Description	Indicator	Process	Target
Set value (int)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\wuauserv\Start = "3"	C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe	N/A

Downloads MZ/PE file

Checks computer location settings

Description	Indicator	Process	Target
Key value queried	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Key value queried	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Key value queried	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Key value queried	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation	C:\Users\Admin\Downloads\MinecraftInstaller.exe	N/A
Key value queried	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Key value queried	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Key value queried	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Key value queried	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Key value queried	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A

Executes dropped EXE

Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\gldriverquery64.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\gldriverquery.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MinecraftInstaller.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MinecraftInstaller.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MinecraftInstaller.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MinecraftInstaller.exe	N/A
N/A	N/A	C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\MinecraftInstaller.exe	N/A

Loads dropped DLL

Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A

Adds Run key to start application

persistence

Description	Indicator	Process	Target
Set value (str)	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Steam = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -silent"	C:\Users\Admin\Downloads\SteamSetup.exe	N/A

Checks installed software on the system

discovery

Detected potential entity reuse from brand microsoft.

phishing microsoft

Drops file in Program Files directory

Description	Indicator	Process	Target
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_050_menu_0311.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\public\steambootstrapper_bulgarian.txt_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\shared_dpad_down_sm.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps_color_outlined_button_square_lg.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps4_trackpad_click.svg_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_060_vehicle_0070.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps5_trackpad_l_left.svg_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\resource\layout\deletecustomimagedialog.layout_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\localization\steampops_dutch-json.js_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_button_steam_lg.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\libraries\libraries~32b5733f1.js_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_servers_mousedown.tga_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\support_flag_top.tga_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\resource\multiple_screenshots.tga_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\shared_button_y_sm.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps5_trackpad_r_touch_lg.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\public\ssa\ssa_english_bigpicture.html_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\localization\xbox_360_norwegian.txt_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\resource\overlay_portuguese.txt_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\chord_apple.vdf_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\resource\EasyNotification.res_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\streaming_client.exe_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_035_magic_0340.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps_dpad_right_lg.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\resource\filter_banned_finnish.txt.gz_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\public\steamui_spanish.txt_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\resource\layout\gamespage_grid.layout_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\bg_security_code_entry.tga_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\localization\shared_bulgarian-json.js_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\public\ScreenshotErrorNotification.res_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_110_social_0301.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\streaming_shortcut_32.tga_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\shared_buttons_e.svg_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_075_utility_030.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\switchpro_l2.svg_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps4_trackpad_r_touch_sm.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps5_r2_soft_md.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_ltrackpad_up_md.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\shared_dpad_up_sm.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\localization\steamui_arabic-json.js_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps_color_outlined_button_triangle_md.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sd_button_view_md.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\steam\cached\SettingsSubInterface.res_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps4_l1_sm.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\shared_dpad_down_md.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\switchpro_lstick_left.svg_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\localization\reducedui_english-json.js_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps5_trackpad_r_ring_sm.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps5_trackpad_l_left_lg.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\bin\cef\cef.win7x64\api-ms-win-core-heap-l1-1-0.dll_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\shared_rstick_right_lg.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sc_rt_click_lg.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\btnDefTopRight.tga_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\grid_btm_focus2.tga_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\steam\cached\steamui_postlogon_polish.txt_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sc_touchpad_md.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_040_act_0329.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\xbox_p2_sm.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\switchpro_button_capture.svg_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps4_trackpad_r_swipe.svg_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\resource\invite.tga_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\switchpro_rstick_left_sm.png_	C:\Program Files (x86)\Steam\steam.exe	N/A
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps4_r2.svg_	C:\Program Files (x86)\Steam\steam.exe	N/A

Enumerates physical storage devices

Checks processor information in registry

Description	Indicator	Process	Target
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	C:\Program Files (x86)\Steam\steam.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe	N/A
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	C:\Program Files (x86)\Steam\steam.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	C:\Program Files (x86)\Steam\steam.exe	N/A
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	C:\Program Files (x86)\Steam\steam.exe	N/A
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	C:\Program Files (x86)\Steam\steam.exe	N/A
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A

Enumerates system info in registry

Description	Indicator	Process	Target
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A

Modifies data under HKEY_USERS

Description	Indicator	Process	Target
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00	C:\Windows\system32\LogonUI.exe	N/A
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271"	C:\Windows\system32\LogonUI.exe	N/A
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271"	C:\Windows\system32\LogonUI.exe	N/A
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1"	C:\Windows\system32\LogonUI.exe	N/A
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	C:\Windows\system32\LogonUI.exe	N/A
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040"	C:\Windows\system32\LogonUI.exe	N/A
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040"	C:\Windows\system32\LogonUI.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	C:\Windows\system32\LogonUI.exe	N/A
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808"	C:\Windows\system32\LogonUI.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM	C:\Windows\system32\LogonUI.exe	N/A
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "206"	C:\Windows\system32\LogonUI.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	C:\Windows\system32\LogonUI.exe	N/A
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89"	C:\Windows\system32\LogonUI.exe	N/A
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10"	C:\Windows\system32\LogonUI.exe	N/A
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1"	C:\Windows\system32\LogonUI.exe	N/A

Modifies registry class

Description	Indicator	Process	Target
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\ = "URL:steamlink protocol"	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\MACHINE\Software\Classes\steamlink\DefaultIcon	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\""	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steamlink\DefaultIcon\ = "steam.exe"	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steam\DefaultIcon	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steam\Shell\Open	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steamlink\ = "URL:steamlink protocol"	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steamlink\Shell\Open	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steam\URL Protocol	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\Moniker = "cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
Key created	\REGISTRY\MACHINE\Software\Classes\steam	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\ = "URL:steam protocol"	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open\Command	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\MACHINE\Software\Classes\steamlink	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steam\ = "URL:steam protocol"	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steamlink\DefaultIcon	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steamlink\Shell\Open\Command	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
Key created	\REGISTRY\MACHINE\Software\Classes\steam\Shell\Open\Command	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open\Command	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\DefaultIcon\ = "steam.exe"	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steam\Shell	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steamlink	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3169499791-3545231813-3156325206-1000\{B9272DCD-DBC6-481A-ACEE-83D79079F7F7}	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\DisplayName = "Chrome Sandbox"	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\Children	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\URL Protocol	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\DefaultIcon\ = "steam.exe"	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steam\Shell\Open\Command	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steamlink\Shell	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\MACHINE\Software\Classes\steam\DefaultIcon	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\MACHINE\Software\Classes\steamlink\Shell\Open\Command	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steam	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steam\DefaultIcon\ = "steam.exe"	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\""	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\URL Protocol	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steam	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\""	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steamlink\URL Protocol	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000_Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\""	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A

NTFS ADS

Description	Indicator	Process	Target
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 305147.crdownload:SmartScreen	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 166816.crdownload:SmartScreen	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A

Suspicious behavior: EnumeratesProcesses

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A

Suspicious behavior: GetForegroundWindowSpam

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A

Suspicious behavior: LoadsDriver

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A
N/A	N/A	N/A	N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A

Suspicious use of AdjustPrivilegeToken

Description	Indicator	Process	Target
Token: 33	N/A	C:\Windows\system32\AUDIODG.EXE	N/A
Token: SeIncBasePriorityPrivilege	N/A	C:\Windows\system32\AUDIODG.EXE	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe	N/A

Suspicious use of FindShellTrayWindow

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A

Suspicious use of SendNotifyMessage

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A

Suspicious use of SetWindowsHookEx

Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\Downloads\SteamSetup.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\bin\steamservice.exe	N/A
N/A	N/A	C:\Program Files (x86)\Steam\steam.exe	N/A
N/A	N/A	C:\Windows\system32\LogonUI.exe	N/A

Suspicious use of WriteProcessMemory

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\Run desktop apps online.html

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff8c9246f8,0x7fff8c924708,0x7fff8c924718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2916 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5256 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5340 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3468 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3448 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5352 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5516 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3440 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3420 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3580 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6016 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x528 0x3ec

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6164 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3580 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1912 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7100 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6588 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1752 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1932 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6784 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6512 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4932 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaFoundationService --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=6924 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5912 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6380 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2728 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2708 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7324 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2728 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6968 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4200 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6560 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7364 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7224 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7384 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7076 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7024 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1940 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6252 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7276 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=1064 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7364 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8020 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7932 /prefetch:8

C:\Users\Admin\Downloads\SteamSetup.exe

"C:\Users\Admin\Downloads\SteamSetup.exe"

C:\Program Files (x86)\Steam\bin\steamservice.exe

"C:\Program Files (x86)\Steam\bin\steamservice.exe" /Install

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe"

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" "-lang=en_US" "-cachedir=C:\Users\Admin\AppData\Local\Steam\htmlcache" "-steampid=5328" "-buildid=1718305227" "-steamid=0" "-logdir=C:\Program Files (x86)\Steam\logs" "-uimode=7" "-startcount=0" "-userdatadir=C:\Users\Admin\AppData\Local\Steam\cefdata" "-steamuniverse=Public" "-realm=Global" "-clientui=C:\Program Files (x86)\Steam\clientui" "-steampath=C:\Program Files (x86)\Steam\steam.exe" "-launcher=0" --valve-enable-site-isolation --enable-smooth-scrolling --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-quick-menu "--disable-features=SpareRendererForSitePerProcess,DcheckIsFatal"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\Admin\AppData\Local\CEF\User Data" --url=https://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1718305227 --initial-client-data=0x368,0x36c,0x370,0x344,0x374,0x7fff7bacee38,0x7fff7bacee48,0x7fff7bacee58

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1718305227 --steamid=0 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=1596 --field-trial-handle=1728,i,1916030358326777151,2685699250002808719,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1718305227 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=2256 --field-trial-handle=1728,i,1916030358326777151,2685699250002808719,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files (x86)\Steam\bin\gldriverquery64.exe

.\bin\gldriverquery64.exe

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1718305227 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=2512 --field-trial-handle=1728,i,1916030358326777151,2685699250002808719,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1718305227 --steamid=0 --first-renderer-process --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2988 --field-trial-handle=1728,i,1916030358326777151,2685699250002808719,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\gldriverquery.exe

.\bin\gldriverquery.exe

C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe

.\bin\vulkandriverquery64.exe

C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe

.\bin\vulkandriverquery.exe

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1718305227 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3644 --field-trial-handle=1728,i,1916030358326777151,2685699250002808719,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1718305227 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3824 --field-trial-handle=1728,i,1916030358326777151,2685699250002808719,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7628 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7784 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1718305227 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=1700 --field-trial-handle=1728,i,1916030358326777151,2685699250002808719,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1718305227 --steamid=0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=3820 --field-trial-handle=1728,i,1916030358326777151,2685699250002808719,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1718305227 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3756 --field-trial-handle=1728,i,1916030358326777151,2685699250002808719,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1718305227 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3704 --field-trial-handle=1728,i,1916030358326777151,2685699250002808719,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1718305227 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3840 --field-trial-handle=1728,i,1916030358326777151,2685699250002808719,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1718305227 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3948 --field-trial-handle=1728,i,1916030358326777151,2685699250002808719,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7860 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7812 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1064 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6892 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,1494537402804315916,12645789566284276329,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

C:\Users\Admin\Downloads\MinecraftInstaller.exe

"C:\Users\Admin\Downloads\MinecraftInstaller.exe"

C:\Users\Admin\Downloads\MinecraftInstaller.exe

"C:\Users\Admin\Downloads\MinecraftInstaller.exe"

C:\Users\Admin\Downloads\MinecraftInstaller.exe

"C:\Users\Admin\Downloads\MinecraftInstaller.exe"

C:\Users\Admin\Downloads\MinecraftInstaller.exe

"C:\Users\Admin\Downloads\MinecraftInstaller.exe"

C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe

"C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe" scenarioMinecraft

C:\Users\Admin\Downloads\MinecraftInstaller.exe

"C:\Users\Admin\Downloads\MinecraftInstaller.exe"

