Malware Analysis Report

2025-06-16 00:53

Sample ID 241031-pkqgksyekn
Target Activator.exe
SHA256 edfaa64302a662837079d0196091bf93b0b9bd9e73441a94b306b67e0f90932f
Tags
credential_access defense_evasion discovery motw persistence phishing privilege_escalation spyware stealer
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

edfaa64302a662837079d0196091bf93b0b9bd9e73441a94b306b67e0f90932f

Threat Level: Likely malicious

The file Activator.exe was found to be: Likely malicious.

Malicious Activity Summary

credential_access defense_evasion discovery motw persistence phishing privilege_escalation spyware stealer

Sets service image path in registry

Downloads MZ/PE file

Credentials from Password Stores: Windows Credential Manager

Executes dropped EXE

Reads user/profile data of web browsers

Loads dropped DLL

Checks for any installed AV software in registry

Mark of the Web detected: This indicates that the page was originally saved or cloned.

Legitimate hosting services abused for malware hosting/C2

Enumerates connected drives

Drops file in Windows directory

Subvert Trust Controls: Mark-of-the-Web Bypass

System Location Discovery: System Language Discovery

Event Triggered Execution: Netsh Helper DLL

Browser Information Discovery

Enumerates physical storage devices

Unsigned PE

Suspicious use of SetWindowsHookEx

Suspicious behavior: EnumeratesProcesses

Suspicious use of FindShellTrayWindow

Uses Volume Shadow Copy service COM API

Suspicious use of WriteProcessMemory

Enumerates system info in registry

Checks SCSI registry key(s)

Suspicious use of SendNotifyMessage

Suspicious behavior: LoadsDriver

Uses Task Scheduler COM API

Uses Volume Shadow Copy WMI provider

Suspicious use of AdjustPrivilegeToken

Modifies registry class

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Modifies data under HKEY_USERS

Suspicious behavior: GetForegroundWindowSpam

NTFS ADS

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-10-31 12:23

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-10-31 12:23

Reported

2024-10-31 12:53

Platform

win11-20241007-en

Max time kernel

1593s

Max time network

1804s

Command Line

"C:\Users\Admin\AppData\Local\Temp\Activator.exe"

Signatures

Downloads MZ/PE file

Sets service image path in registry

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\458C7BDAE3BA7A87\ImagePath = "\\??\\C:\\Users\\Admin\\AppData\\Local\\Temp\\7227E1FC-738E4128-8D8621B6-B663F47C\\16514e4785.sys" C:\Users\Admin\Desktop\cureit.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\625def1ac46bee47\ImagePath = "\\??\\C:\\Users\\Admin\\AppData\\Local\\Temp\\dwt-1716-4520-166e278ca5.sys" C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\WhQl49YAlIeX2.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\458C7BDAE3BA7A87\ImagePath = "\\??\\C:\\Users\\Admin\\AppData\\Local\\Temp\\44839E15-B4DAAC5C-580F2E80-87D0F035\\1b364e71aa.sys" C:\Users\Admin\Downloads\wj4ton62.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\1ed34ec2b8e54f9f\ImagePath = "\\??\\C:\\Users\\Admin\\AppData\\Local\\Temp\\dwt-5220-5644-1b4b4deda3.sys" C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8XcmO5fniNc.exe N/A

Credentials from Password Stores: Windows Credential Manager

credential_access stealer

Reads user/profile data of web browsers

spyware stealer

Checks for any installed AV software in registry

Description Indicator Process Target
Key opened \Registry\Machine\SOFTWARE\Doctor Web\InstalledComponents C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\WhQl49YAlIeX2.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Doctor Web\InstalledComponents C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\WhQl49YAlIeX2.exe N/A
Key opened \Registry\Machine\SOFTWARE\Doctor Web\InstalledComponents C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8XcmO5fniNc.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Doctor Web\InstalledComponents C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8XcmO5fniNc.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\Q: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\B: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A yandex.com N/A N/A
N/A yandex.com N/A N/A
N/A yandex.com N/A N/A

Mark of the Web detected: This indicates that the page was originally saved or cloned.

phishing motw
Description Indicator Process Target
N/A https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html N/A N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\Crashpad\metadata C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\Crashpad\settings.dat C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\cureit.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\wj4ton62.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

Event Triggered Execution: Netsh Helper DLL

persistence privilege_escalation
Description Indicator Process Target
Key opened \Registry\Machine\Software\Wow6432Node\Microsoft\NetSh C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8XcmO5fniNc.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8XcmO5fniNc.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8XcmO5fniNc.exe N/A
Key opened \Registry\Machine\Software\Microsoft\NetSh C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8XcmO5fniNc.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8XcmO5fniNc.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8XcmO5fniNc.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\cureit.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\slkcbz9XA0kLl98.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\kvFfsW5UMCCNbW.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\wj4ton62.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8OC6ClLYK.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Activator.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8XcmO5fniNc.exe N/A
Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8XcmO5fniNc.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133748510407661767" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\WhQl49YAlIeX2.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\WhQl49YAlIeX2.exe N/A
Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\WhQl49YAlIeX2.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8XcmO5fniNc.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000_Classes\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8XcmO5fniNc.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000_Classes\Local Settings\MuiCache C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000_Classes\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\WhQl49YAlIeX2.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000_Classes\Software C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\WhQl49YAlIeX2.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000_Classes\Software\Microsoft C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\WhQl49YAlIeX2.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000_Classes\Software\Microsoft\Windows\CurrentVersion C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\WhQl49YAlIeX2.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000_Classes\Local Settings C:\Windows\system32\taskmgr.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000_Classes\Software\Microsoft\Windows C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\WhQl49YAlIeX2.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000_Classes\Software\Microsoft\Windows\CurrentVersion\Explorer C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\WhQl49YAlIeX2.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\cureit.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 538767.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\wj4ton62.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3068 wrote to memory of 4564 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 4564 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 576 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 576 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3068 wrote to memory of 2260 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy WMI provider

ransomware

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\Activator.exe

"C:\Users\Admin\AppData\Local\Temp\Activator.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ffecdebcc40,0x7ffecdebcc4c,0x7ffecdebcc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1804,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1796 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2080,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2116 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2208,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2220 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3112,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3160 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3168,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3296 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4128,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4480 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4568,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4572 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4756,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4728 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4748,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4876 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4744,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4904 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4896,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4932 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5056,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4856 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --reenable-autoupdates --system-level

C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x244,0x248,0x24c,0x234,0x250,0x7ff618324698,0x7ff6183246a4,0x7ff6183246b0

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4660,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4820 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3428,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4636 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5384,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5364 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=3424,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4636 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=3392,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5252 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=4388,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5360 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5496,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5516 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=5668,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5692 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=5232,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5748 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=5644,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5800 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=5776,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5928 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=5936,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=6208,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6220 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=6416,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6516 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=6520,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6452 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=6708,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6632 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=6572,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6628 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=6596,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6864 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=6524,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7036 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=7172,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7128 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=7300,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7308 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=6360,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7460 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=7476,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6588 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=5040,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7340 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=5096,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3508 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3452,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5720 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=3484,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7744 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=6480,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7120 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=6476,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6964 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6652,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5900 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=224,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7116 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=3528,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4536 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=3096,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4560 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=7660,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7616 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=6388,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6484 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=6072,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7460 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=6016,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6008 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=6028,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3288 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=5612,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5588 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=5552,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5528 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=5608,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4396 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=7344,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7176 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=6848,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5564 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004DC 0x00000000000004C0

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=6636,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7748 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=4532,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7104 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=6120,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7932 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=7236,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7768 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=6040,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7528 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=6112,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6456 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=7304,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6148 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=6020,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3328 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --field-trial-handle=6004,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7180 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=6468,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5700 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=3160,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6424 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=7224,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8076 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --field-trial-handle=7788,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4976 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --field-trial-handle=3348,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7212 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --field-trial-handle=7240,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6600 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --field-trial-handle=7000,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8184 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=5808,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6812 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=6364,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6568 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --field-trial-handle=7088,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6228 /prefetch:1

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe

"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /0

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=8964,i,5335675597084816166,1657160014802745830,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5236 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Desktop\cureit.exe

"C:\Users\Admin\Desktop\cureit.exe"

C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\slkcbz9XA0kLl98.exe

"C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\slkcbz9XA0kLl98.exe" -cmode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

C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\kvFfsW5UMCCNbW.exe

"C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\kvFfsW5UMCCNbW.exe" /rpcep:\pipe\164EA7842F /rpcpr:np /sst /scn /ok /spn

C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\WhQl49YAlIeX2.exe

"C:\Users\Admin\AppData\Local\Temp\7227E1FC-738E4128-8D8621B6-B663F47C\WhQl49YAlIeX2.exe" -arkdll:miiB5CD6ewDCh.dll -arkpipe:\pipe\1669696D291730377926 -mode:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.freedrweb.com/download+cureit+free/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffedfe23cb8,0x7ffedfe23cc8,0x7ffedfe23cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1856 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2696 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4920 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5672 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4588 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3776 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5732 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5680 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3460 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5944 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1736 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6304 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6496 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6420 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6524 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6308 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6960 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7120 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7272 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7388 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7532 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7672 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8220 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8164 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7520 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7936 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8572 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9112 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8576 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8776 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6836 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9380 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9444 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8304 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8576 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9464 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9644 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9928 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10084 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7460 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8588 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7300 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6484 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7132 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5972 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2500 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5100 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=10212 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8540 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5456 /prefetch:8

C:\Users\Admin\Downloads\wj4ton62.exe

"C:\Users\Admin\Downloads\wj4ton62.exe"

C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8OC6ClLYK.exe

"C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8OC6ClLYK.exe" -cmode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

C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe

"C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\nAqrYqo6s.exe" /rpcep:\pipe\1B339042AB /rpcpr:np /sst /scn /ok /spn

C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8XcmO5fniNc.exe

"C:\Users\Admin\AppData\Local\Temp\44839E15-B4DAAC5C-580F2E80-87D0F035\8XcmO5fniNc.exe" -arkdll:eFUiXnjy3zTI.dll -arkpipe:\pipe\1B487D67D01730378135 -mode:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,12309828035798388512,15412903943401864614,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6848 /prefetch:1

