Malware Analysis Report

2025-01-18 12:00

Sample ID 241126-b3s4jaxlfw
Target 9db2159a7d540f48fbf46d27500811ae_JaffaCakes118
SHA256 afd91482057baaeb803ad6496ca1616900f37eff30a4fccbd5a1a50632c4a1e6
Tags
raccoon 8cec4b984fbf98ab1f444f5e9a6d03ff51011556 discovery stealer phishing
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

afd91482057baaeb803ad6496ca1616900f37eff30a4fccbd5a1a50632c4a1e6

Threat Level: Known bad

The file 9db2159a7d540f48fbf46d27500811ae_JaffaCakes118 was found to be: Known bad.

Malicious Activity Summary

raccoon 8cec4b984fbf98ab1f444f5e9a6d03ff51011556 discovery stealer phishing

Raccoon

Raccoon family

Raccoon Stealer V1 payload

A potential corporate email address has been identified in the URL: [email protected]

A potential corporate email address has been identified in the URL: [email protected]

A potential corporate email address has been identified in the URL: [email protected]

A potential corporate email address has been identified in the URL: [email protected]

Drops file in Program Files directory

Unsigned PE

Browser Information Discovery

System Location Discovery: System Language Discovery

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Suspicious use of SendNotifyMessage

Suspicious behavior: EnumeratesProcesses

Modifies data under HKEY_USERS

Suspicious use of FindShellTrayWindow

Modifies registry class

Enumerates system info in registry

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-26 01:40

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-26 01:40

Reported

2024-11-26 01:58

Platform

win7-20240903-en

Max time kernel

1044s

Max time network

839s

Command Line

"C:\Users\Admin\AppData\Local\Temp\9db2159a7d540f48fbf46d27500811ae_JaffaCakes118.exe"

Signatures

Raccoon

stealer raccoon

Raccoon Stealer V1 payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Raccoon family

raccoon

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\9db2159a7d540f48fbf46d27500811ae_JaffaCakes118.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\9db2159a7d540f48fbf46d27500811ae_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\9db2159a7d540f48fbf46d27500811ae_JaffaCakes118.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 teletop.top udp
US 8.8.8.8:53 teleta.top udp
US 8.8.8.8:53 t.me udp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
US 8.8.8.8:53 t.me udp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp

Files

memory/2380-1-0x0000000000250000-0x0000000000350000-memory.dmp

memory/2380-2-0x00000000004A0000-0x000000000052C000-memory.dmp

memory/2380-3-0x0000000000400000-0x000000000048E000-memory.dmp

memory/2380-4-0x0000000000250000-0x0000000000350000-memory.dmp

memory/2380-5-0x0000000000400000-0x0000000000495000-memory.dmp

memory/2380-6-0x00000000004A0000-0x000000000052C000-memory.dmp

memory/2380-7-0x0000000000400000-0x000000000048E000-memory.dmp

memory/2380-42-0x0000000000400000-0x0000000000495000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-11-26 01:40

Reported

2024-11-26 01:43

Platform

win10v2004-20241007-en

Max time kernel

150s

Max time network

151s

Command Line

"C:\Users\Admin\AppData\Local\Temp\9db2159a7d540f48fbf46d27500811ae_JaffaCakes118.exe"

Signatures

Raccoon

stealer raccoon

Raccoon Stealer V1 payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Raccoon family

raccoon

A potential corporate email address has been identified in the URL: [email protected]

phishing

A potential corporate email address has been identified in the URL: [email protected]

phishing

A potential corporate email address has been identified in the URL: [email protected]

phishing

A potential corporate email address has been identified in the URL: [email protected]

phishing

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Crashpad\metadata C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe N/A
File opened for modification C:\Program Files\Crashpad\settings.dat C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe N/A

Browser Information Discovery

discovery

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\9db2159a7d540f48fbf46d27500811ae_JaffaCakes118.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133770588599959335" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3756129449-3121373848-4276368241-1000\{878BE529-3409-4325-93A9-6505631E587A} C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3488 wrote to memory of 3216 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3216 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 3140 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 4692 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 4692 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3488 wrote to memory of 2156 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Users\Admin\AppData\Local\Temp\9db2159a7d540f48fbf46d27500811ae_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\9db2159a7d540f48fbf46d27500811ae_JaffaCakes118.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffb32fccc40,0x7ffb32fccc4c,0x7ffb32fccc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1996,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1988 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2212,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2224 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2296,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2648 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3180,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3200 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3220,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3268 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4588,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3756 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4876,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4844 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4904,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4892 /prefetch:8

C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --reenable-autoupdates --system-level

C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff798ce4698,0x7ff798ce46a4,0x7ff798ce46b0

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=5156,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4756 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4892,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4620 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3452,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5372 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5316,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3400 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5744,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5692 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=5772,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4912 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x3b0 0x3e0