C:\Windows\system32\LogonUI.exe

"LogonUI.exe" /flags:0x4 /state0:0xa38f1855 /state1:0x41c64e6d

Network

Country	Destination	Domain	Proto
US	8.8.8.8:53	www.runapps.org	udp
US	172.67.137.97:443	www.runapps.org	tcp
US	172.67.137.97:443	www.runapps.org	tcp
US	8.8.8.8:53	apps.identrust.com	udp
NL	23.63.101.152:80	apps.identrust.com	tcp
US	8.8.8.8:53	97.137.67.172.in-addr.arpa	udp
US	8.8.8.8:53	152.101.63.23.in-addr.arpa	udp
US	8.8.8.8:53	88.251.17.2.in-addr.arpa	udp
GB	216.58.201.104:445	www.googletagmanager.com	tcp
US	8.8.8.8:53	g.bing.com	udp
US	204.79.197.237:443	g.bing.com	tcp
GB	216.58.201.104:139	www.googletagmanager.com	tcp
NL	23.62.61.194:443	www.bing.com	tcp
N/A	224.0.0.251:5353		udp
US	8.8.8.8:53	237.197.79.204.in-addr.arpa	udp
US	8.8.8.8:53	194.61.62.23.in-addr.arpa	udp
NL	23.62.61.194:443	www.bing.com	tcp
US	8.8.8.8:53	r.bing.com	udp
US	8.8.8.8:53	th.bing.com	udp
NL	23.62.61.113:443	th.bing.com	tcp
NL	23.62.61.97:443	th.bing.com	tcp
NL	23.62.61.97:443	th.bing.com	tcp
NL	23.62.61.113:443	th.bing.com	tcp
US	8.8.8.8:53	113.61.62.23.in-addr.arpa	udp
US	8.8.8.8:53	97.61.62.23.in-addr.arpa	udp
US	8.8.8.8:53	login.microsoftonline.com	udp
NL	20.190.160.14:443	login.microsoftonline.com	tcp
US	8.8.8.8:53	14.160.190.20.in-addr.arpa	udp
US	8.8.8.8:53	services.bingapis.com	udp
US	13.107.5.80:443	services.bingapis.com	tcp
US	8.8.8.8:53	80.5.107.13.in-addr.arpa	udp
US	8.8.8.8:53	71.31.126.40.in-addr.arpa	udp
US	8.8.8.8:53	167.154.64.172.in-addr.arpa	udp
US	8.8.8.8:53	bing.com	udp
US	13.107.21.200:443	bing.com	tcp
US	8.8.8.8:53	183.59.114.20.in-addr.arpa	udp
US	8.8.8.8:53	200.21.107.13.in-addr.arpa	udp
US	8.8.8.8:53	18.31.95.13.in-addr.arpa	udp
US	8.8.8.8:53	www.xbox.com	udp
BE	104.90.24.58:443	www.xbox.com	tcp
BE	104.90.24.58:443	www.xbox.com	tcp
US	8.8.8.8:53	58.24.90.104.in-addr.arpa	udp
US	8.8.8.8:53	assets-www.xbox.com	udp
US	8.8.8.8:53	cdnjs.cloudflare.com	udp
US	8.8.8.8:53	www.microsoft.com	udp
BE	104.90.24.58:443	assets-www.xbox.com	tcp
BE	104.90.24.58:443	assets-www.xbox.com	tcp
BE	104.90.24.58:443	assets-www.xbox.com	tcp
BE	104.90.24.58:443	assets-www.xbox.com	tcp
BE	104.90.24.58:443	assets-www.xbox.com	tcp
BE	104.90.24.58:443	assets-www.xbox.com	tcp
US	104.17.25.14:443	cdnjs.cloudflare.com	tcp
GB	2.21.189.233:443	www.microsoft.com	tcp
US	8.8.8.8:53	14.25.17.104.in-addr.arpa	udp
US	8.8.8.8:53	233.189.21.2.in-addr.arpa	udp
US	8.8.8.8:53	wcpstatic.microsoft.com	udp
US	13.107.246.64:443	wcpstatic.microsoft.com	tcp
US	8.8.8.8:53	res.public.onecdn.static.microsoft	udp
US	8.8.8.8:53	mem.gfx.ms	udp
GB	2.21.190.46:443	res.public.onecdn.static.microsoft	tcp
US	13.107.246.64:443	mem.gfx.ms	tcp
US	8.8.8.8:53	172.214.232.199.in-addr.arpa	udp
US	8.8.8.8:53	64.246.107.13.in-addr.arpa	udp
NL	20.190.160.14:443	login.microsoftonline.com	tcp
US	8.8.8.8:53	js.monitor.azure.com	udp
US	13.107.246.64:443	js.monitor.azure.com	tcp
US	13.107.246.64:443	js.monitor.azure.com	tcp
US	8.8.8.8:53	199.189.21.2.in-addr.arpa	udp
US	8.8.8.8:53	46.190.21.2.in-addr.arpa	udp
US	8.8.8.8:53	14.251.17.2.in-addr.arpa	udp
US	8.8.8.8:53	emerald.xboxservices.com	udp
US	13.107.246.64:443	emerald.xboxservices.com	tcp
US	8.8.8.8:53	browser.events.data.microsoft.com	udp
US	8.8.8.8:53	catalog.gamepass.com	udp
US	20.42.65.84:443	browser.events.data.microsoft.com	tcp
US	2.17.251.30:443	catalog.gamepass.com	tcp
US	20.42.65.84:443	browser.events.data.microsoft.com	tcp
US	20.42.65.84:443	browser.events.data.microsoft.com	tcp
US	2.17.251.30:443	catalog.gamepass.com	tcp
US	8.8.8.8:53	acctcdn.msauth.net	udp
US	8.8.8.8:53	logincdn.msftauth.net	udp
US	8.8.8.8:53	acctcdn.msftauth.net	udp
US	152.199.21.175:443	acctcdn.msftauth.net	tcp
US	13.107.246.64:443	acctcdn.msauth.net	tcp
US	8.8.8.8:53	acctcdnmsftuswe2.azureedge.net	udp
US	152.199.21.175:443	acctcdn.msftauth.net	tcp
US	8.8.8.8:53	acctcdnvzeuno.azureedge.net	udp
US	8.8.8.8:53	lgincdnmsftuswe2.azureedge.net	udp
US	8.8.8.8:53	lgincdnvzeuno.azureedge.net	udp
US	8.8.8.8:53	88.156.103.20.in-addr.arpa	udp
US	8.8.8.8:53	30.251.17.2.in-addr.arpa	udp
US	8.8.8.8:53	84.65.42.20.in-addr.arpa	udp
US	8.8.8.8:53	175.21.199.152.in-addr.arpa	udp
US	152.199.21.175:443	lgincdnvzeuno.azureedge.net	tcp
US	8.8.8.8:53	ipv6.login.live.com	udp
US	8.8.8.8:53	signup.live.com	udp
US	13.107.42.22:443	signup.live.com	tcp
US	13.107.42.22:443	signup.live.com	tcp
US	8.8.8.8:53	aka.ms	udp
US	8.8.8.8:53	22.42.107.13.in-addr.arpa	udp
US	8.8.8.8:53	fpt.live.com	udp
US	52.167.30.171:443	fpt.live.com	tcp
US	8.8.8.8:53	fpt2.microsoft.com	udp
US	8.8.8.8:53	fpt.microsoft.com	udp
US	8.8.8.8:53	171.30.167.52.in-addr.arpa	udp
US	8.8.8.8:53	240.221.184.93.in-addr.arpa	udp
US	8.8.8.8:53	14.227.111.52.in-addr.arpa	udp
US	8.8.8.8:53	www.microsoft.com	udp
US	8.8.8.8:53	aka.ms	udp
US	8.8.8.8:53	11.173.189.20.in-addr.arpa	udp
US	8.8.8.8:53	iframe.arkoselabs.com	udp
US	8.8.8.8:53	signup.live.com	udp
US	104.18.33.170:443	iframe.arkoselabs.com	tcp
US	8.8.8.8:53	client-api.arkoselabs.com	udp
US	8.8.8.8:53	170.33.18.104.in-addr.arpa	udp
US	8.8.8.8:53	signup.live.com	udp
US	152.199.21.175:443	lgincdnvzeuno.azureedge.net	tcp
US	8.8.8.8:53	www.xbox.com	udp
BE	104.90.24.58:443	www.xbox.com	tcp
US	8.8.8.8:53	64.159.190.20.in-addr.arpa	udp
US	8.8.8.8:53	www.microsoft.com	udp
US	8.8.8.8:53	login.microsoftonline.com	udp
CZ	2.19.217.218:443	www.microsoft.com	tcp
NL	40.126.32.134:443	login.microsoftonline.com	tcp
US	152.199.21.175:443	lgincdnvzeuno.azureedge.net	tcp
US	8.8.8.8:53	acctcdn.msftauth.net	udp
US	8.8.8.8:53	acctcdn.msauth.net	udp
US	8.8.8.8:53	mem.gfx.ms	udp
US	152.199.21.175:443	acctcdn.msftauth.net	tcp
US	13.107.246.64:443	mem.gfx.ms	tcp
US	8.8.8.8:53	lgincdnmsftuswe2.azureedge.net	udp
US	8.8.8.8:53	acctcdnmsftuswe2.azureedge.net	udp
US	8.8.8.8:53	218.217.19.2.in-addr.arpa	udp
US	8.8.8.8:53	134.32.126.40.in-addr.arpa	udp
US	8.8.8.8:53	user.auth.xboxlive.com	udp
IE	137.116.225.129:443	user.auth.xboxlive.com	tcp
US	8.8.8.8:53	xsts.auth.xboxlive.com	udp
US	8.8.8.8:53	129.225.116.137.in-addr.arpa	udp
US	13.86.100.218:443	xsts.auth.xboxlive.com	tcp
US	13.86.100.218:443	xsts.auth.xboxlive.com	tcp
US	13.86.100.218:443	xsts.auth.xboxlive.com	tcp
US	8.8.8.8:53	sisu.xboxlive.com	udp
US	20.69.192.122:443	sisu.xboxlive.com	tcp
US	20.69.192.122:443	sisu.xboxlive.com	tcp
US	8.8.8.8:53	218.100.86.13.in-addr.arpa	udp
US	8.8.8.8:53	122.192.69.20.in-addr.arpa	udp
US	8.8.8.8:53	consentreceiverfd-prod.azurefd.net	udp
US	13.107.246.64:443	consentreceiverfd-prod.azurefd.net	tcp
US	8.8.8.8:53	dlassets-ssl.xboxlive.com	udp
GB	2.21.188.8:443	dlassets-ssl.xboxlive.com	tcp
GB	2.21.188.8:443	dlassets-ssl.xboxlive.com	tcp
GB	2.21.188.8:443	dlassets-ssl.xboxlive.com	tcp
GB	2.21.188.8:443	dlassets-ssl.xboxlive.com	tcp
GB	2.21.188.8:443	dlassets-ssl.xboxlive.com	tcp
GB	2.21.188.8:443	dlassets-ssl.xboxlive.com	tcp
US	8.8.8.8:53	8.188.21.2.in-addr.arpa	udp
US	8.8.8.8:53	sisu.xboxlive.com	udp
US	8.8.8.8:53	www.xbox.com	udp
US	8.8.8.8:53	cdnjs.cloudflare.com	udp
US	8.8.8.8:53	assets-www.xbox.com	udp
US	104.17.24.14:443	cdnjs.cloudflare.com	tcp
BE	104.90.24.58:443	assets-www.xbox.com	tcp
US	8.8.8.8:53	www.microsoft.com	udp
US	8.8.8.8:53	14.24.17.104.in-addr.arpa	udp
US	8.8.8.8:53	peoplehub-public.xboxlive.com	udp
US	20.114.59.244:443	peoplehub-public.xboxlive.com	tcp
US	8.8.8.8:53	acctcdn.msftauth.net	udp
US	8.8.8.8:53	acctcdn.msauth.net	udp
US	8.8.8.8:53	logincdn.msftauth.net	udp
US	8.8.8.8:53	mem.gfx.ms	udp
US	13.107.246.64:443	mem.gfx.ms	tcp
US	152.199.21.175:443	logincdn.msftauth.net	tcp
US	8.8.8.8:53	acctcdnmsftuswe2.azureedge.net	udp
US	8.8.8.8:53	lgincdnmsftuswe2.azureedge.net	udp
US	152.199.21.175:443	logincdn.msftauth.net	tcp
US	8.8.8.8:53	244.59.114.20.in-addr.arpa	udp
US	8.8.8.8:53	o427368.ingest.sentry.io	udp
US	8.8.8.8:53	catalog.gamepass.com	udp
US	34.120.195.249:443	o427368.ingest.sentry.io	tcp
US	2.17.251.30:443	catalog.gamepass.com	tcp
US	8.8.8.8:53	images-eds-ssl.xboxlive.com	udp
GB	2.21.188.8:443	images-eds-ssl.xboxlive.com	tcp
GB	2.21.188.8:443	images-eds-ssl.xboxlive.com	tcp
US	8.8.8.8:53	249.195.120.34.in-addr.arpa	udp
US	8.8.8.8:53	emerald.xboxservices.com	udp
US	8.8.8.8:53	accounts.xboxlive.com	udp
US	13.107.246.64:443	emerald.xboxservices.com	tcp
US	8.8.8.8:53	consent.config.office.com	udp
US	20.72.69.38:443	accounts.xboxlive.com	tcp
US	8.8.8.8:53	peoplehub.xboxlive.com	udp
US	8.8.8.8:53	rta.xboxlive.com	udp
NL	20.23.69.26:443	consent.config.office.com	tcp
NL	20.23.69.26:443	consent.config.office.com	tcp
US	199.46.35.123:443	rta.xboxlive.com	tcp
CZ	2.19.216.8:443	peoplehub.xboxlive.com	tcp
CZ	2.19.216.8:443	peoplehub.xboxlive.com	tcp
CZ	2.19.216.8:443	peoplehub.xboxlive.com	tcp
US	8.8.8.8:53	26.69.23.20.in-addr.arpa	udp
US	8.8.8.8:53	123.35.46.199.in-addr.arpa	udp
US	8.8.8.8:53	8.216.19.2.in-addr.arpa	udp
US	8.8.8.8:53	38.69.72.20.in-addr.arpa	udp
US	8.8.8.8:53	xgpuwebf2p.gssv-play-prod.xboxlive.com	udp
GB	20.90.134.10:443	xgpuwebf2p.gssv-play-prod.xboxlive.com	tcp
US	199.46.35.123:443	rta.xboxlive.com	tcp
US	8.8.8.8:53	10.134.90.20.in-addr.arpa	udp
US	8.8.8.8:53	uks.core.gssv-play-prod.xboxlive.com	udp
NL	52.166.123.232:443	uks.core.gssv-play-prod.xboxlive.com	tcp
US	8.8.8.8:53	232.123.166.52.in-addr.arpa	udp
US	8.8.8.8:53	dc.services.visualstudio.com	udp
NL	20.50.88.245:443	dc.services.visualstudio.com	tcp
US	8.8.8.8:53	notificationinbox.xboxlive.com	udp
US	8.8.8.8:53	chat.xboxlive.com	udp
US	20.65.67.134:443	notificationinbox.xboxlive.com	tcp
US	13.89.223.27:443	chat.xboxlive.com	tcp
US	8.8.8.8:53	245.88.50.20.in-addr.arpa	udp
US	13.89.223.27:443	chat.xboxlive.com	tcp
US	8.8.8.8:53	184.217.19.2.in-addr.arpa	udp
US	8.8.8.8:53	134.67.65.20.in-addr.arpa	udp
US	8.8.8.8:53	27.223.89.13.in-addr.arpa	udp
BE	104.90.24.58:443	assets-www.xbox.com	tcp
GB	13.104.108.92:1108		udp
US	8.8.8.8:53	92.108.104.13.in-addr.arpa	udp
GB	13.104.113.178:1080		udp
US	8.8.8.8:53	178.113.104.13.in-addr.arpa	udp
BE	88.221.83.248:443	www.bing.com	tcp
US	8.8.8.8:53	248.83.221.88.in-addr.arpa	udp
US	8.8.8.8:53	th.bing.com	udp
US	8.8.8.8:53	r.bing.com	udp
BE	2.17.107.98:443	th.bing.com	tcp
BE	88.221.83.218:443	r.bing.com	tcp
BE	88.221.83.218:443	r.bing.com	tcp
BE	2.17.107.98:443	th.bing.com	tcp
US	8.8.8.8:53	98.107.17.2.in-addr.arpa	udp
US	8.8.8.8:53	218.83.221.88.in-addr.arpa	udp
US	8.8.8.8:53	services.bingapis.com	udp
US	13.107.5.80:443	services.bingapis.com	tcp
US	8.8.8.8:53	89.33.18.104.in-addr.arpa	udp
US	8.8.8.8:53	store.steampowered.com	udp
CZ	2.19.217.119:443	store.steampowered.com	tcp
CZ	2.19.217.119:443	store.steampowered.com	tcp
US	8.8.8.8:53	store.akamai.steamstatic.com	udp
BE	2.17.107.138:443	store.akamai.steamstatic.com	tcp
BE	2.17.107.138:443	store.akamai.steamstatic.com	tcp
BE	2.17.107.138:443	store.akamai.steamstatic.com	tcp
BE	2.17.107.138:443	store.akamai.steamstatic.com	tcp
BE	2.17.107.138:443	store.akamai.steamstatic.com	tcp
BE	2.17.107.138:443	store.akamai.steamstatic.com	tcp
US	8.8.8.8:53	119.217.19.2.in-addr.arpa	udp
US	8.8.8.8:53	cdn.akamai.steamstatic.com	udp
BE	2.17.107.138:443	store.akamai.steamstatic.com	tcp
BE	2.17.107.138:443	store.akamai.steamstatic.com	tcp
US	8.8.8.8:53	shared.akamai.steamstatic.com	udp
BE	2.17.107.152:443	cdn.akamai.steamstatic.com	tcp
BE	2.17.107.169:443	shared.akamai.steamstatic.com	tcp
BE	2.17.107.169:443	shared.akamai.steamstatic.com	tcp
BE	2.17.107.169:443	shared.akamai.steamstatic.com	tcp
BE	2.17.107.169:443	shared.akamai.steamstatic.com	tcp
BE	2.17.107.169:443	shared.akamai.steamstatic.com	tcp
BE	2.17.107.169:443	shared.akamai.steamstatic.com	tcp
BE	2.17.107.138:443	store.akamai.steamstatic.com	tcp
US	8.8.8.8:53	138.107.17.2.in-addr.arpa	udp
US	8.8.8.8:53	152.107.17.2.in-addr.arpa	udp
US	8.8.8.8:53	169.107.17.2.in-addr.arpa	udp
CZ	2.19.217.119:443	store.steampowered.com	tcp
CZ	2.19.217.119:443	store.steampowered.com	tcp
US	8.8.8.8:53	api.steampowered.com	udp
BE	104.68.92.92:443	api.steampowered.com	tcp
US	8.8.8.8:53	92.92.68.104.in-addr.arpa	udp
BE	2.17.107.152:443	cdn.akamai.steamstatic.com	tcp
BE	2.17.107.152:443	cdn.akamai.steamstatic.com	tcp
BE	2.17.107.152:443	cdn.akamai.steamstatic.com	tcp
BE	2.17.107.152:443	cdn.akamai.steamstatic.com	tcp
BE	2.17.107.152:443	cdn.akamai.steamstatic.com	tcp
US	8.8.8.8:53	cdn.steamstatic.com	udp
BE	2.17.107.200:443	cdn.steamstatic.com	tcp
US	8.8.8.8:53	r11.o.lencr.org	udp
BE	2.17.107.235:80	r11.o.lencr.org	tcp
BE	2.17.107.200:443	cdn.steamstatic.com	tcp
BE	2.17.107.200:443	cdn.steamstatic.com	tcp
US	8.8.8.8:53	200.107.17.2.in-addr.arpa	udp
US	8.8.8.8:53	11.97.55.23.in-addr.arpa	udp
US	8.8.8.8:53	235.107.17.2.in-addr.arpa	udp
US	8.8.8.8:53	aefd.nelreports.net	udp
US	2.17.251.5:443	aefd.nelreports.net	tcp
US	2.17.251.5:443	aefd.nelreports.net	udp
US	8.8.8.8:53	5.251.17.2.in-addr.arpa	udp
US	8.8.8.8:53	test.steampowered.com	udp
US	8.8.8.8:53	api.steampowered.com	udp
US	8.8.8.8:53	ipv6check-udp.steamserver.net	udp
BE	2.17.107.202:80	test.steampowered.com	tcp
US	8.8.8.8:53	ipv6check-http.steamserver.net	udp
US	8.8.8.8:53	202.107.17.2.in-addr.arpa	udp
N/A	127.0.0.1:58117		tcp
N/A	127.0.0.1:58116		tcp
US	8.8.8.8:53	api.steampowered.com	udp
BE	104.68.92.92:443	api.steampowered.com	tcp
US	8.8.8.8:53	ext4-lhr1.steamserver.net	udp
US	8.8.8.8:53	ext3-lhr1.steamserver.net	udp
GB	162.254.196.84:27033	ext4-lhr1.steamserver.net	tcp
GB	162.254.196.68:27033	ext3-lhr1.steamserver.net	tcp
US	8.8.8.8:53	ext1-lhr1.steamserver.net	udp
US	8.8.8.8:53	ext1-par1.steamserver.net	udp
GB	162.254.196.67:443	ext1-lhr1.steamserver.net	tcp
FR	185.25.182.20:27021	ext1-par1.steamserver.net	tcp
US	8.8.8.8:53	84.196.254.162.in-addr.arpa	udp
US	8.8.8.8:53	dns.google	udp
US	8.8.8.8:53	dns.google	udp
US	8.8.8.8:53	dns.google	udp
US	8.8.8.8:53	dns.google	udp
US	8.8.4.4:443	dns.google	tcp
US	8.8.8.8:443	dns.google	tcp
US	8.8.8.8:53	68.196.254.162.in-addr.arpa	udp
US	8.8.8.8:53	67.196.254.162.in-addr.arpa	udp
US	8.8.8.8:53	20.182.25.185.in-addr.arpa	udp
US	8.8.8.8:53	4.4.8.8.in-addr.arpa	udp
US	8.8.8.8:443	dns.google	udp
CZ	2.19.217.119:443	store.steampowered.com	tcp
BE	2.17.107.232:443	store.akamai.steamstatic.com	tcp
BE	2.17.107.232:443	store.akamai.steamstatic.com	tcp
BE	2.17.107.232:443	store.akamai.steamstatic.com	tcp
GB	142.250.178.14:443		tcp
BE	2.17.107.232:443	store.akamai.steamstatic.com	tcp
BE	2.17.107.232:443	store.akamai.steamstatic.com	tcp
US	8.8.8.8:53	232.107.17.2.in-addr.arpa	udp
US	8.8.8.8:53	14.178.250.142.in-addr.arpa	udp
GB	142.250.178.14:443		udp
GB	142.250.187.196:443		tcp
US	8.8.8.8:53	195.212.58.216.in-addr.arpa	udp
US	8.8.8.8:53	99.201.58.216.in-addr.arpa	udp
US	8.8.8.8:53	196.187.250.142.in-addr.arpa	udp
US	2.17.251.5:443	aefd.nelreports.net	udp
GB	142.250.187.206:443		tcp
GB	74.125.105.103:443		udp
US	8.8.8.8:53	103.105.125.74.in-addr.arpa	udp
US	8.8.8.8:53	206.187.250.142.in-addr.arpa	udp
US	8.8.4.4:443	dns.google	udp
GB	216.58.204.67:443		tcp
US	8.8.8.8:53	123.35.104.34.in-addr.arpa	udp
US	8.8.8.8:53	api.steampowered.com	udp
US	8.8.8.8:53	ipv6check-udp.steamserver.net	udp
US	8.8.8.8:53	ipv6check-http.steamserver.net	udp
US	8.8.8.8:53	test.steampowered.com	udp
BE	2.17.107.202:80	test.steampowered.com	tcp
US	8.8.8.8:53	api.steampowered.com	udp
BE	104.68.92.92:443	api.steampowered.com	tcp
GB	162.254.196.68:27038	ext3-lhr1.steamserver.net	tcp
GB	162.254.196.68:27033	ext3-lhr1.steamserver.net	tcp
GB	162.254.196.68:443	ext3-lhr1.steamserver.net	tcp
FR	185.25.182.20:27022	ext1-par1.steamserver.net	tcp
FR	185.25.182.20:27025	ext1-par1.steamserver.net	tcp
FR	185.25.182.20:443	ext1-par1.steamserver.net	tcp
US	8.8.8.8:53	ext1-ams1.steamserver.net	udp
NL	155.133.248.38:27023	ext1-ams1.steamserver.net	tcp
NL	155.133.248.38:27022	ext1-ams1.steamserver.net	tcp
US	8.8.8.8:53	38.248.133.155.in-addr.arpa	udp
US	8.8.8.8:53	ipv6check-http.steamserver.net	udp
GB	216.58.204.67:443		udp
US	8.8.8.8:53	cdn.steamstatic.com	udp
BE	2.17.107.200:443	cdn.steamstatic.com	tcp
US	8.8.8.8:53	api.steampowered.com	udp
US	8.8.8.8:53	ipv6check-udp.steamserver.net	udp
US	8.8.8.8:53	ipv6check-http.steamserver.net	udp
US	8.8.8.8:53	api.steampowered.com	udp
BE	104.68.92.92:443	api.steampowered.com	tcp
GB	162.254.196.68:27030	ext3-lhr1.steamserver.net	tcp
GB	162.254.196.68:27025	ext3-lhr1.steamserver.net	tcp
GB	162.254.196.84:443	ext4-lhr1.steamserver.net	tcp
US	8.8.8.8:53	ext2-par1.steamserver.net	udp
FR	185.25.182.52:27030	ext2-par1.steamserver.net	tcp
FR	185.25.182.52:27025	ext2-par1.steamserver.net	tcp
FR	185.25.182.20:443	ext1-par1.steamserver.net	tcp
US	8.8.8.8:53	ext2-ams1.steamserver.net	udp
NL	155.133.248.39:27034	ext2-ams1.steamserver.net	tcp
NL	155.133.248.39:27024	ext2-ams1.steamserver.net	tcp
US	8.8.8.8:53	52.182.25.185.in-addr.arpa	udp
US	8.8.8.8:53	39.248.133.155.in-addr.arpa	udp
US	8.8.8.8:53	api.steampowered.com	udp
US	8.8.8.8:53	ipv6check-udp.steamserver.net	udp
US	8.8.8.8:53	ipv6check-http.steamserver.net	udp
US	8.8.8.8:53	api.steampowered.com	udp
BE	104.68.92.92:443	api.steampowered.com	tcp
GB	162.254.196.68:27033	ext3-lhr1.steamserver.net	tcp
GB	162.254.196.84:27023	ext4-lhr1.steamserver.net	tcp
US	8.8.8.8:53	ext2-lhr1.steamserver.net	udp
GB	162.254.196.83:443	ext2-lhr1.steamserver.net	tcp
FR	185.25.182.52:27021	ext2-par1.steamserver.net	tcp
FR	185.25.182.20:27023	ext1-par1.steamserver.net	tcp
FR	185.25.182.20:443	ext1-par1.steamserver.net	tcp
NL	155.133.248.39:27033	ext2-ams1.steamserver.net	tcp
NL	155.133.248.39:27029	ext2-ams1.steamserver.net	tcp
NL	155.133.248.39:443	ext2-ams1.steamserver.net	tcp
US	8.8.8.8:53	83.196.254.162.in-addr.arpa	udp
US	8.8.8.8:53	api.steampowered.com	udp
US	8.8.8.8:53	ipv6check-http.steamserver.net	udp
BE	88.221.83.224:443	www.bing.com	tcp
US	8.8.8.8:53	224.83.221.88.in-addr.arpa	udp
US	8.8.8.8:53	api.steampowered.com	udp
US	8.8.8.8:53	ipv6check-udp.steamserver.net	udp
US	8.8.8.8:53	ipv6check-http.steamserver.net	udp
US	8.8.8.8:53	api.steampowered.com	udp
BE	104.68.92.92:443	api.steampowered.com	tcp
GB	162.254.196.68:27024	ext3-lhr1.steamserver.net	tcp
GB	162.254.196.68:27021	ext3-lhr1.steamserver.net	tcp
GB	162.254.196.84:443	ext4-lhr1.steamserver.net	tcp
FR	185.25.182.20:27024	ext1-par1.steamserver.net	tcp
FR	185.25.182.20:27028	ext1-par1.steamserver.net	tcp
FR	185.25.182.52:443	ext2-par1.steamserver.net	tcp
NL	155.133.248.39:27022	ext2-ams1.steamserver.net	tcp
NL	155.133.248.39:27024	ext2-ams1.steamserver.net	tcp
US	8.8.8.8:53	dns.google	udp
US	8.8.8.8:53	dns.google	udp
US	8.8.4.4:443	dns.google	udp
BE	104.68.92.92:443	api.steampowered.com	tcp
BE	104.68.92.92:443	api.steampowered.com	tcp
BE	104.68.92.92:443	api.steampowered.com	tcp
BE	104.68.92.92:443	api.steampowered.com	tcp
GB	142.250.187.196:443		udp
US	8.8.8.8:53	api.steampowered.com	udp
US	8.8.8.8:53	ipv6check-udp.steamserver.net	udp
US	8.8.8.8:53	ipv6check-http.steamserver.net	udp
US	8.8.8.8:53	api.steampowered.com	udp
BE	104.68.92.92:443	api.steampowered.com	tcp
GB	162.254.196.68:27032	ext3-lhr1.steamserver.net	tcp
GB	162.254.196.68:443	ext3-lhr1.steamserver.net	tcp
GB	162.254.196.67:27035	ext1-lhr1.steamserver.net	tcp
FR	185.25.182.52:27028	ext2-par1.steamserver.net	tcp
FR	185.25.182.20:27024	ext1-par1.steamserver.net	tcp
FR	185.25.182.20:443	ext1-par1.steamserver.net	tcp
NL	155.133.248.39:27031	ext2-ams1.steamserver.net	tcp
NL	155.133.248.38:27020	ext1-ams1.steamserver.net	tcp
US	8.8.8.8:53	www.minecraft.net	udp
BE	2.17.107.155:443	www.minecraft.net	tcp
BE	2.17.107.155:443	www.minecraft.net	tcp
US	8.8.8.8:53	js.monitor.azure.com	udp
US	8.8.8.8:53	www.clarity.ms	udp
US	8.8.8.8:53	www.microsoft.com	udp
US	8.8.8.8:53	wcpstatic.microsoft.com	udp
US	8.8.8.8:53	assets.adobedtm.com	udp
CZ	2.19.217.218:443	www.microsoft.com	tcp
US	13.107.246.64:443	wcpstatic.microsoft.com	tcp
US	13.107.253.64:443	js.monitor.azure.com	tcp
US	13.107.246.64:443	wcpstatic.microsoft.com	tcp
SE	23.34.232.228:443	assets.adobedtm.com	tcp
US	8.8.8.8:53	155.107.17.2.in-addr.arpa	udp
US	8.8.8.8:53	64.253.107.13.in-addr.arpa	udp
US	8.8.8.8:53	228.232.34.23.in-addr.arpa	udp
US	8.8.8.8:53	s.go-mpulse.net	udp
BE	23.55.96.141:443	s.go-mpulse.net	tcp
US	8.8.8.8:53	minecraftprivacy.microsoft.com	udp
BE	2.17.107.203:443	minecraftprivacy.microsoft.com	tcp
US	8.8.8.8:53	c.go-mpulse.net	udp
US	8.8.8.8:53	141.96.55.23.in-addr.arpa	udp
US	8.8.8.8:53	203.107.17.2.in-addr.arpa	udp
BE	104.90.24.133:443	c.go-mpulse.net	tcp
BE	104.90.24.133:443	c.go-mpulse.net	tcp
US	8.8.8.8:53	x.clarity.ms	udp
US	20.114.190.119:443	x.clarity.ms	tcp
US	8.8.8.8:53	browser.events.data.microsoft.com	udp
US	20.189.173.1:443	browser.events.data.microsoft.com	tcp
US	8.8.8.8:53	119.190.114.20.in-addr.arpa	udp
US	8.8.8.8:53	133.24.90.104.in-addr.arpa	udp
US	20.189.173.1:443	browser.events.data.microsoft.com	tcp
US	20.189.173.1:443	browser.events.data.microsoft.com	tcp
US	8.8.8.8:53	1.173.189.20.in-addr.arpa	udp
US	8.8.8.8:53	cdnssl.clicktale.net	udp
GB	13.224.81.95:443	cdnssl.clicktale.net	tcp
US	8.8.8.8:53	microsoftmscompoc.tt.omtrdc.net	udp
US	8.8.8.8:53	target.microsoft.com	udp
US	8.8.8.8:53	95.81.224.13.in-addr.arpa	udp
US	8.8.8.8:53	36.10.230.54.in-addr.arpa	udp
US	8.8.8.8:53	9.228.82.20.in-addr.arpa	udp
US	8.8.8.8:53	x5s5cjyccfvzwztmlhja-f-9664169a1-clientnsv4-s.akamaihd.net	udp
US	8.8.8.8:53	0217991e.akstat.io	udp
CZ	2.19.217.218:443	www.microsoft.com	tcp
US	8.8.8.8:53	th.bing.com	udp
US	8.8.8.8:53	r.bing.com	udp
BE	88.221.83.240:443	r.bing.com	tcp
BE	88.221.83.240:443	r.bing.com	tcp
BE	88.221.83.240:443	r.bing.com	tcp
BE	88.221.83.240:443	r.bing.com	tcp
US	8.8.8.8:53	240.83.221.88.in-addr.arpa	udp
US	8.8.8.8:53	login.microsoftonline.com	udp
NL	40.126.32.68:443	login.microsoftonline.com	tcp
US	8.8.8.8:53	68.32.126.40.in-addr.arpa	udp
US	8.8.8.8:53	storage.live.com	udp
IE	20.135.20.1:443	storage.live.com	tcp
US	8.8.8.8:53	1.20.135.20.in-addr.arpa	udp
CZ	2.19.217.218:443	www.microsoft.com	tcp
US	8.8.8.8:53	x5s5cjyccfvzwztmlhrq-f-e6b4d0c8e-clientnsv4-s.akamaihd.net	udp
US	20.114.190.119:443	x.clarity.ms	tcp
US	8.8.8.8:53	aka.ms	udp
GB	2.17.6.114:443	aka.ms	tcp
GB	2.17.6.114:443	aka.ms	tcp
US	8.8.8.8:53	launcher.mojang.com	udp
US	13.107.246.64:443	launcher.mojang.com	tcp
US	8.8.8.8:53	114.6.17.2.in-addr.arpa	udp
US	8.8.8.8:53	b7b52.playfabapi.com	udp
US	20.42.151.181:443	b7b52.playfabapi.com	tcp
US	8.8.8.8:53	181.151.42.20.in-addr.arpa	udp
US	8.8.8.8:53	241.154.82.20.in-addr.arpa	udp
US	20.42.151.181:443	b7b52.playfabapi.com	tcp
US	20.114.190.119:443	x.clarity.ms	tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5	b4a74bc775caf3de7fc9cde3c30ce482
SHA1	c6ed3161390e5493f71182a6cb98d51c9063775d
SHA256	dfad4e020a946f85523604816a0a9781091ee4669c870db2cabab027f8b6f280
SHA512	55578e254444a645f455ea38480c9e02599ebf9522c32aca50ff37aad33976db30e663d35ebe31ff0ecafb4007362261716f756b3a0d67ac3937ca62ff10e25f