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

Network

Country Destination Domain Proto
GB 216.58.201.100:443 www.google.com udp
GB 216.58.201.100:443 www.google.com tcp
GB 216.58.201.110:443 apis.google.com udp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.178.14:443 clients2.google.com udp
N/A 224.0.0.251:5353 udp
GB 142.250.178.14:443 clients2.google.com tcp
RU 5.255.255.77:443 yandex.com tcp
RU 5.255.255.77:443 yandex.com tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 77.88.21.119:443 mc.yandex.com tcp
US 8.8.8.8:53 favicon.yandex.net udp
RU 87.250.247.181:443 avatars.mds.yandex.net tcp
RU 87.250.250.36:443 favicon.yandex.net tcp
RU 87.250.250.91:443 yabs.yandex.ru tcp
RU 87.250.250.91:443 yabs.yandex.ru tcp
RU 87.250.251.92:443 static-mon.yandex.net tcp
US 8.8.8.8:53 91.250.250.87.in-addr.arpa udp
US 8.8.8.8:53 92.251.250.87.in-addr.arpa udp
RU 178.248.232.183:443 download.drweb.ru tcp
RU 178.248.232.183:443 download.drweb.ru tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
GB 142.250.187.234:443 content-autofill.googleapis.com tcp
RU 77.88.21.119:443 mc.yandex.com tcp
RU 77.88.55.88:443 yandex.ru tcp
RU 87.250.251.92:443 static-mon.yandex.net tcp
RU 5.255.197.17:443 egress.yandex.net tcp
RU 5.255.197.17:443 egress.yandex.net tcp
US 151.101.65.91:443 cache-05.filehippo.net tcp
US 151.101.65.91:443 cache-05.filehippo.net tcp
US 151.101.193.91:443 cache-05.filehippo.net tcp
US 151.101.193.91:443 cache-05.filehippo.net tcp
US 151.101.193.91:443 cache-05.filehippo.net tcp
US 151.101.65.91:443 cache-05.filehippo.net tcp
US 151.101.65.91:443 cache-05.filehippo.net tcp
US 151.101.65.91:443 cache-05.filehippo.net udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
GB 18.172.88.104:443 cdn-magiclinks.trackonomics.net tcp
US 8.8.8.8:53 l3.aaxads.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
GB 18.165.160.104:443 sdk.privacy-center.org tcp
NL 18.239.70.203:443 c.amazon-adsystem.com tcp
US 151.101.193.91:443 cache-05.filehippo.net udp
GB 142.250.187.226:443 www.googletagservices.com tcp
GB 184.26.57.149:443 widgets.outbrain.com tcp
GB 23.214.146.140:443 l3.aaxads.com tcp
US 172.67.4.231:443 c.aaxads.com tcp
US 103.224.212.213:443 www.aaxdetect.com tcp
GB 23.214.146.140:443 l3.aaxads.com tcp
NL 18.238.243.47:443 ecdn.firstimpression.io tcp
NL 18.238.243.47:443 ecdn.firstimpression.io tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 18.165.160.104:443 sdk.privacy-center.org udp
US 151.101.65.91:443 cache-05.filehippo.net udp
GB 172.217.169.66:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 203.70.239.18.in-addr.arpa udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 149.57.26.184.in-addr.arpa udp
US 8.8.8.8:53 140.146.214.23.in-addr.arpa udp
US 8.8.8.8:53 231.4.67.172.in-addr.arpa udp
US 8.8.8.8:53 213.212.224.103.in-addr.arpa udp
US 8.8.8.8:53 47.243.238.18.in-addr.arpa udp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 66.169.217.172.in-addr.arpa udp
GB 216.58.201.100:443 www.google.com tcp
NL 18.239.70.203:443 c.amazon-adsystem.com tcp
US 104.22.75.216:443 btloader.com tcp
GB 184.26.57.149:443 widgets.outbrain.com tcp
NL 18.238.243.122:443 config.aps.amazon-adsystem.com tcp
GB 184.26.190.11:443 tcheck.outbrainimg.com tcp
GB 216.58.201.110:443 contributor.google.com tcp
DE 178.63.248.56:443 push-sdk.com tcp
NL 18.239.68.199:443 aax.amazon-adsystem.com tcp
US 151.101.193.91:443 sc.filehippo.net udp
US 172.67.38.106:443 cdn.id5-sync.com tcp
GB 216.58.212.206:443 syndicatedsearch.goog tcp
NL 18.239.50.73:443 rock.defybrick.com tcp
US 151.101.1.91:443 sc.filehippo.net tcp
US 151.101.1.91:443 sc.filehippo.net tcp
US 151.101.1.91:443 sc.filehippo.net tcp
US 151.101.1.91:443 sc.filehippo.net tcp
GB 142.250.179.251:443 storage.googleapis.com tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 130.211.23.194:443 api.btloader.com tcp
BE 66.102.1.154:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 19.69.67.172.in-addr.arpa udp
US 8.8.8.8:53 38.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 154.1.102.66.in-addr.arpa udp
US 8.8.8.8:53 log.outbrainimg.com udp
US 8.8.8.8:53 mv.outbrain.com udp
US 151.101.130.132:443 mv.outbrain.com tcp
US 64.74.236.63:443 log.outbrainimg.com tcp
US 64.74.236.255:443 mcdp-chidc2.outbrain.com tcp
US 64.74.236.255:443 mcdp-chidc2.outbrain.com tcp
US 64.74.236.255:443 mcdp-chidc2.outbrain.com tcp
GB 216.58.201.110:443 contributor.google.com udp
US 54.83.110.109:443 flint.defybrick.com tcp
DE 178.63.248.56:443 push-sdk.com tcp
GB 13.224.81.4:443 api.privacy-center.org tcp
DE 178.63.248.56:443 push-sdk.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
US 104.18.36.155:443 htlb.casalemedia.com tcp
US 104.18.36.155:443 htlb.casalemedia.com tcp
NL 185.89.210.153:443 ib.adnxs.com tcp
NL 18.239.50.87:443 hb.yellowblue.io tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
IE 54.76.209.116:443 ad.360yield.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
GB 13.224.81.4:443 api.privacy-center.org udp
US 104.18.35.167:443 cdn-ima.33across.com tcp
NL 18.239.18.78:443 tags.crwdcntrl.net tcp
GB 216.58.213.1:443 4a7a5fe2bad415870187604160225e17.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 116.209.76.54.in-addr.arpa udp
US 8.8.8.8:53 116.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 120.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 139.156.173.69.in-addr.arpa udp
IE 34.246.79.237:443 rtb.gumgum.com tcp
US 3.33.220.150:443 match.adsrvr.org tcp
IE 3.248.125.109:443 ce.lijit.com tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 172.217.169.65:443 tpc.googlesyndication.com tcp
GB 172.217.169.65:443 tpc.googlesyndication.com tcp
GB 172.217.169.65:443 tpc.googlesyndication.com tcp
GB 172.217.169.65:443 tpc.googlesyndication.com tcp
GB 172.217.169.65:443 tpc.googlesyndication.com tcp
GB 172.217.169.65:443 tpc.googlesyndication.com tcp
GB 172.217.169.65:443 tpc.googlesyndication.com tcp
GB 172.217.169.65:443 tpc.googlesyndication.com tcp
GB 172.217.169.65:443 tpc.googlesyndication.com tcp
GB 172.217.169.65:443 tpc.googlesyndication.com tcp
GB 172.217.169.65:443 tpc.googlesyndication.com tcp
GB 172.217.169.65:443 tpc.googlesyndication.com udp
NL 178.250.1.9:443 dis.eu.criteo.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 34.1.224.215:443 csync.loopme.me tcp
GB 172.217.169.65:443 tpc.googlesyndication.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
GB 216.58.201.100:443 www.google.com tcp
US 151.101.1.108:443 acdn.adnxs.com tcp
GB 184.26.56.245:443 ads.pubmatic.com tcp
IE 54.155.181.154:443 ms-cookie-sync.presage.io tcp
IE 54.155.181.154:443 ms-cookie-sync.presage.io tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 104.18.38.76:443 js-sec.indexww.com tcp
GB 184.25.193.73:443 eus.rubiconproject.com tcp
NL 185.89.210.153:443 ib.adnxs.com tcp
GB 185.64.190.78:443 image6.pubmatic.com tcp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 3.33.220.150:443 match.adsrvr.org tcp
US 172.64.151.101:443 ssum-sec.casalemedia.com udp
GB 142.250.187.226:443 cm.g.doubleclick.net tcp
US 3.211.176.3:443 sync.srv.stackadapt.com tcp
US 3.211.176.3:443 sync.srv.stackadapt.com tcp
US 3.211.176.3:443 sync.srv.stackadapt.com tcp
IE 34.248.57.155:443 match.prod.bidr.io tcp
NL 63.215.202.169:443 triplelift-match.dotomi.com tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
NL 178.250.1.9:443 dis.eu.criteo.com tcp
IE 67.220.228.203:443 aax-eu.amazon-adsystem.com tcp
GB 216.58.201.100:443 www.google.com udp
GB 185.64.191.210:443 simage2.pubmatic.com tcp
GB 172.217.169.66:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 108.136.214.35.in-addr.arpa udp
US 8.8.8.8:53 155.57.248.34.in-addr.arpa udp
US 8.8.8.8:53 3.176.211.3.in-addr.arpa udp
US 8.8.8.8:53 203.228.220.67.in-addr.arpa udp
GB 142.250.187.226:443 cm.g.doubleclick.net udp
IE 34.248.111.137:443 sync.crwdcntrl.net tcp
US 104.22.50.98:443 mwzeom.zeotap.com tcp
DK 77.243.51.122:443 uipglob.semasio.net tcp
US 34.111.129.221:443 cr.frontend.weborama.fr tcp
DK 37.157.5.141:443 c1.adform.net tcp
NL 34.91.62.186:443 um.simpli.fi tcp
GB 87.248.114.12:443 ups.analytics.yahoo.com tcp
US 34.1.224.215:443 csync.loopme.me tcp
DK 37.157.5.141:443 c1.adform.net tcp
DE 37.252.171.53:443 secure.adnxs.com tcp
US 172.64.150.63:443 s.tribalfusion.com tcp
US 8.8.8.8:53 63.150.64.172.in-addr.arpa udp
US 8.8.8.8:53 53.171.252.37.in-addr.arpa udp
US 98.82.156.107:443 s.amazon-adsystem.com tcp
NL 198.47.127.20:443 simage4.pubmatic.com tcp
DE 91.228.74.200:443 cms.quantserve.com tcp
NL 35.214.136.108:443 x.bidswitch.net udp
DE 52.28.199.252:443 sonata-notifications.taptapnetworks.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
US 151.101.194.49:443 sync-tm.everesttech.net tcp
DE 80.82.210.217:443 dsp-cookie.adfarm1.adition.com tcp
FR 54.38.113.6:443 pixel.onaudience.com tcp
IE 54.220.156.246:443 pr-bh.ybp.yahoo.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
NL 89.207.16.137:443 pubmatic-match.dotomi.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
AT 193.233.233.233:443 rsload.net tcp
AT 193.233.233.233:443 rsload.net tcp
AT 193.233.233.233:443 rsload.net tcp
AT 193.233.233.233:443 rsload.net tcp
AT 193.233.233.233:443 rsload.net tcp
AT 193.233.233.233:443 rsload.net tcp
RU 77.88.21.119:443 mc.yandex.com tcp
RU 88.212.202.52:443 counter.yadro.ru tcp
GB 142.250.187.234:443 content-autofill.googleapis.com tcp
GB 142.250.200.14:443 google.com tcp
NL 172.217.168.227:443 beacons.gcp.gvt2.com tcp
NL 172.217.168.227:443 beacons.gcp.gvt2.com tcp
DE 5.9.247.132:443 a.topsoft.site tcp
RU 5.182.5.108:443 f3.2rsload.ru tcp
NL 45.82.176.183:443 topsoft.site tcp
NL 45.82.176.183:443 topsoft.site tcp
NL 88.208.46.156:443 offergate-software11.com tcp
NL 185.26.182.112:443 net.geo.opera.com tcp
RU 88.212.202.52:443 counter.yadro.ru tcp
GB 142.250.187.234:443 content-autofill.googleapis.com udp
US 172.67.182.201:443 www.filehippofile.com tcp
US 172.67.182.201:443 www.filehippofile.com udp
US 192.0.77.37:443 c0.wp.com tcp
US 192.0.77.37:443 c0.wp.com tcp
US 192.0.77.37:443 c0.wp.com tcp
US 192.0.77.37:443 c0.wp.com tcp
US 192.0.77.2:443 i0.wp.com tcp
US 192.0.76.3:443 stats.wp.com tcp
US 192.0.77.37:443 c0.wp.com udp
GB 142.250.187.234:443 content-autofill.googleapis.com tcp
GB 172.217.169.66:443 googleads.g.doubleclick.net tcp
US 192.0.77.2:443 i0.wp.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
RU 87.250.247.181:443 avatars.mds.yandex.net tcp
RU 93.158.134.36:443 favicon.yandex.net tcp
US 192.0.76.3:443 stats.wp.com udp
GB 142.250.200.14:443 google.com udp
NL 172.217.168.227:443 beacons.gcp.gvt2.com udp
RU 5.255.197.17:443 egress.yandex.net tcp
US 151.101.65.91:443 cache-05.filehippo.net udp
US 151.101.65.91:443 cache-05.filehippo.net udp
US 151.101.1.91:443 cache-05.filehippo.net udp
GB 18.165.160.56:443 sdk.privacy-center.org udp
GB 23.214.146.140:443 l3.aaxads.com tcp
GB 142.250.187.226:443 cm.g.doubleclick.net tcp
GB 18.172.88.16:443 cdn-magiclinks.trackonomics.net tcp
US 103.224.212.213:443 www.aaxdetect.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 23.214.146.140:443 l3.aaxads.com tcp
DE 178.63.248.56:443 push-sdk.com tcp
DE 178.63.248.56:443 push-sdk.com tcp
GB 216.58.201.110:443 contributor.google.com udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 185.89.210.153:443 ib.adnxs.com tcp
US 104.18.36.155:443 dsum-sec.casalemedia.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 ad.360yield.com udp
BE 66.102.1.154:443 stats.g.doubleclick.net udp
DE 18.157.230.4:443 tlx.3lift.com tcp
IE 52.210.202.122:443 ad.360yield.com tcp
US 64.74.236.63:443 log.outbrainimg.com tcp
US 130.211.23.194:443 api.btloader.com udp
GB 216.58.201.110:443 contributor.google.com udp
GB 216.58.201.110:443 contributor.google.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 64.74.236.255:443 mcdp-chidc2.outbrain.com tcp
US 8.8.8.8:53 122.202.210.52.in-addr.arpa udp
US 8.8.8.8:53 16.88.172.18.in-addr.arpa udp
GB 184.26.57.149:443 widgets.outbrain.com tcp
GB 184.26.57.149:443 widgets.outbrain.com tcp
NL 18.238.243.59:443 ecdn.firstimpression.io tcp
GB 216.58.212.206:443 syndicatedsearch.goog tcp
NL 18.238.243.86:443 ecdn.firstimpression.io tcp
GB 172.217.169.66:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 sync.outbrain.com udp
US 64.74.236.31:443 sync.outbrain.com tcp
NL 185.89.210.153:443 ib.adnxs.com tcp
US 8.8.8.8:53 dpm.demdex.net udp
US 3.33.220.150:443 match.adsrvr.org tcp
NL 178.250.1.9:443 dis.eu.criteo.com tcp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
GB 142.250.187.226:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 ice.360yield.com udp
US 8.8.8.8:53 s.ad.smaato.net udp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 bh.contextweb.com udp
US 34.1.224.215:443 csync.loopme.me tcp
IE 34.250.133.195:443 dpm.demdex.net tcp
US 13.107.21.237:443 c.bing.com tcp
US 172.64.151.101:443 ssum-sec.casalemedia.com udp
NL 81.17.55.123:443 ssbsync.smartadserver.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 34.98.64.218:443 u.openx.net tcp
IE 54.77.58.138:443 ice.360yield.com tcp
NL 198.47.127.18:443 image8.pubmatic.com tcp
NL 18.239.94.105:443 s.ad.smaato.net tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 64.74.236.255:443 mcdp-chidc2.outbrain.com tcp
US 34.206.226.21:443 cm.smadex.com tcp
US 64.74.236.31:443 sync.outbrain.com tcp
US 64.74.236.31:443 sync.outbrain.com tcp
US 64.74.236.31:443 sync.outbrain.com tcp
US 64.74.236.31:443 sync.outbrain.com tcp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
NL 134.122.57.34:443 match.adsby.bidtheatre.com tcp
US 64.74.236.31:443 sync.outbrain.com tcp
US 8.8.8.8:53 cs.media.net udp
US 34.98.64.218:443 u.openx.net udp
US 64.74.236.31:443 sync.outbrain.com tcp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
NL 134.122.57.34:443 match.adsby.bidtheatre.com tcp
US 8.8.8.8:53 ms-ads-monitoring-events.presage.io udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
IE 54.72.146.179:443 ms-ads-monitoring-events.presage.io tcp
US 3.217.190.136:443 sync.srv.stackadapt.com tcp
GB 172.217.169.65:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 www.google.com udp
IE 54.72.146.179:443 ms-ads-monitoring-events.presage.io tcp
US 151.101.1.91:443 cache-05.filehippo.net udp
US 8.8.8.8:53 59.243.238.18.in-addr.arpa udp
US 8.8.8.8:53 86.243.238.18.in-addr.arpa udp
US 8.8.8.8:53 123.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 237.21.107.13.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 18.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 105.94.239.18.in-addr.arpa udp
US 8.8.8.8:53 195.133.250.34.in-addr.arpa udp
US 8.8.8.8:53 31.236.74.64.in-addr.arpa udp
US 8.8.8.8:53 138.58.77.54.in-addr.arpa udp
US 8.8.8.8:53 21.226.206.34.in-addr.arpa udp
US 8.8.8.8:53 34.57.122.134.in-addr.arpa udp
US 8.8.8.8:53 136.190.217.3.in-addr.arpa udp
GB 184.26.188.27:443 cs.media.net tcp
DE 18.184.119.72:443 match.sharethrough.com tcp
US 8.8.8.8:53 inmobi-match.dotomi.com udp
NL 89.207.16.204:443 inmobi-match.dotomi.com tcp
US 20.33.55.12:443 sync.inmobi.com tcp
GB 142.250.180.4:443 www.google.com udp
GB 142.250.180.4:443 www.google.com udp
US 8.8.8.8:53 179.146.72.54.in-addr.arpa udp
US 8.8.8.8:53 72.119.184.18.in-addr.arpa udp
US 8.8.8.8:53 12.55.33.20.in-addr.arpa udp
US 8.8.8.8:53 204.16.207.89.in-addr.arpa udp
US 8.8.8.8:53 4.180.250.142.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
DE 178.63.248.56:443 uidsync.net tcp
NL 46.228.164.11:443 ad.turn.com tcp
DE 23.88.8.125:443 uidsync.net tcp
DE 23.88.8.125:443 uidsync.net tcp
GB 172.217.169.65:443 tpc.googlesyndication.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
DE 178.63.248.56:443 uidsync.net tcp
DE 23.88.8.125:443 uidsync.net tcp
DE 23.88.8.125:443 uidsync.net tcp
US 104.18.41.104:443 cd.connatix.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 151.101.193.91:443 dl5.filehippo.com tcp
US 8.8.8.8:53 cds.connatix.com udp
US 104.18.41.104:443 cds.connatix.com udp
US 8.8.8.8:53 capi.connatix.com udp
US 104.18.41.104:443 ins.connatix.com udp
US 8.8.8.8:53 vid.connatix.com udp
US 8.8.8.8:53 lit.connatix.com udp
US 104.18.41.104:443 lit.connatix.com udp
US 172.64.146.152:443 lit.connatix.com tcp
US 172.64.146.152:443 lit.connatix.com tcp
US 172.64.146.152:443 lit.connatix.com tcp
US 104.18.41.104:443 lit.connatix.com tcp
US 104.18.41.104:443 lit.connatix.com tcp
US 8.8.8.8:53 x.bidswitch.net udp
US 34.1.224.215:443 csync.loopme.me tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
DE 18.184.119.72:443 match.sharethrough.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 match.prod.bidr.io udp
DK 37.157.5.141:443 c1.adform.net tcp
NL 18.239.94.105:443 s.ad.smaato.net tcp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 ssc-cms.33across.com udp
NL 35.214.136.108:443 x.bidswitch.net tcp
GB 184.26.56.245:443 ads.pubmatic.com tcp
IE 54.170.20.205:443 match.prod.bidr.io tcp
IE 52.19.195.56:443 ads.yieldmo.com tcp
US 69.166.1.67:443 sync.go.sonobi.com tcp
US 18.214.7.230:443 cs-server-s2s.yellowblue.io tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 67.202.105.22:443 ssc-cms.33across.com tcp
US 3.33.220.150:443 match.adsrvr.org tcp
GB 142.250.187.226:443 cm.g.doubleclick.net tcp
NL 81.17.55.123:443 ssbsync.smartadserver.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
DE 37.252.171.53:443 secure.adnxs.com tcp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
GB 142.250.187.202:443 imasdk.googleapis.com tcp
US 172.64.146.152:443 img.connatix.com udp
US 47.253.61.56:443 gw-iad-bid.ymmobi.com tcp
US 104.18.41.104:443 img.connatix.com udp
US 34.98.64.218:443 us-u.openx.net tcp
GB 184.26.188.27:443 cs.media.net tcp
NL 46.228.174.117:443 sync.1rx.io tcp
GB 142.250.187.202:443 imasdk.googleapis.com tcp
GB 172.217.16.230:443 s0.2mdn.net tcp
NL 35.214.136.108:443 x.bidswitch.net udp
US 8.8.8.8:53 205.20.170.54.in-addr.arpa udp
US 8.8.8.8:53 56.195.19.52.in-addr.arpa udp
US 8.8.8.8:53 67.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 230.7.214.18.in-addr.arpa udp
US 8.8.8.8:53 22.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 115.158.57.154.in-addr.arpa udp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 56.61.253.47.in-addr.arpa udp
US 8.8.8.8:53 230.16.217.172.in-addr.arpa udp
NL 188.42.63.48:443 dsp-ap.eskimi.com tcp
IE 54.170.20.205:443 match.prod.bidr.io tcp
US 216.239.32.3:443 csi.gstatic.com tcp
US 216.239.32.3:443 csi.gstatic.com tcp
IE 52.212.205.95:443 dsp.360yield.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
DE 23.88.8.125:443 uidsync.net tcp
DE 23.88.8.125:443 uidsync.net tcp
US 104.18.41.104:443 img.connatix.com udp
US 35.244.174.68:443 id.rlcdn.com udp
GB 142.250.187.226:443 cm.g.doubleclick.net udp
IE 3.253.90.211:443 s.srvsynd.com tcp
IE 3.253.90.211:443 s.srvsynd.com tcp
US 104.18.22.145:443 cadmus2.script.ac tcp
IE 3.253.90.211:443 s.srvsynd.com tcp
US 104.18.1.150:443 localhost.crcldu.com tcp
GB 142.250.187.234:443 content-autofill.googleapis.com tcp
US 216.239.32.3:443 csi.gstatic.com udp
US 104.18.41.104:443 img.connatix.com tcp
NL 178.250.1.9:443 dis.eu.criteo.com tcp
NL 185.89.210.153:443 ib.adnxs.com tcp
US 34.1.224.215:443 csync.loopme.me tcp
US 8.8.8.8:53 trc.taboola.com udp
DK 37.157.5.141:443 c1.adform.net tcp
US 151.101.193.44:443 trc.taboola.com tcp
IE 3.248.27.53:443 pm.w55c.net tcp
US 8.8.8.8:53 44.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 53.27.248.3.in-addr.arpa udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
IE 54.170.20.205:443 match.prod.bidr.io tcp
US 3.217.190.136:443 sync.srv.stackadapt.com tcp
US 98.82.157.231:443 s.amazon-adsystem.com tcp
NL 89.207.16.137:443 casale-match.dotomi.com tcp
