用户服务中心

Close

Library
My library

+ Add to library

Search
Search

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

A query form

Call us

+7 (495) 789-45-86

Forum

Your tickets

New ticket

Call us

+7 (495) 789-45-86

Profile

CN

RU CN DE EN ES FR IT JP KZ UZ PL BY
Close
服务
扫描仪
Dr.Web vxCube
试用
计算机病毒事件调查
病毒知识库
知识库

技术

术语

教育培训

误区

新闻

Trojan.Siggen17.28859

Added to the Dr.Web virus database: 2022-03-24

Virus description added:

Technical Information

Malicious functions
Executes the following
  • '<SYSTEM32>\taskkill.exe' /pid 2876 /T /F /FI "MEMUSAGE gt 0"
Injects code into
the following user processes:
  • realnull server.exe
Modifies file system
Creates the following files
  • %TEMP%\nss3997.tmp\system.dll
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\webkit\wkinput.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\webkit\wkexecutioncontext.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\webkit\wkconnection.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\webkit\wkbrowser.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\webkit\wkaccessibility.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\webkit\webkit.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\uskeyboardlayout.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\types.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\transport.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\recorder\python.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\trace\viewer\traceviewer.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\trace\recorder\snapshotterinjected.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\trace\recorder\snapshotter.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\trace\common\traceevents.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\trace\common\snapshottypes.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\recordersupplement.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\recorder\utils.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\recorder\recorderutils.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\recorder\recordertypes.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\recorder\recorderapp.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\trace\recorder\tracing.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\recorder\recorderactions.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\webkit\wkinterceptablerequest.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\browserfetcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\registry.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\processlauncher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\netutils.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\nativedeps.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\multimap.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\httpserver.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\eventshelper.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\errors.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\dependencies.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\webkit\wkprovisionalpage.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\webkit\wkpage.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\async.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\third_party\highlightjs\highlightjs\languages\python.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\third_party\highlightjs\highlightjs\languages\javascript.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\third_party\highlightjs\highlightjs\languages\java.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\third_party\highlightjs\highlightjs\languages\csharp.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\third_party\highlightjs\highlightjs\index.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\third_party\highlightjs\highlightjs\highlight.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\third_party\highlightjs\highlightjs\core.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\webkit\wkworkers.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\debuglogger.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\recorder\language.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\recorder\javascript.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\recorder\java.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\firefox\ffconnection.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\firefox\ffbrowser.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\firefox\ffaccessibility.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\filechooser.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\fetch.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\electron\electron.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\download.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\dom.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\firefox\ffinput.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\dialog.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\devicedescriptors.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\cookiestore.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\console.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\common\utilityscriptserializers.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\common\selectorparser.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\common\csstokenizer.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\common\cssparser.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\videorecorder.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\crprotocolhelper.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\devicedescriptorssource.json
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\firefox\ffnetworkmanager.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\firefox\ffexecutioncontext.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\firefox\ffpage.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\recorder\csharp.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\playwright.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\recorder\codegenerator.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\har\hartracer.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\har\harrecorder.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\har\har.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\supplements\debugger.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\selectors.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\screenshotter.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\protocolerror.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\progress.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\pipetransport.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\firefox\firefox.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\page.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\network.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\maceditingcommands.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\javascript.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\instrumentation.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\input.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\helper.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\frames.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\formdata.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\socksproxy.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\stacktrace.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\stringutils.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\timeoutsettings.js
  • %LOCALAPPDATA%\programs\real-browser-server\swiftshader\libglesv2.dll
  • %LOCALAPPDATA%\programs\real-browser-server\swiftshader\libegl.dll
  • %LOCALAPPDATA%\programs\real-browser-server\resources\elevate.exe
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\printdeps.exe
  • %LOCALAPPDATA%\programs\real-browser-server\libglesv2.dll
  • %LOCALAPPDATA%\programs\real-browser-server\libegl.dll
  • %LOCALAPPDATA%\programs\real-browser-server\ffmpeg.dll
