Malware Analysis Report

2025-01-18 01:07

Sample ID 240613-g81cpaxdpc
Target https://search.app/?link=https://store.soa.org/Order-Pages/Checkout/Thank-You-Page/OrderNumber/1003778589&utm_source=igadl,igatpdl,sh/x/gs/m3/5
Tags
score
4/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
4/10

Threat Level: Likely benign

The file https://search.app/?link=https://store.soa.org/Order-Pages/Checkout/Thank-You-Page/OrderNumber/1003778589&utm_source=igadl,igatpdl,sh/x/gs/m3/5 was found to be: Likely benign.

Malicious Activity Summary


Drops file in Windows directory

Modifies Internet Explorer settings

Modifies registry class

Suspicious behavior: MapViewOfSection

Suspicious use of AdjustPrivilegeToken

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-13 06:29

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 06:29

Reported

2024-06-13 06:31

Platform

win10-20240611-en

Max time kernel

119s

Max time network

122s

Command Line

"C:\Windows\system32\LaunchWinApp.exe" "https://search.app/?link=https://store.soa.org/Order-Pages/Checkout/Thank-You-Page/OrderNumber/1003778589&utm_source=igadl,igatpdl,sh/x/gs/m3/5"

Signatures

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
File opened for modification C:\Windows\Debug\ESE.TXT C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\system32\browser_broker.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\CIStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy\Extensions C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\Total C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\CA C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\soa.org C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\ACGStatus\DynamicCodePolicy = 05000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\Content\CachePrefix C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DomStorageState C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\CIPolicyState = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-DXFeatureLevel = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\CIStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ServiceUI\IsSignedIn = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\History\CachePrefix = "Visited:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\CA\Certificates C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder\SyncIEFirstTimeFullScan = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 98b3eb295bbdda01 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\History\CacheLimit = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\ACGPolicyState = "8" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Content\CacheLimit = "256000" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\JumpListInPrivateBrowsingAllowed = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\CA\CRLs C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Revision = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListDOSTime = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\store.soa.org C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\CIStatus\SignaturePolicy = 06000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = bb32742c5bbdda01 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ServiceUI C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionHigh = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Extensible Cache C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Content\CachePrefix C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\Extensible Cache C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$blogger C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3\{A8A88C49-5EB2-4990-A1A2-087602 = 1a3761592352350c7a5f20172f1e1a190e2b017313371312141a152a C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\CIStatus\SignaturePolicy = 06000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\soa.org\NumberOfSubdomains = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\soa.org C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\SharedCookie_MRACMigrationDone = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BingPageData C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\CIStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 2002d0225bbdda01 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\FileVersion = "2016061511" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Cookies\CacheLimit = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore\OneTimeCleanup = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DomainSuggestion\FileNames\en-US = "en-US.1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Rating\Rating Prompt Shown = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\VersionLow = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DomStorageState C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\Cookies\CacheLimit = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3\{AEBA21FA-782A-4A90-978D-B72164 = 1a3761592352350c7a5f20172f1e1a190e2b017313371312141a152a C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\DXFeatureLevel = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\CIStatus\SignaturePolicy = 06000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 508 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 3308 wrote to memory of 4268 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

Processes

C:\Windows\system32\LaunchWinApp.exe

"C:\Windows\system32\LaunchWinApp.exe" "https://search.app/?link=https://store.soa.org/Order-Pages/Checkout/Thank-You-Page/OrderNumber/1003778589&utm_source=igadl,igatpdl,sh/x/gs/m3/5"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

C:\Windows\system32\browser_broker.exe

C:\Windows\system32\browser_broker.exe -Embedding

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

Network

Country Destination Domain Proto
US 8.8.8.8:53 search.app udp
US 199.36.158.100:443 search.app tcp
US 199.36.158.100:443 search.app tcp
US 8.8.8.8:53 100.158.36.199.in-addr.arpa udp
US 8.8.8.8:53 c.pki.goog udp
GB 172.217.169.67:80 c.pki.goog tcp
US 8.8.8.8:53 store.soa.org udp
US 104.18.21.144:443 store.soa.org tcp
US 104.18.21.144:443 store.soa.org tcp
US 8.8.8.8:53 x2.c.lencr.org udp
BE 23.55.97.11:80 x2.c.lencr.org tcp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 11.97.55.23.in-addr.arpa udp
US 8.8.8.8:53 144.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 sso.soa.org udp
US 18.188.124.245:443 sso.soa.org tcp
US 18.188.124.245:443 sso.soa.org tcp
US 8.8.8.8:53 245.124.188.18.in-addr.arpa udp
US 8.8.8.8:53 41.249.124.192.in-addr.arpa udp
US 8.8.8.8:53 cdn.cookielaw.org udp
US 104.19.178.52:443 cdn.cookielaw.org tcp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 172.64.155.119:443 geolocation.onetrust.com tcp
US 172.64.155.119:443 geolocation.onetrust.com tcp
US 8.8.8.8:53 52.178.19.104.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 119.155.64.172.in-addr.arpa udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 216.239.32.36:443 region1.analytics.google.com tcp
US 216.239.32.36:443 region1.analytics.google.com tcp
GB 142.250.200.3:443 www.google.co.uk tcp
BE 108.177.15.157:443 stats.g.doubleclick.net tcp
BE 108.177.15.157:443 stats.g.doubleclick.net tcp
GB 172.217.169.67:80 c.pki.goog tcp
US 104.18.21.144:443 store.soa.org tcp
US 104.18.21.144:443 store.soa.org tcp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 157.15.177.108.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 js-agent.newrelic.com udp
US 162.247.243.39:443 js-agent.newrelic.com tcp
BE 23.55.97.11:80 x2.c.lencr.org tcp
BE 23.55.97.11:80 x2.c.lencr.org tcp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 39.243.247.162.in-addr.arpa udp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 bam.nr-data.net udp
US 162.247.243.29:443 bam.nr-data.net tcp
US 162.247.243.29:443 bam.nr-data.net tcp
US 8.8.8.8:53 29.243.247.162.in-addr.arpa udp
US 104.18.21.144:443 store.soa.org tcp
US 104.18.21.144:443 store.soa.org tcp
US 8.8.8.8:53 privacyportal.onetrust.com udp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
US 8.8.8.8:53 137.32.18.104.in-addr.arpa udp
US 8.8.8.8:53 161.19.199.152.in-addr.arpa udp
US 18.188.124.245:443 sso.soa.org tcp
US 18.188.124.245:443 sso.soa.org tcp
US 162.247.243.29:443 bam.nr-data.net tcp
US 162.247.243.29:443 bam.nr-data.net tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
US 172.64.155.119:443 privacyportal.onetrust.com tcp
US 172.64.155.119:443 privacyportal.onetrust.com tcp
US 216.239.32.36:443 region1.analytics.google.com tcp
US 216.239.32.36:443 region1.analytics.google.com tcp
US 162.247.243.29:443 bam.nr-data.net tcp
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
NL 23.62.61.162:443 www.bing.com tcp
NL 23.62.61.162:443 www.bing.com tcp
US 8.8.8.8:53 76.234.34.23.in-addr.arpa udp
US 8.8.8.8:53 162.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 181.97.55.23.in-addr.arpa udp
US 162.247.243.29:443 bam.nr-data.net tcp

