Malware Analysis Report

2025-04-03 12:28

Sample ID 241109-2xrlmawrfk
Target text.txt
SHA256 2dbd1033a26118d27915184864ad2a0add89d5ee3153eca157fadaa62ad19af5
Tags
discovery persistence phishing privilege_escalation spyware stealer
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

2dbd1033a26118d27915184864ad2a0add89d5ee3153eca157fadaa62ad19af5

Threat Level: Shows suspicious behavior

The file text.txt was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery persistence phishing privilege_escalation spyware stealer

Reads user/profile data of web browsers

A potential corporate email address has been identified in the URL: [email protected]

A potential corporate email address has been identified in the URL: =@L

Drops file in System32 directory

Drops file in Windows directory

Browser Information Discovery

Event Triggered Execution: Accessibility Features

Modifies registry class

Suspicious use of SendNotifyMessage

Checks processor information in registry

Enumerates system info in registry

Suspicious behavior: AddClipboardFormatListener

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Suspicious use of SetWindowsHookEx

Suspicious use of FindShellTrayWindow

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious behavior: GetForegroundWindowSpam

Opens file in notepad (likely ransom note)

Checks SCSI registry key(s)

Modifies data under HKEY_USERS

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-09 22:57

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-09 22:57

Reported

2024-11-09 23:09

Platform

win10ltsc2021-20241023-en

Max time kernel

692s

Max time network

693s

Command Line

C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\text.txt

Signatures

A potential corporate email address has been identified in the URL: =@L

phishing

A potential corporate email address has been identified in the URL: [email protected]

phishing

Reads user/profile data of web browsers

spyware stealer

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\eventvwr.msc C:\Windows\system32\mmc.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Browser Information Discovery

discovery

Event Triggered Execution: Accessibility Features

persistence privilege_escalation

Checks SCSI registry key(s)

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133756666939371790" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-4074627901-37362009-3519777259-1000_Classes\Local Settings C:\Windows\system32\taskmgr.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\NOTEPAD.EXE N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Windows\system32\MSCONFIG.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Windows\system32\MSCONFIG.exe N/A
N/A N/A C:\Windows\system32\MSCONFIG.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Windows\system32\magnify.exe N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3720 wrote to memory of 4972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4972 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 5040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 2084 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 2084 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3720 wrote to memory of 4648 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Windows\system32\NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\text.txt

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffba0d7cc40,0x7ffba0d7cc4c,0x7ffba0d7cc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1764,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=1768 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1940,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=2068 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2284,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=2484 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3152,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3160 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3168,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3192 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4564,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4508 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4748,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4712 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4744,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4812 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4976,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4368 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5012,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3812 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5156,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5468 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=3440,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3304 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x3c4 0x4f0

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3244,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3220 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=3320,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5108 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5592,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5648 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=5680,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5024 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5360,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5772 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5692,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5912 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=6048,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5940 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=6084,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6208 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=3252,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5756 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6536,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5676 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6504,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6520 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6332,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3240 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=5628,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3144 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=6824,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6388 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=6484,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6976 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=6856,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=7120 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=7284,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=7268 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=7396,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=7412 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=7292,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=7552 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=7572,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=7696 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=7832,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=7724 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=7976,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=7840 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=8128,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=8172 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=8188,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=8316 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=8464,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=8480 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=8604,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=8140 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=6852,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5904 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=5696,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=8832 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=5936,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6168 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=5876,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6140 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=5832,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6012 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=5824,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5356 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=5192,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=8968 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=5248,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9028 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=5292,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9156 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=9284,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9304 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=9328,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9456 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=9576,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9592 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=9720,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9736 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=9756,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9880 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=10020,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9888 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=10048,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=10168 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=10152,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=10316 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=10336,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=10460 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=5940,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=10044 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=11212,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5840 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=5380,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5460 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=6452,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6404 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=6476,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6412 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=10792,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6428 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=11312,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=11328 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --field-trial-handle=6360,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6424 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=11588,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=11580 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=12196,i,16287388779050516658,10835112105826826523,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=11744 /prefetch:1

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /4

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Windows\system32\CMD.exe

"C:\Windows\system32\CMD.exe"

C:\Windows\system32\tree.com

tree

C:\Windows\system32\tree.com

tree

C:\Windows\system32\tree.com

tree

C:\Windows\system32\tree.com

tree

C:\Windows\system32\tree.com

tree

C:\Windows\system32\EVENTVWR.exe

"C:\Windows\system32\EVENTVWR.exe"

C:\Windows\system32\mmc.exe

"C:\Windows\system32\mmc.exe" "C:\Windows\system32\eventvwr.msc"

C:\Windows\system32\tree.com

tree

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffba0d7cc40,0x7ffba0d7cc4c,0x7ffba0d7cc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1972,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=1968 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2120,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=2160 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2264,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=2284 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3112,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=3124 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3144,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=3164 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3688,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=4460 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4656,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=4644 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4780,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=4788 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4752,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=4740 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4760,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=4680 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5004,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=4676 /prefetch:1

C:\Windows\system32\tree.com

tree

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=4008,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=5288 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x3c4 0x4f0

C:\Windows\system32\tree.com

tree

C:\Windows\system32\tree.com

tree

C:\Windows\system32\tree.com

tree

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffba0d7cc40,0x7ffba0d7cc4c,0x7ffba0d7cc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3372,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=3336 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5424,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=3128 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4872,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=5244 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4476,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=5496 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5584,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=5612 /prefetch:1

C:\Windows\system32\tree.com

tree

C:\Program Files (x86)\Google\Update\1.3.36.371\GoogleUpdateBroker.exe

"C:\Program Files (x86)\Google\Update\1.3.36.371\GoogleUpdateBroker.exe" -Embedding

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5416,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=4988 /prefetch:8

C:\Windows\system32\MSCONFIG.exe

"C:\Windows\system32\MSCONFIG.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5464,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=3248 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=4676,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=3008 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3380,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=5412 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3264,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=5824 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=5520,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=5556 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=3268,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=5920 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=5800,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=5456 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=5796,i,11687415003813396784,11622668619150672897,262144 --variations-seed-version=20241108-130108.678000 --mojo-platform-channel-handle=5992 /prefetch:1

C:\Windows\system32\magnify.exe

"C:\Windows\system32\magnify.exe"

C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE

"C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE"

