE 3.78.93.150:443 btlr.sharethrough.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
DE 3.78.93.150:443 btlr.sharethrough.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
DE 3.78.93.150:443 btlr.sharethrough.com tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
US 8.8.8.8:53 212.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 1x1.a-mo.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
DE 52.28.212.4:443 1x1.a-mo.net tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 4.212.28.52.in-addr.arpa udp
FR 91.134.110.129:443 prg.smartadserver.com tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
DE 18.199.220.232:443 btlr.sharethrough.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
DE 18.199.220.232:443 btlr.sharethrough.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
DE 18.199.220.232:443 btlr.sharethrough.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
DE 18.199.220.232:443 btlr.sharethrough.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 164.132.25.176:443 prg.smartadserver.com tcp
FR 164.132.25.176:443 prg.smartadserver.com tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
FR 164.132.25.176:443 prg.smartadserver.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
FR 164.132.25.176:443 prg.smartadserver.com tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 164.132.25.176:443 prg.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
DE 3.78.168.176:443 tlx.3lift.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
DE 18.159.212.21:443 btlr.sharethrough.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
FR 164.132.25.176:443 prg.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
DE 18.159.212.21:443 btlr.sharethrough.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
NL 185.89.210.212:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 18.192.67.89:443 btlr.sharethrough.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
NL 89.149.193.81:443 prg.smartadserver.com tcp
NL 89.149.193.81:443 prg.smartadserver.com tcp
US 8.8.8.8:53 81.193.149.89.in-addr.arpa udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
DE 18.192.67.89:443 btlr.sharethrough.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
NL 89.149.193.81:443 prg.smartadserver.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
NL 89.149.193.81:443 prg.smartadserver.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
DE 18.192.67.89:443 btlr.sharethrough.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
NL 89.149.193.81:443 prg.smartadserver.com tcp
DE 18.192.67.89:443 btlr.sharethrough.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
DE 18.156.199.224:443 btlr.sharethrough.com tcp
NL 81.17.55.99:443 prg.smartadserver.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 track.adform.net udp
DK 37.157.5.133:443 track.adform.net tcp
US 8.8.8.8:53 133.5.157.37.in-addr.arpa udp
NL 81.17.55.99:443 prg.smartadserver.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
DE 18.156.199.224:443 btlr.sharethrough.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
NL 81.17.55.99:443 prg.smartadserver.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
DE 3.120.207.148:443 btlr.sharethrough.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
NL 81.17.55.99:443 prg.smartadserver.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
DE 3.120.207.148:443 btlr.sharethrough.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 b9569e123772ae290f9bac07e0d31748
SHA1 5806ed9b301d4178a959b26d7b7ccf2c0abc6741
SHA256 20ab88e23fb88186b82047cd0d6dc3cfa23422e4fd2b8f3c8437546a2a842c2b
SHA512 cfad8ce716ac815b37e8cc0e30141bfb3ca7f0d4ef101289bddcf6ed3c579bc34d369f2ec2f2dab98707843015633988eb97f1e911728031dd897750b8587795

\??\pipe\LOCAL\crashpad_1744_TBOARQMVFFZLYADN

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 eeaa8087eba2f63f31e599f6a7b46ef4
SHA1 f639519deee0766a39cfe258d2ac48e3a9d5ac03
SHA256 50fe80c9435f601c30517d10f6a8a0ca6ff8ca2add7584df377371b5a5dbe2d9
SHA512 eaabfad92c84f422267615c55a863af12823c5e791bdcb30cabe17f72025e07df7383cf6cf0f08e28aa18a31c2aac5985cf5281a403e22fbcc1fb5e61c49fc3c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a40693a4ee22181edda3d48f9276522f
SHA1 9b33fbee9d788561e6a89b6b0e7c63feadf31edd
SHA256 289275ecc21d3e3327f6fcd052165cc87ed7f8b615b58ed18af1a75c8603a57c
SHA512 7e761e14c2b9de25e656e5bc7597627eeb8ad9c31ebcef04e73f872aa961f158cedd8bcf08a528b81b99ccd10b7b73ce588f4291efbac21ddd15665bdc828e9c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 7e0a27138ce924e184c485c510fcf501
SHA1 fe1125d4b0cff0ec09afd4d8744ecf2957b5b55b
SHA256 398c2ccf266e7f6a28736ddcf66b44edad00ced06c088e47bc3a16c86c920ac5
SHA512 d68ff8b6c3d3db7668dab0df4166f59a274d81ee081a3f343f0dc6c57094385b6e21639e38909f39460b9b91f896853283def31a8ad0cf50f842a42cdd89f142

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0f3b05ad11b08d593090a33b3e2faa81
SHA1 7ba4578019e4910d279cd107adb0e7a8e2bd0317
SHA256 ebfe90a04ec1b0882d57f4c33f2b13fafa66daff59cf187d1820c97a67b94cef
SHA512 1423404e127b519f6f4b61be7308b5b60e40cefb79a0357d03c767c39f2a42b51b2dfbd9bb0777084f9237e01875358e2faff3fb27ed8eac9de971d6ab49b7a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b12e9a172029d36f4f713ce084b510ec
SHA1 525b13f8d7be0650456b237f77b7d7b71dcb5476
SHA256 caf0577319bfe186b026ad536945cfcf071d62964ce722b2deed50b810a86a71
SHA512 a021aec036e2d49ff5971f6a649d5530ff8dc332501d48b3f34d280414c2eb497f19d4dd6f757402f98e3e03948f7e82f616cd1b65b2f62870bad3ad67240f4c

C:\Users\Admin\Downloads\Unconfirmed 141911.crdownload

MD5 4b94b989b0fe7bec6311153b309dfe81
SHA1 bb50a4bb8a66f0105c5b74f32cd114c672010b22
SHA256 7c4283f5e620b2506bcb273f947def4435d95e143ae3067a783fd3adc873a659
SHA512 fbbe60cf3e5d028d906e7d444b648f7dff8791c333834db8119e0a950532a75fda2e9bd5948f0b210904667923eb7b2c0176140babc497955d227e7d80fb109d

memory/1468-139-0x000001C7C2F30000-0x000001C7C2FFE000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e2835a327894af5967f38b465bd5d9ef
SHA1 63c2221e3df59e0b926cbacb19c9d13bd360f790
SHA256 d1fb1e646d1f2c3b5b5d3a2a761de606354fe8d99b25632f6485d710544b771d
SHA512 26b63dfa87b3abdf702edb4c9ba3e071917b13a153dd98c5c939ee0be7d60feb1aec3a34e640c13c9225d7a94dcb27bf56fe759df37a3731fef0f5b361275b0a

memory/1468-222-0x000001C7DD630000-0x000001C7DD652000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\node-v18.16.0-x64.msi

MD5 0e4e9aa41d24221b29b19ba96c1a64d0
SHA1 231ade3d5a586c0eb4441c8dbfe9007dc26b2872
SHA256 5bfb6f3ab89e198539408f7e0e8ec0b0bd5efe8898573ec05b381228efb45a5d
SHA512 e6f27aecead72dffecbeaad46ebdf4b1fd3dbcddd1f6076ba183b654e4e32d30f7af1236bf2e04459186e993356fe2041840671be73612c8afed985c2c608913

C:\Windows\Installer\MSI393B.tmp

MD5 9fe9b0ecaea0324ad99036a91db03ebb
SHA1 144068c64ec06fc08eadfcca0a014a44b95bb908
SHA256 e2cce64916e405976a1d0c522b44527d12b1cba19de25da62121cf5f41d184c9
SHA512 906641a73d69a841218ae90b83714a05af3537eec8ad1d761f58ac365cf005bdd74ad88f71c4437aaa126ac74fa46bcad424d17c746ab197eec2caa1bd838176

C:\Windows\Installer\MSI398B.tmp

MD5 a3ae5d86ecf38db9427359ea37a5f646
SHA1 eb4cb5ff520717038adadcc5e1ef8f7c24b27a90
SHA256 c8d190d5be1efd2d52f72a72ae9dfa3940ab3faceb626405959349654fe18b74
SHA512 96ecb3bc00848eeb2836e289ef7b7b2607d30790ffd1ae0e0acfc2e14f26a991c6e728b8dc67280426e478c70231f9e13f514e52c8ce7d956c1fad0e322d98e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2e57635c98fb7cc60a36e8b5d5f16959
SHA1 c626a3d5abe0f3a73c0a36309764891e35b0ee27
SHA256 b58a28e90c2e3fbe9565aa1d35712b21f540809ed67cd3d46c59f6a39c58da56
SHA512 caa0154fd14bcf102e8730f0f1a6e97be29b7ca33c730f83f3ba3884054ca0dcfcc13247506a61a1538eb386d133be8a44f76828a7852cf5f1d16e0bfdfd8751

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe584457.TMP

MD5 f7da3b6aee8cc6a50327c04b71aa13c0
SHA1 1336f8b461a53302bce7e0f08a31dad5a1dc2c4c
SHA256 398f12aca29e0fcce7e9a7878e67f011a541e9528774139648b98b4a8c67c3a2
SHA512 3d04b19ef246be5fa9c291e2407cf6314467ab82edbb4739d69c91724bbf0b4e983435c920b9d3f3dadf7bfd3c89a403e3077ad1bebd8eaa6d01896c4fd42dbd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 63e172341b3e43dbd465d4fc3401f96d
SHA1 051395b12985deb67b6027756ce6267b01d9249b
SHA256 e69cb89d3ac57d6c7db1e64937cca2ff280e37be68ff7c8d6c7358a1a817ccfe
SHA512 a80c3c3752e4fa138ee14c535f4cefe763a44c6d14a55ab3e7574f5e720bc809300d4624068ccb12fd8f2db45a125d551bdb626f8762d716c2761865d9a486a3

C:\Windows\Installer\MSI51E8.tmp

MD5 7a86ce1a899262dd3c1df656bff3fb2c
SHA1 33dcbe66c0dc0a16bab852ed0a6ef71c2d9e0541
SHA256 b8f2d0909d7c2934285a8be010d37c0609c7854a36562cbfcbce547f4f4c7b0c
SHA512 421e8195c47381de4b3125ab6719eec9be7acd2c97ce9247f4b70a309d32377917c9686b245864e914448fe53df2694d5ee5f327838d029989ba7acafda302ec

memory/5744-449-0x00000276ACEF0000-0x00000276AD9B1000-memory.dmp

C:\Program Files\nodejs\node_modules\npm\node_modules\nopt\LICENSE

MD5 b020de8f88eacc104c21d6e6cacc636d
SHA1 20b35e641e3a5ea25f012e13d69fab37e3d68d6b
SHA256 3f24d692d165989cd9a00fe35ca15a2bc6859e3361fa42aa20babd435f2e4706
SHA512 4220617e29dd755ad592295bc074d6bc14d44a1feeed5101129669f3ecf0e34eaa4c7c96bbc83da7352631fa262baab45d4a370dad7dabec52b66f1720c28e38

C:\Program Files\nodejs\node_modules\npm\node_modules\bin-links\LICENSE

MD5 d2cf52aa43e18fdc87562d4c1303f46a
SHA1 58fb4a65fffb438630351e7cafd322579817e5e1
SHA256 45e433413760dc3ae8169be5ed9c2c77adc31ad4d1bc5a28939576df240f29a0
SHA512 54e33d7998b5e9ba76b2c852b4d0493ebb1b1ee3db777c97e6606655325ff66124a0c0857ca4d62de96350dbaee8d20604ec22b0edc17b472086da4babbbcb16

C:\Program Files\nodejs\node_modules\npm\node_modules\promise-all-reject-late\LICENSE

MD5 7428aa9f83c500c4a434f8848ee23851
SHA1 166b3e1c1b7d7cb7b070108876492529f546219f
SHA256 1fccd0ad2e7e0e31ddfadeaf0660d7318947b425324645aa85afd7227cab52d7
SHA512 c7f01de85f0660560206784cdf159b2bdc5f1bc87131f5a8edf384eba47a113005491520b0a25d3cc425985b5def7b189e18ff76d7d562c434dc5d8c82e90cce

C:\Program Files\nodejs\node_modules\npm\node_modules\aggregate-error\license

MD5 5ad87d95c13094fa67f25442ff521efd
SHA1 01f1438a98e1b796e05a74131e6bb9d66c9e8542
SHA256 67292c32894c8ac99db06ffa1cb8e9a5171ef988120723ebe673bf76712260ec
SHA512 7187720ccd335a10c9698f8493d6caa2d404e7b21731009de5f0da51ad5b9604645fbf4bc640aa94513b9eb372aa6a31df2467198989234bc2afbce87f76fbc3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e441fc6392d5a82dbf39f837560e5924
SHA1 15e86fc78dd60a5f4ba23b0d592c525d0661318d
SHA256 787e3277abe762592857a44fac021738e7cd6a62d5348db191fb1f6eab07a527
SHA512 7bd1ff2ade2ddb3f9e2af87290d7153f04d13d9480c2a1b10e775d707d05923460c6ea4724654a1a3986f6ac996389ee3c27ad7834762ba88a2defc742b210bf

C:\Program Files\nodejs\node_modules\npm\node_modules\minizlib\node_modules\minipass\LICENSE

MD5 d7c8fab641cd22d2cd30d2999cc77040
SHA1 d293601583b1454ad5415260e4378217d569538e
SHA256 04400db77d925de5b0264f6db5b44fe6f8b94f9419ad3473caaa8065c525c0be
SHA512 278ff929904be0c19ee5fb836f205e3e5b3e7cec3d26dd42bbf1e7e0ca891bf9c42d2b28fce3741ae92e4a924baf7490c7c6c59284127081015a82e2653e0764

C:\Program Files\nodejs\node_modules\npm\node_modules\minizlib\node_modules\minipass\index.js

MD5 bc0c0eeede037aa152345ab1f9774e92
SHA1 56e0f71900f0ef8294e46757ec14c0c11ed31d4e
SHA256 7a395802fbe01bb3dc8d09586e0864f255874bf897378e546444fbaec29f54c5
SHA512 5f31251825554bf9ed99eda282fa1973fcec4a078796a10757f4fb5592f2783c4ebdd00bdf0d7ed30f82f54a7668446a372039e9d4589db52a75060ca82186b3

C:\Program Files\nodejs\node_modules\npm\node_modules\tar\node_modules\fs-minipass\node_modules\minipass\index.d.ts