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5896,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5912 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=6032,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5752 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=6076,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6260 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5940,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6224 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=6136,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5936 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=6420,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6240 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=6412,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6508 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6696,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6720 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6900,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6884 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=7104,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7124 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=7100,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6860 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=6520,i,2397798194146836888,464449519372543626,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6612 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 teletop.top udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 71.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 58.55.71.13.in-addr.arpa udp
US 8.8.8.8:53 teletop.top udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 35.200.250.142.in-addr.arpa udp
GB 172.217.16.228:443 www.google.com tcp
GB 172.217.16.228:443 www.google.com udp
US 8.8.8.8:53 234.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 228.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.178.14:443 clients2.google.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 teletop.top udp
US 8.8.8.8:53 227.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 dns-tunnel-check.googlezip.net udp
US 8.8.8.8:53 tunnel.googlezip.net udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
GB 142.250.200.10:443 ogads-pa.googleapis.com tcp
GB 142.250.200.10:443 ogads-pa.googleapis.com udp
US 8.8.8.8:53 3.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 157.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 play.google.com udp
GB 142.250.187.206:443 play.google.com tcp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.180.14:443 consent.google.com tcp
GB 142.250.187.206:443 play.google.com udp
US 8.8.8.8:53 14.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 50.23.12.20.in-addr.arpa udp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 154.108.199.185.in-addr.arpa udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 collector.github.com udp
US 185.199.108.154:443 github.githubassets.com tcp
US 8.8.8.8:53 api.github.com udp
US 140.82.114.21:443 collector.github.com tcp
US 140.82.114.21:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 teletop.top udp
US 8.8.8.8:53 21.114.82.140.in-addr.arpa udp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 92.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 teletop.top udp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 185.199.111.133:443 objects.githubusercontent.com tcp
US 8.8.8.8:53 teletop.top udp
US 8.8.8.8:53 133.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 teletop.top udp
US 8.8.8.8:53 teletop.top udp
US 8.8.8.8:53 teletop.top udp
US 8.8.8.8:53 www.google.com udp
GB 172.217.16.228:443 www.google.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
DE 172.217.16.195:443 beacons.gcp.gvt2.com tcp
GB 142.250.200.10:443 content-autofill.googleapis.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 195.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 teletop.top udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.187.206:443 play.google.com udp
US 8.8.8.8:53 19.229.111.52.in-addr.arpa udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 172.217.169.46:443 encrypted-tbn0.gstatic.com tcp
GB 172.217.169.46:443 encrypted-tbn0.gstatic.com tcp
GB 172.217.169.46:443 encrypted-tbn0.gstatic.com udp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 lh5.googleusercontent.com udp
GB 216.58.201.97:443 lh5.googleusercontent.com tcp
US 8.8.8.8:53 97.201.58.216.in-addr.arpa udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 teletop.top udp
US 8.8.8.8:53 teleta.top udp
US 8.8.8.8:53 encrypted-vtbn0.gstatic.com udp
GB 142.250.178.14:443 encrypted-vtbn0.gstatic.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 rr1---sn-4g5ednsk.googlevideo.com udp
US 8.8.8.8:53 78.204.58.216.in-addr.arpa udp
GB 142.250.200.22:443 i.ytimg.com tcp
GB 142.250.200.22:443 i.ytimg.com tcp
DE 173.194.188.230:443 rr1---sn-4g5ednsk.googlevideo.com tcp
DE 173.194.188.230:443 rr1---sn-4g5ednsk.googlevideo.com tcp
US 8.8.8.8:53 accounts.google.com udp
BE 142.251.173.84:443 accounts.google.com tcp
BE 142.251.173.84:443 accounts.google.com udp
US 8.8.8.8:53 22.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 234.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 230.188.194.173.in-addr.arpa udp
GB 172.217.16.228:443 www.google.com tcp
GB 142.250.200.22:443 i.ytimg.com udp
US 8.8.8.8:53 yt3.ggpht.com udp
GB 142.250.200.33:443 yt3.ggpht.com tcp
GB 142.250.200.33:443 yt3.ggpht.com tcp
GB 142.250.200.33:443 yt3.ggpht.com tcp
US 8.8.8.8:53 84.173.251.142.in-addr.arpa udp
GB 142.250.187.206:443 www.youtube.com tcp