Files

memory/4668-16-0x0000019A95620000-0x0000019A95630000-memory.dmp

memory/4668-0-0x0000019A95520000-0x0000019A95530000-memory.dmp

memory/4668-35-0x0000019A926B0000-0x0000019A926B2000-memory.dmp

memory/3404-45-0x000001F200AC0000-0x000001F200BC0000-memory.dmp

memory/508-64-0x000001CAF4F50000-0x000001CAF4F52000-memory.dmp

memory/508-67-0x000001CAF4F80000-0x000001CAF4F82000-memory.dmp

memory/508-69-0x000001CAF5040000-0x000001CAF5042000-memory.dmp

memory/508-88-0x000001CAF5910000-0x000001CAF5A10000-memory.dmp

memory/508-93-0x000001CAF5AD0000-0x000001CAF5AF0000-memory.dmp

memory/508-90-0x000001CAF5910000-0x000001CAF5A10000-memory.dmp

memory/508-89-0x000001CAF5910000-0x000001CAF5A10000-memory.dmp

memory/508-202-0x000001CAF6690000-0x000001CAF6692000-memory.dmp

memory/508-213-0x000001CAF68F0000-0x000001CAF68F2000-memory.dmp

memory/508-251-0x000001CAF7A50000-0x000001CAF7A70000-memory.dmp

memory/508-450-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-451-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-452-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-454-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-456-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-459-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-462-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-464-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-463-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-461-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-460-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-458-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-457-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-455-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-453-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-465-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-466-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-468-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-467-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

memory/508-469-0x000001CAF4F60000-0x000001CAF4F70000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\custom[1].css

MD5 da9d6a35a08e053fb9f26c8fa3625ee1
SHA1 7130aa3d39138f3d060ff254b7987f38553d03b2
SHA256 099ce0826932b0fe8867f4d1ac8d3d82c9a9017819fbf90978dd155e22b1814b
SHA512 ee81d718963a564be1d9a5410663753d4bf5b3f4d4cc1abbc5d182c425d2f4a1e39eedc75f0c7baf1bdbe98c90867e3d690e5462308d3ee5cf6fe649444ccf31

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\lato-regular-webfont[1].woff2

MD5 38fef728d048b4e4f0eeea2f21074d62
SHA1 f9b512ae64429fa356e7938fc8ce63063ebd43f4
SHA256 deb423860394ef5d65626297f5faba74c2c9ec2f29be368f040c3c261502845c
SHA512 1f3f4e0edded6bd0db1d2599b54dc678b26f656900379ad02a004f24fdbca2a8517cc2b096858218eabacaf140cbf12a646b0545f0ba55c945181b928cae80ce

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\HT7EZ3OG\favicon[1].ico

MD5 2de6897008eb657d2ec770fe5b909439
SHA1 1a8c2b0c647fbc870921c04a5dd949311a6b358d
SHA256 d48fdd72c5cb483ea4f9f1c5236684ca74e4a64e9f248f82fa6264069f9cce40
SHA512 3d1dcfbc00f132e14e3f2475ddbe72cafb95845b1fb2b193b6ad17f1b5ac619e838ab2ff523d8299326e17f309e0897904b47d38b0de855a5b617b0c72b6082e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

MD5 822467b728b7a66b081c91795373789a
SHA1 d8f2f02e1eef62485a9feffd59ce837511749865
SHA256 af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9
SHA512 bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

MD5 e33bd17f95464f5ab58711ff24d2950a
SHA1 5c694ae732c459e0642f98f13dc16358a40eef78
SHA256 d6e1026ca19496b0b6a97237214191e1d0dd6121e17932dfa0284f351501eafb
SHA512 de52a7f65c056d6599e3368f120860440036abf9b292903aaa6c52698448a59df3e392d75dc2bfd4a00127a6d1923bbdef930716e195dead2de5c47e7ce7e91e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\1B1495DD322A24490E2BF2FAABAE1C61

MD5 5ae8478af8dd6eec7ad4edf162dd3df1
SHA1 55670b9fd39da59a9d7d0bb0aecb52324cbacc5a
SHA256 fe42ac92eae3b2850370b73c3691ccf394c23ab6133de39f1697a6ebac4bedca
SHA512 a5ed33ecec5eecf5437c14eba7c65c84b6f8b08a42df7f18c8123ee37f6743b0cf8116f4359efa82338b244b28938a6e0c8895fcd7f7563bf5777b7d8ee86296

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\1B1495DD322A24490E2BF2FAABAE1C61

MD5 d6fad041dfa753113ab847f61993210d
SHA1 995c61763370bd3211418584ce1fadddead0cad6
SHA256 f8ff6196908ff83b969fc4935af7483c515758b48f3637e4ff5079f0f57ebd29
SHA512 17f59c3b1496c6ee0c15c17e3c4c2c6e8742ee38e7f67a1e59654350e383b704559536d4870a4bf784151ae9ce194b0f36c835a106140733bb325562b2ccf657