C:\Windows\splwow64.exe

C:\Windows\splwow64.exe 12288

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc

Network

Country Destination Domain Proto
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 68.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 0.205.248.87.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 checkappexec.microsoft.com udp
GB 51.140.242.104:443 checkappexec.microsoft.com tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.180.4:443 www.google.com tcp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
US 8.8.8.8:53 203.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 4.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 106.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 3.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
GB 172.217.16.234:443 ogads-pa.googleapis.com udp
GB 172.217.16.234:443 ogads-pa.googleapis.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 234.16.217.172.in-addr.arpa udp
GB 172.217.16.238:443 play.google.com udp
GB 172.217.16.238:443 play.google.com tcp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.178.14:443 clients2.google.com udp
N/A 224.0.0.251:5353 udp
GB 142.250.178.14:443 clients2.google.com tcp
US 8.8.8.8:53 238.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 geekprank.com udp
US 104.21.78.117:443 geekprank.com tcp
US 104.21.78.117:443 geekprank.com tcp
US 104.21.78.117:443 geekprank.com udp
US 8.8.8.8:53 cmp.quantcast.com udp
US 8.8.8.8:53 a.pub.network udp
US 104.18.20.206:443 a.pub.network tcp
NL 18.239.83.25:443 cmp.quantcast.com tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 117.78.21.104.in-addr.arpa udp
US 8.8.8.8:53 200.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 206.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 25.83.239.18.in-addr.arpa udp
GB 142.250.200.10:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 optimise.net udp
US 8.8.8.8:53 api.floors.dev udp
US 8.8.8.8:53 d.pub.network udp
US 8.8.8.8:53 cmp.inmobi.com udp
US 34.111.152.239:443 optimise.net tcp
NL 18.239.36.97:443 cmp.inmobi.com tcp
US 34.160.128.112:443 api.floors.dev tcp
US 34.160.152.31:443 d.pub.network tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 104.18.20.206:443 a.pub.network udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
NL 18.239.36.97:443 cmp.inmobi.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 api.cmp.inmobi.com udp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 239.152.111.34.in-addr.arpa udp
US 8.8.8.8:53 112.128.160.34.in-addr.arpa udp
US 8.8.8.8:53 31.152.160.34.in-addr.arpa udp
US 8.8.8.8:53 97.36.239.18.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
DE 3.124.147.49:443 api.cmp.inmobi.com tcp
DE 3.124.147.49:443 api.cmp.inmobi.com tcp
US 8.8.8.8:53 49.147.124.3.in-addr.arpa udp
US 34.111.152.239:443 optimise.net tcp
US 8.8.8.8:53 sb.scorecardresearch.com udp
NL 18.239.83.126:443 sb.scorecardresearch.com tcp
US 34.111.152.239:443 optimise.net udp
US 8.8.8.8:53 126.83.239.18.in-addr.arpa udp
US 8.8.8.8:53 cdn.confiant-integrations.net udp
US 8.8.8.8:53 freestar-io.videoplayerhub.com udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 pb-rtd.ccgateway.net udp
US 8.8.8.8:53 cdn.edkt.io udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 match.adsrvr.org udp
US 172.64.144.166:443 cdn.confiant-integrations.net tcp
US 104.26.8.50:443 freestar-io.videoplayerhub.com tcp
US 104.22.53.173:443 cdn.hadronid.net tcp
US 34.120.111.33:443 cdn.edkt.io tcp
US 54.188.94.8:443 pb-rtd.ccgateway.net tcp
US 8.8.8.8:53 secure.quantserve.com udp
GB 87.248.114.11:443 ups.analytics.yahoo.com tcp
DE 162.19.138.119:443 id5-sync.com tcp
DE 162.19.138.119:443 id5-sync.com tcp
US 3.33.220.150:443 match.adsrvr.org tcp
US 8.8.8.8:53 pb-ing.ccgateway.net udp
US 34.120.133.55:443 api.rlcdn.com tcp
US 104.22.4.69:443 id.hadron.ad.gt tcp
US 52.41.170.162:443 pb-ing.ccgateway.net tcp
DE 91.228.74.244:443 secure.quantserve.com tcp
US 8.8.8.8:53 c.pub.network udp
US 104.22.4.69:443 id.hadron.ad.gt tcp
US 8.8.8.8:53 btloader.com udp
US 34.160.152.31:443 c.pub.network tcp
US 172.64.144.166:443 cdn.confiant-integrations.net udp
US 8.8.8.8:53 s2s.t13.io udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 prebid.cootlogix.com udp
US 8.8.8.8:53 bidder.criteo.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 rtb.openx.net udp
US 104.22.74.216:443 btloader.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 ads.yieldmo.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 34.107.140.113:443 s2s.t13.io tcp
US 34.107.140.113:443 s2s.t13.io tcp
US 67.205.128.30:443 prebid.cootlogix.com tcp
NL 18.239.50.3:443 hb.yellowblue.io tcp
US 34.120.63.153:443 prebid.media.net tcp
US 35.227.252.103:443 rtb.openx.net tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
DE 52.59.238.109:443 btlr.sharethrough.com tcp
DE 52.59.238.109:443 btlr.sharethrough.com tcp
DE 52.59.238.109:443 btlr.sharethrough.com tcp
DE 52.59.238.109:443 btlr.sharethrough.com tcp
DE 52.59.238.109:443 btlr.sharethrough.com tcp
US 8.8.8.8:53 rules.quantcount.com udp
IE 52.211.85.20:443 ads.yieldmo.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 178.250.1.56:443 bidder.criteo.com tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
NL 18.239.50.110:443 rules.quantcount.com tcp
US 34.160.152.31:443 c.pub.network udp
US 8.8.8.8:53 api.edkt.io udp
US 104.22.74.216:443 btloader.com tcp
US 8.8.8.8:53 a.ad.gt udp
US 8.8.8.8:53 ad-delivery.net udp
US 8.8.8.8:53 pixel.quantserve.com udp
US 34.120.111.33:443 api.edkt.io tcp
US 172.67.23.234:443 a.ad.gt tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 8.8.8.8:53 x.bidswitch.net udp
US 34.120.111.33:443 api.edkt.io udp
US 8.8.8.8:53 p.ad.gt udp
US 8.8.8.8:53 ids.ad.gt udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 image2.pubmatic.com udp
US 8.8.8.8:53 token.rubiconproject.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 dpm.demdex.net udp
NL 35.214.136.108:443 x.bidswitch.net tcp
US 8.8.8.8:53 api.btloader.com udp
US 35.155.104.62:443 ids.ad.gt tcp
US 35.155.104.62:443 ids.ad.gt tcp
US 35.155.104.62:443 ids.ad.gt tcp
DE 37.252.173.215:443 secure.adnxs.com tcp
US 172.67.23.234:443 p.ad.gt tcp
GB 185.64.191.210:443 image2.pubmatic.com tcp
IE 18.202.12.246:443 dpm.demdex.net tcp
US 130.211.23.194:443 api.btloader.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 34.120.111.33:443 api.edkt.io tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 35.155.104.62:443 ids.ad.gt tcp
US 8.8.8.8:53 sync.go.sonobi.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 34.107.140.113:443 s2s.t13.io udp
US 8.8.8.8:53 sync.smartadserver.com udp
US 172.67.23.234:443 p.ad.gt tcp
US 8.8.8.8:53 seg.ad.gt udp
US 8.8.8.8:53 pixels.ad.gt udp
US 69.166.1.34:443 sync.go.sonobi.com tcp
US 8.8.8.8:53 cb4eb958d8a7bde54bc68b2f275a76ce.safeframe.googlesyndication.com udp
US 69.166.1.34:443 sync.go.sonobi.com tcp
US 172.67.23.234:443 pixels.ad.gt tcp
IE 52.19.76.108:443 ad.360yield.com tcp
NL 89.149.193.104:443 sync.smartadserver.com tcp
US 172.67.23.234:443 pixels.ad.gt tcp
US 8.8.8.8:53 166.144.64.172.in-addr.arpa udp
US 8.8.8.8:53 50.8.26.104.in-addr.arpa udp
US 8.8.8.8:53 173.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 33.111.120.34.in-addr.arpa udp
US 8.8.8.8:53 11.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 55.133.120.34.in-addr.arpa udp
US 8.8.8.8:53 119.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 150.220.33.3.in-addr.arpa udp
US 8.8.8.8:53 244.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 8.94.188.54.in-addr.arpa udp
US 8.8.8.8:53 216.74.22.104.in-addr.arpa udp
US 8.8.8.8:53 162.170.41.52.in-addr.arpa udp
US 8.8.8.8:53 113.140.107.34.in-addr.arpa udp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 103.252.227.35.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 56.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 248.64.124.3.in-addr.arpa udp
US 8.8.8.8:53 20.85.211.52.in-addr.arpa udp
US 8.8.8.8:53 109.238.59.52.in-addr.arpa udp
US 8.8.8.8:53 83.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 30.128.205.67.in-addr.arpa udp
US 8.8.8.8:53 110.50.239.18.in-addr.arpa udp
US 8.8.8.8:53 38.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 234.23.67.172.in-addr.arpa udp
US 8.8.8.8:53 19.69.67.172.in-addr.arpa udp
US 8.8.8.8:53 108.136.214.35.in-addr.arpa udp
US 8.8.8.8:53 210.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 215.173.252.37.in-addr.arpa udp
US 8.8.8.8:53 246.12.202.18.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 62.104.155.35.in-addr.arpa udp
GB 216.58.213.1:443 cb4eb958d8a7bde54bc68b2f275a76ce.safeframe.googlesyndication.com tcp
US 35.155.104.62:443 ids.ad.gt tcp
US 34.120.111.33:443 api.edkt.io udp
US 34.111.152.239:443 optimise.net udp
US 8.8.8.8:53 static.criteo.net udp
NL 178.250.1.3:443 static.criteo.net tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 sync.cootlogix.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 freestar-d.openx.net udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 contextual.media.net udp
IE 52.211.85.20:443 ads.yieldmo.com tcp
NL 35.214.136.108:443 x.bidswitch.net udp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 34.98.64.218:443 freestar-d.openx.net tcp
GB 2.23.204.28:443 contextual.media.net tcp
GB 2.23.204.244:443 ads.pubmatic.com tcp
US 8.8.8.8:53 cms.quantserve.com udp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 cdn.ampproject.org udp
US 8.8.8.8:53 gum.criteo.com udp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
US 34.98.64.218:443 freestar-d.openx.net udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 wt.rqtrk.eu udp
US 143.198.180.21:443 sync.cootlogix.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
DE 57.129.18.109:443 wt.rqtrk.eu tcp
US 8.8.8.8:53 www.google.com udp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
US 3.33.220.150:443 match.adsrvr.org tcp
US 8.8.8.8:53 px.ads.linkedin.com udp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 triplelift-match.dotomi.com udp
US 8.8.8.8:53 ib.adnxs.com udp
GB 216.58.201.100:443 www.google.com tcp
NL 63.215.202.169:443 triplelift-match.dotomi.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
US 216.239.32.36:443 region1.google-analytics.com udp
IE 52.208.48.52:443 pr-bh.ybp.yahoo.com tcp
US 54.88.211.52:443 sync.srv.stackadapt.com tcp
US 54.88.211.52:443 sync.srv.stackadapt.com tcp
US 54.88.211.52:443 sync.srv.stackadapt.com tcp
US 13.107.42.14:443 px.ads.linkedin.com tcp
US 8.8.8.8:53 104.193.149.89.in-addr.arpa udp
US 8.8.8.8:53 108.76.19.52.in-addr.arpa udp
US 8.8.8.8:53 34.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 1.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 33.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 28.204.23.2.in-addr.arpa udp