MD5 f0bd53316e08991d94586331f9c11d97
SHA1 f5a7a6dc0da46c3e077764cfb3e928c4a75d383e
SHA256 dd3eda3596af30eda88b4c6c2156d3af6e7fa221f39c46e492c5e9fb697e2fef
SHA512 fd6affbaed67d09cf45478f38e92b8ca6c27650a232cbbeaff36e4f7554fb731ae44cf732378641312e98221539e3d8fabe80a7814e4f425026202de44eb5839

C:\Program Files\nodejs\node_modules\npm\node_modules\libnpmorg\LICENSE

MD5 072ac9ab0c4667f8f876becedfe10ee0
SHA1 0227492dcdc7fb8de1d14f9d3421c333230cf8fe
SHA256 2ef361317adeda98117f14c5110182c28eae233af1f7050c83d4396961d14013
SHA512 f38fd6506bd9795bb27d31f1ce38b08c9e6f1689c34fca90e9e1d5194fa064d1f34a9c51d15941506ebbbcd6d4193055e9664892521b7e39ebcd61c3b6f25013

C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\arborist\LICENSE.md

MD5 2916d8b51a5cc0a350d64389bc07aef6
SHA1 c9d5ac416c1dd7945651bee712dbed4d158d09e1
SHA256 733dcbf5b1c95dc765b76db969b998ce0cbb26f01be2e55e7bccd6c7af29cb04
SHA512 508c5d1842968c478e6b42b94e04e0b53a342dfaf52d55882fdcfe02c98186e9701983ab5e9726259fba8336282e20126c70d04fc57964027586a40e96c56b74

C:\Program Files\nodejs\node_modules\npm\node_modules\minipass-pipeline\node_modules\minipass\package.json

MD5 d116a360376e31950428ed26eae9ffd4
SHA1 192b8e06fb4e1f97e5c5c7bf62a9bff7704c198b
SHA256 c3052bd85910be313e38ad355528d527b565e70ef15a784db3279649eee2ded5
SHA512 5221c7648f4299234a4637c47d3f1eb5e147014704913bc6fdad91b9b6a6ccc109bced63376b82b046bb5cad708464c76fb452365b76dbf53161914acf8fb11a

C:\Program Files\nodejs\node_modules\npm\node_modules\treeverse\LICENSE

MD5 1d7c74bcd1904d125f6aff37749dc069
SHA1 21e6dfe0fffc2f3ec97594aa261929a3ea9cf2ab
SHA256 24b8d53712087b867030d18f2bd6d1a72c78f9fb4dee0ce025374da25e4443b9
SHA512 b5ac03addd29ba82fc05eea8d8d09e0f2fa9814d0dd619c2f7b209a67d95b538c3c2ff70408641ef3704f6a14e710e56f4bf57c2bb3f8957ba164f28ee591778

C:\Program Files\nodejs\node_modules\npm\node_modules\libnpmhook\LICENSE.md

MD5 e9dc66f98e5f7ff720bf603fff36ebc5
SHA1 f2b428eead844c4bf39ca0d0cf61f6b10aeeb93b
SHA256 b49c8d25a8b57fa92b2902d09c4b8a809157ee32fc10d17b7dbb43c4a8038f79
SHA512 8027d65e1556511c884cb80d3c1b846fc9d321f3f83002664ad3805c4dee8e6b0eaf1db81c459153977bdbde9e760b0184ba6572f68d78c37bff617646bcfc3b

C:\Program Files\nodejs\node_etw_provider.man

MD5 1d51e18a7247f47245b0751f16119498
SHA1 78f5d95dd07c0fcee43c6d4feab12d802d194d95
SHA256 1975aa34c1050b8364491394cebf6e668e2337c3107712e3eeca311262c7c46f
SHA512 1eccbe4ddae3d941b36616a202e5bd1b21d8e181810430a1c390513060ae9e3f12cd23f5b66ae0630fd6496b3139e2cc313381b5506465040e5a7a3543444e76

C:\Program Files\nodejs\node_etw_provider.man

MD5 d3bc164e23e694c644e0b1ce3e3f9910
SHA1 1849f8b1326111b5d4d93febc2bafb3856e601bb
SHA256 1185aaa5af804c6bc6925f5202e68bb2254016509847cd382a015907440d86b4
SHA512 91ebff613f4c35c625bb9b450726167fb77b035666ed635acf75ca992c4846d952655a2513b4ecb8ca6f19640d57555f2a4af3538b676c3bd2ea1094c4992854

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Node.js\Node.js documentation.url

MD5 db7dbbc86e432573e54dedbcc02cb4a1
SHA1 cff9cfb98cff2d86b35dc680b405e8036bbbda47
SHA256 7cf8a9c96f9016132be81fd89f9573566b7dc70244a28eb59d573c2fdba1def9
SHA512 8f35f2e7dac250c66b209acecab836d3ecf244857b81bacebc214f0956ec108585990f23ff3f741678e371b0bee78dd50029d0af257a3bb6ab3b43df1e39f2ec

C:\Config.Msi\e583556.rbs

MD5 d9d0b7c8f089c8e48123ead00e18744f
SHA1 b30e5b61f87e489d6aadca70f801c2e078758cfe
SHA256 a295f95e43d407f4b5a240d0f4c28b365e8cabe676a3ac738cfbae1ec755e660
SHA512 eabb60b85d11a2b83656f870cca4f8534b43610805e50cced5930a5d8462d0bdc9eccfcf67967f228bf6a1dd374d222094b344416df46e2b065be7237ac58be9

memory/1468-2817-0x000001C7DD7D0000-0x000001C7DD7DA000-memory.dmp

memory/1468-2820-0x000001C7DD800000-0x000001C7DD812000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db

MD5 bcf2a3db2568e2b9ff2caf0ffd1e8f89
SHA1 da9ed3fd960862c4270e1eed0c62ea733368f0f3
SHA256 bd572d5fca5409321ac63d60356452c6f01842736c56e6ba8637ee42578e1182
SHA512 061228310b6494308446dbf162aa48bdba80f4f55064932feba0e73d8ff6ea2ceb9940533bb365b5f756e03ba4539762f1981933b59e7fab902e615d42fc1bd8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 d35639cbd3a8ff2d6722c72d541921b2
SHA1 0ca6692c24952781c2425372871e2dafa187349a
SHA256 d71a7dc6df1fe200e7ea980343449114affcf58402b24162e510ea7e83555b1c
SHA512 a31def026deb0fcb5d56bf8eff9feeba0b995170149447c453f9f4ff89dc2e190dc9151325ab9dd42fca3ff1b21fe67f52d286ae853520b30539c11f8ab14715

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 5c75a19b3f093c084c1c5289afcb5d09
SHA1 9090e423b409a3da5059bcab18bdb3ca645adb22
SHA256 6eb910f4721a6510a668411a668bf8050448b780373e6bc61cd98e408b501f0c
SHA512 7f56cca618716f9fbf678d613cfc96b56b1b96c8c006e4e307066f04c4d9be87c35f46221b86a08cdba8cdf2b565d39116070e11f53154c1fef97cae5291962f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 503cb227bb2a4452178471eb8e159217
SHA1 09ae0a2f7550fd4680753b0d27076d5967733478
SHA256 6b5f47b798b421e26c91e119c915bc879a384a45a1769e711e21e732101066f1
SHA512 8e7528fcc935a8ad7c33ef0535f47c6c8ba7a64cf3b541b6a0b391999736e2072002c635814f2ff8870e48fc3c080933b815794be2b098b98343dca2e2649e3c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a19bc015ad703e53875efacd4451c4c7
SHA1 768e74e689b1d39d9959d72e2e6b2e1e6e33123f
SHA256 38bea6938046a180adea6168394a9d2f1f1b570290f89f6c5a654a05d3466199
SHA512 d10bae3090ad6fcf94680e9dd36b4b4d507494504d22edd10a3df9ad3774223ad48ca9cb22225c894ab1882d1a1d561f43a4512a6e5fff7bf3a360d144699e56

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025

MD5 230ab95d87a717be265134072eb17c25
SHA1 71a3d3dd6f952057ba0c6025d39c9792ff606828
SHA256 3fdfeaa675697f08f1c7c0fd6b77512f4bf9465e670637e8e332e65ebb9db068
SHA512 9b0636421ad14161f211e846521149ab0a7c866e77db309dba79718487835204cee3821c9f4678e48e134614be6a02421c155a34b7c9bc424012137705960b11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c433f4aaa68d9611e4d82c661b9fcca0
SHA1 9a1d8526c0037f72a695c2b9cab5d20e54c24b00
SHA256 d96194d7ec85fc3c45a0ad097ec699effb5c99a56997c746a41dcb6f3ddebca0
SHA512 5e6aa61cf26de0bbf40d33df1392b56acb02baf48b6b8ddd782a0a64d08248209aea2635bbb3d2e510f02c1777de489a32cb08f755ce202f2fa63c4764d1a3c5

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 1eafdebae036da00179a9608dcf367b3
SHA1 4655dce8134037c96cf8d3b86b56aa1acd2c65ab
SHA256 ec56905e821c53f1b8ec316e985b23e330c4f27acf448236520acae99eec0400
SHA512 fd267c3af98c8af1c9840892b229a5965c0eadd2c23f318b59a93ec2ae144ec2583fa9760c9f5f6c9081ed11b37e9359ac344e63f6f95e0990cb4011bbe2d7a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 db608f0846bd2c995b67eda9e27d3af6
SHA1 295e9e54ca1997ea13053e53492aa4de42c9d840
SHA256 384eb044eed407a2afb747e08a554978a35b08b109b5cf4397acdf4d9a5d6b7b
SHA512 f0c0b8816343d4e9b3dd752ac96c6fa6f4ee0afc87120751e62a831078b802d25367e0750c2e66caa6f00718f517ff1a6725c97a5dd978dd556dcdc9d1becd37

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ac0911ee55a12723f644299bad879da1
SHA1 0d838b62c3319312bbab2b2faaa6993a9a95dde7
SHA256 0e13321262b1feae579f813c24071439a12479deb2f925fab4e64ec71ebe9f43
SHA512 859eb6fdcd81c05210528544a9c474f09fb6051ab442b27afec9db106f0f5a62f64b4742125c4966bc7a992cf42a9c8b14bd3463f7ed0cc69215f95128f154ae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ce700bcabb81807250ffca6b7fc2c981
SHA1 109bf38136d26ca88cf94a212db29a55fa2de159
SHA256 cc56e84927535cde911dcc6646418b8a848ae69188e627b1e2a110bd2c1bb602
SHA512 5a528cdc17f6a9bbf847411c9d0b414392aedd0dabb8c0f2dcbbf8f9f3372f452296c080e90bd1c6389294a5e3146e65c60ad764b35c237c1d2aecdae36bbf9a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

MD5 98f7ded41df9df121c853574b3e7f15e
SHA1 c33dc8e6b84300e1dd99600e453b1c1103719410
SHA256 52dad93b12d78578fb838e07303cb9f137cc1f46a9fbdc8bf4bbf1ace762555d
SHA512 de43441f031169efa3dd8ba99d9735d72f07272c159a505634a53a5cc34cedf7530cbea6aeb720e69c91c903baca27c271fa8288c97c9c4541aac74821118d50

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bb2d0d51c45dfd8fe4cf282fb8dc58a7
SHA1 7b9ac23797290fbea4060e27de44204e43f66f45
SHA256 b95ab437539e464cfdd5725815a03ea805b154b5b71202a6ac47111094e07379
SHA512 95f9294e32549ecd46724e8ba5ae5f5060e28a898e2da074405da23818047afce522b2c199a4e1d35914a0a06de5275956c0f5203faf0a5fd581a6b0a1a0741e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ee86c856d827f90808a26b50148007a6
SHA1 cd65b9fa7a4ec050302086cf7de6ebbe134a030c
SHA256 be4d482ef8002b93449b5dbec559651e56f7ca3f750b0a1db7b42f4447dce6a4
SHA512 0e3770adf89c3ff79b00e1d6ead4f0bc82b3425aabb2489f49ccd9ec1fd22d61a0010fb1cdce32ef6e98f0820e144e6f73c04048d04f4353b572c704c6311caf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9fba1c059e2c89a0e7b3bf926cabfd40
SHA1 e9922bf9093ab39afd33fd94844e941565f7031d
SHA256 928460a624240e9c7a03b23c72baade019c06582aee659bfe56d0a411b28e050
SHA512 7be3d8330b00926f65b614eedddf5b31b85738ed88108de5e1b3977cbabfa4defc0c6de4d88b31e4f6e97e72b20cc4b2eb49007c33733cd6e521dba8a3640c73

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a700e799e8f7e5c4493e4064189660f7
SHA1 cb00b2567221e95276bb07bb8cdec5c0ed232bf7
SHA256 65e49a5e5753aed9c35edf65e604c3dce270f454745e7cdd1656f393b4dba910
SHA512 32b6a9277984d28e7b6f77429dae65cfc970b1214677418ea172a8dfe171634f7e6e35ae165a7730ca2c927baee5fdfdfd3991ef545f88f758222e0cfa68d5ca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 98ca2ff08200a6fe8128bc8cbf7507a5
SHA1 255631b1ca2f39b3045f92b1b0fb2b80503a141f
SHA256 4cda772c1fff243ff9a7f5cdde43471eca75af4bd5654e8c0a14384977e8cc04
SHA512 a32b7ae177291ebd15c5c83fa365d0d1b451ad310ecca8cc46c09b49b15d707d88206dbaa1a43ff33868b5949d33cb21aa2e5f7d077e8d68e3d1d3747bf0c59f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a58a6fe0454a36194c26b88f73bfb099
SHA1 9ad1f41b6164d99214d4aa2652de2a13367fcc23
SHA256 af48441b4f2ebe2d879a396c79d65b88cc813e2e8f72a734249c2fb90498ca10
SHA512 759d393e512a1522fb0a98d4a30c65b31382006c12ecff0556c3e4060d1a0a49c41f8f8915e9ef945c16a9dcbf3a1d2ca36bfe9d5f466c82639b5787f1821615

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2683d8753a0e003b1a578bb716db668e
SHA1 74465cf99f6e34840ae81c7f2fc55e8e8433ed86
SHA256 49dc4bf9b0ee48e8ae90a5ebf404cb64efa1accd5c17d86085fa79fb1a907f26
SHA512 553e26f8812c600bc278a78c177981e7b56fa951952c0eaae02c1b79992635dc8b3a983f7d7a2a995686379bfb9c395a44e8390b93673990ba32e138880495dd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2d2db31610c17423_0