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

MD5 1bfe591a4fe3d91b03cdf26eaacd8f89
SHA1 719c37c320f518ac168c86723724891950911cea
SHA256 9cf94355051bf0f4a45724ca20d1cc02f76371b963ab7d1e38bd8997737b13d8
SHA512 02f88da4b610678c31664609bcfa9d61db8d0b0617649981af948f670f41a6207b4ec19fecce7385a24e0c609cbbf3f2b79a8acaf09a03c2c432cc4dce75e9db

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BU0KRETY\edgecompatviewlist[1].xml

MD5 d4fc49dc14f63895d997fa4940f24378
SHA1 3efb1437a7c5e46034147cbbc8db017c69d02c31
SHA256 853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1
SHA512 cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771

MD5 e321f66a2865710929d2d619d634b069
SHA1 7af5cf6b8e1a6e4470d2d85338275af81af76520
SHA256 214b6e46051811a8f7dff91831b64ca34e58cc64673337c74fb8b68761a0beac
SHA512 acaae0cccce8453c2ce5fb4d9f910d339c93dff3804802dbd23cfbde7a38e340983bc8b20be5082eb870c7f7472fa0e2f3e6a31c2816f4009de625ff83b39416

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771

MD5 e2588530a8aefe5d0fbfe3a289b9eb1c
SHA1 4639521554fe0229fb6de036bb37e59f2c838a2c
SHA256 99853f4a77b79e798474399d5028301105842bfaaa97560bcd4539559d50c023
SHA512 6c3e9f6764e9aa70f5d2431e04cc0a963a14f8590ddcf1f7215cbb52dd1a865f3a02a6f9c70891ef419e73085e37c569ebb16d0c894e159a62b83fed14ef010e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\54F577636A83E408B7904707DAD3F435_75064E8C8059E97053020502F12F556E

MD5 90c86affba41512aada1091fe0bfb76f
SHA1 4f249eab2fa6630d25a3533fc7fc3da8592146ea
SHA256 874ed03ba657a0e03ce91c449b3f4d414ee27d48e0b3efb446b45d6130345684
SHA512 84d457e1aa2c9c2515810a15e02fff74f0d9db06a3c9786b622f4c67d90f3c95492f97195007e9735fad50fba8cb775f6f124471891c7a5f96a5d7496810a679

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\54F577636A83E408B7904707DAD3F435_75064E8C8059E97053020502F12F556E

MD5 5fa6e3449aa42b02eae32aa9b9cc17dd
SHA1 4a7e8c6946e1acdc20a589099437da0546807fcd
SHA256 c5e08e9316f3aafce9763b06b019be0d4b23b64862eca6e3c8522737e906e8e8
SHA512 190d5e41a2131fbb44d22efb182e46aa84acd4cec1855740ed3c1a8b1765948326f0a69b218ed9a3734e76173c8a39953b13a2b03f91c5c2832e44ab5fff699b

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9O2R4OFY\default[1].css

MD5 dccbf1ece66b7cf7fc8b6f1032959348
SHA1 c4cbb5e657002e26021594d48122012a9e20d3b5
SHA256 0ce901a45350635ed246d714a731dd2fca80a24b36de6d6fcca536db64671a4f
SHA512 d98d6fa82f8b391cfe0b2e105ccf081ff797bd26a35484a26bd336d260310b9889f0ed89ee0c74864cb34e01c6d623ebee099a46e21a4bdb5b69d1beefa87616

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\jquery-migrate[1].js

MD5 d09717626b6c7708da4fe84a45a0b3d5
SHA1 32bd34ff3916e345b08677dceb022e737a3045d9
SHA256 5b75e5e0e4bb647829251620d795ef999a6e06e8b19f9da3ea193f9ae24f7712
SHA512 edddb9faa7d9a53146f302c74a321fba04058ec2f6a1b2e556a234130da27b219a5f6d961d2a482f9874807a50a675996201b0de5a6214f4114aa2ea6dd9d48d

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\jquery-ui[1].js

MD5 b82e64401991fe440d3f83e804df8bbd
SHA1 1aee30b138c3d7f4dd99edbf8dc89d766ece401c
SHA256 14845b025fdd36d2873664d4ae6e7bfc836871b902db41d8fa11ead5aa72d2b4
SHA512 ac026c22f8f8cb88c2d444bb2aa02a88779b93956c64572f9beb989f4c8d74c5de898a174282520aa70f8bd8ba2b73aae8a83b12947060f970b0183ecab16a1d

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\otSDKStub[1].js

MD5 f38b4b593ff524527f3b9a6dd5662fb2
SHA1 47a807b00876e7096edc668a82f6a270de6deccb
SHA256 fdfea52427fb822bebdd32b325768e73b40637bd203c100827d4dece88e431c3
SHA512 60ff43642e4648492e4af94c0a6dcbb6c203d13e45f92157c34b89b9da49d8f2734cad61a3fceae186701911047afb8672cb32a1e582160a0e758fafa64b1c4b

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9O2R4OFY\WebResource[1].js

MD5 90ea7274f19755002360945d54c2a0d7
SHA1 647b5d8bf7d119a2c97895363a07a0c6eb8cd284
SHA256 40732e9dcfa704cf615e4691bb07aecfd1cc5e063220a46e4a7ff6560c77f5db
SHA512 7474667800ff52a0031029cc338f81e1586f237eb07a49183008c8ec44a8f67b37e5e896573f089a50283df96a1c8f185e53d667741331b647894532669e2c07

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\ScriptResource[1].js

MD5 1d6864709db6b20418228b3327f5e090
SHA1 c3c02cd59138c0c468bafd653d95276d619d0c5f
SHA256 47e4ee744c576fe52fe74a169a738169a4505bc6ec35fadf26784ff68bd81a3e
SHA512 6192083890b6b957234d09ea6cd1290178dcd15e4683551e14ee852454b8ac191c06f2a620f3b9d307ddfc383292824e8b140a918fe9d1e3972a7336d53a519d