US 8.8.8.8:53 244.204.23.2.in-addr.arpa udp
US 8.8.8.8:53 1.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 10.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 21.180.198.143.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 109.18.129.57.in-addr.arpa udp
US 8.8.8.8:53 100.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 169.202.215.63.in-addr.arpa udp
US 35.227.252.103:443 rtb.openx.net tcp
US 34.160.152.31:443 c.pub.network udp
US 8.8.8.8:53 35.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 52.48.208.52.in-addr.arpa udp
US 8.8.8.8:53 14.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 52.211.88.54.in-addr.arpa udp
DE 52.59.238.109:443 btlr.sharethrough.com tcp
US 34.120.63.153:443 prebid.media.net udp
US 35.227.252.103:443 rtb.openx.net udp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 u.openx.net udp
NL 208.93.169.131:443 bh.contextweb.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 onetag-sys.com udp
DE 51.75.86.98:443 onetag-sys.com tcp
US 34.98.64.218:443 u.openx.net tcp
US 104.18.36.155:443 ssum-sec.casalemedia.com tcp
US 8.8.8.8:53 rtb.gumgum.com udp
IE 34.255.154.106:443 rtb.gumgum.com tcp
US 8.8.8.8:53 77e3ec59d891eece3f5853794cab7ab5.safeframe.googlesyndication.com udp
US 8.8.8.8:53 cdn.undertone.com udp
NL 18.239.69.65:443 cdn.undertone.com tcp
GB 2.23.204.28:443 contextual.media.net udp
US 8.8.8.8:53 98.86.75.51.in-addr.arpa udp
US 8.8.8.8:53 155.36.18.104.in-addr.arpa udp
US 8.8.8.8:53 106.154.255.34.in-addr.arpa udp
US 8.8.8.8:53 match.prod.bidr.io udp
NL 35.214.136.108:443 x.bidswitch.net tcp
GB 142.250.180.1:443 cdn.ampproject.org udp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
GB 216.58.201.100:443 www.google.com udp
IE 34.246.139.66:443 match.prod.bidr.io tcp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 ad.turn.com udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 pm.w55c.net udp
US 8.8.8.8:53 sync.mathtag.com udp
US 8.8.8.8:53 sync-tm.everesttech.net udp
US 104.18.36.155:443 ssum-sec.casalemedia.com tcp
GB 87.248.114.11:443 ups.analytics.yahoo.com tcp
US 8.8.8.8:53 usr.undertone.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 pixel.advertising.com udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 static.yieldmo.com udp
US 8.8.8.8:53 ssp.api.tappx.com udp
US 8.8.8.8:53 sync.ipredictive.com udp
NL 35.204.158.49:443 um.simpli.fi tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 8.8.8.8:53 p.rfihub.com udp
US 151.101.194.49:443 sync-tm.everesttech.net tcp
IE 34.246.139.66:443 match.prod.bidr.io tcp
US 8.8.8.8:53 openx2-match.dotomi.com udp
US 8.8.8.8:53 tr.blismedia.com udp
GB 216.58.201.100:443 www.google.com tcp
NL 18.239.36.69:443 usr.undertone.com tcp
NL 35.204.158.49:443 um.simpli.fi tcp
IE 54.171.131.187:443 pm.w55c.net tcp
US 50.31.142.223:443 b1sync.zemanta.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
US 151.101.194.49:443 sync-tm.everesttech.net tcp
US 216.200.232.253:443 sync.mathtag.com tcp
US 8.8.8.8:53 65.69.239.18.in-addr.arpa udp
US 98.82.157.137:443 s.amazon-adsystem.com tcp
GB 23.194.15.107:443 secure-assets.rubiconproject.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
GB 216.58.201.100:443 www.google.com tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
NL 35.214.136.108:443 x.bidswitch.net udp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 8.8.8.8:53 66.139.246.34.in-addr.arpa udp
US 34.96.105.8:443 tr.blismedia.com tcp
NL 193.0.160.130:443 p.rfihub.com tcp
NL 63.215.202.137:443 openx2-match.dotomi.com tcp
NL 34.32.149.161:443 ssp.api.tappx.com tcp
NL 198.47.127.18:443 image8.pubmatic.com tcp
NL 18.239.18.127:443 static.yieldmo.com tcp
US 18.232.192.117:443 sync.ipredictive.com tcp
US 104.18.36.155:443 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
GB 2.23.205.70:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 hbx.media.net udp
GB 2.23.220.28:443 hbx.media.net tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 image6.pubmatic.com udp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 49.194.101.151.in-addr.arpa udp
US 8.8.8.8:53 49.158.204.35.in-addr.arpa udp
US 8.8.8.8:53 69.36.239.18.in-addr.arpa udp
US 8.8.8.8:53 107.15.194.23.in-addr.arpa udp
US 8.8.8.8:53 11.164.228.46.in-addr.arpa udp
US 8.8.8.8:53 187.131.171.54.in-addr.arpa udp
US 8.8.8.8:53 137.157.82.98.in-addr.arpa udp
US 8.8.8.8:53 223.142.31.50.in-addr.arpa udp
US 8.8.8.8:53 253.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 8.105.96.34.in-addr.arpa udp
US 8.8.8.8:53 18.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 137.202.215.63.in-addr.arpa udp
US 8.8.8.8:53 127.18.239.18.in-addr.arpa udp
US 8.8.8.8:53 130.160.0.193.in-addr.arpa udp
US 8.8.8.8:53 117.192.232.18.in-addr.arpa udp
US 8.8.8.8:53 70.205.23.2.in-addr.arpa udp
US 8.8.8.8:53 28.220.23.2.in-addr.arpa udp
US 8.8.8.8:53 c21lg-d.media.net udp
US 8.8.8.8:53 medianet-match.dotomi.com udp
US 8.8.8.8:53 us-u.openx.net udp
US 8.8.8.8:53 dis.criteo.com udp
US 8.8.8.8:53 hb.trustedstack.com udp
GB 185.64.190.78:443 image6.pubmatic.com tcp
GB 2.19.117.32:443 hb.trustedstack.com tcp
NL 89.207.16.201:443 medianet-match.dotomi.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 8.8.8.8:53 cs.media.net udp
US 8.8.8.8:53 ws.rqtrk.eu udp
US 8.8.8.8:53 sync.adprime.com udp
US 8.2.110.13:443 sync.adprime.com tcp
US 8.8.8.8:53 sync.crwdcntrl.net udp
US 8.8.8.8:53 image4.pubmatic.com udp
GB 185.64.191.210:443 image2.pubmatic.com tcp
IE 54.170.33.189:443 sync.crwdcntrl.net tcp
GB 185.64.190.81:443 image4.pubmatic.com tcp
US 34.107.140.113:443 s2s.t13.io tcp
IE 54.170.33.189:443 sync.crwdcntrl.net tcp
US 8.8.8.8:53 csync.loopme.me udp
DE 37.252.171.52:443 ib.adnxs.com tcp
US 8.8.8.8:53 match.sharethrough.com udp
US 34.107.140.113:443 s2s.t13.io tcp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 cm.adform.net udp
NL 35.214.251.135:443 csync.loopme.me tcp
US 80.77.87.162:443 cs.admanmedia.com tcp
DE 18.197.30.174:443 match.sharethrough.com tcp
DK 37.157.6.233:443 cm.adform.net tcp
US 8.8.8.8:53 yieldmo-match.dotomi.com udp
US 8.8.8.8:53 ad.yieldlab.net udp
US 8.8.8.8:53 ad.sxp.smartclip.net udp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
US 35.186.194.101:443 ad.sxp.smartclip.net tcp
GB 2.23.204.119:443 ad.yieldlab.net tcp
FR 149.202.238.105:443 rtb-csync.smartadserver.com tcp
NL 34.32.149.161:443 ssp.api.tappx.com tcp
NL 34.32.149.161:443 ssp.api.tappx.com tcp
US 8.8.8.8:53 c1.adform.net udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 t.adx.opera.com udp
US 8.8.8.8:53 dsp-cookie.adfarm1.adition.com udp
US 8.8.8.8:53 dsp.360yield.com udp
US 8.8.8.8:53 ad.mrtnsvr.com udp
US 8.8.8.8:53 dsp-ap.eskimi.com udp
US 8.8.8.8:53 ipac.ctnsnet.com udp
US 8.8.8.8:53 d5p.de17a.com udp
DE 91.228.74.166:443 cms.quantserve.com tcp
US 8.8.8.8:53 uipglob.semasio.net udp
US 8.8.8.8:53 mwzeom.zeotap.com udp
US 8.8.8.8:53 pixel.onaudience.com udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 pubmatic-match.dotomi.com udp
US 8.8.8.8:53 match.adsby.bidtheatre.com udp
US 104.22.50.98:443 mwzeom.zeotap.com tcp
DK 77.243.51.122:443 uipglob.semasio.net tcp
SE 13.53.196.230:443 d5p.de17a.com tcp
CA 148.113.153.93:443 pixel.onaudience.com tcp
IE 34.251.185.136:443 dsp.360yield.com tcp
NL 188.42.63.48:443 dsp-ap.eskimi.com tcp
US 35.186.193.173:443 ipac.ctnsnet.com tcp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
DE 80.82.210.217:443 dsp-cookie.adfarm1.adition.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
IE 67.220.226.233:443 aax-eu.amazon-adsystem.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 8.8.8.8:53 50.23.12.20.in-addr.arpa udp
US 8.8.8.8:53 78.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 32.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 201.16.207.89.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 13.110.2.8.in-addr.arpa udp
US 8.8.8.8:53 81.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 189.33.170.54.in-addr.arpa udp
US 8.8.8.8:53 52.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 135.251.214.35.in-addr.arpa udp
US 8.8.8.8:53 174.30.197.18.in-addr.arpa udp
US 8.8.8.8:53 162.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 233.6.157.37.in-addr.arpa udp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
NL 64.227.64.62:443 match.adsby.bidtheatre.com tcp
NL 89.207.16.140:443 pubmatic-match.dotomi.com tcp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
US 8.8.8.8:53 101.194.186.35.in-addr.arpa udp
US 8.8.8.8:53 119.204.23.2.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 105.238.202.149.in-addr.arpa udp
US 8.8.8.8:53 166.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 173.193.186.35.in-addr.arpa udp
US 8.8.8.8:53 48.63.42.188.in-addr.arpa udp
US 8.8.8.8:53 6.163.102.34.in-addr.arpa udp
US 8.8.8.8:53 sonata-notifications.taptapnetworks.com udp
US 8.8.8.8:53 122.51.243.77.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 217.210.82.80.in-addr.arpa udp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 136.185.251.34.in-addr.arpa udp
IE 52.211.85.20:443 ads.yieldmo.com tcp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
DE 3.69.211.211:443 sonata-notifications.taptapnetworks.com tcp
US 8.8.8.8:53 230.196.53.13.in-addr.arpa udp
US 8.8.8.8:53 93.153.113.148.in-addr.arpa udp
US 8.8.8.8:53 kinesis.us-east-1.amazonaws.com udp
US 8.8.8.8:53 simage2.pubmatic.com udp
US 8.8.8.8:53 matchadsrvr.yieldmo.com udp
US 8.8.8.8:53 140.16.207.89.in-addr.arpa udp
NL 18.239.94.86:443 matchadsrvr.yieldmo.com tcp
US 8.8.8.8:53 62.64.227.64.in-addr.arpa udp
US 8.8.8.8:53 pbs.yahoo.com udp
US 3.91.171.249:443 kinesis.us-east-1.amazonaws.com tcp
US 3.91.171.249:443 kinesis.us-east-1.amazonaws.com tcp
US 3.91.171.249:443 kinesis.us-east-1.amazonaws.com tcp
US 3.91.171.249:443 kinesis.us-east-1.amazonaws.com tcp
GB 87.248.114.12:443 pbs.yahoo.com tcp
US 80.77.87.162:443 cs.admanmedia.com tcp
NL 35.214.251.135:443 csync.loopme.me tcp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
US 8.8.8.8:53 rtb.adentifi.com udp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
NL 18.239.18.127:443 static.yieldmo.com udp
US 8.8.8.8:53 bttrack.com udp
US 54.83.2.40:443 rtb.adentifi.com tcp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
US 3.91.171.249:443 kinesis.us-east-1.amazonaws.com tcp
US 3.91.171.249:443 kinesis.us-east-1.amazonaws.com tcp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 aa.agkn.com udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 pool.admedo.com udp
US 8.8.8.8:53 sync-adform.ads.yieldmo.com udp
US 8.8.8.8:53 idsync.rlcdn.com udp
US 8.8.8.8:53 ums.acuityplatform.com udp
US 8.8.8.8:53 match.360yield.com udp
US 8.8.8.8:53 s.ad.smaato.net udp