GB 142.250.187.206:443 www.youtube.com tcp
GB 142.250.187.206:443 www.youtube.com udp
US 8.8.8.8:53 youtube.com udp
US 8.8.8.8:53 33.200.250.142.in-addr.arpa udp
GB 172.217.169.78:443 youtube.com tcp
US 8.8.8.8:53 78.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 consent.youtube.com udp
GB 216.58.201.110:443 consent.youtube.com tcp
US 8.8.8.8:53 110.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 teleta.top udp
GB 142.250.200.33:443 yt3.ggpht.com udp
US 8.8.8.8:53 teleta.top udp
US 8.8.8.8:53 www.mediafire.com udp
US 104.17.151.117:443 www.mediafire.com tcp
US 8.8.8.8:53 static.mediafire.com udp
US 8.8.8.8:53 ajax.googleapis.com udp
GB 172.217.16.228:443 www.google.com tcp
GB 216.58.213.10:443 ajax.googleapis.com tcp
US 104.17.151.117:443 static.mediafire.com udp
US 104.17.151.117:443 static.mediafire.com udp
US 8.8.8.8:53 cdn.amplitude.com udp
DE 18.154.63.115:443 cdn.amplitude.com tcp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 translate.google.com udp
CH 157.240.17.15:443 connect.facebook.net tcp
GB 142.250.200.14:443 translate.google.com tcp
US 8.8.8.8:53 117.151.17.104.in-addr.arpa udp
US 8.8.8.8:53 40.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 115.63.154.18.in-addr.arpa udp
US 8.8.8.8:53 api.amplitude.com udp
US 34.215.29.177:443 api.amplitude.com tcp
CH 157.240.17.15:443 connect.facebook.net udp
US 8.8.8.8:53 translate.googleapis.com udp
GB 172.217.169.74:443 translate.googleapis.com tcp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 15.17.240.157.in-addr.arpa udp
US 8.8.8.8:53 177.29.215.34.in-addr.arpa udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 74.169.217.172.in-addr.arpa udp
US 216.239.32.36:443 region1.analytics.google.com tcp
BE 64.233.184.156:443 stats.g.doubleclick.net tcp
GB 142.250.179.227:443 www.google.co.uk tcp
GB 163.70.151.35:443 www.facebook.com tcp
US 8.8.8.8:53 translate-pa.googleapis.com udp
GB 142.250.178.10:443 translate-pa.googleapis.com tcp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 227.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 35.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 10.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 156.184.233.64.in-addr.arpa udp
US 8.8.8.8:53 teleta.top udp
US 216.239.32.36:443 region1.analytics.google.com udp
GB 172.217.16.228:443 www.google.com udp
GB 216.58.213.10:443 translate-pa.googleapis.com udp
GB 172.217.169.74:443 translate.googleapis.com udp
US 8.8.8.8:53 the.gatekeeperconsent.com udp
US 8.8.8.8:53 btloader.com udp
US 172.67.199.186:443 the.gatekeeperconsent.com tcp
US 172.67.41.60:443 btloader.com tcp
US 8.8.8.8:53 www.ezojs.com udp
US 8.8.8.8:53 privacy.gatekeeperconsent.com udp
GB 142.250.200.14:443 translate.google.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 172.67.170.144:443 www.ezojs.com tcp
US 172.67.199.186:443 privacy.gatekeeperconsent.com tcp
US 8.8.8.8:53 cdn.otnolatrnup.com udp
US 8.8.8.8:53 bt.dns-finder.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 104.19.208.227:443 cdn.otnolatrnup.com tcp
US 172.67.134.120:443 bt.dns-finder.com tcp
GB 142.250.178.10:443 translate-pa.googleapis.com udp
US 8.8.8.8:53 g.ezoic.net udp
FR 13.37.187.223:443 g.ezoic.net tcp
US 8.8.8.8:53 go.ezodn.com udp
US 172.67.199.186:443 privacy.gatekeeperconsent.com udp
US 172.67.199.186:443 privacy.gatekeeperconsent.com udp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 otnolatrnup.com udp
US 104.21.87.79:443 go.ezodn.com tcp
US 104.21.87.79:443 go.ezodn.com tcp
US 104.21.87.79:443 go.ezodn.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 172.67.199.186:443 privacy.gatekeeperconsent.com udp
US 8.8.8.8:53 186.199.67.172.in-addr.arpa udp
US 8.8.8.8:53 144.170.67.172.in-addr.arpa udp
US 8.8.8.8:53 60.41.67.172.in-addr.arpa udp
US 8.8.8.8:53 73.80.16.104.in-addr.arpa udp
US 8.8.8.8:53 70.3.26.104.in-addr.arpa udp
US 8.8.8.8:53 227.208.19.104.in-addr.arpa udp
US 8.8.8.8:53 120.134.67.172.in-addr.arpa udp
US 8.8.8.8:53 230.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 223.187.37.13.in-addr.arpa udp
US 104.21.87.79:443 go.ezodn.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 g.ezodn.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
US 104.21.87.79:443 g.ezodn.com udp
US 8.8.8.8:53 bshr.ezodn.com udp
US 172.67.142.121:443 bshr.ezodn.com tcp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 ad.crwdcntrl.net udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
IE 52.17.153.181:443 bcp.crwdcntrl.net tcp
US 172.67.142.121:443 bshr.ezodn.com udp
IE 108.128.75.152:443 bcp.crwdcntrl.net tcp
FR 18.155.129.21:443 tags.crwdcntrl.net tcp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 79.87.21.104.in-addr.arpa udp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 121.142.67.172.in-addr.arpa udp
US 8.8.8.8:53 226.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 181.153.17.52.in-addr.arpa udp
US 8.8.8.8:53 152.75.128.108.in-addr.arpa udp
US 8.8.8.8:53 21.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 id.a-mx.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 match.adsrvr.org udp
FR 13.37.187.223:443 g.ezoic.net tcp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 104.22.52.86:443 cdn.id5-sync.com tcp
DE 79.127.216.47:443 id.a-mx.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
US 8.8.8.8:53 cdn-ima.33across.com udp
US 8.8.8.8:53 oa.openxcdn.net udp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
US 8.8.8.8:53 static.criteo.net udp
US 52.223.40.198:443 match.adsrvr.org tcp
US 104.22.4.69:443 id.hadron.ad.gt tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 34.120.133.55:443 api.rlcdn.com tcp