MD5 7f87d8bdc43e2a837980ed0971735560
SHA1 eebb7d07c8e325ff263cf3b5cc4997c55fc04551
SHA256 573eeb0c6d463a108afc10e670a93f29111bf163a5c043af6877ef0654602687
SHA512 b10a335137c45a872995a35aa129a246d92dca6df39a53ebbc353276cadfdb7c5d49edcdd7dcba9e2a91df49427c82ca1788096390f3a945ec635b1a9f3cd37f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8639827639832ac2_0

MD5 bf59062cb8f23daa6097ea5395988465
SHA1 666bf3c9263d8c1eedf83db9f55e148ccd49fcd0
SHA256 addaff973fef70adee5a46ce4cf6191cd81ea8c5da289417b42137e86ecbfbbf
SHA512 36fdf3540ee93129e33b23174983fd40492782fcbfad2448026692f05bf4ba6e3b54d10ca276e4733ff26b5daea26bad86cd23294d92158cea24801ec3636e00

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f61a6913520d4f69_0

MD5 5b20655ac1f03854306752b200c7d4d8
SHA1 397ee39dae6550372fb96d241b58f8c00c0c934d
SHA256 6840ed920a3e13eb2a28692c0f7471fcc0c46d1c7634a53dcf2cd9f5dd0a082e
SHA512 e33fe70c2078dd83b280b8f1fbe971b51e5fb4b881d7f615c92655cf77e274c52b886f39c302973b17f2fb05ebbbfb87823be9f568536917cb91f0b5e31ee6e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\efcc4770f74da3b1_0

MD5 6f52e0e661485165ae9486ea4128212d
SHA1 56b3c5365fe99cbcb822d2b21cb269a956c67064
SHA256 1abd85d9fba4a121cb03549ffe8db1cff25d96ab4c735269c390087b13f6f361
SHA512 67f77726d056164147e7362246ae59eeb6ab293f2604cf29e6af4d2ec5aa2f6550c885f471138eb72379c7e94eaa57c56e0603bd4508c52c3ed2b25ae299b84a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0116a0feccf55c66_0

MD5 217a03d52c554e39449159d16fa83861
SHA1 5ec65ec067da2619cc951d459eac78d9d0a55579
SHA256 4055eca48af5eb5878e654c2d8029ea241d3f38ffb4b4d7f0ea63437a45b7bd4
SHA512 38e3502c4ef819bc15e1ff2697f7eef916c9be4972c392e292fbb02acf90cac5dd20be7b0b43b9bb01971acb6fd011d33e2a751720af71e26698013a5b517119

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 12f03b6fb26cd0a2cdbebb9ace3ccb0b
SHA1 f44afc9027acf1b735fb2d1066346d0a08d95146
SHA256 a084ee1fe8201ffab8c315da2ad5f5d6d514194bd630affe418dd4c10e5ec52a
SHA512 8164defc4ec509cd3d5e39865ba024aea368780e181dfd98a003028580a1bad87ee83b52e66c224e64f36a65d00dc06544162d11f75a8e4ab3e573ab23b9e80c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f7fb05f8fa6e5492401ef0d0d5ea48a0
SHA1 6560e8f8053d98bca9203028013c40a32337c206
SHA256 d296c5fa82b209fed4a702f47bdc96ed44eb138c6838584ca39a502532780d9d
SHA512 ae9d44d3295ba67d88864839e6988512d7b92ee90015f9480ab3664c5cdd786217abd3574ae32071a45b970aa038ff650f3f2760d3724f8291ead587323913d8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b2427719e66c25b9b23459251fd755da
SHA1 af063ba80318ba8a95fbdb9cb565a001517aba4f
SHA256 fcd85b91162933d3e286ea98740242740ae1ebec1ebf5501fcc2ccde2e658ab6
SHA512 9434345b43781964e398990bbdb950e228c6f4e428562b8d8de97caf989eb24471d3d36ac9fccdf4666a5f60dbcbdc0674cefe459c764f3042896be8e0c18a39

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 88edd0456bc831f2f15fd66d926f1360
SHA1 eee289e2eab233e17ea266a4b08785eb17b493b7
SHA256 34c8d32f539b0e974492963c1897c17ec578100c9cdf5f3b59c301158d325255
SHA512 740fd39a0a97904d14579805bf511821318ccfb15493567cfed946347077d6d6d001ca5191765d71f1dc5208fbdd706dfc008b15a0b4cad27cd2d0b51d2cc8a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\877a905fecc610ae_0

MD5 8795be6ab7ef94d350c7bb3bc7325e70
SHA1 5df238a2be320d969736a3df186fb6d75f90c9ff
SHA256 e9cfef0eb9c5a56eb7b54c8c2524731cd6d22414d6ffa17d1577ee1ee5f0d108
SHA512 220a961822f89a32911b61425da5aa67ba3821f6533522e41e412236eb7a3570aa437a84378d8e54f0ff6fca09486cf887617c5f376d92ed1b8be89906da6f8b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 493cd438fe37772e849d974eab115a1e
SHA1 a0c373d173bc2352adbfbbef3bd773be06b655de
SHA256 5ffa3c73bf80536d2b9af5701261d868b81cbd55caf020af3304c762606df23a
SHA512 6452edfbe79d70d8d3e3f680bb6f5a9b6f29f260d73dc557233410ed259a4f4cc091c191ce508068d7463b743ce3d3f3aa1d6cecb5985df938aceab1a6f34c46

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fff7d16587dd5f6ab658280eb0899955
SHA1 764eb6e7d587834f5079945b51732db484f51af6
SHA256 8647b81720af1c4488ec3f79bc6116f75c8c8a16dd4d8bb9ce9b43c0662707f1
SHA512 742f6abb9aa26e41ddf4d0543d605f2d6a4915510a6fb471793e8e12988e999ab66822a0f0a97e9b73089cc1557966d6ff987f45dd0ebde5bdfba486f50b0700

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 b92fe80761f50356e87fc2b35afca98f
SHA1 24e3f8229bd2b80e29ab0a6f004db10db418b81a
SHA256 62899d885caca5dcf99541cb334901ef86e842da2b29ee87d3934774bfc500aa
SHA512 d47801bc8175b0cd5b5f4ef45cdc9d9302389e223cfe7ea36617a7098f8b67a4e90fd6436ea7d38f02c967cece77fb15d679744c3883e0e242b45c11177a50be

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 885a9298b8185c4020a62d559197595d
SHA1 6f1908deaf7ebe557d6325189e01daf061e08cf1
SHA256 7f0c9c832a159787f94d81754471b357baf98aa6d48839c3e9a9a777b95eb85b
SHA512 b0ee01626d1598c7a6e8997d86f0248263ffab31f2a387173ad63d87a811c4cec76e804326f5cfd7140cadb5e408fc2658248d2898b1219e27c34f0132287b94

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0c369ecf9ded3756757e3bf8a132c7ca
SHA1 ac155bc762dc97e731b75ab23f0bb91cb035ec7b
SHA256 f04d3d0e59d94d449aa80cf1cf4df5ae252233286da6a0d6360ad68eb384e900
SHA512 6f84c0dbe06e73a92467bbcf602f86cf8df65c0b6056d853df704dc9d5073a676d623ab266e0a7729119951a7893f4aa5f7a267dc0975292cf0d4e342cbbc55e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 e93848e7f29b9126e8c2ed6b0bc630a7
SHA1 10c9807e351a13104c0ee913fe7002f6324199d6
SHA256 4e857dc011248d1ccd8fcf8972714cccc44d7045e0b9dcc18e663b2d754e4bc6
SHA512 54c9b845fef1dacf236f88e7a7de0d1b36a4a4bd20eb926d81ccb6a3f8e7ff78c04ea24fe757c677a2007249713dde30dbb18edefad38d0ad6888d61aa14fca7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f0cd22ea-3d34-43f8-bfcb-267b6946de0f.tmp

MD5 91cc0c2d49e8c88762d3e14419753648
SHA1 73f7e274d7c0ad9496dce95b15cd8204cff19e18
SHA256 7d5b0460d42a129127176caae34e38868a14b0944bf7fb8ec86c3e8ec998c990
SHA512 91e8ca2e3c99b1ce276876e8396bf574eca726ad7a8c0bf79fe903af051c3ab35358bc58d5d08b10682264d66c29e209ad96cf0525a971861ed28cb7d009a971

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b6b58b0969c4f11d6c6bc68b3298a298
SHA1 be99b4694cd6febb5b653facab7d4165e5796e94
SHA256 adadfe016874e50c5a4b7941861c9ea8dc1aa67b5d43105767258c354f33d906
SHA512 45ac5f018b5ca364e5ff76967e20d8dbcb669da258c94a618bcc1ebf989f6247a7ec930eb7d7e83e8d0cd10c4fe1ceba3b240035849eae71671a2d60bde9f69f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 351b80bf254ceb569f3a18eac6b65081
SHA1 06368700ea8fe0f13527887e455d7c46afa0c06b
SHA256 2010ea82a3f1218a07fad3c378be360f33d7441c7727d3bf496756a767217201
SHA512 84d866cf9141064e5514893b8145ccedec1ac93611d9d1715bbd06b5b3995d8cdc5c898ef79413d7fa3fa14ec849478e0609ee97690ec54bda547e1f6ac1de9c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 05e28d4b6cc14cd84843427e7f032c03
SHA1 1be0225084cfa50168596532b6fa9f920582f4a2
SHA256 1743219ca363949582a1c2ee9c79ce6f8fcaef67820d2e39b8c7ad6b5d351a4d
SHA512 45b85bc41d3333ded254ddfcd867f1d8ce35dfdfe3618c6798a71e759d5d651024084252269fa9f5c6dd7875523282811d561e0833284b95ab6726a1e83a0b95

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 57af091e06e2b4702f69e826550ff354
SHA1 8ee7a559a9519f1aba23c653217bf9ec8ec152e0
SHA256 0be586a807ca9711436d371fa82a58ec8c3d8294e30b8aa4077fecda490775f9
SHA512 6b2ef921166e137700bad7a364749e40bf120b1e03be149d981dd223c821e90110bee927fed1222c94c7bfa2b82298b5ebeae8db85331b95da22a06c8f6cad9c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 aeefec1ef2196935f574807c27252812
SHA1 3e19b0878b85d030d09d8cc35bbf8fb37485eff9
SHA256 c9444f091ebcb56cc84021e7eece855c758f5600cf5c76d026ea470f9a4567cd
SHA512 03a78d1339bd1833917c89207e7a3f69aac06ee8aa7eedd5065cb239d491ca11d46ce71be0ae3ff9d2fe1f8988139a063f264240879b3d77aa6f3c65516a4cb7

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 c6b784b7b98a0277a705b12d38b96409
SHA1 d1f48585d5f476a46f5201438356fcb3325ae9cb
SHA256 4c36af7e6d86cde3c75250c6ab933fb86d757775688f9deb725cd68068c86bcb
SHA512 112fae4ec69d1a1668ac5d23ffb9c54434ae7eafbaf47138e566b4f4722076edffafcb1e80db68a1308c60e626fb2e01f36b1818b569d8d055d73e990564cc11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f57cb7da9159fb84567c96238a68ea80
SHA1 bb7028546464fc12371e126d46e9ab1e92c3ce09
SHA256 134391f8433d52d67e9c9e5736db06f49025b9439dec0992c6d19cee233678b2
SHA512 c50d893a23890d760a4272c20b9ea0d59d4b37dabbc94480073451cefe5c130f9feaa534e05547f0f2ef573010c436c50a96ceca81f78bc8a0eb4364f75afe55

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a68755967a893230087f0454fc1ffddc
SHA1 bf1fdce6008c9c7714f5ef8394cacc9a574322d0
SHA256 113d0c7f604c982262ecf6ddfd4ded988d42afffc5e01f73e1a893be06d42a0d
SHA512 1f833f588d8fbbc2a9a19385c78a47c567cc56885ac7b5d9ef5b530b9fa42bef328807b692aeea20c2aec7f2f38ee586c28e6ebabfb4c59a60f4693eb3b27339

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 f5a6408d882aa7cfa84b32bfaee43bdf
SHA1 0ffdba664669f840248144b0700ab8641b2708ac
SHA256 347aa999de2f746f1275466b42f3b6ed567fbbe7da1cf480979ef8c2bc63098a
SHA512 400ed8241c71b8c4c4b2cd060664d8ad69a5bfdd14789d6ef8d8c9506e5718408f193bcae20477a776534f3b598d3b94bf51a4419f5f31492bb0898ea90fb2c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 26adf91af12d1db2a86e916c66774dd4
SHA1 59f9124555e3fb193a9b169c43b501f24a6cd123
SHA256 6e4dc51f5f8851380091fa052a8be81b074fb3e6cb910882b65094b79db55738
SHA512 642f180998d559c379e619cb3080e7ba31f94ca190a14b5f1a9fb633b857053dfcb94564537b41dc36f7246c0428f129eca6ee1a60152cca4bb3843c2d5b8c55

C:\Users\Admin\Downloads\Unconfirmed 262961.crdownload

MD5 4290817cfd87a61d6a560eec2bc45a2f
SHA1 c78fef619951fa9d782552c0b48a880c065428d0
SHA256 79da93dcd5f2977ec43742d79c2cab9a3c1a54229ca2552130d208dea74f5221
SHA512 0bc8fea192ed101598cc3532d43b03d7ac559095b74fc9ecc38198decfdfa8eff1b3fc7a2c3552ace516451ee02afc4b6da42b4d46028ca8e7d871dcc138f2ba

memory/5744-4257-0x00000276ACEF0000-0x00000276AD9B1000-memory.dmp

memory/2924-4375-0x000002F884890000-0x000002F884891000-memory.dmp

memory/2924-4379-0x000002F8848A0000-0x000002F8848A1000-memory.dmp

memory/2924-4378-0x000002F886AA0000-0x000002F887661000-memory.dmp

memory/2924-4377-0x000002F886AA0000-0x000002F887661000-memory.dmp

memory/2924-4376-0x000002F886AA0000-0x000002F887661000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 50a716036a0c257ff6585ff8c2af2ba4
SHA1 f060325cc7a67d37fa278d7b947c0d6cb202aa86
SHA256 4ab862eb5fb01b68af54825d4710ff4d96e53961a6f051606b873af249cc400a
SHA512 9268529f14aad10c7756b089236d9c1c52efe1a7216e82a04af3aa50a9b8a52118faa4b90fafe3eecf2979849483234c817521f22f7ed395d5e80d1a72688934