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\WebResource[1].js

MD5 a2367583db58571a298a3560f080365a
SHA1 519f91570faff7ad6e4fdd1387152797abc13005
SHA256 43df44f867c3187106d52df2a6042624c8f90ab01a715c0942bbc64819539f71
SHA512 700d4dceed93a491ee7a36f031cf762666dafd08cbf732f9ea7d713364e38b5a5b5b4253ff27ab41c3284967d295fd9abdb43c310a07fb19d5a9428a43a97d86

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\ScriptResource[1].js

MD5 aeca88483779ac14b47f14389139050f
SHA1 b2d6addfd778216b8577a9788144f6313900b05e
SHA256 38deaf33d1c84196e4c4f3c76c67587090cf261d423b9bef9badf535bc146a2f
SHA512 31e647b1ed341ad8d5db4e991008f3a79169ccc0dc68e63da0f0533e1f9875b871336b5b5c953b267ae4788f0adfce6f54e3492c4feb8e087021ab84258f16be

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\ScriptResource[2].js

MD5 eb8ce3ef9c7840e5d148bef2050f1dfe
SHA1 7a129690b955a0b1d46bbf2ec68e6aa014208f7c
SHA256 02ec7e3dc8eef2398e74b66df4d91ba83fe3332f86e9d53feae18dca36a56e35
SHA512 573ded9395f3cef5a6b0a648e4177f6a39af758e54ea8db627051bb2f5f18172aca1743a71c426809256e3051bfab8cdb56970115a80957311d7c6441dacbac1

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\9BNTQ6A3\store.soa[1].xml

MD5 c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA1 35e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256 b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA512 6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\jquery[1].js

MD5 b61aa6e2d68d21b3546b5b418bf0e9c3
SHA1 9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7
SHA256 f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b
SHA512 5882735d9a0239c5c63c5c87b81618e3c8dc09d7d743c3444c535b9547b9b65defa509d7804552c581cb84b61dd1225e2add5dca6b120868ec201fa979504f4b

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\portal[1].css

MD5 16c8af52931faffa9b64fe6866410c8e
SHA1 1940e8dd8056777cae3b7ee8e585e03ec11e737c
SHA256 8fb702b75e588aac2c9a246dd3824818c4ab34b330d66b49e1e0dd834c644668
SHA512 aeb4eb6ddb43de61765aa2a1affe003135d089ba2b56528df567736ce9647afdfb61c7ec38b3f959862fd5519216333bb570cfdeefbb2d221e965a4eea7cb8b1

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\SearchSkinObjectPreview[1].css

MD5 5bb12959facadb2fc524272a482a0472
SHA1 21db282d1a4c256cd12e7b6ddeb69b23e60d2fbb
SHA256 bc02bbe2075c223d9e6369a06ef3c591b5f44abc1075bab3fb3f07385b17fab2
SHA512 7f249d9bee1f68ad3b7bbdc57eea596589aaef27d13f28cf56539d543a4a9fc43fca20d125b324f77b1130ed90088e6505c433206e669f0687b2cf892353441c

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\EUS09A1G\module[1].css

MD5 cb6e2b67ebb957aff1cc87643c725e3a
SHA1 35adcd95266e4d0532a068d3bfbffbf0aeead776
SHA256 7bf3818e2f85b981ac462bc1514c68b489e51fdef0b6a178bd771a4f1aba26fb
SHA512 9177379436f44526d5a8492d0c7125658689f9194d4609b6c82122d39ce6fba11e81c137e303adb30332c74844d5d03fa207f1b367e7126890e31e064da51927

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\EUS09A1G\dnn[1].js

MD5 f00bb400289ad291b239ce7cd55c647c
SHA1 a643ab75e9a878cab5f4f73a1784d8a4f681a7bd
SHA256 75e237b6a229c7f0315236b1c6439079b8c1941e122cbe15212e848f2150b0a8
SHA512 3809a15205f84322989e33e32744ea94b37dc7cb7a290b329181af88012ca67ba684d42faa9479085f1552a38306083b2411bbb3775acbbbd872fbcf0c56bdb7

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9O2R4OFY\module[1].css

MD5 e411632e56491e7ea0091cbbd2950b81
SHA1 9ac9c5df18955cd2b76abe54a993218988cdf1f5
SHA256 f0082238f1381aa36ba1e7d66b3d05b813c715314cb19234fa3f87074a556705
SHA512 523122f72298acac1343106916e98c853657c00a6b6d5527096b2e2dc60d381a61127ecc2702dbf4fb1c180f37d584d3e867138e6d5f9881facbc101ce095188

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9O2R4OFY\jquery.hoverIntent.min[1].js

MD5 8ace705a1980c9ad228ba3b6e9712cb7
SHA1 707ecec24d9f909ec2a36998e7a036bf23ae1ebf
SHA256 cda78b1bf26a533b4eb0110b8fea7ccdcf29d5594337c495808732f95458bead
SHA512 6db487e8228ad32837453b589e457529ed3ff0b5637ff799a4096ff31ebace686eba4009abef9e54dad906e0be5677f91052e19954e54c1cd91f54267c49afcf

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\ModuleActions[1].js

MD5 ab80296364c8c287d8fe03a2ab279873
SHA1 19622f526f6c281861f5a031da14723e450cf694
SHA256 0f96cbe644d0f6baeeba6d4a88b84ef821e191551ffd192473cfddb62867cc46
SHA512 0b90bf053236c510b36e31fc364f77ec685ae5f97ead8a41ffe2f3c9d61115b7bdc0605f163db8d962dce53c1195c28b44b1b1fccc6efc86a83561c9d0af5a7e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\dnncore[1].js

MD5 642365aec4fe6599f91831871c9ac963
SHA1 5a38d946569e24130d9c28349f08701d1375c3d3
SHA256 6d618705bb99d254e258f29b786aa2ab7f91a18ef9a571921d7b1363cf79abca
SHA512 96691d4a78bd97485180e35e1ee2a5d8e8a242a5857ec769ed3e13f151465643a6ee585620705bab9f244233473394066ccdeb7cbe12ab3b098fea1971ea3106