  • %LOCALAPPDATA%\programs\real-browser-server\d3dcompiler_47.dll
  • %LOCALAPPDATA%\programs\real-browser-server\realnull server.exe
  • %LOCALAPPDATA%\programs\real-browser-server\vk_swiftshader.dll
  • %LOCALAPPDATA%\programs\real-browser-server\vk_swiftshader_icd.json
  • %LOCALAPPDATA%\programs\real-browser-server\snapshot_blob.bin
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\icon_16x16@2x.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\icon_16x16.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\icon\icon.iconset\icon_512x512@2x.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\icon\icon.iconset\icon_512x512.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\icon\icon.iconset\icon_32x32@2x.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\icon\icon.iconset\icon_32x32.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\icon\icon.iconset\icon_256x256@2x.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\icon\icon.iconset\icon_256x256.png
  • %LOCALAPPDATA%\programs\real-browser-server\v8_context_snapshot.bin
  • %LOCALAPPDATA%\programs\real-browser-server\vulkan-1.dll
  • %LOCALAPPDATA%\real-browser-server-updater\installer.exe
  • %LOCALAPPDATA%\programs\real-browser-server\uninstall realnull server.exe
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\c130.tmp
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\c120.tmp
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\c11f.tmp
  • %TEMP%\playwright_chromiumdev_profile-qbypim\c10e.tmp
  • %TEMP%\playwright_chromiumdev_profile-qbypim\c0ee.tmp
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\history provider cache
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\favicons
  • %TEMP%\etilqs_s40qgqaiagc7ixp
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\favicons-journal
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\web data
  • %TEMP%\etilqs_gxro1qindhtzp4s
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\history
  • %TEMP%\etilqs_b5hw7qgkmfakw33
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\history-journal
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\web data-journal
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\extension rules\log
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\extension rules\000001.dbtmp
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\extension rules\manifest-000001
  • %HOMEPATH%\desktop\realnull server.lnk
  • %TEMP%\nss3997.tmp\winshell.dll
  • %APPDATA%\microsoft\windows\start menu\programs\realnull server.lnk
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\icon\icon.iconset\icon_128x128@2x.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\icon.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\icon\icon.iconset\icon_128x128.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\icon.icns
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\htmlreport\zip.bundle.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\htmlreport\playwright.bundle.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\htmlreport\index.html
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\htmlreport\app.bundle.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\web\uiutils.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\web\traceviewer\ui\modelutil.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\web\traceviewer\tracemodel.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\web\traceviewer\sw.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\web\traceviewer\snapshotstorage.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\recorder\40e1017745522c215602.ttf
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\web\traceviewer\snapshotserver.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\web\traceviewer\inmemorysnapshotter.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\web\traceviewer\geometry.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\web\traceviewer\entries.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\web\theme.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\zones.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\vfs.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\verifynodejsversion.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\utils.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\utils\ubuntuversion.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\web\traceviewer\snapshotrenderer.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\recorder\app.bundle.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\recorder\index.html
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\traceviewer\40e1017745522c215602.ttf
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\untitled\icon.iconset\icon_512x512@2x.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\untitled\icon.iconset\icon_512x512.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\untitled\icon.iconset\icon_32x32@2x.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\untitled\icon.iconset\icon_32x32.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\untitled\icon.iconset\icon_256x256@2x.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\untitled\icon.iconset\icon_256x256.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\untitled\icon.iconset\icon_16x16@2x.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\untitled\icon.iconset\icon_16x16.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\untitled\icon.iconset\icon_128x128@2x.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\static\untitled\icon.iconset\icon_128x128.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\package.json
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\traceviewer\zip.min.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\traceviewer\sw.bundle.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\traceviewer\index.html
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\traceviewer\icon-512x512.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\traceviewer\icon-384x384.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\traceviewer\icon-32x32.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\traceviewer\icon-256x256.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\traceviewer\icon-192x192.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\traceviewer\icon-16x16.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\webpack\traceviewer\app.bundle.js
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\c150.tmp
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\crpdf.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\crpage.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\crnetworkmanager.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\android-driver.apk
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\android-driver-target.apk
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\readme.md
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\notice
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\license
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar
  • %LOCALAPPDATA%\programs\real-browser-server\resources.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\zh-tw.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\zh-cn.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\ro.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\vi.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\tr.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\th.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\te.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\ta.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\sw.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\sv.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\sr.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\sl.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\sk.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\uk.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\ru.pak
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\install_media_pack.ps1
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\reinstall_msedge_dev_win.ps1