\??\pipe\LOCAL\crashpad_2640_BQOAUKBDWSAJTABE

MD5	d41d8cd98f00b204e9800998ecf8427e
SHA1	da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512	cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5	c5abc082d9d9307e797b7e89a2f755f4
SHA1	54c442690a8727f1d3453b6452198d3ec4ec13df
SHA256	a055d69c6aba59e97e632d118b7960a5fdfbe35cfdfaa0de14f194fc6f874716
SHA512	ad765cddbf89472988de5356db5e0ee254ca3475491c6034fba1897c373702ab7cfa4bd21662ab862eebb48a757c3eb86b1f8ed58629751f71863822a59cd26c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	7f33396771debfa3186e33cc119057d5
SHA1	3471db943e1df76809d9c8eb9e317a3487c8994b
SHA256	ecca6455a03fae299686cac7df2ba80a52d6bdc454c4ba5904b26f3eafff583c
SHA512	9019c90aa1362b27a36fedd80b41af3095333f474de4fe02e2ec48a9fe2f91a6a95a2e09975809ff546cca9b7ed49b71ec5855baf7697ab3a73537f1eb927a8c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5	206702161f94c5cd39fadd03f4014d98
SHA1	bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256	1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512	0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5	46295cac801e5d4857d09837238a6394
SHA1	44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256	0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512	8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5	6649b5511f78658d887373c593d7c4c6
SHA1	9d8e018ad7925993e4e567468ec01dc4a0bdd777
SHA256	9de13fbe71bbf4d5f66a20ae487ff94d35ec5bc9afc439d42a59c76c18e15ffc
SHA512	c04cb23128c06b190f3f465e3546d8ab9db247d9505ef1ef21ac5ca26d53331c74e28f0461646507ab05ee677cb766d62ba879ab75664cf97e48cb9f770dd987

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	7206d2e80893d30dafdee6fb86c5e901
SHA1	d238451d068505391b6a03f398fad3d8e90a40a0
SHA256	74969eff0050d4c926643938745deaaf8ff1d88fa51d993188b514c7a3761d2c
SHA512	1ab6b7ccd68c7457c16b724c10fcc34c13c0455e18b3bd367dc889726b31e152132875d994bd1067b096af9d769e4a4b6d345ea53a573640964348808316e1d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	4237362223a6329dbee12e5a258ba9b3
SHA1	98439fba0bb0384f6328224b5d8042ea4ac64c90
SHA256	a9d8d164c456e8d6c99fd142f20a83872815ac5df4949f98f506174ce3206c4f
SHA512	6825b221b6eae3949386baca5e9da39368ce3e933c9b3022a7928c66ac4ec19ffc7985fc070b4d6607ab3cee91d5f736047920b26fc79ab51d7612a773ced79a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	86908fc625fe6d03e9ad0ed743bb4c86
SHA1	55f89db4ed28a489a21ad3fdb95e5bc5c87819b8
SHA256	2490f56054ae840887e4cfe94d9831460c11e2db2018489b2c796a53a53cbbe1
SHA512	38f7347bfb2642d640abb9d3d46c86d9b2fa38abe0793e98a4dff7a2f446485786ad9f19f00cd102c2659de81e1d93ba5e0f2e68bfca0ca78022838f6f0a5a39

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57c41b.TMP

MD5	5fb86553248647ba62203bc34cfdda87
SHA1	9b4c36a609d10041d1136a5e713912e227de1e89
SHA256	1b060963e2816ba92604f3a990f6b81b88406286527723bbbc3d17318fe78e55
SHA512	a7883e59563d4601af1261737d7ffc1b0edd378336046fe85cf17e822f3f8946e5124fb41913faf2c7ffb970c12536f0b487817e30fa8fdf4fc16e3239fb3cd6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5	2c5d4af27f0e230c62198ade697d92d9
SHA1	325d8f28b44c70726baa862fbb4ede8180589eb8
SHA256	ec6a2d5277ff4de593b08873db1cd9d5b87793e1d6c7d579842255f29285f978
SHA512	ec8b16f9020211bebeab1a4cd10df2735525586859e6bebcb34144012d4c64b3985e291a4a142bb9d18b7fa7a0d3f2d3b0fcbfb2935c8454afc134ce987d3562

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5	2e86a72f4e82614cd4842950d2e0a716
SHA1	d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256	c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512	7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5	2fa413749c8fc80fd915111a499ea6b0
SHA1	cf9dacf2451cfa462d573c454c24b9b209b31faa
SHA256	411ccb79eca67e7f61ee68ff2d0160771ed049590c35a747d2e6341eae05099b
SHA512	e4de0203a3680d9d694b76379e5c82549739ff51bf783624ac73bf4b622c69d08c0473de7f7d85a33c80354bc507d5ddc87cc8b0643e22cc661c4537711a705b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5	56d57bc655526551f217536f19195495
SHA1	28b430886d1220855a805d78dc5d6414aeee6995
SHA256	f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512	7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5	d6b36c7d4b06f140f860ddc91a4c659c
SHA1	ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256	34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512	2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5	b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1	386ba241790252df01a6a028b3238de2f995a559
SHA256	b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512	546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5	76e2533d5c0f986355fe79efb4f5e4c3
SHA1	1f26c931a1b019c96159c055b72e400ffd34cb2f
SHA256	91c7483f7086c4019bee8005e6e32b15eea1d4c4e596c13bfbfb616d0f4f6a42
SHA512	07f9f9ad2bc1ad100135494c6d3662d3e169df0d949ecff246298b1e5b6f9ffa87c75cfba323f9d6d7ad0317dc19f95da6dc22df16cca3130f035dfb2145e764

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	544b1c71438d728a17eeac79dcd295d8
SHA1	4d12c390c8bb3bb293679c58a836d61177c106e2
SHA256	5af6ebf951b7e555ec571dd272fdbb7d3a864f23d5fb690eda3768744f9141fc
SHA512	d9767d1927dc9dd378cbe56a8ec848291beac5b4ca3ae84c12d5952ba7d82df2f542f8195c0059004db8c5375d71f82a508e11f5d5a81545240e097af0b06d47

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	eea9c528b96be015cf923b1285c99eae
SHA1	f5ea1644bc4d20847b3bacd090f1a3e2dd27da61
SHA256	11cd53d4746186132beafb85e1d3dbd76ab23c015dcd5f95408c225f5ddd460e
SHA512	6bf6d51a936f3befe77bc8dca948b8cb75b1e1ae7b4c5f677ad1581beb89a040161440c494a6f084589f00be67934fb1449f97c69ad8e7fc458f0c8410386828

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000072

MD5	12e3dac858061d088023b2bd48e2fa96
SHA1	e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
SHA256	90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
SHA512	c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc

MD5	f3b25701fe362ec84616a93a45ce9998
SHA1	d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256	b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512	98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	4b469faed2c0eef445de6e3c8a53a278
SHA1	5096809614655fc1630340887ccd89ebeb89471e
SHA256	63618518e5a77e75d3bb62e6b49125a4886b142ebf754cbcc03fe934f5efcf6d
SHA512	29ceda051e4a58c613c4254053bee4d5abffff74ec7de1e38ffd3022e6c4c7ce9f965ea0ac613cb407858308764fa251220751325c674ed9270e56d68770054f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5	5093e30a300985c0a7350e0026e99928
SHA1	4c0a19f85cc0edeedb0dae0f84f505c7d8056c22
SHA256	c6b46a6aa888e9d298d58d392508b86921ada1e0377779231f3bd6d1070144e7
SHA512	55a350eac5b93d3f16411265349157b44f6ca0523fffda41dcc8ee992741a4063b6229a331da8ae84edca6ba90af7960faff727a2199199d10f74b191695b3b4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe582e8d.TMP

MD5	9512c328778f3ab2a4324f578018438b
SHA1	a67cf15fd9a2d360bee4bc664157932d57f0abde
SHA256	74adedb5be8d3dcc0359123a2b93387386dca40ae530be33896d3c1c92c9d0a0
SHA512	3dc1e4a06cf115b9acd1392767a6b17dbea16b5d1e2ec72587de4890ae93d46c3f0bb7f0a9fcf0a15c5bc93c71b9b14c6762dc86f3efdf7c16571267a01930d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	a7ce52755c795529eb1d453cb91c5061
SHA1	a7c0874b45e22735daf9de09f2a6ad1f31a30923
SHA256	57ef6284b031bf9bd8612ca12f444f467f1584b375821eb41289ddfedb20ce21
SHA512	f605b378f4c3abe7fda2b47ea02897382347d59954b4c8e88958186b1f90ce579a6ff1e03d53969e8a9458da337bc282d875c611df94707a1a0c31f90a1a1433

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	65ca26c8424ad659755c22ffd4c4de05
SHA1	525072341d50805bc4d98103c33a14db0ea12a00
SHA256	c2d5a356c9d9afdf879db171b7118369fda2f514ba3c9c023ca38eaf410b079a
SHA512	9f4f4603a679bf674fe82041c46ac2697727e866c36b4cb11842802bf98cbe01042ec5b500ea05aefece4b1dfc1a4274378b7eca167be2e7706ab1724842da3a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5	3f9b3bc5485145ca96a26959f8f0052c
SHA1	202bbaaac449cabd28f148d55b88a259ebad7710
SHA256	a0e8c9f8593442b8956e812ee1696ae8733795baae625b6a8d1d40d88b437722
SHA512	8dd0090897f3cba32094e391c20bd3f2dd1be2b9441326b0a48d609ab851cd9ddcbb3ec99e58f31859861399ddf7ceb02f60789a1b44c9116df29198a7ed5a45

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	4569ab64b9ae02cacdefd8d1ce7181b7
SHA1	8a3a9c2cea024cee27596af1e0aa552c2d9b5fc5
SHA256	7123082cadc4082c3db918507a258204a1ce3a2286a43819b71ed1692162b3a8
SHA512	6bd07023d531f6e5f4385fd9b24029ae8ce38d32b894eb83b3738e053f0861c509ba3a90a53bb3c1328852a33e4f4bbcd3039b3eab0a2be01f221aeff88f42f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	5642397579629c31472f050579b1c686
SHA1	4c4485af07a84b78559e7bbed680debe6d813d90
SHA256	3df1facdbd98843897d5e42e4bc15d07d42314eacd8b2aecdbdc7fe54587c209
SHA512	1ffd7db173820450d2175254231e2f05973ba5425696eef1a638894ed025bf5fa30644ca4aa4aa02c53b5ed5f2c3b6d2f3a2640f518c5d935e256d517f21ad8f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	c656963e10b1f79ec1493008d8d9b88b
SHA1	23369a79408e0265cbca0e108f76e94743235a51
SHA256	742e7bf72fa1d2d8e9c33ad2dc5c1b58fa404081fe50f976739b711fef208518
SHA512	081c307d098bdd192fff8073acfd2e3725ea76cfa4bea6f2b51512e9395d974ef0c28c37011e38f4a7a81dfec18ede4398720e361f8e82985a2e3801a0065c61

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	9f58e6b06580f8605941db33d7b4e9af
SHA1	34cdd1e56f3ced2a3e56eb9bf8e4ff8c2dfa35d2
SHA256	d5bce24a3c566d1295fbcc5637c837510978023061274142a84792b894ad9002
SHA512	0074dd1b4ae26bbbaf23c390932d1bc334974602b327e44ce38136b55c366afb2687c834768378bde03f228110b19dd9d9957fb2f30c7414d34b8c7810c606dc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	dbf9126bfe9ba5d9cbf9d37092e100c8
SHA1	75ca2bb0b3834bf2a2e86512e87b928a11e1173e
SHA256	02fb2a7fb1a3e614e92b617b316e22f987f889853b230c933781171f6497b8eb
SHA512	f9fd8d64a83dca18dc00ce444fafa6bec9362022cb13f2daac0982d8bb359c74e75a48858c8267e6318813936a967ca63d0f88aa9f2118bdbb5589ac7b05f54f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	ffafddc9ee8398f30080ac774a13b408
SHA1	cd7bbc9994fa9e158c5f415147498296c5187c7f
SHA256	d01c9bbbf9d467a7743e88ee37e8fd75e611ed0eb408ae81b07bcba9653dca9f
SHA512	813689acca3f13a3718db7a6e71cbccfb99e4c37d7cfc6292d252978fdff331e0f1b45997ef963b3f4752f7afe239ba61fbd5141ee46afea5ea9c0fda8189af5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	2fe372237478f12705220a7c72918f78
SHA1	99f68129671c059bec3473252230d065cc5d4fc6
SHA256	78cf401e17ed6ed0600c281228f292d8c614542157e5d9a4a3e7742fbf627f6d
SHA512	c0aa9b01fcffecc84e228be1ad7cc589733b8c64c943992a11e348f6766a8660f31ef1d80b91833bf8c3e97cb2dbb220314d7786641175c816d75cb6dab8511e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	a11a671b043caeeffed18a94c123fbe2
SHA1	b013b4271c62f9c5cfb3226601b326b47bd59f93
SHA256	9fcf7e906bd6e8f7d0767e79ddb3c8a5d5791fd1dcd8a1dcf0da95c608132760
SHA512	9113ae79919a5266ed97d59f68904c03b96f5aa4982cec4fe94b2fac85111dce4699e4c6c63522cd3d50639a34f586d3d452a65030c7eb8552703713139e7c1f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5	4b9fe70d88a9c0f97ce8fdf13be8dbd8
SHA1	5853e57b2250179b17025c25d4277737dd6c8ac0
SHA256	6ed7d1be310da0477470eb36913a6a4764cd4f9fe27887a34315db4c88835dbb
SHA512	6c85f12df52de3cd2923d6a1906cb439765289505807d492d6b9314b48d540899ff0a4dbfe38732b6d89322bcbe2c43afa7a6a26afa49e5321a32c6e5de51842