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\EUS09A1G\dnn.modalpopup[1].js

MD5 dbe6b9883bb004a24404e33c678f268a
SHA1 8a9803265c7e000fe9a9fc8aa541f09ea257183e
SHA256 264a300caab89c920e27c7bd535aff709bd18caf076555dff7533327a9103600
SHA512 bc1df4c8c74de32c7ad2b636609d34b253b17581560ea69a7d54c38f4debe4e133874c078653812520bf7f4b10852fdbce52365280739b78a10146eb9580453c

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\EUS09A1G\SearchSkinObjectPreview[1].js

MD5 7a7768dd4fd4cbd1d072d2efc0a99a01
SHA1 7f99d325e255abe51dab0669d9e2bcf766e33b36
SHA256 a722e7d74065948e26f7b4fc47f0ad32dd81ff9de4edf4ac7436f0e84d7ccd36
SHA512 bf8ab1d90d2c187f5cde79c40671c74350be6158817793d771a86f3abfe2da651d16af674b7291a7e93b947debb7f0b8be11ceb366b5dbe7494df2b10a04377c

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9O2R4OFY\ScriptResource[1].js

MD5 924de9e9b0073d1114af90db0fd02bfb
SHA1 cbf332ed3321f0b98065afe380ff0a1374b9c4b0
SHA256 6f7b533d29815aa9d71ad457fb57b53da490dfec583fbb783fdcfbbc05a3dd3a
SHA512 625b3a72c8184c45e033415b7ddd356f2b8ae6ac96089b2d06eea08f82aea0ec1e8e9111fb1ec01b4a6a49fde361cf0887b205907e1afb0f39afd1b0e3df45ea

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9O2R4OFY\skin[1].css

MD5 1d03a14919ff18bf9f3b5dba17874ab9
SHA1 557d2df4a50fd91d84087be4ebb8647e47ab55d1
SHA256 0e4a3c5d85923fc4dd7ab85cc81c0a21ae8f4389c5a1e7fd9b0401a1efa8903a
SHA512 4746befd27f7be5b7f6ff37d441cb1dd9aa3d2308f9282f137fb891e1b51cf559121bad9d8428b0f3f38f512fff58343fba02807ab748578f9af32a5da897b71

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\EUS09A1G\dnnicon.min[1].css

MD5 e4d42f9e3f37e2e18f7f7806c2159ccb
SHA1 62f6aab0c65354cf4ba6c6ec780e494a9d25209a
SHA256 a405660c6f332a778b640c5db789fc7eb9062a61996a906e6020c617d56cc014
SHA512 d447eff7cefd40069f656f092081a4d0d5e50c5db466fbdedca924c39c61ea39399ef3869070a3033d05aa87cef8c19503e891f693c038dccd6fd0a6bbeaac52

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\ModuleActions[1].css

MD5 b62397cc741bd4be185551bab379a50a
SHA1 a35aa6da2ada778e8b5da9bc2273501337330eab
SHA256 db80da6ce0a714c4c0c27eb9f5f2866a00be6f499755ee2a25f04cf9ae5017fe
SHA512 150192d44fa35e21cdde9b18a96babb761bb0e8f6de2e29cf7978050440299ae747dbd0f27a9da0c151b1798d267ae803837589a3c11ac48d96fe407adf6b20b

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9O2R4OFY\dnn.servicesframework[1].js

MD5 ac3afd8abb7f74ec7f9b5dc7fe34c1a2
SHA1 be8777e9ab2ea2af79ce6c2bc6fb437fcf469a67
SHA256 b6a7956502f6bfd53b34f7d85511ef49a3566ea30265f9cbc53a4e0a427f77a9
SHA512 e63d8f42a4a7b94c147b02b044c9f9a002687c8a086aaf91d48ae291caaea82a1ae4c34e249b6a3796faeffd4402295e673d84e66752eb29c97b4bed76c94044

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\dnn.jquery[1].js

MD5 b60b20f3c73bcd6a16445b67c43b9175
SHA1 23627d0a7b4f753f11888fbeff83adda9810844e
SHA256 7855bfdda64eade2934a25466f66cf39196cf4c48f72bfb9ce6d2d355882faae
SHA512 890e547f4584122be60eae8b7db6ed0c80097191bca2b22727e067227cda8b6b98da5b1635395980dee1287fe5292ad318ced3a46564a055cf8e72beab7e6382

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\gtm[1].js

MD5 3817aa042474036ed065e4411c9ede9c
SHA1 ac3a4bc9430b4705887adaea173758fede652bc9
SHA256 cffcad1154b0e66e57f7636bdd2feb1f385f1c294af74c735bef5daaa1d94abc
SHA512 5d8a89dd7c40637244407be451f0836e264d203dcc6c6d585fc1df722060fe68062b237944e31fc1bb8651c3227118181bdc460c3a50f47852e3ce3f45af248e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\bgPattern[1].gif

MD5 44fe57a7f9d013fe563d65d13eae0911
SHA1 628c000c7b7470e0c56d8310ffca93d37327d96a
SHA256 399bd1a0f2c583eb4345d445df250b222d78ce79d25ea2bd49f76eef74e46e76
SHA512 82e99701d7c3e1d1b4bf2e258625a7f1e4cf681c06f60d26f6b95cb3702cd07975c1ca2a7a6e29d4132ddfc43736af41f9dead9536c82a217596ecda74e16d3a

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9O2R4OFY\a99ec4f7-14bc-4efa-9f79-b633c187e043[1].js

MD5 bfda7bc1d7b916af0492bed5a6fb37db
SHA1 7c4531b978210aa32302f5087aadd9359a61dd24
SHA256 8ee280d890bcf0f42463933258a9c5a51f88619cdea29bf87444375d85de8f8d
SHA512 2c6c6027b9d3d13419b4a536e5010a2651b312ee243b73954a2a2d8873b72c3e52c05578cb135044d686d7e982dbfa55741bdfdf71c34a1294bf536cbb76224e