NL 193.0.160.130:443 p.rfihub.com tcp
NL 35.214.174.141:443 a.sportradarserving.com tcp
NL 35.214.174.141:443 a.sportradarserving.com udp
US 104.18.41.104:443 img.connatix.com udp
US 8.8.8.8:53 231.157.82.98.in-addr.arpa udp
NL 172.217.168.227:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
NL 172.217.168.227:443 beacons.gcp.gvt2.com udp
CA 34.0.38.213:443 e2c69.gcp.gvt2.com tcp
NL 172.217.168.195:443 beacons.gvt2.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
NL 172.217.168.227:443 beacons.gcp.gvt2.com tcp
GB 172.217.169.65:443 tpc.googlesyndication.com udp
GB 142.250.200.14:443 google.com udp
US 104.18.41.104:443 img.connatix.com udp
NL 172.217.168.227:443 beacons.gcp.gvt2.com udp
NL 172.217.168.227:443 beacons.gcp.gvt2.com udp
NL 172.217.168.227:443 beacons.gcp.gvt2.com udp
NL 172.217.168.227:443 beacons.gcp.gvt2.com udp
US 104.18.41.104:443 img.connatix.com udp
NL 172.217.168.227:443 beacons.gcp.gvt2.com udp
NL 216.58.208.99:443 beacons5.gvt3.com tcp
US 8.8.8.8:53 99.208.58.216.in-addr.arpa udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 2.19.252.143:80 crl.microsoft.com tcp
GB 2.19.252.143:80 crl.microsoft.com tcp
US 8.8.8.8:53 32.113.50.184.in-addr.arpa udp
US 8.8.8.8:53 143.252.19.2.in-addr.arpa udp
N/A 127.0.0.1:52998 tcp
N/A 127.0.0.1:53003 tcp
N/A 127.0.0.1:53005 tcp
RU 178.248.233.94:443 f2.drweb.com tcp
US 8.8.8.8:53 download.geo.drweb.com udp
RU 195.161.158.50:80 download.geo.drweb.com tcp
RU 195.161.158.50:443 download.geo.drweb.com tcp
US 8.8.8.8:53 94.233.248.178.in-addr.arpa udp
US 8.8.8.8:53 50.158.161.195.in-addr.arpa udp
N/A 127.0.0.1:53130 tcp
N/A 127.0.0.1:53132 tcp
GB 2.19.252.143:80 crl.microsoft.com tcp
N/A 127.0.0.1:53136 tcp
N/A 127.0.0.1:53138 tcp
N/A 127.0.0.1:53140 tcp
N/A 127.0.0.1:53142 tcp
GB 2.19.252.143:80 crl.microsoft.com tcp
GB 2.19.252.143:80 crl.microsoft.com tcp
N/A 127.0.0.1:53146 tcp
N/A 127.0.0.1:53148 tcp
N/A 127.0.0.1:53150 tcp
GB 2.19.252.143:80 crl.microsoft.com tcp
GB 2.19.252.143:80 crl.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
N/A 127.0.0.1:53158 tcp
GB 184.25.193.234:80 www.microsoft.com tcp
N/A 127.0.0.1:53162 tcp
N/A 127.0.0.1:53163 tcp
US 8.8.8.8:53 cloud-f1.dev.drweb.com udp
GB 2.19.252.143:80 crl.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
RU 176.100.243.248:2075 cloud-f1.dev.drweb.com udp
RU 176.100.243.248:2075 cloud-f1.dev.drweb.com udp
US 8.8.8.8:53 c6.dev.drweb.com udp
RU 176.100.243.249:3030 c6.dev.drweb.com tcp
US 8.8.8.8:53 234.193.25.184.in-addr.arpa udp
US 8.8.8.8:53 248.243.100.176.in-addr.arpa udp
US 8.8.8.8:53 c6.dev.drweb.com udp
RU 176.100.243.249:2075 c6.dev.drweb.com udp
RU 176.100.243.248:3030 cloud-f1.dev.drweb.com tcp
US 8.8.8.8:53 www.freedrweb.com udp
RU 213.79.65.35:80 www.freedrweb.com tcp
RU 213.79.65.35:80 www.freedrweb.com tcp
RU 213.79.65.35:443 www.freedrweb.com tcp
RU 213.79.65.58:443 free.drweb.com tcp
US 8.8.8.8:53 133.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 35.65.79.213.in-addr.arpa udp
US 8.8.8.8:53 73.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 87.250.251.119:443 mc.yandex.ru tcp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 216.239.32.36:443 region1.analytics.google.com tcp
GB 216.58.204.67:443 www.google.co.uk tcp
BE 66.102.1.154:443 stats.g.doubleclick.net tcp
RU 213.79.65.58:443 free.drweb.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
GB 2.18.27.82:443 www.bing.com tcp
RU 87.250.255.11:80 yandex.com.tr tcp
RU 87.250.255.11:80 yandex.com.tr tcp
RU 87.250.255.11:443 yandex.com.tr tcp
RU 178.154.131.217:443 yastatic.net tcp
RU 178.154.131.217:443 yastatic.net tcp
RU 178.154.131.217:443 yastatic.net tcp
RU 178.154.131.217:443 yastatic.net tcp
RU 178.154.131.217:443 yastatic.net tcp
RU 178.154.131.217:443 yastatic.net tcp
RU 178.154.131.217:443 yastatic.net tcp
RU 178.154.131.217:443 yastatic.net tcp
RU 178.154.131.217:443 yastatic.net tcp
RU 178.154.131.217:443 yastatic.net tcp
RU 178.154.131.217:443 yastatic.net tcp
RU 87.250.251.119:443 mc.yandex.com.tr tcp
RU 93.158.134.36:443 favicon.yandex.net tcp
RU 87.250.247.182:443 avatars.mds.yandex.net tcp
RU 213.180.204.91:443 yabs.yandex.ru tcp
RU 213.180.204.91:443 yabs.yandex.ru tcp
RU 87.250.251.92:443 static-mon.yandex.net tcp
US 172.67.73.98:443 web2.temp-mail.org tcp
US 172.67.73.98:443 web2.temp-mail.org tcp
US 8.8.8.8:53 98.73.67.172.in-addr.arpa udp
US 172.66.40.60:443 cdn.paddle.com tcp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
GB 159.65.211.77:443 t.fullres.net tcp
US 172.67.73.98:443 web2.temp-mail.org tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
NL 152.42.150.143:443 t.fullres.net tcp
US 172.67.41.60:443 btloader.com tcp
NL 18.239.70.203:443 c.amazon-adsystem.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
GB 142.250.179.226:443 ep1.adtrafficquality.google tcp
US 8.8.8.8:53 143.150.42.152.in-addr.arpa udp
US 8.8.8.8:53 60.41.67.172.in-addr.arpa udp
US 8.8.8.8:53 113.39.65.18.in-addr.arpa udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 172.67.69.19:443 ad-delivery.net tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
NL 18.238.243.122:443 config.aps.amazon-adsystem.com tcp
DE 23.197.10.19:443 secure.cdn.fastclick.net tcp
US 216.239.34.36:443 region1.analytics.google.com udp
DE 37.252.171.21:443 ib.adnxs.com tcp
US 34.120.63.153:443 prebid.media.net tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 172.64.153.78:443 mp.4dex.io tcp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
NL 188.166.203.175:443 rt.marphezis.com tcp
DE 51.89.9.254:443 onetag-sys.com tcp
FR 149.202.238.97:443 prg.smartadserver.com tcp
FR 149.202.238.97:443 prg.smartadserver.com tcp
FR 149.202.238.97:443 prg.smartadserver.com tcp
FR 149.202.238.97:443 prg.smartadserver.com tcp
FR 149.202.238.97:443 prg.smartadserver.com tcp
FR 149.202.238.97:443 prg.smartadserver.com tcp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 script.4dex.io udp
US 167.99.22.253:443 exchange.cootlogix.com tcp
US 167.99.22.253:443 exchange.cootlogix.com tcp
US 8.8.8.8:53 srv.buysellads.com udp
US 167.99.22.253:443 exchange.cootlogix.com tcp
US 167.99.22.253:443 exchange.cootlogix.com tcp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
US 167.99.22.253:443 exchange.cootlogix.com tcp
US 167.99.22.253:443 exchange.cootlogix.com tcp
US 8.8.8.8:53 pbjs.e-planning.net udp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
DE 3.78.168.176:443 tlx.3lift.com tcp
GB 159.65.211.77:443 srv.buysellads.com tcp
NL 18.239.18.12:443 tags.crwdcntrl.net tcp
US 104.26.9.169:443 script.4dex.io tcp
NL 18.239.68.199:443 aax.amazon-adsystem.com tcp
US 172.67.38.106:443 cdn.id5-sync.com tcp
NL 193.3.178.4:443 pbjs.e-planning.net tcp
NL 178.250.1.56:443 bidder.criteo.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 18.239.50.87:443 hb.yellowblue.io tcp
US 104.22.53.173:443 cdn.hadronid.net tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 130.211.23.194:443 api.btloader.com tcp
NL 18.239.83.27:80 crt.rootg2.amazontrust.com tcp
US 35.241.34.106:443 c.4dex.io tcp
US 35.241.34.106:443 c.4dex.io tcp
US 35.241.34.106:443 c.4dex.io tcp
US 35.241.34.106:443 c.4dex.io tcp
US 35.241.34.106:443 c.4dex.io tcp
US 35.241.34.106:443 c.4dex.io tcp
US 104.26.9.169:443 script.4dex.io tcp
US 104.18.22.145:443 cadmus.script.ac tcp
US 104.22.4.69:443 a.ad.gt tcp
GB 142.250.179.226:443 ep1.adtrafficquality.google tcp
RU 77.88.55.88:443 yandex.ru tcp
US 35.241.34.106:443 c.4dex.io udp
GB 216.58.213.1:443 14604d3e37b8944df79e22e0285f54eb.safeframe.googlesyndication.com tcp
RU 5.255.197.17:443 egress.yandex.net tcp
GB 142.250.179.225:443 ep2.adtrafficquality.google tcp
US 104.22.4.69:443 a.ad.gt tcp
US 8.8.8.8:53 169.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 173.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 56.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 151.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 106.34.241.35.in-addr.arpa udp
US 8.8.8.8:53 27.83.239.18.in-addr.arpa udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 225.179.250.142.in-addr.arpa udp
RU 5.255.197.17:443 egress.yandex.net tcp
NL 185.89.210.141:443 secure.adnxs.com tcp
GB 172.217.169.65:443 tpc.googlesyndication.com tcp
NL 178.250.1.11:443 dnacdn.net tcp
GB 172.217.169.65:443 tpc.googlesyndication.com udp
GB 142.250.179.225:443 ep2.adtrafficquality.google udp
DE 141.95.98.65:443 id5-sync.com tcp
DE 162.19.138.83:443 id5-sync.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
FR 185.235.86.251:443 ag.gbc.criteo.com tcp
NL 185.235.87.191:443 gem.gbc.criteo.com tcp
NL 178.250.1.11:443 dnacdn.net tcp
RU 87.250.251.92:443 static-mon.yandex.net tcp
DE 51.89.9.254:443 onetag-sys.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 sync.adkernel.com udp
US 68.183.25.196:443 sync.cootlogix.com tcp
GB 2.19.117.70:443 acdn.adnxs.com tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
GB 2.22.144.11:443 hb.trustedstack.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
NL 103.67.200.72:443 sync.adkernel.com tcp
GB 184.25.193.73:443 eus.rubiconproject.com tcp
GB 184.25.192.27:443 contextual.media.net tcp
GB 184.26.56.245:443 ads.pubmatic.com tcp
NL 18.239.18.93:443 eu-west-1-cs-rtb.openwebmp.com tcp
US 52.21.74.179:443 cs-server-s2s.yellowblue.io tcp
US 104.18.7.198:443 gum.aidemsrv.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 8.8.8.8:53 93.18.239.18.in-addr.arpa udp
US 8.8.8.8:53 198.7.18.104.in-addr.arpa udp
US 8.8.8.8:53 179.74.21.52.in-addr.arpa udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 67.202.105.23:443 ssc-cms.33across.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
GB 2.20.12.70:443 player.aniview.com tcp
GB 23.214.129.249:443 secure-assets.rubiconproject.com tcp
FR 178.32.197.53:443 ssbsync.smartadserver.com tcp
US 34.1.224.215:443 csync.loopme.me tcp
US 3.33.220.150:443 match.adsrvr.org tcp
US 52.204.59.56:443 api-2-0.spot.im tcp
NL 185.184.8.90:443 creativecdn.com tcp
DE 148.251.40.112:443 sync.richaudience.com tcp
US 8.2.108.175:443 bc-sync.com tcp
US 50.31.142.31:443 b1sync.zemanta.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
NL 198.47.127.18:443 image8.pubmatic.com tcp
US 50.31.142.31:443 b1sync.zemanta.com tcp
US 3.210.72.87:443 sync.srv.stackadapt.com tcp
US 204.62.12.209:443 sync-service.net tcp
US 8.8.8.8:53 112.40.251.148.in-addr.arpa udp
US 8.8.8.8:53 56.59.204.52.in-addr.arpa udp
US 8.8.8.8:53 31.142.31.50.in-addr.arpa udp
IE 34.254.82.70:443 ap.lijit.com tcp
IE 34.246.145.41:443 jadserve.postrelease.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 192.132.33.69:443 bttrack.com tcp
US 8.2.108.175:443 bc-sync.com tcp
US 204.62.12.209:443 sync-service.net tcp
US 172.240.45.96:443 sync.aniview.com tcp
NL 35.214.136.108:443 x.bidswitch.net udp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
GB 142.250.179.226:443 ep1.adtrafficquality.google udp
NL 152.42.150.143:443 srv.buysellads.com tcp
FR 149.202.238.97:443 prg.smartadserver.com tcp
NL 178.250.1.56:443 bidder.criteo.com tcp
US 34.120.63.153:443 prebid.media.net udp
DE 37.252.171.21:443 ib.adnxs.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
NL 193.3.178.4:443 pbjs.e-planning.net tcp
GB 159.65.211.77:443 srv.buysellads.com tcp
US 35.241.34.106:443 c.4dex.io udp
NL 152.42.150.143:443 srv.buysellads.com tcp
US 35.241.34.106:443 c.4dex.io udp
NL 18.239.70.203:443 c.amazon-adsystem.com tcp
NL 18.239.68.199:443 aax.amazon-adsystem.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
FR 149.202.238.97:443 prg.smartadserver.com tcp
US 34.120.63.153:443 prebid.media.net udp
DE 37.252.171.21:443 ib.adnxs.com tcp
US 167.99.22.253:443 exchange.cootlogix.com tcp
US 167.99.22.253:443 exchange.cootlogix.com tcp
US 167.99.22.253:443 exchange.cootlogix.com tcp
US 167.99.22.253:443 exchange.cootlogix.com tcp
US 167.99.22.253:443 exchange.cootlogix.com tcp
US 167.99.22.253:443 exchange.cootlogix.com tcp
NL 178.250.1.56:443 bidder.criteo.com tcp
DE 51.89.9.254:443 onetag-sys.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
RU 213.79.65.56:443 st.drweb.com tcp
NL 193.3.178.4:443 pbjs.e-planning.net tcp
GB 159.65.211.77:443 srv.buysellads.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
GB 142.250.179.226:443 ep1.adtrafficquality.google tcp
US 35.241.34.106:443 c.4dex.io udp
US 130.211.23.194:443 api.btloader.com udp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
NL 185.89.210.141:443 secure.adnxs.com tcp
FR 185.235.86.251:443 ag.gbc.criteo.com tcp
NL 185.235.87.191:443 gem.gbc.criteo.com tcp
GB 172.217.169.65:443 tpc.googlesyndication.com udp
GB 142.250.179.226:443 ep1.adtrafficquality.google udp
GB 142.250.179.225:443 ep2.adtrafficquality.google udp
GB 142.250.179.226:443 ep1.adtrafficquality.google udp
NL 103.67.200.72:443 sync.adkernel.com tcp
US 68.183.25.196:443 sync.cootlogix.com tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 67.202.105.23:443 ssc-cms.33across.com tcp
US 18.211.232.251:443 cs-server-s2s.yellowblue.io tcp
NL 81.17.55.170:443 ssbsync.smartadserver.com tcp
US 8.2.108.175:443 bc-sync.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
DE 148.251.40.112:443 sync.richaudience.com tcp
US 3.33.220.150:443 match.adsrvr.org tcp
US 50.31.142.31:443 b1sync.zemanta.com tcp
US 50.31.142.31:443 b1sync.zemanta.com tcp
IE 34.246.145.41:443 jadserve.postrelease.com tcp
US 34.1.224.215:443 csync.loopme.me tcp
US 192.132.33.69:443 bttrack.com tcp
US 3.211.176.3:443 sync.srv.stackadapt.com tcp
IE 52.211.215.196:443 ap.lijit.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
US 8.2.108.175:443 bc-sync.com tcp
RU 213.79.65.58:443 free.drweb.com tcp
NL 152.42.150.143:443 srv.buysellads.com tcp
GB 216.58.204.67:443 www.google.co.uk udp
US 216.239.34.36:443 region1.google-analytics.com udp
RU 95.181.182.182:443 cdn-download.drweb.com tcp
GB 2.19.252.143:80 crl.microsoft.com tcp
GB 2.19.252.143:80 crl.microsoft.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 142.250.178.3:443 www.google.co.uk udp
RU 178.248.233.94:443 f2.drweb.com tcp
N/A 127.0.0.1:54728 tcp
N/A 127.0.0.1:54733 tcp
N/A 127.0.0.1:54735 tcp
RU 195.133.219.93:80 download.geo.drweb.com tcp
RU 195.133.219.93:443 download.geo.drweb.com tcp
GB 2.19.252.143:80 crl.microsoft.com tcp
GB 2.19.252.143:80 crl.microsoft.com tcp
GB 2.19.252.143:80 crl.microsoft.com tcp
GB 2.19.252.143:80 crl.microsoft.com tcp
GB 2.19.252.143:80 crl.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 2.19.252.143:80 crl.microsoft.com tcp
RU 176.100.243.249:2075 c6.dev.drweb.com udp
GB 184.25.193.234:80 www.microsoft.com tcp
RU 176.100.243.248:2075 cloud-f1.dev.drweb.com udp
N/A 127.0.0.1:55051 tcp
N/A 127.0.0.1:55053 tcp
N/A 127.0.0.1:55055 tcp
N/A 127.0.0.1:55057 tcp
N/A 127.0.0.1:55060 tcp
N/A 127.0.0.1:55062 tcp
N/A 127.0.0.1:55065 tcp
N/A 127.0.0.1:55067 tcp
N/A 127.0.0.1:55070 tcp
N/A 127.0.0.1:55079 tcp
N/A 127.0.0.1:55081 tcp
N/A 127.0.0.1:55086 tcp
RU 176.100.243.247:2075 c2.dev.drweb.com udp
RU 176.100.243.249:2075 c6.dev.drweb.com udp
US 8.8.8.8:53 c1.dev.drweb.com udp
RU 176.100.243.248:3030 c1.dev.drweb.com tcp
US 8.8.8.8:53 247.243.100.176.in-addr.arpa udp
RU 176.100.243.248:2075 c1.dev.drweb.com udp
US 8.8.8.8:53 c2.dev.drweb.com udp
RU 176.100.243.247:3030 c2.dev.drweb.com tcp
US 8.8.8.8:53 www.microsoft.com udp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
N/A 127.0.0.1:55106 tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
N/A 127.0.0.1:55108 tcp
N/A 127.0.0.1:55110 tcp
US 104.18.20.226:80 crl.globalsign.com tcp
US 104.18.20.226:80 crl.globalsign.com tcp
US 104.18.20.226:80 crl.globalsign.com tcp
US 104.18.20.226:80 crl.globalsign.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
N/A 127.0.0.1:55121 tcp
N/A 127.0.0.1:55123 tcp
N/A 127.0.0.1:55125 tcp
N/A 127.0.0.1:55127 tcp
N/A 127.0.0.1:55139 tcp
N/A 127.0.0.1:55141 tcp
N/A 127.0.0.1:55143 tcp
N/A 127.0.0.1:55145 tcp
N/A 127.0.0.1:55147 tcp
N/A 127.0.0.1:55149 tcp
N/A 127.0.0.1:55151 tcp
N/A 127.0.0.1:55153 tcp
N/A 127.0.0.1:55155 tcp
N/A 127.0.0.1:55166 tcp
N/A 127.0.0.1:55168 tcp
N/A 127.0.0.1:55170 tcp
N/A 127.0.0.1:55172 tcp
N/A 127.0.0.1:55174 tcp
N/A 127.0.0.1:55176 tcp
N/A 127.0.0.1:55178 tcp
N/A 127.0.0.1:55180 tcp
N/A 127.0.0.1:55182 tcp
N/A 127.0.0.1:55204 tcp
N/A 127.0.0.1:55206 tcp
N/A 127.0.0.1:55208 tcp
N/A 127.0.0.1:55210 tcp
N/A 127.0.0.1:55212 tcp
N/A 127.0.0.1:55214 tcp
N/A 127.0.0.1:55216 tcp
N/A 127.0.0.1:55218 tcp
N/A 127.0.0.1:55224 tcp
N/A 127.0.0.1:55239 tcp
N/A 127.0.0.1:55242 tcp
N/A 127.0.0.1:55244 tcp
N/A 127.0.0.1:55246 tcp
N/A 127.0.0.1:55248 tcp
N/A 127.0.0.1:55250 tcp
N/A 127.0.0.1:55253 tcp
N/A 127.0.0.1:55255 tcp
N/A 127.0.0.1:55265 tcp
N/A 127.0.0.1:55277 tcp
N/A 127.0.0.1:55280 tcp
N/A 127.0.0.1:55279 tcp
N/A 127.0.0.1:55283 tcp
N/A 127.0.0.1:55285 tcp
N/A 127.0.0.1:55287 tcp
N/A 127.0.0.1:55289 tcp
N/A 127.0.0.1:55291 tcp
N/A 127.0.0.1:55295 tcp
N/A 127.0.0.1:55297 tcp
N/A 127.0.0.1:55310 tcp
N/A 127.0.0.1:55312 tcp
N/A 127.0.0.1:55314 tcp
N/A 127.0.0.1:55317 tcp
N/A 127.0.0.1:55320 tcp
N/A 127.0.0.1:55336 tcp
N/A 127.0.0.1:55339 tcp
N/A 127.0.0.1:55341 tcp
N/A 127.0.0.1:55343 tcp
N/A 127.0.0.1:55345 tcp
N/A 127.0.0.1:55347 tcp
N/A 127.0.0.1:55349 tcp
N/A 127.0.0.1:55353 tcp
N/A 127.0.0.1:55357 tcp
N/A 127.0.0.1:55373 tcp
N/A 127.0.0.1:55376 tcp
N/A 127.0.0.1:55378 tcp
N/A 127.0.0.1:55380 tcp
N/A 127.0.0.1:55383 tcp
N/A 127.0.0.1:55385 tcp
N/A 127.0.0.1:55388 tcp
N/A 127.0.0.1:55400 tcp
N/A 127.0.0.1:55402 tcp
N/A 127.0.0.1:55404 tcp
N/A 127.0.0.1:55406 tcp
N/A 127.0.0.1:55409 tcp
N/A 127.0.0.1:55411 tcp
N/A 127.0.0.1:55419 tcp
N/A 127.0.0.1:55421 tcp
N/A 127.0.0.1:55423 tcp
N/A 127.0.0.1:55425 tcp
N/A 127.0.0.1:55435 tcp
N/A 127.0.0.1:55438 tcp
N/A 127.0.0.1:55440 tcp
N/A 127.0.0.1:55450 tcp
N/A 127.0.0.1:55452 tcp
N/A 127.0.0.1:55454 tcp
N/A 127.0.0.1:55458 tcp
N/A 127.0.0.1:55468 tcp
N/A 127.0.0.1:55470 tcp
N/A 127.0.0.1:55474 tcp
N/A 127.0.0.1:55477 tcp
N/A 127.0.0.1:55480 tcp
N/A 127.0.0.1:55482 tcp
N/A 127.0.0.1:55484 tcp
N/A 127.0.0.1:55490 tcp
N/A 127.0.0.1:55492 tcp
N/A 127.0.0.1:55496 tcp
N/A 127.0.0.1:55505 tcp
N/A 127.0.0.1:55507 tcp
N/A 127.0.0.1:55508 tcp
N/A 127.0.0.1:55517 tcp
N/A 127.0.0.1:55519 tcp
N/A 127.0.0.1:55521 tcp
N/A 127.0.0.1:55530 tcp
N/A 127.0.0.1:55532 tcp
N/A 127.0.0.1:55534 tcp
N/A 127.0.0.1:55536 tcp
N/A 127.0.0.1:55544 tcp
N/A 127.0.0.1:55546 tcp
N/A 127.0.0.1:55550 tcp
N/A 127.0.0.1:55552 tcp
N/A 127.0.0.1:55554 tcp
N/A 127.0.0.1:55563 tcp
N/A 127.0.0.1:55566 tcp
N/A 127.0.0.1:55568 tcp
N/A 127.0.0.1:55578 tcp
N/A 127.0.0.1:55580 tcp
N/A 127.0.0.1:55582 tcp
N/A 127.0.0.1:55598 tcp
N/A 127.0.0.1:55600 tcp
N/A 127.0.0.1:55602 tcp
N/A 127.0.0.1:55604 tcp
N/A 127.0.0.1:55606 tcp
N/A 127.0.0.1:55608 tcp
N/A 127.0.0.1:55610 tcp
N/A 127.0.0.1:55612 tcp
N/A 127.0.0.1:55622 tcp
N/A 127.0.0.1:55624 tcp
N/A 127.0.0.1:55630 tcp
N/A 127.0.0.1:55632 tcp
N/A 127.0.0.1:55639 tcp
N/A 127.0.0.1:55660 tcp
N/A 127.0.0.1:55662 tcp
RU 176.100.243.248:3020 c1.dev.drweb.com tcp
RU 176.100.243.247:3020 c2.dev.drweb.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 2.19.252.157:80 crl.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
RU 176.100.243.248:3030 c1.dev.drweb.com tcp
RU 176.100.243.248:3030 c1.dev.drweb.com tcp
RU 176.100.243.248:3020 c1.dev.drweb.com tcp
RU 176.100.243.248:3020 c1.dev.drweb.com tcp
N/A 127.0.0.1:55723 tcp
N/A 127.0.0.1:55725 tcp
N/A 127.0.0.1:55732 tcp
N/A 127.0.0.1:55734 tcp
N/A 127.0.0.1:55741 tcp
N/A 127.0.0.1:55746 tcp
N/A 127.0.0.1:55749 tcp
N/A 127.0.0.1:55754 tcp
N/A 127.0.0.1:55762 tcp
N/A 127.0.0.1:55767 tcp
N/A 127.0.0.1:55770 tcp
N/A 127.0.0.1:55772 tcp
RU 176.100.243.249:3020 c6.dev.drweb.com tcp