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	e7c3101c1117475cdb53ef0caeca60d4
SHA1	c4735439acdde7ebd6169f9286e10586af01e83c
SHA256	54b8981deda426d82e68fa5b7a02768cb9cd43b9d65a4b908f2a2cc22f2db860
SHA512	862e256cb32880a897cfe24195662141a916fa8a961bc68c47545a9f356616d0b0fd16166fe9e4820ab2f9f321308c7940fe9922381ea9448a6bbe60f54104f1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	219c0ce6fd8c94a8ee066a74b926433d
SHA1	f8ab0d88f9b7bf5c99e6a4ff2ab4da036930fda9
SHA256	0265290735d55764f752abb7790ac2328ac5bb089a6f3f7ffba4154c3ebdaad9
SHA512	6b4963f8696502068c546fdcdc7dbf1398aa0573771927c5b235407e8909edaefafd6d7ded037cb5305cd740883e5c87829840c0ac9d856cd29d665bae34797e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022

MD5	0cb38635d5fffaa695554ef8be2fbe29
SHA1	ae85a8390bafac509168b95d84fcd2ab13f5afda
SHA256	e484ab3a30d2afccee8f16fd90d99446974bb3c1aa5997f51f027e26a3c2bd2f
SHA512	5c82bc82d905ece50bdf0b5cd15194f58bca0e8d7d3602377cd3c3c10f2f6fe49ce85fe8007dae094e7d9d839d991f12738b41d98c79e007682d80563b2b820e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

MD5	c07d2f3899bb6a295106ec4d96e48145
SHA1	3e311dde4da01a0167f2a5499e1e54ca30fd8a3e
SHA256	9b7f8fe474c073083509599d7c6d48af69a944ddfad651c5f55db3e87c7743d4
SHA512	13b7f1899b3440a7d9dbdb12f3c45eaedc9d1b7faf665e99c32dd1d0e0ed7cb5d869ed183ac92473317f4b0182df4149b43ec80f0a0ff2db17bbabcc08274f56

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	a6a4e2d115dd7500d7bfa77ec0ed90a1
SHA1	0c31f2724909b48655c73480f08a1411e0bb40cb
SHA256	8de7e2f0f4106dea0141ad3ffdb3b6eb310f3d56f4cf2f893b828d7322cee149
SHA512	15eab44677ffbbe7e87016e433eb046407875fc451cf990aebdeab775368271120a26ab8d6afce54221e6112eb2c3f0d5b7f374705e3ad681a13630a70583124

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.xbox.com_0.indexeddb.leveldb\MANIFEST-000001

MD5	3fd11ff447c1ee23538dc4d9724427a3
SHA1	1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256	720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512	10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	35fe3c6a266c8251d49516377d425785
SHA1	6f193d35b343aea3227e73b15cb53e1919d703ef
SHA256	b44feadcb52475d02057ee1f74cb42444a3624813e16f5fb8c37b49b3b142fbc
SHA512	e020f4fee307339d01cef5d0352dc8b610d87f9cfa6c930b2f7be1fd75901aded5dfe0c126bdcfe2b4a3f930c60c62fdbe920a0eddda8674ceccb8b1719b7d75

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	1220fa3c8595fdb78e8831337d7286b5
SHA1	c7645989501f23371cb3e80938f629b3c2460e63
SHA256	9b1bb5f8807939ebb6519bae34f704ab9c1cbf17224651ae0ba6324d8dd2c82f
SHA512	b96ca939807f3a94ea19cbf6d8b5a0a4e00ca05936176029d57cb191dc65a92a90651ded49973b229259dce310d9d792da5ad4d74bc70c1123ceae300653bfb5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	ab3142d28466e89971cd86ba6d4320d0
SHA1	544ca23ab1496cba18cafcc37c7b8f90deb970b1
SHA256	064a97ec9f1bc363ab87cb7ce0c92a0af146f247eb0480e664ae3b9d45c83b7d
SHA512	b96486a9dd84dc14fa5a2e2e58e3972b1b77a7204b66d3e5ab4a3cf86916f212148f570d8ac071d73792e9cca7a44e54a63be39f73c005debfbe66b56f2f022f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	3d540cd95d188e997d75cb37a148c642
SHA1	2130f92916cfd548d4e6ba3f4393d96403ad5c37
SHA256	f3427c0316b53ae0ecbc6ad9bc7e5341ba2621011b8df8c15c49501a50585eec
SHA512	a7182f68ed0a8d8f2fdbf33de0ef6fb02ae11037a7a203c7176279f41a059ce85da3601aa5ef5d883a1bf39c3747fb26981b640aec10daf417b6a5a4f4b8ee9b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	39d881e2af2664e1336f78b010e14933
SHA1	f7ea81900b85dfd4a603934b40e8dbd52234e62d
SHA256	aad6b617ca2289d30a73c303803897370a2b7cf78a3078c8cd4acbe0c3e9a18b
SHA512	18adf55c901db053f18150f15549354009b7672057c48356fba08719ed3b33583c7cc5aea0fb669397f136cb988eebe5fa428a2891dbb00968a52244fc60f1ba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	06cbe97c29dedcf8864d9e2ffe1b1e7a
SHA1	f0e1cc3c992d361423fa24b131391c8a0b47b02f
SHA256	d6c4d69a6759e61ff628a2ed0318f6d7d71c4b6e50933c2e37a64956ff7d40fe
SHA512	0237119235f349aa47dc3bee34340c373e3c9f638dd661b75f5f9cb48ddba9f300394ee4acca73768271da3fc823d424887ac3cb815ac878e575c25308fc4ca4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	22245a8914a4ab1ba7a90cd5b087ad7d
SHA1	16d0bb09e503658a7acce5b005f765c32580b6bc
SHA256	fefc9b835048323fda45c4aed4ac1c902dab036df318b56dc2f3ed4d6f6073bd
SHA512	0fb0d78b271c30a2eb09c39c1d71ac08d2bdc26aff76c27c436d14286aeb9034f6f8f0fc20026219735796b277deb786bb59bbc454f7b74a048db89c73fe1975

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	1f139e898e119d30f969fc30bc5de119
SHA1	e9b99c656e0e4d7161d99874b214f019e0df5b2e
SHA256	43f5cec0e7dfd8772e07600948bf7557a8c1933f98383cc0244657bf0f9d16a7
SHA512	b79b99b9110d50c8eba42d5566337dad93dfd9f8a32bc3f9a59006765d33a1b5e7de414d723dc4f8b880a18b49e2f04cc41845b4f2e7e971d55517fef078f5da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5	143b5d36c931f7721b0aeafbe1c2f297
SHA1	d63b0496bb8186c3be119064fd4c8d374196536d
SHA256	baaa045ce758065cd5fc27179f164bef16a30e11535a524baa9f12e0d3d5a3fd
SHA512	5d0e0d368c3d3d7f1b3f20c93e03c24d42e7704fdc786e851ca40628c684b3ef52eac6a5f66e50e4d71c079ef73842c5d0ec07c9b428fd5e6f7ff01e404388c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	e128b9d7605e6bd2712c0fcc278a3ea3
SHA1	6dbd4c84b9f4593ff0c94ea852e97bde8681715f
SHA256	ef9395218407f31e93736589dac315428da6ef016457c0dce70825beced5c71b
SHA512	ecf7353e43656d93e4aa789e02e28ce2ae49f841c1e7ce48b35cb5523c08c05a92a650aaa998989b75586bfa64626c987ca1e67c4b9db6dacdee9bfe92ad99a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	54da79b4a081de39bf9733fcee4036d8
SHA1	793a41b6135d60e1fa513d67611a9f54d56bbcf4
SHA256	96e5c262a05ce2540bdde0f6592f8f72ee2ebbd21498808cd1b4593386e72647
SHA512	cbf8274c38711cab6c51082f5251cda35f1ef0a2c4a2d4d8f47b73fb1aae428a785a8704a78788bcdf4920a0ec49a39e4cf4e7d57f347269de493beb818c8b61

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	6c53ccd2db12292809fd12f3bf7b22fa
SHA1	ac5ac15f5f3c3a5279b4cffcc91bf54f0fc76830
SHA256	12c6cced6a7a6a25fe09182004ec5881f4098f8d4fc8860f128b34a0a523ff0d
SHA512	7cac38fa8753c3d34dc2df84b6245504c5ad7e54e8b48f037a978347bdf5ed15361a4d1dd87c1363080b99a40ff08cbc92dd45d4a65f40ef3807c6561b24c28e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025

MD5	27fa848f854f791913ebceba7bf9e5b3
SHA1	e3fd67267b6b1bb210fb5ee4f63c93fb1b1bd3ff
SHA256	f5f6c68e87cfbaafd93716f1acffca3e83a98caae37ea3c5a54dd48b9f2e210b
SHA512	85abacefca936a986ec2245704cec424baa12d90d7fbd063a6c783a7a63a0100b2da15a43f6e4c2ba5606e6bdbad0964bfcca6f8d7fe99ded6639c38caa00872

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

MD5	bf92795fe3abe3bd46764d8006ccac38
SHA1	a2eb38416e34a1c9b02b7a35843dcb1e547ae0fe
SHA256	feb062b3e2361417f9de3bd1a352b8955876a1064a7081ad553c4bf4a4517f74
SHA512	acd11e8d1f8e710aa963f7e0bc3d99700e3b066dc101f346cd9f2ae6db4d19e30baa594ae9f132a74b27a7b6d0208ed01995767dcdd6060e7f470b5987f5852f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

MD5	ccfcf00c68de144d656f5f8dbcb23187
SHA1	1a8334312ea438c3c287e7b59e558e14400144ec
SHA256	36ecffe7b8a17e52203d317024ecf946a0f7fd5d22adc95f917b75154c459963
SHA512	0b757717b4d172602c2dfe36b9ec0a3c113093ff4671e65e376a90b01bbbfabc440c49d2610e268e0908bb13d3d159c8198acb767766a1f1da0fb59ad69a3bfb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

MD5	8e8b911fdade5c9b88a75269fd910f7b
SHA1	4a93fa6c5bfbd66696126472d4dcb253f6611c50
SHA256	e3b75e6ddf2cd83e304a3f3b8628ed44624b6efedc81da2960d6d9c1a9eba91e
SHA512	e930409cf19e474b1578538976145ef7f81d90af6b312011689a6ee84799d9988824e7f308d284ab1ce5fde40fd9db1f85adb71caef6d39cfa6e0cca5d355113

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

MD5	9196e81f8ed7f223d765423c1f9bc8a7
SHA1	88f9d5c2a6908cf36b8daae803578ca9e1fd2929
SHA256	a4e2bcf7ef3c6c614c2142d3c1fd44caac4eafa86a1779ac31cba164e2d89cbe
SHA512	e7d23866fcac017762d2e2f18597124e9147f458d30038f78ba9f3a2bcbe479fe4792573894370ce2d6f93a00401231d9f01955fde351ff982a82ba87a8241f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

MD5	ded422cb0df49914de304777ed34caec
SHA1	614ccd5f60d63edf597bf848843212f066568aeb
SHA256	0367d1cd817e8b1b2f5ccec704fbd5dd1b5c9bed6079c85e65fc83f64106fa13
SHA512	da18742718643f54c33bc6d7617a63069d519cc46bdfecb7c8daea00fbd7fbfc7b07613d08e9308ec9bd575e049833d7c36ef75546ab125f9c7b577a3c12fdb8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

MD5	69b550731f9a789a39d18eb917e43a4c
SHA1	20721285bcc8dfc47777e43b2d94a224469a0b50
SHA256	230bd4129d0d79dd196efcf6d9e8db962c5e750fa539dfb5b72ba43666485066
SHA512	0de48338b7108eb2b9206c57d382c69703f1424788f7c665f44e4ebf8fbc92da8f11d10416c03f37d62c0d72cf760b902ef52f8e41caeb89ec221f0fac76702b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028

MD5	4730dafef3fa2c0a7451482f7c730d0d
SHA1	cdaa966156bcf9067dd570b751ad4f9a129af00f
SHA256	4293a79c63dfdcc6222509516dc715f9b5dc9c71d916669016d917e4c68ea9d8
SHA512	4ae772883bf920d22dec0502a512b253cfd84cfbe7bbb4e4254581c7b2583726d136666e45f2f0d457f1b2fca117eea8626fbc45b57cdc363f73e623507fd364

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000067

MD5	0031f8187af574819dbdf1e68c9bc6ab
SHA1	40e11960acdccff667854fe0defee89dcd4da061
SHA256	e2ea3f97cbd8d4c4cc936c65c4494f745315b53d924f9854f3ca8e78f1d3c850
SHA512	cda108fa99e23807e52eddae42b4910b506bc5e9933c666aa883f546eb4a125860d327cd737394e7aac60b574f002a3a1e09610253909b4fe8235545a80da5f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002b

MD5	e51f388b62281af5b4a9193cce419941
SHA1	364f3d737462b7fd063107fe2c580fdb9781a45a
SHA256	348404a68791474349e35bd7d1980abcbf06db85132286e45ad4f204d10b5f2c
SHA512	1755816c26d013d7b610bab515200b0f1f2bd2be0c4a8a099c3f8aff2d898882fd3bcf1163d0378916f4c5c24222df5dd7b18df0c8e5bf2a0ebef891215f148e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

MD5	5009982b60a0f93eac4c1728e5ca17e2
SHA1	c0f932d333b91a4b971a52ce88bc96320745064f
SHA256	2ffc0ec332938cbce14008ab246c3d918800189aece932e92bedd8adb8332fe8
SHA512	401dd0a45c177130628787b92a17642783d27b1a977833af4110d81cbf2572a159a371beb473baa07ad38ac8297551aadadd2ebb80401a73acd580fdc03964aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000044

MD5	ff2e8a81cd78b609d4056892108d849e
SHA1	9bb130987f35f6164baac6dae08340aa5f391525
SHA256	26542fe0edc587c07d8dfef914b2242a26a951fbed3da46175e71a4ce1ba91f8
SHA512	27533c796abfc7c95ae5a5d40e04f08409f7acc274ad70525f59fe027972458dc3fd4af7b2b5cc1ffc079faffd6a78e78bb9eef3e28e0627a89e8192905a03e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000046

MD5	41caba792bd0815c50d2586663a2f6e9
SHA1	8ba297073f4502b840d2c5f0a24ba9d515e2dd84
SHA256	8dcaaaa16bd33e6cfe7af170332ce93febfc6e8e7d1600d1465732e4405e08a3
SHA512	0a8753df627984de1cbde85ab8b8fbaf49f9b76a5728675eb7973a0f072d31f00a4b6df1b9a459d3bc6405ff92a70acf9d1b5393daa0c1a0d34742800cc9c9af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000047

MD5	97d0df61a498695656bd44946feda33b
SHA1	f989eab7158a7f6500f3b9a279e00ac52137a79a
SHA256	6e1a30c81ac044593daea66d45572dde5554aeb4061b9fabca27d15a2dbf3efd
SHA512	84108aab0e3050a36bc1992d441d47c6a3324e6c8b37e9df09c4fe758f63885ca1a7d88d8821ff2c67e9b3ab73f2e9a42304be0bd8e88131280f19b112ac4e4a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

MD5	0920f8c66caa739a1c14477029c7b08c
SHA1	e9a340a9ee5e511581ea10745d526dd4c697200e
SHA256	e463b66506998fe0fcc61dc32b9f26959a73a34c6046870bfa7e5298228ff672
SHA512	6c7118b5c3684a29eb42124a3c36a66c0a67b5302fab84df765cfd750b757944cf8a02cf417661d7fadfe5932f91a30ea1c03140d8b81d7f2c80c4e5b922a433

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

MD5	08ef37236eb807b63e6360130a9e85d0
SHA1	fd947fb2043a0a17169ef70178586fd8228ad557
SHA256	7f651fc3e4e14347e14333e35c5c448d3d79821fb46a98d73c1674764710703d
SHA512	f59548e133b032271ae4b001888f516b1a05f1f02ac545a9d4e748f3692f667e6c27da5b289c48aa735d5d65e0b58575b61bf55f39464c56260e3d5633a2aacb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

MD5	3b97a5b8d862a0b9f077704739defeef
SHA1	5b8603d83134bb1bf073baea30541804d3ea10ff
SHA256	14496be0ed83e8b74a8534ca80325f3082fa64c4985edf7c5a12bc1d59427b0e
SHA512	1b56af76a9afeb924bc2dd21efeec970542303e3192c12640fdd964356b7b6ab5157d8bf407f88236091d4e721d9fce0321c7d58e5f3b12260c9ad998714f7e7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

MD5	e5d0a5f871fb9fa8c7e020b657b4737d
SHA1	49e824fd4d2719d2771f734bbaf3d421b2e2e2ef
SHA256	b9cbbd194591b2612742bea6be5775c025ce10d839765b090c52279c87bb9152
SHA512	7ec2b886f95da73b2991fb763057604027cea4fad31394743293286976ea6dfc3589290334d125a6dc5a6688293e2432b78fe16b1b30b808a2d501f346dda868

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

MD5	681dc4fa0143eb429bee129579492296
SHA1	3acabb1d4efe9e79714fca4c07160b0dd15d74f5
SHA256	bd074351144a82f5c903a946b58171415c9ccdfa65b7bc92eadbd9680d85c9a4
SHA512	555654160602b5ac279ce2540f2e5056cb52aa4e02521a40fe655f489ab4f9bab1142572f4d543127614cccac9a8dfd0f888c1dbe647d50314c9b9170f65f760

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000045

MD5	5a7f2ef11a57c27c2d9c8b46ad152505
SHA1	c5b214bcba3918dac4d15d09eaeec1926c327478
SHA256	785a9a239a4ae6c2b107421ab7a3de627b22f40e8149664554352eb6493ed585
SHA512	131dda1a7b84837fe78b412019818940e2e553440190b55cd5f248594713a7c0421d6eb7a58383916f2b012b43173f3ad950d165a36fba722e6ff7260999f04f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000027

MD5	512c037ea49c59c06fca792389cf6576
SHA1	765c95af5677890543698ed4697c6e52d762723c
SHA256	a11fa4798142858d23ffe551fac06bcf69311c244e14f6e1577f9b300460d8d0
SHA512	a6bf33fa92cd25af9e60d8a99e814c716c538545892b70c856010de430bd42ea88b33508635e4ed9ef5eb8c37fa338978ede203f73dfc1cf9a421117857cf485

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000026

MD5	dbc91fc28929c59f89a3079c620747a1
SHA1	2d5eea5be71717bf43d375476fe31335c3e931dc
SHA256	be399d2613f3eb9604dc3711d37e0c723afc1b8d883c8948fc849e3f0460d1b0
SHA512	b74b5d71b2a0fee16050a102a2c3c3e20e6404cdc2b267664363fa113b517eb9142b49931c879b2769c127c91cfe84b6d2853db11a2e6a84385ebe9ca547fcba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000049