US 8.8.8.8:53 sync.inmobi.com udp
US 8.8.8.8:53 sync-openx.ads.yieldmo.com udp
US 8.8.8.8:53 sync-beeswax.ads.yieldmo.com udp
US 8.8.8.8:53 sync.vistarsagency.com udp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 211.211.69.3.in-addr.arpa udp
US 8.8.8.8:53 86.94.239.18.in-addr.arpa udp
US 8.8.8.8:53 12.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 249.171.91.3.in-addr.arpa udp
US 8.8.8.8:53 205.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 40.2.83.54.in-addr.arpa udp
US 192.132.33.69:443 bttrack.com tcp
NL 81.17.55.123:443 ssbsync.smartadserver.com tcp
IE 52.51.236.71:443 aa.agkn.com tcp
FI 95.216.70.52:443 sync.vistarsagency.com tcp
GB 172.217.16.230:443 s0.2mdn.net tcp
IE 52.51.128.45:443 sync-beeswax.ads.yieldmo.com tcp
IE 52.31.215.85:443 match.360yield.com tcp
US 35.244.174.68:443 idsync.rlcdn.com tcp
IE 52.19.128.63:443 sync-beeswax.ads.yieldmo.com tcp
NL 154.59.122.79:443 ums.acuityplatform.com tcp
US 20.33.55.12:443 sync.inmobi.com tcp
BE 35.206.140.87:443 pool.admedo.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
IE 52.51.128.45:443 sync-beeswax.ads.yieldmo.com tcp
NL 18.239.94.61:443 s.ad.smaato.net tcp
US 8.8.8.8:53 sync-eq.ads.yieldmo.com udp
BE 35.206.140.87:443 pool.admedo.com udp
US 8.8.8.8:53 visitor-gen01.omnitagjs.com udp
DE 18.197.30.174:443 match.sharethrough.com tcp
US 34.168.25.131:443 visitor-gen01.omnitagjs.com tcp
US 35.186.194.101:443 ad.sxp.smartclip.net udp
US 8.8.8.8:53 230.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 123.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 79.122.59.154.in-addr.arpa udp
US 8.8.8.8:53 85.215.31.52.in-addr.arpa udp
US 8.8.8.8:53 87.140.206.35.in-addr.arpa udp
US 8.8.8.8:53 71.236.51.52.in-addr.arpa udp
US 8.8.8.8:53 61.94.239.18.in-addr.arpa udp
US 8.8.8.8:53 52.70.216.95.in-addr.arpa udp
US 8.8.8.8:53 45.128.51.52.in-addr.arpa udp
US 8.8.8.8:53 63.128.19.52.in-addr.arpa udp
US 8.8.8.8:53 12.55.33.20.in-addr.arpa udp
US 8.8.8.8:53 69.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 131.25.168.34.in-addr.arpa udp
US 8.8.8.8:53 ap.lijit.com udp
IE 52.17.160.30:443 ap.lijit.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 98.82.157.137:443 s.amazon-adsystem.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 i.liadm.com udp
US 54.86.139.238:443 i.liadm.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 cms.analytics.yahoo.com udp
GB 87.248.114.11:443 cms.analytics.yahoo.com tcp
US 8.8.8.8:53 238.139.86.54.in-addr.arpa udp
US 8.8.8.8:53 30.160.17.52.in-addr.arpa udp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 simage4.pubmatic.com udp
NL 198.47.127.20:443 simage4.pubmatic.com tcp
US 8.8.8.8:53 sync.targeting.unrulymedia.com udp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 8.8.8.8:53 us.ck-ie.com udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 98.82.157.137:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 live.primis.tech udp
US 8.2.110.114:443 us.ck-ie.com tcp
GB 18.172.89.123:443 live.primis.tech tcp
US 18.232.192.117:443 sync.ipredictive.com tcp
US 98.82.157.137:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 20.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 123.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 ce.lijit.com udp
US 8.8.8.8:53 capi.connatix.com udp
US 8.8.8.8:53 eu-u.openx.net udp
US 8.8.8.8:53 sync.adotmob.com udp
IE 52.214.174.232:443 ce.lijit.com tcp
US 172.64.146.152:443 capi.connatix.com tcp
US 8.8.8.8:53 pixel-us-east.rubiconproject.com udp
FR 45.137.176.88:443 sync.adotmob.com tcp
US 8.8.8.8:53 sync-gdpr.intentiq.com udp
US 8.8.8.8:53 sync.teads.tv udp
US 69.173.146.5:443 pixel-us-east.rubiconproject.com tcp
GB 2.17.149.102:443 sync.teads.tv tcp
NL 13.227.219.68:443 sync-gdpr.intentiq.com tcp
US 8.8.8.8:53 a.tribalfusion.com udp
US 172.64.150.63:443 a.tribalfusion.com tcp
US 8.8.8.8:53 114.110.2.8.in-addr.arpa udp
US 8.8.8.8:53 232.174.214.52.in-addr.arpa udp
US 8.8.8.8:53 102.149.17.2.in-addr.arpa udp
US 8.8.8.8:53 88.176.137.45.in-addr.arpa udp
US 8.8.8.8:53 68.219.227.13.in-addr.arpa udp
US 8.8.8.8:53 152.146.64.172.in-addr.arpa udp
US 8.8.8.8:53 5.146.173.69.in-addr.arpa udp
US 8.8.8.8:53 63.150.64.172.in-addr.arpa udp
US 8.8.8.8:53 s.tribalfusion.com udp
US 8.2.110.13:443 sync.adprime.com tcp
US 8.2.110.13:443 sync.adprime.com tcp
US 8.2.110.13:443 sync.adprime.com tcp
US 8.8.8.8:53 s.adtelligent.com udp
US 8.2.110.13:443 sync.adprime.com tcp
US 8.8.8.8:53 sync-service.net udp
US 8.2.110.114:443 us.ck-ie.com tcp
US 8.2.110.114:443 us.ck-ie.com tcp
US 35.244.174.68:443 idsync.rlcdn.com udp
US 8.8.8.8:53 us.shb-sync.com udp
US 34.107.140.113:443 s2s.t13.io udp
US 8.2.110.13:443 sync.adprime.com tcp
US 204.62.12.209:443 sync-service.net tcp
DE 168.119.66.90:443 s.adtelligent.com tcp
US 8.8.8.8:53 core.iprom.net udp
US 8.2.110.33:443 us.shb-sync.com tcp
US 8.8.8.8:53 sync.e-planning.net udp
NL 193.3.178.3:443 sync.e-planning.net tcp
SI 195.5.165.20:443 core.iprom.net tcp
US 8.8.8.8:53 inv-nets.admixer.net udp
DE 116.202.167.155:443 inv-nets.admixer.net tcp
US 8.2.110.13:443 sync.adprime.com tcp
US 204.62.12.209:443 sync-service.net tcp
DE 18.197.30.174:443 match.sharethrough.com tcp
US 8.8.8.8:53 cm-supply-web.gammaplatform.com udp
US 8.8.8.8:53 cm.adgrx.com udp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
IE 52.215.155.11:443 cm.adgrx.com tcp
US 8.8.8.8:53 209.12.62.204.in-addr.arpa udp
US 8.8.8.8:53 90.66.119.168.in-addr.arpa udp
US 8.8.8.8:53 33.110.2.8.in-addr.arpa udp
US 8.8.8.8:53 3.178.3.193.in-addr.arpa udp
US 8.8.8.8:53 20.165.5.195.in-addr.arpa udp
US 8.8.8.8:53 155.167.202.116.in-addr.arpa udp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
US 172.64.150.63:443 s.tribalfusion.com udp
US 8.8.8.8:53 green.erne.co udp
US 8.8.8.8:53 matching.truffle.bid udp
DE 23.88.86.2:443 matching.truffle.bid tcp
FR 141.94.242.206:443 green.erne.co tcp
DE 23.88.86.2:443 matching.truffle.bid tcp
US 8.8.8.8:53 pixel-eu.onaudience.com udp
FR 54.38.113.6:443 pixel-eu.onaudience.com tcp
US 8.8.8.8:53 11.155.215.52.in-addr.arpa udp
US 8.8.8.8:53 206.242.94.141.in-addr.arpa udp
US 8.8.8.8:53 loada.exelator.com udp
IE 54.78.254.47:443 loada.exelator.com tcp
US 8.8.8.8:53 6.113.38.54.in-addr.arpa udp
US 8.8.8.8:53 47.254.78.54.in-addr.arpa udp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 34.160.128.112:443 api.floors.dev tcp
US 34.160.128.112:443 api.floors.dev udp
US 34.120.111.33:443 api.edkt.io udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
GB 216.58.204.67:443 www.google.co.uk tcp
BE 66.102.1.157:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 67.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 157.1.102.66.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 12.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.180.4:443 www.google.com tcp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
GB 142.250.180.10:443 ogads-pa.googleapis.com udp
GB 142.250.180.10:443 ogads-pa.googleapis.com tcp
US 8.8.8.8:53 3.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 10.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.187.206:443 play.google.com tcp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.178.14:443 clients2.google.com udp
US 8.8.8.8:53 blocking-off.pages.dev udp
US 172.66.45.33:443 blocking-off.pages.dev tcp
US 172.66.45.33:443 blocking-off.pages.dev tcp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 33.45.66.172.in-addr.arpa udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 172.66.45.33:443 blocking-off.pages.dev udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 maxcdn.bootstrapcdn.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 151.101.129.229:443 cdn.jsdelivr.net tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.18.10.207:443 maxcdn.bootstrapcdn.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com udp
US 151.101.129.229:443 cdn.jsdelivr.net udp
US 8.8.8.8:53 229.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 14.25.17.104.in-addr.arpa udp
US 8.8.8.8:53 207.10.18.104.in-addr.arpa udp
US 104.18.10.207:443 maxcdn.bootstrapcdn.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 142.250.180.4:443 www.google.com udp
GB 142.250.180.10:443 ogads-pa.googleapis.com udp
GB 142.250.187.206:443 play.google.com udp
US 8.8.8.8:53 translate.googleapis.com udp
GB 142.250.200.10:443 translate.googleapis.com tcp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.180.10:443 ogads-pa.googleapis.com tcp
US 8.8.8.8:53 apis.google.com udp
GB 216.58.201.110:443 apis.google.com tcp
GB 142.250.180.10:443 ogads-pa.googleapis.com udp
US 8.8.8.8:53 110.201.58.216.in-addr.arpa udp
GB 142.250.187.206:443 play.google.com tcp
US 104.21.13.102:443 geektyper.com tcp
US 104.21.13.102:443 geektyper.com tcp
US 104.21.13.102:443 geektyper.com udp
US 8.8.8.8:53 i.imgur.com udp
US 199.232.192.193:443 i.imgur.com tcp
US 8.8.8.8:53 ajax.googleapis.com udp
GB 172.217.169.10:443 ajax.googleapis.com tcp
US 8.8.8.8:53 102.13.21.104.in-addr.arpa udp
US 8.8.8.8:53 193.192.232.199.in-addr.arpa udp
US 8.8.8.8:53 10.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 172.217.169.78:443 fundingchoicesmessages.google.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 172.217.169.78:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 226.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 78.169.217.172.in-addr.arpa udp
GB 172.217.169.78:443 fundingchoicesmessages.google.com udp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
GB 142.250.200.34:443 ep1.adtrafficquality.google tcp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
GB 142.250.179.225:443 ep2.adtrafficquality.google tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 142.250.179.225:443 ep2.adtrafficquality.google tcp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 225.179.250.142.in-addr.arpa udp
GB 142.250.179.225:443 ep2.adtrafficquality.google udp
GB 142.250.200.34:443 ep1.adtrafficquality.google udp
US 172.66.45.33:443 blocking-off.pages.dev tcp
US 172.66.45.33:443 blocking-off.pages.dev tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 172.217.169.3:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 roaming.officeapps.live.com udp
GB 52.109.28.47:443 roaming.officeapps.live.com tcp
US 8.8.8.8:53 97.32.109.52.in-addr.arpa udp
US 8.8.8.8:53 47.28.109.52.in-addr.arpa udp
US 8.8.8.8:53 odc.officeapps.live.com udp
NL 52.109.89.119:443 odc.officeapps.live.com tcp
US 8.8.8.8:53 119.89.109.52.in-addr.arpa udp
US 8.8.8.8:53 106.246.116.51.in-addr.arpa udp
US 8.8.8.8:53 48.229.111.52.in-addr.arpa udp
GB 172.217.169.3:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 e2c74.gcp.gvt2.com udp
FR 34.1.15.89:443 e2c74.gcp.gvt2.com tcp
US 8.8.8.8:53 89.15.1.34.in-addr.arpa udp