Files

memory/3856-0-0x0000000000400000-0x00000000005B7000-memory.dmp

memory/3856-1-0x0000000002580000-0x0000000002581000-memory.dmp

\??\pipe\crashpad_3068_JQQHRBUCRVGPJGQY

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

memory/3856-49-0x0000000000400000-0x00000000005B7000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

MD5 0f4e50f6c937a80db677be3e4a4f0587
SHA1 cf18b284996bd2a748d10a975a3f615f60485e54
SHA256 566527c790575104bf06a85be776f61f7e371a622a7e39753f81d1c7d6ef95be
SHA512 b55cb0c766f3ba717fcdda70a49aa44ec162009154df129e9b0ed799a19724cf0f61d073f4a1dcc6f34b84164ca2ad0eaeb856cea67522f4cf0be8aa5557824e

memory/3856-56-0x0000000002580000-0x0000000002581000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 ea0966f3cca5cdb6a93583da24ae8feb
SHA1 03eb0573d9a68060f2b26ffef38b4897a40055ec
SHA256 a8ad22faed44cf532b91796ead806fc06e72afb9261d6de519e026d855232148
SHA512 61ecb1128bb4958015589fde24625494995746ed7e21d0da346f989de6668e0bb05612fc62009ff86c9465a7d3034076076ebde44b01ddf137330ebd3b87e2f0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0931ac423c3d818134f6ab8479fe276e
SHA1 2b2c4cb24e6755c38e300a095dbc94974acee60c
SHA256 27e0fcd4b2906e0084939c8c3b59067c01f0ac0767d2a4eaa2e76c7dea87d40e
SHA512 495005ce2140313c17bffd15f32fdbbffa8d7f91937e686ae9c4f51a74402fb18237a10fed5e8cd4b20d34ddca8aa832cb21c0752ba8a9365e02d5c05cbbdd10

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 042a8f84429886dafb2611b6eeca118e
SHA1 3f73bc3e41cb46bd0e617756a9b24aeaa8d1dee9
SHA256 2518ebcd4e8b2033ec5209d8e7fdf881c6dda05be708799a3435e748b5f602bf
SHA512 4edd62673344c704116a6c886de86f4b5f283ac399f4da84d4a56b039533cc78198f49e864a33e590e05b7841efd68a4bafc9a05d8cea360cf56195e81e95a68

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 1e1ddc6abb0b0cd805d3c91adc199156
SHA1 8894e350a9b827ec7434f582aca29155ad2d3f90
SHA256 366fda431bf550b0138a7a1aefb0e7ffd219794197283c18dff73167e4b474f4
SHA512 6eceaaf2712b77c23937aae3a0d822be9c623c0932d6b285dad82ddf356c3820b7758f7155860d59726b5978db9db0d6113a867afef00483d2a8ab6901db0c7e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0002b6fdc16c14d858dc5e0351c0eeec
SHA1 8c5d24a8180431004a1b0e2e475c6adfbefd83aa
SHA256 0c8e78c3becd6466e239ed15d5a74c2445a090985f6c85942f05571b0410c216
SHA512 d4749c93114c31ebbb4f50e0311044c9e90a79c9813c23ef61fc3adab5109064c65fba2688a7c18258795616dbf65f2f0c2a07152e7f8813d632000c5ad6b1cf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c

MD5 074d7c0ab0352d979572b757de8b9f0c
SHA1 ca7dd3b86c5e8a750401b8d6d773a9cc3af55b81
SHA256 46a06c3ec01cd4c5d5d8bb131febc48e3b1eeac94a47fe0718dfce6af821f83a
SHA512 00de9f645ca784322b005c73302aa573ab0665e8334533e7408326f0c84c12f3d056f39a2197d5c4bb8092f3b09dec4b79ec73de1b5d161951c5c48b9548216d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d0fb4a0f0b5980432364effcd8886181
SHA1 2c0b895d3f61a0dc5bb33034756bc064e74864eb
SHA256 112f50d5eac0ca3d6a618ec310308439b51dfc53bd70dc7a9b391c24323d9c0c
SHA512 2a609c613bea45a668136c1712dc171ce2e734ff3396c33ab1f236954baaddd97df332b43e710e2b3e8351041f075c1eb01e04a3367e443c90a4b7c72508fd3a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6d9b41a954611b8fbed24cbdd7fff7fb
SHA1 d2fa0d43af5485e7d6f4821ef8fa805992b53c25
SHA256 2446c3403f301dd34aa8ee49f1620991d73d38f46f441ff74102b40f25d3c3cd
SHA512 36148633f440ee218056591ac1420a42d92bfb704f22b291f7d3aa5135388c6df4d3fde95ba197b71e2458a2d3088469617e4a0d50f48bcec65cef6856f12a22

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4b1344390f817769c1b9de410f98d941
SHA1 3ed17db3fba33eff71c3e72d4f284909ba607cfc
SHA256 f29ff9299cac31435794cf23f606e562b001fa3c7cabd9b1c19094d90bca0649
SHA512 249a1e79e34aa8b13b3f9b168633ea201c2f1c20375aeee7614a51d6f665d16e178b18b8ab2e57e1cfec9db9095cdfa9b8e3c302044827d79d21c1fe64b3bfdf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 a16459f5ec8aa00fb4af43d403f578f5
SHA1 b7cf4928f1e04e221e087bb2291c1a6d6d65d8d1
SHA256 eab58ca0ab5889725298a76500f1fb8e7d1be70ac8e4be1fbd10441c32977ded
SHA512 5d660c33c57d86fe534b21422c093aabb781a189a0ecfbe2675d96a5f9991b3c5594032cf602ec637a77b51b8a25adbc7658afc77d7b273b7f2b11a7500bf78d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e41fdc51c3e88e088276a524ed782fcb
SHA1 6a54de6e4d7ad5639cb4ed5e5de1804646c21a06
SHA256 9cfa29183994a428f4f9d04e1db52035d4e1dfa2605851eea130d1095da50f1e
SHA512 3ec05e4b4038486b0866e5ccb674741b498e1eee7aa610948691e0dbf8652bed7dd3313c332929afb9bffdd209185e73c5d25c31338b98d2a7842a4badabeaa2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5342026facf60cc67967a89d927d4c11
SHA1 4f9a33c595f2d1deb9d4da25e8c2aae6748432ed
SHA256 cce245d485054b22dde24f8d24dc053ea43f75a90d9625e76fed98b7682b536e
SHA512 982f8b1ca3b08fcdd98ed3ca23aea804b654d76987d938b1b94380575d98e7fc6d16e1179e87b6d07c486eaaf28a9951a1bfd42ec6e6976c7e0b25c68be1dc62

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 46ba357676a9f980c6cf36e4d4537d9b
SHA1 e5d180754175dd946a82dcafd46bebdaa35cc2cc
SHA256 a2a3fe47f08055ef12f27feba0339956ec18af44002cd12dc590f23753fa9875
SHA512 cf6a0b1d72afc6a1f662b6d6716bb7306caed18abfad1859596c797a58c7647b37085aeec9f1b60b04897a15c89a30d661278a6366e5a5460406c5a408705b77

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\bc1edcae1ba2d708_0

MD5 302afb2d08f89ee25336a73e5e731ee6
SHA1 f24f5ac7d007d50601d85f25ccb3226b96329395
SHA256 012434b2183c0fc67126eb5393b3e829431ff7a14cf82c0bb8d660d4448df2bf
SHA512 8e8baa080fbcdf8e5237f941d56cefbd2a3b394f41aba740929dae1c423b2500c2c211a1417369efc423180701721ce9bdc02802022e93f655661f32affcd78c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\88106a53d66f915d_0

MD5 d0481db76d288b0d1c2f2e2a23adcbf7
SHA1 c7bccdffc3f218544776fd86e7b08fffb6f285eb
SHA256 6297efe56b8e2a8ce839475d2052afeeef17b3ec1e0c9f62a6b60d17a4f8f2a0
SHA512 94327865c73affde4818416bef70dfa5c149c4fd5b53446fab574489e707f3f58d4595b4d9bbd8c05a8a9a04d3ebc2f017dff5360c3d4caf7229f1854bac7936

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\91e315eae75a2a84_0

MD5 bf90ed03b318878748975ce1d9601edd
SHA1 f6610fdf7aeeeabef1d8d873978b4f191e97eb1c
SHA256 756e073662269b510089b5cf13a946e7e75c02cfe481796a2468f63d9bf61049
SHA512 9ace8225b0b7dc3f8485a0a673eeeefaaa6878160f852225342123ff4af40255ecc69b28f03875269672f273a362d0b75223a58373967bbe8f63b246668d3e6c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8bcd566ac1375571_0

MD5 04ef09a724b44ba8464374791ed1c2d1
SHA1 e53607fa1f6b0629353ed487965024d09c6960a4
SHA256 fccf43940b93cffe349f6d0b84a0417094f891eda68d2ae350577416f3022ce2
SHA512 6d3c5536fcee9e5b993a8e12a9cc6ee245423b83f79ff82b923cd1c4a718e4748a83b0ff92a8b51008d883964044878a5f389709bb41a6973218d1a765f2d1b1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3f45d120ea7e2924_0

MD5 a480067f9dd9c86f916f2e245c7cc339
SHA1 27c6deea6541c0899f4a0cb3dbdf10064833890d
SHA256 84f30b18c46f204834d1781a5d37d58aafc75ce4fdd42c8054b4f2080e627d66
SHA512 7a411446f2bf6654dcee0c19a0353649b642724fad0bbcb708be72c1f524d72c351cfc4c2abcb919eb49a9e4f585da6cd3aef4a5dead06905004213e25c365b0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\17b1ea20fb8d51e6_0

MD5 81af1f508a61e68d3c71eaffc85dbfcf
SHA1 7a56cfa22dd6294858306d52c5ddb198ff078495
SHA256 a27d7b10444384993e037f373ac46425dc8442e2c251964aa514f3884e06a9e3
SHA512 e7813a4dcfe117bd3bcec075113973debc71ef97ae9171b9d19f3275bbe8f847df067e205d33e9baab907e84eedb63c8b0088ffdd64cef835a76324e8c92ccdb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 91b1abafac1623bac2f541ff7f1de749
SHA1 233173c34e3ae25f7535aa5c5a9d67a4ba12388d
SHA256 50861d07d223caccf341c064dd52bfbd626a27f962f99f391f0a7e92dd533bf0
SHA512 8a0bf42ec90188677b3954235b216981e22d56bb2176a6739a4162d03f81b456f8f4d911a6ea6f723684ca5c79babe3d17798692eccd4194ef0811300f863396

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 feb3722552b844eaa1245cce30356665
SHA1 5009e6600f07d100191e06df34d62a6dae98e08c
SHA256 d623b865ed097e74d4406eec3b8173c397c2f02d5587102158e468c586402dc0
SHA512 a6f0b67064f40e52e945e3d632ae752fcaafe50618d115c2c4fecc4cae1776d67d4a60983abebe14b08a6701a3c0401e89f5cbb02844995c2eab1505ca7d4480

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fbe0f33c7b3dc40a3732085c8faa4843
SHA1 1aa4a86739acd61ca357a2aea9594b492c472aea
SHA256 092e92e15e861ec5f98291d188d9255f0c5233af9f3a4cdea4214161b9c09dde
SHA512 8b797df65bc0736939cf660db21d85cc57c05c13a12ccaf0a61d0d9a8a1878896ea16500d757ca8386f0fb815b115c6ce4d2a0f7f8ed39ff802efefc75d241fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 22731ca5d07e1f3887e157dfc7055dde
SHA1 294d4c1038d646372c2a2cf1e1feabe4878ce487
SHA256 464ec4118821bf1d4ac4a3b74a4f4ed8097fa177d3d59a51e499e5767445e4de
SHA512 15be1de8c72c20314bd1bf4c0d14e0ded6519fc5ac4ccf0edbdb4ae8402788006d99c0a0caad0f71eaa91cf9f28bfc560782f27a55c0f4e9a131fb18e0ef05c6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e96aa6e7c2bc5cfbce342710c1883673
SHA1 b86910ee6fdf9c1066874b73cdc29c480b2d3405
SHA256 ae143de6e3e45d16c567233fac6f1fb571b5411e2467f6ea8535d725e4efb290
SHA512 7c3e99e86b271ff9bdbd02bceea91ce6e688fe62c74219509a9292a8b3825e7a8a9df227fa204f9e3bf88a6b970678ff180de9111f92b3d996cddd8d3276d3ba

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 382f88d31becbd9acf1b45a4cb802621
SHA1 73dff04a0bd58d364034f13b5eb3ec4439327bae
SHA256 0a115142ce5cdc45e7d490c44fe507efb80061180cca0324063e8f970f76eba0
SHA512 38ca70ee1d0788246467a54395d4d2c1b50d56b1150110713b8292f457b7425f62c4b902c6b1c1e090696d269543e9abe3f7ae738e893ebc0e99345950889022

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5dab7ecd3708cf693d5867b4cceb98eb
SHA1 ec01d2c9f3cd2056b2c54b7f92bf4451c923cc99
SHA256 1123b3c30f22c7bff3a36ff7b86e3b9cbb705aa72fa71cbf2369fb832a5033cb
SHA512 4392a4e9c7d53252ca7d58108df2cf757426ee5ff48b7c5e604ec1168c02ed0fedcee3eebf396e62f66b9de3fd19a6f013812ebd7d5e42dae73fcd94166c5a04