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2f6c2e2e88badad5fbae68618a0b4a15
SHA1 51b60178f97705fb2f5bcd35f743721f6b6b33cf
SHA256 211ec2273b2fe4bafbaa010f97c3471805bf89f0a1955483ded4898bd03d0d95
SHA512 7656dc5ec4112d3aca76de0b4ea4624336ca9f8e3ef45d85d5794693d544b007dc7b927df3bba043f9c081bb32ef1da483572b07b03f34dc35ea6bf0db6b12cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 4146cf6e87a8d448a638353b8a588259
SHA1 0429fd483bfd3c7436ebd14e9ad0ef1b06131a81
SHA256 ab3a51db57f3885866ce96ae784d4ea23f6fc241eb04394be9cab96327f44209
SHA512 fe89749647c07eb292a43a0b28d2c77b24a7529a1f6c724d214d008a29344afb0c8a2ca85ce956aa589ee0a0e17f7f5fdb0ef8195acc8ba967cd18e6a5b8ff49

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 255e7bd15b11ac8e81178ec488cd24e1
SHA1 1fe9922a8f98e87b31c164f457903cc5a2392380
SHA256 532e59e7b4fa8c66f2db3a00124af496328ce42836915eb06c38389e732d75c8
SHA512 68d455761c86526bf21a034f0ff4b8b12b771bfbcbeaeeb331c492d9e2dd54181b8a79b221389478142cba1fd3a1ef09fcab6769bdb07754fe13bacb541ca0f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 871d5d823f415ac4ad1f4e9d2ad7d694
SHA1 258537cc9cf4f12d69b8b1221bcb15ab9b359909
SHA256 6190aede3fcec755be24307de04e1f88160675c485a9613251c7ca51fb4e2cde
SHA512 f3d2bd1a6862ccac7a05114a9740b712800eb2098e07d7ec73a962c4e9f89ae4b83fd08633c41b2950de21d2ee01649fe5eb1c0ae8a5728b31319c1afc0164b3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 dda55f43b815c06d17666332fac8c51d
SHA1 734a82df03f3fdbbaef2e3f244d15b6a82ca2bb3
SHA256 e07a1c730a27a622d87cf7d77765447732dbce9d3142f1ba734716af926ada5d
SHA512 1b8828e525bf5f0e214f75f857fd60b4571433615d221724976ac20121c32f308b3b35aeca1311667b29e1d73c4a76c6ca89a5b50971011d27d5ec9b15379327

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 d8f7db7258215e7ace53f66632f51827
SHA1 014873cb231a000c4bb09438235f4aa3c7594e73
SHA256 9e3984e79534f515f1687a99fb3c6c28f98856f45a37affcb7758bc4c5d8ffd4
SHA512 247b4b31622776be1c4040a4affe37f88e8e204f81e576fd46329bf5bf8a762fa9b4bd201c8ee4d9f4631b320c97f867a041518b7369859bf86643566f1a49a6

memory/9944-5521-0x0000028100340000-0x0000028100364000-memory.dmp

memory/9944-5522-0x000002811AEC0000-0x000002811B3FC000-memory.dmp

memory/9944-5523-0x000002811AA80000-0x000002811AB3A000-memory.dmp

memory/9944-5524-0x000002811AB40000-0x000002811ABF2000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\51c733f0-e01e-4552-be6d-1beb328dafdf.tmp

MD5 01f64f27f8baf49dd093979892f26333
SHA1 cd85e27637fe818e6ee5742c03c19b6097dde13a
SHA256 5cad290a60df696060bcad95ac01861de85d7884d08e9edc26c902c98401fc41
SHA512 7937cceab6b0b998c532cb22b1d82cda9847294f2cc8f56c0a69ee28a5d919b33b1998e26f58cc1347140c067bfd93130d275282efffee78dc36c0636b57ca14

memory/9944-5539-0x0000000180000000-0x0000000180F65000-memory.dmp

memory/9944-5541-0x0000000180000000-0x0000000180F65000-memory.dmp

memory/9944-5542-0x0000000180000000-0x0000000180F65000-memory.dmp

memory/9944-5540-0x0000000180000000-0x0000000180F65000-memory.dmp

memory/9944-5551-0x000002811AA40000-0x000002811AA50000-memory.dmp

memory/9944-5552-0x000002811B690000-0x000002811B720000-memory.dmp

memory/9944-5578-0x000002811B660000-0x000002811B668000-memory.dmp

memory/9944-5580-0x000002811F3E0000-0x000002811F418000-memory.dmp

memory/9944-5581-0x000002811F3B0000-0x000002811F3BE000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 513833a0fb60ec5f82a4e65919626587
SHA1 9652d77f2c15bb5b474046325ab4803a8b91cd71
SHA256 ee5de33549c41d18933594d87e0bd4a7e18918016bce28e6687a47d78e979d54
SHA512 8a3e8d04a997901697ffc8a1aacd8b444eb289f69b9e26fb1d541099ca41552b8ac18f0f36859e2e634a95d49e0d298c13db3212a527872d9d4fda79f352f728

memory/9944-5603-0x0000000180000000-0x0000000180F65000-memory.dmp

memory/9944-5609-0x0000000180000000-0x0000000180F65000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 a7a8bab95a5b61bab0443c2f30b6fa2a
SHA1 afde455c5104c10cc156965591be5d2d7107a626
SHA256 904617fbd8226758d58b0df5fc698fc20c354c8f6198903cfe33e0f895d97cfa
SHA512 362698f2ec271f95e937644324911f0045ad04ef0eb0036f6468c7249be0aca841cf8d66e9863e5b3477e940835f032e7a387b47d40c695148ba08bc7c90d21a

memory/9844-5790-0x0000000180000000-0x0000000180F65000-memory.dmp

memory/9844-5793-0x0000000180000000-0x0000000180F65000-memory.dmp

memory/9844-5792-0x0000000180000000-0x0000000180F65000-memory.dmp

memory/9844-5791-0x0000000180000000-0x0000000180F65000-memory.dmp

memory/9844-5831-0x0000000180000000-0x0000000180F65000-memory.dmp

memory/9844-5872-0x0000000180000000-0x0000000180F65000-memory.dmp

memory/9844-5913-0x0000000180000000-0x0000000180F65000-memory.dmp

memory/9844-5963-0x0000000180000000-0x0000000180F65000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

MD5 3e84e33fad2bdc0776fc87ea8473cc60
SHA1 3ec33ddc8f70f42b7fcde1b9b266f146bbd6fec2
SHA256 fd10e98301409c70951d3fd5e2f62abe92e06ad3c340feb99de824ae59f1fb8f
SHA512 8e65aaa5926b8b25061b8c1a9fa76f61d57fca8621fbf383b15b9acc164ff3be94ee1eb48ca3f63e2cbd45f5c2b7c27a0ede25b7a8f779cdc7a95a21db48d878

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

MD5 59cc56c8297fcfc085dc93d738d267de
SHA1 6043795013749f8aa7203db4d9df41359304acb6
SHA256 1d5836d43f99aa0481e9d82f677d962021ef1ad8360773cc5aa49cdae2953af8
SHA512 2b399b864e9249cbd92c89e24c1585a6229292d9d07704beab5b96179d55565e454467ea2d7aeb29a47800192863e51bcd969487301a8ad3cd44ff9718060242

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7ad78671fb0e56f2_0

MD5 3ef597239b32b19dff012932204841cd
SHA1 58a2df1cb50023273260b424aae16bfb9e6b484b
SHA256 a8f6f222141e10f16d163b438564e6cbdb63f4d6f66cc192b44bcb8c03dad8e7
SHA512 72c21cb11ea9e0b998ac06a3abac2d5354290babe1e2fe06d562664f1451c11b28eeee758b69cd03dd5c2c1da662bf1f0af7ce01127491a878154ec7375b4922

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1d0c123db21433ce_0

MD5 2f0db6b2f5ac21ecb5f6a0b11a826080
SHA1 37b005b983b4319eed06d0ff3f884c7b7d195b1f
SHA256 0e1ad62811d5946a304bd26d9e86434388a1b7554fc026a55d2c57348801cd50
SHA512 33880b276d49f12c1440868ee8774e919d93154b7c83f84b8202cd234f129c1536891de52c934eedd39a3052afb5445a799d9396640b75d0fa3d5ee66d8cfb67

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007b

MD5 759eca8f89c3095a05a41b4d7cc21201
SHA1 059790e0a2dc509a18551b7f01acc239c5c4dbd0
SHA256 8550d22e182a409a3ac9227e221d2e1edfc5c0f0762cd2e9fb75528f8c3b8185
SHA512 f03cb2386404db4c3071b9b511e4c6c06f8886ad5aafab49d431031b13a5e47f2705b0967d9a7b47176fad45863f1eebbee9cd3e4af636d3b9dc375e27f47bb3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 69633f74d8db7e66b060b47271b5df2b
SHA1 2195b46c2ff55c17af0794d62524b4d270891762
SHA256 554f15ede4b86a0b80ecffa85981da6ee8b496f5bdee9964f72771d5c72f6273
SHA512 dc0ada37809e8454f2a684b0a6d70c43c66f0e9b77f205376a92f09537a580b09ee27e6e4bdedc899c15af32717bf97536060c4503052b5a1abd018e1684c863

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

MD5 d2320f45999516d37d8a4a20439e21f7
SHA1 a96157c9d1222cb97ced1cf6425441d586d16cf4
SHA256 6ccf17947eb0db44789d338cf59cec7c6208bec7aa45957a4b358854d6785a0a
SHA512 092174c3006dab4a2390969b80901de251ff7990741a22daa5a03195552e5a416038317cb63cb690128a14ec0a07e7d48a154e9722613e3c201c41677a33a7b3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

MD5 a85641dbbc2e737f08a83875d8e7706e
SHA1 6e4acbef413babea2733c3c689ccfd7788e2091e
SHA256 c274acf372114f67c76a61b7df530b657e371997ba617b000363342c0abaf3db
SHA512 9b967a390c47d29be598ea89691f9944927ce2335bd4f296402055b9432941707e2a22672e55d5d6684adf0f2e46506749585b51c53b05631e316065af3916c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ba87c7c065d7f50d6ec37f1f09a257ec
SHA1 fb44da0d37971b76da358106614cdb1320d14f05
SHA256 1fa3a8a06e3a2f4ddebbcae6f034b93943f7f45d31b2c680a46108149fad0bf8
SHA512 7982b96753a71280cc8eaea6e9a6b96621b14d6194e52b97ce96af1c73dc2c6582f37d4a185b7a7742a9ce6b19db852f6fe11c1a65b8a3b4adfc9cbeef6737dd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

MD5 dd3b8285b12e601f81acb1c4750cf167
SHA1 f96aa6825303b9cdd9de9710e295d671bf04bf5d
SHA256 4dea57619fd031b72a6f1507749e5ad8ba60b66b5406685b38f6d36d7666abde
SHA512 33343c3206bede7b15e21214478e693f5d6eb4ba971f18f3b2188ae26ee63c741cbb4ae4a7dcaecc1c52598043d7fe26c1e415ff1f9d8ca54ff63841c84f2bc1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a

MD5 ae1521b4a8ba6eff65fd2e89f6501af5
SHA1 1f286652addedd3cee2eddeda3a201a447167cc3
SHA256 7587198d79deef3ef5b9012d300f7ef9807ccd36e830fc1c8290113726da3e6b
SHA512 96dd9191f8c52b64d266bcdd381d8ca9541c21908d3951f5faf656897cca650df579b26fed4cd910ee010570e8c4cad17e788d81550c41af0b51eec3e6d7f6d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029

MD5 8ce4f30cd023fed9fb478fa430a17a39
SHA1 2ade3f74795174c5580ddb6ceac14daa4b3de212
SHA256 8eb84c730e5c5bdb759ce142a7a2605cddc6f8057aa4eb025591375868b4b833
SHA512 606d26324e803db60d70c3940071c3e8d4af0075ce8fe00d6547014b5c95552739b6ca9977426622ef92679c18045019eaba6387612dc80d6b1fbf75f8910dea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028

MD5 aedf50f6fc0accd5fd25ccaf5dd2eff9
SHA1 23463a3bcc1e21f72113c1142920272917439017
SHA256 bb888aa70ecdd34ceb9b9117d6c613566ed08d8367ccf0f2a7a4aafe7d732a41
SHA512 a5c7f818d3d68664b9a4c4199d62dcba9575afd7b537cdc18c54736ad8fcbd429fd6e430ad5e7f5d5b29d5c48aa1c1063a42c34e4edb0c8178e20b022451a102

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000026

MD5 dd508008d4aacf06ec17af92bce37d3e
SHA1 f2b318fa118c65939c6ae623dbc80dacd3d1f2b3
SHA256 d720b84f23eda4a7f83020bf0a13131b7a618a695bc890a7690088d28af639c9
SHA512 bc1f26997b5ffb75fc7c1aec2d75f2f8d4545f6c631f730160e87bd32b3e04ca82bd29cd8df4afaffc38b561f2f4e61d857e93c33fee7abfdf72f2479085677b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00006f

MD5 681684b98337ff2d590ec8145f8f95d4
SHA1 a3d12dd3e20be6520c06bda3c188ab58478370e6
SHA256 6ed6c1fd7cf2572a27b0de9b5797bda243394eef1cce39c5583b9aa8e9b6ca26
SHA512 0743b836ce01b920723eb59e79ceffe2a068ec1dfb55523ac7850ebd9c432788677f0327c9ce8b27aa60d9d8e9294b08bdda53c20651f38f1cb0be073a859a2c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cb837a8a891343f5_0

MD5 1a144f98072cdb2e62d6a16f28145298
SHA1 c7f4b1315c833960f48f466d69a3b243aee271ca
SHA256 be1fa9b4e8172ac99b938e08509d09e9f1ff2ff2af6cbd5b3e9b374429cf6069
SHA512 f5aa10e56da49cc04a9a377e90881205b14111fb21ddf1944791fe618438f1bb96061bb1680a07f5b670b7c3e075fe3d5b86487afa4743cb7e794710da00d2f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 49f2938b9cd65ecf89f243b6369af15d
SHA1 4f065ffb261c75537b4711830237f1ce473e9ca8
SHA256 b5cb2e870ae132234f769ec42c771692d23b47de544b5132ed995dc8daef0a90
SHA512 cd5524fe89858cfe353dbeda00243b6c352ee523d04e5395012a81be3fd2f2b3c9738c0af832c6013cfb5c83601d9b80b070a53e0cb4bdf994665268ac8e0058