Files

\??\pipe\crashpad_3720_QVCFPSVBORYLXTEI

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

MD5 6ef25d40d7464e00e3219c8904e25caf
SHA1 c67cc096eb82ac1de4df3f3841a78b2639d5e658
SHA256 fee794c1da6403add77693c0917df89b3371fe9ed8f27a5df101756e7afe274e
SHA512 863c2e1432f275f9324f1e161901b1611ca691a162b7ddea6825a4d1cb0d5df2909e901bfdd8eca9541185e7ae87fe8bdfa7ed74b12ab982193873666077e0a2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 95b71319a5a7e3b9453ff504eaaa2f8b
SHA1 d01589c49081e72e4d94893397c33835c6c626fb
SHA256 0a35b2ab8ab61e07b0c510f12c073c5db8b3932ea16db1720c2d258016e418a7
SHA512 05aa98332014712ce8896574c1faa8c1b69e3aa98b883123e30515be2e6a70370b67d6329756123dffbcb8d8caa0e2e283318cbf9e4e1b83fee40d30c45ee144

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7573e309dddfa0e3ff6e6bc42ce77ee2
SHA1 43ce6a6fdf61f540c793553a4468b0c994a2c0dc
SHA256 63834c0fec2d021f9b365e6b63f01272286309a92b24913e6fe2d4caa031727e
SHA512 a0d3a62b7a999b387d575c837f4c70ae20fe1b8894571a28bcec8849b1e949a10d74f7c8bc87f77c533c1d3db0233a8ade4a4cc48c5cf901a17ecce4754d5c1b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 cb6dc983e82c8eec53638fd5c49aaa1f
SHA1 55fe7dbb6c97961784eb6836bf2b93f88ef90ed0
SHA256 0bba1c23b1134bc0e4344e009c6f8ffc967c34811588100930b7db1b030f17ba
SHA512 cb60784db6986cd20788e2c0edfb480ecc9a780cf21d86404ba4a6951af6bc66b80a9ad8e23fb3a7883c2ffd3df65e0259198fe1c8a9fc1f685448b8da6dadbd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 6412231ef87e45197f1beac7d3a951fc
SHA1 3be3354e05c5e590dab5637dd166e12a47cedc28
SHA256 5524a7e6aaa7effe8d0e9029bd177a4529ccb493e40e1f8fa1ce76b9b1df3444
SHA512 2f3ed3bff061a6e569422c8b9bbf8ac038b910f1b2a869825d5be35a302f770c49584f89003a6c7e655aa2588424db71eead600e3f3e950f2ca5df2424e43503

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 191176035856574c7cf1a33d5ef6ebe3
SHA1 303ee624f9677ecac76cd367b1303a3730964c48
SHA256 7af1a83dda24aa996da7150529d3c803b5faed2b4f83de75dff9355157b672c3
SHA512 3133dbe3f6dbe4ea9bbad52211474fd6b23a5b63a1ac048a982004135317a08915421b0d7c731aa38ac78c7b8d4eca6439686cc932b1a25bf965fc671c924de2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d

MD5 6fb26b39d8dcf2f09ef8aebb8a5ffe23
SHA1 578cac24c947a6d24bc05a6aa305756dd70e9ac3
SHA256 774379647c0a6db04a0c2662be757a730c20f13b4c03fe0b12d43c0f09e7a059
SHA512 c40f4771c10add1b20efb81ee3b61fc5ede4701587f29a1c2cdde8b6faabd1c76d769bf8b99aa19082012f95d99ba448a472463fb9056acd2e43542e14e605cd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 3bea797440dcdfe7849399fe57c064ca
SHA1 c796a70753117a712ea050f91f1386a1305d3717
SHA256 36f60a38bb1f0fdb192fc91023fd3e93b2ca5268126ef620723820e18a8b61c4
SHA512 ac52630fa12229a188c9cb485f84296a278a918de4a7d50f27f7f4eef396dbc7d13cc9d69b8f37184d78e2c11e11b7c4fdfca102328b5424e5a9a32abaef6217