MD5	e37b4ba1784e08d11ceb2b4a454300a3
SHA1	1f995db5e1497207751dabe23a569f97b9f6c4bb
SHA256	79b2af479cb5d80a05a2d12209b21740cd0cbb572b641e76532f31c306f4d721
SHA512	99a7e15cc41c13d489ad4922d031e04964f42c79c9a8d8bba68579f745f8361ca7b1054b3df452701e4727ac0da9d79e1ae693d7f89c60f66da837f7e2d93e02

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000048

MD5	d023edc84ce0fbd4d61f1045372e0295
SHA1	8d0b3e60272c722a749ce91864d9d8993fbc4100
SHA256	54209939aae7495bcc45ec6ea6a55138b5b366252650595268eff6bfb4c4f4af
SHA512	aeea573b111ce9b6ec293cc8b43075262fa5abc851cde39f4425e922703e0d0958d3bf83c2dbc29568d84a44e5f42a15e0a3105c18d816354798b9b9cba3d870

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004a

MD5	720ed61ffd423a9a28eedeb4ae918019
SHA1	658c2c858fd1a6e3e39e108e42ff7018f30145f6
SHA256	69105f50290e31c1327e004a40eaf06af40abc2acb4d7b75f66e8b5a2220c666
SHA512	da017b67c65561c80ee8ef056fd0fb7fedc21588e4cd09e4bdd850c7cb0277670dcc5f71a2c47a929aeb00b987b5637b26c938bcea1c9b89b28a6431c475464a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.xbox.com_0.indexeddb.leveldb\LOG.old

MD5	45c05ccb8b6a02242aa39853b37654d6
SHA1	fcd584199b8ac2b3a05dc65c6f14686b9cb85ec6
SHA256	ddd31428173c711a60c599fd3503fb3744645e1c099e17e2b998288d42b13379
SHA512	0b2805a572b73ecc2b1ce5dfe51cecd33e9822558058cd12ce3019f941f985566a1ba68c7a9c433ef3605d8023dd6748b372461d0a59f6897aa2414d710b73b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.xbox.com_0.indexeddb.leveldb\LOG.old~RFe5cba8d.TMP

MD5	01eafea5c799ed70716e8bf62402a4e9
SHA1	ec8ca5978d169b3463ad8fd7dca138c1c35dbeca
SHA256	095177cc8659597dfa2306db2e6bca231a14986848c2c9c6e3dd29c443029138
SHA512	0912f1131a00e82b7409cfe5925836e430c2a2b8778680dd35efd800ab7df58cbaa5fb25a6970d967e0b3a7edc44187d888659d892484c766af3914ddf34fa0b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005b

MD5	7dbd5dca202b651abea7db3d092712f3
SHA1	cfefa958e9cc089a5355b73145f8bc834a00552c
SHA256	16c7b582088cd626101f338070c7046b3fe902a4ffa0069651392314584a4b46
SHA512	eb9ccaafa365a2965ac92a9b34a065913825aca5fa1dd8db772a97fa5928bbc5bc80ff6b536d66f523ad7f0f5304ddab861e0e5d1f19ee7f2b633ce4b41d9c3b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

MD5	034317c93488242f70266ea96ed9e208
SHA1	ba29f83fe72450ccba1365c3c7056250eb7fc0f3
SHA256	77440ac352a51b0ca025c09cbb7e3b35bd1cd7087fea85c45a396e896074c05a
SHA512	41e9d603f2c73a48542a299d35fe2685138cc5b97d29259e2712679c74d53296d79a1bfa94ce80cbfb9a82e3d2f7772c715d2dc0a75fcd59e58c10f49610b644

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

MD5	b576652319aa7441da5c94548c6db70b
SHA1	4f1c2dbab8ead44236e449084c519f30788d4ee6
SHA256	ef737f5f2c87ed6f1180d3ec8870e46e20ac4c614c9f76260873c5f879a19f20
SHA512	9a03fdd748e2d5bc522041369e07ac331daaa539a7c1eacfbbba144b882970aa4ac4d2e2e5535f5b0ac483ba738dd9d42b3ddff6430814851389879c4081c569

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	eec60afff3f4002981694e6d23268a41
SHA1	04deacf168198b1060be9960cd8d830ced3da554
SHA256	1deb84ebc1608fd77654d200be300f9e426b85e448f4d750aab3c14ab79b8182
SHA512	0989ecf5b363b8246717b2dc75e14a2b9c2be6395606d5637b97327c7d32a3156216145e7be55c11d5dfd464c01b7abdb363f964d5cfa757203993174926d119

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	034dcb58a5ad50d6e0f9d390c6fe0ef0
SHA1	f1d5cdb2ff2522d20b4fdd5fc9a513bd8c223ef6
SHA256	7189bfbcd9035dc2c3ce6e98db95d3cfc622f243055b563a43bcf508130eac26
SHA512	545bf346b36943a6a2b255b8dcdfb3b59fd53e376b3b2762cff6ae03f1bdd888043bba63491abd306ec2489723a9d298438a126d17e75130698a14d9c3e34217

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	20b4cae5fdb28654a5744a94a8c900bb
SHA1	3a037aee0b4ef41d87f46971ef37056dcbff10aa
SHA256	06a07d62c81162339b9fe9bc7bccd07e13bd39b94c37ff597b9bcfa1fb102675
SHA512	ea89541023e9577f6ab66c891fb00dc281f817e3687717450fea74bb4774c0747e00bd5e88fad9fdfc37b8417522ee22588340c277dad62a23d5395b8e105c58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	1fd133826ec769d457f502565af38751
SHA1	0bb05f257ec61b7488321b3a8c7fdb2a2373d12a
SHA256	de9da75e5aae0a2c798907051f13a577e44ce3ab9a1c7df61d3550fe15567ac7
SHA512	ccb8da74f34f77265d46547db663a2c53668d843bee33d9325ece95213dd0eaf4551a277ad4dd47bbc3694243ecc3fa240fca8ee08a7c797e5b2a452ee5d7af5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	d1626021d4e479ea99dd1c80a263ca36
SHA1	e4aebf00cde025c8ee054f80e51d9d7d5624dec4
SHA256	3a57e46b69ff9b60e1131af76d73692f6041f2aa28902e022e5857750b6598bb
SHA512	d403ef0349f6c390cd2e4dcb309e8ef1765bd4dec88ea34ddde5483ca85db4b9140a2237384c28c08d17c807751b9be075dc6986f73c3daf45a68a0c829e1dcc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	82e697adb16726df6fdcc816f561769e
SHA1	4ea44fcaa8101dc41ad501fd47e6e3c8ee08c10b
SHA256	78251d009a0ea000877a4fe564f57e65fbce5e90e4840744e0c5cbbce51fa4fb
SHA512	8e2fd0c977151dfe04084c543e6eae90c559d9da96dd7278138b7822308089e7f96725089016db5313094f813fabec07c73870937087c344c122ab36d9360abb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d

MD5	ac0e40fe376e5001fd8bb046ac7c993c
SHA1	f67aeb5f651768bed1ba603607d0bca56cf6a630
SHA256	101705a1088a6c846bde4f147349055de0edbd8f527ddf8df36bfcfd056e2659
SHA512	07b3414125569a1bc60e7a8264a539ea25d90b1b9a4bc5dd6e8786de77f95ed739603c647d984aca4f15500565574f459b0538455f7344fa21832948498a5788

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036

MD5	1221d33186f30ea76c830147f441f180
SHA1	5d503f1ad53d7650d8b0afc8e223850ef99d7e07
SHA256	80ae82c625abe6286ad09e6f07f0b44f6cb55d6507e6e52d90ce2e3afceb5b40
SHA512	9393f259e104dc1857096f0b6e97faa13402d78f788819b25ed1d74d01ed4d2c3bdb077bd1c22cd2fa5ec5a338bf135c48055338c2511eb655af798c22f43aeb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000065

MD5	4a3946d838129f2cf598edbb1e30f0de
SHA1	0b906bdb8460e8300b147ce0cb185064ff830ba5
SHA256	d917312b648ee97ce45f502fe0053fbc78f9fa84510cfff5deb641cdb240591f
SHA512	1c0db55b567fdf8c37a0994ac87d06723790a64c2001eec3f4f2cbff986f529f82bb6ebebddc50d90f4d912fc229143f796bf95572544083e3fa2e7decca49fc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

MD5	8be3bcf22835aaee25bf7147bf4fc31e
SHA1	5b978d7effc5bad2c56adec86a8a7116d1c69f76
SHA256	cbf3e8da9837158412e5e6faf67742e92eca8a3db9ccfc7b52294878ef7be62b
SHA512	91a3b5d20196757997f0c128c2714680dc2c8e5b74ec047fd9a4ab787b2efb3493cbe887f8eecf2b26db2ad37bee61d63dbd0b0cfc4743d798a7367e1a188b25

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003b

MD5	292f64f9b42f5d5b45ce05a01c3572f2
SHA1	c657faa88198b1a75a36eb9c8c22725c330db021
SHA256	95624e62a6cac955290b01a8cf32e57f1acff094fa7d86e603e2b748cd6a7b25
SHA512	b786f30b77723aca5a6b7471196c09d489469f553c5525fd3951e7585c2d22e5dd7235bcec2b41ef86d958893fa7169c396b9148d944c779358c3d019bcbf89f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

MD5	b2fc39bb9927c067647abcf9e200428a
SHA1	8207fb7b14748f355af877e58d92cc72631a4f45
SHA256	cf83a29eb910d2f3292885506b8d1af2f934476e20182a51aff93c2e47574b91
SHA512	5bb25d8f5d7c0be581f8d1e5f14f645a1f14c720a942b29bf3f68d014438d7ee676011d329b95632f9f98d0cd7f2b8d56c5a15d7caf98a602f159bd8a6bc338e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000066

MD5	04d919956b54af88c8e270e81067e3c0
SHA1	313eff09ff889f6d88a717319e4afb8899beee97
SHA256	2f16f3e4bc251ef5a28d760030af612e62e5962c19e14b21f5b557f61acad639
SHA512	3632e8bd997751ba470e4bbd5d7457b11ef04bde823ad8b5571c6f73254edcb959446961eae5f8d2e4f76bcecd82390a1820303a8607315a10b7d11e436aa699

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000064

MD5	e05897be7daea5ad5d2d1e53250c4ab8
SHA1	bd2f57e7484c1d7857b2d06a0850880b0b442393
SHA256	5fa97c01fba4484cf71fc9a227806f0d1225e47f6ec3aa277f2db1b82197130e
SHA512	44ed50357c5633ae572777be84f6ba6dfa87cea6d2b8d219acac3fb35a6b3bd04e51c2dafddf1ae1157cc3fb73ff27a4c256e0e256422b8e89cb8200f4b2a861

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000039

MD5	fc436e96e0d3b23b6f72d9704afb0530
SHA1	bbeede1a0517da2975bc9a2e3a2c36857873fa27
SHA256	6587269679609849954049daee9352d187399d3fa405c2c5cfd22d649a488b02
SHA512	2c779325010747c7cb0a4859f2a651156163078b3d212414b8bd1b1055fec9bb3bc6fa5c110ac6e1e320806382ff2050733829076aab995d65542d6f84e2abd0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000037

MD5	e6e6341b9055123c4d68bc16f4563d56
SHA1	f3f7b928ed0cb20d862317a10bc3d7c2c880f85e
SHA256	149b05897c86ab27b29384dfeea25f203db552831e72eec2befdb94053d9bbe8
SHA512	ccd00bf4460c1545570eb19575e9e6de9f2667520b956ead5c0680d029f81ba23a87034b613ccf6f02a8afb9c1544a4de2c7c9adda3a2258a239840d02242075

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

MD5	d521a13847972097e5ffd0b6df9d39d3
SHA1	6b42de30f2cd024b86eedbcf9ed3faeeb98b838a
SHA256	7f358226e0f036a7272dfe59d349ccb33cd67ca661d8c1d6b221c8dcafa1fe01
SHA512	26a68a28f6d8695ccc1e2d48b381cc3104b5954e4df783c38f3915dcbdf5d94ae50e7a18c0bfb1d755beb1977df61d230d1a90f194a6afc867b2b625cffa0add

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5	220934c5e4d403bfee2d01e4a3eec522
SHA1	7209409aa0efd179b20c402a9293e6f1c50c6e2b
SHA256	54c27a2098883fc666c459210391b5bd82f1fcd547695e6050b5905b284d5c52
SHA512	174165e1b1fe17f1c3bc7114a128a482424efa43bbc2c7fc4f5a3730ca783d5a8be44d9fe560f94871adadde5e460e06e9954eed006e7f9772a580322e98ff84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000042

MD5	296daf6526ed69f5358bd5fec8c5be92
SHA1	83a4fab2c663eb4f8d15fc2188f2897550600947
SHA256	8f2d40698a86d3977893709e5855460b458e825044bc67b5e56ae09ade281c3b
SHA512	1adcf9eaea7190614c120133f66ee67935486b63f4dfb6dd37bd7b0e688566071e98a59093fcdbcc70ffdb3fb6730918a9a04aa57895fc32498a05ddca143c4b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034

MD5	f64fb5527ff567e145e8cda0a44dd3c7
SHA1	1daf5486b5b3645f49d56f869b0561cb46727d1e
SHA256	d191902c75338f6bf7a0e3e0ff8a506d15ddd370378c5950b4d7fa3f45c38590
SHA512	fa0aa28d233732e099f89f77b5ade73213753e6d0d06ec097b19de807920b93197be7fc225d9a62a85ed07386e508da9205d03685845a72eb9761c5f375da7bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000033

MD5	5afbeacc8923fd66518b8fc5f6e18f1d
SHA1	05bf234c69bb744c497f662d5b5ff35bbed9207d
SHA256	2511395aa8444f64f06c3e104eef42dee7d63c1c32a881ba3a00ba9165e9f029
SHA512	6fce156dafc2d5c2efd67c9c0049985c68099815d08e8d2451605f391df58fdb69a1da4cbfe6bf66630fffe36fde5b3e4800d9e49ca8dbde4694d758d6b80e24

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031

MD5	51dcc4ca3949822ee9c0eafec5fc528a
SHA1	111c81460c433225f5689488fd34372069024919
SHA256	8e57d5a1be7c0550759e4f3732a05b2bed3fae37266645c6b06e1748819a3e9b
SHA512	ea8e8af36b1b566bcd1a8caf2b716106bfd339c5f6562d18d20e4da42b34c7a421bc1e5441274259cbb1ad0a05852680472ced89c5993c1240d7b86d4cbd8df3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000032

MD5	4e18fe48f5522ca3002e759945a87a63
SHA1	d13a550b72584d847f0ad8aa764e5267c09bad6f
SHA256	ac1ca3d57e4723cae0382969da5aaf29586d7a4e50646dacd445301ed8f6d558
SHA512	7571da1250a746f721fb78590ce818f50bd102151918748fa58cb71756a16a116a3cab59562cab908625cf7705db446049594e80b05cc0827b0c6d0307614d13

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f

MD5	26d4cc10ba81983f0b36f2b176241a13
SHA1	1d6d73f535eaf10f8001de84a8cb08bd14bea513
SHA256	a47889df0d753a068349e34a198dcef24bd9f2ba34c43f346bd5c62a2136511f
SHA512	90027859b3ec8316f75f9f361944b77ed948e85791d67754201e802225fb35e732cb9e43aa68b8db816fe8b5feb60918375cb70d4db4047ea97bf7a858c630d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030

MD5	1581db21e067c63ac2eecc95fb8c704d
SHA1	71ed130fe0c7e4a1ca6fa44d07c18cb7b9431875
SHA256	61e1bdd7484ce00fcc88887e3b3619c5828dc9e4809fb01d864625cfbf1b718d
SHA512	dcc04b908a6b75db0b400f94118d54a34e062c9f59e4962a836ae8ad0742d913891aeafc53f4bd6cd8ab4c2431d5568c392682cf1921d9aec84b00ddef78503d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002f

MD5	f15d9a3f507123559be60b7d55a93302
SHA1	7fba64e27e63e8a05868a4c74f1e555e86f20911
SHA256	3465d299cc16cc55263e0ff65474acecc8d8d5eef016f5f59b5f77583dfca85e
SHA512	221260a06450a6967db642b25c4c4ada09d5a001bcea7ed2ff674e6a7c61d1fd918cd43e284edbfeec5b7819f8f2b53420e5d86fefef29c2f67eac3ea858d4bb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e

MD5	f90c23752147c31f342065d3e9fab1d4
SHA1	008978e252706c0a3b6ee5abb88262d70f94c63f
SHA256	cd65dba95ca58eef9911cf877210845325f05a074bfbffd9ab4fac03376a3e11
SHA512	1eb22791a6eab2e71784359de4bc9bdbf7e912cb068a542b8c0bd834d6fb4e2f36579bca8f5781fb5237c65a84d2186c4651f6cae904aa9dc5cdf2b3d32c1479

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002c

MD5	ef703d40c5ba6d76c5af3cb41afb31f6
SHA1	7a92f4c5d3135264abddf68b0fb024284c77a04e
SHA256	ae82915a4138074c6e76b29f315a60c9bc2e01cafe433cde20e0ad16e9fbc8ec
SHA512	c0e7711a8350967045327d681999a78a3d620d20f9a55bd0f49c246f853732b3d225ad0cf0aaa3c8276def1892b47a35ed7ee92c30976ca1efdd70d53ea52553

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000063

MD5	57331c92b8323ac293f11456be08639f
SHA1	374c5b83bf4a5dd806bcd90dd0004e81ee178f21
SHA256	35e3d932f36e91f05c6cd675f5c50ac4e6113508261d5ccedbf241b0212a9a69
SHA512	04bd7be1cf67c03a8890d99d119487bacbd147acc7753dbacbe9ca4b8fff599e4615d43e296fa387402e3804a25bdb90eba65c95ca4beb6db9df0d9e6b25574e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000062

MD5	8b7bd36e205633bf15e09784f77a5580
SHA1	9ca9bf51692f7c758d86c45222445aad9bf5cfb9
SHA256	4e3224f5f0d559ecfa2b0291db0a98247f8d8b2bb65560bb8348e3663aa4b6ec
SHA512	4d2f4a4461fa37d61dd23c8347bf0d05df1a12dd9c2e90b8af5db53817fda1e57601efb6291245c5b9c45436dc0054a123893041fa64aa0fef39bc2d2b1d3bd8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000061

MD5	af037ac6d64b2d2678e5531a914bc491
SHA1	6d4c9ef0ba6186eaa7d40e92f865217d4f243bee
SHA256	90cd59151a14603caf8c033dce9fb631a8dfb85cc7116976421d6982674c3419
SHA512	69f4373c5a948b0cdb1455bdcd27b40d338bffc03bdf8ebd301c647eb8f2aeaa6de466f7f434530c1dc8e9abb4e147738d8f24a21abdc19be1d77837d0cca00b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005e

MD5	8735ff2ae8b83e0ea690b202a27c9125
SHA1	5c93ae961233ba2377f117cb38ab6327b08d76b8
SHA256	a4636f1752e33ab5e3c4e080f685de16966fdf2c34b64bb28f4d7330c1320df7
SHA512	6490c69d0277ca141c1c3255ea09da3837af3561be2d87140153cf82345df5f8f7ef8fd8c0be9aafe8db4366b795cd17848b089cafd6eb17eba53ece8a7f27d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005f

MD5	7bb44c04c6101a63f4dae8f46b037698
SHA1	089ee7f5c5f8cc41687bc8cd22bd77d30b1ddd0a
SHA256	76f7e2a76855f0835bb84df88b3e6e0dcf77d2990ed8ede003e0943ad4d2fd24
SHA512	987bd37050da09b840e8bc5287fd5af42791c63352035fff87031d522f0b1a8f5d9bb13449b3d1830d220505e59ec9a880d6dc5a566c179883af32b5c9efd477

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000060

MD5	040c2f16e07791399a02113b4de41c93
SHA1	c7a163d1f7775fa3285794c4dd17584adbb5ab60
SHA256	2fb68495df658edecfe4e8917435b32008a7c3ccdc7454d9c8bd69efc11ed329
SHA512	7192f3391fd53e112a48324a1cc4c915a41768cccf7afa750e40c17248af275a0954ec4a036279e5426e5f1cd029b69077fa8e00e8f61bd78721cc73ea4c8312