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 3244b28731ed9698c0356cb1e7471581
SHA1 ddd5e07a1268b8a34cfef176134368ab6021382a
SHA256 f1c29315258e3f7dc7769950516e4cb81b2887559c9d23fdb0b05387656e90ab
SHA512 cc0e87dbd5a7424ace549133c04a4870495f0f5f6735cc4f37239de2be46d8cb53ab3e1ecc0878f73dad1c2a6f79a7fa241cca98a6b1cd89390260795550cda3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4ce660a2e921ca28_0

MD5 5a0be8bc3019058c360872a509a6d20e
SHA1 2df5152ea88dfafe327ff517a69c75314652327c
SHA256 a608293d4871f0fac2e93dd47d1cf75b0f8cf871cad41885ae376fc0d7d39c32
SHA512 125bbae23a65667066d714d5eef39ebaddfc82a76e73efe68b9843e638a3d9c743baae23312406e6ac5fefaf0c22cfc66b03288010daaed2641cadfd9d916b0c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fc02d1a1cdb67122c6258f96252f6147
SHA1 68ed1dfc3278441ca1223b64b707dedb6f75f2d7
SHA256 b2397de2ee4d3492e98a0ab7350feb08481bbd4d815fa9dd9c4cc0d69c32a070
SHA512 b95f7a05c4d5e5f542e3a34f676011411f55d46ba4ad3502af49c53a3cc15a5af3800f0dc488d22e2c050c8b09a967bfd8b0f463ef20a805c73a758b2cceb0d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 1021609853596d72a043f9651066247e
SHA1 1072bf3a7a9f8329316b8023a28c5fe9440635aa
SHA256 3fd233ccde60817435407e38c2a9fa0ef415678b4a3fa9acab30e84b1ab940dc
SHA512 c2e80544c60ef574101e272ebc5fbdc35925a4d12954504c5078fa0ad5ac81415548f5bff75dbee8bb709552cbf199f2b208e5c4ed7f29dd92a805bf4ecbe7cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 98c68b153e890f992987678a2b561c55
SHA1 83d2114ad3c1df91815c6f0ef5647b92bf425d47
SHA256 8d2a1244b02acdf676ed998ea96aaed89353c90dfe04abdeb20a5fba2892bddb
SHA512 ce21a4e64b3ac05a19be10a4e12094ae4e6064f27816c9ce5b7c1f3f25e20884764fa18db7bfafeb6de6d484d8e6f32032a3bc2dabbb3c72333b217cdc6e8af0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000089

MD5 3369a80891a1dd34431074532e2ea9b9
SHA1 67dfd9e0885cc89ce85eb122cfb41ba2424a8ce4
SHA256 adb5adb666444b6fff0b958b4e14e624957056beffc49fd40271dfe560b49544
SHA512 009ab0c8a0aae1e4256c1d0bab072f829cb48ba3d2de6c0b6bac73a160f0499696103b48d09bcad224a805e7f72125144e42eb0f5fe560d55fb72d3e484df16f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007a

MD5 22700cf13aa9a910c122151eb5517e46
SHA1 8d630dcf4af88478da2221dedd05ea86cf3f1dce
SHA256 16f4f9709845c6eb54eb6ce79bfb45cc0d8a7460360350b3f4642ed71d47c04e
SHA512 00b8adc3469e842408fd89792b35b99b1e60417c0959643c7ff7ba5565492211d264a9353da5eaa3178f920cc2784e2629358e1898042cb343fef4f967d499d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 6dc1422bc75a10600ce8303b98de9284
SHA1 5d7d303666b091140768ea3c5bf4025d50afcda9
SHA256 dfddeb7643ab33a849b27776e9e35c7ae72fb220db104dae127394068f824154
SHA512 d2d0d2d4bafa2f9417025d88c015a3c78ba74934835317db2de6904d88419c3370ffd5f6b1b9eba287383c34abc7a40804fc817963aefb3b80fbb264b28e41a1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 accd5c712f8bd5ea2896e551ed4a151b
SHA1 41c5494178f0aa34373f77af1a2b70314fca466b
SHA256 8974f0a360ea40f5c970d021c74562b90044333048c35721fbb60d274e114af7
SHA512 7313ad5a0e924df4883b3f057fff1306aff800ea28ce69edc9b8ca986c6d2baf5b03325b40bb3b708b6467ca1da5f49757b649db5127235451007e0ee9d9b0d1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 966c4a2dd013221555a19c9c70bd9191
SHA1 e919b2041c76a6c2b76cd38521572881795e26b3
SHA256 d46f956d30aceca19145408aa791fe0088f40cd68b8ef861c029c050afb9cdfa
SHA512 03906a7b41885f852485b4f824543aa20689dd8e23ec4266f2bd255d77c40950d7cfff07ea55437560933e30656ea1ee76a2b1da6da973316b43344a3d05cd44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 6d7fd6ffa190064e258738b5927b4dfb
SHA1 5a978b34df7ecf256c479cc20b263720a5c58a7a
SHA256 263f068f70a10910e2669566ae13e9a24efeee793e6f7e82b794cb637d8246da
SHA512 d00c690eadad9d4b413308787aa06ae5a6c3ac58f4663c2a343171e44ba1e484ed0dd09de32e9c28999c026a53f414c5b3c631d1465445b074c56a8a9109d074

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

MD5 d8bcd669039cf294da8062c256546c12
SHA1 9bd023a49fcc7d355a8f25546038aedaa6128bd1
SHA256 f3d2b178fa8a71f154c1a72b67b559a832bb97dd9550d25c359e9c75def4912c
SHA512 556ddeec5d1a61a3476437c7d66bffce9ad16c06d530a94ec9fd8dc8fa69145b640f17f517a35dd64da6e943890786bc30128908e3f34d3dba364a29951e7bac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 8dcc3ce492aacd49826644747af780cb
SHA1 40f38c13094da268117716ec4909a083bd63ef0f
SHA256 68466276c04241805935fa34a6988ee3b38c4624a34c945b8b64421a93de785c
SHA512 6f7aea33973950b314695923b8bab954e00af7561fadfea3221db41e675c68dd759ef15af2dbc871c3bc19e8ff8401adc536aab64bc4eea5da7283129b87ac90

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 7a9e335fa2b7a681d9be22d7486df14d
SHA1 66ae23a082f9209b0d07edbdcab4720a252a4459
SHA256 4cacb56852590107bea46eae59d9eaa5d0c10bcff4d2c75ea1fd741445059d3a
SHA512 9e6ca2c451c3ca4a5a44e4cd6f434fb58b97b568dd3737258829c8df2b0ce2983f0a5b50f4b39a7e72cf3a7df66962fe13039bce756a20e1b0552c8f9d5f1187

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 96534422450be12228d388fa2ba4222f
SHA1 2428ea57496dd0548351bfc43703de3c58b4dd0b
SHA256 12b3207f7b68e259c29968ffa8d7f2773c7595ff77f18ba49e81508536e5ef5a
SHA512 d06aa98330ee190e36505c0c5797c48e4a0c19c9bd078dcb5ae64c14d88471e393bf4a9f653aae2fea6bd1a15fe78495d3ba3e5cde7be54746170e321274bc19

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

MD5 c8ba828417c0ac0e4ada6c6188590e95
SHA1 e87433c65abe417c8a616ea3ad3b8c8f3c675ebe
SHA256 06c67dc2adbb94895b4e002e3a0cf20dadd9fb3b3507746ef16b84bfe3216393
SHA512 7a6196d1c73249c4923053cf7c06553cf7524cc1316bd2c53684df0e297ce7f94543e3bbc78888d88efd2a9d778db5981cbb95294ad093af5e4167645b530d73

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

MD5 7c63e5972e3f45dc777939914ce3ed04
SHA1 e4f04a5849afc1cbe806081db5f60eb21886ba71
SHA256 9e33fa575137c6122d9d37c782ea4fb54ef4c642c3e9527aa3c0609598fc2b7a
SHA512 f25034c03190ddbd71a4579449b763b8e836fabe34d2d17ecc729b85130701c64c05415c85330ff0f8d9192ed393cb0c30b794630b3bd9bd3f28c7dc24b6fef7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

MD5 89a574ff00e6b0ec61d995d059ce6e65
SHA1 aea09e96808ab77165ffa712eaa58b8f056d0bb6
SHA256 e5c29c139842fd487473d0824f2c01b374680fb35d22fa929686d17896602a44
SHA512 30d0d40bd680e61968273155b740901cdfa66670fc2af6f23e44c6b998b67cc1fcd0b51bd5f9470f209f188e75d071355e592b2a7c97f4bfd15d07d455e0909d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

MD5 cfa2ab4f9278c82c01d2320d480258fe
SHA1 ba1468b2006b74fe48be560d3e87f181e8d8ba77
SHA256 d64d90cc9fa9be071a5e067a068d8afda2819b6e9926560dd0f8c2aaabeca22e
SHA512 4016e27b20442a84ea9550501eded854f84c632eeced46b594bcd4fc388de8e6a3fbfe3c1c4dbd05f870a2379034893bfd6fd73ac39ef4a85cbf280ab8d44979

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

MD5 8a42ba5472aa4afa3d3ac12f31d47408
SHA1 2add574424ac47c1e83b0b7fae5d040c46ac38a7
SHA256 759bfec59bce5ddea7751b7f93408074a8c27cb2c387b08b6b9f4aa111266ec4
SHA512 3e1081a6e1c29f6dae28ab997c551a6d107d4f4b7e0981a19ba81a30a4e420dee1791321dca8f4b500c9e7e4a41c5e5c75013a72e5a5cde3f7e6c50393eb10b0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

MD5 c55dbb2a5e2048f8ac7b88cafbe13ab6
SHA1 6629572a0fd059184b4e5c57687fa414fa7283d3
SHA256 a82abfaf7dd683f673153324de1295a2a952e5b40fbbc581b5fc39603883f5cb
SHA512 61336d53f5f14636ad0552e92bafec6ab262faea08d28143dbe6f631bd6be86ed1b6b2dd5a2127cde53a1405ee4bc8384c3327521571917dc22c7fd553f108aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000032

MD5 388986d1dc22033c2a992ac82a42de2e
SHA1 b3a82f1452b1e761b373eb95f95c964b60330cdf
SHA256 8c1028282aa23a5c5884659c96c1426d8783981cd384930bd9f90920462ef10c
SHA512 0312b4b055742a29d412d67d8c264b0e6a6d208a4654bda9a8b867db66a9c25052dce7679ce5cd608213f9b5be466cb03aeeb38d85ed00f1b20e4a5c63b01991

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d8716ac8f8593d5b_0

MD5 517cfcb9cd6511d6c713191d5576dfc1
SHA1 31ed1603f35f0c2a55a877afe936820a5b198658
SHA256 44305b8d094fb49fbc1314570e88ae768e9f384727fda684d4468a6530c0248b
SHA512 d3cd8e2e22cab4ffd017f9d5cd214ff465b8ff727a36d920cbe914e8bfe501801d3ff974a59f90d261c2d2057a7ac2055a9316659676d94dbacca3349ffd93d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fa40a7032771e4f8_0

MD5 02ba16ccff2acd77c73cf8f7964108c3
SHA1 9f8de72477f85acd17ebe22a3340cbb9cc1e14f8
SHA256 0c505275a9e8a1695f844f46594ab508a3ff8e395540521f0490cd4044c61f54
SHA512 de6645486d5ea0c025058fc808b1d8e429f5adcae96cbcd2dfeaa3e5d4ab541a00f3b00ad1f19ff83e5f9a440cb27b277f283993b26479444c2b6902bbe3c014

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d5e42077b85df235_0

MD5 f98eaf727828f93fa33dbf9714b1eb9b
SHA1 0994c06c9f6dfc8e106a144dcc4e37bd60ede1da
SHA256 e3f0dd356d6a6f1bb1a282be0cfe62036e2833442eb0271b9cf87de1ba6393a8
SHA512 6ddd1d0cf0c4ad7cc53c374db2cdc114f56b6b894cfff30973ebd435e6582269c983ba1e061130a8b85b515a573e83f12e17e361ed42049a68a632badc0c17c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

MD5 9c6b5ce6b3452e98573e6409c34dd73c
SHA1 de607fadef62e36945a409a838eb8fc36d819b42
SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f9f4ebfe8de7d862_0

MD5 0dcee4e48664621029d6435b1a13b3ad
SHA1 77b0363dceb010da35a6c3517fbcd926691cb6e2
SHA256 f11b8f9d0300b03b6f9176f62f494fde746378de4309b23fbbf521e491cb7b18
SHA512 fa66580b8523d588bdc2d10f4a18dcbabc89603a5ccaeb54a5aa27b127e59aa7b9e7fe7b2f3252e883f3601b5c2858358bb7051c4494a49358399ea869a44c40

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\32d3b04885599b26_0

MD5 9b17f3bc5ce769bfee025ed97cc22159
SHA1 4d4490a0a343f3211f03208eaade823eeb56ca3c
SHA256 ee81b31762d5eef927bade498af42f6a4f10a157063bc77f3dcc99bb7aadc5cf
SHA512 a5b8cd17bf1600b79d25d57afbffb80d0689445da85c10c322cc9f58f82a02d0599283a17c85a382c2aa167e4717a3794b1500160875bf7625109593131a2fe0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1d36563bff1e326c_0

MD5 131245c77cf7a0816a04867beb3733b3
SHA1 fc7f5c44815c05b3bd0547c145147c2b85270a92
SHA256 4077e05c616d72073440deb9660cf5b1618bd6bf3a0584b352261f17e663f547
SHA512 740dbbc61657ccac7e3d34cbb28244f05072512ab7bee116efc7a62137fd93c2610cbf37d7458db100678382b45fd74b4db68a8ed47350ff347ffb428e7c06a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\03025726f37330da_0

MD5 643dda16e81ee363fc980a6497e1c5e9
SHA1 084a8597012d3ea7c48528455b88d8952a30c9bc
SHA256 c313cc08b7daa5c569cb3bbd50831b20db9dca77590b24a03558ed4fb3f046b5
SHA512 e73a65e17e44d156185596c2cd6d46a2a663214a0de5ecbafe3d1d54c1817f83f01f1f71adc6a6bbce5a8d4ee42f8e3b0ff9d63e552db24d8b7ab6143b8c3f4b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ee0c890c5dcb92ff_0

MD5 f76c879b6d9c8a4e864821fadb8d5fe9
SHA1 25e0e58964c2c0fc923ac1be927a5703e4d8b4e9
SHA256 ceebc9dabda87e2206055abe88cc952db0d19ca643259e428c5328f8955c7219
SHA512 5b9cda35fbebfb6e98ebc8970f130fc30b1c9e1cd8af790990cba26b8aace5efb1337f6caa6408d20f57cccc0c2fd18995d40959754ec496e579b84f45641473