DE 162.19.138.116:443 id5-sync.com tcp
GB 87.248.114.11:443 ups.analytics.yahoo.com tcp
US 34.102.146.192:443 oa.openxcdn.net tcp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 104.18.29.101:443 cdn-ima.33across.com tcp
GB 142.250.178.2:443 ep1.adtrafficquality.google tcp
NL 178.250.1.3:443 static.criteo.net tcp
GB 142.250.187.206:443 www.youtube.com udp
US 8.8.8.8:53 c3.a-mo.net udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
NL 79.127.227.46:443 c3.a-mo.net tcp
US 8.8.8.8:53 oajs.openx.net udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
US 34.120.135.53:443 oajs.openx.net tcp
GB 172.217.169.1:443 ep2.adtrafficquality.google tcp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 ads.yieldmo.com udp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 ap.lijit.com udp
DE 18.157.230.4:443 tlx.3lift.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
FR 18.244.28.105:443 hb.yellowblue.io tcp
FR 163.5.194.37:443 prebid.a-mo.net tcp
IE 54.171.83.227:443 ads.yieldmo.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 51.89.9.253:443 onetag-sys.com tcp
US 8.8.8.8:53 86.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 47.216.127.79.in-addr.arpa udp
US 8.8.8.8:53 198.40.223.52.in-addr.arpa udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 11.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 116.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 55.133.120.34.in-addr.arpa udp
US 8.8.8.8:53 192.146.102.34.in-addr.arpa udp
US 8.8.8.8:53 87.70.96.34.in-addr.arpa udp
US 8.8.8.8:53 101.29.18.104.in-addr.arpa udp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 46.227.127.79.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 120.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 53.135.120.34.in-addr.arpa udp
US 8.8.8.8:53 1.169.217.172.in-addr.arpa udp
IE 54.217.95.60:443 ap.lijit.com tcp
DE 3.72.6.211:443 btlr.sharethrough.com tcp
DE 3.72.6.211:443 btlr.sharethrough.com tcp
DE 3.72.6.211:443 btlr.sharethrough.com tcp
DE 3.72.6.211:443 btlr.sharethrough.com tcp
DE 3.72.6.211:443 btlr.sharethrough.com tcp
GB 172.217.169.1:443 ep2.adtrafficquality.google tcp
GB 172.217.16.228:443 www.google.com tcp
US 34.120.135.53:443 oajs.openx.net udp
DE 51.89.9.253:443 onetag-sys.com udp
US 8.8.8.8:53 8159b29e8c76c992b59d46c4aae99c48.safeframe.googlesyndication.com udp
US 8.8.8.8:53 google-bidout-d.openx.net udp
US 8.8.8.8:53 download2347.mediafire.com udp
GB 142.250.179.225:443 8159b29e8c76c992b59d46c4aae99c48.safeframe.googlesyndication.com tcp
US 34.98.64.218:443 google-bidout-d.openx.net tcp
US 8.8.8.8:53 d.turn.com udp
US 199.91.155.88:443 download2347.mediafire.com tcp
NL 46.228.164.13:443 d.turn.com tcp
US 199.91.155.88:443 download2347.mediafire.com tcp
US 104.19.208.227:443 otnolatrnup.com tcp
US 104.19.208.227:443 otnolatrnup.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 105.28.244.18.in-addr.arpa udp
US 8.8.8.8:53 37.194.5.163.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 4.230.157.18.in-addr.arpa udp
US 8.8.8.8:53 139.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 227.83.171.54.in-addr.arpa udp
US 8.8.8.8:53 253.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 60.95.217.54.in-addr.arpa udp
US 8.8.8.8:53 211.6.72.3.in-addr.arpa udp
US 8.8.8.8:53 13.164.228.46.in-addr.arpa udp
US 8.8.8.8:53 88.155.91.199.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
DE 37.252.171.149:443 ib.adnxs.com tcp
US 104.19.208.227:443 otnolatrnup.com udp
GB 172.217.169.1:443 ep2.adtrafficquality.google udp
US 8.8.8.8:53 uipglob.semasio.net udp
DK 77.243.51.122:443 uipglob.semasio.net tcp
US 104.19.208.227:80 otnolatrnup.com tcp
US 104.19.208.227:80 otnolatrnup.com tcp
US 8.8.8.8:53 woreppercomming.com udp
FR 18.155.129.32:443 woreppercomming.com tcp
US 8.8.8.8:53 122.51.243.77.in-addr.arpa udp
US 8.8.8.8:53 149.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 dis.eu.criteo.com udp
NL 178.250.1.9:443 dis.eu.criteo.com tcp
US 8.8.8.8:53 www.chancial.com udp
US 172.67.141.135:443 www.chancial.com tcp
US 8.8.8.8:53 ice.360yield.com udp
IE 34.250.72.75:443 ice.360yield.com tcp
US 8.8.8.8:53 check.analytics.rlcdn.com udp
GB 142.250.178.2:443 ep1.adtrafficquality.google udp
DE 18.154.63.28:443 check.analytics.rlcdn.com tcp
US 8.8.8.8:53 www.opera.com udp
DE 52.57.205.26:443 www.opera.com tcp
US 8.8.8.8:53 teleta.top udp
US 8.8.8.8:53 rtb.gumgum.com udp
US 8.8.8.8:53 32.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 135.141.67.172.in-addr.arpa udp
US 8.8.8.8:53 75.72.250.34.in-addr.arpa udp
US 8.8.8.8:53 28.63.154.18.in-addr.arpa udp
US 8.8.8.8:53 26.205.57.52.in-addr.arpa udp
IE 52.213.115.130:443 rtb.gumgum.com tcp
US 8.8.8.8:53 cdn-production-opera-website.operacdn.com udp
US 8.8.8.8:53 www.googleoptimize.com udp
GB 23.214.143.61:443 cdn-production-opera-website.operacdn.com tcp
GB 23.214.143.61:443 cdn-production-opera-website.operacdn.com tcp
GB 23.214.143.61:443 cdn-production-opera-website.operacdn.com tcp
GB 23.214.143.61:443 cdn-production-opera-website.operacdn.com tcp
GB 23.214.143.61:443 cdn-production-opera-website.operacdn.com tcp
GB 23.214.143.61:443 cdn-production-opera-website.operacdn.com tcp
GB 216.58.212.206:443 www.googleoptimize.com tcp
GB 23.214.143.61:443 cdn-production-opera-website.operacdn.com tcp
US 8.8.8.8:53 dpm.demdex.net udp
IE 34.240.102.245:443 dpm.demdex.net tcp
US 8.8.8.8:53 130.115.213.52.in-addr.arpa udp
US 8.8.8.8:53 61.143.214.23.in-addr.arpa udp
US 8.8.8.8:53 206.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 245.102.240.34.in-addr.arpa udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
DE 52.57.205.26:443 www.opera.com tcp