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005d

MD5	0af533d391486b4b1a5dd14c4a500db8
SHA1	75e56ccdc9f338b5784e931874adbb063f20464b
SHA256	3265d659dadd4fc0a87c11504ca549d70867df32efa8716b787fb6b846baa69b
SHA512	020215d85d6c409bb9b03889ae19de4632d30f2d69bbd916dff9cf78935a5bf7848794b4764e89d224151c6305dc5b65e705bf86623fa728fada1333fd98f8a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005c

MD5	5247b1e482af08a371da335ef0708d24
SHA1	75367550676c12fccbb81d9fc3b08416968f01a7
SHA256	ea38092424980e6841d102180e6dec2fbeb6e53215c688156bc136c72743503d
SHA512	ba77c982e8e798f203a8f7786d7adbcac61b54f03064cea803d8580d0403d2f0544ee068b04bd3f3ac144c9f41612d2ba3f59a2c3838ccb8ee241fa7e267831b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000058

MD5	9c1990e732413b58aa2926bb6aeed04f
SHA1	7e31469921a53f058d38d9562d762f9a08fa39fd
SHA256	d1f6328134a33488075fdc5701f1264fdde0e196fc9d508caafe761043fcfa79
SHA512	ea2eba99909e0553051b29a9b8f7d9583c8ac6943b735cd3d9f06ca00abd8df7bce71f5a1186e28b4f15d392625900c880517dc3e0465130b2e821c4f255a2c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000059

MD5	d64d919fcebdf7932f5684b9d47bfc4a
SHA1	7d63f5c932325e51d80f3194504c273fe2c71360
SHA256	038343332d12ed4888075b92dff5d8eaa127cce1dec908a92fb38b79c17980ab
SHA512	d4975e5fb2a2c52149aa9841eaf153340ce18808e6f555dfc0d5d776390c793595fd40e4d7ad834b608f68247cfbda8c836a6ece3ef4df111dc3188ed15241ae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005a

MD5	a312b894701ba8bde845f9bc062b5286
SHA1	1f60d72c77247e9f5e5a07ae4a5e269c42309229
SHA256	f255f7003658e3660e8605641bc528a66280428d06c73b71914f2b5f4ccc3741
SHA512	e0aa2d45217c9838143ea16182132af5dbe1405af650735938f92f756b37e298c011766dca33498960b2f1854e59d57946cd70cdbf4b42ec4bd533013034ac9d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000057

MD5	7c83f99f15819325529178f7b00f3695
SHA1	4d56a51ade3483eb0d8062b509b20d823a244dea
SHA256	81f37d34f2966f06133fe9674112c9d85198aa87d53501dd01bcde8315ca7038
SHA512	79df2d23855ea05a965ad61d77e8012121cbda8ad7a16f535303ab422cf859a8b0121a6cbebed36d196131cf5b7ec8f43004f33fca741a8904be11c5230ebfd3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000055

MD5	0160ac7557a4de84e982f073f4f7a51e
SHA1	5698db9ddca5f692db21a84079c46614c10395f3
SHA256	cab260ca124c39a524e41d244ad901f5bc6cc5207ce5e237ce8e723175a9978e
SHA512	833abfaa2340898ec0eb91b211ab88b806457a5124190a063d1e5edebec2500db4cda5045dcab852ffea89c1eebb70d342ae4ecd9eba8d57357d47ab2a604825

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000056

MD5	de1cc445592650eef3ea621c5b2b2916
SHA1	67765810c4a3ef54eec54302b38e75f2a27e7af6
SHA256	8804e76fc172ed9a2be135c878f5781be3758b48196bb6232f6638a652d2abde
SHA512	461a9a30cd15de3c63d9ab8f3c0eb457f7a4fca79187c391612402217cb82ee665b842e29574e5ae59268dfea3b383f1378be64795213b8e69c8f0368b8a0d94

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000053

MD5	1b1d8a8bf418a2607da0f6a88480001d
SHA1	615bc8ca43f307caf676fbfaf4d698e54884e81a
SHA256	8d82e9bba530d028192ccfddf9f32e466796814547f6eec0d7cf927c686d36e4
SHA512	4e227d9abaf4752c302b96b25e9d9e87527ef48bd191c840d5c57804c04a16af5965e5bc54632e7e091c1194a9fb59864a924a2277d54568f6b9c548ab597507

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000052

MD5	5292472eff6ec689ec605e3eab20432f
SHA1	fbbd28e1acc2fab9f92e1b3d6a718e3e967c9eca
SHA256	9a9631c0f2318ae874c23ead89b49ae683e5135714a96f432c3a8e1290e4b22f
SHA512	a2a106769238d588c19b81e6cb4eea0ce43ec63ed753d28a7b7b8abc6613591a3fa7cdcf756d6560bec5a333600f14b411e5c88726b8ba7e2d154b7cf527b26a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000054

MD5	91edf450da74e028216ae731b95ebf2d
SHA1	bf2738bfc7f1b8703d531967fe47cb4375b51444
SHA256	eed92cb5bcf5cd7278ec871e43c50ba2b62c1290417b2aed7cf618ec851a08d9
SHA512	3726807a442fdd2534cb34c80bf99464590f8bb377f1acb35300f9c1dd8dc9b42396882505e55e04f2f0b7bf39ab2a9355ada6e01cfa4b24932b2bde3d033d56

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004f

MD5	3d3202254a8779cb7ae77c3361b93f85
SHA1	39d035538a5e079eef8a18cdde29e5b1c916f76e
SHA256	a1c332278e5a8349ee59315119e5eb350e758b6d3aac411b548bbb9cf99483b7
SHA512	c91b46a59fffc841c8486a5126a481357eac818c78f25655388eaaa5c446725625c2cb06ec809e247e21c1494b0dd9719c9f6568cb529705925cc74efd929899

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004d

MD5	4875d95df016b9e8d93933d9b3f7b6e4
SHA1	ca56369e8e3a8febc537139d02a3f93629cc8a9a
SHA256	af82507c9017994672d881c883d1ab64da131419410d9a31bbae5c3b1c1bc1dd
SHA512	f541fb16b5ed02b0a443a2762eb87c36375354dc70123bd26cfbc71193337b33c01f9e6905b81a26086e8b661fb47a0806cab2f82cde36f9c19d748708aa41e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004e

MD5	f398634c48944ab7ae5270b6df6334c4
SHA1	ef8f7b4be5a14686c00864b7d3818037ef8e1db2
SHA256	83fe4f40a380f3efb755e643b0eaeb328b939e22318a850692227d95a85903bb
SHA512	a6d05814a7f925a13db4cf1d43645d75a682eb7e7672db733082360204dc19e3c70606fc37d12a7b369468fa62d66c1db401d2c1b42051e0d7869ef8f27c9c16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000051

MD5	bda2cbaad1d08a98ab6326b72ae7227f
SHA1	8d9b13928c785f2749b6ff6771f71bd930844bc0
SHA256	bd14546feb8dc495cbdb13ee0126907364197ef2936ab3860f4ed9ffc67f279f
SHA512	8fedf9dcebf13d807f5522652ab8b6fbe46fed4090b0b20a8bae68c77c266364f1965891a4be500197040abc763da1d62e603cf566c280b12951523ff5a2a704

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000050

MD5	8f7cb28bd157d5ef6ade406a6d9b96ea
SHA1	231cfc49aa580078cbb87f514d95dd856e734379
SHA256	ba72cef9a09917417805f4a8e4349faa883204e2ebcf5297634e9de17710c907
SHA512	93dd85e4dd8bec1aa29f245c0b1c299d828dcb7cd42954d8cd71b19aaf84ffdd80d4f278736f5868bd02bee857aa19732735b9f77b8d3e1cf115f9cd70737c1c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004c

MD5	d2c2651160de68a0adf0a02924de8354
SHA1	7f5d8f66ec523140731cfb0bc86510f604b8493f
SHA256	4d4d9f68faca5cf12868e746618655a9f52386e99ab1b9722cd4e4d21a342437
SHA512	e303d62350fea1b37c8487a95368b170ce558a4733d511a78bfdb262f9d718217288596d54d7e816bb50478b7ff23617400975af69901ba576dacfa46b725475

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5	003b935ec287bf18e7c868f928667f24
SHA1	b892727578697ca079184ad03628bb05cd3bf03b
SHA256	cee9341a054a23d344f60e80f40334d1fd85fcd2cbe206e37ca411cba45723fe
SHA512	2069ef9b9c77963cdfcd343e350319e39e34ac24914b1ccb1e7bf010b221d62843e64521b969018068c640d6e8019670bdce7068702cfb21614185155e4fe27c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	c998a0cbfec5ecaf8067cf2567e24250
SHA1	84a42488b92c5cd2d9c0be6083acf9e4510b9c23
SHA256	34988f638643233ab0ee7a469be01b33a3f2fdd01b22e371ea164fd3e06f7226
SHA512	38b960b39223062376e22e3a83773d531cc7d2a55bc6f225c07d595950f03f4fdfb839dcf8bcba3c840622b6982c6547d8d23e8d8e8b4f748e545e66b2fd8366

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	c69555f9f27312ea56851e26539f767f
SHA1	28efb830f848c448c2b028e5987b11351a879690
SHA256	16508488d2e92b029e6dfbd11cb3c147023d6f9b426fc0bcf199017eaf502a80
SHA512	a4601d2a309878a7ce29e684c109c0a5e21f04c47287f8e19bd29daee5f64e5a8195e75f1c1dfeb6babf2d15aa7c1e4a3f05b67a1273c05ede2fa267fab88ff8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	0e0b5e15697f2bd6b2e2df74e85c2856
SHA1	4f9a494e6badac3f090019e7be398523b58fbdce
SHA256	d04679bc327a62dc6ce927fdae911beb045a8b500ac6abd3fe1b39bd0fa50dae
SHA512	c989d147e69b7d223e96a48cef31e09e867b5a5a3f060f19b67ee5589078389d3ab0a151699b72191b4be121ef682df53da4f41d8addc7e586ba090d37872bd1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	a1632b223f8c72693eab83278d4a2b72
SHA1	a4d49e79dfc8e2c9cef82ae75b0b4f86ff48ca8f
SHA256	b4bade7b349ac827a638fb29bbcf7a76cdb2f440867df627fbdc6ecea6a4fd35
SHA512	19abf82b2158501014b0435c664742db05765b06992965dafc70d83ffad17ffac3ec9014ac7f770d5d23188425da6854569402d9033e223432bcee3ed86be596

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a4

MD5	f6b2f963758d0bba459011bb15d3ed19
SHA1	8a004496bca5660052285e7b9c1fd359f6f32440
SHA256	1c1a0cf6d1e40d6fab496a28d536b27252f2d449397f4279903ff319277b8cfc
SHA512	76f86f8c1e6e296a7bc8965fa5184e79c423fadc53fe30f3137a376ec12563f8792c1dc5f59245afc1ddb2782a84577bd515cdef2045347e74b8d5a3f2b124b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a3

MD5	8e170d681b813790aa195946ac0c988f
SHA1	a9f7c2258187648cef2fbbde02b1a738fb01912d
SHA256	148054a1eb463e6b456ab4ea15c638fad0cb56005d17d60c7e1fb237d58b9142
SHA512	08524a68a406c53d884ecf446a11f86c45aecbea701cf3637d031878c7579a15d061f614ec12da8d8d16014ebb0d9b157b3bf7fbd9ea8ba57a88cf634df5ecc0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00009f

MD5	ce74c3b7f97b135c9888ce0b22a70960
SHA1	78145df9466c2310446916484fedd626e9b1718e
SHA256	5f32a968cfcc4bab67808f2df8bbaf06d524381dfc130b50eb2470921a05f616
SHA512	aa60ffdf51a4ad3998ce990ef625de9111796f97697c6a79f0573e1f3f115c21dd7ba2c1a2d28fe85ae0cf34b632ee85534307cb3ead82d9191b25b54db9d5cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a2

MD5	f5dc907003865485bbc3b698175b95fd
SHA1	e8fe543922ee6a41556b8e5f99b9bad5a5a4f103
SHA256	10469ebfe248a4820ec4e171e96e439136d38b1f3cff0ab9ec88193bc7b764d3
SHA512	fb1d56bf4ddfaa6f0d7b444c2c2a57905b708963172c6671d2caa6f157b374230814f836d28bc3cd02b1c88a50f4d899794a5f7eb2f06bf673eec91233b066e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a1

MD5	a7993a920c1181890146d0bae836809d
SHA1	42a356c7ee75226805a820ace764bb4dd8a74c64
SHA256	44a5dd9a9a239cefb05290652a4ab5ca0936cd5bcce7985bb55a1902f949ade1
SHA512	2c3b6eddbb887fd4cd729dcd68bb2b92124847b9495d2545209c8cf7f3a2d1fa753fe30ad77622708d3d09510706c6f110e49ccae4ddb3465c53c97a4bae3df8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a0

MD5	a3f837679efe0c4af939c104f711e669
SHA1	b94326d91b79ddf5780bb891c0c6702a3aeb1067
SHA256	34db7a6cc267b93bee54548c84af8cc48ecc490e1906083e56800e86f59fcf26
SHA512	4199b14768b471f469684779dcf2165f7a446de2f09b23d23411e8de240fe96f969f499898f5cf94cf13e063e95269fb6ba38eec6a46135132a4f6f41be0e803

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a5

MD5	4fa2703f4057bee6cb417df28e241271
SHA1	31b09593c7a5bd79ff27bd01ff1c78cca3cc0feb
SHA256	24c7008961090a5e053829128ab174741c6ce9156bebe66416122cb60f14a6e5
SHA512	5dcdcf45f45b67a37b593d75b6f502a76b2de1e6c3a67a993b096da846426b2c5fce11fc90e2661e4242221e5f637d721e950a989b850f876d22cec0f034d0e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	6d5821d3e76a9e9a44967832721d68e2
SHA1	3974932a285f3cc1b71bebf2438e751435006d4e
SHA256	86c6329190550793dd67a4c5f4dc95f5dbac31c1360aeee6c668d6dcbe147d72
SHA512	55417a6222d0316fdc919c605937a888c46d6669c3faf56813532403a03fc977fb914d92429ec2670ea8de38d8d55415a228d3808ca5e20d7662cfe6e2a53c00

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	66ece46306f7f12c955a1c83e89291b8
SHA1	8e019a843d303b0f8a8a370c3ef4c9baee677f9e
SHA256	c9c54d2ec0a346989af5959ef64b28648b19834b7f0ad1997dfd2693459beca6
SHA512	c90fd2c7c4f6157641508d9ede49c32aec93e717a8bf43db23df99d6a2f39d0cd232e60c06be1f378e36c50ceacdfb402d5ead24ec7404e2c99695ed8abbc966

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5	bc9faa8bb6aae687766b2db2e055a494
SHA1	34b2395d1b6908afcd60f92cdd8e7153939191e4
SHA256	4a725d21a3c98f0b9c5763b0a0796818d341579817af762448e1be522bc574ed
SHA512	621386935230595c3a00b9c53ea25daa78c2823d32085e22363dc438150f1cb6b3d50be5c58665886fac2286ae63bf1f62c8803cb38a0cac201c82ee2db975c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	c4da01c1418dea96e0f227c8313e2df7
SHA1	fe1a442ded8a3c84d301b7d31e929b66b4c6c1d9
SHA256	434c7f8cad82ac7ad28712f27320f2ac291779cc600c5fae662633237220c8b0
SHA512	8585018e5a691f53bd7e7bd3729d41a11ed8b9ec6f75e400f4a30bea766db10975400b51e0acc87a90d3206b08fdc0ad1af3543957e20b47e87b36aea5919167

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	3d0018b3abe622b0291b6b3fca9b0e59
SHA1	111a1598f1e252df9c46bacac15edc0304c22e35
SHA256	554d85e86bb82e441c074342327b0cb648b6666ae307b011149912b501ab6bcc
SHA512	7d15543c8309573b5c0d7e16cb4f99bde9f194bc08096b6515e9ffb02b82a698a6cdd5d1b3249e4aec96440af114fe1bc299d29d1ed2d9f86b3307f601870cde

C:\Users\Admin\Downloads\Unconfirmed 305147.crdownload

MD5	1b54b70beef8eb240db31718e8f7eb5d
SHA1	da5995070737ec655824c92622333c489eb6bce4
SHA256	7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb
SHA512	fda935694d0652dab3f1017faaf95781a300b420739e0f9d46b53ce07d592a4cfa536524989e2fc9f83602d315259817638a89c4e27da709aada5d1360b717eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	ade72c291e4308655ffd2c4ccff50978
SHA1	edacbf53433d15725963de50e929ca3f630360f9
SHA256	3cb48eceef678b5a9236f37a5ebb4e8b0e5c978dac69221c6dcbf45a77f9714f
SHA512	a6e49e2e68302e069c8bda9e0fe84d47e52a63dc67153f860666ea9469ecebcd6d5246e440255d463316b0f6168e8f58ce5ca3dc85657c52cce3b49bb6ebee2e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	e001a34a51050eba7b58db7f7a1c510a
SHA1	1707ca798565751a6e63d21004e6a0e777ec8277
SHA256	0a86cafd95da413d288b083a120c632f0c32ed6c0a1d2f5a633f2b87a6428ac0
SHA512	760981eb4138c597d71139c488f0cd6283a45d5562b5d2d380a90917745679d731f49b6b991a95e13ebc9487a99e2bcd586d8b94656a4bd6881c13f1c9af66e2

C:\Users\Admin\AppData\Local\Temp\nslB6A9.tmp\System.dll

MD5	a36fbe922ffac9cd85a845d7a813f391
SHA1	f656a613a723cc1b449034d73551b4fcdf0dcf1a
SHA256	fa367ae36bfbe7c989c24c7abbb13482fc20bc35e7812dc377aa1c281ee14cc0
SHA512	1d1b95a285536ddc2a89a9b3be4bb5151b1d4c018ea8e521de838498f62e8f29bb7b3b0250df73e327e8e65e2c80b4a2d9a781276bf2a51d10e7099bacb2e50b

C:\Users\Admin\AppData\Local\Temp\nslB6A9.tmp\nsDialogs.dll

MD5	4e5bc4458afa770636f2806ee0a1e999
SHA1	76dcc64af867526f776ab9225e7f4fe076487765
SHA256	91a484dc79be64dd11bf5acb62c893e57505fcd8809483aa92b04f10d81f9de0
SHA512	b6f529073a943bddbcb30a57d62216c78fcc9a09424b51ac0824ebfb9cac6cae4211bda26522d6923bd228f244ed8c41656c38284c71867f65d425727dd70162

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	cdc5d33936ad922f35f34693abe51880
SHA1	507cd513335af11dee14b24a9cf5222e3e9c8a27
SHA256	01de6080bb019cdcfa10f20b3b26b0d410276474c31ceceff6d9e7f57b8ed21c
SHA512	3fa838d927a79f8b32e950691296852a6afe7e3f538dd3c9766d20bbcfe97a0531e68a8045094cb7caf438c3af00ea512b353b18c95b9605007665bcf45cb5d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5	f9263f32a636b715a424855b918b1e11
SHA1	848b7ddb0055db085c227d49604851a75027473d
SHA256	f18a1a68e6d1cbfe187b5b1eff88106857be58f19684947b98c56e73a5dfcb8f
SHA512	bb127f5b70c578c5f1e9a094bfa1ce56475489d95db4f20acf03cf56c85ed6536de45eae07488f8d94b2124df8cb40794929f4e27f0f3aeb4061377e5fe098a9

C:\Users\Admin\AppData\Local\Temp\nslB6A9.tmp\nsProcess.dll

MD5	08072dc900ca0626e8c079b2c5bcfcf3
SHA1	35f2bfa0b1b2a65b9475fb91af31f7b02aee4e37
SHA256	bb6ce83ddaad4f530a66a1048fac868dfc3b86f5e7b8e240d84d1633e385aee8
SHA512	8981da7f225eb78c414e9fb3c63af0c4daae4a78b4f3033df11cce43c3a22fdbf3853425fe3024f68c73d57ffb128cba4d0db63eda1402212d1c7e0ac022353c