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2bfde39962961371_0

MD5 99b894004331b6a2f75a3dcd98896159
SHA1 67a7eb4319bcdec6547b8a78d6b8a80bea8abfed
SHA256 537a10de52783957928279ed7734c431be78226957afa9aeb8b7a3701d0f2858
SHA512 19a7a0313496ee80294586d1b84a39585564860f24be432201bf14ec83f5de36e2679ecebffc268191b3383c630d4eaf43d5da012e0d2d8192d1821368f62e46

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f1f835e5cc9e75b9_0

MD5 eee82c9cdbed842035eff0e9a608f6c1
SHA1 8f84b9801e365e8926bc5bbddcb707ce628464f0
SHA256 07c093eebc79672b80a97c7d3db6eaff7ae9d5b4e07487d925e56863ca60772d
SHA512 c29b9dc88c0ebe420402e6b7ea28a685247328f667a9c0106aebd5a1ced2442d623ecc1c511bea170c65039681d113ea811dde922bf9007dc1be45c99978c649

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4ce660a2e921ca28_0

MD5 833460f5698dac1c60fcdb70c2e49bf4
SHA1 e9bad58f1c30ba5f363ab73e730a418e9dc66212
SHA256 3b367cdf8211ca7f0f2c078eb22734b6d20a692d70141bb7fc2ac66320954b98
SHA512 ff9efd2448ea0c5d314fd5ddbeedf88c1182cd99f8991db3bf3845612812380795d3f5be28356816ba69dbed702509b6f8ba78ff07e860269d713a071a4af01f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\336a68eaaf209f48_0

MD5 77ed37c67bfe203ae316d667a0d565c8
SHA1 625a2b0ce9e38f13bc7a522262b6e04f868a6fb5
SHA256 acdf79614730955477e04dd472db7d550df1afc9e94cb81ed5fc743cca202ead
SHA512 55a65512574418a097f4c4cf4f3ef4a7a7cea0bfe55b2b11a9cece4d0973fe05043788b1c3cb3ba81197876bf5814aac42fd059c06279db071aaa74522c39aa9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dc52c74ae5c0c107_0

MD5 53b754cdca585a3cc800121d41a41100
SHA1 6c1cde24d6c8447cf35ddcff2913339028044a59
SHA256 1f7fd9524dc1a440bce541f0f5fd3ca042bbd989f65f84a505bbabdd69dab692
SHA512 a970a025df871e1fbf5e1d694362ffbce913472e2c6288dfbe8e8a9296628d710194bfaf247acdf74c475f9cb2c13cb3f09948ae5d7c67bd0e2a5ff350bfc58e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daaaa19d5347b6e3_0

MD5 c98ea1c6b403fffde119d486a07939ab
SHA1 dd7309abf018b61994d93e69b7f695e2417d91e2
SHA256 faee22f8b787ca0aff1952568ee0f094f6e2917cfddd208a5697f46cfd2e50aa
SHA512 8dbf212ab75cbf83ecc0ae1774773c8fd9ceadcac86962cde6d63f7ad78b47bb7ed8739c2fb9fd77701de753977fd759358cd8c813056c0ecba7f7e3e3bb255a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dd612e83819f93cf_0

MD5 8e0890f09ee4785b80b6b3c39bc0989e
SHA1 d981e4d83a2030084897f6180ccb1080d2b384e2
SHA256 94d1d2c5ca6835de1e07f55df7abad159cc46b64b73d077b922bdb4135024e0f
SHA512 6e832d22cc13b079b641471b799d165e53eba519b6c376654e9e8dbbc0a6aa4b46cfb1f5083ab093508e0ca951bfb44e48bf13a299edfeb4d992aa1ff3926bb6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\77efb14a4769d95b_0

MD5 028383e29fa5c7a3b58b64405063d764
SHA1 1be56fa80fe08459a52a685d88964ddf2c44aa5a
SHA256 e14d838572e4dfa789dbcbd05ce683dcab80a1350aef9b880058a4c7b94c3212
SHA512 7ea1af6fb01d4784d791916fb39582dc9d11a1e55e28c92d890875f552bad74c58dc4d9891d5b7b873b02d7a17e75d6b161c7f93defe80c8d9fc143ec0ec7d76

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 16452c944865dc9cb90265477dc08e40
SHA1 f4c17a10e76013cf68b820c7c0789b57429afefe
SHA256 7c8a930268ba2108eea21bd54dd857fb1b9703f6d85e2108c4fa90c32944bc94
SHA512 edb7930281780d932f89dcb52e5c5182a863acc14b46fc548779b1885e8a8f09c905c845e4bef292f2b0cb290b0560644aa2b01d36c989ac7aeb1724fc41b5f5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9b43dd40e4cbc2a83e04418e4b0f1b60
SHA1 494e4df827f44de232d6e49b27a6e9a20e0cc9b7
SHA256 e047903386f2c6ad610a6a0040c6c4d782ffeeec492ee437cc31948fbe48008b
SHA512 3bf0c8bdb8bb8ccccc3df96c03ee06c4882261c7db7f97ec8a08f19a31b01e196a3a590944a6d5fc3d1384246b7cf14d8d2cb2972900a5be930308cf8ac6b6f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 381b56c740a9d7c8ace8009c50cf3a2f
SHA1 96a49dfe8b584d99a02e65909485d58c8d029508
SHA256 9bacb26e45a15a54780515182afc9bf9f7c2f078273f7e1fd5c017eeb1144635
SHA512 2a0646c07a856f0c590b02ea2a95142fa8850a878198f2dd9cd1089eeae03a735ee076ee67515584cde9cafe449a0fafeed0836ef57b0c720bd30cf9993f1039

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 51b7851d93b7ddf618cd4ead370827e2
SHA1 16549641c89109b440ed3201b7b540b4a11ec98e
SHA256 12615e03076e841110e20c8cd9db041017d2eebbd504e68b2e4e5a98caf3c7be
SHA512 a440c7ab87d6dff16df2be7f68383cd4edde6e72e5f363f8f63c19db6b3096961d08fc98ee3ba43b531c025b5676730552d69bae4eb43945de15c3f7f42aa140

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1acf56c9819e6c58f803cec1385b7dc7
SHA1 24dc69626b903f5a3e1ba52fc9d223a2613fc6df
SHA256 45b8ff18a597e3987e37d665ec605097004af13c0e733ffc20c1c6f7bc7ae1d6
SHA512 7e005db1bf3917fbdb063223e9c619727166d42dbb3fa5efdc4687b9578f71a4350b54529bf1b2b4785f328d0f088e90cd605bbf83f1ee304661df46edd41efe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a4

MD5 34b19c88bca8ecfd23059b8257100c46
SHA1 40810397549fe35a1c0a289503f2d0dfd5d61620
SHA256 3435c3e42de4679fc8f7ca1425070d21e052b0aa2d9e19c55e5df527e44960ab
SHA512 e0846d256bff8ddc84c283d5fcff0f85398a10bc6d4f2de1ba12047f5e3926a2f6d51eb4859f3c24bba12fe23426e97f30ab4d88a6d4f7bf2013913a0633b6f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 316927e4337b3913dc74a4ecf7f023e0
SHA1 b6caa3bdeb81d4db403bdaef2fd4997e54e513ac
SHA256 fa288a0bab702b471fda780f77508425322921c99c7c9f2fa4fa66e2ad77bb28
SHA512 35d2587e4621ccb9215a915aae984371c9222237c7c928791f533ae39a38c39ba30ddece98afdb9bb26e4cd534d4104596b6efaacd05d9f67d585d67c05435d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c4106558d7b41cf7c3ae1f09dfc43c3f
SHA1 5d825a7ec42193640ad9b57c084ee89c382eb0bc
SHA256 54b121726f52beb74aad0b72eebf6aaebec1e05f73207e19a6fb7c5d7daa2fd4
SHA512 823c62614bd72a1d9434b5f7a7ae868a916f98740d3dc578b9fdcedcc770db20ac00d75bae80bb89a4863f2d1ef55e751373ea56fbb600056a4b6f47aae0e450

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 0fbae63b34734f64d1baa14d2f79ca20
SHA1 66a7ff0e0734b556c344e08e3ebbc187ef3e86bb
SHA256 256cb45003a7e05638ff82e42529518cc7471387870d208cfe4b87296ce770a3
SHA512 3f81983e9f768de39591edf9daf0b4d5ba0abfdc03efe3c8c2e42fa01b0f6e5f17b43c000daece5e6cb1380ab2537def2ed34a5255126a7750ef54d8da87ba79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0ca4572f3dbd7a1a_0

MD5 441e5d26837dbb1505d41627a9b59cc8
SHA1 e6d6c134aca7c05244e0a0fb7de30cac026fbed9
SHA256 d23d9153e4147d7795942cd76d5459efe0ed3c90c8e6ea5dc5ef1e21a93bf4da
SHA512 4d9baa2666271025153cf396125fa98fe1e9786a483bc94eccecf07795d307f447ba3d1125805e9df891db17f9dc50e5e2c615bf7fb7bd0a6d955920997914ba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e435b1d355cbac67_0

MD5 0a54d8da2d4846040002070f69718ff4
SHA1 9aa4461fcc9d49f1799442e56445ec5c92c89b08
SHA256 f8d1aa42c75255866d77d037600ffaccb17a449998f7371befe09b98e01ff965
SHA512 3eb3f385662b667f8620ff5987156214944be941af37de2fcd38ca964842b886c46b9f123fbc6df59a5c0bdb9b315a6a8ef99ee4f68924ce55d52700bbd29102

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6ad1a5bef090b736_0

MD5 7cce541bb1b4b5ad90d976f0676384fa
SHA1 a4566973249d99e264456f281739b3adaf3333d8
SHA256 5109d93023e18317111954fa47051f077b9e9a7e1e92082918e53546c81b8203
SHA512 101132b4ffb8a31cdbdc56b0be5229a3fe80683536db9b958e2c12b98ba433b3ca39279b477d370bb453233c54b370d17d7ed10d9d0ffc6381a2c762c8ebf092

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ad

MD5 e7be269216715e67887c0527b5bbe744
SHA1 e30e1dff94d1234d2aa55df5b61af3a2feeefda9
SHA256 f2c87a012019b499a08afa9e216d93b3fed57b8da2cc32e8f1bd1b64d21824d9
SHA512 a9eacc2f659e87c99798c498268dfe10390b5b17037eece705ed5c8c61d7d02770c623220149da753d29e2abab413e845540a9b2f32265c14f2f48fa9b5be488

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a7

MD5 6b04ab52540bdc8a646d6e42255a6c4b
SHA1 4cdfc59b5b62dafa3b20d23a165716b5218aa646
SHA256 33353d2328ea91f6abf5fb5c5f3899853dcc724a993b9086cab92d880da99f4d
SHA512 4f3b417c77c65936486388b618a7c047c84fb2e2dd8a470f7fe4ffec1ad6699d02fa9c1bbd551414eef0f2e6747a9ee59ca87198b20f9f4a9a01394ae69fa730

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a8

MD5 c03ff64e7985603de96e7f84ec7dd438
SHA1 dfc067c6cb07b81281561fdfe995aca09c18d0e9
SHA256 0db8e9f0a185bd5dd2ec4259db0a0e89363afa953069f5238a0537671de6f526
SHA512 bb0fd94c5a8944a99f792f336bb8a840f23f6f0f1cb9661b156511a9984f0bb6c96baf05b7c1cf0efb83f43a224ecea52740432e3cfc85e0799428765eefb692

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1379ed015153044d_0

MD5 18035639314c761b776635cbcdc73f62
SHA1 e5a94c85ce3fa250882ed024681dd99422c920db
SHA256 51c1827b305957162ab1d3efc6812b6ecde7d86b3c9f93e06ea6dd6c7624fb5b
SHA512 694704302116cc34e507ceefb35fe6169c3335026095a622019f26d6762b9b267a5ffd089cd532cc99c551654517ee2276287783b74df20e42dafbbb91387839

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 10dba73d061c811ae955e6771610f314
SHA1 5d4bffa4465a0fed4513c98cbd92f6c61684feee
SHA256 63a66cd1d5b3f82384d9be05a57fe708c81a06e07fa5be5b22239594a1eca7e3
SHA512 55ce045c6dec883a6309101ff0256d2ff73d17ff15c1645689d2f0fb4f7a28aac0edba72bd9738bc1432100ce1c87ba3ea5be4cfb953532f0bf239f4b7df3e8c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 73117399ef16edd8a3051f276f53ad4e
SHA1 7ee84453caa207c4903a89087369ceeeda947eb4
SHA256 22c81915c27fa4e189c91e8f17d081abbbae3c04013d903328e08bcaad896d25
SHA512 a79c1c17c398e321b483d0ff620ee42b5d5a97286feb932771c7a67da8cdad16defeccb71e741dbc6b0faee9a8e9d090b02a45da12310aca1b71d8288bf9e9a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7451f274508fe6c48157949c74a93820
SHA1 6a1a0f776cf14c472e7bc9c10abde0a4a40cc20d
SHA256 931580f751efe01f91f7d4d954210667b73d6851bcd80984f1d6812d0f9f33b0
SHA512 e69bc33f98fea121aa1a62b6b25ebc7d5af36b1345948e0caa107b730cc7e27c33f4345501f9f650f51c47b05c1b175a9cac88172eca2f365ef250ef3bf4a968

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e1d85bca8fbd9d3b7b7fd7a5d87f5f16
SHA1 87d868d299de52fc25b92324b04bafff86eec83f
SHA256 36b5b309eac8ec2906ab52cd10006d1bb710eb0e3887cea91c9955f5636c7e16
SHA512 beda58b9d0e727556d966140d5d9e8dd58be674344537413edef4885ce7727e0a72cea2b7e300dad6b2184a5ebad3db95a2ff40658042ca048618e4089ac0770

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000096

MD5 b29302b83696a6a0bde9aa62d9f21b19
SHA1 dce44137900b42273cbe5fcbb1e4e10882603e39
SHA256 b851d54cbba7eca54d52ae1a0c351bb7877fd95e34198634347ba652e2b2ebe5
SHA512 c0c444ee5e7217359028c622a163805d4ab506e206860a8b27bdcc4c66103dc897684d2070ceff430fc48df1de7aa3c2fe5210d59ab67eda12a77c8bc2592477