Files

memory/4144-1-0x0000000000590000-0x0000000000690000-memory.dmp

memory/4144-2-0x0000000000690000-0x000000000071C000-memory.dmp

memory/4144-3-0x0000000000400000-0x000000000048E000-memory.dmp

memory/4144-4-0x0000000000590000-0x0000000000690000-memory.dmp

memory/4144-5-0x0000000000400000-0x0000000000495000-memory.dmp

memory/4144-6-0x0000000000690000-0x000000000071C000-memory.dmp

memory/4144-7-0x0000000000400000-0x000000000048E000-memory.dmp

\??\pipe\crashpad_3488_RLXRDLZPVRIOUFDU

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

MD5 1f98d6ad8553fbc05598b51f6b0cbef9
SHA1 ede0b78467bc1d64bf97748ad71fff25b5610bce
SHA256 2326b9b5f93a2ba376ae2a1fbaa3947f70caa2c1975e57c59e7d6d0ce0ffffbd
SHA512 f5171c5b4975fecc27ece802f31859ea5b6d320be6c78b2bbfee7e6e4cc032da0821a786426552d12c351524835def45a207c1f760363c54c7720979757ea55a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 ea6459d3725ca4646d5f82c5866e08f3
SHA1 d374bc4183d1427c2159625be6fda7e9dca30f11
SHA256 ecbb94f9ce0921915bab928d71efe708a26345c73b705c87a877f110fe85c94b
SHA512 4171ed7ab2e43f257675002b8351bc5f2286a378309fc2f91185dd61a3ec3d4502ecdddedb597487a9c02bacb09ed1a08dcd1bc5a0fc0b1113ec332b095d0521

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 10c0077abb5baf660d41bdfadf8e787b
SHA1 26241445308565b7b98e123f602e199ce490613a
SHA256 c167473a9fb284d05e129f5406cb221f8df4b0f7f0a444682a027455c96b3a22
SHA512 f25d8ff880aa0153921bb261d4a5183626a99c46d336326d1e11c4b3b5d416345edd5d00fb86274e1bdc0fa1ae62c9fb557a27de231f21002160af4897617fdd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 85efc89416afa6f98556044583aa7902
SHA1 b7dc4f3e25236d57e29426aaa1f135db5d1b840a
SHA256 df84d84e968ade55eee08cae7190cfb72bb704aaf2db68678dc9efbaa15b392f
SHA512 5a067f538a49ddf9e89abbb3772706963f57ea71f115c01a7892fdced9902ba16389face980dc33ffa0f57d32c0957517d57acf233b5cdf79481362221d932d1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 6eccc661a37d3de71ce286b80ad21e64
SHA1 3861b7e7d84b39bd309e01e78b28815fe07b5ea0
SHA256 ed1bd2250bce3f689c560a34b572d35a306315f92c549000aa6e4c4691ccced1
SHA512 8f755544cd30dcaebe8efe4df59f424fa817830959512917c690ee1bcb6ad23899f058af39e8ecb90cfca4d66f1d1e9b54bfe435e0f3f1e940f450f5c504750f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1d700833-2fc0-4e8f-96e0-d559128f5392.tmp