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\cli\driver.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\cli\cli.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\browserserverimpl.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\index.mjs
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\index.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\cli.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\browsers.json
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\reinstall_msedge_stable_win.ps1
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\reinstall_msedge_stable_mac.sh
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\reinstall_chrome_beta_mac.sh
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\reinstall_chrome_beta_linux.sh
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\reinstall_msedge_dev_mac.sh
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\reinstall_msedge_dev_linux.sh
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\reinstall_msedge_beta_win.ps1
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\reinstall_msedge_beta_mac.sh
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\reinstall_msedge_beta_linux.sh
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\reinstall_chrome_stable_win.ps1
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\reinstall_chrome_stable_mac.sh
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\reinstall_chrome_stable_linux.sh
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\reinstall_chrome_beta_win.ps1
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\bin\reinstall_msedge_stable_linux.sh
  • %LOCALAPPDATA%\programs\real-browser-server\locales\pt-pt.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\pt-br.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\pl.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\el.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\de.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\da.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\cs.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\ca.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\bn.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\bg.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\ar.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\en-us.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\am.pak
  • %LOCALAPPDATA%\programs\real-browser-server\chrome_200_percent.pak
  • %LOCALAPPDATA%\programs\real-browser-server\chrome_100_percent.pak
  • %LOCALAPPDATA%\programs\real-browser-server\licenses.chromium.html
  • %LOCALAPPDATA%\programs\real-browser-server\license.electron.txt
  • %TEMP%\nss3997.tmp\nsis7z.dll
  • %TEMP%\nss3997.tmp\app-64.7z
  • %TEMP%\nss3997.tmp\nsexec.dll
  • %TEMP%\nss3997.tmp\spiderbanner.dll
  • %TEMP%\nss3997.tmp\stdutils.dll
  • %LOCALAPPDATA%\programs\real-browser-server\icudtl.dat
  • %LOCALAPPDATA%\programs\real-browser-server\locales\es-419.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\en-gb.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\es.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\nl.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\it.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\nb.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\ms.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\mr.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\ml.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\lv.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\lt.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\ko.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\kn.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\ja.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\id.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\et.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\hu.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\hr.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\hi.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\he.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\gu.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\fr.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\fil.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\fi.pak
  • %LOCALAPPDATA%\programs\real-browser-server\locales\fa.pak
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\cli\innercli.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\accessibility.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\android.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\api.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\outofprocess.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\inprocess.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\inprocessfactory.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\grid\simplegridfactory.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\grid\gridworker.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\grid\gridserver.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\grid\gridclient.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\grid\gridagent.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\grid\dockergridfactory.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\protocol\callmetadata.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\generated\utilityscriptsource.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\generated\injectedscriptsource.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\generated\consoleapisource.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\tracingdispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\streamdispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\selectorsdispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\playwrightdispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\pagedispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\networkdispatchers.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\localutilsdispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\generated\recordersource.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\protocol\channels.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\protocol\serializers.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\protocol\transport.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\crexecutioncontext.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\crdragdrop.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\crdevtools.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\crcoverage.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\crconnection.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\crbrowser.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\crapp.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\craccessibility.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\chromium.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\appicon.png
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\browsertype.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\browsercontext.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\browser.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\artifact.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\android\backendadb.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\android\android.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\accessibility.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\remote\playwrightserver.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\remote\playwrightclient.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\protocol\validatorprimitives.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\protocol\validator.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\jsonpipedispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\framedispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\jshandledispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\elementhandlerdispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\input.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\frame.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\filechooser.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\fetch.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\events.