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d5e42077b85df235_0

MD5 2c626ff228aaacfdb7830b876e41d90e
SHA1 8529b218afb0a8cb7ba01a732640854e44c204db
SHA256 d63d36bee7e38653a94098c306050e4d1dc34f76d5e23a121d37024d103e2055
SHA512 eb4890285efc9eea00d4295c7a5e67b416a473c3e68395c011dfd720b9b5942ea0aae025aeeb881afb6e3d8a762ac8c0151f28ea4ea42c8786c62bf7993ad965

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c729c358ada5f8ed870a408d351048b4
SHA1 235ed0da502c828afe130bac58a3fe9b518f8286
SHA256 820d30bc3da9eac325468689da2d7da5e9c94d7c1350e3164ab6a862197db948
SHA512 ac720bd1599830b38983414cbc9f2ef43f48dace9b38d45a7f726df5ad192626e2f3c5a075ebf045ffb917a892ebf3aa32f7df9ddc639ceed8003bbf930d54f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\21860378f362cb34_0

MD5 cdd28658160c720ec6b04dd32f991bd2
SHA1 3182d23f94d01dd40e4ae5018504e94625b77cb7
SHA256 6b1a8bf9a2619010227b6b896abb873c397ea10fff98a8a288304df012a55308
SHA512 af824e4b053d4361f4a75aa649f8136d5c46c74cdc1dd4127e19865d670702fb5ac1423b31a79fb5c0680d5c7f7960175a69e181d420bcc30463682710da58eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cbe1148afe5c383460278c332b2578a7
SHA1 4bc1f7242a96c87fdca719cd90287555ebcaedba
SHA256 af05fa4b4c57091911303ac6f40ade39704c34bd872f876aad8b4e4a9ab92293
SHA512 acfdd383db11668b999fe511f44b1fcdedc78d1effc5edd7dbf3623bdbbfa1009b19a3c72ef064a2f68f3891e5d0a7680b960dd1972dd42e18e708b7450678b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 0053a04db2a81d5318d2a1ee8ad08457
SHA1 3202e8e04598cb1bf726dcb819ee3882519c6ade
SHA256 436ff3dfa64ae23d7e28bdd9372441c3f35ad0a018a945d9471b716dae200117
SHA512 26e623b299fd6fc718fc5b662898f1f574d2b01f81a122ce4bf9d38b9549c0107f2622af89365c5f5d7371e1bd374a6528810ea33d7a60243cd5ca387b3a36fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d143ead87429aedb7271cbb3e95dced0
SHA1 e715a363c7e72a733b5858ce1d572fab53b4e797
SHA256 1717f2e37e5ae649f0487fdf9eb3f2c2e8f253f7ed17489957fe3e3786ad3733
SHA512 ff695270fe100bb96d77e1f103e40761cec6eb53f30fc10cf051fac5d0e0b963463f8cf9129639958f9b36d0fc8eeabe3e385ade4b5c24e20d715931dabd6e8f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c5

MD5 722a5c8e9a28cf3220825f4e555176a3
SHA1 c662f0371ee534a0e20b1b9e6a5f49e4609fb86d
SHA256 21b7757220221262068a3943e4c7ac09e690e65c40403f3a20af4f58d1e5cf81
SHA512 0a9cc0a324b3bbc7046be76103ea9c909d6bce6017cfb7c409344d7610b8d720be6e115775ff56b4ade6e304e69cdd944482d5f2511865dd30bd60afd0282291

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\072e3195fa712749_0

MD5 d7cdf6f3e963c18ecd082eb80d988c5c
SHA1 56a8c3b45b28b2564f24a5c761f3afb403122a78
SHA256 ad5527e75896d2a6d553a3504279fdff387022c0d249001461a5e0119ebc262b
SHA512 2729bc595f489fce489efc46e84b9477b5e55b8fe447ce8c065e194d6713acd787e60c1e238733810c7d5c820d3e849447874f07128c2466c3fc876b10cb0b84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9c43aae53a69ac9d1ef8f161f75ef548
SHA1 ee96be1fa5f7d1a673e641174c2db95ee93c2c71
SHA256 51a30187e4f3c794d6c070026e93426dd6096a3a1f1b2a8b5f6e1f5494991981
SHA512 05ba5dfd8013067efe7ae5a8d2f173175a52b695f3b54315ef90276aa30093c4232dbb550e8088347660c9859c548096cdd4ffb5130a9eef5e9e90b64ff9584b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4d855912875e8f8d823e3178363195a9
SHA1 3e2f6692d0e9d79ea9e0b80098153c684651614d
SHA256 5b042ecd45ddea429a278fa219602e950f84f7b2cbe9c130462b175d0bcb169d
SHA512 f174ea8a64d1e58d5bd04522dcb1fd18fcdd2a3af903aca8da97dff023397dacb640b0573c6d8264ec652610dcf5dd8fe7a0659845b4a5a3bb473e5bd0802057

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 26c475dc3086cd3dae60fb3fe79ccc8a
SHA1 92e3827b9c3bc049c447491f15202c485fda25d0
SHA256 af30e6022956607a1a1fbc4030976f90cef5570e4e45b8f3c2ee383f6f376eeb
SHA512 c2696ac028801c08c7a84d4a5582bee0ec7b555b5b5b0cf8f30d6870a01c750e06ffebe8915d30f12239339fbce0737009deebfd62de01841a653754280e5191

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e0b52ed41f7fe994_0

MD5 d9730ede379ef77dc6798bbff885f276
SHA1 dbed744fe64b95cdeb79dde9885af318ebdfcfd7
SHA256 2db793692b5814227c663d5031f4545243063f13c0010d71b55292b8a05cb6bf
SHA512 b3631068bd737658a1324ee9727c9b9e8370effc231d39241467b81573c4a28ea65270bddafd071d9af57a36b0fed5694894d53b76a2209198dfc9978c511029

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\32d0e7ce0721af93_0

MD5 3ba4427af4d502ab617377f9b5ecb8fd
SHA1 ddf7046650cee1ec268feab47daf3299cc98ddb0
SHA256 2e1e5b76ae3635e1af150b2b55a543427206646b8ec75ef4dc2a9bf2583d94aa
SHA512 94b3e0663c0014c5fd582a01ba2c8f8ca4545c79a2bdd99bc589a84c4d38ec58a6ee24e7b4e8ab2fad82e2683feb1071f7bc59e709ee7df5bc99917989f0fa7a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 04e05f7e236cb85364a2171e97794a00
SHA1 8359a35c0669420cc918d9a309136d3e090cc248
SHA256 7d4ad6107c02a8d01dcfb9a9cb2297a6eeda0766d6a16441fecf0a5c5674c42d
SHA512 7205942f3bb05e247877c7d8a8fb0bc9450d46ea028770402212148f959de025cd26d1c52396e5c9828fa1dab6424fef2a9d000ce0583a933e23c8a9f63fc5d1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ddc9e593fe59e824ab5db4c019b51f58
SHA1 f215b1a3e78f9784202f12e0ff2b359f96d8bf9f
SHA256 2e70cfb798ced7c644c06877f06fc9f307c14cfb374e5ca50276ded906a389aa
SHA512 9fd630445f97ec713b9cc653e57af1e9ec2c541e96c0b67ce57e64c9474e180b14b5518d596063e9c927f9a5e0a3727fed5061d6e6b839d488138a9eeacd2cfb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 baada86fdaf1d61073d4dc08947546f4
SHA1 1d33729156ec06d49cddb5354f6eeacc1ca3e4fa
SHA256 23b10685b2387f29bb1cc7c2d71c8f4934b69982d947281abfcd0b3381d757ed
SHA512 4878370308403a658152e071301c3c994345175bc8ce746d3110b391234b28ee63c836c2c74ae770c51b38f3019e5be493e579939ab0d0ad7abb88ced7c72d6a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2e86d6b725942ca0e8bf7e033e5ead20
SHA1 3baad45736661b9bf38a21ca9e6e0354939ad419
SHA256 be398a2f3ad3bd1c43e5124acb39f497f87e7b50ef7fc169d5b9aa8e574b4dcc
SHA512 b8af9695d3b833d3bf6f91d48eb4eac53f4e9bcb11670e0f6d01b177f3aa854ee52771446aff963d28804986b7c1f6ceedf8fabbbe049f5f0b6aec6760eb6f16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8e8df341d829d6781c92d95a63020094
SHA1 8d7f6c8b4bae3a49ca82decf7fc4e0116e336080
SHA256 89653550b247558b6244f1cc8c6d8cc1983efdaf484d51669e45ab619899d04b
SHA512 13b380df0f1b63ea09f9a532d77e3012c486684c1369f2d5cee986fd8d237a05708c537fe654dac8a245c33c0d459ac28ff1f4ad471a0757e0905b893b187e2e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6f122dd7-950c-4358-8035-a5b2b52b5751.tmp

MD5 84cdd69f0c3dcd24d0153ab4cb614c86
SHA1 0c6347ee71e463113662ba55072564ee737fb5aa
SHA256 2d617a5f4a7a58f09adeb2ddebd48b71941b5772b18bbe4c4bffc955756f6cce
SHA512 77be2ae4ce12282a7f58567b27e989ec54da7ae0a6f76960b760aa7ffd8bb891ccdd9360793f24eb7d5a38f1e27231711f898a70e2522ccc5744d877986b7431

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 41196ada9c4089d45664eedc56411999
SHA1 ddfa689dad5d45761ef5d3fa64fd3b7b717d520b
SHA256 179b87c2b75cc8f8d67b68cebcaffff4f116311512111130c34dfa92e5390414
SHA512 4eda4ad8c441bad503195201ff702544b4e02c5674254cde3ca1db3d5e316949ab02cbd7ea05f8b499c41c56a82b2d84e35a607139cd3bae8a6a757f3d1d48b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 0b969d0f17bca68b4d55e0e1caa77a93
SHA1 92ff9f38689add7f9773c3da3b47a5e432ec4af3
SHA256 097f0c1683617ea5a30903c75d1951e7f7d7443188eb522502adcad26a4e03c3
SHA512 525677e0b3bc9671f99c2d7fac4b512b59f5e16310a6fb1af907154c2a250cacfcad1b5e92ba063b1449407ad2631850cd0c5fb1c6f7cc3a40163e5443bbae72

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4e54017e3d3ec868487fae27ee71df6b
SHA1 fed3b0cd46f19d24cfe5e0de9ee583dc2e3d8d41
SHA256 334b742e712f75324b88b19759e928b702da307dd67101a2ba27ba55cde24de4
SHA512 21dc8e664897acae1ec6e4a068a0b948471453461325936ad6c3b25c683a646a8f425b60dbc1265053cb890824235aea1b7e760e9b31925e7543e9f5c2b461e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6812053077e8f3b74d6775afb2b0588f
SHA1 efecc76e800dd7be934fa9b349a0e86879846dd6
SHA256 b344861d8e335840fe1195ce93b07831ba03e0820c042dd24690b9efa19d05ef
SHA512 055b68a74a15553d97e2517645bedff157703983fca22e34660f7864a09351d15171c94503291ca0e2db430f6c46df817eb990369455dd6edc437aacf0984096

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 2c92888e4bcfb5956715ebe138c87f64
SHA1 c21bffcd4807e82a6004c2b70eb7e58b28c5ad8c
SHA256 48b274bfadddfb6beada5c2d1735c9335b6a3f47d225d1b11063eff12dda6582
SHA512 f258e86fcebae1b99da9e624709d93e0ccfa3257450c7ba7e7af1edb9a8189bb3ad1472030b8a1f0ae60acff8413eb8266b31ec464b506f042faf99ad7d08917

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 45282cc9b4c00628d33e0f6c51dcbb46
SHA1 cc6cf36288c485e3ed3a2d75522301e4d6fd0f66
SHA256 3511bcea6edd8f70247c14316cb1f288f08c15c53634b4bccf821c75a8f2e398
SHA512 f0920e8629e9bdbe235e451ba0d7dec5c3187c5b0feb4e16eae7013d7ad20589f67cffe382590e3a7b93b7aa06da4432b0f93c6cb7c83d1cc4a6764121207196

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 71279e86a65e1411057d6c54d1701c51
SHA1 438b5c3aa5cbeeea8ea77eddb3780ac58e722ab0
SHA256 c7736203a7974ebad83045a4e7fd131b1e136f495f72319a8732f6a08742074a
SHA512 7002322f9c4e7edd6c9af835de71ab76f765f4d3416076501783b23fe9321a269d0eaa9dfa704d2a9c9b82968538d106fa89e9012829ae92d95d738883349d5f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b9c25cbf2a2a151985c2bdf1069a7c5f
SHA1 dac4233776e2ba287cd0d928d9aac2787f5f4c7d
SHA256 90417c1e0b475de61d2e1c808822d55613c291d8fae85b98e0472b303b7a9343
SHA512 4088aedca8b5f86737b83e8cc020657f311d5a191c2ce3bcac3e61f4b37e8baf5a7a8740ac56df3d1cdd2de53b80f32800ed3eb858452db59a6c621c49445479

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 681bf64e7a249ce0f7be0296c628add0
SHA1 b8ecfbc2cef618612c3df6d9ca0eab849dfa5813
SHA256 1e90a2a000cd309e62c4d473a1e6244c12808bb9b360131731a38539aecee103
SHA512 923a3c522a023939013f131c319fcaebfd125c908184b4c0fa0157d1cd57071d31236660175764ddd43f224724c91de53a408891c4134467bce815f8e88c73e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6d6417aff3cc102f85fe4f567bdcc139
SHA1 dad4f6e93575618b5254f0b4dc6e286bbc84a230
SHA256 7cd132493ef53c13bb1a892db3736b1a8d06b2452c1ef4494cdbf263e1462601
SHA512 633e07eb869225458cf756b94edfbc6f9f97c5d7ac3cb42be7d8d3816a739cb118817847f7088c773fd4fdf5b88dc8af89dc02324f7aad8cc27a6074b426ef9b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 dee1b97a132ad23b75eaacb3cad7ddfd
SHA1 42c9a4bb1010c5f636d4b5f8afa6781c51e6a78c
SHA256 33f64b4fee3372fca5985dff46dda96173672a79cc08acaa805cbff5babf7df3
SHA512 ef4696022b8ab5bb27e5a0e6590d31b5a9b2e8ef751f0068e9cf3abc3b56087970cab19b7ada1c4b8094a8d200ac5cdedcc20a30ff2a54666c081197a7af9a79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 429f4638a9064537e77d423d5c62b57f
SHA1 5c988bfce83188a0afac9cb9b71e70fc7aafc4c7
SHA256 761baa3b509d9aee7eb5b12f7f6bf7cfdebc68fe3d10b51563796b2d122a0506
SHA512 6f58b552ac2d04f0165b5b8e6592efba47831345e3c8db9d69795409c73d78cf127854b6c6ffc663a3759f24402edd7e389b408153b0de996c4d353c54f8fb39