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\EUS09A1G\PersonifyScriptResource[1].js

MD5 8e43135db290fd93245c68dea5c0d420
SHA1 02259a32df7dcd08123e9f8b419533e077388170
SHA256 4f73224f6fa748616474b2237fa84fe381ac4203960148427953877dcba9fb08
SHA512 8973bf039b2fc71b4ef6b99ba8caaf5827510eba0590caaef741016f1049bfac68ce6d1a53d88793652f1060dee33f649290ca437a8becd6480cbe61467c8efd

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_28DEA62A0AE77228DD387E155AD0BA27

MD5 6d6832e66c2159bfe39e615b5b37a39e
SHA1 5c44d148693a919331e40c987386f99c33368327
SHA256 d0d21d56f77dea927b2814ecfc1536a00a5d72d353a2ad559037ff7942ec7821
SHA512 4144eed821b131785d4edd6aea20ad82c5139fba537019b938158501835130d939fef36294333ba27cf311d2731228363ad67df6020a344055be870a65108f03

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_28DEA62A0AE77228DD387E155AD0BA27

MD5 a0b65641400083f60bed554040b1fccb
SHA1 a07a3273efeeb19d7ad378ef9a9d472a3c8fb20f
SHA256 22f29618ed9816816b8f3e0875b575c25624691810c7557e8ec8b73a59222e4e
SHA512 86116f1ba90bb9c5385ec8762a57f28763c04e10eadb535ca8156d9a49bc141b8b18a37dbc83c38c4b2f4bcfdf270ab522245c787590f779db1ada636b1bdae0

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\js[1].js

MD5 f29768296add5b5ced868d6c68df8a89
SHA1 16192c50acdf0cd091f0154f52bf83e63c022a73
SHA256 3ebb6e95e8c24c0bc908e6df25abefd1140c7d54c49311c3388470e9de507e4c
SHA512 0af3c7fd775e2ca6309fe03bfbd83e6c7fcebf2daca3af5ebac4b7d2edc90ab17ff24c6e3901ef738a0910d35332d7ef43a6f2ed195edbacd02f3e91a7ed7265

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\analytics[1].js

MD5 575b5480531da4d14e7453e2016fe0bc
SHA1 e5c5f3134fe29e60b591c87ea85951f0aea36ee1
SHA256 de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd
SHA512 174e48f4fb2a7e7a0be1e16564f9ed2d0bbcc8b4af18cb89ad49cf42b1c3894c8f8e29ce673bc5d9bc8552f88d1d47294ee0e216402566a3f446f04aca24857a

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\location[1].json

MD5 741822cec87569d50e1cbd19613cec6f
SHA1 63651d95ac63171fdd67c68a61e6b23de672f908
SHA256 26e34b9fbbd2ecafe25af980f19ddc63342ffad01477b0fe851ac8c35bfea847
SHA512 bc4bbfba30874a3e93f83249998d5c6ab3be76b8949f70d3fe922ccbcfe44b683708ad100a4b7bf8f2dd094c61d9c27027a7e3122d2e173b4b2ef38a39fb5076

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

MD5 cb85f3fcf86ef0de7ef258539cae87de
SHA1 c73288fff07885a62f8c7033b348863ed3b8cad1
SHA256 7430a96d94b1faa5363b7656b323ffa416fd262e0405e498bb143dc93443963f
SHA512 dc152f2e8c8f7e316e84f7a1f3996e02c08d582d6d0e40b8bf7171e359ea952a80b7452e56690b30fe98b4655d4744e8529a930449ef1cd853e377f86294b2d2

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

MD5 c5e171c140708d0b97607893a8432122
SHA1 c6aa10e800cc1f56ad99dc2eac4883875b54cf64
SHA256 7bda71ef806bed25876b93d50f3dbfad1bad2ce7599cc569a884cec7651092e4
SHA512 1f499e3a8a16d6e87f8e0635300b5b4611174770d34a0ccf9ac115ad2da51e3a4fce4181f430fc1c2c00b90b5461476cb870f9a8660b32d9d036cd90a4978b46

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9O2R4OFY\otBannerSdk[1].js

MD5 1bd8b0d721c1e498646de294c4c72f17
SHA1 198b6503a31946ef26255d77d9ccee0cc65c81a6
SHA256 f8bd28fee94c800df636a486d42ed91d2df89db1fd3e223d5e89ce3d9dd107fe
SHA512 5f095834ded8349e8c4e775edc3e37995aba5f25285855a535b5b307d25c2d0ec1ee1496f8ca38c2230662d6dc321960ae8ef5efbbf32d9039e6ce31a792a61e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\en[1].js

MD5 da9bde721c09c290ce198c8b3149070d
SHA1 1dd8bda35d8c1fc2a2b9ea2c2144d09e60128646
SHA256 7a88334650004fda8a2939768721ef41bb218c179a87300749f35d96b550fcf7
SHA512 b23b3a0b228092fed54671dd617bcc0566a18a8a4d8810261c1e214d761ab0e17d43b9f64a26e5305e9727d0e95c687019d0d92efb1569693be5ef05821d2183

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\otFlat[1].json

MD5 803b2c8a7143c1fae821a92911644919
SHA1 4499b1ab1361d38c38044f0707f4bff0cc36fcd6
SHA256 8ae30f6f2162279a812bf9e00efd0c985e20e76efece9444125b410f3a6822a6
SHA512 bead03a14da20d06601458057b370c0b673ba5a2db35c193374ff06e3586a19e532dc8c035d03c12b993e5635778ff29e172f45f90c5582c89f990ef685b6a94

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9O2R4OFY\otCommonStyles[1].css

MD5 487143b593b69c366e88f0d6f37a7521
SHA1 24c38c758bd6ec62b838e5e9fb4a3d7a9e2acb17
SHA256 8edbd08b9bb87f815ad871e44aae03af609fc44b1961d608e94eff3f4e010375
SHA512 531294b797609050bba3cb476a478e653d177bc09643c1e4c78ca38ad6401f1c6646f727d73a612c6a2cda2086d5e33d8118afe97fb1459ffbf42ad748dc4d76