C:\Program Files (x86)\Steam\Steam.exe

MD5	33bcb1c8975a4063a134a72803e0ca16
SHA1	ed7a4e6e66511bb8b3e32cbfb5557ebcb4082b65
SHA256	12222b0908eb69581985f7e04aa6240e928fb08aa5a3ec36acae3440633c9eb1
SHA512	13f3a7d6215bb4837ea0a1a9c5ba06a985e0c80979c25cfb526a390d71a15d1737c0290a899f4705c2749982c9f6c9007c1751fef1a97b12db529b2f33c97b49

C:\Users\Admin\AppData\Local\Temp\nslB6A9.tmp\nsExec.dll

MD5	2095af18c696968208315d4328a2b7fe
SHA1	b1b0e70c03724b2941e92c5098cc1fc0f2b51568
SHA256	3e2399ae5ce16dd69f7e2c71d928cf54a1024afced8155f1fd663a3e123d9226
SHA512	60105dfb1cd60b4048bd7b367969f36ed6bd29f92488ba8cfa862e31942fd529cbc58e8b0c738d91d8bef07c5902ce334e36c66eae1bfe104b44a159b5615ae5

C:\Users\Admin\AppData\Local\Temp\nslB6A9.tmp\modern-wizard.bmp

MD5	3614a4be6b610f1daf6c801574f161fe
SHA1	6edee98c0084a94caa1fe0124b4c19f42b4e7de6
SHA256	16e0edc9f47e6e95a9bcad15adbdc46be774fbcd045dd526fc16fc38fdc8d49b
SHA512	06e0eff28dfd9a428b31147b242f989ce3e92474a3f391ba62ac8d0d05f1a48f4cf82fd27171658acbd667eaffb94cb4e1baf17040dc3b6e8b27f39b843ca281

C:\Users\Admin\AppData\Local\Temp\nslB6A9.tmp\StdUtils.dll

MD5	db11ab4828b429a987e7682e495c1810
SHA1	29c2c2069c4975c90789dc6d3677b4b650196561
SHA256	c602c44a4d4088dbf5a659f36ba1c3a9d81f8367577de0cb940c0b8afee5c376
SHA512	460d1ccfc0d7180eae4e6f1a326d175fec78a7d6014447a9a79b6df501fa05cd4bd90f8f7a85b7b6a4610e2fa7059e30ae6e17bc828d370e5750de9b40b9ae88

C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_

MD5	577b7286c7b05cecde9bea0a0d39740e
SHA1	144d97afe83738177a2dbe43994f14ec11e44b53
SHA256	983aa3928f15f5154266be7063a75e1fce87238bbe81a910219dea01d5376824
SHA512	8cd55264a6e973bb6683c6f376672b74a263b48b087240df8296735fd7ae6274ee688fdb16d7febad14288a866ea47e78b114c357a9b03471b1e72df053ebcb0

C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_news_mousedown.tga_

MD5	00bf35778a90f9dfa68ce0d1a032d9b5
SHA1	de6a3d102de9a186e1585be14b49390dcb9605d6
SHA256	cab3a68b64d8bf22c44080f12d7eab5b281102a8761f804224074ab1f6130fe2
SHA512	342c9732ef4185dee691c9c8657a56f577f9c90fc43a4330bdc173536750cee1c40af4adac4f47ac5aca6b80ab347ebe2d31d38ea540245b38ab72ee8718a041

C:\Program Files (x86)\Steam\package\tmp\resource\filter_clean_bulgarian.txt.gz_

MD5	836dd6b25a8902af48cd52738b675e4b
SHA1	449347c06a872bedf311046bca8d316bfba3830b
SHA256	6feb83ca306745d634903cf09274b7baf0ac38e43c6b3fab1a608be344c3ef64
SHA512	6ab1e4a7fa9da6d33cee104344ba2ccb3e85cd2d013ba3e4c6790fd7fd482c85f5f76e9ae38c5190cdbbe246a48dae775501f7414bec4f6682a05685994e6b80

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5	c66c7f78c9ea82d626b9f573fa9aa754
SHA1	39e154393681bf2b8c6d5c1512a92c6c8228abce
SHA256	9fadd737556662421e49eaf90c764ca5625df784685cc328600077e0d0f792f6
SHA512	d2c9f50b7516b8bf5bcb1d039daa55d6d0509d03b287fd2eca93ebfd93bc4e9326fe3f83fe672011a427742e96797af2ea8783acbdf1ca5a4bdcfcf493b330a5

memory/5580-15117-0x0000000000B40000-0x0000000000FF2000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\MANIFEST-000001

MD5	5af87dfd673ba2115e2fcf5cfdb727ab
SHA1	d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256	f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512	de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

memory/14600-15138-0x00007FFF9A6E0000-0x00007FFF9A6E1000-memory.dmp

memory/14600-15137-0x00007FFF9A640000-0x00007FFF9A641000-memory.dmp

memory/5328-15214-0x000000006FA00000-0x0000000070D72000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000002

MD5	56b913703255a5987243bf1b083b3c39
SHA1	e25f12d9db1649ce7cfc55eed5aa8b7cb2a5539a
SHA256	3d71468bce1f70a7b97618b2d56204dde76749656661408247ba261598ff67e1
SHA512	e5ffea041e8a67eac45c887593efe185a5047558400079bf0ea440089e41b367b579b1623dded7fb3c36b423f74ebd12e4d256750addc64b161b95edf44a3a80

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000004

MD5	62f898fd6992a6036362cb6940826c3a
SHA1	3af7ca24e728670e522b97bec16f7d1118f29f12
SHA256	be3af12f5b2d95630d99f2deda5ec78e8d4886f8abcbe0910735f123fe1dcdf4
SHA512	72db97e1193cf9c554b363a118d054606807e2c470f9fbd7e996eb202216d7cf7ac2e03da075e028c42ad5ec606c3d867ee61d8276f23efb576d32b13b5c4a13

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000010

MD5	64278a903ff04d2e4ae7b7f36dbaa54e
SHA1	c1cba04e7e769f9d8bb34de57d3d363652385cd0
SHA256	64b2cc1ce8325a40ddbd2347471d3adc1a358e0cbd7d6cecaef0c375f4eb8e7f
SHA512	a42d8b937f944f85ef1611d62c1a0ef87846f83dcfae6fba3e324bd9e3d056a85d008ea7444228ff0b3484fcfebc43f638967b78a28072c10ac68c8945e19519

memory/14600-15270-0x000001D6D1D50000-0x000001D6D1DBB000-memory.dmp

memory/14600-15269-0x000001D6D1CA0000-0x000001D6D1D4C000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000011

MD5	e6e15f63a20a10ba6a821621af2e5da4
SHA1	24c54049f5e069516a99cf59accedd0852bc4731
SHA256	c0258f150582f1e7fef221f62a58053ab3dd01d8b9bc76f2e0a7480fc9155cbc
SHA512	5c28cb5e9119663f5375ddd2c5f6550bc4abeec36d85c0c6c8abceca57eabe4fe0674cef18791bdc23eee26d3ca857dfc93f1ae237c4cec634f9d98e3771ada5

memory/14680-15276-0x00000284A1140000-0x00000284A11AB000-memory.dmp

memory/14680-15275-0x00000284A1090000-0x00000284A113C000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000012

MD5	b7f4239b69d60053612374bf3e4d9b98
SHA1	077b6286b5e86a25d172c286a6def398e2a0dc33
SHA256	87f62b966cd8316a4467efb5c1873abf038e8a930090667e1d2dab18afe41c23
SHA512	5cfcc48d52d790e589a13bdaf1dff6b5aa6d3c33450d7d8a06ab3d028e047c934e8238e82246bc1b5067477235c763608fe3b84acb3837d23ab533cad99982da

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000d

MD5	99916ce0720ed460e59d3fbd24d55be2
SHA1	d6bb9106eb65e3b84bfe03d872c931fb27f5a3db
SHA256	07118bf4bbc3ba87d75cbc11ddf427219a14d518436d7f3886d75301f897edaf
SHA512	8d3d52e57806d1850b57bffee12c1a8d9e1a1edcf871b2395df5c889991a183a8d652a0636d5452068f5ef78d37e08ce10b2b2f4e05c3e3c0f2f2230310418a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5	f9271ac935570c4a688ab1c9441d6dda
SHA1	a8405729443e28ad2833bedd7667388222437279
SHA256	e5b718a4bd9df3324f2bf626477e67b6d969000ef624911e4d92b7a50c2bfa9b
SHA512	972cc0627ea5694426c6fe1a6900b76321263a8e241c0ec0f748ab7fe6fb894fa640041061eed6f76f5ae12888445fe50ecc0b897d3e3b148312f6bce13b886d

memory/5328-15316-0x000000006FA00000-0x0000000070D72000-memory.dmp

memory/5940-15321-0x000001C4170E0000-0x000001C41718C000-memory.dmp

memory/5940-15322-0x000001C4171E0000-0x000001C41724B000-memory.dmp

memory/15100-15327-0x00000218FB300000-0x00000218FB3AC000-memory.dmp

memory/15100-15328-0x00000218FB3B0000-0x00000218FB41B000-memory.dmp

memory/5328-15335-0x000000006FA00000-0x0000000070D72000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index~RFe61176f.TMP

MD5	288dec858ed898507bc3cf8ded58fab1
SHA1	7fcf78ec09989add5a6bac7f48b3b873bc4b0b07
SHA256	9d0ecfccf82d173fe514a47d893c4256ab122a413352198e523f244397eceb71
SHA512	8d3c0b6676f03e41c6383381090229f0dab2434d4804fac60b03f17bdf0d82d0e8c98a471ca8d0ec2e7be751cff4ff54373e6bc07b8e373e57d8d0ca2a129312

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5	a19dfbc80fe56db1a0ce1ab20a6225f4
SHA1	7f5c264c9713664c9eb3d051eabc0a88628dae16
SHA256	365766afc682368e7079517a6ca18355185e05b0bd7d8511e2b9b0daa7d14662
SHA512	84527d3dfe13a535002ac7bafba136dfdb78dcf9798f5c9be31c6631e6725ddd974a332b0ef7661f2cc1d9bf2ac35051f5162736b0d4b0a593fd2b2fd78e5801

C:\Users\Admin\AppData\Local\Steam\htmlcache\UserPrefs.json

MD5	4ee6513569fd38f5e3daa1054fe8c6d7
SHA1	31d03d4fb7e50b7296a4e1885b8313e6b2faf4cc
SHA256	85735fa4728949c467db09eb7d424cb7e0d12cd25c92eeeba34f371b2fe7892f
SHA512	cdd95f7ebae27a0ab94430f6b4de0fa4ed3478f73d7d411c04bc653893f6dea6ac52f10d5d5f1e9815469857be1d92431e227d63c541d88f11109c608b380bf9

C:\Users\Admin\AppData\Local\Steam\htmlcache\UserPrefs.json~RFe6118e6.TMP

MD5	f10088412e6b05f69a1aa41a7e7a99d5
SHA1	9b30f510c509fb872cbc994958379813e393226c
SHA256	8c0eb27cdcd066aba3590cf618b486e5fab95686cad0ddfcebed307543448992
SHA512	cbc2d1bd0acf4bc89db8cab9f485ae16b71e1513d59242c224f351b448e30bb9fb887324a77c2bdba5d230b4136f4ed7760bf123f704f745732ecd2eef4569e8

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5	804e075be92197fc88f2a0bce91dec8a
SHA1	4a33f1db760a79226fddc1cfe78c6d3ff9a45796
SHA256	6e37cccdacd839734807b5b69d701639c7f173d0a38adc905252bc7d942ea00a
SHA512	88bacbd3e4838ec8ecc7c31b7f227c6d54e1f98658e09e52c54d0e35527255dc12341191f526655fc1ff3478fb49a18743e5dfc04b5accae68fc8623135ee29c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity~RFe611925.TMP

MD5	c44d5f0b72abee8c81cd01716825a9c5
SHA1	5bdd12189f2e988a97ec3e97875e2bc80f329142
SHA256	a833db5aa92b9b4822daf09de9f62a4dd11ce6d796afc5350a4f8f882d3530f7
SHA512	c411b9d2a6ef1b004e7998a8e4a75c26c0dc610bf8f6779f8854c15a657809d308e8f92b7b5deb47bb371bd1d2036bbdcbc9e02bd425684ec7f54a0b4def0b17

memory/5328-15385-0x000000006FA00000-0x0000000070D72000-memory.dmp

memory/14600-15386-0x000001D6D1CA0000-0x000001D6D1D4C000-memory.dmp

memory/5328-15394-0x000000006FA00000-0x0000000070D72000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5	d4c0c9aa59d2d88a95f4563f5c924d5d
SHA1	e0b27874f8946c9edae5dd5e5690d3b00a913935
SHA256	5e56db8aeb352c9f457b0c9b590004bd4a7342b8ed00adc64e2cc278570ea2e9
SHA512	5ff9906e979f574a6974b7732e59f8129b242812d4bdfbd44070c9b017f9b654f193b9ba892935bd6f30ae8f82a84604082c906a997e6b02df0176c9cfde6d4b

memory/5328-15414-0x000000006FA00000-0x0000000070D72000-memory.dmp

memory/5328-15426-0x000000006FA00000-0x0000000070D72000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json

MD5	6af7937c168d34a95d6670be233499ba
SHA1	3d8ec31d39b395b6480bff57f7230bb7f4d836b5
SHA256	0cc37bcf191dba2603e54a489bc3c2f2d3f7baa4617fe47a298fe447a0937ea3
SHA512	a7214c3d66f35f7ec399d12069c912218ba4672b83acb61dfed78d32d09e11c83108c9739275ef8ae9c5737b6eae32cbe3f6704f726af06d029e794c69725609

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json~RFe61a44e.TMP

MD5	18e72ff7e3d45f3fa9a706cfd71a1b6c
SHA1	66dd9c3be5e3697ca5a4953070e5e7aa673ff9ae
SHA256	f82038b54daaee78cdaf93c5a2be6124197531f2931ad7375790ed5986a44f41
SHA512	284959ae6ccbacd18662f53dbe121ad85bd759b53493fd8509c0b4d1effd6314b4386f3be0449900e14679434d873b26777ca4ae40a12ad5bd76bc92a18c8749

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State~RFe61b7d6.TMP

MD5	2800881c775077e1c4b6e06bf4676de4
SHA1	2873631068c8b3b9495638c865915be822442c8b
SHA256	226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512	e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5	ca43f8e12d5dd86015bf10f6c8625403
SHA1	b29ff7369f6a81ef70afc4f36e2c840909fb1e8d
SHA256	7a98896d7aed9702eabb2ebd25f90e69b97f89fdfcb9749eff04665383d2be98
SHA512	323152b0f1c663cd6e87740e83971cb2a5e089a427d22f6afbc9c72a32aa82a1ea1b4d5c323f66301ddfac4a36e693662f79d37cbd7fe05a952bb91d990b3cc5

C:\Program Files\chrome_ComponentUnpacker_BeginUnzipping5644_689289112\manifest.json

MD5	2648d437c53db54b3ebd00e64852687e
SHA1	66cfe157f4c8e17bfda15325abfef40ec6d49608
SHA256	68a3d7cb10f3001f40bc583b7fff0183895a61d3bd1b7a1c34e602df6f0f8806
SHA512	86d5c3129bec156b17b8ebd5dec5a6258e10cb426b84dd3e4af85c9c2cd7ebf4faea01fd10dd906a18ea1042394c3f41a835eae2d83dc8146dfe4b6d71147828

C:\Program Files\chrome_ComponentUnpacker_BeginUnzipping5644_689289112\LICENSE

MD5	f6719687bed7403612eaed0b191eb4a9
SHA1	dd03919750e45507743bd089a659e8efcefa7af1
SHA256	afb514e4269594234b32c873ba2cd3cc8892e836861137b531a40a1232820c59
SHA512	dd14a7eae05d90f35a055a5098d09cd2233d784f6ac228b5927925241689bff828e573b7a90a5196bfdd7aaeecf00f5c94486ad9e3910cfb07475fcfbb7f0d56

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json

MD5	f5fe67e1ea26a3e0ced91c96535b7d20
SHA1	e6d578e9e48609ceefb86234d1eb791b2eba5077
SHA256	8fc2411ee5456401bc333bad77b565f0a524e595601f4ac6ecd2bad2dd713bcb
SHA512	ebe3438fe6ea515938b87635096c955cff199686a25b4a9ec918227950fab27f1207be3ba7ff870e150436910b3efee3fa6a9293a9951c1bd58ec34984d40fb5

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5	31be865a32b7b6014ef139330c93a414
SHA1	991377afa3d8c9625566a18534e2c2dfec8cebf1
SHA256	3a880f95cabde48197b0953df0b7f1cd926c897ccdb4c54fa49f1fab9a106fda
SHA512	0514a5eefcf3ca13ccb460270adce3af1cbcf25a82753d9c3fcaec475112667751cb2d56019c17cd6e0fec3d9366d3bdd9f4a5b7f009dad5cc41ec09b75abd49

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5	f0467564422492877452a267a9bbdf87
SHA1	b1e5f8895b1eea6cf638bdcdd2de2e035b0dbf01
SHA256	149a378445fcc39a98bfe82d5743fc86662705646ddd1a2e0ad4320b91c830f8
SHA512	45e2e0231aaad2466465276a83bee62b9027921aa91cd2ae3be131149c3ded8e0c8db5478f9dbfb70fd844048a9b34de73218e4f01cdeb569d7e0725b46f988c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5	082f293273a366bf018d930487897df1
SHA1	72d0d16324d18176d1617fc61451f383ef7af3fc
SHA256	769e0d1874a7c160fb5aa23b00c6555dbde98b6b7dd8be88e221aa0329b3b94a
SHA512	8ebc1b323401b29a28378299230121051870f444e516114c4a40348a0ea352c7ce9db744717587bc60011a97d702e1860a856dfbc4211d1a0b72371eca8f4781

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\temp-index

MD5	52e1a17feb22254bc74103f8295d149d
SHA1	bd3d7099a2c20b59930ec412e41ee63f940517eb
SHA256	dfd835bb09ad27f6f3098d6af04410bb77ff571080c43533d4ec856e9cede570
SHA512	5b823e9b597e917fd7783b48fc20af3247ece80e7b2eb6fb74702e9630f775824665fda9f30f7928b9f70cdaebf200c17f0c6ffeba6b5e061ab2c708a6ed3aa3

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5	c202f65cda79bc2ee1b1978621ea7d5a
SHA1	82daf735b69d988ad86f3875bbc19dc774bafea9
SHA256	13d96555bf8c80dc28c89b939602aa999fdd16d7166bfbbf354ef2bc6db62067
SHA512	d7bb1b2908cd1abd14b347e727973a579d229e3ff8a34907458d82e2ab41d8711d88d353aab1e00a33cc86e814ae6ac62f2953d44756393afa4a47f00a2e5e1a

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\temp-index

MD5	0970978e9cc87fcf00e2174f7e914793
SHA1	40fb23b986569cccdfeb645c1dae70a78e47e240
SHA256	60dde97626a3eb72d65c215d6f912568b6662653daccc41f3415c266949985b0
SHA512	67c10f51696864681ee5a81efe194f27d6e1049e4e25d8041c7941e758bfa80bc88f0225541bf3ce0c1537af2b9db48d0d976f97dee84da16376284924cd3b4f

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000005

MD5	e13edde4a25e96e573f37bdd11e020aa
SHA1	84a0c3cc6cd74b149cc27de2b0fe48bc2acb70d2
SHA256	45b526e6aa5356b278aa37e67593a25d09c9653e8a0e71fb8e155111d3b7a515
SHA512	9ba4cce47994f949731e594538f56f423ee46a8e602fe922ab6e1d173b87831ae5a80d967d695fc45a08b25aef5c494518b43cde6b4709db690e904b2cc1c053

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000006

MD5	c5e39337f681f1c40f0efa29366109b6
SHA1	3df6cdfb2a6ef5d2e0b0b2832154986629dc3e70
SHA256	70707407660a3f4361c5b197db2be83f96fe74e2f1f95f0753e985ee30b7b84e
SHA512	f73d25aa88d2ff3bdfc4d569d20c327883b16600f76410c883e07eba51715cc65d8983cebfb681f2a0c6f888394749f9975ecbf5c9af428ec5f3e433874d6534