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 581facc490a81342b88df7eebeaa48ae
SHA1 6e002ea71a907409eff9d248d3566ea268049299
SHA256 95a34e9fc20946de02fd251cae4d4bd724532e24cf7517417c1f42b4b9ba99f3
SHA512 f880d18666cf1a365732fd4e9eea519cbfd2e0d79fe7af026411e514b7c0b945f78b643b746ab081693a26574446516232cb5befc67e7c6219e1b28de9a33c42

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\Paths\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 cfff86b34c5d92cb111b148fefb96cf5
SHA1 0061fb4eef9b08b5d0b2ecacd7df5baf08ea1024
SHA256 5f38d7b28fcf292fe85485aaf9271e80c3acdc4bfdcd443e528e4722f85dcbd4
SHA512 9cc03c34668405379f4927f1a560afffaeccf897c6fd387e9a16eb39c610ca6d5117e4b661a3df0e8bb0b41ddde1a7e691fc16b5b8cf182f3c89a12be37d151b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\db22a6ab-901a-4999-b963-f0d5d00b1ecd.tmp

MD5 762208f5c596eff68c0de2abb2bc3f13
SHA1 d7502009ca492795efd16acbb167e839577d3732
SHA256 a526289ff98d0bbf55d3a2d840cb69d1ec537d17eb1499a266c4ee623679b96c
SHA512 560cf6ea95a6470d33b7ea960f7ad10b3a07b7fae718d165de7099d0a99e91194bb7a04999d590a53bd0eaf2724a3394c02e74ab35514f122b9b44532adb3a69

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d38c96fc1b2cbd99a7eba822517ddccc
SHA1 b461f42e6a1055f920ae77be1d5a1a67cfc53a25
SHA256 8109bb31aec03ceaf1442e99678d5fc20c0ccb53db2f12b09f962b9c86462f71
SHA512 de4b26ba4cbc4e3991104db20f194cd5fb0770a33f5ef3bb99aebdd923f2dede342cf9379d4c31f6df2bbc091aa62b52136c88b76f0ebf51f2f1f25c85e0c25f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 5a9e70dce60daf66f1ac0cd0673bb79c
SHA1 2e096ad3111e32a6f487df203443f7826ba89a49
SHA256 1691ac7e58ec48ffb32cfcc6efe3e0c50c0d1a68295738ef21c7a243e2892ccd
SHA512 8a5425155c3e53ef6ff6fe6575d57e15dae6fadd9bdb67beabf844f1bef16b14896b3a23842c461d710314de0c79291fdc828ec3925b8cb1a6e204e31ed20174

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d96e437f81bc57918c468709d051f76b
SHA1 3cd3d689eaaa03b33aa2805d4494573b92f02b88
SHA256 8fe19728f560cbfc4aad011bacdc48b5d0832cd97748bbc308c3936481cdd6c9
SHA512 884f385cf61740fb72c5e578eb5cdd583ab4397d88ec1bdc02baaa171a5d7b6ac1bebbbdfdc6cd76cb853b0073c6493d920576612f1393353e971f9e0b152196

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

MD5 b5ad5caaaee00cb8cf445427975ae66c
SHA1 dcde6527290a326e048f9c3a85280d3fa71e1e22
SHA256 b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8
SHA512 92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

MD5 d222b77a61527f2c177b0869e7babc24
SHA1 3f23acb984307a4aeba41ebbb70439c97ad1f268
SHA256 80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747
SHA512 d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 811e4ab45c949a6060b3aec8c845cc13
SHA1 198692dfe31f83d22600369be4c69cb41c865e3e
SHA256 2b499ed3f0ffb60db4ad44134df95da0f6129c5509b381fc45a01db1c3b4e005
SHA512 b26e26c7a030e332cf4b5a4ced39a01998a679ac50157b21b6ad13b78cd88a49698fd198a1f015dfc5430fdd0cb1b74994ad879e32b64df0e8096dcd7010cb8f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c162ae091c59480c3f0a3a49e8bc334e
SHA1 a96aa4bef28670c4d14641474937cb0971b727d4
SHA256 c516830bfde07f4899779347c7ef4328383eec13b9342d4ac17c61a951d4b55b
SHA512 640567a5babea692742003b667f7b167ebf64249f57f56618d206ecd163d058fb1be401cf2985aa727e3e5483279a05da13e9b87211dce85c1ca9f9c9804da41

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a83c1bc32ffce83ff3d2b870772e5b15
SHA1 01b28872fcd0a47608a3f0db0f6483ffd9ce7284
SHA256 a7476049c71113968219f311a28349ce1b5ea8b4a33b609cace16ebd4aa9bcb6
SHA512 223301507875a05ffd4b7874b93b23c4f4c9ade4d9082b6a939cc94ec8c3c499220e095f9061b203f8c4a8c90de6a36bd9c244f0da9d596956a528eaac67a571

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 753d2592156b8bcd6d97e2f4916e77a6
SHA1 0c33e8e5c2664915d3b8d3f7afd51bae5f17429d
SHA256 605557990d90215249167b8ea2c22061c0098b05e152f9b617b4bdc5c44a8757
SHA512 5d51a3c601f98013894f4d86f76e08d45df150f0c82da658ee7753ea485c878709fadc230ef9017cfcf7d3e8f43a6514c043b9075be971eaa44982b8cb57c93e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 a8efd3e0d6f90c5f31cc6de78045b5dd
SHA1 3d4c06b8cb422b50c715c3d6876abd2d99e043bf
SHA256 fc175938e354505a1b58159d8d8b286ba1302ef8ff1790916b597ef40c5d20e0
SHA512 f8306f401241b0fbec0d056edaf72ab7fbfc891698269429e89fd2ccd3c1aa4d618d32881ea4b9f46ca9d01610f4cb3200c5825a375927e9dd43fddc6498eaac

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1c02b4da267de92356ecc2a5084295fb
SHA1 c65f3e2803c55624c69497c4be20ede842edc01d
SHA256 2d4e1438ae14c3b1c1211fa102b79477d9a950cdd14435c7847b0f8c4b9caa62
SHA512 b561c3f147a62991ece4027215e9f158df6fa375ce71774e79d7fbb6c8835d088a07fd9753a46d5e5e11e1d84659ef8d7e0a0ff8231ae3dce0acd68d31175df5

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 8af9c68694ae3bb2d846443c156dbf8f
SHA1 cfbff2b0a3524f21d8c9a5d647d0942d0c58f042
SHA256 347bbf6fc7d97900595b5b51619990a739e1f63cba9f50a056f379244e4a1c19
SHA512 95ea35265630d4083d4f20381ade93e3abc7fc4d75f3c9aa9e2223035e5621c1a7d0ac0b3df4ac819eb0ec92eed246653c19146db1fb409c8294a97db5027936

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 0b80bfed71a4fb8357c18edc70aa3eac
SHA1 4d0af38f35b73f167b838720b1c1d027aec64e13
SHA256 f422394ecc8292487f7995b16a6140e3f611499a4b0645601dc21670bedf65c9
SHA512 97aab85e6aa4bf8d4df8109408e5b330fb93268d8a2db706fd5ef4c7ec3a878d1995ee27918a4eac9fb844a0df67d02d0e27d4d340ffaeec2519e6ae16d3df66

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 7095bf9c9f44005874ae8a9d2a07d20b
SHA1 8367831e14260bbff6ff94fa1d152177ec37e8a9
SHA256 253450d306822867b810c51abb6ea70861735b2a327890dc3753e117e82d9b5b
SHA512 ba09973c2a10304ba0ced8d8a276ea88b7848f41ff1f12f340b92cf9f45317db873cc3588430eadd7ebad53f61d458f23c7555c96b9ead7d109fe1c4c2bba858

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 f6e01e6ca5531d703933701823cd5d33
SHA1 2eb833b1360f3b9b7c41260288e4a406be2f23d1
SHA256 f1726fd28043edbade452d5418f26d016c5538b6eba5b12998dd0f7eb72be9b2
SHA512 2b6071a61d72f7c527e3a775e50210b623c9a770295aa39f8e9949a3a06b1483b6f81751cf22f1c9b14567e71381b446ef3f08c3ce01422dcd1e627eaf9b01e9

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 86be54d5c4862dcd5e8446da30ccc472
SHA1 b63dda8a92fb090aaec36d27caf35c56ddd4a86c
SHA256 8ae94cfe813f882c5db28d21bbf43f47ce2a2b1587f91ef7aaa24332f52903ee
SHA512 cbb5f33ae653f52c400bfd01f704f0eba9aa9c1f816b2c72cac8240879118a55c64ce1ade942f53545166c479fb06011e89b62035095cbc80d40ab5b14d2ef68

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 688d8f8607cb7839ba55114b07f07efb
SHA1 4bab3702bf35e04fbd475404b6a74b2b8e7050c2
SHA256 042919c71a8c4ae1f1d76040eba22958c5e774ab59ed4f413a9308a093fb5056
SHA512 58c5fcf69989927f80121b53589e8dd1f1a29931aa4e71f211365a2f202ea13197a9c28f3e36fcb1ba404834a2e7cb2631fe23518dcaf4e93f7aba52b82fca22

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 31db0ab2528e81562dd6bdc9a649c91f
SHA1 77f2bfafa0479162e488943a3c795c519f298d1b
SHA256 ef6b0e31ba52a964f05de9749dbafbf8fdc8ec79968197df0a8a8aa582dce24d
SHA512 a381e0f6a1c5fa39778823a9bbb3b3b532b1b6de4d33c7230bd1b08e7d04c3422e471e4fe317bd8b19a170ccb23879fa364c21c19ed41176c22ed78085d931c2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010

MD5 c189c8b39ce2521ec67f5259ba0caed1
SHA1 4a25437ee288094ebd47d2ec9b9708699f47b9fa
SHA256 777f805ad448e85eb2bbff5ae7f0c071cc308c8583b799638c67efb936eb543b
SHA512 61b2fb8985124fa0c3d5272ded8172e8f080818e5d1d30f94fc4d5d450462d58830e6772ff3145396e86e08e068d7ff8cb7bba1db0494cc22f0e0bf226948d36

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1919f8c91bc7d12aef867afa2d289502
SHA1 6b379f2e055494f7d0a37c9b172ab4307ae03089
SHA256 9e4d29d199bc66599a7b2ac8d9c57ef78c0112c2cc792ecda8932274e50359d8
SHA512 148e3768fc0bd63cc805cd639ac15066e0d21cb7399c5add944ad684226d9901ffc730a08c32f9603129cbffc48e6795e52f4088e6aa7b3ad21333f14c67c562

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e

MD5 c47329a0da41f6e1bdaf6d32618d452b
SHA1 2a76f51d45bf5a6b4014a9bc5826cf11abffd4e7
SHA256 7bc97b3c946f955cda52da1b6e3c570246387cd7f7b1a34382ffb2da5cd3e087
SHA512 10f427ea2731965ffa105c19963427f50c2fee7e4c292acc2992784c10a1d3c315d5c8cca02f1f948e629c02d33fd6ad7b87b6fe57435565be942cbf9de7eea1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f

MD5 717b89853f2d9ec416d442beaefaa6c6
SHA1 dd1d970c6bd032323872bf40220d5635fb955666
SHA256 1faa4e282cd64ff286ee0d3ef59f3b26bbe581250ef3487d5813da228eea774c
SHA512 20baa653fed4fe26493412e7de8895edbb4040d0d2a782c98d42d915583aed44795067674e936196f21ebacf5ba722402de183903e7f321cfd4aa736f5f16b19

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 bb7cd2dd13a285cdab1af1056cf5f517
SHA1 0c7c50c9db104d2d087590a6d0ca99516e4c37a3
SHA256 c1bcc9fcfd85dbd1191565bf8cead1721571cc51006fe756ccd5ed9886261a88
SHA512 9fdba81c82ddca2c396409fcb215ef850073f0bf93c2b3434f50ad7d9054d130080d4b3e58a107958451d6571fe0c63eb15cf3034b5f81cf28fc54bbada6906c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000078

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 208cd1e2a85212305e9a2871b6588c50
SHA1 c76dba1edc2e4d499ae8e6d74d97ce956fbf8263
SHA256 9be1c8de775a87ebc87df58964fa42ac81832ad5affb4b60083c5e470972c010
SHA512 442a008c3373fad5cd981b5566b79f90cbf795d8e3386a9043d5508e03ded8a1b51dfabaaa72ef22c2cf81d05f25c8ced91ce0377c4cc32652c2cad570388937

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 178b3fa2be0b8cd03008b0040d4f76ef
SHA1 7722320f0009988d2ce9c6a9e072f15bc171c414
SHA256 326b34d71c25693e76024d7e48b3b775ade2c7195843bffa6167675cc55d92d8
SHA512 bb66c3927d0a658ec249c392975eaabc14de6f5f12e9801579058ba300d7ce6ec01d18d44213ee8a2ae67132080c158bca9473ed319707f4712c598d6413826b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039

MD5 01ad880ee50b786f74a5e4fae9ba3d71
SHA1 111387dbe885b7f3af44cdbbeea17eeb04bbf803
SHA256 9368f2d586a1d2727921605892048bf5201ef8caa044f2e939ef431aa881d83e
SHA512 d8dc47e5d55e6598988281539205936c56b716eb02b4e643fc917a68ba4407ece36a9d4115d5d0e32ac630d44eadb94ad2607330de082629fea82a9bd35fb83c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000038

MD5 13d4f13cd34f37afc507ac239d82ddbd
SHA1 6d500935a441d438ed052e90de0443bccc8c6d17
SHA256 76464e77d22532976bbe5d1829e97854d5c37ed5a46ff300ad9680876ec81d01
SHA512 152e6449d09a7b544cf6f986c9695ae07c330f4b13068cca028ab56ffdad6ff2467f371ea4385ad71da023f3beb83fe0ba1d6d413f1ddde14372efe82ae36b6d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0fe58697d8e9991a_0

MD5 1fd5d79506c1eeb80dd2e3a70ff3d72e
SHA1 46cb35840a0721311b46dc50bbd3c5974698dfe1
SHA256 05a795165e98c2493327e7b71dafc4797bf9387fbfb83dafda17e38b1974d23b
SHA512 b268bcd1d5153e6783c298becb95a31362ffd279770a3b54271c77ca3e6ddc6278893fad7a37b9b7cede2d30c4bd4231aba2491381bf781bc26247a6ce9419c8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003d

MD5 dee46781c0389eada0ac9faa177539b6
SHA1 d7641e3d25ac7ac66c2ea72ac7df77b242c909d3
SHA256 35f13cf2aef17a352007ab69222724397e0ec093871ff4bd162645f466425642
SHA512 049b3d8dcfb64510745c2d5f9e8046747337b1c19d4b2714835cc200dc4ba61acaa994fec7c3cd122ba99d688be6e08f97eb642745561d75b410a5589c304d7d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 002ab5ea482e4110d816cff05484c006
SHA1 c01d4c649001f789c11eedf4e7c18177567454e3
SHA256 f3714e6b5cc49c98b74e35479b50cd798b43e684622debe14e58fc5e8b5c6637
SHA512 1c53ee7281e58f5b97ff6dea86245d270a691cdbe22f692029b417d7a5d0423ffee6dc2d6c21bdb4c68d61e8fd5f02704acf45ef92759867c434e61e0a0eb83b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007f

MD5 7c702451150c376ff54a34249bceb819
SHA1 3ab4dc2f57c0fd141456c1cbe24f112adf3710e2
SHA256 77d21084014dcb10980c296e583371786b3886f5814d8357127f36f8c6045583
SHA512 9f1a79e93775dc5bd4aa9749387d5fa8ef55037ccda425039fe68a5634bb682656a9ed4b6940e15226f370e0111878ecd6ec357d55c4720f97a97e58ece78d59

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028

MD5 de60c3dd242911dc44288d715a5f274b
SHA1 17190afba12f1b94b5dc8fc4774bc1db75e4a918
SHA256 34c180ef04c1bcdbe203a6da385b834c73e1208551a3795dc18da9af11c59e8c
SHA512 f9611e2c877e949c81408f0aaa774ada667c9921b4f26af1d3d2f107612385f9dc3d729888d7ff348e9a8cb1100875484dc7d14ac75411b40fc6ccd653aa1b94

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027

MD5 4d4e7bc37d8aa24078622a3f0736aa77
SHA1 0599da6d249ad98aa534e187898646c84f541249
SHA256 fcd7149ae1cb3147f615fd2f358babe8192f8703837340779538ccec22848405
SHA512 bbacbfbaea0815424ea2fb5d900f3d4f238e295dca4e981c8eb596210efba4427d237f33c318948d3943468a61c6e860160a0e06997ffaf1c73f3821dcbcc075

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026

MD5 f63ad7db2ab6f504bc106616a34337d9
SHA1 45638c74a29ee00824c2ad92bf7e9bca1e111bc3
SHA256 bc577cab9ca2fe54f96ec7e6305cc10dcda0a82f8aa4f6d1dad0c45561226bf1
SHA512 31fcea250b0eca1c38123afe8812564d253e39d68c861977c402bd981b874fdcd87e566f420ca66052e05dbf2bb7d475636652890d2cae900600b204cecd2d7f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a

MD5 50b7e3e0deecb4648fc3135b16473921
SHA1 fe694032a9eadf08c8e6a2c7ffcc1d13de9c2b73
SHA256 225af002b60724ebdc00ce11aaa49bd3669061397fae0647a311c855c94ab387
SHA512 e06adff9f6da5b6ee43f81fff1b42896cc9c8f99028b998173e18b6979bdcada9f707004c89d3acbcb53b8c770c5ae77f239069e36363a601afe9064aba6a555

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023

MD5 ace4eb1b3e5274770abf4ec424ff22e3
SHA1 7aecae76e6e4d4d322088404e59488d8826773a9
SHA256 5983d2b5ee2ad35bd6622c1917ca70e515f5f5b1eff796244bb4acfdcc2d9f54
SHA512 9cf07171ca30b98b1446f78cc0f568073556943e710663e7c2ca34dd1384319c16438439b3e9e87874f0e41ba6fb62dc7347551ca95a8be5938a909aa0c30607

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b

MD5 f65fbbc81cd01794874b472ce28e1d51
SHA1 e5bdce0e886607ce30c0202ae7f1959865ef9c8b
SHA256 f43c592a7aa12da423734ed5571517288ace63d7ce41690325b2cff5d24b8e30
SHA512 cabe206d9576a145256e5ecb3b5017db49945e7478ec570cb749cca536d3fc3d136fa6ecd4a5dc05905d840da4f4e5d10f46b04b4d67124440c054cce55551cf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000029

MD5 dcf0d2ed29420eff6f58437d0d691c82
SHA1 d032fb8776cd93191a475ca54c90d9ea43a7275e
SHA256 1781034008c1aac7e29d37ef2da0ec5dabf1b0b5519c11d81b872fa6bfd493aa
SHA512 871ec191df10b9154a0184edb09b7abacfd4f0b9f948fa3fa1196e27336710ad813223026dd0bf8bac108fdfe5c15102a94fc1133515ffbca87ca1a01c8ec51d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c

MD5 39bd796260c4b0d819fef42accb90ff4
SHA1 c1a9f432d5c7e481e4c465556c150336fa74bb8f
SHA256 304cf9c7092713553dbfe63ab9dde20dace771f4ce96cf1a2622631acd0fab80
SHA512 ef97cb6190081183232a8d88eaf87bea221c1108c70c6f2029432ed87a9ce100a8dd88a744f185dbeee3ae9a2db1294008d015c39c5c0cb3918e2b5e997ab877

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d

MD5 846f4f6bff29e22ccef9fbfb9ae5c16e
SHA1 e946f488619fe4c1dabf0cdb7dbd130b2d6a5d4b
SHA256 dfe8f7ac5fe3fbf0285a740df5a8e55a36f0c69ac97b34ee355d93d88098277c
SHA512 357b389c28b01988877a2960172dd3ad7246a5f48683617c6bcc3b9604d7dae515fd75e143fec07a4b0c4110edfe72d729adfad05350d8e5ca5bd11748bd3fce

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e

MD5 276c7bc142ef480c7f97543b52d470d0
SHA1 a9c155a522e32860a8dadae67bddc00d81d060ff
SHA256 7f5b4e2d41340bc2a17e8b98503f9e13554aab49004eab59831b6135b619a488
SHA512 7f51d99ef4546c176e34b4963922ebe1706fd17ac5105617efd0c4e60e4bb5172c491b0026af23627f932aefc32ec87184b3a939e439229a6ac60d038bc81c9f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030

MD5 fe4484aeec899131c1d32b06c9923869
SHA1 27d044e5176e165e245bdb20ae74df803f5e509f
SHA256 e8047741ec5814d09f809ec6ccc5a4bfeee6195fdc3547d4b48a3778a5f3a828
SHA512 9760b71e28923e8719261fb15a4e9dab481700810b377aaf7470e6eaffe3a282fb645d53a50f342233a7e14bb1fe6c8a4c953de77f81ddf59d164e86665045a5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000080

MD5 02640da5f9a284e412c778928757e255
SHA1 cab88d71ac58bdbc8bc47f7461dd5af72bae9563
SHA256 978d3c4ab0812cbf7c0e87aa2cb4d4bcaa21c6be2b4ce0c02fe4336795ec5891
SHA512 81b396966742d4628ebfb21915af54749e294cab137180e1efef1ed07ec3d2cbbe6eb38c5df553bb91cb91b180398d7cf1dcb9188f82c604623bb10481186035

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000031

MD5 202cd90e57b267af4c9e1379e854554f
SHA1 3855709883009d1b6f8b8db5c26046711ec45301
SHA256 31164ae8b7e6989ab5cc94902e9a89a91cb8e5737d0ca5f02629ca08dcd788c9
SHA512 7c8e42ffeb57c931acdf592a3637de0bb2d0309a2d730188b01b0ddb74b0142ae0918a151e0545767ff1777474749b71230b811b39b54adf6cb042249308a36b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000035

MD5 fef811e13de29d1fb39e115b0ff5e57e
SHA1 8949a486ac1940db2b40f02186afca44a20e47c6
SHA256 fbb120c96d6bb19c47dfe2f0b40a73990c61e9d5093eb5c84a74410840390861
SHA512 240b44b3838f94542f4c9ab7c94187d27aa01b27d6100a30f8eb7523fa2cc2e8852bdc59b96f95b9b2b83ce9db897b863590cf30c98700d18c9b467e3608e0d2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\67b0b52fb42bfd8b_0

MD5 76ffd1e4d1ea8ac908e6de19b3b5c39f
SHA1 812782c3182ec350c326f0460fff456ffdab4662
SHA256 c04a0320dd74e617170a3816eee2e8a34715972371c536a7ea282160508d35a7
SHA512 b0cc754f697a1067d4dce7025810812a9e866ca00012fa9765e82961b2af10b13dc70ba59918341927e7a9821c97d50b397c6fe41e3a773715b88d9ab2c71392

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\20af4d6ee7fdf77c_0

MD5 0f932e0c8e24a38d05c8f42860d720d8
SHA1 cdae81782e33933feaca52f2412f9b4c31e06d3c
SHA256 192511abd7379c14e1bf913ce6fc84397d47d487f3f1e97953e6f2475fb6d02d
SHA512 279eeeb8a9752cc4e4c438e8e0ce4991449c8e7e8aa76d2350723f985cd4f0e01488da4d09d62b044cf675c445926efe97085df21e11e9e3b83d9d28496eb9c5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\91e315eae75a2a84_0

MD5 f545e6b5d9fde22c5fc61779cc3bbc99
SHA1 5205c8834c2387eaade26b90427c43180c858d71
SHA256 f122935b0bfc465889083803449f0b8cdcdb9cbe48315d1854c0d3af1082ee3f
SHA512 23718c64ecfd21e5084a30103c24897d4008c67b7bdc4bb8afb49b458abf3edea8a850ceb1dae5bc4854632efe2826f307e2e01f51f59c1eb7b3e6c37655cb47

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\bc1edcae1ba2d708_0

MD5 90c0251ca278e83938caea039747f6ee
SHA1 6b043b144f365d9abed099b6ebb9a65114b6e49c
SHA256 353d42d8385df30e75728ee9a3e41a43522ed9c135f42a8bcac61d692bc9b84f
SHA512 89cf884557b87b181ec3a4a700a530c871009e9117fb6aea7aede9457d8892772de66fe6d8e56fc2d40534b6237bf971fa2babe72345b0feb3ca98adb67895fe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 98c6baa443057c50629be7b7eabf5f4b
SHA1 2cb0ff15bd9febd8b22c96ba038ae94c2e9b9051
SHA256 884d374b053e3eb4cb2251e599026de1b63180f2df1900007c7159722155c265
SHA512 a9cc809399bd97fca2a52f837c0cef45cc2259ca9e5d1e58e1f433291cc7cf2c14fff62487601df447d33b77cc017f3be50282f87ce33452dafc817c98a30762

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a54abc2f4b25507ffebd2ce17d814983
SHA1 f4313bb65807280e6458f42b87fd2a039b21c5c8
SHA256 b7c4342b4f76a718cce0ff805f81e4f04c03df380b7c082c84e5f92547576fdc
SHA512 2f55e387010402f4a3c448a7569db486a9b28de2a4c8e36eda57520d04d5d8baaac72daac5bd0cb31cf284da475b7b760cbdbe6106f8080ac34acca9d0e1d5d7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c910b3119e68f760c8d7af575db04c01
SHA1 d5ea998c642a38f732b48faea7b78354b6fce521
SHA256 79a887e1cd42e0529288d259e6ccc2b38473be32ec0f658251ca39def058e0fd
SHA512 b03c06d075bf0b96f413b946a43a96e1c291e4509367a782b456ec521f31b42f305b8b538db506c30297e8fef46bb31513244c3948343dc659a05597332996f6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00008c

MD5 088978a3f372d51b4dfffed89c35bf92
SHA1 c5577139f878345a0ebdbc599adf8f91dbd148c6
SHA256 d98d758bc807cb8f65abb3f4243c077026ca3fffb92ab03d421163dc3383c952
SHA512 e1337850eed8bfdce3256f03a060cea25406588ed6aa0dc7693d086ce7ddd4e7a16ea081d850c4a6fffa1158be515676744cae645eaea80b3c9702fbee754c9c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0cfffc6d925bdbc9_0

MD5 ac1beb4c8b0c447d5fdfddaeb4b9bbe7
SHA1 83cd51f0deba135d1f5c1e6700016907d09c9d7d
SHA256 1b5943750634bbdfb6522ae08a98a428a5b25d51be9f36ec6e23c0060d02e3df
SHA512 f423c216d60f46f89733ff54e056936733169f826947d94486ed401ca63ea5e98bb0860215e0db8e3553ddcf17ab95a67107d51456f45ce417e262f337c1d364

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000042

MD5 f85a52738e1eecbbd780234b719227d8
SHA1 fcf516cf198dabbe8297ff497a7c56cb436aa950
SHA256 fd104379d8348961292f3730ea6a8663f5aa69e40294f399613d5b6370a9bccf
SHA512 b5b80abe111c8326cc336bd08b3354f7616a9fd0416009da64e608c86e94a9c38ddd92ae94c7e2f00df5c6485a43a302daa51672f671504c792dc6ff0e9276af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8973428a3f132c6b678c70f43a625548
SHA1 6147d245f20494e6e147f721943fe9432db0b2ee
SHA256 4f0fd2c4830ec299d6bad6dbd438fbbdb6ec31211b4af322c433e22868ff4d1f
SHA512 495f9ff52f046635c1cabd0249b64ee4a3cc841e71f2f2cb8a46eb432199e329930685bb0188508c23dbcaa598e2bff69ad1bfd1626bb29f20fb79210480b5c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3ceadeae6a16824db6229277c364b034
SHA1 627e21769e2b1a74fa38634ae952d280a1ff99b6
SHA256 795540d0a236b64e331a012181dbe151d020fa6d47fb8af0941481eebd86318c
SHA512 9d8479e8f11c8c925486dd56c55289ef6718af890533d3898eef52947aef011407f138a48b528051559029d398bb9c8fc5d33f2d2fcd9dd04ad7ac74ce5bc2c0

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

MD5 71a6b59e08e25451e52675c842fae23c
SHA1 565a97673954a9209c7a05fba20b89d10b88025f
SHA256 5b96212d3d1347b76c8c1c64b2f7ef981242bedd3b84b766b543d56dbbf8dbd6
SHA512 5cc98eb2aa02e2e69165170451d89dd880893e6b07440bb84fbab6cf92cb558bd58c2235d8d64ff43d380c5e9869827800d310ee67950bb21b498d89fbb5aab3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_filehippo.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 0208839f9acb0e5e5b43f584103f4b9c
SHA1 96274d8d1cedaa1fbc4ac3749d29b72942c547a0
SHA256 d9dd5fc9c241484b37db3634ffb2804ca1721b0c8f38361720ebefc1a960a2e0
SHA512 845b224f773644557e246d7432cb6c89bd6e36cdc968185768e8b709d5e09e9e6effdd9088d5a4910ad4b76e4b2a8e09d4a1d27fd040cd681125f67456fab649

memory/3228-2052-0x0000016B756B0000-0x0000016B756B1000-memory.dmp

memory/3228-2051-0x0000016B756B0000-0x0000016B756B1000-memory.dmp

memory/3228-2050-0x0000016B756B0000-0x0000016B756B1000-memory.dmp

memory/3228-2059-0x0000016B756B0000-0x0000016B756B1000-memory.dmp

memory/3228-2062-0x0000016B756B0000-0x0000016B756B1000-memory.dmp

memory/3228-2061-0x0000016B756B0000-0x0000016B756B1000-memory.dmp

memory/3228-2060-0x0000016B756B0000-0x0000016B756B1000-memory.dmp

memory/3228-2056-0x0000016B756B0000-0x0000016B756B1000-memory.dmp

memory/3228-2058-0x0000016B756B0000-0x0000016B756B1000-memory.dmp

memory/3228-2057-0x0000016B756B0000-0x0000016B756B1000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a3b069cb21f9ee680100f79ee3fb6109
SHA1 086f11850eb30c1cd4e46f51577595f5abfa33a6
SHA256 63b54a9fa6f01bc3448a26cfcc96ba737cbed803a748cee25f23172aeba4f3e6
SHA512 9297c08f457d455722b7aefb338e2372fd973218aa515ad525eaa9369ec33c6659525f596b8c04f97f7d9b38ec96196c167ee81389dd386be611c8604326deef

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 253e7b74d600fc97104fd99d4eeeb629
SHA1 94f683347ba041543496dd7b38d5e2b238cc70d4
SHA256 e85a023413c3165ee7ab665fc9beca547c490aea25c89dbf97b66875e82e2233
SHA512 38f4c00419b3d7a3d9cf9425a743e35ecc51fee0d9d00dc998c29e5735b6cc118e21841df0102873e5bb240f3350ffc101b2385bc442b3c667cdf78f107cc3b7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 26f67fb1052710ce2a3828dc08a45d4f
SHA1 3e4277eac332b15fc628eb16ce78dda3324c76f0
SHA256 b5b4024110a1c7bca10f70867695bb0ae1140bf39eee70ee96cee1c64454eefc
SHA512 093fef3c84b3e505b61f7a432dbdae115aae620f2b1125080dd61252b8df5734bdec31ca12eb2c6d970ea783cc6160dc3c8a8bfb57f2804977bcc63b4328c899

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000040

MD5 115c2d84727b41da5e9b4394887a8c40
SHA1 44f495a7f32620e51acca2e78f7e0615cb305781
SHA256 ae0e442895406e9922237108496c2cd60f4947649a826463e2da9860b5c25dd6
SHA512 00402945111722b041f317b082b7103bcc470c2112d86847eac44674053fc0642c5df72015dcb57c65c4ffabb7b03ece7e5f889190f09a45cef1f3e35f830f45

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003f

MD5 8eff0b8045fd1959e117f85654ae7770
SHA1 227fee13ceb7c410b5c0bb8000258b6643cb6255
SHA256 89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571
SHA512 2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 cfc487e4ecacbd2a64808262a2a2666b
SHA1 5c65e6b300089943568cd7585b9e40e7bfabcd4d
SHA256 4a3525794a1d81c6d82baab705cb52a6e83b3e409448b7df60cb700a1a6ac585
SHA512 cf8ff2d98b5cf5f781608cfc586ee332000a7a3c79ba353b4fe811f07454e4f207cb964fa4e00875869870bf813229f9b0e15f156305e8680a85d215e44b95f7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 322fc3ed1e4af1424326a40a2055ba52
SHA1 6e44443627b109ba217f51da5ee96c5008ed16d3
SHA256 7b623f198a70096cf75605e99ef5b063ed276e83abaade51c1e797ca4af5d76a
SHA512 fc90b44e3a7386acdfbc8a7e79365dcd0fc408691b4e2b604b3995da55345519e4a7878fd61814d63a424eb0d751d96d05829f6187e542676d07b92c6213387d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d09b36a85ddb5fd04188815174952d8b
SHA1 bc9434391a22704480a114fc06df3c94f9abd775
SHA256 706caa5fa74646336d787013b891336666e42910e1fad9958497c13d832b111a
SHA512 c735f6144891aa2324bbbe60c06b5705715738f48a51b449af6647e930a106edc45cb05bcb5bf4cb5ef09cbb0a17f612622214c495da1bb729f2dd642c84710a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7ae3b84ef7747719149fc7167c3274d9
SHA1 cfbb4e519b10b5888dfdf9011d9a93246e7e1175
SHA256 882a51c8c3ec5d9072772421e3d7f9d36410a78ff3b365118d05133a3a2c2561
SHA512 36c7f4d8442a8149ad2f687d375a76e14c606b89c03177e953699c32b9b21bf74485c1ee8bee90a90133ac0e616ed76937ebde6bfcded4b52829d14ead82ac06

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 02b463df944a9dd8602813d1378f3d4b
SHA1 4f2639eaa2d8a3501ac4b45b504744a62d30d6c0
SHA256 c30a7f6f437674dbb55d0cd8dc345931cf969344388d6e2a748c5d281905f65a
SHA512 b0562642eb16fe0ec870f8e3fdd2f6f98e852e2b3777b0d13ee5a378f190bad7a6578a611bdab86a1a57f07c7e2cc650ee942ce67ebca08220e344f9caca68f5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bbea656125e0a1ae8b802bfaccd5a01c
SHA1 944653b55b5c086d01dbec97e64479ae97d91d4f
SHA256 18482a703e7e4701afc5e9c0d1f759d6b57466de929501e9e31a50da1d630ae7
SHA512 3590f2c6de5a4c6e89321f4b490766ba2cab5dcd4d6a46673d07a5ad3c8301855392eccd3726261219eb7b388fb8e3683ab9d2add2c3b4786473920a3505ab80

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c669cfd54e4b92e13a6cb60552dfc966
SHA1 8beb0d55a6dafb07fabf6138b5fcc615b9c09f24
SHA256 02f64d55e59be9f3d3c8ac8dba938c9891e0a7146d2c1894f01ef501f60caf43
SHA512 1dbf5d2451594b10681d691b00794f1cc90d617c3ba9cc8128551b362b58568affb9a8c80eae8514e3c52a9a7cc2f5f39433fcd96da4379cf36d5144004235b7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3cdd8398f91b6dc65ea4bad030482a1a
SHA1 e4bc483416e12ffa4dfade35fb3e0a77d57da93f
SHA256 411d153765faa078da71bb499c479f48bf6293acbe62b3e5b87c372f28794a9d
SHA512 f80e606f759a31b96297fda6f4349fe18d8f1bc65ee479dbe96b06321013dd150ae91f7b6f07f50d34ecea45c9556c8280ce64074b6d9876aef5401f13b87f10

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2393d371c2a5ae1ec6f79e4f00857c75
SHA1 a9cfc8dc38c0549a261fe64ec1f63bedd7c69c69
SHA256 fe172b64e935c639dca3a500ab53a5ae8d838a399c6b22209bbdbd6762a22f55
SHA512 62b29758c14fc3e28e85a7f2ee7e0957a09acc7b2c36db2a7e4678c31bb40d61ec2cf4dd754126bb64c543cc1d981e88d8e3591b5987ff1f4aed4d967736a8db

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7cc161b61549b1e07031e26827623a85
SHA1 d4ee715305b8d3b2645d26cbbbca2ab91a8aacbd
SHA256 e626d708e305a75c683c1be1ba69cf0eb57c9f27c04d81ad91e7917702cf41ef
SHA512 e5e7b80e4c3716c6fc3b2a656da50af20fd807207ce10d0ee7f82534e325cddc03439ca2469c37effafde55ae9c63b41d1fd3d598cc527d45a3295a30f10eafa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1956c78d3a1be5d7d6a4b6f62a456f2a
SHA1 e6851ed7d390bdd2f8af18384fea04f4a0efe738
SHA256 7e268168fb9a3df39e6f0d4ba32732ae64abae9e8a155107875b4b654ad304d7
SHA512 8985c40031515cd97b466a2c8c51d873126f5e5b9028adc33727a829eaee1707250aae8ec71052a3ee67ea3bfbd3b3d016b2522b03650e89a2eae19dc7a9770c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e8598b23db3f1495e4f7ce65a98fbe4c
SHA1 3be73b80d065223de3aa6a7ab864c4f673238ee9
SHA256 5418404cd1fa6972258440c346fb9d754058d973b6131cc82689634df34d6217
SHA512 dcd0c287e0aa62d28ba0e6ec72770fa15e51a1ca46b901867b5f98edc1e258c4327bee3c505aaa203e9739c7daa1dfb89b66ed5cd758e349ac0f827512c484aa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 c7126066c7f0630d4ecab6d7d7fbcd23
SHA1 b6513bf4c86cee98d29507afb10440a2a654a8a0
SHA256 23ab984760a8224e4e214695ba3497bbb969444434576efec1fca2aa8527b75a
SHA512 0cd532aad9f50ab2f6f0d3ce3e680cd3409877ebb33869b441fe2f2ec4e0e7eb1b0c24384b0bd21931710b63771a11798337cdd9c4389e3f7543782faaa66ab4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1a00910e994f08254ab90f33aafeedf0
SHA1 af9b69f8a6ee87e545b20144f5b769d5638d27db
SHA256 c4e647a1027d194e879b63df227112ab6faf866929958eeb8f2ed4317bf4329c
SHA512 a1b46ff4c6b47692340a7cc0ac7db94d3893ae37ee2a80c9892fec2019a271b4eda43a16e095bb0c363e95e23d3d17f1c2bc1b1ec2db4c35dbdbcb8425050931

memory/3856-2398-0x0000000000400000-0x00000000005B7000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 3e21de3357049d347e75ec7d5caaa581
SHA1 64b61a7de5b6304872f5e25e4cd1360b923337dc
SHA256 fe70447370b9d2cdddcb6c2d7e0b9f39ba8928244258993c2ee3883948f5b8ce
SHA512 c277ff0412682407ce3ed64ab55ed5e4934e43f01105a4e1401b1065f8709f0cd45c57fb9518604d7bebb3a469f4160b8afc4af34e92a87c541e26f9c010a8cd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 693a896abac5b514005fbce6411bee6e
SHA1 0a30aaf7e9e436e84bfa322f03bb4dd07f7567f3
SHA256 26fa7e56907bc1b281841705bae626ed53f4ec34895408fe273676f8bd137013
SHA512 11217b159a0e806b5a09aee5d02ccc458b628c2d3a45f705eca5d76a2877ca38a1e3573d4784eafa2885a2217f3749b0f972681bfe6a2cc905b49bf33f75744c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 37e0ab97a51b4d6f172eac5a24c1ef2a
SHA1 fd1a2627686b43819074dcddcf98d5eaeb78f5ce
SHA256 a697b6a8db883737f063b17125722aaab94d937d289e7581cdaca9f31857b4ba
SHA512 80cc430cbe2517f3552cd7de0672c8d61c0bd85cb085abde2284b672790ed062558e1cbd03b49112158e34d743f5dff78f3cf36e7c7d4fe2ee526eba09640fe1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

MD5 149778a92f075913512b762d1bcd3cd9
SHA1 fe6c01d163afae403b4296b427556cc2e2ba1692
SHA256 96fff4b50c70d04ef58e91e562b5ecb289162e9adee02aa34447ef8994593a34
SHA512 3e126a69e84ad7723c7284540c485f07405c0b393e70957c5b9a7c215e6fa57d4cc3f7c3a8e7d497d5f42ef8eae282e259433c43b532c7616d4e6ba359b5df74

memory/3856-2562-0x0000000000400000-0x00000000005B7000-memory.dmp

memory/3856-2627-0x0000000000400000-0x00000000005B7000-memory.dmp

memory/5684-2892-0x00000000FEEB0000-0x00000000FF359000-memory.dmp

memory/5684-2904-0x00000000FEA00000-0x00000000FEEA9000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\dwt-1716-4520-166e4101fc.tmp\573AB521EBD732564A623A96A3B1D65AEDA7EA67

MD5 c2d5ea2a25e45ff67778a86019d35964
SHA1 d7d30160070206e3e0b3b49669b77ab82d5cce29
SHA256 9a27fb104cd9f4d33a909e31b441f7d52e01cafceb67d5ca79a35e1dff69b57b
SHA512 7d55bea08ed563d6d107e6bd66691a89a65b37a8b2a518993c5618a59746d5f6e89703bd8a8b068f6b7b48b5a64f87a463ccf5a9f0180baff2df223580c9fe77

C:\Users\Admin\AppData\Local\Temp\dwt-1716-4520-166e4101fc.tmp\33A09F0156236E4C72E8F40191CE0B1FA0D3FFA3

MD5 607e2f82f28c67ae4f1118f13163eaee
SHA1 beac40fb4d9d6f849f06434c883025a19c1793a4
SHA256 731296029de520110728583b3b315c9b554e6dd41ec15c4953aa9a8a49f7b5f8
SHA512 4b8662d1651ac39052440c26b2f178a81563d3b61b05575d19097ca6058410c2a79969138d5c8b5494d4545cc34ce926f6bb15ad5b44e7dfea64ec005190949c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 02a4b762e84a74f9ee8a7d8ddd34fedb
SHA1 4a870e3bd7fd56235062789d780610f95e3b8785
SHA256 366e497233268d7cdf699242e4b2c7ecc1999d0a84e12744f5af2b638e9d86da
SHA512 19028c45f2e05a0cb32865a2554513c1536bf9da63512ff4e964c94a3e171f373493c7787d2d2a6df8012648bbefab63a9de924f119c50c39c727cf81bdc659f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 826c7cac03e3ae47bfe2a7e50281605e
SHA1 100fbea3e078edec43db48c3312fbbf83f11fca0
SHA256 239b1d7cc6f76e1d1832b0587664f114f38a21539cb8548e25626ed5053ea2ab
SHA512 a82f3c817a6460fd8907a4ac6ab37c2129fb5466707edcfb565c255680d7f7212a5669fe2a42976150f16e4e549ea8310078f22ed35514ee1b7b45b46d8cc96e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 daead22ae3343babcd7eca7c3a822680
SHA1 0c09c173114a75256aa72e7cc763f24220a697d5
SHA256 5b7ad9bc69cfa6ca3ed3b50dbebe94538c31a01940266beb664dbeb513ed3dac
SHA512 ae94073c9728ce0a4f9e13d60dc4ff93c39cad0cb6769d880060f32251d04252d4ec66004fbba22cd6e0d9b48ddcf17c547a3f1f0ec3902285fd30c37fda7518

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 aa53b965549d7640cf4537d914a47fed
SHA1 4171529bc39f41edf7f0ae21df1fad2e1ba41054
SHA256 b466c5f59a2e6a88f9fecda280734464ca2f5e9caef0a118759066be3586fdba
SHA512 ba3856112468a3a37f876722f2fd268dd3a0fe3891a1bd337dfabd3b10a46a723c05bdfea8d9d7e29c4d0c03e2e682955e5d48f83a9f928ec244351dce004d6d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

MD5 df0b0b94b85a2d9869fcc88e345880de
SHA1 5bcc905629b74e231b3c6f89e28dc915ec936d0d
SHA256 2c4d6fe8fda737b8e22b3d12e1b40a69f68c17083138e935c4da36f453fb8dae
SHA512 41cfd664a2cb1fd55433d4b11c6350e9d55218bb1dc392b4f3d165fa02f62d80d496fc75009a00a768ef82e795baad5e5b11b1a9c60acb6039ba2b9ae60522d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 3aa5fe776baa6da67bbd9b8d42994852
SHA1 6402145dd76e8c5dcd504e59e8732ef12b52f9c6
SHA256 b77b6a78c906fd2fe5683709e8dcae51a196229bb37bb16e9c971067f3fee0ad
SHA512 ebae5b71a7b62a657b6c165768abd477cf5a02847bbb3f2150293a159a0b2450019b80d82772c9315a3f7469818054f042a24c7a03546438d40fb862be5b16cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 d4bd2df621c0ab66d099c8aca1952e6d
SHA1 718ee79e97c42fea858f8909c7d85c5c84fb4042
SHA256 fba42054c4e1e8b653f93cc2cd20ff6333d9d8ec37d978037cd7915b7b97330b
SHA512 44a34a6e978105155a42dd7bde79ea8c0cb0dee56736df5f856f7b97af2c05ee4c705c0db1f138ad8da02c8eb85d9361a4b837520590bb74af01da52fb6b2b97

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 51ec5fcef4a4eadcc3702e8ac0a0471d
SHA1 67b65a32caecb628d9b5dc2ad7d21f8057db1032
SHA256 851ae2da5c2fefdf5d910bab51df19d6a051635ef39668a17330c1378c07e0fb
SHA512 0e8c625d824c73cb337f02e158b2a17a349ce9f19784b42ceb9699ca01cd722dbb0cdb0a9f977d832aff24be13b1815aa34964aa651a3a322f20917cd2557095

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 75cbcb62dc866226fa411684b87f4414
SHA1 24e66541dd3d08a77296b779a78464a68315ea43
SHA256 85c400209229754d6b13594a268df7106a71e2f6b54f343c8d33d73954c7d281
SHA512 834c56f17a15e45e80f685c406a3db3e6c29e97c0c79e37ede08b9959a5c7f078b87d3e152cc4db7c4abe6b5f1b1fc09d1403c195108844b0904b4d554caedf5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 e4cea73943998599f48aab7eb5e5981d
SHA1 fa9c7107650c05ac43bc695a15e3bd28879c2e19
SHA256 449a5cf0dd823fe0a3fa9408712bb7eee869eca199405b82cc508753adbcef6c
SHA512 145e515444b939169e338f026d684032a725975d313ba57ae2cae769592746116f0d4c28f483e583925faddd6a702c8651b64dcaa8cbb9eabfdcd9dac4db0c3a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 23698f5ba169930111ab0aac05241102
SHA1 df9a423e4935214194796f217879daffbb2e311d
SHA256 3f344a005e60a83583e224002e5532ea7f207a80a68f2562630835d705796b70
SHA512 b0193d7f5578c6970630828984479bb42de89abd92623a403d96a6ed0d2f172f9cbc62e68750dd4d0b5e244f25f0d8017278132afe5a368b0592f8334beb5a3c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5fd48f.TMP

MD5 5eb8210ad1dfd84a51ae4ee45fd9e277
SHA1 026fe6accd03d0ad9dcf9b0e916376e376579b89
SHA256 4d03d95f0a4fe64903b593ed0d30760913b42e0e347076b5a3ea1536dad76632
SHA512 5e35e8e5a09b544869fadd4dc1890c35136d9f05cc4c1e2859beb9123465d07cf83a232f0b02fe1435acab6071ca9588f28459a70e83a80941eacc1fc36f8d28

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 fd28ff606a7ea18950e83052a402537c
SHA1 1939fa1b843074433509ba1fd203c65ad97efcac
SHA256 c179d8864c9944d7ff4eb8a4f312d818fdc348840b6ab0d2be6501fa131bd428
SHA512 92d290c76b2335aaeeb136d5369f9493faf1b8ca566ff94b61c43e7b4b272b29a61f60ba5282bd0cb87e4019604883eb5f010d6406d3e19f9df82333e24a1627

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 4c97e746b33e4d1b01efd393c8a8e3ef
SHA1 709d949bd520e6071cfb6f1b5984aed773684bd0
SHA256 b3cd587a747007fc5a365ceec5daa964c559e4862ae70aa98f5d0e1849d5ddf0
SHA512 5627b679b36c8c677a44b680611d6192808564df47d6d1f8e306c95361b71564ff2ebc5dbecaf55197db1c7274853171052cc2f8c0472759be26d7d03f193149

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

MD5 983547e564a3ba0efe51527722fbbb4f
SHA1 2138d7f2c1cbbca359da86372e37692299893f57
SHA256 5895185cf878a38cd172286ed97976e6ab620b2c5fd7f7810f9c9d2f7169da6d
SHA512 edef11dc8612b701db7c94d43fd032ee08a13adecfe93c5fda527cba8ffa5ccdea6b8fa107d35a5979bfdddb2832dd4fcc42cb99095186d620b6717cb7bbc6b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

MD5 861356dc262da2415c61c39164c1a84b
SHA1 78630d36a4fc82a8a69201fcd1a97e59bdc4b15e
SHA256 18539e5632dbeb12467c472ed06bae43a3f893eae4db6daf11d0485585655e44
SHA512 4e6f0af54148ffce48455ca985aa8102978307d0d1fd6867b88ec3d88d6234766520aa213890e08377faf955e26bd22d4d4afdb1da91318bec821a1a302134f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d3c38f20849e8ec81a9834fe4067d711
SHA1 5339ac17125eaae944763238d8aba76ce2b4087a
SHA256 830154fb5d92f367dc31e975016b1294a0e018b7071914d95257dce2e63dc42c
SHA512 c131289de9982c10e6a86af0f84a215daee0ed9d54a283bfa45c69616b3a90bbf48cbd56223c717d2071edb8facfc9991b6f6912f4fd4b84c1660f93a08e3a20

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

MD5 f0e0a2fe37d49014b5a2115ee2c6aa0f
SHA1 05182340d7d736bcb41af6b9114b6ebbcf7fa290
SHA256 cabf307920d7ec2f87daa6eb2a3126d19071d973212dbe6ad2ef4cad834f2cf1
SHA512 9750d4e9e414ff6499a6783d6ab8fd458a101b93e7bc959501d385d8dbf9aa437ed0e089a129cff37dfef6298bdb1c555d95e67722340553a75e18d90824bbd1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

MD5 22087ecc349a6012406065849f6c9afd
SHA1 3b0c891144cb462f2ed87d200bbabf0ef9589bce
SHA256 b67c2dac074336e8473aaf54e4f159cdb71eac8b678569cd3ca487f43f046d74
SHA512 07fb2432bc8dcdc011e45934476e440443171e3cd668e6d9a4387b055285e75d3751b82edc45556bbe03dcff1b6b76693184e16da2d63d70aa565ccf80ecd615

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

MD5 a277816fda8a0e0e1e1f60108f585a3f
SHA1 415be1baf987f1cca499d67fd2faff7800076a0f
SHA256 fc54f1c05d3d8c369c54bbbed95e1687d6d56d6415e2b7d412d199b8de9980e3
SHA512 c5d660e5da16a538fd70954f3137f316b41727fcdf312d1356ac904396d4eb1fffa6e6f86cbdbc6e24ae0ddbd15b3d68b30340a3e2292bb32dcdda00aee56706

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

MD5 1aed3498f400ba18af076a66e03fb36b
SHA1 2bfafa787a73409cb3ff7c8e43b83eb068717022
SHA256 5169ae58d262efeeb0634aa7e9237de4a7aa348b213b558c94c51766bec8d77c
SHA512 fadd37d710e0c0e6f95bcb273accf181b6b1ce55f413a9b654eb9cffef203f48ff44e99dc3ea21610a8e907142dd352605895df8b31322a336593f8b055c36a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

MD5 3675746ffc6f58e45d09e307305f8b99
SHA1 490c98a67bb113fdf2a1926d961eef980369bca7
SHA256 7b46f39eb66c48b51bd8dec33f9553ea687fb8c7a05734b5452b2d4368de7d8f
SHA512 7d58b477781231e23df115c3c8592ca1e58b4486efdcf6c0ded280c1765ea436d0c0c9223b7bd9930573b037556c89e1e165c79748efb9c0deee7047cb0e70f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8b07bedafedbb35708723b8657695f20
SHA1 986967f43cd4ca829698ad560220bb06577a7d28
SHA256 38ab92c40f437c62c2ca419bf0472a0bcbc67fef5cd373264a3bb64efc60f611
SHA512 3aff6dce1396c8ae7d090c3ec3b054c2a7ac1121fbe6b0f11388b3a730b10ebf5ad5a066941a773ae417cbf9794564dfa5061a5b715ef2eb23f945130a449ca3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003a

MD5 9c6b5ce6b3452e98573e6409c34dd73c
SHA1 de607fadef62e36945a409a838eb8fc36d819b42
SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 823ef095e595b2fa196ce1c3b1468c20
SHA1 4bce2db83f4d7b90b03136d0d740abe5197b459e
SHA256 79c74bfed79c00702d0c207ae84f4d3d737847d169a39e0ee68d55be3c3c7bfc
SHA512 de7f0d2e3bd875c38607847c0870d8ca95853c07fd8cd419684c57696f6ae11d4828dbb7d68bd74292f490ac35b86fdd3e676c075858e45336c997902d076f80

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 95cac7bea91aad115ba64a529ed0136e
SHA1 f39a8d17e142604d2d9b293ac0dc4cf8e1564984
SHA256 3b3e9eb099fc1b46d82ebc7e0b7c949e50504c8a294c6ab37a88c7801249dbe9
SHA512 324dcabe56229d94b824308ce994b5aff1f508a6dc413b2168028431c86c2484f90434d799dddb84958cd13fed445dd79ec58b99cf53622af4e73a80e97e2792

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 95d9d6456e7a9455f6fc23f9f3fcef87
SHA1 b35f94cd32db18b8ebdd1e2c15701434473f98e0
SHA256 32597e95557e3519fcfd31c2e5faff1934eb6ad335a3331af78ef02a938d8be2
SHA512 4764f59dcb0a86bff8ab57d5a45f96659dd6663e7de516ac0728e93b938d765e38f2f34eff4689004a02c58c275136d0ebadc695ab69197dfcc76b9cb9afe896

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 73984383ff649abc2966f7c7cbfec574
SHA1 14a430d6badc3dc1ab5fcb6840b173bd637dd382
SHA256 d13c85f47d743c89072ebb4009230a34a024a050bca789e94bf2bd6ee86dfffe
SHA512 87f9085b0e41f474ebf235f7f46ebefaa4bb61da400b63c08c5d741722c57245e39e11284cf89daac793ca8995181cbb7c7bf2dee8009a3f0710a1fe7b194892

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0a19f69c6af884f50826197ef7096c40
SHA1 d7610a939154c15704d245787beb1ee50a042693
SHA256 237aa2e8780e313cf70f65d80d699dbffa055e4e512809938816b7a2dbb81e97
SHA512 1bbf5afa9950be50962651d404255a12b7106adf0488de433c777912e36c2beba09c16a073d665d486d56a1745b7186a3908844511df08261ec3538f48e83a96

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 7c98c22e034225798261d246107ad727
SHA1 e9e93648dd15173b6c9f000662dc6af54ada78e1
SHA256 efc80f3b7d1557c787a3d8e474263d0fb2fede7cee87f77520b8c6c2f44f6eb9
SHA512 973a679ac4b297eaaa125ad60889e6f03f52e240cdf5a0260c73028627619f6981718bad08902c976d2c08184ca6e84c91c6acb83aa204d77c7d296ec26f4ef6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4063f62ac878f55f55f9152fef3897f7
SHA1 384a6f0460c7898d8838cbb67473cfb0ae9c9d98
SHA256 bacbeb7dcf24b7aff163e53e37731c81f2c5ca590aee20eca0db3e6ab305cfc1
SHA512 a2881ac733e606e2b11459d65f4849103cdb10ba617f530735fee0ec86a77301167b1afa86772b45d303f5bc3bf880d554f9e2637478e8d94d017f12c79af364