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\EUS09A1G\otPcTab[1].json

MD5 d92c49a5501e19308972202401abd018
SHA1 ecbea2f7cdf3ecf6c53f11d925b1be082815b0fb
SHA256 968c5a5b3f187b1b669bcdaed073b652d8b27645fd95c3bc38ce236ff4270764
SHA512 c23b52930d57bbb0a86509976f753a408e3ab520cd865db4d3e0cd0180aacf59e077dd05649f1b858515b59e80a2b688204fdfa4a628bdd9bdeea936fc6de109

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\EUS09A1G\shared[1].css

MD5 cb492b7df9b5c170d7c87527940eff3b
SHA1 66928e6cbb59c3a3bce606959ef4a865fe04e642
SHA256 dba5166ad9db9ba648c1032ebbd34dcd0d085b50023b839ef5c68ca1db93a563
SHA512 ce677db6ae33c5496874a2902d30d361f6cf12576e96bd8a9f6626a0ca29f0b4f97e403e54711d24ebf34d4e183235a8f9951345d32a20f2dad476d911ee7e06

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\mobile-menu[1].css

MD5 26462da79db695a5fe2e8b6b871726b0
SHA1 bb9841763eb23c6afcd669f03b385f8a916d6446
SHA256 032acea4287478ed739bc2d35cc383ce04e66b72af7b35a6be74e031f1703db9
SHA512 5866879ce84440597d0d4aacd4f3364b86853f40954606dd671d005d976f9eb58e0872adedc4144158de513ecac964d2cd8e659096571bf19af9ef177c848147

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\bootstrap[1].css

MD5 42ee71e80692df158e8e931b98c76456
SHA1 4a6f72b057a1972416fd43f6d30d3a29dd162d4d
SHA256 6eaa8db626262c9e133fc58fbbdc0a3ac809f5128c7f1cc5ae70292b90239788
SHA512 21ccadc7ef0eac9259dafc2b91a38cee81adc97234dafa5f2969818e3156422d2dbe43e35ded2c633abe348b497ebb5ef92c74a6ab225fbe25f93964fc42f48f

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\E87CE99F124623F95572A696C80EFCAF_AB9E6ABDE5D225B32CD1A91CAF7467E4

MD5 a4eb2d14306a61b0b58ee8e8725d39f4
SHA1 4dece1fe3272705a51d5abf73c8a6b2154110c85
SHA256 0ba47893495344fcdafab9a5ae046e5884dae0a7afa0678eee102cbf8108f909
SHA512 dedced0cfebeeee3e247d194d590e86a64fb5383af0d90e2bf63af4b1f2263dcdecc0a1519fc0d03ffb7d1eac94c6271b3f9a59cc94685a1926534c8b4a888fa

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\E87CE99F124623F95572A696C80EFCAF_AB9E6ABDE5D225B32CD1A91CAF7467E4

MD5 1df7cc785d4609c423bf2ba0a8e0d86b
SHA1 59be092b252916c8c6502665eb8b4255233e3497
SHA256 29e7cfd934a43eee20d011c56ff25529f7be1010e27aa940245b3505d1f70b3f
SHA512 f627865850653dcc46a4c6c243461bb34877f36d7b052fbe53374165be716cbeb70c5c232e4a4824306973b08743377c8074d657fc59041ea098e4353f84fddd

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\styles-skin-preset-2[1].css

MD5 51573964ee37ba972e57d8a0644e23ad
SHA1 956d89bb7c6bd391492752eab067542a36dcbec1
SHA256 243bcde3c3c6814a480d6c5ff0bd10a97054f4389b44b32df16b405e66378dde
SHA512 84951f06bd32ebfdb172a93ab26d9da350cd9394d66a14d478ee17ff176c4f13136da701da9e044d6ce7a47b3ee06dd5a7edf03452cb94bd44b3d30b6ff25299

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9O2R4OFY\personify-skin[1].js

MD5 25278195b897edf2df2e819548bb4843
SHA1 a0f4808b48167e2bd6c3a7ed9fe9e46e6bf9035a
SHA256 e5454d16821c7fad95be84d57c7debcceb6c8e1b60d269a9255417a7f2dbc9f1
SHA512 9102b152367416742e264df8bcac8fd51961471e7c09c37b81384cec56062876a57ce7b61fbe5e48f6886b488d724e52565901764c8100aeaafa8948bb7ac98a

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\cart-icons[1].png

MD5 b7d3f5595878f6bdbc7011596b565667
SHA1 9cea868f7c3afd191f3f03eb1bfdd7b4765f874d
SHA256 46b0b1378592b738c83c2258915af254aa47d39933c86b3ef565bb9133299480
SHA512 d87e0a858e59750bb4519d61c0f2db9bcf47bc143123dc2f0d8df7dc50ceef37030bc63416f7cbcb261af237ccbfcbc34dc2b666a0b876a5a17f9bce03a06730

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\EUS09A1G\soa_logo_text_header[1].png

MD5 d2192b2adf7a7dd873d1d0944e81bfc7
SHA1 85481cc5950d0869d78a697ba3f64ce38bca19a4
SHA256 99de2ac6647e08735eccccc6679ac6fc83e9d526288b61388502133024a8f4b3
SHA512 105acb74a4fa799a216b2a19af7ffc5cdf453b9347a7204ad58873b7ddd96867fa0ca3613836b790ec60acd7aa60d034e89c9fdcb36f164de9f97f45c0683bf6

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9O2R4OFY\nav_bg[1].gif

MD5 644dd7598e75a6bc5d5f583cd1fc1f72
SHA1 15cb30f1520d0aa27d83bdcee2c777f6f3593648
SHA256 49ca304188b19de038c5ae2f5fa6c572fbe8d0a93ef4aedb75970ff044b28310
SHA512 2228d8c5e01c41a5c24136e65dfff2672cadce5c28b97e4304fcc5814b7b95eca65b98e6b745400320134c2a4b471b9bdcf432e97180688a09b758046b183fa5