MD5 ef93196e58acdc215e4f1c9dd76a377c
SHA1 ed7076c4a67d6b5c630227b43bdd404d35b7e0c7
SHA256 31be8791759bd38d3f9f7205f03d226844b82e2dccc58b0589ef6db980e91e20
SHA512 f884030318122d4e015bfca0fdcf940f030c24778b931b8cc4fa12fcd1d2b49f3e0ed7f9bd768059af0c62cd55efad7ced88fa5238f48e907f87e426e2a3cbd4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 9b81c93187acf78d3251293ef27c7fd1
SHA1 53a1df8beed55bb4b436f1da13def35ff5852c1d
SHA256 49cefc6c705429417c3daa34e6538651dc5e4a86941809ff85c5087ee7bd0254
SHA512 ccf55768b28f9b954d40354601cf3d449b748ff3fb9bc4c61d2998c73825ccebb0b5212e1bfc0bb288f702ac5b4bb1ef649dc0026cd36a7d6e65d42544ad4e07

C:\Users\Admin\Downloads\Solara.zip.crdownload

MD5 2a616e2f3f17a0b676251dc50e7c46b1
SHA1 3f791c2ebe225ac200dd8cab53de3774457be4c8
SHA256 bab6a3869ff664c1738c3b7d8c3feafbacf558ccc403961aa11a6fedb54e39f4
SHA512 b141f5e7c8d8e0d9bdacf66974beab826defbbccba28ed36218df7e8c22521329381723d7b272f59f705d0ec1fba0082ffed74ebf21709cb09808176ac3fa9fb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 06b9edfc8b301561516dcc2261efc6f1
SHA1 4f60073dfaa7d966c5831c82cb1bfd71d7e065c9
SHA256 b30c29c80697e2a017c876116499f779bddd092844bf81aacf132709ead1f8d5
SHA512 059d3d52fd4f7b1bef9a23729ebba6eca08048302487656a967060b702382b0db002b1074ccaa6428b730b3fb0e1fec1d34bbf032bc8011b5e26451923bb531a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 43096064843f176183e96efcc41a848a
SHA1 439e2f897a1f3d124f966cfefa78822bfbcfb1f6
SHA256 ced5e9b6a5a5e39832d894bb78903e14d23d97993ad4c8469f2cad567159484f
SHA512 47b93950054252e4aa8743e3a73634f2917a7ed8cf786a84070f6cb03a181680a445a398dfcc0438ca223912cd061bb2099da146e5ffe1740d8748709285da6b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 fc01cfaa54bd87b0c968dcaeaf864eb6
SHA1 a7d2d7cf3ee77df7e0cfe2daca066e8603dad1c8
SHA256 b42d89e81e06058bff1c2e7f0eaf0cd81d8074589f4b93f4bf37a4ff669c24ac
SHA512 25a5e6f461a275c4f306fd0c5dae7279bf32603ed0eb41cb838a077a3190d201e5b0c5dcaf6a64d1c1a3f14fd833e3f03b91263bde1eaf574936c77287678b3f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8298f7c7847dc3997e1647a2abb36b05
SHA1 a6dd804db520d4a7ed6ded2870544fbcf2f97a76
SHA256 8b4410f4c45f535ed517e25fb10b7304832659ac50cb85a21dabf7fc39d9c827
SHA512 d5964c4d7676195c61092e01a1551841665309c9b7e33f52227328788f7c0c758ed7a8024fa9d61c91487315c628cc7afaa7ec7c346670089887bab24b2dba8a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 97867a2028737d7901a3f899c693c52c
SHA1 53b9cb202ed3f8b58821b063df839cebb68fb695
SHA256 63294c024b1982cf52bcd74dd8b10096cc2798fbf4be7e47a5d24a41797858dd
SHA512 5d4504c1e31a5b9c78b47f171cb7e6523eed9eb7b60fe2c79bdf257a175915872845976072261dd29b3835356c1b2aed5c9af4077d0d0660a412925363f3ac87

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 fe33da46e9130239b5d77509f0479cd9
SHA1 2a5f12a84488a79ac05fede2095215d330860c32
SHA256 7b635907022c7a39b6c19e48ecec20d9d2b2121292c32e914cb9bafe5de8ef3b
SHA512 081a14bf4b955f7c22ac8fe9483c577ed8820e058028931fdc5aafabb9172b387542acd823f12eadda93d0a75aa7aaf88b62d95b0d5727151b68a011f52a3b0b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 499f3f1147fd2261f0104e137c40475b
SHA1 33c39ddfc984dd52b4bf33e6e297b8637a59afca
SHA256 237513db249006f29b63dc5486c2036fccd2c467a86fd91e0638a3ece00afa04
SHA512 3456f9f28097adac9b01c3a6e4da2247c89ffaac3df5965cc879aa0737d9bda1705abdccbfad802bb489c33139e508238bb2ce2a39ea66df8c894fbf9bcd9a0c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