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000007

MD5	6f882cfc18469731fd8ebeca69365f7f
SHA1	78ad386807dbc130b1fbe5e1a97389e1e0e2981a
SHA256	b81ddb468e5604f1b5ddce3c1e15e0298432841752cd6be0c497b05fae7cc346
SHA512	75855a2b09abfab3476fc16b18d996e4a705980a1dc2c4f84688c9b8c7b4c1a6ed0a4dd7f6c57eb28838ba1999012a96253a1288f9445056bb2f7386b2315128

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000008

MD5	80957d40038edbf006e7d2f5656009d4
SHA1	d5a187dfe53774c0162a8635fd0f6dcb14b481cc
SHA256	7f888bc3edc1df60155af5c126f56a67f5f19b4a53421b2df762a146249fd289
SHA512	8cd093ab4c70c8f60f0facb19c6a4805f630de8d868b1bd2a6e985e45ddfd335050b6c0ab9765c87937228a69c8547f6b940e9abe43a14d630e41e1dd679318f

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000009

MD5	47d88f0e30322831ac51429e321af624
SHA1	0a3a50ae8c9d61a6d96b872f91b4694187be0bcb
SHA256	ff066f3e1ab3028b7bf326825772da1a50d4c9bfe92ec0abcb52f17ed996482c
SHA512	416fa132223c396c6ec4ba581383ff0859ee02a7e73acca4836df0e8154600cc9cfa4249832d0370fc7c45232e0114994e7da36d094cd459a6f3c77be539cece

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000a

MD5	1cd9f819fae888ce4860b7f6093347f1
SHA1	04f78da120741f1198d595af811b2c42ca9d5406
SHA256	d90bde2cee49d26d93cc149da64ebfe3b57b6f391c1fe84c696a2d5e3f33b3ad
SHA512	2f7e22a0b36ed64c6be176f48f91663bbaca60d7a4ea862a6a81678fadc1d8df31c59a3266d1097654fb52345e0d2e292b8bf48e9497be9c3e3be89cf43bf90b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000b

MD5	e86e0b208bace33f1c570998675062d5
SHA1	919bd1458f0d72cf554d0f726db05c673845503a
SHA256	af885e69dec1e2789dd7d3333ce49d67710c8aa230ee30ef3b7f9a82f79f4ce3
SHA512	5126675d112f1b27f710b82f9fc04bee899652761a4ab409384d5d6bbf2a29f22976b105671a57ebd1c335ccf38e5e8769a846d4124a8dccb2a78530eaab0c39

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000c

MD5	258f9d88ee5a22b75b254cb9b1748f4c
SHA1	5d3258de7b64f938f2de6f7c625d3d831e944617
SHA256	28547cef0e1ed10e3bc81837436d5a10ec68a6af336c7aace1496742b959e6ee
SHA512	c1ada12c2192b07e6bab354e601197cb4796560279949abdee52982916631fa16fbf922d49895ce2916e260b5d2d1a398b533d99f09757a7711b31869e0270fa

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000f

MD5	57613e143ff3dae10f282e84a066de28
SHA1	88756cc8c6db645b5f20aa17b14feefb4411c25f
SHA256	19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14
SHA512	94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000e

MD5	ce6bda6643b662a41b9fb570bdf72f83
SHA1	87bcf1d2820b476aaeaea91dc7f6dbedd73c1cb8
SHA256	0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6
SHA512	8023da9f9619d34d4e5f7c819a96356485f73fddcb8adb452f3ceefa8c969c16ca78a8c8d02d8e7a213eb9c5bbe5c50745ba7602e0ee2fe36d2742fb3e979c86

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\2e71271610b64c76_0

MD5	ccff08ff5d442e1066b9253fef53fa54
SHA1	7c0c780f702d4f73b720885aaf25857ac70454d0
SHA256	37c8dacaec1159e165d0b504bc70743d0fe13a7f487e3ceb69745d826abe639f
SHA512	7366adef9b6a59636af12e560d40e5b7f2b390ba5a36f2b9f5549a05dd309bd409b4ef0963f114da70407d2afa437bb364ed62dc1ef5d7844a80d44e58aa5d75

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\81368c0962e37f6f_0

MD5	5072b8323f45f8af60c59425c39cf373
SHA1	4d145bd9608ff1e4804e4fba9ca9298da731b177
SHA256	3b3e5dffeb910e0d5b9499b45b892588233a255bd6db1973effab4620e038166
SHA512	1add5f276a25438794047d25870606f60e6aba34ae6b8b4ed62013ac9f5742745f20ff4e2c61a96f71eb392d6a1742b5072b0249ef8406aec15b33ef1629da69

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5	cd0132f00331e10658bf6c0a94e23bf4
SHA1	23e4c5d30df52381a4344d8120fab670f9d616d1
SHA256	bdbdb20c3313bcb3e4d9926c56ca8139e948882eecef17b2002bfa6a7915f8f8
SHA512	3da1e1780f7a252abed0766e16d345f436344862966229a3c1331308687c6d31cea253b5d03c24efe54a782b206e392e899c3dcf92ccb311a428c755b3d7fc08

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5	1a409ec50440d9e8a17f4307e3d770cb
SHA1	932dc02217c2564e92a35aa4c620b3b5847fe48d
SHA256	ba3150c93789309f95096242ac25843ddc9097ac3f33d1af984d3761d68c2548
SHA512	1666e54eac9be82bffef77ab174e761134bd1898f437294875f35496b646697476d3ff31841ab7b4896e7277bc59a4ce26c5284aa4cc2cf44c4455d579896c7b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5	56c8734b8bf45da17940d3a8d2a8a9cd
SHA1	066f6183dab38c697652245e4c6978e699f93d17
SHA256	94b51f22f8bc5bbb341ddb72cfffb70abded5b7533e6d9eb69e8246cbdb0d7dc
SHA512	3f0cf8a22459b19761a373c28d4b0734c294410167ed4f6521ebf0108450eebad1c0d2c95d98d44cf508f16e4bd445fae1ce246527e9dd33e96a5c556e3a6ac3

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5	18d94fb1362d59f72b119853861d8e1d
SHA1	9e0e217052baf853107203f61bee0e91e85fc7da
SHA256	7dddab09f471f14076c0c38a07bd056b70dcd615e232c0db3db1dd77d2334177
SHA512	d86270f2a7907ae9414d506e3a140f8a6a47a6e2d2a4fa703ac0225eaf2dc360fa93f063e20edbc9236bb4ee7a6ca71fb26a1847cb5b6efb28c5a1279123dc7a

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000013

MD5	1fc15b901524b92722f9ff863f892a2b
SHA1	cfd0a92d2c92614684524739630a35750c0103ec
SHA256	da9a1e371b04099955c3a322baee3aeee1962c8b8dabe559703a7c2699968ef4
SHA512	5cdc691e1be0d28c30819c0245b292d914f0a5beaed3f4fc42ac67ba22834808d66a0bfc663d625274631957c9b7760ada4088309b5941786c794edad1329c75

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5	9edacb40f10605f5d1112a0aae9b0d13
SHA1	1c55c98e9f145a8b358c1b52887e0935acf3cd78
SHA256	49881a728e584bfbb54d26863e284d3eea6003fd959100736629e249bd90fd54
SHA512	e0a14302657cec461ec3a88b0c62d45e751df0a94a0185c99305be3cf3836deccf194444570199c22fc6dccd2bac36e304ea21ac1e9b6bc89a73971d134f9b45

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5	1ce2403f344543598c5344320952dd65
SHA1	de4deca46f58ef5e6d552887803380aeda793e05
SHA256	ca6266c1074b7067c29821cddf7008d3fea0adeed69b344153e4f8d2ffb690a8
SHA512	7cb700453e78e4dd708cdf821f6e586e84e77b020f5dee4dd0c0ceb7ae46f7e1fcf9825d025c13239b18e34387abfdbdd3c350bbb557a57b09012417fa590d28

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5	df65ce3b8714967335b4ce6cbed79cac
SHA1	c88a14699b4149f104962a922412912f62abaeb9
SHA256	6ee5ae1eb63a82d2665e12f03e2491cc12cd432913655cdf21f6eac83179d749
SHA512	afffbc9de07fb2798ddb4b1a5c4e1795802ad52ab9e45964ac4b74f1a95f39c805ccdc2d2f4d99c0ab410e858cd098ca321fc38af76e15b7c7d07d1e61fec709

C:\Users\Admin\AppData\Local\Steam\htmlcache\GPUCache\data_3

MD5	41876349cb12d6db992f1309f22df3f0
SHA1	5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256	e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512	e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\Steam\htmlcache\GPUCache\data_0

MD5	cf89d16bb9107c631daabf0c0ee58efb
SHA1	3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256	d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512	8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\Steam\htmlcache\GPUCache\data_1

MD5	8023043119d5730cf9ce9e3d1050e4ac
SHA1	2dcb28f59bb195108ed3ad881145811c2345aa0b
SHA256	e631cb93baee29f4afa9bc79521d69521a88c02965490d238af4b2a16b11e290
SHA512	ede8cd47011193c9ddd27425fba6c7d7ccac87c27d3d31a19c2e0bba15c3eab5ed9605359f6339b997a6c23452cb32a00d728bf0dd053e325be02c84233b95cd

C:\Users\Admin\AppData\Local\Steam\htmlcache\GPUCache\data_2

MD5	0962291d6d367570bee5454721c17e11
SHA1	59d10a893ef321a706a9255176761366115bedcb
SHA256	ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512	f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\Steam\cefdata\Dictionaries\en-US-10-1.bdic

MD5	4604e676a0a7d18770853919e24ec465
SHA1	415ef3b2ca0851e00ebaf0d6c9f6213c561ac98f
SHA256	a075b01d9b015c616511a9e87da77da3d9881621db32f584e4606ddabf1c1100
SHA512	3d89c21f20772a8bebdb70b29c42fca2f6bffcda49dff9d5644f3f3910b7c710a5c20154a7af5134c9c7a8624a1251b5e56ced9351d87463f31bed8188eb0774

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5	7145016809c0224425f3c7ffd9e0e626
SHA1	cc77c88af87174b0765958a852492d996d5f0b9f
SHA256	65fc148eba1ac8fcf0197f1cddf02337a5a9238792f8abfb8a518d981e790469
SHA512	b814e13f304a19fb015ece96e745278871a3b95a2e32258d18530ddea6db0f2b6c7ccd03569e3eaefc7c5c230c6e8873c4604ec6bb6d4ec3bdf6002d107bc38a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	0ee0b89c2e0368dfb00893039ed3e09f
SHA1	9b4fa74c9b88d18dbc3d5bb3b97185c417ba6c00
SHA256	45de56353f1726901bd7ab1b281e3f35066767ccd79e66057b47099d1106b839
SHA512	1bc35358f334a7eb26da8b27d77f663c8d455404fbeef37275c9fadfb610f31e7183934c93a92ff7157a9f684d7c523cad10a849929e3e197c3862c2c7256171

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000133

MD5	8991c3ec80ec8fbc41382a55679e3911
SHA1	8cc8cee91d671038acd9e3ae611517d6801b0909
SHA256	f55bacd4a20fef96f5c736a912d1947be85c268df18003395e511c1e860e8800
SHA512	4968a21d8cb9821282d10ba2d19f549a07f996b9fa2cdbcc677ac9901627c71578b1fc65db3ca78e56a47da382e89e52ac16fee8437caa879ece2cfba48c5a6d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	7945210be3b0dfee35935ae166561803
SHA1	b9dd7a6e678607cf9f101dbe082e183f472c01bc
SHA256	eea549d1ccee798e505150e21208fa75757c7d32f3d48f9db4a519111f46b41f
SHA512	f800cb32889124eb16a2a22980033af254c29ebb51e61e744a41dea78e3288fd0dc9f9364a723c2ec24dc432808b80baa20cbfccc2063cf76ebd36a9f40d1481

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	449709ee337ad814a0cb53acea28bfb2
SHA1	344d6e551f42037d534b40e3b89b49533902dc07
SHA256	fb98522dedb4233b84e19e9a905b3666f9c307f156dfad4393ef90ceb13b523a
SHA512	3ef4ab0ab7aff30ce05d1f4850a9c59160803063d31fed716d0da87ca453c6d75abd28ad03754423bc73f0ecd98f57b2bc5c1d80867ad0c9a717cbf15a4a5cdf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000131

MD5	666828d24d121fc7011886c7a36ff1c7
SHA1	a62c8ffc24b61029c92cb1da6bcbbc02d68c9b82
SHA256	e788746060b876afbba3bece285f241d64c088bca3e4bd920307273187f261ef
SHA512	1e71119b3029584c862258f8127119edb60da167bbd3a5ac5b816f84cb8c423ba210df5ec15b40a53c7c40adba1c54b125923161c02d6dbab68488d09142ec6c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000132

MD5	c99b1c96ec90b0cb362052ec1fe1b4c0
SHA1	39586a471f0b837c3753600f58bf138ec6890c05
SHA256	5291571699015217ea9fcb67d8c4d27ce479a9d6c0ef42202ae91a62c6913d55
SHA512	cbc37f79de373375d01e61889f137f9109d293ee9148b8416b758bb0aa1dd015dbcb7ad330c3d112f57e02abbae1e0509b63f037b3c71bef00a2b7ad211c7c25

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000138

MD5	01435dd323677d3c8c4fb132cf5bfd4a
SHA1	8f61a26f6497ea332a16a44263af05ebabf8e22f
SHA256	ec27bcd0ce0420dbb1b2d96a0c18059aa03f374e261ec406039ee02dd65292a0
SHA512	8f3c287d4db640c263ecf1ce48c9f5dedcfff66ada696fcf5e5504091034f501019de0abb51920c144cd972c4e732803288af9363de2d6f8f3348a6675943e44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00013b

MD5	eb701d432af8c70ca3291bb78712e160
SHA1	725f4fa68ca47a395edaf373fe3ac808d5c9a510
SHA256	b3a0f8df6f226910d0597117c14758be60585175a26a2c2801831030ccc36664
SHA512	060b6d0b7348d10b1b0ac890e9a71c6ab91baf846d9a8d68e5863af34c459ff8149be8259c80c7464e07dd043990f965f72753b4581e39a8fb5be3bdcb0dff13

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5	bbc7e5859c0d0757b3b1b15e1b11929d
SHA1	59df2c56b3c79ac1de9b400ddf3c5a693fa76c2d
SHA256	851c67fbabfda5b3151a6f73f283f7f0634cd1163719135a8de25c0518234fc2
SHA512	f1fecb77f4cdfe7165cc1f2da042048fd94033ca4e648e50ebc4171c806c3c174666bb321c6dda53f2f175dc310ad2459e8f01778acaee6e7c7606497c0a1dea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	a1122617ccca223dd78ee3ff583175da
SHA1	856273285955e1ad8f5cc59bab13615400b9eb98
SHA256	1841907959535137c686b5a3f4b78f19c00fb61421cfd1f63442d715d541a442
SHA512	149a47ba9321c5c04e5bc077accef7e13d7d65a4334f8f766ddb61e4f11831278f50b3feeed7f74abd53cd2c1c19cb1a06c043e68101eb23122aa682c568c55d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	d27416cbc1c369f4ca0f7135d6799be8
SHA1	eb21e630879b918f57e5fd3013a04bbe72b0cf3d
SHA256	e49a8331e3db51750ac19c4050e1ff25d6b44a75fc0e300fe14dfc86223bde3a
SHA512	02858bf434d9ff796347f65a10b29fd32afef1c530551e10a9c5958b2649e9cbc598af6859d56ee217b4389e08e30eb4b866b70587efa07e431809b87035bbf9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000142

MD5	1b7ac631e480d5308443e58ad1392c3d
SHA1	95f148383063ad9a5dff765373a78ce219d94cd7
SHA256	7fb66071ac6c7cfff583072c47bc255706222c2a4672c75400893f4993c31738
SHA512	15134314dfd36247db86f9b3d4dcb637e162f8fd87c0ce73492ffdb73a87492fc80330655617f165dd969812ed2ebcc42503f632d757bb89ba9116137882119d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	d573415bdb9e833ad6b94ad770137d7c
SHA1	5052a31c0a6360a2c79cfc9fabf007f70bf89524
SHA256	1cec3796f7ebba91797bb4450a69a8f6157108d6d5860416945f97f7fa808db5
SHA512	bf5adcb23dd45bd4716b4bba254e4fcba67ae528ec1d1519437824f554999e5fd6ab190959e5998ec012304c093b3a9a2bec757ac8d2b9354afc3bc082750803

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	4b71e03822351b8d3123b891f2c9fc9c
SHA1	80724c2e0589eae172f5bc93a4033b46ded57c0e
SHA256	5248209e029ca7f0428c08a0b072c2e0c6576b8f636ec961e8034217b781ad66
SHA512	3747f96f71e321c0c77370453c14e2d03c05e00a94f11f0e052259569535016615e64c7b54e07d1b19ad4f4a588257ef711fe2036bc27760c7d85caead54561c

C:\Users\Admin\Downloads\MinecraftInstaller.exe

MD5	4f02ac057355b5dc73ea28aecd2d56b4
SHA1	32591cb75779a3e308a44e75a76f821e7dee11e0
SHA256	83a5f942b2a15eab4826ef1709ec6a7f9637a7ec0fce16585776848797307fa4
SHA512	9eb08f85559df6af9192bec8904097d4e43a832ba9e9cc1c7be1a366af8d103c3a6db3886f00927ae5eb62055fbc770c7b5a3d2a122a0b460b51136083015368

memory/15248-16916-0x0000000000C30000-0x0000000002C86000-memory.dmp

memory/15248-16917-0x0000000007890000-0x0000000007A52000-memory.dmp

memory/15248-16919-0x00000000083A0000-0x00000000083A8000-memory.dmp

memory/15248-16922-0x000000000B760000-0x000000000B768000-memory.dmp

memory/15248-16923-0x000000000B7E0000-0x000000000B818000-memory.dmp

memory/15248-16924-0x000000000B7C0000-0x000000000B7CE000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	724b48a6de379cee80c755a959dd847a
SHA1	a4bcc7eee3b106d0cb137fabdf45154d42102643
SHA256	10276e2caf50f91883bbe7d8e96bd0edcdb13614523f073ca7c38da4e70c3bb7
SHA512	a95449e9d07551d53b81db1f82824691203fd59d60c41c9e7e1c78328c0c7c0506a804352c4b3b2409d3db6049bdbebcad14760aa75f2e5360f8a138358d6d54

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5	bafa36dc6232fc2a65f8a3cd1f519ad3
SHA1	4495ff8b55534aed118e83274e76cd44d543eade
SHA256	7c6e5346001c9b38686662b6e83ecbf8325d44eb97459e4e54aeca1226e15f4a
SHA512	9f13786299d115d000d5c4519daf327f37621fca5a8c7705b13c05a9dafc06256c804ce7381567a8e7d2a17001a04a3ea0d75f13ca0f103ac75e3e110a989013

memory/15248-16953-0x000000000B170000-0x000000000B17A000-memory.dmp

memory/15248-16954-0x000000000B1B0000-0x000000000B1D6000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe

MD5	8a4e72a29c08ae2cd13bc8ec414b8fc6
SHA1	26f8d73bc6f5ace5cec6e3652fc6410a71298498
SHA256	6513546697c3c9deb50d8dbb0cc9aa0be55487538ed482ec16b6264579de1539
SHA512	77eba566c65de1327bcacadb1483f538b4e5da67c3607398d745173ade25e987f59524a5ecf065dd5f95e26654cbb5a48dc80fae995d5d2dd63c63b2cd98fb98

Malware Analysis Report

2024-07-28 10:41

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

Threat Level: Known bad

Malicious Activity Summary

MITRE ATT&CK Matrix V13

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Sample ID	240614-rz3rkaydmj
Target	Run desktop apps online.html
SHA256	e04bdafc01429711c069136a2caa54cf8b20d2cee700e576569de57f09a2f3c6
Tags	microsoft discovery evasion persistence phishing