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 99fc99594c6405dd14d734e127debbe8
SHA1 1a06027532d62491ce97974f912b66a7cb17502b
SHA256 7755134b59b4df444c961479621778fb8b97e6fdb50c06842a9aed93d842d65b
SHA512 a258b4c7ebb8fa6ba365946c0d08e0b9525d80e87730d80d35b3c3a5154eb69a80b4783fd4cb56cfad46efad412b9436660c83be6b16e7089437feee08af5baf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b683399755495d1dacbcad791d427587
SHA1 678862612a72e6cea2135a48b05994704fddf16f
SHA256 80d9277e0946fa8646eeb8f19abd7b3520b391007de76b13df8bfb9f69fa13ca
SHA512 6d4b5cac60f6e52dc3497548deac99bf1a678092954a3d801f7b379479323254e37bd99d5c3792a1e45d03e967665c0b80ee92c0bec991a73f3319e85c5726a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 e339758f8758024addbdb119ee5eb326
SHA1 9deea1fac1e6dc12e4db917f3fb36179f04e4c34
SHA256 b88488c1daaa354fa9e067f878538e8b2c81f351010e843ab5177dc0d73466af
SHA512 3320297d9e9df4ac0260d53f0e2c4d68977ca3fd612095f36b75f3cb000a52b7b18cbd3ce75d42d81436989e78cdd4423ec8fd8e359d51f40c2d3a77b1820b4a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1221976f749deac376e32d38ad2f709f
SHA1 60cd9e008ca48a9e147a9acbc4b2931a136057dd
SHA256 cf63df382b1b1bd417f8fd75c742ccfb3940479a62ac81e27a206813c322bea5
SHA512 7254adc0c86b6662237e2516d96cbbe738a789a92efea5e43adce70bf0b5cc8936e9cb93f455c0d6dd35bc203f3736db948ec77e0d840e3204adec2190dabc2e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 3302a2c41f15624c4961c8179ef8954a
SHA1 edbb6e6da81f0ea3c5fc0094c85e077de1730667
SHA256 abeb2c0a26f24df5fcee5aa3e6263d79b587171f186f560d727a1be1e1e7d1e5
SHA512 a35571b2d27f5418635f3d5fd5ac0853fe81439f867bcd18117c349c8a800df453116dfe370ec238f53f4feb13c6432fbb68e68c0703f52c9a4f3a7b16bed3cb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 b829855f6bea8689f967f8abb8b9ca6d
SHA1 94e606227d807b5e97b699321648636139e4c133
SHA256 61790e12ad75a0641e2cf5ade64fe5638d44fabc804de68b3a98b5c0605fd78f
SHA512 917bbf7cfbed0690ca2d9fc8ceb58f0a2b7cd61e06550832ac52f6dc7ea7d3ca09fe3e581d31af7c4416f9d80116fe33ff3a2f1eae178dd858e259e85e50def0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7301716e188e75657286da57eeb4ccf5
SHA1 a41f581a158d84f360b11f1d024e2fc07c476ddb
SHA256 0f406514c7d1d96d0d768d29350735b469e6e80fb9b8e75f9eaf5ff697e8bdab
SHA512 382b6aa883702f197e82128bdc62f5c0b608b6bc978b83a701d058c4b2aab26af89e3981ad98de9ce0fcece757527737ccc5d8780c2dda72f09799557e55af98

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 4f782cecc02a58c7426c1c1354b06953
SHA1 a99770614f518ba794c348baea0a44817077a6a4
SHA256 6442fd5c9c77a7976b4439548fec81fd8fc495f04fd134b7a6a6243b0abff79a
SHA512 8e48d88a3715ce9a1439257c4ad3308017d1040ff6bdc9ca08522e5c22f4070f90c3188b3ec258e11b24230c3738894dca36a8105fa8487febac5719531a1153

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 9419755ebdc8fdbe49178e78bf698351
SHA1 2c23b2a1079700db7063ceaa9ef39fb0180044ad
SHA256 3d533aea5c96bd668bba80d7859bc4a9fea968e1894559d56dc874bfe9185e18
SHA512 ee88f5475b6c26519ff4fea95dced0056fa0cb6edc0bded2a9f7de2967302ead991aa69103686b243188d3ccdd63577c2231470ab437652e2e966e471e7a17b6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

MD5 3e80b8c4685d64fa6cd1f6f3d2b37692
SHA1 fcbafcd0bb7cef1389adc98c896eeabbddb6ca39
SHA256 5f20606a194e9058ef12ccd2e4799132ad59395712f98e387410c130f9dcb818
SHA512 8784e237e0b15cb2973312b61fe1909828f73a76fbbe29d975a19ca9fb99350952c975c99be849efb8697cb6d0274e674baafab8480eb90697b1c1d71c553e04

memory/7452-628-0x000002631CB30000-0x000002631CB31000-memory.dmp

memory/7452-627-0x000002631CB30000-0x000002631CB31000-memory.dmp

memory/7452-626-0x000002631CB30000-0x000002631CB31000-memory.dmp

memory/7452-638-0x000002631CB30000-0x000002631CB31000-memory.dmp

memory/7452-637-0x000002631CB30000-0x000002631CB31000-memory.dmp

memory/7452-633-0x000002631CB30000-0x000002631CB31000-memory.dmp

memory/7452-632-0x000002631CB30000-0x000002631CB31000-memory.dmp

memory/7452-636-0x000002631CB30000-0x000002631CB31000-memory.dmp

memory/7452-635-0x000002631CB30000-0x000002631CB31000-memory.dmp

memory/7452-634-0x000002631CB30000-0x000002631CB31000-memory.dmp

memory/7872-640-0x0000000021170000-0x0000000021698000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 0f01b7961c4ef56a04044524400eae59
SHA1 22dc343ca8dd0e546f8049ab7fe85ab45ce57383
SHA256 1f731ab0cd1a626f8b18714efbbdb39e44c345532aefe90c5b0472415421034d
SHA512 80f148c44db16b9095796521b20d7c5976db755b0385436ade4fbc4d8f68c7fe706a68d334822069989336f0642ca0ed9983ad316212194754f19d463dcff0e1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 84bc5e25db923925db8117d5bc716a7c
SHA1 b57f6b5f40c5ec20a8d2a2b5860552e2f787b5a6
SHA256 e2a2ebf10834d9604694eac63fc21647391ce641049147d4ace39f732c1666f3
SHA512 6c3b26b338373a246945762a5bc25a9da3082e9bea8b53541cf3ecb89b973d62a940cd9bd294c7c9464623ade480f5e1d94861d0e5d20063e35d1a9b7be20c04

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 573dfbeb1a06e5b0098a6c8436523640
SHA1 80c84457f87a8960afba3bf29559f5ac53dba024
SHA256 f4452f81c09502e355d274ee74946d7746f6166bc4f51723dd3a6323d2cf9afa
SHA512 91059fd20ff7580cf7f9be43207f18186d999ef14a24594aed6b575c55ea5fa47e89025c2aa2fdf7990bc735a12327d5b2d5f51629d711ff826120151b1a1f5b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a93e8fa2764621d6cc146f11a6660b9e
SHA1 cabb65de1212e4916e19cde648d5421639abcec1
SHA256 74ab3b9d1616d98924c4098df171fbe1c8e73ac09e312035a12d317b29dc36c3
SHA512 15c6478fe75268d52280d910b77361d5762f79eeefe0366bf8e767e26a2237bb644abac186f12c879a9727de2043ce8fd092157a56a806d46e8104d947cd570c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0592b9dc49632bc4c3ccb57fed5a93fc
SHA1 731606f27420ad1ef9a23465e9bb5c160afde5da
SHA256 41d129535c7796e6b074d0c7b1a42a73a8e2ea2f1e14b720f8d45c9dc1b2ae06
SHA512 fe5a5a49a0af0646815f5e59241c6ba108574ec92307832a4f36e23159fd9f2da62309e7e3990093425e8fa7189f00e3eafa88ff884105daf79c9f7062cbc6d2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 1c9555c557d162df85c5aaa931abd7b6
SHA1 ca6892d422b086073d4eaa205b6bbc6022ce6e78
SHA256 c2f1d91c6c07c0ce192ec6d7f763e443ec08717920229d4ef77bfc7befd1f3d6
SHA512 9f489b48c3bd0529f98d49e9e5d0a8e5ce8dcabdfe6f23f97ba1319aafe98e254d18c635a33d9c5042afa5dbfbbb52fd0538774f8a0fe26e10ff919dce717b29

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 26a4b8c69f721a1d7d15159d03d4bece
SHA1 9ae696454b9b7dbaaac0900ef319bca865a9e029
SHA256 6895c8da9e3d7ff89241deb7990efae65d064f3592f375656d4c2733fd761d51
SHA512 e615c606aa301f8208dfdf11b9f8503732e37a24bbba53b2d4936e21f9403483437f227ca8b84ac979eb6a25411cf399f55290425cae47ab3012a924cd794088

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 db28d6e0d0e0ed9aa5521dc913ff8163
SHA1 66b66ff8c5543413653377830700dc58f0e59ed1
SHA256 5bda49c3de35a65a54263ee43256b6b7aea60ce69e3d48e9a276c2b573b7364a
SHA512 87e082839c08b3d82c747284dbfa55639d8e50a5360d20e0263d4050d7173829b192c671a533cb4c63765b95d2855a5c2b189ae74a950af3fe0b4b2846b57b7e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5c1cbb40ffb4cf4a00204244c9e89e35
SHA1 1bbd9d222d9ecfc2ca311bb76f37a9cff7756bd9
SHA256 f42b313a23ed8971cf4083b6e102e7937ac879ef102b46e4983e376d3e0b7160
SHA512 48becaea3af8e9638a5edc6bd92771e4c48155b8b2784bbe6587b74e7a3255fe9dc8e0ece04eb7811dd4a0f17aa67a3a04f5d21deeb2fa084634e42696528028

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 a31aed5a91601dfde2c6b83c4536efab
SHA1 9cef469e477e1ec6ff9e105abc50adbe1f66ac53
SHA256 ab46972e9343ea97eb35a2467fed4c201060926a642d223c21608507c632078c
SHA512 dbdc2bffe26e07bf55705dc6869cf9d2c8df751772d9a62a42dea03f23f2df422b3aa280ce3534ac868fd5047dfb09a5d8f2b5e9d2a62fbef7122878f6133897

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 efe7be3df8a5f697ad841fe178306613
SHA1 1623ce2b8dd3f2d309d67ff30663f80c31d0c032
SHA256 755b58a97c474eba562646f2899cdd3ba5058df7d5eae8fb76a944736d77c3c1
SHA512 1ba8525bb2d1a4fc714d50bcf148f2a1e143532fc651e358827f07bc52b3a3a63b2fab5666359db6d2789921d714e8a7fdc6363e3b9867c58876634baa407383

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 a4e76dc9103afd0f21e58c09cab4a99d
SHA1 4ec0d7af27a77b0103a64f63ba2225c0670066a6
SHA256 a666d4a9546afc1b007306cbf8f4a13cc17e7ab6c848473103e2fe4f5c03a56a
SHA512 7714ab5c2ff602d9a4c3f9d5dd54816f1a81809cc35be929ec6f87116fe524f884edd0f000759e41839b0f8064d5b39a03551f9a7d7c73f31d378de494f912b9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 575c9d5dbdb8d6155a1eaa9c44225404
SHA1 4693a5242ec95ec9877f0ce87ce46b6aa9216beb
SHA256 7d15deb7dd31ee1111d92b45c24c02dc399328be46f5bbf2b14d8e3d6746f2d2
SHA512 6573471b87dbe90a2da983fcb20331b6431d10348be3f18790a6ee49f38efcdf702d525be4ff934489f1353c0f1c8d714a7bcda4c23ef2be47f4909706abd400