MD5 eefb3b7038040a2b45001d9b00e3614c
SHA1 64f409fcd8dba116aa15366783133833ea2e29e1
SHA256 d6def6ae11d1cf9bc2c244af00ffe3c6161263c26212e4009c613a02c8a9ea76
SHA512 d463a84948b07ac2b1c51f471e21e592f84b249f6a0f58853f3e38a357068b8a6e9d33de1146e187bee9c586bbb3525b7397f2f1b4f2a2c66d784e50385bc121

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d

MD5 3e665ad061e96925d5cb85261f665f4d
SHA1 aa4d3f712d5458de1cf26b2778ef5ef752bb21b1
SHA256 b0d5c243b96723586d9a7403eddadd3f6ddc19b3d8a4185624db22b03c0b53f8
SHA512 434c425d26857be6fd5a440f3501f755f53c7ae47d6c445dbfa8c4c611ae6a1db84af446a9546f00cfe9241a8c0f800ce3bd42677501b44b6c56c63abe28e880

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023

MD5 eec529892affc89e27dfd1d2620f33d5
SHA1 8e5a1623e5dd8df8d29786246ac2489cf10b3855
SHA256 4d4041b0892396f82333b28ae4f58fd1b356c5e6993e8f795448702e9283f3c3
SHA512 b2727c755b6f8b1a0df176d92c72a5fbc594f511b3fa31a07967a9b5952eec72ca03e6b8be2b7c0782d008f171360806339a327a4dd139c3da4ca66178cb5458

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a33f5915e3c99248a0407c83fdcccfd6
SHA1 dbbcedbd95ed780d8bcbfe79b36cae31a3a5f5d6
SHA256 ff80cd8edd28893bcb302ab657a2343b38bb79a30e36b42aa8c6c0face168b4a
SHA512 72053edc7df40311aaefc58aa234212362821ac749812d114eb76004255a03527bf60acd69aae56d4f4745171caf9d0795035c7ca923a2947ddef20447bbb614

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 5a2485643740c68006c90cd871e9424d
SHA1 9b78113189fbafea8f89f1086b7de247d8ffed39
SHA256 01a609e2da4efdab6c446d609aaa3c42bddf093c8be229d9ab9b49743694f4e0
SHA512 1dcd3018a12569d0ee67fdaccb2e204907264d8707a5e9d2967a07ee4897fba782c7918de50585ef24e70cb987152da0aa06f54659483dd7dbfc82611e2eb771

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe593a11.TMP

MD5 1ce7fb57d8583c7853eb692b05c5afc0
SHA1 2563126340e9d09df3c37963599acab513cef402
SHA256 a9483acbfa78b12d0c6d3d2a77be8b255b980e4036e9dcebddafea5d7d8d67b9
SHA512 dd7142f01aecd1c7f79d4373c31b9f8550a595f55feb7cc042f4255fc68937d9dc7051ad6be2107d350af338c941cc76a110616aa556bd64e7aaae596440b733

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 c47d9b3991fecef5e9e779781edecc45
SHA1 c95520ed87301e0953b3a4d2197ef92f7bfec862
SHA256 7915124adf7e18c48c14497f27ce64b35e60d7975a7893fa0ce415c1edeb1074
SHA512 a552c5b560158c1a5969a9b7b1a6fd0ad4bf10639bf267cca8235424b43ffe1da67cc093e6aa93f00f307af0792eb1ee67bb3441df23bac61cb120c29f8d287d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir3488_2142966876\Icons Monochrome\16.png

MD5 1b3a4d1adc56ac66cd8b46c98f33e41b
SHA1 de87dc114f12e1865922f89ebc127966b0b9a1b7
SHA256 0fb35eacb91ab06f09431370f330ba290725119417f166facaf5f134499978bd
SHA512 ce89a67b088bae8dcd763f9a9b3655ed90485b24646d93de44533744dfcf947c96571e252d1ad80bdec1530ff2b72b012e8fff7178f1b4e957090f0f4c959e0d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 40d138441c7c24be34d5884cb0d3763d
SHA1 3eef340859427f51eba973a52764d87f22846fa8
SHA256 0025af771ebfaafede7243ee68c340d93ec4fc92369c961ca43506f6c26f2ee2
SHA512 f00453ce3b3e30f9f6c632b3e78829fa3e13e649275eefe23a0f7db763be3c8bd9027233553c8ef6cbc6bb50739d692d9b1d916416aca7282e2356c4cdefa5e3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 2802470a180ddfc32223c4f9e6de089c
SHA1 50e2055a43ed52fde30ce212ce2b64f79cbf7d83
SHA256 96fd51e3401cf2e781d9c923f68c2fd11777dcd9573427251ad968c38562be5e
SHA512 ae4c3cd2b6e953953c8f1f5979a56e7ad54954af87a8b1f136f5b0a28ee1ab807c9b22df6437f31e5ee4ca6a11265afa1c9d1b83713ece2b16c640945c2060d7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 302338e6ae57c21d8a27b4d64d3dcd1c
SHA1 0ba0ccccaa73b2083c4c443dcca339b7ae289064
SHA256 7c89d9b80b297834ec726d66f64382b510e1dfcfabf9a056e0cdda807c517efa
SHA512 02c6a9f91a90314774f51193680f13598475094354bf43d32746c6a077205ff4cd3c0aae85552c7536643dd58bd0ed03ac4d302d387628c52c1a0caf0a12662b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 0ff02b686df37daca45bcb5398f6c742
SHA1 0b3714944b1c27ab666deec6c48eabe5c78677bd
SHA256 5196ba4a7072683fa1b725829d6849196ca4e22c6dde2a67cf41b13b7d1b8c80
SHA512 9e849c9ad4691b959060bfb35b45c51f162ba4555817efb74bc851b66bf2d29c142a1a370dc17fe4595523c201a7321da3e5c6aecc4d863bdb74c0db7359b51c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 30ee0614e151b8dc85c901b4ec0a850e
SHA1 2048191db8c97451fc30b42239b7682259d6a366
SHA256 3554f2512e05f374846f3d186d8b34fda89e457d79f651d4fcd683913b9766db
SHA512 4673f12930da79a94a3ab2548877c832699fb56dbe794a3f9f7c3cb59b2a269a1c116c63b836d131ef5e936e90878e50b12361f2f82049d9f3fef72e42238099