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5096ecc2ceab4489316b664081ab1fa1
SHA1 f02944a8970091449fb70ede6994d8c7e436207f
SHA256 0d69d420732c2766b18dfa11dd11a9dff937d339175fd8b1297644c318cd8bd4
SHA512 9a2688193c4be907215257a7a7b0e804c2b64b287ef608775c2c2baef5086d1b0b4493b38a869a7efd84fd98a839c6c540855acc9516b7f83cb19de4c3661a4f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cfb748b41a474c45_0

MD5 1a2643d240b80941ad7182be90e18dfa
SHA1 5557a306074d5f3056573a552281532ba71134b2
SHA256 46d22d88450a299e0288e123970073670c79348a0e1241a08b5f5808d6b8d8d9
SHA512 8b2d26cd392abb727fe1654fad361b27838615943926ef63ec7aa466d5f426a4fe2a6b951d721e7e0d5bb3bd9567d4f58fd4b93a4479332fcf1086a8ab1d8617

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\336a68eaaf209f48_0

MD5 a28d51c7853b4e673735363e407b3261
SHA1 a55befa98a88d191b3970023e0b835651ff9aab3
SHA256 92f4c46b571d217c8b14d45592a117aa26e9fcfdf66a07bfcb37c0640662496c
SHA512 321ba33a3970bdfef89bd5d7fb53f56fef22156427642b5ffb39d97c00215685f5aceb78394b4c68ac5dedc9ebb6ca13062bc96d07d5c760bf403479b4b8683b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1fa24e4a04764af7_0

MD5 512a2f1f0ebf8427035a78d74f1713d5
SHA1 06f7ed2c033189fc497f73e7b48ebc3382839a5b
SHA256 9c31e7f4ee96881a4435a6f9fbb41eedaff6756e6a14a55af29f0f4ddb8d8841
SHA512 42bdd88960719d916756b802720d922a987dbbfc6566f09fad218e69c65fdfb4be2bb22edb9dc651a3e3809d8e7dd3d1292c84f2194e485c262d7c09839ecd6d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b34e89cc5a15a912_0

MD5 f6e0f745b502d45997a77b6306e67fd0
SHA1 2c6c1edefebfe665a522781cc92e79c24fb8d362
SHA256 a6be3cdf1bd37b52c433b2e82baa2d3cc34ec701b8b809437f1efad0a07c2fd7
SHA512 002c9c875d85a009c35cdc39ea4e464328381189bc74df4a56763de31b1a383a4d14a7573226d9b4aaf2d6797cf1e8d6ccc67907f5442ccc6a09d3099b4295b4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038

MD5 6fb26b39d8dcf2f09ef8aebb8a5ffe23
SHA1 578cac24c947a6d24bc05a6aa305756dd70e9ac3
SHA256 774379647c0a6db04a0c2662be757a730c20f13b4c03fe0b12d43c0f09e7a059
SHA512 c40f4771c10add1b20efb81ee3b61fc5ede4701587f29a1c2cdde8b6faabd1c76d769bf8b99aa19082012f95d99ba448a472463fb9056acd2e43542e14e605cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f47b5997f171c1e3bfa4026b5999fda9
SHA1 3502cf48fb840d4565ed403a0571c3a662e8d257
SHA256 ada2c31753acac20237f51787917a14f12a975998b0e15816979f1d6b81113cd
SHA512 031f5889c6f366e96bec09d44133e442a05908006d6139b68f8946bbfe929354e3970c6991fc3787cc2161a650ecfe9c85209d7338f9a0dfdf3abe53b4f3eb84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 86162e14808404aa8b2a4dc182e81e4e
SHA1 02ac825545507e5a161de44a50a6f4ad48a5c827
SHA256 d887e7eab3f94aa133834e32bfe91dcecb12f365699c1f47649cbcf019541034
SHA512 0bff97eaedd2e84665da5a5d047d3c9ac384c2c6832c1bd39893928f18abfcb592849ef2f3fdca0e51e6c0cc56f1a438e0b7955aa755173ef4997f037a3e8ce1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 b11ced65f32fedbe9bf81ef9db0f3c94
SHA1 fdfd441e66831bfb8809e8cb69c2c3cd26b5d7c2
SHA256 0fb170f24675c84f8228ad6b61d69bf6705030949cc2fec316b3a006eab282f8
SHA512 864e5aa02e74823de70e3914a9ba75413c9559e4508f72ee7d23993acbf6488d69ef13a50e5b465bee3a709b36664f38aefe9ec0b8d9d86f4873f1ac552c64cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 131d7d252354930483f2b746426e2165
SHA1 2ddf72932cf7e267dd80c3cd8b52a7bd1124d97b
SHA256 d3be3283203c7b737dc47880a9ffcf9000a7b903bf955594fd0928b9d7041273
SHA512 fb46fc94e89eb313240d9dc0fdb70c00f09bc8e8b7e5479d0123dd05835fd08f4d95dd8a292584f22f191991098b941b6db79efa58892e12e3aae465691f5d9c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 4a91ccb23097d6d7b2955c2f346cb9cd
SHA1 6a3cb51a2e373f70bdb1be2a32233d234912c94b
SHA256 94ef2191aadcda9b85fd38159a614f6b988c58c3cef412e457acbeface808644
SHA512 4fd76405cb7c8c1c30fc5238cfcd4d7a71479d169af17bea2f18e1cce426a94e5335bec841bd689212afb3292ba8ea44abfedf8d364107f36e9d05a1b135b21c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 5ba7a55cdcb01702abeaf8bbe660a850
SHA1 609eefd2eb3e0456f07b19a1eebbb3bdd7f9d0c6
SHA256 2bad539aa7fb3b58eaa7e47e5128b85f0c4dcde619843b4a0845d13efd59b8ee
SHA512 f5c16446cea8916a7a994d1c1771dfddd50c501628105a67c0a92eb00e9d37032c21610fb807ce7130a9305c606a91d49eb6ccb4a749c0a262f336eea518896b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 465c26c32cf7cab5a7b7bf559413ab3a
SHA1 17757e612e57ece27790502aba1a2b379a30168e
SHA256 b573ff4a91d71a1cd5118bb0e56dfc2a8b55543a574605054124d5c369e1caa5
SHA512 bf9f6c1053a879f25fc9257839e61b631a7eee54ffef77e36a73182c69005eb94adf362c4bd4277407002de02ca004f42ea815f1a06252e99baf4a8afaa0ed12

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c2f9381ada7fdb3aa49038181b727063
SHA1 d7fbb63413ba117aa9c9b7d3ef53e73e45146558
SHA256 247e062b1a25bc6143aac021225e29fa99c63e9970f72690dbfd7c8ee74aada1
SHA512 e9ba8d8cac2b14cfea41d4f1da3963dca7700e04651743fd34b6114bf89bf2ac26035ab0c97e926d421089ba70439b3f82b19cdb585a60e12b20de87c65ba4db

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 92a493e5305e961311467192cdc87087
SHA1 ba0cc595365e3df22ecd456ce6a752a54ae997fb
SHA256 b4dde049a6c22169689b2a516ab73578319e318820d1bf433cb582c33122250e
SHA512 d96e80220fe8d160525c72d6ce87ca95370667c475d8b3544704b3b90378cb1d6cf0433e7c5b705331a482bfa6809e2f4486d4ec8a84daf49e1dd2f8adfd27a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 04fb30959f25fdf74061a2c1fb1aebcb
SHA1 a4828c97d736c51fe8ccae8579fde0b558fbc4ea
SHA256 4de458257857c945d3944adc560803848a49958b95a2706e10c0f659f2e400c9
SHA512 9819b21b1ae3d75724a24b7fcfe6f8b10bfec8dde16e568f35b66b5c5b0333b72456d2353a5c35313be8abcd7012dc265e8db6fb05882f7e3165b806abec45cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 35d624972c68d10d96edc74dff382e43
SHA1 5ceeb679932f7c78a40c90313b43fbf90d60d745
SHA256 870c13df3a90d8c723deacaee3e2ea5a8099c1c770ab4f79a818061835f0b946
SHA512 ec0f9a08ddfcfcfedc9fa2c9f9f28e0098118896a7a378518e734562a865bfcb619471986b7c4440e4bcb8c3241a1529bb0a4337411a86ee07b487e002eb23a9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 cd65eead02e6303aa3fc963a72defccb
SHA1 d755b4146af9e5f215b974bce1f06553a1b828d0
SHA256 b39c93926620c0d3dd187a49e2abd9daa0a3cf68a9904daa8cd48842dc23761e
SHA512 3a0718b0f4566d967ff0e6035a92b1196e2c3b0fed28ca37babd44b1ad57b4d5c632c931483916dc358ed1d2467ff7bdfbf342592b8a63b61928dc16bac7758d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1b637de7de3eb4174cd4c89044ec4736
SHA1 70c0b278914b7b77d725daf514f08e1ff9fbaf29
SHA256 de2629c0122692cb4039002ca70c4fa64076109ce0eb5072df887b10fd963a46
SHA512 ad61de8b7105077a547851242ad12b123b5bb77f16f2219df195c7791e36c3a542936e058507896221003f1bba04bc05d5bb48f7750ae36053dd81b1f5f7b75a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 eddc05edb79031b04ca8e7e43af14d02
SHA1 50d937417e5d005c5bf4a441014ae40117250ada
SHA256 5d423e516e5dc3c3caa3f47632af723c86daa7ac8fed7121b02fe75f390242ac
SHA512 ce4e32f9cd96a188403ce6af66b6098259ea5cd6d6bd4475c457b02ad61fdd286388bf27b7c3e7d33f01b4d705fc15a1e270dd835fc2660fd305939b15784942

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 38448c50b599c176add1f12f4a91dbab
SHA1 b39e273e423560f65533465921a91807a2fe0a15
SHA256 36e0c6d08b67bdf96321ddef7cdc500abd190cc35dc3bad376db9513a05907d0
SHA512 f970cd5f4095ebfd2b23edf15dd2ceaa60e312509c3ce250b70fa326ca9987214eaf8164f8efabaafca4eb41203e32135b8eb4267b3efae040f1c7fd90c49ebd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 0fc357679cc8a7a1a6c49a44fb06f467
SHA1 439ccb0d563bd166d720c53ae56f21154badb09a
SHA256 0522a2e9fc863985ee606d648ef693796d0e9725a9bd83e20aefff7755cc5613
SHA512 6541dcb0cd40c2e0a3e128f6a0754233f55a47a01f7293cfa7f58219c19a6fdc664e7b4459c09409011c53f81a46ed6dbc2d9af70cead0eff4770852a839c213

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 64245b227adc613281176952a8aea6f6
SHA1 a7edba5530a763322bcf6522985d1bf628e26cef
SHA256 43525688c20c1688e280babd0fbddc488dd3eed6027de7d7aba2b82ea03c7691
SHA512 5659a862bf2ba20a283669a2dc6b6ab6455ab3eb7be8b2192981724454af402f93d2558b04ce967018c968df3de77841a97925e817d8ab3ced86633ae9af2f6a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 17edfb5c07bb491a29813ffd98949e6f
SHA1 78e5fb534ba7a7ed921b19cb5995c9a8ae161ff2
SHA256 71375dd4812a95fc063fd91e738661b650f3dcf8debe8c18cbfe8d3620875682
SHA512 f7a4b36b7382c0e56ad6563aa1812586c62c9d4167fefb19afa8d22ff9fc2dd6c25435646dbd342af9519ca9965ddfcf52464a59a8a2fe3f1e788b981de78feb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8010c75b43d6a33b06f05c2295b55dc6
SHA1 b654018aa3258d659e18b656b420df85a0343129
SHA256 1698756fc08decb4e96b92311a74d6a37ba0184302f10822ec751536c6377402
SHA512 78d410f1b0ad12521ed4f9733e7bb812d6b73efa216260e279fae67493eb3acb132c24236b8780dc20b106d02aad5d1971cbecc5556c4800d78609dce8356baf

C:\Users\Admin\AppData\Local\Temp\dwt-5220-5644-1b4c98089a.tmp\AE4651A8BE100874778D6BB00404549451F5542A

MD5 bea650e9d669cf1c6c2ea6def826b955
SHA1 e67853196a47c8cfe68cb7039195715c29d31a89
SHA256 e259199f60c1f26999723b5b2c2120df8d35440b3f606dc0f8b79c896f54b49e
SHA512 e6207c81907ae7ab7fd0f288297ebc21624648c489cc7e651bd01f2cc8df64fc6204445e19bd30da58ecd0971299fec0350a9361119b03ce4372a5849448e830

C:\Users\Admin\AppData\Local\Temp\dwt-5220-5644-1b4c98089a.tmp\20D6088553EC14C52FEAAC026A83A994BE83A482

MD5 c7113767213601315aac58f4d2f22120
SHA1 139a7d878ce2e30f1bc3fd885d45315c259f6ff2
SHA256 036f05c73c5e134cb27c4c4b38a5ea50941e0717fb21d06dcb004fcbba6c5d78
SHA512 93a214bf52d06f12883fec7d7ed355e56e63f49d2db62ef9c1d1bff2e9c44b6d42012328d2cc898cc914b4b916a92bbe14d3de72dfbc51f047459f2bc9b338dc

C:\Users\Admin\AppData\Local\Temp\dwt-5220-5644-1b4c98089a.tmp\21E56E62BA6FEBAF22DF427A732365536546C5B4

MD5 8034641531fa17c75a6b0edbf9572566
SHA1 362c77213456d4ddadb3327634e6be09fc36654a
SHA256 47370325c9a9a52090d74825dbdcefe5402788ae52475edcd097e27108dcf4bd
SHA512 d9046402a7a79b78d4baf4039956a9c55ca2ed3fb70f71e05ab6e45e779a59f07d1373f9c6aa93834d19005c44c5961172e6548ac9ff2745c83fdb5410cfe9b2

C:\Users\Admin\AppData\Local\Temp\dwt-5220-5644-1b4c98089a.tmp\63C74F641C584C46B1CC9D4630D08537B844E5CE

MD5 997966f8087a1ebf4793c1cd378a7ed1
SHA1 f58fecd5862696cabcb80831b13bb458b4ac4a6b
SHA256 ddba560e823e14e53027c22df69f0e9dc71019cbfa7ab6c84b5c9186e764a24d
SHA512 35bd4c161ccafa3754700b90e6fd7de1112dd9815351b0be11ab06ba99a01de71b267f74fa62e8030aef3ae9a01fbef7ba33b34efc544178f01c52511e3ea90a

C:\Users\Admin\AppData\Local\Temp\dwt-5220-5644-1b4c98089a.tmp\D04438876A8CB16EE6FF98F8737158A812E801E9

MD5 547bcb050505f5cbcd549ad696302f73
SHA1 b16605c37ef6cd5777399b0f3e4aa4fe64dd4aa7
SHA256 f74130cb22e03ac27f93dae37fbb3c8e950eb414c911d63db6e2d6917367814e
SHA512 b3c88da6a2c9f808e415db797f44496c1e9a156bdc78256784747da0d31eefac7222de659c2fd7e71694c5ecaf66f2096f34a5be64a0c88a68a4fab6c4d4424e

C:\Users\Admin\AppData\Local\Temp\dwt-5220-5644-1b4c98089a.tmp\733D32D60BD6930242A8B2D04365F3AC1F9CF2A3

MD5 80a1cd506e0099c984ee7250d64d59aa
SHA1 149303d451b1d9694282356665a973462b4cb2f0
SHA256 2ccda5e550593af55781d76e56130a487c90d8f017622767f796d71b330c6d9f
SHA512 2da99507df4f8346e181c9b1fd1344fbcbb7ebf8cc846edfa20d73f2e129f79bc8af0037c24ab0ed4ac884b52f9c56392becad6a59a51d518b377bad8d7fd8aa

C:\Users\Admin\AppData\Local\Temp\dwt-5220-5644-1b4c98089a.tmp\7F881576CD5437BD2C226F3F633528381A6F2940

MD5 eebc7fc5c6224f6faa5b0f5bfc882bbf
SHA1 64ce1825ab49818b727e56d61f6872150467c55c
SHA256 299ebcc8cd643eea22a8105b917e3c043821029f0a7c794532938f05aa4e336e
SHA512 de1fa2137b36fca2df49cd190be51b1d6015f8d30a568d1efb30669dd73781d94f6d5df43956845405829a3cf96d2b879050c026a126e4258823873dce15da0f

C:\Users\Admin\AppData\Local\Temp\dwt-5220-5644-1b4c98089a.tmp\7AAE2B91BCD80991C2D9ADBA99DDD9291C3CE138

MD5 6872fae8288db34207d9e7ee350157f4
SHA1 c05cf707d6390289b5f03afedbe8fa8c54c22a53
SHA256 50795b027e2bc566d3b7acb89913f8efd23b70615c9db9bf5b23323ad3132a7d
SHA512 c03e4409a988dd040520a9986b165b18da72badcde843107ca4115541a9f8ce97edfcad6c108036f8532bd644839aec60216d208551673c9af0cf5eb73edb68c

C:\Users\Admin\AppData\Local\Temp\dwt-5220-5644-1b4c98089a.tmp\9A2995F1981C81A5BCDDCF10C1F0203A1B2499C9

MD5 e95af9b03513d729d28fd890cff4ebe9
SHA1 a4e20037f4ea1a1ccd8efd09bd381b1565eca1d2
SHA256 b19f80a5970542f71e1728cdeee5d4534598329ba22fabf5bbd2280ebd6ba629
SHA512 b897b358fbb7fdd0384bbe519fe708489192e441903f391eed3bd67a7da547c2da927ba5160b129c1969514ae1a0b72ed02f5563261a2826c4c5dcbd80847449

C:\Users\Admin\AppData\Local\Temp\dwt-5220-5644-1b4c98089a.tmp\B28B294DF1A8A84DFC5CCB5A38A5D42DBDCFB849

MD5 ddf4de0dc1ac39c22f605957a1fe614b
SHA1 a4d470a078b00a43b49ce47d076ab3ff5d0471b1
SHA256 0acf9791f2cbbf8330653df8d90e760108dd7ed3b5db03c4de164bd5047e4d4a
SHA512 d8e32a0877e2c02f81c18d4f1e5209b61a93374a0d0913789589e5c200634e3c03233bd8bf74c0b64a0711dd34a812118e09fb5299285a67dc0aa6ce558df139