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage__tmp_for_rebuild\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb__tmp_for_rebuild\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 3bb76ec23c5506830ead56540e06159f
SHA1 94695e47d907e559e91e677cec4eb763dc0c5ca9
SHA256 6b40f4ae548688a472be3ca0c1b08ecf520b31e706fec0f9793b4666134eba06
SHA512 307f9bd06ca5ee753acdc450cf1599dfc8ed080d9a1b19d752dd9b7950377a5b04e44d374f12ed76abd74961c2b1f8ad6c93e4663ea77f5d6e066570c1aa6bad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 32b9dc9cc81d0682e78627c873fdd651
SHA1 46c486386d3e153c3e9b11d54cb52cf0064b71cf
SHA256 712196693e3527ac1131831f1a2108b6c0e5c68967b26d51a452611cdfb86e0c
SHA512 f18bc37f8b72411548da247aa1394cc5ac03c3bbd98e82eb8ba290ef239ef5b8625cf4835bd41ce7c52766d0bc3bfe9150dd22dbf62f0f05992ddde5fbfdc811

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

MD5 d0450d849cf96937292ff188cf1ec1f6
SHA1 6dbe6c6fcd2dd255b52b62054daab0568c2916d9
SHA256 54bbeff588af4b01ab03136e024f267e70fe65f568f14474a41e00270f2e7054
SHA512 08191a24a0e2c835288907ece12b8f40941ffbd7ce63710ee8f4110ad3969f8885ff7a65d32bede0b9eea0c324a2ccccdf3efc8c7e3dea6373f5d81cc59e378a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 644e141d57f71489898b3a8535c6768d
SHA1 2c94813548b7ea88b1c49130285cb61586a37bf1
SHA256 7b300e8ad3da6b6c07ef5d37271e4bd84118fb094b3ec9df2216b1129d4fd054
SHA512 397115efcd34bc17febcef328f00f275efdefb8969dbb9ec7f4c6cb6d598f0d2216d7ada0587ca0994ea16af58ef63c9a7e638d2c15acb0648f0e2a86f368e47

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 404ab92109cba2fc3cacb6ed808d2b4e
SHA1 53a005d089148f0feb76027cadd7d3e7c835b24c
SHA256 81863e4ab91452a1fae3a2b774c495995e00240b699b2480d2e1c140d7706033
SHA512 c6d6a9e5abdb8fa0886406b24afa66b474159914b3d5826ec5fecb168b4a86be28a6eb6ae8976c040c0444fdfca0f03066369e1479c45e4fcf9d4547d55ed528

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 a685dfba9348277bfb53a2bc6b06d692
SHA1 685e05f2a62921c73b2d0ab86450ab334c83e052
SHA256 e411ee0c33e8510931c4108da6a15ddb8948e34498de371150a97fade902c813
SHA512 ec21e7bc9972ff84076209d74fe7845f41d83a159b8af9999cf4fe60ae6c1d2961efbd206329141c103112f2c1ae30f565f97e839d8d5c243502c8492494d4e8

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 854a74eab96589749529285306db03e8
SHA1 4cacd6e421b2af1fd0df9cd1578b92e3d9e87274
SHA256 48695af4e1a060fc8b6bf178453ff5fb6cbc9498474eca5ea945dcefaf1a3d83
SHA512 c286dfe285ec9dc4b8e312f0cdf297961c357ff5e6b8aa13229461d571f6c12324f69627ac19b501a2a6a55b0e3c4594f1fb7309e7891da603a9b215bf9f0251

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 479d8334c8b34d2ede74ea46c05cc478
SHA1 fd3e6c6591d9577e881fa26d283fb47229e7bfaf
SHA256 2172e2d53d838bee5cbe4e8a87c75b012871bb4b15571d0f104e31e0cc0d9be6
SHA512 3d588c7768d2a0e34a378ffeee861a95398fb0d6e4d4b14d67b32bd16ee45907fba2392c34ae6a9d750ebe946fe53e0fc7185d982821bae69e6fd18bc0ed3fbb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 881388c1d5a607ecccb4452b0e6dd5b1
SHA1 12f3bf33c634c3a62bef064efab10ab17fe69f1f
SHA256 b07741f6bd28b9a63e67ac751882c7a072a53e2eb9a539a14e83837776b4387b
SHA512 9ba7669e8cf1c60a8a8f089f5a7144a329f391a46df7d65fed3539a8855032a088f6267ee2784a4f8747773f9f0fc732712862c6f791bd4fc35cdd285816bdb2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 f3d48dd48102a1374877c439ececee04
SHA1 84d2298ff390235523c786dad12407445608bb75
SHA256 002119246494369e635d7ec505d68d7af655bc894bc7ce22d764f4fda31631fc
SHA512 7d7a107d9edbf215fcc1b3770449a006d54b6bf0eb3598f2bbbcfdc9211003e064bf5feaec18dbc31dd945774938ca7d8b81d7add3e455ba24eceae33e06f122

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 dfeee3181e017837e08f6c33bf811c3a
SHA1 c55b29c956dc5bd85231ddb9d1df0021aa47d7aa
SHA256 a31a080a18e06ac7b4bdc38ac01074a9880e383c399f10c93fd1a1288db4640b
SHA512 e9dff2b0305e64a0f41c6207e9adf9f8ea91b0e45c3d0992db8249bb0f0693326fa7a13f45dcb03f1174c41f9d98e6809e5f677f2a822fbcf734fde012628ba4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b2febc6a-b617-4a46-86cb-e332b91b5dc9.tmp

MD5 11e4a7bcd502fca7c28dba0835a051eb
SHA1 821b5646cdd0d4e6d05dec162756dce424eba5a5
SHA256 f06f01dca25d528827b4f867937c5e3a967efb559ef10b622b3db48b649b8497
SHA512 5a11e89aa4465bddf04c32d0d9fec5d0b004142a7931947a615222dbd72d45c442dcf8c2deb7f31033eb5f4fe96c019f33d87b02fa2786fbebb86ada300558d7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 f68b1c19411fbf88ed95f4b75231cb43
SHA1 c6e6b299c3f2a165a9efaeb2dba01f9bf8322cf0
SHA256 3f7c882076e12213ed502b07f00cfbb0fd856a27bf143f639069279dfa44bb8e
SHA512 d0c2e3fc1c6c031a5cfad07eccc947e69f2a9f5e0d42499f4a854ffe99b1018e062015b9701c8e7c667bd3e2d3480b3524c6f405b51bae231d89e6691e81a3a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 10af03b91013de83103906da3c3b687c
SHA1 61577bfcf6ae6d86c7a0221c7cb1d7a49b420eb1
SHA256 9ebbe95de1dbba02cdb35faeb5f1e73bec86490ec57c3f6dfc2b048ef943cf4d
SHA512 0bc9a6cd33f63a87529c3c9045ea20ee2d9bfc296174fe1316693b8f89c029a011a00cd1c62662546f697eb3ba68d2edb6ff0695cbb4f2cbb1ae4a11f14792c9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 78aa69e44e4e631812b7a257dbbe1cf1
SHA1 23b838e57c61e1229f54d75093d091da9a3ac1a5
SHA256 bc8e8183df8b6d1478f04c9b9abc4d695b6c5a275115859fd447eff9d7305e75
SHA512 cb30dafa12c6c1fa90a38913af8aa1133d207ee47e5fdc2ba690a99310fda117cb20426e288b847c0d2cf3d289cc283729f9f4c2f676a45de1158fcd7f21f922

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c0d946e2fb63b9880372af70b6d89cc9
SHA1 da5f2cee06cf65ee17460e7077644759e4a9772c
SHA256 3e6f9bcc3be0d78ac5d6c6eb11dd0dca7e533624784323e8cacad925580b33d1
SHA512 146bf176b87f0f5a6c11679e3ecc3700e5e355d96c215428ab0cb48a92287713d21a578a6d0471f3bb2f32eba07e223862d0c56c2898ccb1b83321e0d5cfcd85

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 cd2870021f799cbced8ea80b4a9b60f9
SHA1 2bb2f20a3cce81f44dde1916a0a81db1fff06686
SHA256 d942ed829cc46629b089b387b003156053eea97d1d9c8067e08fcb201c187900
SHA512 3b408c4536b9794986971512cf6312dc9df4da8b3874651e81deb2adc27118557b5bebaecf9ba424bc496bfbf8c4f545b2898b492c9123b648b8e63c48163d32

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017

MD5 dee46781c0389eada0ac9faa177539b6
SHA1 d7641e3d25ac7ac66c2ea72ac7df77b242c909d3
SHA256 35f13cf2aef17a352007ab69222724397e0ec093871ff4bd162645f466425642
SHA512 049b3d8dcfb64510745c2d5f9e8046747337b1c19d4b2714835cc200dc4ba61acaa994fec7c3cd122ba99d688be6e08f97eb642745561d75b410a5589c304d7d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b

MD5 2abd079be1223e68fdd6f520afe8fab7
SHA1 0f52ef825e632aa99b80724e2fc419fe1413ff39
SHA256 fc998bd9e644618ab3ece7ba644b58e43e6503e49b8ea2d19c6ee725c4676c75
SHA512 41d1bcc91961d70146f3434857c2265d2c1ec8cb81d388ddd187de5096e580bda69da20cf4ed56d72aac3d4e731f177b99daeec128e0ecd68dd37beedf4b3f70