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\elementhandle.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\electron.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\download.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\dialog.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\jshandle.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\coverage.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\connection.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\clientinstrumentation.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\clienthelper.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\channelowner.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\cdpsession.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\browsertype.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\browsercontext.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\browser.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\artifact.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\consolemessage.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\jsonpipe.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\localutils.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\locator.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\electrondispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\dispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\dialogdispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\consolemessagedispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\cdpsessiondispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\browsertypedispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\browserdispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\browsercontextdispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\artifactdispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\dispatchers\androiddispatcher.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\common\types.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\worker.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\waiter.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\video.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\types.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\tracing.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\stream.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\selectors.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\playwright.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\page.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\client\network.js
  • %LOCALAPPDATA%\programs\real-browser-server\resources\app.asar.unpacked\node_modules\playwright-core\lib\server\chromium\crinput.js
  • %APPDATA%\realnull server\fontlookuptablecache\font_unique_name_table.pb
Deletes the following files
  • %TEMP%\nss3997.tmp\app-64.7z
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\secure preferences
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\preferences
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\history-journal
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\history
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\favicons-journal
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\favicons
  • %TEMP%\playwright_chromiumdev_profile-qbypim\local state
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\extension rules\manifest-000001
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\extension rules\log
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\web data
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\extension rules\current
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\c11f.tmp
  • %TEMP%\playwright_chromiumdev_profile-qbypim\local state~rf13c11d.tmp
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\history provider cache
  • %TEMP%\nss3997.tmp\winshell.dll
  • %TEMP%\nss3997.tmp\system.dll
  • %TEMP%\nss3997.tmp\stdutils.dll
  • %TEMP%\nss3997.tmp\spiderbanner.dll
  • %TEMP%\nss3997.tmp\nsis7z.dll
  • %TEMP%\nss3997.tmp\nsexec.dll
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\preferences~rf13c274.tmp
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\web data-journal
Moves the following files
  • from %TEMP%\playwright_chromiumdev_profile-qbypim\default\extension rules\000001.dbtmp to %TEMP%\playwright_chromiumdev_profile-qbypim\default\extension rules\current
  • from %TEMP%\playwright_chromiumdev_profile-qbypim\c0ee.tmp to %TEMP%\playwright_chromiumdev_profile-qbypim\local state
  • from %TEMP%\playwright_chromiumdev_profile-qbypim\c10e.tmp to %TEMP%\playwright_chromiumdev_profile-qbypim\local state
  • from %TEMP%\playwright_chromiumdev_profile-qbypim\local state to %TEMP%\playwright_chromiumdev_profile-qbypim\local state~rf13c11d.tmp
  • from %TEMP%\playwright_chromiumdev_profile-qbypim\default\c120.tmp to %TEMP%\playwright_chromiumdev_profile-qbypim\default\preferences
  • from %TEMP%\playwright_chromiumdev_profile-qbypim\default\c130.tmp to %TEMP%\playwright_chromiumdev_profile-qbypim\default\secure preferences
  • from %TEMP%\playwright_chromiumdev_profile-qbypim\default\c150.tmp to %TEMP%\playwright_chromiumdev_profile-qbypim\default\preferences
  • from %TEMP%\playwright_chromiumdev_profile-qbypim\default\preferences to %TEMP%\playwright_chromiumdev_profile-qbypim\default\preferences~rf13c274.tmp
Substitutes the following files
  • %TEMP%\playwright_chromiumdev_profile-qbypim\local state
  • %TEMP%\playwright_chromiumdev_profile-qbypim\default\preferences
Network activity
Connects to
  • 'sg##########88.servers.mongodirector.com':6379
TCP
Other
  • 'sg##########88.servers.mongodirector.com':6379
UDP
  • DNS ASK sg##########88.servers.mongodirector.com
Miscellaneous
Searches for the following windows
  • ClassName: '#32770' WindowName: ''
  • ClassName: 'SysListView32' WindowName: ''
  • ClassName: 'Chrome_MessageWindow' WindowName: '%APPDATA%\RealNULL Server'
  • ClassName: 'Chrome_MessageWindow' WindowName: '%TEMP%\playwright_chromiumdev_profile-qBYPim'
  • ClassName: '' WindowName: ''
Creates and executes the following
  • '%LOCALAPPDATA%\programs\real-browser-server\realnull server.exe'
  • '%LOCALAPPDATA%\programs\real-browser-server\realnull server.exe' --type=gpu-process --field-trial-handle=1204,13229835361638529275,4017812138775739860,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSiteP...
  • '%LOCALAPPDATA%\programs\real-browser-server\realnull server.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1204,13229835361638529275,4017812138775739860,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,Sa...
  • '%WINDIR%\syswow64\cmd.exe' /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq RealNULL Server.exe" | find "RealNULL Server.exe"' (with hidden window)
  • '%ProgramFiles(x86)%\google\chrome\application\chrome.exe' --disable-background-networking --enable-features=NetworkService,NetworkServiceInProcess --disable-background-timer-throttling --disable-backgrounding-occluded-windows --disable-breakpad --disa...' (with hidden window)
  • '<SYSTEM32>\cmd.exe' /d /s /c "taskkill /pid 2876 /T /F /FI "MEMUSAGE gt 0""' (with hidden window)
Executes the following
  • '%WINDIR%\syswow64\cmd.exe' /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq RealNULL Server.exe" | find "RealNULL Server.exe"
  • '%WINDIR%\syswow64\tasklist.exe' /FI "USERNAME eq user" /FI "IMAGENAME eq RealNULL Server.exe"
  • '%WINDIR%\syswow64\find.exe' "RealNULL Server.exe"
  • '%ProgramFiles(x86)%\google\chrome\application\chrome.exe' --disable-background-networking --enable-features=NetworkService,NetworkServiceInProcess --disable-background-timer-throttling --disable-backgrounding-occluded-windows --disable-breakpad --disa...
  • '<SYSTEM32>\cmd.exe' /d /s /c "taskkill /pid 2876 /T /F /FI "MEMUSAGE gt 0""

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Free trial

 

Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

Free trial

 

Download Dr.Web

Download by serial number

Download on App Store

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

 

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

Free trial

14 days

Download now
Get it on Google Play
Wechat