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 6f8e49933e2ef673e19646625eec4877
SHA1 2681c2cc0f7ad0a60744fe47cdd6f9c41884ef7b
SHA256 d30f108d0214849cb721d8b5ae7fd3d18e5018fc9d50ebb460d2c4bef389e095
SHA512 57f0769ca024d07e78cc5a726535930855f68ca3b12cb31fc375fc5912b301c5dd261208e8d44a488f6a1d21ede29cdcefb5572009cebd6eb9997fd83e9765f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f3069a699f21d07492e8bc7b523a9c62
SHA1 138ff2792a6f587166b6278645545c139d954575
SHA256 e8570d9d4fbefd06da6fb4ac690a81c0b0ebdb99b42792d7f1927fe86c2262b9
SHA512 b9647cc9b4f64083b627c350fdedb172e800785ad6018b14ac51d12ec808c91451832c89a86bead0c3eff92d72a97b543307a284cb89c9b77688a3ddad6fcc35

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5447ecff3c9106922c253e821da200d9
SHA1 91342d90ff41cf2db5952dc418106a9da630aec3
SHA256 ba4f2d66c4792da233f3ceef21695b1b8903a2163607b36b0d487a709cdf3e9b
SHA512 ca0d75d6ab9bdcdb884af61613cf9d5569608790e5dae5240916c782ed61c4aee3f7984cb9d92a06fdcccb0c320a8fb26441459ad88f5f4b7d3bd883eabd22e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9494be9e40323ffe8cb04ac1cba4b40d
SHA1 4638862dc3ce5e44d386fe826b91405a22791888
SHA256 0b2acca204d34ec88acdd56e84389285e0ff7da7f9226ea2f31a24edb55a5ce0
SHA512 df8ac8706b130088f4a2271db30a77199d0022d2840a0d9a965edda0397ae9a693cb94a154faa851b7a15c0305f3b1fa254345e6ebb72eb3c9a68d73c916ab2b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d204834216209f1d564da8f2608cfb8f
SHA1 d46ea6a47e1cdd39fd394f93b6ece24ff0ef2af5
SHA256 a21addd516f8c8ec7406f67c6ce289a420be34418478378a4fa1cf485614ab85
SHA512 a51a65d3ebbc275ecc25371a0942b6974c520d69774c5dbaae9e96dd699092960cf41866815820fdad418ccf78c96d5be3a42a9fd96df88a1890555ed0f61fba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 df4752c1b9a5d733b7933da01666c694
SHA1 3cd3a18a7b962fe5a4994dced1281aaea6a3a354
SHA256 14709635d23ee54933c18185622215f5008e071ebafd3d00b8d7cd00306c8c5f
SHA512 088dd6fb24018e122eecfc6af854e31f48100423fb81c6b0e21dfee59453c7b242595f23f5bbd6956f1904db2dd81c146a35e61171b46e11004b8dd5ffb4c986

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 614082da1d54967f17bb6f2b57de6359
SHA1 2ee0b0ff61d2e8cc09829f3e0864fde3eaa1472b
SHA256 2af0955d8cdb41c76013dc62fe5142ba1f48d8fda5d3178555767c924b76925d
SHA512 5a95fa1c2328f990eb9a0daf0d58e18043623b6f52b8f64a4f17421b43771f23b7e5139cd2b7e33cf24fa61120fd1d247b6197ec313feb17a2474c0b59e4f1da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 39ab6d1eec4655e74d62e9e74a3cac1c
SHA1 31034fe3eea2b4cb86f4a643d9539103b5b6fb72
SHA256 396409d30fb6baffb12d73deae0165af6f6bbec1ef05cbbd4020107b042c9c07
SHA512 3cc24b6bd581cc72fcb99c278deb59a7950f4f178362d27689175cd5d83b8080aae7abf1177043bfefe85abab340f4d318f38fadebe7239bc09a5fd1c38dbc68

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 34a4b008c9ff3309d0087216a0feec4f
SHA1 bb83fa412dbf6182ac48c0e0760253b1ca05fcf1
SHA256 823d6715fa2b419715518986a6e707269df9b4fbb668bf1cdb0bf4f26adc26fd
SHA512 0caa8fb58aff711a08db520977f8c7453a10ae186c1deca8820fa8a7105202f4dbc631b67ae753f5031c9b7a82efdedaa215a9a30e2a1a70db46616c1fd49a4e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 65e20e72c837c0d82c1cff03571d5eab
SHA1 383f719080227951eb721764a2a1057371fc1f89
SHA256 79e6ac1b71301300e525abf2588627d4acf2e6978e73e45d0ec6c86259777138
SHA512 68b5f675758f6172ef01407eb5bc11abcbdbef0e915fa3adbb3b1344b96266f608740376ef08f77933a2ed1dae479d6b17cbd96a28bbbd0b63f9e14dfaa13183

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 328b3614c9cc8b4fb07b5ea5000d6463
SHA1 63eb85026f8a5ac3ab3903136a1fbb9b12a2ac27
SHA256 22405e4b8baa6f00ca207d4565e15e734d97afd01283aaf562cbf636f505accb
SHA512 5d39c2e586241553a6e2bdc84e07661b97dc492ca6e2874e264507be22f9a6967e834c429654d6969f1e8fd276c6d7deb2d1ac2ea1116182c8d785a7a460656a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d80dd6caf8dad0c9463e2b0f62970ce6
SHA1 dbee39401dc41886fe65e80bb4b7f20b3ac1777b
SHA256 81852ecf584da2f53b6777c12871c88a080f40739d18779900247526cf5efac1
SHA512 d03bee8a0157ae8f0a0a08414bf252bc56dcf5fa00392eef6edf785ee9bb6687c697c8e9ee12bf1983dd93d202052cdb6df7b6d1350becdcc2f3a445bcd7f3af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 148f56d905f97953b4d9ec4d8f0319b7
SHA1 5f17db1a2aab8289d122cbab1278b3de29c9d7a0
SHA256 6c6410aafcc6e06b519549fc5fc13e9d619db78201ca9092062195c84bc3821d
SHA512 5637ddb666bb85c85597f47829d847e2e3457c8d43a173a8df960855b97b1ed380a645907ad4ce996ae23f80c808c31d51f6d5b294d0929931c686edb3357117

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4be1e417fcbdc7acd48feee56b530bed
SHA1 64721c218e7092e8bea023fbb403dff14565b1fe
SHA256 6a123385f3c5110e7dc96153b23d68719e837a67c75813168e6587e70c5c6279
SHA512 52b2ccef00b0c92109981abf8c9e86ee1152147a90eac7610d5e3ed48eba69af49348aefb0b01555ace8a4a9ebb10bdbc94f30713bd3027001f796c35bff433b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b56df070bed0b0a956b31e43d563a3cc
SHA1 e6d972c2f8a768cf2d9d38f4e5a1963e33ac4ddc
SHA256 ee345083f02bbd11a8a8d92e8dc770a373226c8b8d7b853db4463b8608d39335
SHA512 3507ec3e4d8a3c547a3cc6eaf97c375ef7c57a5271a0bcf5545f3a8c1acf8b0ef4ab4250bfcfbb62e3b383189a7cbd154d183cc166afd9c0b13a9239f3802be3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3182489c16b1cb585241057756f99666
SHA1 70e299489aa1d71ff25e44f67dde81cc31830373
SHA256 787b08e453f60f1b5f0f960ac2a1654fa8be2c941f8a7ac0ce85ebfe61e68caa
SHA512 640325d561f8999225f87249cc7b3162016c25213d9e07eaa169171f1760e123071be93dad91e7f17b05b0c7fbd63ba08668c70a87fa7d9158d64274d6449fa3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 930d4000eb8a77211a4c120fdd986974
SHA1 a519236f89354c15aa076fefd1aa23ebf1c6fbeb
SHA256 100fec11e34ccceea7980359019b1017b00e4e4bb2ca612e8ef9b0d4fac6752c
SHA512 7f605270aca0d9d70bdc1d2a7c2d5a1227aac75ec9d92e301ee19bcd3c2fafd6717437a2519ddd5c0a55a8622d17c66b3fadffeed9cf57b656be49384b4a36af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c2345899-821d-47bc-bcbe-2b586422062e.tmp

MD5 94d861d76d60d1a9ded035b0d2a786e7
SHA1 a61fbe863dc968c2d5711b781fd53ae718a804a6
SHA256 29e43299a63595a39eca2d955b3ba830d7541544ea50be1a95bfff1163cbf1c1
SHA512 db698199d9e5ab854c678266e193e1485ccc248a71d1a296c2ae485fba44b0f891a236d195ae2db7468fa863221b697b2195288b7e6e5ffd208590f6c09aa762

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 10ad11c6559e404b330ae93705649453
SHA1 a6e879dcaa56b8bacaaf17468deb2018723bb58b
SHA256 7b34e68e99e2228a34617688bd9eec79bde96bc3124d0335faa665d99e2217d4
SHA512 188c98b5d4bf11c59ce5c2251b6a83f110fb90ef9a0ba17b7761fcebb1e41aab4499eca299b88b670cf3d0882f88c3c7e4191c28a5e5cc7dd0c7856add0d37c1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5cd379f6f642ebb95bd46a4dfa0c5829
SHA1 5d0b18c70c696dc335c26c02d32bc54d0411bba5
SHA256 ca70c33bde761cc5bc2f5ea49f3d752c5a700e56296cc5bbd540f0434508dfe5
SHA512 c0009009d7e591645cbcdca7d4bb37dcf9542720202b330e89d70f40077c394a120734b92ce51a1d9e3b9a2fbd06451227949ce02e8678a14f0135e63afad44b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5b8d9c6047f700ec95a88ac35596eecf
SHA1 2f14140af49fd4a88fd2b303457d2f9c1439f482
SHA256 1095857c4717e97d846a5bcef0c01a8d431b5993a1bfda3cd87926636b1703aa
SHA512 23d07d67f8a5fe574aa2f64179c95f072c43e87a8e0fd870ab0f7c39986bbf299cda9f1b14fbbf29b7f70f09a6bf59e9f501876069e7dea2109ab61f404b8aed

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 85989c09577484d6cb009216e57e09b0
SHA1 1c0d0d4930b4cd3e526e499d065cfe90bf99ba8d
SHA256 b483f93cfc9b802e0d36441e87c6796c5acf5f909f0a8522265b6ecfb54350cd
SHA512 9e59fc1fa1a7f33149657bc904b59f3a2ee15e148698ac8212001375dc581acc7952f41e5fbf0b54079ed19d08d02ce496d9b02bc5514f97c8e38e7bdda6064e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f38dab2eadee9d88ebfec686bf52f727
SHA1 916fc8039d1412d9538751fe1ef4bf1c9e47c249
SHA256 3b17086908a65b3b5772a4276baa3bbc9426eb74738f408da5e01e77954b877f
SHA512 ca17a47805e5bf127eea6a25436dd28fc035e56fa3ab67711f29f6bf7e5dea817fa761499876de34b534ac563fc6901c6b2ca5456c747163bb85f016b672503f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 abd1802be5ede5a2f6b4178b7ba37b95
SHA1 381886bf09df06896b77812d5e981c1f67096574
SHA256 b273d529934b23f181496b72f255d4ea15fd5648bd577ef399ee9a60e49e2208
SHA512 20596d34691bdb553d0927d45d6e364163d81c583c99f0cb238699ccceb4a0f7eb70ee5421a3f19cfd9bda5e783471db794c81a1a0d12dcf8fa05bdfa8304c2c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3f9f812a0c53be8d8ae439d2543d0470
SHA1 1c3828fe99f2de5fd25431e2e6385a6fd0bb93f4
SHA256 3d0ee244fecb5759a93e8b17e7d34d4f360e9bc501b3d15f03d3c412562325cc
SHA512 836a1cdc1c1cd5effd6e2cf0b95a88dc456221eb31279288f35f1bffb2d8035141c49e649ffefa0feb36b480902814ba1cba5e139bf3d636e3597d910fc230a5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 40f4847b4b77e58a31b02699fce2d1b6
SHA1 8a5e92e7dc3c470b762591f36424512498290790
SHA256 bd67feea51f845f604f7b85bc62e8f084247d770dffb2c74c7f06e2f4baeb0c3
SHA512 63be823d00a519bafd11a21db39531152be0cf8aa96c42b8adbf6eb536bed5bb58e7dd29fe3463aca821c4362d09c75f89f2a114308918c4f8a77e66812edcfa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8845cea43005370d1293de0927b6bfc1
SHA1 de9c5e4289a1801fbc38ae9a6aa16a250c7f7860
SHA256 a2fe86d7891da15e932ed5d5eba05b524247e1df2026bb29c226ac9a61b7a99e
SHA512 e2ae98aa35115cffd66fea69639d8f559c2ec8ab1cefdfc6a46b16fd44bf38151964c35e8e2f751bc1f421ae3710afbd979e820ee32106c74cd6e0ad3a3e1dfa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 05ddd423f7ff9bd6f7e36de7cfde1df1
SHA1 65d78bd49fabeee6fd33a2bcc263c6f99bfe28d9
SHA256 39411fa4cc91d5c77590aff895689b172548e96ef415eb5bb643facf98acbbf7
SHA512 4e7c25fb59bf924bf8a3268ca52055fc2a6af77c7fae19e6a0decbd19b4c0e89ba1d67ede9b4abf9046f98c293d23ce1f2f06e5e9739476e2b19afe73943c8bb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1e837109eff797ea586553c9e98f3eaf
SHA1 780813b1ca92882111b0be9aa3da2e1da523d132
SHA256 674e79e83bdffe2c32d3484f3c70b205e1ca9d49b02b4dce3bb693d58740faec
SHA512 cd69cb6d37e6f9e2021224f3c2dd0098d621eafe0dd77862fb96583a29cb34e43e982a3a4b73cc857fcaa69ff766462d60e9978e491a91fb8eb490c5d6ad656f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 179463175c33b991f68452fa2b74e79e
SHA1 d75f205223581c64b2de58fb3833dfa0f182cdd5
SHA256 5d8ed2e961b2f86600315a9733fe64e2d2ec5aef999720292a64e4a30920977d
SHA512 0beb8f7fa82c4edb6ecc8165dcfacf0269b04177f8166067478adc137a3a1c11adcc7fcb7d900a339452904295e3a1a846485c7061c38807bae476825c1bf354