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ba99e6e203c1cec6c65f7a4d0cd62290
SHA1 5ac5161f852ecf7b110bae6c1249b49fbf2206a5
SHA256 b59f0fd7b272bba65818271e760bb6bac9e08b0327f5cc270e8aa4687c5995cf
SHA512 f604e1a5c5eff3bbde2d4792767de5965e7ed767db7d6c7da8a005ca0df9c200cd3944ed9b127ff42affad331fc5d077e99baddf6d9d1f4fd2bbc1701cc438f9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 2b7d173d24c632052fffdee23941fc8b
SHA1 fb0f450fb8ee07a427cb6e54119256af42d6223f
SHA256 a160dbb6deb868f7566a02cc80c230511b45111d0d5f1bfbdc2d939923d2c639
SHA512 64cd85b9eab83a794d1daab78d1f9789b2aa3168d4ea0c01515ba96a591cdd79384dd65c62d1d7510057aac2079b38c86ff1a76ffd63df8585cdbc5ba4fbdbdc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8ab542a3b26f4ecd50a3b49c509dae13
SHA1 12aa7dd519cd5ca492bc623fc8dc546d391377ba
SHA256 a4ef4170acf91b307ec092f85905b70be88a7bee1672191306190079e82fc01b
SHA512 3e1dfda523b873fc6ff749b81ca2fdcc01eeecdbed2975123c18b053b48f6b0af92009421f1fb4054092cbd4a7d4ba30ba628aed614808e522d37608926b7dee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\119c7dc1-26e0-4225-880a-c056b61726a3\index-dir\the-real-index~RFe59c460.TMP

MD5 b7500aad1b37f078b070d1ed145862c3
SHA1 46f7fc96a0afb21dce04289224fe5f2302e5f522
SHA256 da59b1062ad42f743f7dbf6cb95a077d185ef0ca5a78748e2bffd6095fce70f2
SHA512 7c61f3154458260d608c3c56b64af64ae7cb27603b437bcbadbde2f7a5369133f0aafc11b033b793e008da3e205728f8b38df44accb199871473d7bf9996fdfb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\119c7dc1-26e0-4225-880a-c056b61726a3\index-dir\the-real-index

MD5 815c694f0793eef669384f28dc66a7d7
SHA1 9051f59ba9c77f01192847c7791d8d546a35c852
SHA256 221cf927784d5c719722742fb44e5f5c0d5503030d45539bbaa419bffc204f68
SHA512 eb4ae3dac1829b5f3961811e7ab0aa52dae5e29972b80f909b1daa766d47ded71bf0ccc4e5a22bb271d1ae867784b1eede1a2630b398134df7b8263e11045841

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 660ba5af6f7334a2ff1f3e3579b2d3cb
SHA1 b0e717d9b07db26e6aa2ac2e234da0291811c523
SHA256 27e38ee0c7b81671363fd7cd21060370104b94068882c3a9d5dda80ee3afca0d
SHA512 6b85bb2602c4451c4c6caee9c54a4679fc96f6fd4f5b264a878a42eb072e23266f440fa4f48b0f6d704e6961da694e500a702b7d291ccf2c089cf699e799ba04

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bf1214101379dd571574ee3231d71c4a
SHA1 e04ae0162b8a8c28a9bd8a76f6b5003eabc1b264
SHA256 01a861789d72e0cf26bef98029de2aa6e1f7ed42c65782d7a64ed7a1f352cb7d
SHA512 194d60edc5e28de09732b049d9c5b3db15b131a783dc916be7e8b5546f85fd7a6d132ca8a5ec07078ac36f6b1819ba31698f4a4e0099b8640b479a741dcd4be2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006a

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8