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 54b1b445a96850c7351132d36727e2aa
SHA1 3d4f78bca15d5fd199621ca9351287f274fb7c68
SHA256 b1fc318905e0add8744cea3dcfe69f0cd055d0a3a7c378fba5ded9033ac54c78
SHA512 3b8d867e41e61dd57eac8fc426299e255ae2d99aa9df7753167b1ed816630f8b99b46f07bce0db91bdc876c8520484d3ba2795bbb9de81c5b1c445f39adeecfe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 4fee925d14453e31de22c604d08d99a7
SHA1 fc0f092bfe6dbf5914efde3c143d3550ba13172e
SHA256 97cafd120b7185f80416ec126b8de8e4153fd25e362a87123db3bbca0a2fdbc6
SHA512 4bacc2e74b236fe50585126dee2ead9a4fe18cf5f47766e658e7ec72e5a37d97c75b767325f109cd7f2580458d1d4da360e912eacabed6006f4e37d76413ca11

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 17aea5fdc49f01c838fa00a5875445da
SHA1 dae3a6669cc4a3e410c2557190c480cb7c02d762
SHA256 d58293016db428a81deef619a868edb7841f81e11570beff84e360eb1541f011
SHA512 223163e58a263291c1c62893b52ce14755362d316efec2e3b341c6ae3824fd34cc2a1d4a7bebd7341e2fcf326442c56908f2d8b26b7391694975b8d4cd439164

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d0ecbf506f5ba15fb583fbe7b62e775d
SHA1 3b6077437d66952de7a28abd3612ea3fb1d20e5b
SHA256 7d3d81302a526e9e83290376e92ff443f9922c4d2b889a25be02e67eb23cf084
SHA512 0b6a22ed7d495b97d775544b9b9ec2299854ea169d0a33784d4b50d2e824069488c98a930a1fe5d9055710e261c625dbfcd0244761af35308bbd39a7b832fed2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 63dbd98ff9587f1819ff6eec52762404
SHA1 bc921bf9c3112323d07501c831efc67c4b8f8411
SHA256 83eefd96f4d017d3e1fae6ec3dc96a22cd6edd4880588350bc9ceba599ed8289
SHA512 15657418adac17221b4ad3603be9e964b901b929d79a6b908bed4ccabc50223c99ca2e3dab52ad176adee6f1323d4b532562cb6631aeaed27cbadc5e649da44c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 99644808f215a1c9f70101601a97b605
SHA1 741b607d3ef6f85cdeab279ff6d8dbd572172707
SHA256 4996928f599f849e141ad30a73141a7f03c1c0618a279560c2590961d446d9fe
SHA512 8e5b9ec408fdf1ca691a232ae9325c4d559deeb967d0fbb6d5a5eb78279f944618f4f7bb6253a26d5e16fdfdf8d1e254eac7e3a96ef6a4c9ba3e98b95f8f9854

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 deb8a513125e6b8a8881930c797c610a
SHA1 fbec3fdd812b10f2d895dbebeab9c005f5d84d5c
SHA256 f9901149968bc2e3feb1fcc03e7fb4c5970e0180db57c8857315fc1883ccd814
SHA512 edc48b9998abd8508c6aca34ba256a935641ca265250c561942cfac33fe761fdd2520087ae69b29fb0524a02bf14fa9f070e3127d27400e5f3f427972d8ab6b7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 8606ab56aa996f1b33b08235232fdaca
SHA1 5b5f3460953adf200bb57d66c4bec8e4e5653475
SHA256 ca0123a0f3952b5c45ed7fa7514145c23c3d6f73da0617c2009bb117f2eb899b
SHA512 554a89813fa45554d01fc986823de542252231877930c830d66483a225a33bead235ea0d2c2f718a8f8496344d53d5d8c5d0720e2ef60b949d36bcc24c38ffad

C:\Users\Admin\AppData\Local\speech\Microsoft\Speech\Files\UserLexicons\SP_9C5530D286A74276A9C73586A5ED6EC5.dat

MD5 c1a1dcf756ec8b03960beac87ea8907e
SHA1 88c5506eb71d44afab03d76a18d61b3c0b43364d
SHA256 84343cb5d3cb526c93bf5d7586e728353e4ee99d11fd656c93f3fbc24d28a1ea
SHA512 614629331fb565ded4220bc7803e77fe9517787338f2d0a18feabe7feeea0406fe6f92d3c25e8872750d7f4ee5386d92c70655775b992cd4b45d2578b6a4d8b7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 62c0d426d01c2868f90f169b1543210a
SHA1 335b64a4994f693dd47505d5d422ddc498aae0e4
SHA256 695f4c0f52e0a948d1f69f16937d0849a7d5b53d698c95a46f5bb6a0fce3b2d1
SHA512 81207b3596bc920ed00c7c855d7ffca7f01f20fff733e46b6ea53ac1963bebb21a18b9a3884047d4e4f69d2e583373a4db07c24bdbd8c06fe9586ea47dca2880

memory/7620-1387-0x00007FFB7E790000-0x00007FFB7E7A0000-memory.dmp

memory/7620-1390-0x00007FFB7E790000-0x00007FFB7E7A0000-memory.dmp

memory/7620-1389-0x00007FFB7E790000-0x00007FFB7E7A0000-memory.dmp

memory/7620-1388-0x00007FFB7E790000-0x00007FFB7E7A0000-memory.dmp

memory/7620-1391-0x00007FFB7E790000-0x00007FFB7E7A0000-memory.dmp

memory/7620-1392-0x00007FFB7C470000-0x00007FFB7C480000-memory.dmp

memory/7620-1393-0x00007FFB7C470000-0x00007FFB7C480000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 621555abf9bb9a658ef0c4f7697c2573
SHA1 0998688b934529e4d7351c2b71784e041ba86c03
SHA256 25e95e3a1202c1c8145b98efd71bf7f78f733f0d8f379c03e82c5e0755585888
SHA512 7e86c0839aab385a93c0beeaf2322cbcd56a3f679c0901ae5c26f6d13279375bd34cf2f593be86fe97f43aba4e6823ca34dcbc0cee6e5a70a422c9fe8fcdc2f0

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\b8ab77100df80ab2.customDestinations-ms

MD5 ed8084556f4bfc9ba957750c066b5086
SHA1 7e9fa711df83fb568d9d081f90109970e885e53d
SHA256 830acb037c474fd09d27dc7f1636f94461868a2b64e94fbabe6950d6994c05aa
SHA512 29bd93968e3ece6f406676e359653bacbe307d33274508caae278f4d65a7c234c2897a42a92df61fef1a29aa66049c8abd5a022bed453bf49b7f156522ad6af8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 49598453693479f9cda8660004c36da5
SHA1 95bf5230b5f80353855570e439cba3bf1d6b48f8
SHA256 bbc6351ab0ebc28283a3f0f8e08b6891579df11c9c048192527fc328dee8c6de
SHA512 1c21817fab1e3d8a4c604ee9dd2bc0a8c639fdf2a5f200bfdf9090a6a26ed680bf739059c3e060cbf6c5835bfca187baf43e842b0452f3f20d3f15deab2eb3b4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 45845b192dbbaacf11b9ce81e14ec324
SHA1 1f241d65b824f10a37c2508b09c61e5542a93eaa
SHA256 6272ddcee814b5d2b34192a8908f3ddaf94a4f08089a82013526f059343eb08e
SHA512 d51c756ded1880fd3e7b3dc621e95d2aaf412986e1ca0de7b396d7c8519e3c70a2a8342da9cceca4c5fd7b7a004faf5223b917077e201ef2cd845af95c5967de

memory/7620-1453-0x00007FFB7E790000-0x00007FFB7E7A0000-memory.dmp

memory/7620-1455-0x00007FFB7E790000-0x00007FFB7E7A0000-memory.dmp

memory/7620-1454-0x00007FFB7E790000-0x00007FFB7E7A0000-memory.dmp

memory/7620-1452-0x00007FFB7E790000-0x00007FFB7E7A0000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 523e958d3378f665ad7575348c2a941b
SHA1 98e1d595cdec492ce33491bd8f3942b50c5a7bd8
SHA256 68ad6319bea14913755bcc76834bf31b92402ca0fb9edfad4a22b9dc34e944ae
SHA512 8bd9b9f4150eaf58d6ffbd650ba3272471a1b73f3fdd4f0c7ac9cefac91fa2a00f57aa92ae98f8fc1f8c00f7fe1738c24252fd7394cc113436d3153c12c64129

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 2f197a0152b5f404d75921bf80a510eb
SHA1 c16b8877e52398de0c76836076090f362010d9f5
SHA256 33e930ce69a772d0a458035a13d449ce71ab395189ab673d8471768a0da34d72
SHA512 322fffb0bf96d75ce4dbd53298338058572e5f4185f7880b2ce436ef82b5e7adc97bdfc3b5a0bc2152c2a57459bab5660b36718ffe38839fd05538917f8f5993

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 eef0209562a309645a282bbc1d624cad
SHA1 7200057ee88da1c705c8d0a58a4559a228797ab6
SHA256 6c1280c460e027966b04c66e0acdfdfed512328557daa5b6c2ce4df86fe560ae
SHA512 9032833540d7edfde222bb911c231f40ff4fe9608817945214904f242658d0ddbfa63ef1d1377520abca2236cbab69f7f78b0269c1003ca19abbfca68c9d19ab

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 78fe50551df41d25f6fc81c5041a9cc4
SHA1 335091eecb0d3decf99d1912a3381c90d93e74e9
SHA256 6bea76e2b07f741aae5b0bc4c0a5c72da646d6f72bac0a96cfd0d34e06388ae8
SHA512 b95def5f35085948d36c5cf492b721e46312a97a5c3eb3b22c9d256b5c225d1b1e005cc8a5cd9abfcc4372816ff12456acedec61f57a52f0b0dbf6cca1d5218e