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\EUS09A1G\footer-bg[1].png

MD5 4ddd48d2b9c4762c956e600e60252f34
SHA1 c8d330fa5806c1486c4fcf35e134d91eaa4cf45c
SHA256 9fbb936ba0b2dccad1ee99077a04e4006e49e61e532ac941b3d384949bf33f79
SHA512 a5c4cf095df4eda84ef2d8d6010859f5e9550df32c79c58ea32c9c6cb4ce21eaab5a2b8964515d08927e321aac0f2b99055d0ed71020ff696be2a5f86c364842

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\EUS09A1G\utils-min[2].js

MD5 ec35faedf673c705ee96cfa754eeed65
SHA1 d2b28e7991f50da6b5fe5abae8187d2581f74de7
SHA256 910f4802f49ee83bed7a4456714938d103b5aefe27dfdf16c610eddb7dec19f4
SHA512 f6f1b69ad732d34de944fcc2897c37dc72d0a5e0f5fc57524ce03c9e75e25b4fbba927f6d672c06003d5cafdc3f43e282f8aa63b0342b03e1139bd7f7355014f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\responsivemobilemenu[1].js

MD5 a40355bb331f0fa3388aa640faa4cf2c
SHA1 a4c6795db0eaa5176ef7c739378ed61b53525f5d
SHA256 2623e2ee22bfb316faa76de20e3c4435a707ce3860b5e04a9dedfac657709f4b
SHA512 b8a1e9ee8ac4343f82497c3521ff2c642ae1e0082fd732e32dc4f7ced2f14928362b77191f3b79e9bff61efbf3c1b079209e3241df8f50360e39daac854e9e19

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\PersonifyScriptResource[2].css

MD5 60a1c5ef97c1d2cfca970bfd50c7126f
SHA1 f296a02252254d596502e6c596477d9beed1ccb1
SHA256 6c0582bac5e1791f52ffc07f8a57b213e98470ba86835d30b06bcf76d0a772a2
SHA512 d1013fc4020c1890cee659a00d471420b9f7a30c735061bbcaa9413f16b1c05cc519bcf275a90d5ffaf535340726b426055c0a7984fa84e1229049b18c5eb2ef

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\top_nav_bg[1].png

MD5 92999ce517ecd2416b1801abb61838cb
SHA1 98b328508f1e08bcecad9f5e57e67dec60324e07
SHA256 800a0ec0048ea081cfad5bee4bb4e5240ba927c9a63fe91caf764001ec60af27
SHA512 b362e95124345c3c112276e7b914b7400968c808198270e14d8b0b9196bdb6b46c2baa61866c1a7760a33316168354471ae4ea1bdb26021512f931c1dccb12a1

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\logo-soa-rgb[1].jpg

MD5 5daf97ba457b9741ffda9e7ea3fb2f9e
SHA1 2869c5d1fcde85875a5df1283477d822e07a1578
SHA256 9f692371538a5bfac98c934c7102890aba2b6fb2c396d040e68a6fc589470b98
SHA512 a6a0219b44b775dbac79bcd83975f47e938e48201967613bc3aba4c9928b3066b58ff70176136a5fa9de760b9016f1119465b53b4d579fa1264662901d4ba7e5

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\79XHPHQP\FSP[1].htm

MD5 46126d0070f15b73551d01398b802f49
SHA1 20cb2e2fa67319c387f4b0cc7bb44c595fcf24bf
SHA256 1b687c73aa38a0d22956cfef8c718a33b281abb20a49c7b66713e235982bf220
SHA512 9ef5fe3c503c31fed54d6a727d6e2938c2869f4a160668902281ff4ffbdfe010cd0f5d51483a7a3def40d25207619bd8017ec586476b9a8c9bd040ee888bfb1c

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\nr-spa-1216.min[1].js

MD5 63e2df852d15ab21d7ff8fc4363222e8
SHA1 7ee401ba652db0a4ec960350e17216cda01e22fb
SHA256 545156adeae44dadc82b98d504f805ebe77fb79c928ef34eed1057bb9d4cb8fe
SHA512 baad17c762461527b270b57ef294e28beff92b3a66829b8ddd8788a791aebb0a40be849bfc79fcfc5cb0d7ffc7fd709ca6cd6a61cac878ce60f585d40f214970

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BXT2EV6Y\PersonifyScriptResource[3].css

MD5 b2c6ad983b635ad8f67d926a19bfabc7
SHA1 d2cefe88de8c54c0554c183ff6f4cd1b399d9e26
SHA256 7361f7edbacb4b8313e81ff247da600d7f859de1fa3af28dcf70188cebc1f304
SHA512 c7e0fbd8a2b5efe1b3a47087ba7a72714df82d61b980d4f0a964823b5eb4262c4aa42be0b351dc5815186556e8bc5cf67aa50f80a5ab244b1a05274327bdaed5

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_49536AB5156BDD74EFF881D01C36A419

MD5 2a53fc635c3fb829b2a1e32a19a49af5
SHA1 d7ccf9bf26e6eb7ab52752d105087c1db28a60d6
SHA256 2d7a421f191109614d9758ac8fcc248dc89602264f7933f569f0600ede338783
SHA512 7360bccea660392602e4dd3de1c2b237c64c7329b73f2657309ba05f5ade283a9058ff9deb24728eb1b405db75eaa19c1fc7d45faf39f834a8288dd8b765ad02

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_49536AB5156BDD74EFF881D01C36A419

MD5 af05a57dc39d9b35bff2ec1cfba564d4
SHA1 477a3427832f77d306bc614d79569a7e664e43eb
SHA256 cf7077777106d8a4b75c57f4469d46bc5901cc441f4e0db749ec7a840f6ac17a
SHA512 26f0bce2846076c23ac20a9a5a0c0f952cfc6354d9197363f402b842a507ebf7a05df25a788539958d0e933f5ab50c71bda266ffaf2c53ee0e468f12464ad1ed

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\KQ0ARVS8\suggestions[1].en-US

MD5 5a34cb996293fde2cb7a4ac89587393a
SHA1 3c96c993500690d1a77873cd62bc639b3a10653f
SHA256 c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
SHA512 e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee