Malware Analysis Report

2024-09-09 18:09

Sample ID 240618-rfntasxang
Target http://roblox.com
Tags
aspackv2 discovery evasion persistence privilege_escalation spyware stealer trojan upx
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file http://roblox.com was found to be: Likely malicious.

Malicious Activity Summary

aspackv2 discovery evasion persistence privilege_escalation spyware stealer trojan upx

Boot or Logon Autostart Execution: Active Setup

Sets service image path in registry

Event Triggered Execution: Image File Execution Options Injection

Downloads MZ/PE file

Drops file in Drivers directory

Loads dropped DLL

UPX packed file

Executes dropped EXE

Event Triggered Execution: Component Object Model Hijacking

ASPack v2.12-2.42

Reads user/profile data of web browsers

Adds Run key to start application

Checks installed software on the system

Enumerates connected drives

Checks whether UAC is enabled

Suspicious use of NtSetInformationThreadHideFromDebugger

Drops file in System32 directory

Checks system information in the registry

Suspicious use of NtCreateThreadExHideFromDebugger

Drops file in Windows directory

Drops file in Program Files directory

Enumerates physical storage devices

Program crash

Runs ping.exe

Uses Task Scheduler COM API

Suspicious behavior: MapViewOfSection

Suspicious use of WriteProcessMemory

Modifies data under HKEY_USERS

Checks processor information in registry

Suspicious use of UnmapMainImage

Enumerates system info in registry

Suspicious behavior: GetForegroundWindowSpam

Modifies Internet Explorer settings

Suspicious use of FindShellTrayWindow

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of AdjustPrivilegeToken

Runs regedit.exe

Suspicious behavior: LoadsDriver

Suspicious behavior: EnumeratesProcesses

Suspicious use of SendNotifyMessage

Suspicious use of SetWindowsHookEx

NTFS ADS

Modifies registry class

MITRE ATT&CK Matrix V13

Analysis: static1

Detonation Overview

Reported

2024-06-18 14:08

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-18 14:08

Reported

2024-06-18 14:38

Platform

win10-20240404-en

Max time kernel

1439s

Max time network

1624s

Command Line

"C:\Windows\system32\LaunchWinApp.exe" "http://roblox.com"

Signatures

Boot or Logon Autostart Execution: Active Setup

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\software\WOW6432Node\microsoft\Active Setup\Installed Components C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
Key created \REGISTRY\MACHINE\software\WOW6432Node\microsoft\Active Setup\Installed Components C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe N/A
Key created \REGISTRY\MACHINE\software\WOW6432Node\microsoft\Active Setup\Installed Components C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
Key created \REGISTRY\MACHINE\software\WOW6432Node\microsoft\Active Setup\Installed Components C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\spchcpl.exe N/A

Downloads MZ/PE file

Drops file in Drivers directory

Description Indicator Process Target
File created C:\Windows\SysWOW64\drivers\NirSoftBlueScreenDriver.sys C:\bonzi\StartBlueScreen.exe N/A

Event Triggered Execution: Image File Execution Options Injection

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EUBFE1.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EUBFE1.tmp\MicrosoftEdgeUpdate.exe N/A

Sets service image path in registry

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NirSoftBlueScreenDriver\ImagePath = "\\??\\C:\\Windows\\system32\\drivers\\NirSoftBlueScreenDriver.sys" C:\bonzi\StartBlueScreen.exe N/A

ASPack v2.12-2.42

aspackv2
Description Indicator Process Target
N/A N/A N/A N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\MicrosoftEdge_X64_126.0.2592.61.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\EDGEMITMP_EF136.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\EDGEMITMP_EF136.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\Downloads\BonziKill.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{BC67C888-15B4-4F9D-B598-4C43FC48C2DD}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUBFE1.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Users\Admin\Downloads\BonziKill.exe N/A
N/A N/A C:\bonzi\BonziBuddy_original.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-J3CVH.tmp\before run install this.exe.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AgentSvr.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\spchcpl.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
N/A N/A C:\Users\Admin\Downloads\BonziKill.exe N/A
N/A N/A C:\bonzi\BonziBuddy_original.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\bonzi\clippy.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A
N/A N/A C:\bonzi\optimize.exe N/A
N/A N/A C:\bonzi\bob.exe N/A
N/A N/A C:\bonzi\LimePro.exe N/A
N/A N/A C:\bonzi\LimePro.exe N/A
N/A N/A C:\bonzi\blue.exe N/A
N/A N/A C:\bonzi\StartBlueScreen.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUBFE1.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\spchcpl.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
N/A N/A C:\bonzi\BonziBuddy_original.exe N/A
N/A N/A C:\bonzi\BonziBuddy_original.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A

Reads user/profile data of web browsers

spyware stealer

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\tv_enua = "RunDll32 advpack.dll,LaunchINFSection C:\\Windows\\INF\\tv_enua.inf, RemoveCabinet" C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\A: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\E: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\M: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\K: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\L: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\Q: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\R: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\S: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\G: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\H: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\J: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\O: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\P: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\U: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\V: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\W: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\Y: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\Z: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\B: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\I: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\N: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\T: C:\Windows\System32\unregmp2.exe N/A
File opened (read-only) \??\X: C:\Windows\System32\unregmp2.exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EUBFE1.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EUBFE1.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\SET9722.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe N/A
File created C:\Windows\SysWOW64\SET9722.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\counters2.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_363582827213C09529A76F35FB615187 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File created C:\Windows\SysWOW64\is-I1PT4.tmp C:\Users\Admin\AppData\Local\Temp\is-J3CVH.tmp\before run install this.exe.tmp N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\counters2.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File created C:\Windows\SysWOW64\SET9846.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\spchcpl.exe N/A
File opened for modification C:\Windows\SysWOW64\speech.cpl C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\spchcpl.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\counters2.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File created C:\Windows\SysWOW64\is-QAOCN.tmp C:\Users\Admin\AppData\Local\Temp\is-J3CVH.tmp\before run install this.exe.tmp N/A
File opened for modification C:\Windows\SysWOW64\msvcp50.dll C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCookies C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File created C:\Windows\SysWOW64\is-KRH60.tmp C:\Users\Admin\AppData\Local\Temp\is-J3CVH.tmp\before run install this.exe.tmp N/A
File opened for modification C:\Windows\SysWOW64\SET9846.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\spchcpl.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\counters2.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_363582827213C09529A76F35FB615187 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\counters2.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Suspicious use of NtSetInformationThreadHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\AppImageAtlas\img_set_3x_14.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\RoactStudioWidgets\slider_bar_background_light.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.61\VisualElements\Logo.png C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\EDGEMITMP_EF136.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\StudioUIEditor\valueBoxRoundedRectangle.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\TerrainTools\icon_shape_cylinder.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.61\notification_helper.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\EDGEMITMP_EF136.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\DeveloperFramework\icon_forward.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\Emotes\Editor\Large\OrangeHighlight.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\PlayerList\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\VoiceChat\SpeakerDark\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\ErrorPrompt\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EUBFE1.tmp\msedgeupdateres_ko.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{BC67C888-15B4-4F9D-B598-4C43FC48C2DD}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\fonts\NotoSansThaiUI-Regular.ttf C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\DeveloperFramework\MediaPlayerControls\pause_button.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\Settings\Radial\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\AppImageAtlas\img_set_2x_13.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\Controls\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\Settings\MenuBarIcons\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\ExtraContent\textures\ui\LuaChat\icons\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_ro.dll C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_sr-Cyrl-BA.dll C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\btn_newGrey.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\Emotes\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\Emotes\Editor\Small\OrangeHighlight.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.61\wdag.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\EDGEMITMP_EF136.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\Debugger\Breakpoint.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\StudioToolbox\AssetConfig\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\MenuBar\icon__backpack.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.61\msvcp140.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\EDGEMITMP_EF136.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\AssetImport\btn_light_filepicker_28x28.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\Chat\ChatDown.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\VoiceChat\Unmuted20.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_en-GB.dll C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\Settings\Help\ResetIcon.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\VoiceChat\MicDark\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.61\Locales\da.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\EDGEMITMP_EF136.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\AvatarEditorImages\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\Controls\DefaultController\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\Controls\PlayStationController\ButtonTriangle.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\TopBar\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\PlayerList\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\Settings\MenuBarAssets\MenuButtonSelected.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\TopBar\inventoryOff.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\AppImageAtlas\img_set_3x_7.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\GameSettings\ToolbarIcon.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.61\Locales\et.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\EDGEMITMP_EF136.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\AnimationEditor\img_eventGroupMarker_border_selected.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\loading\robloxlogo.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\PlayerList\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\VoiceChat\MicLight\Unmuted20.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.61\Trust Protection Lists\Sigma\Content C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\EDGEMITMP_EF136.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\fonts\TwemojiMozilla.ttf C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\ExpandArrowSheet.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\Controls\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\ExtraContent\textures\ui\LuaChat\icons\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\CollisionGroupsEditor\assign.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\Debugger\debugger_arrow_curve_left.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\ui\Settings\MenuBarAssets\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.61\Locales\ru.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\EDGEMITMP_EF136.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\PlatformContent\pc\textures\water\normal_21.dds C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\StudioToolbox\AssetConfig\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\ExtraContent\textures\ui\LuaChat\icons\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\content\textures\transformTwentyTwoDegrees.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\speech\SET9989.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File created C:\Windows\help\SET94C5.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File opened for modification C:\Windows\msagent\SET94AC.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File created C:\Windows\msagent\SET94AE.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\msagent\SET94C2.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File opened for modification C:\Windows\speech\SET9944.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\INF\SET94C3.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File created C:\Windows\msagent\intl\SET94C6.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File opened for modification C:\Windows\nsreg.dat C:\bonzi\netscape\navigator.exe N/A
File opened for modification C:\Windows\speech\SET9954.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\speech\vcmshl.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File created C:\Windows\nsreg.dat C:\bonzi\netscape\navigator.exe N/A
File created C:\Windows\msagent\SET94AD.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File created C:\Windows\msagent\SET94B0.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File opened for modification C:\Windows\speech\SET9922.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File opened for modification C:\Windows\msagent\SET94AF.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File opened for modification C:\Windows\help\spchcpl.hlp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\spchcpl.exe N/A
File opened for modification C:\Windows\speech\XTel.Dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\msagent\SET94AD.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File opened for modification C:\Windows\help\SET94C5.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File created C:\Windows\fonts\SET9700.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe N/A
File created C:\Windows\speech\~TMP4352~.TMP C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\speech\SET9966.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File created C:\Windows\INF\SET94C3.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File opened for modification C:\Windows\lhsp\help\SET96FF.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe N/A
File created C:\Windows\msagent\SET94B1.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File created C:\Windows\speech\SET999B.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\INF\tv_enua.inf C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe N/A
File opened for modification C:\Windows\speech\spchtel.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\speech\speech.hlp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\Debug\ESE.TXT C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
File created C:\Windows\msagent\SET94AF.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File opened for modification C:\Windows\speech\SET9933.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File created C:\Windows\speech\SET9944.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\speech\SET9965.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\speech\SET9976.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File created C:\Windows\msagent\SET94C7.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File created C:\Windows\speech\SET9912.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File created C:\Windows\INF\SET999D.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\speech\vcauto.tlb C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File created C:\Windows\speech\SET999C.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\speech\speech.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File created C:\Windows\speech\SET9988.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\Debug\WIA\wiatrace.log C:\WINDOWS\SysWOW64\mspaint.exe N/A
File opened for modification C:\Windows\msagent\SET94C7.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File created C:\Windows\lhsp\help\SET96FF.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe N/A
File created C:\Windows\speech\SET9976.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\speech\SET999B.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\speech\SET98F1.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\speech\speech.cnt C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File created C:\Windows\speech\SET9989.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\speech\VText.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\lhsp\tv\tv_enua.dll C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe N/A
File opened for modification C:\Windows\lhsp\tv\SET96FE.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe N/A
File opened for modification C:\Windows\INF\SET9721.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe N/A
File opened for modification C:\Windows\msagent\SET9848.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\spchcpl.exe N/A
File created C:\Windows\speech\SET9965.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\speech\SET9977.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
File opened for modification C:\Windows\msagent\SET94B0.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File created C:\Windows\lhsp\tv\SET96EE.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe N/A
File opened for modification C:\Windows\INF\agtinst.inf C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A
File opened for modification C:\Windows\msagent\intl\SET94C6.tmp C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe N/A

Enumerates physical storage devices

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\bonzi\LimePro.exe

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\system32\browser_broker.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\LanguageList = 65006e002d0055005300000065006e0000000000 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\LanguageList = 65006e002d0055005300000065006e0000000000 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix = "Visited:" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix = "Cookie:" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\LanguageList = 65006e002d0055005300000065006e0000000000 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\LanguageList = 65006e002d0055005300000065006e0000000000 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\CIStatus\CIPolicyState = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\Total\ = "124" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCFB3D2B-A0FA-1068-A738-08002B3371B5}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C4ABF875-8100-11D0-AC63-00C04FD97575} C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{08D832B9-D2FD-481F-98CF-904D00DF63CC} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BDD1F053-858B-11D1-B16A-00C0F0283628}\ = "IListSubItems" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F106BFA0-C743-11CD-80E5-00AA003E4B50} C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4E3D9D1F-0C63-11D1-8BFB-0060081841DE}\Version\ = "1.0" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BDD1F051-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32 C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6D0ECB23-9968-11D0-AC6E-00C04FD97575} C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AgentSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{05EB6C68-DBAB-11CD-B3CA-00AA0047BA4F}\ProxyStubClsid32 C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0C7F3F20-8BAB-11d2-9432-00C04F8EF48F}\Control C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F5BE8BD3-7DE6-11D0-91FE-00C04FD701A5}\TypeLib\ = "{F5BE8BC2-7DE6-11D0-91FE-00C04FD701A5}" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F5BE8BE3-7DE6-11D0-91FE-00C04FD701A5}\TypeLib\ = "{F5BE8BC2-7DE6-11D0-91FE-00C04FD701A5}" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2}\ = "Update3COMClass" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\ = "IAppCommand2" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905} C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2F26B9C0-DB31-11CD-B3CA-00AA0047BA4F} C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{888A5A60-B283-11CF-8AD5-00A0C90AEA82} C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2F440FB8-CE01-11cf-B234-00AA00A215ED}\ProxyStubClsid32 C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DomainSuggestion C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{E3D94CEB-EC11-46BE-8872-7DDCE37FABFA}\InprocHandler32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{083039C2-13F4-11D1-8B7E-0000F8754DA1} C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C74190B8-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid32 C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{66833FE5-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid32 C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{45046D60-08CA-11CF-A90F-00AA0062BB4C}\TypeLib\ = "{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F5BE8BDF-7DE6-11D0-91FE-00C04FD701A5}\ = "IAgentCtlPropertySheet" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{582C2191-4016-11D1-8C55-0060081841DE}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E421557C-0628-43FB-BF2B-7C9F8A4D067C}\ELEVATION C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C27CCE3E-8596-11D1-B16A-00C0F0283628}\InprocServer32 C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F08DF953-8592-11D1-B16A-00C0F0283628}\ = "ISliderEvents" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\NumMethods\ = "12" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{D1E8B1A6-32CE-443C-8E2E-EBA90C481353}\ELEVATION C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{66833FED-8583-11D1-B16A-00C0F0283628}\ = "IButtonMenu" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{48D12BA0-5B77-11D1-9EC1-00C04FD7081F}\TypeLib C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AgentSvr.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F5BE8BD2-7DE6-11D0-91FE-00C04FD701A5}\TypeLib C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DE8EF600-2F82-11D1-ACAC-00C04FD97575}\TypeLib\ = "{F5BE8BC2-7DE6-11D0-91FE-00C04FD701A5}" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D1E8B1A6-32CE-443C-8E2E-EBA90C481353}\LocalizedString = "@C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.41\\msedgeupdate.dll,-3000" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BDD1F049-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32 C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{090CD9A4-DA1A-11CD-B3CA-00AA0047BA4F} C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C27CCE32-8596-11D1-B16A-00C0F0283628} C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C74190B8-8589-11D1-B16A-00C0F0283628}\TypeLib\ = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate\NextUpdateDate = "425501284" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreMachineClass.1 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\NumMethods\ = "13" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{492E1C30-A1A2-4695-87C8-7A8CAD6F936F}\ = "Microsoft Edge Update Broker Class Factory" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\ProgID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}\Implemented Categories\{40FC6ED5-2438-11CF-A3DB-080036F12502} C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\Implemented Categories\{0DE86A57-2BAA-11CF-A229-00AA003D7352} C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{090CD9A6-DA1A-11CD-B3CA-00AA0047BA4F}\ = "ISRResMerge" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0}\ProxyStubClsid32\ = "{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{98BBE491-2EED-11D1-ACAC-00C04FD97575}\TypeLib\Version = "2.0" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AgentSvr.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\BonziKill.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A
N/A N/A N/A N/A

Runs regedit.exe

Description Indicator Process Target
N/A N/A C:\WINDOWS\SysWOW64\regedit.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUBFE1.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUBFE1.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\WINDOWS\SysWOW64\mspaint.exe N/A
N/A N/A C:\WINDOWS\SysWOW64\mspaint.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\bonzi\netscape\navigator.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A C:\bonzi\StartBlueScreen.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EUBFE1.tmp\MicrosoftEdgeUpdate.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\bonzi\BonziBuddy_original.exe N/A
N/A N/A C:\bonzi\BonziBuddy_original.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-J3CVH.tmp\before run install this.exe.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-J3CVH.tmp\before run install this.exe.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-J3CVH.tmp\before run install this.exe.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-J3CVH.tmp\before run install this.exe.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-J3CVH.tmp\before run install this.exe.tmp N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\bonzi\BonziBuddy_original.exe N/A
N/A N/A C:\bonzi\BonziBuddy_original.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\bonzi\BonziBuddy_original.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\bonzi\blue.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\bonzi\BonziBuddy_original.exe N/A
N/A N/A C:\bonzi\BonziBuddy_original.exe N/A
N/A N/A C:\bonzi\BonziBuddy_original.exe N/A
N/A N/A C:\bonzi\BonziBuddy_original.exe N/A
N/A N/A C:\Windows\msagent\AgentSvr.exe N/A
N/A N/A C:\bonzi\clippy.exe N/A
N/A N/A C:\Program Files\Windows Media Player\wmplayer.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A
N/A N/A C:\Program Files (x86)\Windows Media Player\setup_wm.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A
N/A N/A C:\bonzi\netscape\navigator.exe N/A
N/A N/A C:\bonzi\optimize.exe N/A
N/A N/A C:\bonzi\optimize.exe N/A
N/A N/A C:\bonzi\optimize.exe N/A
N/A N/A C:\bonzi\optimize.exe N/A
N/A N/A C:\bonzi\optimize.exe N/A
N/A N/A C:\bonzi\bob.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\WINDOWS\SysWOW64\mspaint.exe N/A
N/A N/A C:\WINDOWS\SysWOW64\mspaint.exe N/A
N/A N/A C:\WINDOWS\SysWOW64\mspaint.exe N/A
N/A N/A C:\WINDOWS\SysWOW64\mspaint.exe N/A
N/A N/A C:\bonzi\LimePro.exe N/A
N/A N/A C:\bonzi\LimePro.exe N/A
N/A N/A C:\Program Files\Windows Media Player\wmplayer.exe N/A
N/A N/A C:\Program Files (x86)\Windows Media Player\setup_wm.exe N/A
N/A N/A C:\bonzi\blue.exe N/A
N/A N/A C:\bonzi\blue.exe N/A
N/A N/A C:\bonzi\StartBlueScreen.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 1580 wrote to memory of 4356 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 6164 wrote to memory of 6028 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6164 wrote to memory of 6028 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6164 wrote to memory of 6028 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6164 wrote to memory of 6028 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6164 wrote to memory of 6028 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6164 wrote to memory of 6028 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6164 wrote to memory of 6028 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6164 wrote to memory of 6028 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6164 wrote to memory of 6028 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6164 wrote to memory of 6028 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6164 wrote to memory of 6028 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6436 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6436 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 6028 wrote to memory of 6636 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Windows\system32\LaunchWinApp.exe

"C:\Windows\system32\LaunchWinApp.exe" "http://roblox.com"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

C:\Windows\system32\browser_broker.exe

C:\Windows\system32\browser_broker.exe -Embedding

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.0.1443382088\1511881604" -parentBuildID 20221007134813 -prefsHandle 1736 -prefMapHandle 1732 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a692b81f-5428-4f2a-9e87-265ca8d0d9c6} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 1812 1eeb90f3b58 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.1.417056901\1957716765" -parentBuildID 20221007134813 -prefsHandle 2148 -prefMapHandle 2144 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4bddb2f0-deff-4905-8c87-498c9eaf2a3e} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 2168 1eeae06f858 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.2.1358514036\1931039299" -childID 1 -isForBrowser -prefsHandle 2880 -prefMapHandle 2876 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {bc75571b-346f-4b4f-944b-55448056ce88} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 2888 1eeb905b458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.3.1531525337\1262716340" -childID 2 -isForBrowser -prefsHandle 3416 -prefMapHandle 3408 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d61c570d-0a34-4bdb-a963-bedbfefc5476} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 3444 1eeae061f58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.4.12110453\254668989" -childID 3 -isForBrowser -prefsHandle 3740 -prefMapHandle 3736 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {642f18f5-2b44-447e-abd7-909581b86ff3} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 3748 1eebe970b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.5.1489657693\954600014" -childID 4 -isForBrowser -prefsHandle 4832 -prefMapHandle 4836 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c831a7ac-01a3-42aa-b317-c59dca109d76} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 4420 1eebf93db58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.6.1796641968\1219812157" -childID 5 -isForBrowser -prefsHandle 4992 -prefMapHandle 4996 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {bfadb899-08a7-4e6c-969a-03af3ec1d277} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 4984 1eebf990e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.7.312939359\375412676" -childID 6 -isForBrowser -prefsHandle 5172 -prefMapHandle 5176 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {37e29aee-91ad-4431-9424-70317e8eef4c} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 5076 1eebf98fc58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.8.672775800\690222283" -childID 7 -isForBrowser -prefsHandle 2776 -prefMapHandle 5672 -prefsLen 26328 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {cec8704c-1330-47b5-bf64-f825b42341b4} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 5628 1eec1073858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.9.2043231552\155070142" -parentBuildID 20221007134813 -prefsHandle 4340 -prefMapHandle 4544 -prefsLen 26768 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3729d174-c4ed-49c2-a459-4bd14a34d081} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 2904 1eec13f6458 rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.10.2002009518\1478083236" -childID 8 -isForBrowser -prefsHandle 6012 -prefMapHandle 6016 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f9e89078-a09f-4492-a3a7-6980f3037167} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 5996 1eec0bbc858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.11.780213346\1469040644" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 5460 -prefMapHandle 5212 -prefsLen 26768 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a7561055-eff7-454b-a275-00478c84d87f} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 5452 1eec0614258 utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.12.1265720120\1902551221" -childID 9 -isForBrowser -prefsHandle 5068 -prefMapHandle 5904 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f5c9303b-af59-41ff-9d7c-ffee5e68ab98} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 6312 1eec0614b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.13.437688323\1407121868" -childID 10 -isForBrowser -prefsHandle 4156 -prefMapHandle 5216 -prefsLen 27468 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {933599e3-970d-471d-951f-7b0fc2d2d9f3} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 4148 1eec0bbec58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.14.1035058248\101255391" -childID 11 -isForBrowser -prefsHandle 4548 -prefMapHandle 1568 -prefsLen 27477 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ac5822d4-67ea-474b-8c64-6c75624afd79} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 4676 1eec0f1ed58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.15.1863616489\2072541813" -childID 12 -isForBrowser -prefsHandle 10224 -prefMapHandle 10228 -prefsLen 27477 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ced1c961-e0fe-43b7-bbe8-edf2d0248ade} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 10216 1eec10efb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.16.1226359374\112657605" -childID 13 -isForBrowser -prefsHandle 10068 -prefMapHandle 10356 -prefsLen 27477 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {222c2456-7e03-4cf6-957d-0629c2bbde07} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 10248 1eec2ba2c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.17.1172793627\1200578809" -childID 14 -isForBrowser -prefsHandle 6216 -prefMapHandle 6120 -prefsLen 27477 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4fb32f70-d4fa-48c1-bd83-e4b89e601288} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 6460 1eec6671d58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.18.1142689194\1185576358" -childID 15 -isForBrowser -prefsHandle 9840 -prefMapHandle 9836 -prefsLen 27477 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7b5c5740-3be1-42e4-8b8b-5bc9dda98b8e} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 9848 1eec6672058 tab

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe

"C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"

C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NjkzREJDOEEtOTNCNy00QTFGLTg5QTktRTYyMjVGNTQ4QjE5fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins2MkJBNzc3OC0yMjcxLTRCQjUtQkVFOS0xMkI2QzkzMjlFMUN9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE1MDYzLjAiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iUUVNVSIgcHJvZHVjdF9uYW1lPSJTdGFuZGFyZCBQQyAoUTM1ICsgSUNIOSwgMjAwOSkiLz48ZXhwIGV0YWc9IiIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxLjMuMTcxLjM5IiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxMDc1MjE0NzYwNSIgaW5zdGFsbF90aW1lX21zPSI0MTYiLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{693DBC8A-93B7-4A1F-89A9-E6225F548B19}" /silent

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NjkzREJDOEEtOTNCNy00QTFGLTg5QTktRTYyMjVGNTQ4QjE5fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntGRDQ1MjQxOC0xRUNGLTQxODUtQjYzMi00OUE3NTk1MUM0OTV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE1MDYzLjAiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iUUVNVSIgcHJvZHVjdF9uYW1lPSJTdGFuZGFyZCBQQyAoUTM1ICsgSUNIOSwgMjAwOSkiLz48ZXhwIGV0YWc9IiIvPjxhcHAgYXBwaWQ9Ins4QTY5RDM0NS1ENTY0LTQ2M2MtQUZGMS1BNjlEOUU1MzBGOTZ9IiB2ZXJzaW9uPSIxMDYuMC41MjQ5LjExOSIgbmV4dHZlcnNpb249IjEwNi4wLjUyNDkuMTE5IiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIzMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMyIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTA3NTUxNzg3NDQiLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\MicrosoftEdge_X64_126.0.2592.61.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\MicrosoftEdge_X64_126.0.2592.61.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\EDGEMITMP_EF136.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\EDGEMITMP_EF136.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\MicrosoftEdge_X64_126.0.2592.61.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\EDGEMITMP_EF136.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\EDGEMITMP_EF136.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=126.0.6478.62 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32AE728B-60F4-4CA8-8E51-F7AD804DBB4A}\EDGEMITMP_EF136.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=126.0.2592.61 --initial-client-data=0x210,0x214,0x218,0x1ec,0x21c,0x7ff70ac2aa40,0x7ff70ac2aa4c,0x7ff70ac2aa58

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.19.630121061\1032980008" -childID 16 -isForBrowser -prefsHandle 3872 -prefMapHandle 6052 -prefsLen 27535 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {802c0a0d-d161-47c1-973c-ae3990986946} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 5732 1eec5718e58 tab

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NjkzREJDOEEtOTNCNy00QTFGLTg5QTktRTYyMjVGNTQ4QjE5fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InszNDU3MDcxNS03Q0I2LTQ4RDEtQTdBQi03MzY4ODQyRDZDOUF9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE1MDYzLjAiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iUUVNVSIgcHJvZHVjdF9uYW1lPSJTdGFuZGFyZCBQQyAoUTM1ICsgSUNIOSwgMjAwOSkiLz48ZXhwIGV0YWc9IiZxdW90O3I0NTJ0MStrMlRncS9IWHpqdkZOQlJob3BCV1I5c2JqWHhxZVVESDl1WDA9JnF1b3Q7Ii8-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEyNi4wLjI1OTIuNjEiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJjb25zZW50PWZhbHNlIiBpbnN0YWxsYWdlPSItMSIgaW5zdGFsbGRhdGU9Ii0xIj48dXBkYXRlY2hlY2svPjxldmVudCBldmVudHR5cGU9IjkiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEwNzg5MDE0NjgzIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-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-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe" -app -isInstallerLaunch

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.20.10275644\732130110" -childID 17 -isForBrowser -prefsHandle 10440 -prefMapHandle 5668 -prefsLen 27544 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a5b7d218-2eb8-4b71-b049-b8477980854f} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 3972 1eec57dc458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.21.1185496264\845553307" -childID 18 -isForBrowser -prefsHandle 9764 -prefMapHandle 9856 -prefsLen 27544 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2fd3e9b2-7c3a-444b-952f-eed14f22f468} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 9952 1eec6711b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.22.684112379\496047230" -childID 19 -isForBrowser -prefsHandle 9652 -prefMapHandle 10352 -prefsLen 27544 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d8d2253b-26ed-49e8-892f-941e4ef034e2} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 6220 1eec6714b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.23.934180968\1164872139" -childID 20 -isForBrowser -prefsHandle 4456 -prefMapHandle 6424 -prefsLen 27544 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {56f23e18-914a-4edc-aefe-705a1eafe20f} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 5376 1eec8a0e558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6028.24.1944351122\500791564" -childID 21 -isForBrowser -prefsHandle 10196 -prefMapHandle 3860 -prefsLen 27544 -prefMapSize 233444 -jsInitHandle 1320 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {4cb2acd9-7251-4610-91d9-7391ebf808fe} 6028 "\\.\pipe\gecko-crash-server-pipe.6028" 10356 1eec8555058 tab

C:\Users\Admin\Downloads\BonziKill.exe

"C:\Users\Admin\Downloads\BonziKill.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\RobloxPlayerBeta.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{BC67C888-15B4-4F9D-B598-4C43FC48C2DD}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{BC67C888-15B4-4F9D-B598-4C43FC48C2DD}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe" /update /sessionid "{1490FC24-7FBB-47D2-A82C-959EC3813FD7}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MTQ5MEZDMjQtN0ZCQi00N0QyLUE4MkMtOTU5RUMzODEzRkQ3fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntBMEMzNkRBNy1GOUY5LTRFNDAtQkFDOS0zNDIzQjcyRDhDN0V9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE1MDYzLjAiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iUUVNVSIgcHJvZHVjdF9uYW1lPSJTdGFuZGFyZCBQQyAoUTM1ICsgSUNIOSwgMjAwOSkiLz48ZXhwIGV0YWc9IiZxdW90O3I0NTJ0MStrMlRncS9IWHpqdkZOQlJob3BCV1I5c2JqWHhxZVVESDl1WDA9JnF1b3Q7Ii8-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IjEuMy4xNzEuMzkiIG5leHR2ZXJzaW9uPSIxLjMuMTg3LjQxIiBsYW5nPSIiIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGluc3RhbGxhZ2U9IjAiPjx1cGRhdGVjaGVjay8-PGV2ZW50IGV2ZW50dHlwZT0iMTIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzNzk0ODAwMjM3IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzNzk0ODAwMjM3IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE0MDM4OTY0Njg5IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJiaXRzIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy80YWQ5Y2I2ZS04MjQ1LTRlNDctYjI5OC0xZmY0YjA0MjU2ZTE_UDE9MTcxOTMyNTQzMyZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1QSDlwaDdtcFlsNGlObkx5ZW03cGElMmZJNlBZZVhTOFpab09NY251YkJldHpPQmlIVmdCQ0h4ZEwlMmJRY2h0QUdjRyUyYiUyZlk3RWV3dEVraHJPekxLU2RPTzFnJTNkJTNkIiBzZXJ2ZXJfaXBfaGludD0iIiBjZG5fY2lkPSItMSIgY2RuX2NjYz0iIiBjZG5fbXNlZGdlX3JlZj0iIiBjZG5fYXp1cmVfcmVmX29yaWdpbl9zaGllbGQ9IiIgY2RuX2NhY2hlPSIiIGNkbl9wM3A9IiIgZG93bmxvYWRlZD0iMTYzNDM3NiIgdG90YWw9IjE2MzQzNzYiIGRvd25sb2FkX3RpbWVfbXM9IjIyMTUxIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE0MDM5MTIwOTA2IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE0MDQ0NDMzNTI2IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PHBpbmcgcj0iLTEiIHJkPSItMSIvPjwvYXBwPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIxMjYuMC4yNTkyLjYxIiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGluc3RhbGxhZ2U9IjAiIGluc3RhbGxkYXRlPSI2Mzc3Ij48dXBkYXRlY2hlY2svPjxwaW5nIHI9Ii0xIiByZD0iLTEiIHBpbmdfZnJlc2huZXNzPSJ7QTY2OTc4NjQtQzQ5OS00NEE0LTlENjktOTgyNjY5NTI5QjE4fSIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files (x86)\Microsoft\Temp\EUBFE1.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EUBFE1.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{1490FC24-7FBB-47D2-A82C-959EC3813FD7}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTcxLjM5IiBuZXh0dmVyc2lvbj0iMS4zLjE4Ny40MSIgbGFuZz0iIiBicmFuZD0iR0dMUyIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjAiIGluc3RhbGxkYXRlPSI2Mzc3IiBpbnN0YWxsZGF0ZXRpbWU9IjE3MTg3MjAzMjciPjxldmVudCBldmVudHR5cGU9IjMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE0MDg3MTE4OTY5Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ff8a21b9758,0x7ff8a21b9768,0x7ff8a21b9778

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1532 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1852 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2116 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2868 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2876 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4432 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4580 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4708 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4928 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5040 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5136 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\BonziKill.exe

"C:\Users\Admin\Downloads\BonziKill.exe"

C:\bonzi\BonziBuddy_original.exe

"C:\bonzi\BonziBuddy_original.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4808 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5644 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5884 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=5992 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5160 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5180 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5236 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4364 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=5432 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5964 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3136 --field-trial-handle=1784,i,8791512914708852342,16720937399159330419,131072 /prefetch:8

C:\Users\Admin\Downloads\BonziKill My version\before run install this.exe

"C:\Users\Admin\Downloads\BonziKill My version\before run install this.exe"

C:\Users\Admin\AppData\Local\Temp\is-J3CVH.tmp\before run install this.exe.tmp

"C:\Users\Admin\AppData\Local\Temp\is-J3CVH.tmp\before run install this.exe.tmp" /SL5="$B0350,6008127,53248,C:\Users\Admin\Downloads\BonziKill My version\before run install this.exe"

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\COMDLG32.OCX"

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MSCOMCTL.OCX"

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\RICHTX32.OCX"

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MSVBVM60.dll"

C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe

"C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\msagent.exe" /Q:A

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentCtl.dll"

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AgentSvr.exe

"AgentSvr" /REGSERVER

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentDPv.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\mslwvtts.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentDP2.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentMPx.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentSR.dll"

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Windows\msagent\AgentPsh.dll"

C:\Windows\msagent\AgentSvr.exe

"C:\Windows\msagent\AgentSvr.exe" /regserver

C:\Windows\SysWOW64\grpconv.exe

grpconv.exe -o

C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe

"C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\tv_enua.exe" /Q:A

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s C:\Windows\lhsp\tv\tv_enua.dll

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s C:\Windows\lhsp\tv\tvenuax.dll

C:\Windows\SysWOW64\grpconv.exe

grpconv.exe -o

C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\spchcpl.exe

"C:\Users\Admin\AppData\Local\Temp\is-1DP34.tmp\spchcpl.exe" /Q:A

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\spchapi.exe /q:a

C:\Windows\SysWOW64\grpconv.exe

grpconv.exe -o

C:\Windows\SysWOW64\grpconv.exe

grpconv.exe -o

C:\Users\Admin\Downloads\BonziKill.exe

"C:\Users\Admin\Downloads\BonziKill.exe"

C:\bonzi\BonziBuddy_original.exe

"C:\bonzi\BonziBuddy_original.exe"

C:\Windows\msagent\AgentSvr.exe

C:\Windows\msagent\AgentSvr.exe -Embedding

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x408

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODcuNDEiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NjA4ODM3QUEtQkRBQi00REU1LTlCMzItMEVBRTUyQUU2OEM4fSIgaW5zdGFsbHNvdXJjZT0ibGltaXRlZCIgcmVxdWVzdGlkPSJ7ODExQzUwQjctNUFCNC00REJGLUI5QUUtQTk4MTI1RDNERTg2fSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBsb2dpY2FsX2NwdXM9IjgiIHBoeXNtZW1vcnk9IjgiIGRpc2tfdHlwZT0iMiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4xNTA2My4wIiBzcD0iIiBhcmNoPSJ4NjQiIHByb2R1Y3RfdHlwZT0iNDgiIGlzX3dpcD0iMCIgaXNfaW5fbG9ja2Rvd25fbW9kZT0iMCIvPjxvZW0gcHJvZHVjdF9tYW51ZmFjdHVyZXI9IlFFTVUiIHByb2R1Y3RfbmFtZT0iU3RhbmRhcmQgUEMgKFEzNSArIElDSDksIDIwMDkpIi8-PGV4cCBldGFnPSImcXVvdDt0eGdVQkhvbzZBUVNBL2Z5RTQ4c3lFWHF4MkorL3FzcWxHV3hpNHVmSFlrPSZxdW90OyIvPjxhcHAgYXBwaWQ9Ins4QTY5RDM0NS1ENTY0LTQ2M2MtQUZGMS1BNjlEOUU1MzBGOTZ9IiB2ZXJzaW9uPSIxMDYuMC41MjQ5LjExOSIgbmV4dHZlcnNpb249IiIgbGFuZz0iZW4iIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iNzUiIGluc3RhbGxkYXRldGltZT0iMTcxMjIzMzcwOCIgb29iZV9pbnN0YWxsX3RpbWU9IjEzMzU2NzA2NTg0Njc3MzI0MCI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjIxMTQzMjUiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE3NjIzMjkyMTE5Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODcuNDEiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NjA4ODM3QUEtQkRBQi00REU1LTlCMzItMEVBRTUyQUU2OEM4fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9InsxRjJEOTkxQi1BQzRCLTRDNzMtODlCMy02NzMxMzgxRTM1NEJ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE1MDYzLjAiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iUUVNVSIgcHJvZHVjdF9uYW1lPSJTdGFuZGFyZCBQQyAoUTM1ICsgSUNIOSwgMjAwOSkiLz48ZXhwIGV0YWc9IiZxdW90O1ZQUW9QMUYrZnExNXdSemgxa1BMNFBNcFdoOE9STUI1aXp2ck9DL2NoalE9JnF1b3Q7Ii8-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IjEuMy4xODcuNDEiIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgaW5zdGFsbGFnZT0iMCIgaW5zdGFsbGRhdGU9IjYzNzciIGNvaG9ydD0icnJmQDAuMDIiPjx1cGRhdGVjaGVjay8-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-

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c C:\bonzi\midi.bat

C:\bonzi\clippy.exe

C:\bonzi\clippy.exe

C:\Program Files\Windows Media Player\wmplayer.exe

"C:\Program Files\Windows Media Player\wmplayer.exe" "C:\bonzi\smash.mp3"

C:\bonzi\netscape\navigator.exe

C:\bonzi\netscape\navigator.exe

C:\Program Files (x86)\Windows Media Player\setup_wm.exe

"C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files\Windows Media Player\wmplayer.exe" "C:\bonzi\smash.mp3"

C:\Windows\System32\unregmp2.exe

"C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon

C:\bonzi\netscape\navigator.exe

"C:\bonzi\netscape\navigator.exe"

C:\WINDOWS\SysWOW64\regedit.exe

C:\WINDOWS\regedit.exe

C:\bonzi\netscape\navigator.exe

"C:\bonzi\netscape\navigator.exe"

C:\bonzi\netscape\navigator.exe

"C:\bonzi\netscape\navigator.exe"

C:\bonzi\optimize.exe

C:\bonzi\optimize.exe

C:\bonzi\bob.exe

C:\bonzi\bob.exe

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c C:\bonzi\start.bat

C:\Windows\SysWOW64\notepad.exe

notepad.exe

C:\Windows\SysWOW64\calc.exe

calc.exe

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\WINDOWS\SysWOW64\mspaint.exe

C:\WINDOWS\system32\mspaint.exe

\??\c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DeviceAssociationService

C:\bonzi\LimePro.exe

C:\bonzi\LimePro.exe

C:\bonzi\LimePro.exe

"C:\Program Files (x86)\LimePro\LimePro.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 6128 -s 868

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c C:\bonzi\nice.bat

C:\Program Files\Windows Media Player\wmplayer.exe

"C:\Program Files\Windows Media Player\wmplayer.exe" "C:\bonzi\nice.mp3"

C:\Program Files (x86)\Windows Media Player\setup_wm.exe

"C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files\Windows Media Player\wmplayer.exe" "C:\bonzi\nice.mp3"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c C:\bonzi\end.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 15.3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c C:\bonzi\boi.bat

C:\bonzi\blue.exe

C:\bonzi\blue.exe

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\bonzi\StartBlueScreen.exe

C:\bonzi\StartBlueScreen.exe 0x12 0 0 0 0

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

C:\Windows\SysWOW64\PING.EXE

ping 127.0.0.1 -n 3

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /K C:\bonzi\boi.bat

Network

Country Destination Domain Proto
US 8.8.8.8:53 roblox.com udp
FR 128.116.122.4:80 roblox.com tcp
FR 128.116.122.4:80 roblox.com tcp
FR 128.116.122.4:443 roblox.com tcp
US 8.8.8.8:53 4.122.116.128.in-addr.arpa udp
US 8.8.8.8:53 74.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 www.roblox.com udp
GB 128.116.119.4:443 www.roblox.com tcp
GB 128.116.119.4:443 www.roblox.com tcp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
FI 18.165.122.99:443 roblox-api.arkoselabs.com tcp
FI 18.165.122.99:443 roblox-api.arkoselabs.com tcp
US 8.8.8.8:53 4.119.116.128.in-addr.arpa udp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 8.8.8.8:53 99.122.165.18.in-addr.arpa udp
US 8.8.8.8:53 102.175.234.205.in-addr.arpa udp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 8.8.8.8:53 158.121.165.18.in-addr.arpa udp
US 8.8.8.8:53 90.193.84.52.in-addr.arpa udp
US 8.8.8.8:53 133.130.101.151.in-addr.arpa udp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 221.23.156.108.in-addr.arpa udp
US 8.8.8.8:53 metrics.roblox.com udp
GB 128.116.119.4:443 metrics.roblox.com tcp
GB 128.116.119.4:443 metrics.roblox.com tcp
US 8.8.8.8:53 apis.roblox.com udp
GB 128.116.119.4:443 apis.roblox.com tcp
GB 128.116.119.4:443 apis.roblox.com tcp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
BE 2.17.107.218:443 apis.rbxcdn.com tcp
BE 2.17.107.218:443 apis.rbxcdn.com tcp
US 8.8.8.8:53 images.rbxcdn.com udp
US 205.234.175.102:443 images.rbxcdn.com tcp
US 205.234.175.102:443 images.rbxcdn.com tcp
GB 128.116.119.4:443 ecsv2.roblox.com tcp
US 8.8.8.8:53 locale.roblox.com udp
GB 128.116.119.4:443 locale.roblox.com tcp
US 205.234.175.102:443 images.rbxcdn.com tcp
US 205.234.175.102:443 images.rbxcdn.com tcp
US 205.234.175.102:443 images.rbxcdn.com tcp
US 205.234.175.102:443 images.rbxcdn.com tcp
US 205.234.175.102:443 images.rbxcdn.com tcp
US 205.234.175.102:443 images.rbxcdn.com tcp
GB 128.116.119.4:443 locale.roblox.com tcp
GB 128.116.119.4:443 locale.roblox.com tcp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 218.107.17.2.in-addr.arpa udp
GB 128.116.119.4:443 auth.roblox.com tcp
GB 128.116.119.4:443 auth.roblox.com tcp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
GB 128.116.119.4:443 auth.roblox.com tcp
GB 128.116.119.4:443 auth.roblox.com tcp
US 8.8.8.8:53 161.19.199.152.in-addr.arpa udp
US 8.8.8.8:53 215.169.36.23.in-addr.arpa udp
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
BE 88.221.83.202:443 www.bing.com tcp
BE 88.221.83.202:443 www.bing.com tcp
US 8.8.8.8:53 244.73.46.23.in-addr.arpa udp
US 8.8.8.8:53 202.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 17.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 98.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 13.173.189.20.in-addr.arpa udp
BE 88.221.83.227:443 www.bing.com tcp
BE 88.221.83.227:443 www.bing.com tcp
BE 88.221.83.227:443 www.bing.com tcp
BE 88.221.83.227:443 www.bing.com tcp
US 8.8.8.8:53 227.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 push.services.mozilla.com udp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 shavar.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 44.232.194.163:443 shavar.prod.mozaws.net tcp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
N/A 127.0.0.1:56673 tcp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 8.8.8.8:53 166.188.117.34.in-addr.arpa udp
US 8.8.8.8:53 163.194.232.44.in-addr.arpa udp
N/A 127.0.0.1:56682 tcp
FR 128.116.122.4:80 roblox.com tcp
FR 128.116.122.4:80 roblox.com tcp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox.com udp
FR 128.116.122.4:443 roblox.com tcp
GB 128.116.119.4:443 auth.roblox.com tcp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
GB 128.116.119.4:443 edge-term4-lhr2.roblox.com udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 205.234.175.102:443 css.rbxcdn.com tcp
US 205.234.175.102:443 css.rbxcdn.com tcp
US 205.234.175.102:443 css.rbxcdn.com tcp
US 205.234.175.102:443 css.rbxcdn.com tcp
US 205.234.175.102:443 css.rbxcdn.com tcp
US 205.234.175.102:443 css.rbxcdn.com tcp
US 8.8.8.8:53 roblox-css.cachefly.net udp
US 205.234.175.102:443 roblox-css.cachefly.net tcp
US 8.8.8.8:53 roblox-static.cachefly.net udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 roblox-css.cachefly.net udp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 205.234.175.102:443 js.rbxcdn.com tcp
US 8.8.8.8:53 roblox-js.cachefly.net udp
US 8.8.8.8:53 roblox-static.cachefly.net udp
US 8.8.8.8:53 roblox-js.cachefly.net udp
US 8.8.8.8:53 d2w650xp5tniea.cloudfront.net udp
US 8.8.8.8:53 d2w650xp5tniea.cloudfront.net udp
FI 18.165.122.124:443 d2w650xp5tniea.cloudfront.net tcp
FR 128.116.122.4:443 roblox.com udp
US 205.234.175.102:443 roblox-js.cachefly.net udp
FI 18.165.122.124:443 d2w650xp5tniea.cloudfront.net udp
GB 128.116.119.4:443 edge-term4-lhr2.roblox.com tcp
US 8.8.8.8:53 124.122.165.18.in-addr.arpa udp
GB 128.116.119.4:443 edge-term4-lhr2.roblox.com tcp
GB 128.116.119.4:443 edge-term4-lhr2.roblox.com tcp
US 8.8.8.8:53 apis.rbxcdn.com udp
GB 128.116.119.4:443 edge-term4-lhr2.roblox.com udp
GB 128.116.119.4:443 edge-term4-lhr2.roblox.com tcp
BE 88.221.83.98:443 apis.rbxcdn.com tcp
US 8.8.8.8:53 a1818.b.akamai.net udp
US 8.8.8.8:53 images.rbxcdn.com udp
US 8.8.8.8:53 a1818.b.akamai.net udp
GB 128.116.119.4:443 edge-term4-lhr2.roblox.com udp
US 205.234.175.102:443 images.rbxcdn.com tcp
US 205.234.175.102:443 images.rbxcdn.com tcp
US 205.234.175.102:443 images.rbxcdn.com tcp
US 205.234.175.102:443 images.rbxcdn.com tcp
US 205.234.175.102:443 images.rbxcdn.com tcp
US 205.234.175.102:443 images.rbxcdn.com tcp
US 8.8.8.8:53 roblox-images.cachefly.net udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 roblox-images.cachefly.net udp
GB 128.116.119.4:443 auth.roblox.com udp
GB 128.116.119.4:443 auth.roblox.com tcp
GB 128.116.119.4:443 auth.roblox.com tcp
GB 128.116.119.4:443 auth.roblox.com udp
GB 128.116.119.4:443 auth.roblox.com udp
FR 128.116.122.4:443 roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 assetgame.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
GB 128.116.119.4:443 assetgame.roblox.com tcp
GB 128.116.119.4:443 assetgame.roblox.com tcp
GB 128.116.119.4:443 assetgame.roblox.com tcp
GB 128.116.119.4:443 assetgame.roblox.com tcp
GB 128.116.119.4:443 assetgame.roblox.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 8.8.8.8:53 a1818.b.akamai.net udp
US 8.8.8.8:53 a1818.b.akamai.net udp
US 8.8.8.8:53 twostepverification.roblox.com udp
GB 128.116.119.4:443 twostepverification.roblox.com tcp
GB 128.116.119.4:443 twostepverification.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 roblox-css.cachefly.net udp
US 8.8.8.8:53 roblox-static.cachefly.net udp
US 8.8.8.8:53 roblox-js.cachefly.net udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 d2w650xp5tniea.cloudfront.net udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 aus5.mozilla.org udp
US 35.244.181.201:443 aus5.mozilla.org tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
FR 23.200.86.243:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 243.86.200.23.in-addr.arpa udp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 142.250.187.206:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 142.250.187.206:443 redirector.gvt1.com udp
US 8.8.8.8:53 r1---sn-aigl6ney.gvt1.com udp
GB 173.194.183.166:443 r1---sn-aigl6ney.gvt1.com tcp
US 8.8.8.8:53 r1.sn-aigl6ney.gvt1.com udp
US 8.8.8.8:53 r1.sn-aigl6ney.gvt1.com udp
GB 173.194.183.166:443 r1.sn-aigl6ney.gvt1.com udp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 166.183.194.173.in-addr.arpa udp
GB 128.116.119.4:443 twostepverification.roblox.com udp
GB 128.116.119.4:443 twostepverification.roblox.com tcp
GB 128.116.119.4:443 twostepverification.roblox.com udp
GB 128.116.119.4:443 twostepverification.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
GB 128.116.119.4:443 apis.roblox.com udp
GB 128.116.119.4:443 apis.roblox.com udp
GB 128.116.119.4:443 apis.roblox.com tcp
GB 128.116.119.4:443 apis.roblox.com tcp
GB 128.116.119.4:443 apis.roblox.com tcp
GB 128.116.119.4:443 apis.roblox.com tcp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 205.234.175.102:443 roblox-images.cachefly.net tcp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 8.8.8.8:53 a1818.b.akamai.net udp
BE 88.221.83.131:443 a1818.b.akamai.net tcp
US 8.8.8.8:53 a1818.b.akamai.net udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 d2w650xp5tniea.cloudfront.net udp
ES 18.172.213.11:443 d2w650xp5tniea.cloudfront.net udp
US 8.8.8.8:53 d2w650xp5tniea.cloudfront.net udp
ES 18.172.213.11:443 d2w650xp5tniea.cloudfront.net tcp
US 8.8.8.8:53 131.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 11.213.172.18.in-addr.arpa udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 8.8.8.8:53 a1818.b.akamai.net udp
US 8.8.8.8:53 images.rbxcdn.com udp
US 8.8.8.8:53 a1818.b.akamai.net udp
US 8.8.8.8:53 roblox-images.cachefly.net udp
ES 18.172.213.11:443 d2w650xp5tniea.cloudfront.net udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
GB 128.116.119.4:443 edge-term4-lhr2.roblox.com tcp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 thumbnails.roblox.com udp
GB 128.116.119.4:443 thumbnails.roblox.com tcp
GB 128.116.119.4:443 thumbnails.roblox.com tcp
GB 128.116.119.4:443 thumbnails.roblox.com udp
US 8.8.8.8:53 tr.rbxcdn.com udp
SE 184.31.15.48:443 tr.rbxcdn.com tcp
SE 184.31.15.48:443 tr.rbxcdn.com tcp
SE 184.31.15.48:443 tr.rbxcdn.com tcp
SE 184.31.15.48:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 a1831.dscd.akamai.net udp
US 8.8.8.8:53 a1831.dscd.akamai.net udp
US 8.8.8.8:53 48.15.31.184.in-addr.arpa udp
GB 128.116.119.4:443 thumbnails.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 d2w650xp5tniea.cloudfront.net udp
ES 18.172.213.11:443 d2w650xp5tniea.cloudfront.net udp
PL 128.116.124.3:443 roblox.com udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 d2w650xp5tniea.cloudfront.net udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 3.124.116.128.in-addr.arpa udp
US 8.8.8.8:53 metrics.roblox.com udp
US 8.8.8.8:53 realtime-signalr.roblox.com udp
GB 128.116.119.4:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 accountsettings.roblox.com udp
US 8.8.8.8:53 economy.roblox.com udp
US 8.8.8.8:53 friends.roblox.com udp
US 8.8.8.8:53 privatemessages.roblox.com udp
US 8.8.8.8:53 trades.roblox.com udp
US 8.8.8.8:53 lms.roblox.com udp
GB 128.116.119.4:443 lms.roblox.com tcp
GB 128.116.119.4:443 lms.roblox.com tcp
GB 128.116.119.4:443 lms.roblox.com tcp
GB 128.116.119.4:443 lms.roblox.com tcp
US 8.8.8.8:53 contacts.roblox.com udp
US 8.8.8.8:53 notifications.roblox.com udp
GB 128.116.119.4:443 notifications.roblox.com tcp
GB 128.116.119.4:443 notifications.roblox.com tcp
GB 128.116.119.4:443 notifications.roblox.com tcp
GB 128.116.119.4:443 notifications.roblox.com tcp
GB 128.116.119.4:443 notifications.roblox.com tcp
US 8.8.8.8:53 us-central-default-px.roblox.com udp
GB 128.116.119.4:443 us-central-default-px.roblox.com tcp
GB 128.116.119.4:443 us-central-default-px.roblox.com tcp
US 8.8.8.8:53 us-central-default-px.roblox.com udp
GB 128.116.119.4:443 us-central-default-px.roblox.com udp
GB 128.116.119.4:443 us-central-default-px.roblox.com udp
GB 128.116.119.4:443 us-central-default-px.roblox.com udp
GB 128.116.119.4:443 us-central-default-px.roblox.com udp
GB 128.116.119.4:443 us-central-default-px.roblox.com udp
US 8.8.8.8:53 cs.ns1p.net udp
GB 128.116.119.4:443 us-central-default-px.roblox.com udp
GB 128.116.119.4:443 us-central-default-px.roblox.com udp
GB 128.116.119.4:443 us-central-default-px.roblox.com udp
US 8.8.8.8:53 aws-us-east-2a-lms.rbx.com udp
US 8.8.8.8:53 c0.rbxcdn.com udp
US 8.8.8.8:53 mia2-128-116-127-3.roblox.com udp
US 8.8.8.8:53 aws-us-east-1b-lms.rbx.com udp
DE 3.123.132.50:443 cs.ns1p.net tcp
US 8.8.8.8:53 a4c9427a-pulsar-pweb-4287-639546627.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 mia4-128-116-45-3.roblox.com udp
US 8.8.8.8:53 gold.roblox.com udp
US 8.8.8.8:53 atl1-128-116-99-3.roblox.com udp
US 8.8.8.8:53 a4c9427a-pulsar-pweb-4287-639546627.eu-central-1.elb.amazonaws.com udp
US 128.116.45.3:443 mia4-128-116-45-3.roblox.com tcp
US 205.234.175.102:443 c0.rbxcdn.com tcp
US 3.132.183.229:443 aws-us-east-2a-lms.rbx.com tcp
US 8.8.8.8:53 syd1-128-116-51-3.roblox.com udp
US 128.116.99.3:443 atl1-128-116-99-3.roblox.com tcp
GB 128.116.119.3:443 gold.roblox.com tcp
US 8.8.8.8:53 fra4-128-116-44-3.roblox.com udp
US 8.8.8.8:53 aws-us-east-1a-lms.rbx.com udp
US 128.116.127.3:443 mia2-128-116-127-3.roblox.com tcp
US 8.8.8.8:53 mia4-128-116-45-3.roblox.com udp
US 8.8.8.8:53 roblox-c0.cachefly.net udp
US 184.72.222.206:443 aws-us-east-1b-lms.rbx.com tcp
US 8.8.8.8:53 nfd-prod-a-742453808.us-east-2.elb.amazonaws.com udp
US 8.8.8.8:53 mia4-128-116-45-3.roblox.com udp
US 8.8.8.8:53 roblox-c0.cachefly.net udp
US 8.8.8.8:53 nfd-prod-a-742453808.us-east-2.elb.amazonaws.com udp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
DE 128.116.44.3:443 fra4-128-116-44-3.roblox.com tcp
US 3.213.125.239:443 aws-us-east-1a-lms.rbx.com tcp
US 8.8.8.8:53 atl1-128-116-99-3.roblox.com udp
US 8.8.8.8:53 us-central-origin-px.roblox.com udp
US 8.8.8.8:53 mia2-128-116-127-3.roblox.com udp
US 8.8.8.8:53 atl1-128-116-99-3.roblox.com udp
US 8.8.8.8:53 s.ns1p.net udp
US 8.8.8.8:53 mia2-128-116-127-3.roblox.com udp
US 8.8.8.8:53 us-central-origin-px.roblox.com udp
US 8.8.8.8:53 nfd-prod-b-542137491.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 syd1-128-116-51-3.roblox.com udp
US 8.8.8.8:53 fra4-128-116-44-3.roblox.com udp
DE 3.123.132.50:443 s.ns1p.net tcp
US 8.8.8.8:53 nfd-prod-b-542137491.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 syd1-128-116-51-3.roblox.com udp
US 8.8.8.8:53 fra4-128-116-44-3.roblox.com udp
US 8.8.8.8:53 nfd-prod-a-519385656.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 nfd-prod-a-519385656.us-east-1.elb.amazonaws.com udp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
US 8.8.8.8:53 50.132.123.3.in-addr.arpa udp
US 8.8.8.8:53 3.119.116.128.in-addr.arpa udp
US 8.8.8.8:53 206.222.72.184.in-addr.arpa udp
US 8.8.8.8:53 3.45.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.99.116.128.in-addr.arpa udp
US 8.8.8.8:53 229.183.132.3.in-addr.arpa udp
US 8.8.8.8:53 3.44.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.127.116.128.in-addr.arpa udp
US 8.8.8.8:53 assetgame.roblox.com udp
US 8.8.8.8:53 239.125.213.3.in-addr.arpa udp
US 128.116.99.3:443 atl1-128-116-99-3.roblox.com tcp
US 8.8.8.8:53 3.51.116.128.in-addr.arpa udp
US 8.8.8.8:53 presence.roblox.com udp
GB 128.116.119.4:443 presence.roblox.com tcp
GB 128.116.119.4:443 presence.roblox.com tcp
GB 128.116.119.4:443 presence.roblox.com udp
US 8.8.8.8:53 sjc1-128-116-117-3.roblox.com udp
US 8.8.8.8:53 sjc1-128-116-117-3.roblox.com udp
US 128.116.117.3:443 sjc1-128-116-117-3.roblox.com tcp
US 8.8.8.8:53 sjc1-128-116-117-3.roblox.com udp
US 128.116.117.3:443 sjc1-128-116-117-3.roblox.com tcp
US 128.116.117.3:443 sjc1-128-116-117-3.roblox.com tcp
US 128.116.117.3:443 sjc1-128-116-117-3.roblox.com tcp
US 8.8.8.8:53 d2w650xp5tniea.cloudfront.net udp
PL 128.116.124.3:443 roblox.com udp
US 8.8.8.8:53 tr.rbxcdn.com udp
US 8.8.8.8:53 a1831.dscd.akamai.net udp
US 8.8.8.8:53 a1831.dscd.akamai.net udp
US 8.8.8.8:53 js.stripe.com udp
US 8.8.8.8:53 followings.roblox.com udp
US 151.101.0.176:443 js.stripe.com tcp
US 8.8.8.8:53 stripecdn.map.fastly.net udp
GB 128.116.119.4:443 followings.roblox.com tcp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 stripecdn.map.fastly.net udp
US 8.8.8.8:53 games.roblox.com udp
GB 128.116.119.4:443 games.roblox.com tcp
GB 128.116.119.4:443 games.roblox.com tcp
GB 128.116.119.4:443 games.roblox.com tcp
US 8.8.8.8:53 voice.roblox.com udp
US 8.8.8.8:53 badges.roblox.com udp
GB 128.116.119.4:443 badges.roblox.com udp
GB 128.116.119.4:443 badges.roblox.com tcp
GB 128.116.119.4:443 badges.roblox.com tcp
GB 128.116.119.4:443 badges.roblox.com tcp
GB 128.116.119.4:443 badges.roblox.com tcp
GB 128.116.119.4:443 badges.roblox.com udp
GB 128.116.119.4:443 badges.roblox.com udp
GB 128.116.119.4:443 badges.roblox.com udp
US 8.8.8.8:53 176.0.101.151.in-addr.arpa udp
US 8.8.8.8:53 lga2-128-116-32-3.roblox.com udp
US 8.8.8.8:53 dfw2-128-116-95-3.roblox.com udp
US 8.8.8.8:53 m.stripe.network udp
US 128.116.32.3:443 lga2-128-116-32-3.roblox.com tcp
US 8.8.8.8:53 lga2-128-116-32-3.roblox.com udp
US 128.116.95.3:443 dfw2-128-116-95-3.roblox.com tcp
US 8.8.8.8:53 dfw2-128-116-95-3.roblox.com udp
US 151.101.64.176:443 m.stripe.network tcp
US 8.8.8.8:53 lhr2-128-116-119-3.roblox.com udp
US 8.8.8.8:53 dfw2-128-116-95-3.roblox.com udp
US 8.8.8.8:53 aws-us-east-1c-lms.rbx.com udp
US 8.8.8.8:53 c0cfly.rbxcdn.com udp
US 8.8.8.8:53 aws-us-west-1c-lms.rbx.com udp
US 8.8.8.8:53 lax4-128-116-63-3.roblox.com udp
US 8.8.8.8:53 sin4-128-116-50-3.roblox.com udp
US 8.8.8.8:53 lga2-128-116-32-3.roblox.com udp
US 52.52.192.222:443 aws-us-west-1c-lms.rbx.com tcp
GB 128.116.119.3:443 lhr2-128-116-119-3.roblox.com tcp
US 8.8.8.8:53 nfd-prod-c-142502592.us-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 lhr2-128-116-119-3.roblox.com udp
US 205.234.175.102:443 c0cfly.rbxcdn.com tcp
US 44.220.98.168:443 aws-us-east-1c-lms.rbx.com tcp
US 128.116.63.3:443 lax4-128-116-63-3.roblox.com tcp
SG 128.116.50.3:443 sin4-128-116-50-3.roblox.com tcp
US 8.8.8.8:53 roblox-c0.cachefly.net udp
US 8.8.8.8:53 lhr2-128-116-119-3.roblox.com udp
US 8.8.8.8:53 nfd-prod-c-142502592.us-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 nfd-prod-c-873282076.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 m.stripe.com udp
US 8.8.8.8:53 lax4-128-116-63-3.roblox.com udp
US 8.8.8.8:53 sin4-128-116-50-3.roblox.com udp
US 8.8.8.8:53 nfd-prod-c-873282076.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 sin4-128-116-50-3.roblox.com udp
US 8.8.8.8:53 lax4-128-116-63-3.roblox.com udp
US 35.82.1.136:443 m.stripe.com tcp
US 8.8.8.8:53 m.stripe.com udp
SG 128.116.50.3:443 sin4-128-116-50-3.roblox.com tcp
US 8.8.8.8:53 m.stripe.com udp
US 8.8.8.8:53 176.64.101.151.in-addr.arpa udp
US 8.8.8.8:53 3.32.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.95.116.128.in-addr.arpa udp
US 8.8.8.8:53 168.98.220.44.in-addr.arpa udp
US 8.8.8.8:53 222.192.52.52.in-addr.arpa udp
US 8.8.8.8:53 3.63.116.128.in-addr.arpa udp
US 8.8.8.8:53 136.1.82.35.in-addr.arpa udp
US 8.8.8.8:53 us-central-default-px.roblox.com udp
US 8.8.8.8:53 3.50.116.128.in-addr.arpa udp
US 8.8.8.8:53 a4c9427a-pulsar-pweb-4287-639546627.eu-central-1.elb.amazonaws.com udp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
US 8.8.8.8:53 aws-eu-west-2b-lms.rbx.com udp
US 8.8.8.8:53 fra2-128-116-123-3.roblox.com udp
US 8.8.8.8:53 c0aws.rbxcdn.com udp
US 8.8.8.8:53 cdg1-128-116-122-3.roblox.com udp
US 8.8.8.8:53 pulsar.roblox.com udp
US 8.8.8.8:53 waw1-128-116-124-3.roblox.com udp
US 8.8.8.8:53 bom1-128-116-104-4.roblox.com udp
DE 128.116.123.3:443 fra2-128-116-123-3.roblox.com tcp
US 8.8.8.8:53 fra2-128-116-123-3.roblox.com udp
GB 18.175.38.169:443 aws-eu-west-2b-lms.rbx.com tcp
US 8.8.8.8:53 nfd-prod-b-1076442370.eu-west-2.elb.amazonaws.com udp
US 8.8.8.8:53 cdg1-128-116-122-3.roblox.com udp
FR 128.116.122.3:443 cdg1-128-116-122-3.roblox.com tcp
ES 18.172.213.58:443 c0aws.rbxcdn.com tcp
PL 128.116.124.3:443 waw1-128-116-124-3.roblox.com tcp
PL 128.116.124.3:443 waw1-128-116-124-3.roblox.com tcp
IN 128.116.104.4:443 bom1-128-116-104-4.roblox.com tcp
US 8.8.8.8:53 fra2-128-116-123-3.roblox.com udp
US 8.8.8.8:53 nfd-prod-b-1076442370.eu-west-2.elb.amazonaws.com udp
US 8.8.8.8:53 cdg1-128-116-122-3.roblox.com udp
US 8.8.8.8:53 d13im6y9zsyqh9.cloudfront.net udp
US 8.8.8.8:53 pulsar.roblox.com udp
US 8.8.8.8:53 waw1-128-116-124-3.roblox.com udp
US 8.8.8.8:53 d13im6y9zsyqh9.cloudfront.net udp
US 8.8.8.8:53 169.38.175.18.in-addr.arpa udp
US 8.8.8.8:53 3.122.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.123.116.128.in-addr.arpa udp
US 8.8.8.8:53 58.213.172.18.in-addr.arpa udp
US 8.8.8.8:53 pulsar.roblox.com udp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
US 8.8.8.8:53 waw1-128-116-124-3.roblox.com udp
US 8.8.8.8:53 bom1-128-116-104-4.roblox.com udp
US 8.8.8.8:53 bom1-128-116-104-4.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 realtime-signalr.roblox.com udp
GB 128.116.119.4:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 4.104.116.128.in-addr.arpa udp
US 8.8.8.8:53 b.ns1p.net udp
DE 3.123.132.50:443 b.ns1p.net tcp
JP 128.116.120.3:443 nrt2-128-116-120-3.roblox.com tcp
US 8.8.8.8:53 nrt2-128-116-120-3.roblox.com udp
US 8.8.8.8:53 nrt2-128-116-120-3.roblox.com udp
US 8.8.8.8:53 nrt1-128-116-120-3.roblox.com udp
US 8.8.8.8:53 silver.roblox.com udp
US 8.8.8.8:53 c0ak.rbxcdn.com udp
US 8.8.8.8:53 lax2-128-116-116-3.roblox.com udp
BE 88.221.83.27:443 c0ak.rbxcdn.com tcp
US 8.8.8.8:53 a1913.dscw27.akamai.net udp
GB 128.116.119.3:443 silver.roblox.com tcp
US 8.8.8.8:53 aws-us-west-2a-lms.rbx.com udp
JP 128.116.120.3:443 nrt1-128-116-120-3.roblox.com tcp
US 8.8.8.8:53 silver.roblox.com udp
US 8.8.8.8:53 nrt1-128-116-120-3.roblox.com udp
US 128.116.116.3:443 lax2-128-116-116-3.roblox.com tcp
US 8.8.8.8:53 a1913.dscw27.akamai.net udp
US 8.8.8.8:53 nrt1-128-116-120-3.roblox.com udp
US 52.26.71.59:443 aws-us-west-2a-lms.rbx.com tcp
US 8.8.8.8:53 silver.roblox.com udp
JP 128.116.120.3:443 nrt1-128-116-120-3.roblox.com tcp
US 8.8.8.8:53 lax2-128-116-116-3.roblox.com udp
US 8.8.8.8:53 nfd-prod-a-646748404.us-west-2.elb.amazonaws.com udp
US 8.8.8.8:53 lax2-128-116-116-3.roblox.com udp
US 8.8.8.8:53 nfd-prod-a-646748404.us-west-2.elb.amazonaws.com udp
JP 128.116.120.3:443 nrt1-128-116-120-3.roblox.com tcp
US 8.8.8.8:53 27.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 3.120.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.116.116.128.in-addr.arpa udp
US 8.8.8.8:53 59.71.26.52.in-addr.arpa udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 us-central-default-px.roblox.com udp
US 128.116.127.3:443 mia2-128-116-127-3.roblox.com tcp
US 128.116.116.3:443 lax2-128-116-116-3.roblox.com tcp
PL 128.116.124.3:443 waw1-128-116-124-3.roblox.com udp
US 8.8.8.8:53 m.stripe.com udp
US 8.8.8.8:53 ams2-128-116-21-3.roblox.com udp
US 8.8.8.8:53 ord2-128-116-101-3.roblox.com udp
US 8.8.8.8:53 iad4-128-116-102-3.roblox.com udp
US 8.8.8.8:53 roblox-poc.global.ssl.fastly.net udp
US 8.8.8.8:53 ams2-128-116-21-3.roblox.com udp
NL 128.116.21.3:443 ams2-128-116-21-3.roblox.com tcp
US 8.8.8.8:53 ord2-128-116-101-3.roblox.com udp
US 128.116.101.3:443 ord2-128-116-101-3.roblox.com tcp
US 128.116.102.3:443 iad4-128-116-102-3.roblox.com tcp
US 8.8.8.8:53 iad4-128-116-102-3.roblox.com udp
US 151.101.129.194:443 roblox-poc.global.ssl.fastly.net tcp
US 8.8.8.8:53 ams2-128-116-21-3.roblox.com udp
US 8.8.8.8:53 ord2-128-116-101-3.roblox.com udp
US 8.8.8.8:53 roblox-poc.global.ssl.fastly.net udp
US 8.8.8.8:53 iad4-128-116-102-3.roblox.com udp
US 8.8.8.8:53 roblox-poc.global.ssl.fastly.net udp
US 8.8.8.8:53 3.21.116.128.in-addr.arpa udp
US 8.8.8.8:53 194.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 3.101.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.102.116.128.in-addr.arpa udp
GB 128.116.119.4:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
GB 128.116.119.4:443 realtime-signalr.roblox.com udp
US 8.8.8.8:53 support.mozilla.org udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 setup.rbxcdn.com udp
ES 18.172.213.116:443 setup.rbxcdn.com tcp
US 8.8.8.8:53 d19ha9ylcjiuiu.cloudfront.net udp
US 8.8.8.8:53 d19ha9ylcjiuiu.cloudfront.net udp
US 8.8.8.8:53 116.213.172.18.in-addr.arpa udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 client-telemetry.roblox.com udp
FR 128.116.122.3:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:60640 tcp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 edge-term4-cdg1.roblox.com udp
FR 128.116.122.3:443 edge-term4-cdg1.roblox.com udp
US 8.8.8.8:53 edge-term4-cdg1.roblox.com udp
FR 128.116.122.3:443 edge-term4-cdg1.roblox.com tcp
GB 128.116.119.4:443 realtime-signalr.roblox.com udp
N/A 127.0.0.1:60692 tcp
GB 128.116.119.4:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
ES 18.172.213.28:443 clientsettingscdn.roblox.com tcp
US 8.8.8.8:53 28.213.172.18.in-addr.arpa udp
ES 18.172.213.116:443 d19ha9ylcjiuiu.cloudfront.net tcp
N/A 127.0.0.1:60695 tcp
N/A 127.0.0.1:60699 tcp
ES 18.172.213.116:443 d19ha9ylcjiuiu.cloudfront.net tcp
ES 18.172.213.116:443 d19ha9ylcjiuiu.cloudfront.net tcp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 79.239.69.13.in-addr.arpa udp
US 8.8.8.8:53 msedge.api.cdp.microsoft.com udp
IE 20.166.2.191:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 191.2.166.20.in-addr.arpa udp
US 8.8.8.8:53 msedge.f.tlu.dl.delivery.mp.microsoft.com udp
US 152.199.19.161:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
US 152.199.19.161:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 edge-term4-lhr2.roblox.com udp
US 8.8.8.8:53 aus5.mozilla.org udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 35.244.181.201:443 prod.balrog.prod.cloudops.mozgcp.net tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 edge-term4-cdg1.roblox.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
GB 128.116.119.4:443 realtime-signalr.roblox.com udp
GB 128.116.119.4:443 realtime-signalr.roblox.com udp
US 8.8.8.8:53 27.73.42.20.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
FR 128.116.122.3:443 apis.roblox.com tcp
N/A 127.0.0.1:61352 tcp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 edge-term4-cdg1.roblox.com udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 edge-term4-cdg1.roblox.com udp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.187.238:443 consent.google.com tcp
US 8.8.8.8:53 consent.google.com udp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.187.238:443 consent.google.com udp
FR 128.116.122.3:443 ecsv2.roblox.com udp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn2.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn3.gstatic.com tcp
GB 142.250.178.14:443 encrypted-tbn3.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.180.14:443 encrypted-tbn2.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn2.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn2.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn3.gstatic.com udp
GB 142.250.180.14:443 encrypted-tbn2.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn3.gstatic.com udp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
FR 128.116.122.3:443 ecsv2.roblox.com udp
US 8.8.8.8:53 id.google.com udp
US 172.253.63.94:443 id.google.com tcp
US 8.8.8.8:53 id.google.com udp
US 8.8.8.8:53 id.google.com udp
US 172.253.63.94:443 id.google.com udp
US 8.8.8.8:53 94.63.253.172.in-addr.arpa udp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 adservice.google.co.uk udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 172.217.169.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 2.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 www.newgrounds.com udp
CA 51.79.82.168:443 www.newgrounds.com tcp
US 8.8.8.8:53 proxy.ungrounded.net udp
US 8.8.8.8:53 proxy.ungrounded.net udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 8.8.8.8:53 css.ngfiles.com udp
US 8.8.8.8:53 js.ngfiles.com udp
US 8.8.8.8:53 img.ngfiles.com udp
US 8.8.8.8:53 uimg.ngfiles.com udp
US 8.8.8.8:53 proxy6.ungrounded.net udp
CA 15.235.14.84:443 proxy6.ungrounded.net tcp
CA 15.235.14.84:443 proxy6.ungrounded.net tcp
CA 15.235.14.84:443 proxy6.ungrounded.net tcp
CA 15.235.14.84:443 proxy6.ungrounded.net tcp
CA 15.235.14.84:443 proxy6.ungrounded.net tcp
CA 15.235.14.84:443 proxy6.ungrounded.net tcp
CA 15.235.14.84:443 proxy6.ungrounded.net tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 168.82.79.51.in-addr.arpa udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 8.8.8.8:53 proxy6.ungrounded.net udp
US 104.17.25.14:443 cdnjs.cloudflare.com udp
US 8.8.8.8:53 14.25.17.104.in-addr.arpa udp
US 8.8.8.8:53 84.14.235.15.in-addr.arpa udp
CA 15.235.14.84:443 proxy6.ungrounded.net tcp
CA 15.235.14.84:443 proxy6.ungrounded.net tcp
CA 15.235.14.84:443 proxy6.ungrounded.net tcp
CA 15.235.14.84:443 proxy6.ungrounded.net tcp
CA 15.235.14.84:443 proxy6.ungrounded.net tcp
CA 15.235.14.84:443 proxy6.ungrounded.net tcp
CA 15.235.14.84:443 proxy6.ungrounded.net tcp
US 104.17.25.14:443 cdnjs.cloudflare.com udp
US 8.8.8.8:53 uploads.ungrounded.net udp
CA 15.235.14.84:443 uploads.ungrounded.net tcp
US 8.8.8.8:53 picon.ngfiles.com udp
FR 128.116.122.3:443 ecsv2.roblox.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.180.22:443 i.ytimg.com tcp
GB 142.250.180.22:443 i.ytimg.com tcp
GB 142.250.180.22:443 i.ytimg.com tcp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 22.180.250.142.in-addr.arpa udp
GB 142.250.180.22:443 i.ytimg.com udp
GB 172.217.169.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.200.14:443 www.youtube.com tcp
US 8.8.8.8:53 youtube-ui.l.google.com udp
US 8.8.8.8:53 youtube-ui.l.google.com udp
GB 142.250.200.14:443 youtube-ui.l.google.com udp
GB 172.217.169.2:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 216.58.213.6:443 static.doubleclick.net tcp
GB 216.58.201.106:443 jnn-pa.googleapis.com tcp
GB 216.58.201.106:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 172.217.169.2:443 googleads.g.doubleclick.net udp
GB 216.58.213.6:443 static.doubleclick.net udp
GB 216.58.201.106:443 jnn-pa.googleapis.com udp
GB 216.58.201.106:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 6.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 106.201.58.216.in-addr.arpa udp
GB 142.250.200.14:443 youtube-ui.l.google.com udp
US 8.8.8.8:53 r15stv.itch.io udp
US 45.79.115.66:443 r15stv.itch.io tcp
US 8.8.8.8:53 itch.io udp
US 8.8.8.8:53 itch.io udp
US 8.8.8.8:53 66.115.79.45.in-addr.arpa udp
US 8.8.8.8:53 static.itch.io udp
US 8.8.8.8:53 img.itch.zone udp
US 104.26.9.198:443 static.itch.io tcp
US 104.26.9.198:443 static.itch.io tcp
US 104.26.9.198:443 static.itch.io tcp
US 8.8.8.8:53 static.itch.io udp
US 104.26.9.198:443 static.itch.io tcp
US 104.26.9.198:443 static.itch.io tcp
BE 2.17.107.242:443 img.itch.zone tcp
US 8.8.8.8:53 a262.dscb.akamai.net udp
US 8.8.8.8:53 static.itch.io udp
US 8.8.8.8:53 a262.dscb.akamai.net udp
US 8.8.8.8:53 198.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 242.107.17.2.in-addr.arpa udp
US 45.79.115.66:443 itch.io tcp
US 45.79.115.66:443 itch.io tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
FR 128.116.122.3:443 ecsv2.roblox.com udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 216.239.32.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 presence.roblox.com udp
US 8.8.8.8:53 edge-term4-cdg1.roblox.com udp
FR 128.116.122.3:443 edge-term4-cdg1.roblox.com udp
US 8.8.8.8:53 edge-term4-cdg1.roblox.com udp
FR 128.116.122.3:443 edge-term4-cdg1.roblox.com udp
US 8.8.8.8:53 itch.io udp
US 8.8.8.8:53 itchio-mirror.cb031a832f44726753d6267436f3b414.r2.cloudflarestorage.com udp
US 8.8.8.8:53 img.itch.zone udp
US 104.18.8.90:443 itchio-mirror.cb031a832f44726753d6267436f3b414.r2.cloudflarestorage.com tcp
US 8.8.8.8:53 itchio-mirror.cb031a832f44726753d6267436f3b414.r2.cloudflarestorage.com udp
US 8.8.8.8:53 a262.dscb.akamai.net udp
US 8.8.8.8:53 a262.dscb.akamai.net udp
US 8.8.8.8:53 itchio-mirror.cb031a832f44726753d6267436f3b414.r2.cloudflarestorage.com udp
US 8.8.8.8:53 itch.io udp
US 45.79.115.66:443 itch.io tcp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 90.8.18.104.in-addr.arpa udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com tcp
US 8.8.8.8:53 www3.l.google.com udp
US 8.8.8.8:53 www3.l.google.com udp
GB 142.250.187.238:443 www3.l.google.com udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 172.217.16.225:443 lh3.googleusercontent.com tcp
US 8.8.8.8:53 googlehosted.l.googleusercontent.com udp
US 8.8.8.8:53 googlehosted.l.googleusercontent.com udp
GB 172.217.16.225:443 googlehosted.l.googleusercontent.com udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
FR 128.116.122.3:443 edge-term4-cdg1.roblox.com udp
US 8.8.8.8:53 msedge.api.cdp.microsoft.com udp
NL 13.95.26.4:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 4.26.95.13.in-addr.arpa udp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
US 199.232.214.172:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 11.179.89.13.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 195.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 apis.google.com udp
GB 142.250.200.14:443 apis.google.com tcp
GB 172.217.169.46:443 youtube-ui.l.google.com tcp
US 8.8.8.8:53 clients2.google.com udp
N/A 224.0.0.251:5353 udp
GB 142.250.187.206:443 clients2.google.com tcp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.169.46:443 youtube-ui.l.google.com udp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.187.238:443 consent.google.com tcp
US 8.8.8.8:53 encrypted-vtbn0.gstatic.com udp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com tcp
GB 142.250.178.14:443 youtube-ui.l.google.com tcp
GB 142.250.178.14:443 youtube-ui.l.google.com tcp
GB 142.250.178.14:443 youtube-ui.l.google.com tcp
GB 142.250.178.14:443 youtube-ui.l.google.com tcp
GB 142.250.178.14:443 youtube-ui.l.google.com tcp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com udp
GB 142.250.178.14:443 youtube-ui.l.google.com udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
GB 142.250.178.3:443 id.google.com tcp
GB 172.217.16.246:443 i.ytimg.com tcp
GB 172.217.16.246:443 i.ytimg.com tcp
US 8.8.8.8:53 www.youtube.com udp
GB 216.58.212.206:443 www.youtube.com udp
US 8.8.8.8:53 3.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 246.16.217.172.in-addr.arpa udp
GB 172.217.16.246:443 i.ytimg.com udp
GB 172.217.169.46:443 www.youtube.com udp
GB 142.250.187.226:443 googleads.g.doubleclick.net tcp
GB 216.58.213.6:443 static.doubleclick.net tcp
GB 142.250.187.234:443 jnn-pa.googleapis.com tcp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
GB 142.250.187.234:443 jnn-pa.googleapis.com udp
GB 172.217.169.46:443 www.youtube.com udp
GB 172.217.169.46:443 www.youtube.com tcp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 234.187.250.142.in-addr.arpa udp
GB 142.250.180.14:443 www.youtube.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 108.177.122.94:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 google.com udp
GB 142.250.178.14:443 google.com tcp
US 8.8.8.8:53 94.122.177.108.in-addr.arpa udp
GB 162.125.64.18:443 www.dropbox.com tcp
GB 162.125.64.18:443 www.dropbox.com tcp
US 8.8.8.8:53 18.64.125.162.in-addr.arpa udp
US 8.8.8.8:53 cfl.dropboxstatic.com udp
US 104.16.99.29:443 cfl.dropboxstatic.com tcp
US 104.16.99.29:443 cfl.dropboxstatic.com tcp
US 104.16.99.29:443 cfl.dropboxstatic.com tcp
US 104.16.99.29:443 cfl.dropboxstatic.com tcp
US 104.16.99.29:443 cfl.dropboxstatic.com tcp
US 104.16.99.29:443 cfl.dropboxstatic.com tcp
US 104.16.99.29:443 cfl.dropboxstatic.com udp
US 104.16.99.29:443 cfl.dropboxstatic.com udp
US 8.8.8.8:53 29.99.16.104.in-addr.arpa udp
US 8.8.8.8:53 ucc12b319fcc1491e5b5f6316166.previews.dropboxusercontent.com udp
GB 162.125.64.16:443 ucc12b319fcc1491e5b5f6316166.previews.dropboxusercontent.com tcp
US 8.8.8.8:53 accounts.google.com udp
NL 142.250.27.84:443 accounts.google.com tcp
GB 162.125.64.16:443 ucc12b319fcc1491e5b5f6316166.previews.dropboxusercontent.com tcp
US 8.8.8.8:53 fp.dropbox.com udp
NL 142.250.27.84:443 accounts.google.com udp
ES 18.172.213.2:443 fp.dropbox.com tcp
US 8.8.8.8:53 84.27.250.142.in-addr.arpa udp
US 8.8.8.8:53 16.64.125.162.in-addr.arpa udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 stun.fpapi.io udp
US 8.8.8.8:53 stun.l.google.com udp
US 8.8.8.8:53 beacon.dropbox.com udp
US 162.125.21.3:443 beacon.dropbox.com tcp
US 74.125.250.129:19302 stun.l.google.com udp
US 162.125.21.3:443 beacon.dropbox.com tcp
US 8.8.8.8:53 2.213.172.18.in-addr.arpa udp
US 8.8.8.8:53 129.250.125.74.in-addr.arpa udp
US 8.8.8.8:53 3.21.125.162.in-addr.arpa udp
N/A 10.127.0.158:53291 udp
US 8.8.8.8:53 stun.fpapi.io udp
US 74.125.250.129:19302 stun.l.google.com udp
N/A 10.127.0.158:63803 udp
US 8.8.8.8:53 stun.fpapi.io udp
US 74.125.250.129:19302 stun.l.google.com udp
N/A 10.127.0.158:65283 udp
US 8.8.8.8:53 uc5b20481b890b90f5e9ed7bcc92.dl.dropboxusercontent.com udp
GB 162.125.64.15:443 uc5b20481b890b90f5e9ed7bcc92.dl.dropboxusercontent.com tcp
US 8.8.8.8:53 15.64.125.162.in-addr.arpa udp
GB 142.250.180.10:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 10.180.250.142.in-addr.arpa udp
GB 172.217.169.46:443 www.youtube.com udp
US 8.8.8.8:53 208.143.182.52.in-addr.arpa udp
US 20.114.58.89:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 89.58.114.20.in-addr.arpa udp
US 8.8.8.8:53 redir.metaservices.microsoft.com udp
US 2.22.144.36:80 redir.metaservices.microsoft.com tcp
US 8.8.8.8:53 onlinestores.metaservices.microsoft.com udp
BE 2.17.107.11:80 onlinestores.metaservices.microsoft.com tcp
N/A 127.0.0.1:49447 tcp
US 8.8.8.8:53 36.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 11.107.17.2.in-addr.arpa udp
N/A 127.0.0.1:49495 tcp
N/A 127.0.0.1:49580 tcp
N/A 127.0.0.1:49617 tcp
US 8.8.8.8:53 browser.netscape.com udp
US 76.223.84.192:80 browser.netscape.com tcp
US 8.8.8.8:53 www.netscape.com udp
US 8.8.8.8:53 s.yimg.com udp
US 8.8.8.8:53 geo.yahoo.com udp
US 8.8.8.8:53 bcn.fp.yahoo.com udp
IE 188.125.72.139:80 geo.yahoo.com tcp
US 76.223.84.192:80 www.netscape.com tcp
GB 87.248.114.11:443 s.yimg.com tcp
GB 87.248.114.11:443 s.yimg.com tcp
IE 54.171.14.214:80 bcn.fp.yahoo.com tcp
US 8.8.8.8:53 www.aol.com udp
GB 87.248.114.12:443 www.aol.com tcp
N/A 127.0.0.1:49632 tcp
US 8.8.8.8:53 www.aol.co.uk udp
GB 87.248.114.12:443 www.aol.co.uk tcp
US 8.8.8.8:53 192.84.223.76.in-addr.arpa udp
US 8.8.8.8:53 11.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 139.72.125.188.in-addr.arpa udp
US 8.8.8.8:53 12.114.248.87.in-addr.arpa udp
IE 52.209.83.146:80 bcn.fp.yahoo.com tcp
US 76.223.84.192:80 www.netscape.com tcp
GB 87.248.114.11:443 www.aol.co.uk tcp
GB 87.248.114.11:443 www.aol.co.uk tcp
US 8.8.8.8:53 s.aolcdn.com udp
SE 192.229.221.24:443 s.aolcdn.com tcp
SE 192.229.221.24:443 s.aolcdn.com tcp
US 8.8.8.8:53 sb.google.com udp
IL 172.217.22.14:80 sb.google.com tcp
US 8.8.8.8:53 14.22.217.172.in-addr.arpa udp
SE 192.229.221.24:443 s.aolcdn.com tcp
SE 192.229.221.24:443 s.aolcdn.com tcp
US 8.8.8.8:53 www.pcoptimizerpro.com udp
US 50.63.8.124:80 www.pcoptimizerpro.com tcp
US 50.63.8.124:443 www.pcoptimizerpro.com tcp
US 50.63.8.124:443 www.pcoptimizerpro.com tcp
US 8.8.8.8:53 124.8.63.50.in-addr.arpa udp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 www.clarity.ms udp
US 8.8.8.8:53 oss.maxcdn.com udp
US 13.107.253.64:443 www.clarity.ms tcp
US 8.8.8.8:53 64.253.107.13.in-addr.arpa udp
N/A 127.0.0.1:443 tcp
SE 192.229.221.24:443 s.aolcdn.com tcp
US 8.8.8.8:53 155.50.123.104.in-addr.arpa udp
US 8.8.8.8:53 redir.metaservices.microsoft.com udp
US 2.22.144.39:80 redir.metaservices.microsoft.com tcp
US 8.8.8.8:53 onlinestores.metaservices.microsoft.com udp
BE 2.17.107.11:80 onlinestores.metaservices.microsoft.com tcp
US 8.8.8.8:53 39.144.22.2.in-addr.arpa udp

Files

memory/3196-16-0x0000020FD1D20000-0x0000020FD1D30000-memory.dmp

memory/3196-0-0x0000020FD1C20000-0x0000020FD1C30000-memory.dmp

memory/3196-35-0x0000020FCF1D0000-0x0000020FCF1D2000-memory.dmp

memory/2528-43-0x0000016C2BE00000-0x0000016C2BF00000-memory.dmp

memory/2528-42-0x0000016C2BE00000-0x0000016C2BF00000-memory.dmp

memory/4356-59-0x00000279AA900000-0x00000279AAA00000-memory.dmp

memory/4356-66-0x00000279BCB10000-0x00000279BCB12000-memory.dmp

memory/4356-64-0x00000279BC950000-0x00000279BC952000-memory.dmp

memory/4356-62-0x00000279BC930000-0x00000279BC932000-memory.dmp

memory/4356-57-0x00000279AC500000-0x00000279AC600000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\50c59f3530027476143cfd4611cfd098353975a6507b348f26c01f04a157b3fb[1].css

MD5 faf7a8c53887d954bcf7c3b194a1fd86
SHA1 101105c77d4946a94f4fde71ede95349921f9dc7
SHA256 7d86839d46a913806a9208def7b63421cde3cfab3d2ca54f8be2c171ffd7889c
SHA512 ff4aed093690f3029f3b72272c13fc8482744d2a7edf0815f05f225ac80fe95860eb98c3f2ecab9855809e1e6f9001050e26f9717f2ec84596514d258b6a07c5

memory/4356-342-0x00000279BF190000-0x00000279BF192000-memory.dmp

memory/4356-366-0x00000279C0120000-0x00000279C0140000-memory.dmp

memory/4356-371-0x00000279BF700000-0x00000279BF720000-memory.dmp

memory/4356-426-0x00000279C0680000-0x00000279C06A0000-memory.dmp

memory/4356-432-0x00000279BF1E0000-0x00000279BF200000-memory.dmp

memory/4356-456-0x00000279C1900000-0x00000279C1A00000-memory.dmp

memory/4356-501-0x00000279C0A00000-0x00000279C0A20000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\0OHKPJ3F\www.roblox[1].xml

MD5 b8cb64026e83e1a8bbdf619b253ee0a1
SHA1 11b620ef7785f41d99d762dd4834a138ebf8daea
SHA256 f5d22fc6ec7595fcefacc2a4fbd5dcdbcda18a5ec20790569c661faa08ea169e
SHA512 e430ec4b9bc8cfdc7b11af52971f46ab4feb6a52952217a6609af7a64b9cb9243c61846741a88ff5e1d85e347caf03ba3fcccf413cc554cecbef27d6de5afcff

memory/4356-664-0x00000279C1740000-0x00000279C1760000-memory.dmp

memory/4356-737-0x00000279C17A0000-0x00000279C17C0000-memory.dmp

memory/4356-760-0x00000279ABEF0000-0x00000279ABF00000-memory.dmp

memory/4356-762-0x00000279ABEF0000-0x00000279ABF00000-memory.dmp

memory/4356-765-0x00000279ABEF0000-0x00000279ABF00000-memory.dmp

memory/4356-769-0x00000279ABEF0000-0x00000279ABF00000-memory.dmp

memory/4356-768-0x00000279ABEF0000-0x00000279ABF00000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\0OHKPJ3F\www.roblox[1].xml

MD5 0a3efe3fb02f9efb418657baa61a3dcc
SHA1 052c0189fde18c3630ae75341d84a589f0ce6de6
SHA256 8cb5d583b29b0765b6f99dccb5ded0e8bd91566d70f9fef1fd77debf733b1235
SHA512 45aa6dbc8c3012bad4e0e3d978cf611d46227067432ec8d90c920b9cbcfb66b8152f622f874618ef4c00bdc024b95065c05ad462def6949b40c3152463af6dbb

memory/4356-767-0x00000279ABEF0000-0x00000279ABF00000-memory.dmp

memory/4356-766-0x00000279ABEF0000-0x00000279ABF00000-memory.dmp

memory/4356-764-0x00000279C21A0000-0x00000279C21C0000-memory.dmp

memory/4356-761-0x00000279ABEF0000-0x00000279ABF00000-memory.dmp

memory/4356-759-0x00000279ABEF0000-0x00000279ABF00000-memory.dmp

memory/4356-758-0x00000279ABEF0000-0x00000279ABF00000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\0OHKPJ3F\www.roblox[1].xml

MD5 91840a7123f2ea95b9b519e2bab15c0b
SHA1 611b61353c722400be3036435e089058272024c1
SHA256 54429b819306e9c5220940fb202ecabfff5244dccb564e649f3ff7f05073d483
SHA512 e85b2bffbd140068b9b9a7c0d14c428960f1a3f0120c08bfdbe4464479b5e3e2999e01610ab5f16d5a9474fa31900e5da1dca8fbe0c384a09c2e6c69440e246a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\0OHKPJ3F\www.roblox[1].xml

MD5 bd588d2b92d90174c5bfd5328f06cf5c
SHA1 f2bd17640f25a52e9499f26e68208dc388535b07
SHA256 c4e3870ea8103155ca8c517333a85751f4e5918031162f0f3e1362ada654befe
SHA512 3ecb27abc9ec958681a381105b5a543cda1e62835bbcfc2d638ceb92d0366c33bd94873e693278c8f8d942ab977dea4199b49b0c0a69758d969f4d5113c0de2b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\GRRS979K\7bba321f4d8328683d6e59487ce514eb[1].ico

MD5 7bba321f4d8328683d6e59487ce514eb
SHA1 ae0edd3d76e39c564740b30e4fe605b4cd50ad48
SHA256 68984ffee2a03c1cdb6296fd383d64cc2c75e13471221a4bcb4d93fcfa8dab54
SHA512 ed6a932f8818d5340e2e2c09dcc61693e9f9032c7201e05a0ce21c6c521b4ac7dd9204affbbfffd3bcebbebe88337fbd32091eaa1e35469b861834f2523c800d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\0OHKPJ3F\www.roblox[1].xml

MD5 d02a33d26ac09b7bbd72d3ea244b7faa
SHA1 dd8778329c673ad12002bbc09635f4791b4b17b5
SHA256 11e1f7257bf0f10de1a5fe2fbf2ea0bf8b7c1f8bf92b0d5fc232e25bfcae14e2
SHA512 8f545bede7b3c86420a5de8b79a527b0ead1fa0f1c7264fce199ddd63dbbffaac5fea5851939a6963eaff8a6c4b4ab1658533435b102a60cdc76d6874662570e

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\0OHKPJ3F\www.roblox[1].xml

MD5 74e706ed2f5868a47e7bf0e3f1099da2
SHA1 1c2bda1df25248bd9ea329c00d3bbed9273ef93a
SHA256 8f8e74365b8eb966d0187c4a363aaed34ebf0aaff66db462f4fd73ecd3b24867
SHA512 815bd39d68967eb3800f8c0ae484f0753dec1ea9daa831c760e7c10c4f1b71f911ca17b7f5fe4f15a6102162946a0aea09721611bd5d49c94a0e606015c7c820

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\XCFODRP5\edgecompatviewlist[1].xml

MD5 d4fc49dc14f63895d997fa4940f24378
SHA1 3efb1437a7c5e46034147cbbc8db017c69d02c31
SHA256 853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1
SHA512 cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\d584565dd1339ac8a09691938aa4cff54511f32a9bba1b9f013d6e32195b4f5a[1].css

MD5 b81cb3cec48c6010d0bb096b5e635ff3
SHA1 9225d106767415b2f8842801f432ef4fba7e66a4
SHA256 38cc1c155acca368b88abcc00badc1947129ab7022d3d3dbb07cf147ca5ae6bc
SHA512 6dcdcbc5f336224e71fc413a50b657e2408da9c786ccc8c622443d0c8dfe8a0350781b731ff2db47e517dde1ddff9b4f7e1edbe91157ddac44d22c5f9483b548

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\90f17fd3edb2024c216593af4a9b4412eb7e9492b45da79b4ff3f7398e7d1246[1].css

MD5 c94c92beca703e18f1e627a10e02f4f3
SHA1 8afb677a2eb71e69f7d17751b6d8de50e72e981d
SHA256 6fddc2afa6509bd6b849daf86a5d47b9504051c3f82536b56225f59ce5ecdd62
SHA512 5238b5991563d6d9d8d763ec64acf59af6c03606b16a18aadb3479754ab8c0f4c89c543ab489151a955aaaedc63dd6918359f75d6faa7ad789c20d5ac3145b73

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\882c589fbaeb8cc9c745718945683f7714c1c17d62881213345a3370e0ab7c2b[1].css

MD5 2f8f8b1ffde0ec2779fe6374a9c4d4cf
SHA1 9b57be791f5625484cb7a0d56c6bbf2fcce423f4
SHA256 af555c24e0e278f85a5d5150d48c722b67bf8e10dbacf77992b00cd68aa625cf
SHA512 20c4502423dd2294f8395a668305224dd1bb4a5ada762055289bc87c27040fb2c2fd9ac3b657c4886d788ca0a6b4ac0ebb4cab129316422c38db5cf635205d9f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\b8f8f15a57a66e73469ae72eea7d8905346afa78b9f2397627cd099f7dcc779a[1].css

MD5 4822b35d6907be7deb782a70cd7d8ac2
SHA1 1ae9d83eb6fd731044d638013370ab016519b7b5
SHA256 55fadb9d729a01259ece92f76daf5defd5b86755fcf3f1928fc5f2eef61fa0f6
SHA512 171f93bb091c0fca9efe8a7d5818d0b13efadf728242fbea9fa7497f959f433b8c63b4e5961a3ba80e8f3ee3c450e7061aba4489ae480df595b0a07599d895e0

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\af980e9df515246ae1fbda3352734a7051ee75516c7b8c7fd45afc8e970e7c52[1].css

MD5 7b1ae42abbdc2642d80cce8e8eba43e5
SHA1 4c396165a2f733a4980eeb170444fff1a8f39167
SHA256 eec2813a19d73579cd18d71a62422d8e800828a323b877e0d2e802721c045457
SHA512 95f539d979cec2d61ea5288665437890eb46a27827cc9429b4e011e9be9edc9a247aa483190cbf543fb96bb33fbe64534b98cba32c3fdb1ad7dbcdfbd322f89f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\9bfc48ea40a698035ea8cbe3d3e94bd06d3aac48969bedceb6d8ba5ff17ff84d[1].css

MD5 2c081cde4d6170e129234ec211099d78
SHA1 e1996d03a50f84e3a32b5bf50d5c9fc42d4cff20
SHA256 3787178f38b58807c1b7625ea8997f06ab4284b507d6ee3493aa02ec16c48d6e
SHA512 3851634d8f48f44fcf837d0f3962baefbcb3610e9c1337637bc81fad7a42660ff5f29df7cb385cab8f2fe846a2254b322688c2a0e5174f68ea7938369cd0004c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\da45920fef8b22d35ee6cce0702d290241252fbfd99695e2abc0934d20de0974[1].css

MD5 b99c303f3ba644a8a6c5e5b69a96809f
SHA1 de8bbd869cced07d0189e48f990d2b04a380eac2
SHA256 0569e3633081ec425333bdc8c58d6a06254ffd1e30a79afa7a0eea47c2d0c78f
SHA512 1bff99be3a413eb3376a913a7916be873d15516cc3358cb7f8dbead3574933e538cc00b8021316e1626a52cfe41a9d6a2760f1a9dae9d598a4e87fb38a8cbfc0

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\c92e5fc4564200cb9d84ba69bd53e4a4f86109709b8db691c1567dd257c1115b[1].css

MD5 061d24461edd96f22819204eaae6a48d
SHA1 b3728d8fb1410a8c28cb31904e9bc7e1a1bd40f1
SHA256 fea7c9f1a96434e0916a83c7f72cb7a081b1cf842dfbee6cbbc688d5921bf4fe
SHA512 6a319837ea7fe0a70e09b46b322c96ed4d453e51db8f944084252e2f594d1db89e3ab388d0fba25d7de7ccdddf824bc6b7b29ab77714f0bf0ecf37148cc8f85f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\d8d1cfe6a81efdc0eaa7a64ddeec42230944f4e6330e5eafafcda10cf9e5286a[1].css

MD5 e1a3a1181eb36bc3251d844d250a3760
SHA1 8600886c894327ac78c56160f38e8d6e9cd19f8f
SHA256 6506bcd31696ad2184defc292eb3205d76b817395eb1b881d0076328d42cb299
SHA512 1e41c5fe3fc8494c0fcfa8cf3842eb00b87d8074731deff471170317e3f8dd0389c56245c510eb5715337b1d7d5354cdc1fe8bbf910ab1ea3b0521002c5509f8

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\cf3fc474c475f6a3d5db2c37a99b4728410b76b9df42da13501a58a941669630[1].css

MD5 06b4e6910d00828304be299cb74c3bfc
SHA1 4ce3f73d81fc86a90d5a630d9cc0ee58e9166eb3
SHA256 ae600c0ab21ce368c55b24b4465e57db27821a8789893b30ca9435c5ae504b8a
SHA512 fe33457928f0bdc1c9d4642d9e8f893fe6259ea38886bbda00ca55e03631180967f6611cd4cac0e42e42a6f687afe278f15e60b17421f827a87f6d5dd2e3b6ee

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\2c2a709240897ce382b7ff55be4347cd0994ab1e2d6ed3b56649e54b0e97e13a[1].css

MD5 e8f199f0cef481db4a12c2e1a3ef3fe3
SHA1 fa8533d7f01329a48afd6ed03b5eaf5558812a69
SHA256 de4d5f622b0d168175e83197607d670c2ce8e1f4f2653009a97bd55d6bc3b11a
SHA512 c165b6c00be0d358502d54ed5adc69826eb01ed751a0702dc62e7c207247d69a06c119f188ff55c58a68a44ac9a1505ee5711ca545b1fdd096aa04ceb8d36d84

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\08def520152a575438e73a81aa9a310c2415c327df7b624a24aa6e794d24dba3[1].css

MD5 23e12161d0fe06e8be36968b15bd225b
SHA1 3ac9909b4f8227a29981a008cd2809216ca04fe7
SHA256 7f20f213d19cf5d49883b2ac02c45b3738a0696e9f72a395710ef4b93e395ded
SHA512 661d0308e5c57ce02d8e46a8cca12b1dec9c81e0769c9265eb4c530b293a996f0862b4a28df36bc952569b3a14cd90ac1d154064fa2ec48b7d5d2f9f178964ed

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\6edb2191aa318f963253361b43d2657a04b3d16e9c28fe7b22d4a4d5686f1cb4[1].css

MD5 1fa2b76195265ddbe69d3fd5ed9a53b3
SHA1 4d2aceed14d021ce962a5ccad5a8fe0bd2d6a29b
SHA256 e2cda1d6e9df7af6208ebaae014fce5b4e3de28b07dfafc63e8afd20269ba592
SHA512 6c11b8f2949f1d642ce58bbae034cd7a22cd731e0111019769e2b1079d95e30923f99fde364d0022ed1c5ea6434ccc1b2eaaca4412d4e0721c85a73b8c0d904a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\9bc11427144c80771648884e149363a82f3b1da0c4d9259e516b2f3d869b393b[1].css

MD5 e1501230d5b6b21c4b6d63ec2039ca54
SHA1 9a0ed48bbbbd999664af1dbb0542a6c27317cf27
SHA256 9d7e451221b730638a0b94fd47d200d7085dc3f78c7ca4ef9fb07bc6e17a6d3c
SHA512 a18b862e5d2e745c7b0445e7d48fe2e342b349d487116a32764a9ccdeee543f7bdccd4b08a828020e4e9d19d3cba8233b063dd6a718316abff0478ee96a00738

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\4c3fec0ce872f94f2c2be18e6fd016e43fdc4ccecad591cdaa3a63116f512178[1].css

MD5 06d3bf8317cddebd3fd720ebec6e836a
SHA1 6861ab7e75966883bd499d9216c02317f1b0fbeb
SHA256 93c540813e4c1cf4aebefe9be1e01e0f768abbbd59e6365eefb6c9dbe39e1ffc
SHA512 3d32b3a64d1d8d8c10b15f9057a096408f63464c840a85d8e621c10b0eaa013b7064040a7a255b39482a7ada8dce696e727321aa6fc0075c8cf387b80c4ef3bf

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\7ad657e69727fa186479f00ffaeb5160e37114c9f1d34d335b2b9959405723c6[1].css

MD5 b2ead1f52604955426af8b4cd5e4b127
SHA1 ac394912812c854ea349d4614400e28853c5b700
SHA256 815ca24cfad8ce8e44ab7350a6ae4c0288309343a55bbf819466f49a1e115a84
SHA512 8aa105b3bc371a081828e2b39c587bfc0445f801b826d4a7d8fdd1524db36e4f409067737e28ceae7709d2a64a5e5548b46049ee5193d585eb2a119dec9c5c42

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\3c4bd9b17b9020d9ebc87d4542a68a949a9de6150a55a92f0e65514520ee777e[1].css

MD5 3306ce36a2916143de21338749091100
SHA1 e18d27d598c5b05097fdde260939e55039dbc480
SHA256 95c73aed10516aca84774c1858f4dd2cdc9c9d3547952c941cafc0cb2e72d46f
SHA512 3b3a5bbda0226232bd08f9f4bf2956310387a8fe18e87ebafcb5ff452058a8627e5da3eac34248b21708034a722d97132fca48976d789a4a249809680f4af92d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\8efa79e576b0df3d4c51fb1eb4e13af137d5eb8f44aef51321f7d4abbf9c3a86[1].css

MD5 9ca5eeaf2e303ef727ca5bf08b6e4bb8
SHA1 f2ca737dd5bb2b6cf7ab93f27e837e0654705f73
SHA256 560778fb85b83a7f480038ef48b1a81d144f3697b6b4cb5dc337036d86026fb4
SHA512 f23af08df015bad5c2d95b6abc8bc8de19a60f5df60be16b3b54bcda37b5bfa85c37e4cf9e21a966952887f77a2caa2377738a078bde23b4a5592c612705bad4

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\b07e5af55eefa41c1f1e3fbb3caf113766f6f6bf35b088a0c087c2a760ce2ac0[1].css

MD5 3579fbacba30ffe7f91dd7c1dad10aad
SHA1 f0d3bce837f1a2e84a374fa9515d42e34f022f3e
SHA256 bbe8f331fc09c06b1248bb17ab98b56b1b4a422556c0e286e26290011dfda8f1
SHA512 fe0f921e73c9d829c766770cc34b8e17d5b3a9da4c24a3d9e625ba3fb920d3fb4d9c96b6be2c336d1d69ff7ab21061f500c3d055ddaeee5e045fae53a124f412

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\3bca47a98d58fdf98a7063c4f3b390671e5326ed559813887f3945876c997da6[1].css

MD5 5ebe91ba183a6233ce05983c84b03fb0
SHA1 bcc77c9d39be29ac57482d12242e4895991e57e2
SHA256 086e63b655881296de5b09f05a03e31a82bdc36c19cf2fc6a573b758aff71cf5
SHA512 08c8251b62a661e6d35d5e0624a0e718510003fbd692338192affb3bdeef8fe8c37b44ee6732c41e57191ee6406c1fab2998cf510ef7fdfab13216ed7cc9187e

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\d5a3728b78be729b693aadf79a1f45f0fa49c15fe863a0d7dd631b75f9e82207[1].css

MD5 9c33609893ba704e16ae19f563888e5a
SHA1 9bcc2f77c6e9cdf2842b5a5ce8e8d236408a257c
SHA256 2ccd7eaf7c0888ceb1e968925904718ef6371d7e00bcb60bf9a9a2044104a4b2
SHA512 bc2bfd0e1a6f498ac4200fb94a7ac06899ad9fa61b6ad78b5c1475f1a14bd7a52db3ad34c06695a10e290424d13ad43f3df6100873c588f5c64944452c32dddd

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\358ad3aa1eb24fc3f1183d478af41316f5d04bae004f77647d885c6b861e67ac[1].js

MD5 97580fd84d8c7bbadbb13a4417a39cf7
SHA1 a8b6bd1691fd67b02381928bb0b1c221de928e35
SHA256 053fc44703eac01de1f6fcf6895f319e1c1e54e2eda8d572ef088eac5f32217d
SHA512 372e07744d4fc3f4380d8b8dd8ac03e0f25a02a5c34d69dc243301acd9e79094ffaea8f880f247afa5175218367f41d42c9f3208c04db56b132daad30237d9d8

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\api[1].js

MD5 612e612ebc922b19bcda0a4899a50a66
SHA1 09b0017a2c25e1b2aa9be4543ca16b367a0d6e5c
SHA256 20bbf65fbeb252f305a52000604e524d4c8490f5bc5e7136b57366d8ec95a8f3
SHA512 a99f20f09ba658277ef8983b601fa5eac08276dd80fa0f42f10f16a944186b701a18254e8ecdbb5e8a9a9b800a99ab972e7fbcec2a95647c206e3f5115925a77

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\260757df563ab52c2270fe06faebfcf67bc9996c718dd4ed04b61e7f4676306d[1].js

MD5 73fa43a10e1f0e21cdc273084b438bdc
SHA1 03c9a282e54c9ff04a4038ee0106197e3c547487
SHA256 29fd9d4580a8331627d27960655177f85edfa181debc143e51bb466641770553
SHA512 f6892df192dd887a3329ba6d3791a6e9df5802f5f526230d0c3f4c4e4f3b33633c770cc45f648bef15f541cb09dc6f2f534ae0440cb6b37766d17614ce8b4b27

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\341005be30d4e45dde31bae2877e83edbda9f20ad16bd405e240f24050e32623[1].js

MD5 b7c164a7222fb4f8c3dc96da65b584aa
SHA1 723545c5307748156645c9b0dbdd47d431ac9f71
SHA256 b294aa329459ceda7bbac6f40f3f3db4fdbf9e141f628931cde5bbaec94d3dd3
SHA512 bdac31695881d87b84fee4c5dbbb6f9620b39cbe5179015630008462106972c0dedbeef139109a873b8d4dafe4de74746c8dcac83515dee0f0f5a11c870d6818

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\edc66704bd1974195d8c60f4a163441bec82f1bcb11c492e7df07c43f45a4d49[1].js

MD5 096c52a1373d3402d1891e78a72ff1ca
SHA1 af06578e590bb4bdedc93e2929d7b93aa3965cba
SHA256 3d6ae062089115769f8b39aa37e26311b99f256b82af68aef72a1f725faf3168
SHA512 d62af442920bece0304b494ce9a04a7222e69ee5f97b50bde3db333ea807530a235f3076f0ab7e08f5ed6adf4c3cf897e1ea1281d3fec45dbcfa6b1375dfbdca

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\2ad6b2753f8558f55fc35440842b58f6a8f74b40879dd503fa8394beac7d3370[1].js

MD5 9bf981ee84663e83f37479080ff8f498
SHA1 320ade929537edb91adf6679693c062d934f1529
SHA256 94789032287c78e9a6fcfcb24bef8a8cfbc1e8b56937d8d6ff9b31c1c4d08e13
SHA512 88cab3151e4d74d5678f8a8934ee594a2e6a6fc75e69f78e530b14005ed03aa8a416490614a34f1e9146d75c2e7c6eea6cf03504418ac44dfeb2dade3f0384cb

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\c379cf5d3d1d768411d61450b75635695058f905a96e00173122282620a96da3[1].js

MD5 3d645ae15279935c3f6fa5a8abe7ac51
SHA1 1362f8e4d0ec4d3e4cdf1891b0902066dd7033df
SHA256 2d9a2395f6d0e81f6038ab57d81d607724c02727858aff22c68ff040c21edda1
SHA512 1c8c12e34f5dcb40b2d612601cbbba4e6c13e02e45f4f1307da4aa543e7db3d7ab97fad7bfb590c675f192bec2d4c7c2ebab229ca74b5ca88eb3ec09dd8aab17

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\hsts[1].js

MD5 deacad0a20ce292e0f0439f32616a363
SHA1 a8a3574096efad3449789962f97828a2914cd711
SHA256 ca7aae62c9fe0095fc0a52f920ecdd08ccb7665eabb5c67274516c2ca99a1177
SHA512 750a68226792cbcf6f1ee9c1d6c5055d7063c1226db65c9f692a46cceed7d9e44acf07b8d140784ff800acbf9184dc90cb369ae2cefde0038585f8a7cfa35677

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\4bae454bf5dab3028073fea1e91b6f19[1].js

MD5 4bae454bf5dab3028073fea1e91b6f19
SHA1 fb59487c9e9861427d5e3f9278e2ff25192bf542
SHA256 16e270c694d63452ceab6e36e48781a1d8ad5a049c3a81ca2e4c8747c38e3474
SHA512 d978be44aa2bf0df078b7b983423d595ffeed81189823a59906e9edfcca2767624c592f820b89dd292663c19910a009689a8a8a2dcf18180989e99fc3e68f3c9

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\83d836a661ff433d5b7ce719c489e43af590ff75ab39ccc6d393546fe91b766a[1].js

MD5 3ee7ef4fbd7fd6a8598053bb1c9163ac
SHA1 477c9e17205ab78bc62d93a04874f0dd2d42f503
SHA256 31ef50611f6981b083bc1c17f1a2d9df1c2b1722d63548902000e47dab835c65
SHA512 209ca44ff68bfcb676fe7675d06c4de32c0718bbcf79ffb8b3cb7b9d6b9c152f95a90c42324839a743b8b8883aefb4f2560e7b19a90c9a7159b4dd185e4540d1

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\558cbed0ebd127bd21f1045302a44c69a092fc29acd3ed983ecd5bcb46ed2e84[1].js

MD5 2a5211f13633e621e4e96e3bb4aeb2d7
SHA1 aaec211b9b1aa4340aaea0cf52494e37725e8d89
SHA256 a5b539d625f24613d5224001de32014ed9d77f96f7de7b97a2cf24100d9971b9
SHA512 cd1e9f4c8274ee50757496c160982d345c51477ce1e8140eca44c7af3d36b516a660a28c41651c5321d5213d2c9ed938dcf00a13f4e8d319ba5e47a65d5722e0

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\6dc6f858b83870493bca99563b8e683b8b8af7a55a416e094c4dfb1969a085a3[1].js

MD5 b6babfc6ff98e136b92bd978e4bfcd7a
SHA1 66a5feb2471ee2b4368439725c819cfb818733bb
SHA256 a5ca25227f8a747e27c0a4f5e725866a01c59b3f9dec6611ad683db920c9956b
SHA512 ae5c87e528d57c508d86b27e360e4359eceae13bb9c2bbbcb376c863c6a42dfa4e4844131c25c1cd0010029fcca987b36f60125a17ac4694880027d4e498d00c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\4ae9967a86d1a38ef283aa2e2a0cd72dfabb56b0ade016fc9dc315e9c7d45094[1].js

MD5 c51a08b71c3da4bdd714010c8efed5ee
SHA1 3c729633e242308c06bdc187e9b31b08a933e3f0
SHA256 27bd63d4a1d7754698d602391a7ebe1ff56145a8c08e50d774340ee71c6eaa70
SHA512 117fc7fa3e72eb3860cef59ac34f23f56ce2c6157b17b0db9a19a7a3907606a7f5ef9e3b0455587ff0afc347de7deeeb643799baba0ba90d4b2a47ae023d29cf

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\b79589d3dfb2446936aac95605deaa507ce5bc3e09073bac7dd04872880694c2[1].js

MD5 6cfed30cdb69f19c15da9442ad3f8eb7
SHA1 c0e81e60512fbbcc3c50c9759f4105cd5a442185
SHA256 0c9969537d1177c77bbe5ee1670a235a8daa10d6f7e6ded34c2b5c1ce3c56f53
SHA512 eb9ee827c5944cbdeb0f4adb20f152df483b5da77d2ae995e890bfa75da83c0fb09ab059b737190f89703f424ed406acce954583c428adb93d0ac862efdfab7b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\2359bfdeb82ced7d627671a3f54e79df65c89aabeffafe46e360a627c8108d63[1].js

MD5 e1019557eac36294033f13588005b0af
SHA1 05854e7b2c92bc509bad8ce4a3dac0169d819e4c
SHA256 e0ebbd2ef1e3ef6ae3934fa59f20a4ae55da292b59b4b337f5de6b32a6e41f3c
SHA512 fb1b232bb77e66be80f2bc4b736e035231c7d41e9568475d63f25bc7e8b82f9f899350859fc450dd572fb5716e7fc3458bf7c622cb33b3f10bd4863f0b9af763

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\9f622ab1139a93a15b60b1cd4d2ac7c47005110d39d05e6606b6b8e655c714c5[1].js

MD5 976c3f2e60ebbe0e3efa319604342411
SHA1 bd0cf3e509ff2e45c90954dd799245ca1eecd9ae
SHA256 ba195fc7739ca63a6b17560b4c6a8de6affca07fc43b6e45ae85d76489218f41
SHA512 d12169863f0f0bf5bc680c29f549b12b7a76d3d371787f058effae1395d8274527e46452ad3b8fe85012c3ec58c4d2e6df3f50e7aacde6e19f05bcf56d1d4e8f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\5259cfe8a3e36118bd61120693dbba3ba87f2c3641f84bb07e29f1d69fe87523[1].js

MD5 08c66093a701ea84318ba5ad26752a61
SHA1 d244d4c153c2b0fb39eb3c454fae6bfa4f296595
SHA256 524ccd7b4aac1d1232bba66f088c8ccdff7edbde4ca0d5fa02e3e1ffcc1fb12b
SHA512 31d99eb9077846a516a7040c0c6eb0e807426e754866e9c19b3f995b935fc1a09e05759f4091937c27bec59e6829c0f886f23e3ee57e2015d4b122192ed30faf

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\3756ad214dde52cb58a1300177547475[1].js

MD5 3756ad214dde52cb58a1300177547475
SHA1 f2037e4decca617bbd8f290e8030de93ff52202a
SHA256 153c7a2b2f87f9c0ff485fb263bd639d7c28f19bcc265af05517d12307d2f6f7
SHA512 fa0a5dfa503cfe3483db83d400a89d7f12d072a4c08bf1b9c5a310b2c78b00d8ad3f1c45208b8d6aa4ad09f7936c92f6d32e43860bb6fac9a91f4db0515fdcb7

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\a104b6df90de3c5718e878fddc9238fdf9bf357438be8dd929f427b6cca5e984[1].js

MD5 d4413319bca65d703cc4d5bd7dd61f27
SHA1 81b053f8042a14091469f46df01642bbb40a7774
SHA256 6a3e3cf3a1abac209be2d659f903da543531eae97e7bc1d980a1026115c183d9
SHA512 f7895e9a9b79d541455ec2b2f6d9ac3f3d5e400c10c0efe555ddf036c5f73083dd386db85ff31c98a3ea7e011eb002adc3097f08bbcee71a474688307f7584e4

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\c147f266d2415a0a5241902efea4c6e3e6907898faa9452177b7ce92ea003cfc[1].js

MD5 29e2184e3491e4b0220f674a668cb031
SHA1 0e38f5a660f0f3d56127f123cc0e3c40aea6c87f
SHA256 041ee2b59fd7ac22b986e91311b8a26ebd37fe812c8b504dde0c1220ddcf0b57
SHA512 c14378b2026fa5deb728e47cdcf60e35500c2b6e7920e19158f115fe262051b73f6a271185b9d8d171be6e70145d457d74601f190fe3222663f670adb38f3695

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\077dd64734d3aa9a884874f85f2f514a239688c33a0fdf3f90365e0e7436ec3b[1].js

MD5 3476e53f01f1b94b0d27714a64d74459
SHA1 05735729a6019e83e82e6eb6f2d5064b933f4ad2
SHA256 75850ea2619ae80e3bb74b69b3c10500374f90dc6d621d722639aac1b3c594e8
SHA512 bfcf547954e71ec7b2069cc56e4291a90412c053ff49f1abeedf0df9fa701fd49744b8b115e05b6338dbaa0dfe24b9118df040354f28326f17a056c6e481f196

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\b943a7a0229dce195e7df6bff6523323ad8b2f049d3e6e9ca7f44190c8cf5bb4[1].js

MD5 f032051078b072cc985f8ad301d83661
SHA1 225ff97067a015bed7cb6fce0879c1776a9447c2
SHA256 78fd8ed2c86cb8288044e5610a72acf00fae679f7c0ec85afed06e96e2024193
SHA512 dfd6937509250ea2ae9f411381defa79fd10f9d210011f36307227b2a56f01d984273820d0e5851bb16b7943e7c3a70b9a94a57a00f4eb4d6edb7e91ade71ee1

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\d064c41bb0818a1981ea76fac0d1e25142b6117a2197ba92f670612c01ea71f2[1].js

MD5 5f7c7e4e034e3d2db7a3e7e617d5b33b
SHA1 3beb31f215926ac82b7c852539afbf7866b9932b
SHA256 cf0eef2ad3e35b41786a0c5438e96fefefa4e7147f66f39745ce24027a5d5166
SHA512 ce0b632cad7161b802646fb7e8d84dc54192fb817ae8285b1948d4da5612e047bb2233586bfae0bc5de369567a69846ca133e59e1c95a8cf589e9b046fa54dab

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\f3527069ef87b95fe1c26d21d14075c6[1].js

MD5 f3527069ef87b95fe1c26d21d14075c6
SHA1 e89719a5d7e7be2c09df1232cf9af18183f7ac32
SHA256 2c3c47a9ae068b3fc104f976acf733c925cbecf4a63dbc139c769bffa08e8e6c
SHA512 935757c93bbd5cef633ae4157173bb7e92726db3929d35d2efc455e94facd0d430ec1691604342a3fc447f94d221b2f4483cc1658bc8e0ea3c0fd031b4beac7e

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\1e979a52d80126c2447674c17604baf65f73183fd44df1e6cd862feb441bdcc5[1].js

MD5 b84e730ce35d06ca5187beef8aaa5552
SHA1 d34bcfc58c576775a82159a6390bcd9a90efdbe2
SHA256 b5dbc3b12caa6d271196d665215c5a4a1f8ebdbd3eb1e7f13b4777f80b8fc13f
SHA512 1608ad147bb4a496990f118d6146448f80069c04cef4da73bdcb400e0dfe920cda1273b52fe6e1c02666787052d5f125dc567a222705fdea762a98f19fb54f8a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\4644f860739d83b63002f44d463ceebd171692c7d7a41748df467ab49be1c891[1].js

MD5 fb3a1b7dda3940b53650f47ac0ca61c4
SHA1 0a592171c62cb607e212b4a4ccc33ca19c1331ef
SHA256 46b2d31908861c1f100047d4f2e980cb9248cdcda274a89ff8ba0d25a8f75490
SHA512 ee36e130fb7fcb1049cc58c18b8cff2311f879659bf5af768e719b05a2f0d886cbf20bd325214221bc21f4123465915f78f91868933408d9805857c1ba73bf36

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\fdd31584fd5006be8930f9cc2e3cedb1a1f45ebf88def229d050d48e20afde80[1].js

MD5 25a8ad4f07300d1777516de5a35dadfa
SHA1 36397a42ae8ff5d7ccaea2546278e276ff56a051
SHA256 d77c838f6486fe8fb60fdc3400e40e0c41cb910ce9308fcef35b7084ee6a5262
SHA512 6a1db34aae8770f1a66618074909873786235d0b7023a9d5c3a78000fee8e43c6d8117efdb729d9a0e1b97a281cc358d9c24dd928b7e9a0559edfa834cf9cb3e

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\9dc32e9a7de704c967202e1cc55b61d794fda03c3f771dfa84522dfd3acf21fa[1].js

MD5 1572c0055d6cac51543344439dc05b4e
SHA1 e92029472d4e599d245b8e9e7567f02d5c243d1d
SHA256 8d84a26da92da6db7b58ec95771e46f67f1b0db50c0f01bf740f34a591c6e9bc
SHA512 1215b0dc3d12c9d1963c1c370891f806d5628052997062985e6c243146ba9a1aa9ddf25c0abd90c977336130cf935b7999548ebedbde172a6d30eb646000f2b5

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\4b4ed339879e21ebd989965a4ade1a7d6f3181871df8d816198c1cdc73b629d5[1].js

MD5 af947ab42a0e85565b59146a1c86ba39
SHA1 f4483e335bee767f8e6846931536296766db8007
SHA256 b31d17b05c9353616ff6351531a63efe7b1ae72c80083d4227b016b5cba86632
SHA512 4fab9aa1df850658203657f5737138b3077e1cd3c40db6fa1010fef7f9928ea20148ecc6959ebf7096b8a413666ce30d461aa7cacf11a7e01e7425ddf1e56031

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\c4b0a446b38285f3db5472340f4ef27d737c87b78348e36dc7acbcfec89d70bf[1].js

MD5 921ac3eedd28fa0e68ea4abc9d34be91
SHA1 bb13f419963d9a557dc23116dc6570b0b4f73378
SHA256 cdcbef4fda07710a79ef3d93e3f73726f6285495cdbd9c2994d921c3cc11604a
SHA512 67faa6d3c442003ad3c36cc168b7cebf5be7ac9d4feb1ea25ec6d54ad80ce3ca0757ea0089b0de4820957e4287f176d041382d4cb3bd8236474ae8bbb00099ff

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\33a92a2d4b21d16d10fd81f0e3a28d08efbd55475fb290f430e94f2a0f40f814[1].js

MD5 8fbaa54831cadd6b57ce9c8c9dfb581d
SHA1 930ad0be6a796d7cd95726e220234e67527123ee
SHA256 88a7aab0c401fef7a31a22eb65378742fe049e5737dd6f8b2fb4d9f36e18a04c
SHA512 6720540ed9431facc55648307a95daee2f28eefa4e97fd31d563a6f3ea4e352bf5784ed99eb6b2b73bfe963a6860e602b8dd03a70882f97e5930a1fa9e7257cc

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\36776e03b33e735d6b3237e8d56c81728a3af642275c4aa7b49f3b1ed0624945[1].js

MD5 f683c80ad2333d8d4731483e6565109d
SHA1 ec35ed60fbb3b461b2c8db819d33825616d05754
SHA256 5efe94b770af0686416b78302d9aff02a67f90302fa5e8f5d26a4be979b6d2cc
SHA512 bd13ea3c913e77859ea2bfddcbfb5b25342b543579f40203b64ad5165ae1ddbdaabeb9605b8924aa4915392fca64ab0b573d7fcb8fe9a4a537268d43f6a7a22c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\730fcbf0eba6dd82de9b0029e157627f023e6f448059c5b4c6a4f356222b3ac0[1].js

MD5 2dbe2e4d187ad53e8cba10a510dc62fa
SHA1 32e67f8b946bbcc6ef40a9ecf3f80d6eaead3d07
SHA256 07c8f5eab3ded2ba45d8c5e8914e42fb196c90e45d68efcd2db8b5cb58d27756
SHA512 e6e348c4fe34778d4690abea35093595e8c4101cc6d930e4d54bc49540f2564d77acd5fee939c493d3fde311063660be7108e677e208a5241092cdd90d8b13dc

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\541a2c06b0dcbe1e2b287c07c1cac903dfffaa0103d4dbed4c96ee990700b5d7[1].js

MD5 98bc1f9c969cd17084e10d9dbfc7c637
SHA1 c54cee9ee59c50d893628135323478950d235bb0
SHA256 8eb1d1aec502bf5b2d816ee2d03cb6936c4663d7ca9221f96fc702348b61f45a
SHA512 377a6a777db5ef1fabfbe1f222e7a6ea004a735a151e0f392f0759bfe99ed9164908d71893c4e345e2055a94ca77cc77551d7db942a10dd791e173d7908b6bb7

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\5fbd8389fb24177a5be64285e12645c445dee91f0a686d5bed5865f0e009d387[1].js

MD5 d99bb90a05e3441e9ec00bfc27098f7a
SHA1 5848ca788b61490ce54908472743d605f7f93e7f
SHA256 44cf2d649cfb4974555f38147b172a58993d4d84ceacdc8c2a9d77bc91157249
SHA512 322fa979330919ef3d4971610f5cc76652e537fdb035edf24a853e11f171033add2f050946a24e235f62bf336ad5e8ffd90434e51d9f8a2c0f75be9bbec30093

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\dc2cf2e13daeb298bb874d126d8b067c2863c6a8978b4d5046e600e4b598578a[1].js

MD5 ff95a7f737aa1797beca17373a9f8112
SHA1 f8fba0ac2fe324a6f79605b48b1426737dd6708c
SHA256 ccce09057020ef69422c08231983675cd25abb22b33aa77c0fb6b4ed482a9b35
SHA512 843d38ebb7dd6a778ec3b592912618e1968a034f67320a785e58b70ecb3b660350f372ca971c204e9eaa23411af734d38ed6310755aa8683f2a555e0d12fb105

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\b41227fe1ecc1f4409f2e33f02d4d968f6d6389349d2221f481ff3b34e01a257[1].js

MD5 d86d7d0e08df6ad04384c50ddfac0197
SHA1 8734812c4ab4a720eb105e4f917260964dd5eb7a
SHA256 29c6735c889aa74e29f5569337f03a1df150c204837977c09357efe789d1b2cd
SHA512 5b20c34b7278a027728b70561fc62526d839a699ee9069e29d0a73148aedf3b44ea999a3a64c810543876d68ac5e9d27e11d265f8ed79d6b6d857e3783a9765d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\2d0a39178b783d4e09a426a042a826da646b1fc91f581c3aaaf26462da283d18[1].js

MD5 9ebe473fd9f33a5369ecbe99fe0c7124
SHA1 84d19d9204c14a25a0dfadc87e90e5c9882bfcd6
SHA256 f54450a21c43f129a0f8015e791247f79b6f77712db7068a71d9ec8c178343b9
SHA512 530be3836e8021bee7ee90edd177209888006985ec591b61f57aad1be682ef36184b4eac55feb2bdf204f9fad64db989ba54a20ce5b1904796205354397f4c76

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\5a5300a5800d03e45af07f710bbcfae2d6a2f4edea9305cb47a488bb57b74455[1].js

MD5 2b3db538884d4f33a5d58faf84c18ddd
SHA1 657f23f3d5d30f72dfbd37f9e6d869c4add55357
SHA256 34fc773fa4bcdc4d791882ec2d2f49162211696b2ec4b47b93912fba343fc725
SHA512 49ba7c70cda1dcb219721ee743d4265a99aa0563bd5dfd52bd8ec1184c8f014e6549cc329c10b197da3540c99467b7e371ec79c1217bf31ef417d7309f43b98c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\d33ce74e1b98bc070ed4542a3ac39318489a693cd98ce6725624311fd83617e1[1].js

MD5 89f8c47ff238ccbf636b889d02566ba6
SHA1 628f7595222fe0493a5f5f6bac7f96e220c7d889
SHA256 6cfd463cb5c8cb75b36673083c5869257ae7cb41ce6991c50e670b2649335654
SHA512 3700675be33c1610b7b2572eafd60124a67ae4ad2f733456c6262f26deba0bcc45cfd49af5e64306ef877838bc52b0ae6264b8e8301b2d8f5109f907ff2de2fc

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\45dd9a6e8e3dbdfc18153719b293eff8cbfd32e05b8186a5ed3f15a95f1ecb64[1].js

MD5 6c948ae0cde8382bcc1c02495b63d0bf
SHA1 d965a5ac3fa4622b01c11f0821437448a6d70a7b
SHA256 e47f0cc781364db99762706571ac7634a1db1a16120caa48ef59d3edd6c824e2
SHA512 858ddfdb0217942c32f05abaf31999995c2e6001b086370f9dd98165d999f85d40ff557335b5ee23e68317cdc4fd97a5a832672d4429108d2b1a590d7b559a6d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\94a14bf31ad0a75d3878f6772e6d5a251e7da9b64894e2176a07f65f4d79d8a3[1].js

MD5 2d87afcf03620e015c37ed0fa8c5c0a5
SHA1 6331bbb0a0a39abf2284752562fa2c3ad339b13e
SHA256 ff243ce99943cd71e1506665e011a800867fd5a8ac481ae9730eadaae1f06b23
SHA512 747851d0fce294586130c9e21fd55da46738897a555d2f22ee31e50cf11efbb4bdf6d751688706e40a0c298948f36443fd5f48adb4b55e883aa20e34aebae3eb

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\a3afe915131ac5a7ff949105b24de4d0459e6b48846472e09d7c5490b591e68e[1].js

MD5 c65952475160b681151ba9d48b3a8192
SHA1 bec05f21df4617f580c58784c686834c39eeb45a
SHA256 a13f4495ab14780aaee7d0a492ebcdc3991390317631d9cfea171ac97004cf74
SHA512 71f7c60a4525998b668a4d2bc7b86a93cb8d66a11e49e364a725db983e732c22747e5c9f3587b4d78e0211874209788a822dfdc3c26394518bf7800dbffc2964

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\7730fff4e1477239840256961802be137c8d5ce6723b0889ac525bfe58a74003[1].js

MD5 8b379011e950fa8371f0e2e07c1e9343
SHA1 bcd7ffd3fa1bccbd0f5d90a0e876bc5d1e37d64d
SHA256 0fe0a70f2f0b61d9339e0c5ff8ffb390e53dd2c2393ec3195f6e03a604179ed6
SHA512 7f0541fc425d00418238372509521fa92cdae4581acca53d514dc2e7a14c403cc8493193fd1231a28755809df5965b5324e703f2e77e54beee3a1930dd12d04c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\2da1b676b979a60ce3b9471d919f53c6523c606f10e6ba75fa3c168945b8455a[1].js

MD5 7902d8149ee4599dd926a0e35831b025
SHA1 51f862e67eccd55a183cf1c7da8555d4d73305bf
SHA256 2f6cf29047c3d7bee78e45891ea26653789776ee058e669c0c156885f8a59585
SHA512 59d562cd2363a35db03082726d8955e7e361ada87d815a552c8f04eabae32a5f666c3af89822205108e1a3b38de8d8d478281720f6604adb9c6d626b08cc61b2

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\44ff0f2cc820b734456e36bcd3528a30460f0576ff6ff17478b2d84824b64abd[1].js

MD5 7a9839894dae8639aebfe9b735c0f15d
SHA1 59ee0e2cdfe19529a607a02edc8c6bb1d649b7e2
SHA256 1529a3576f5b0fda8f7d25f4340c9619c91c8d554206ae172a80da211758ec28
SHA512 b5e1fe996adabab060df6479452608290880c87dcd5bc92d9798a47575f3ecaa185529e808d14d2a3f5dabb314b3a94e698f88862b1fedc78968da4be039d197

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\955567fcee625c9235aea26b45e9b137de9ab1340f359f7b2890c0589415137c[1].js

MD5 70a98eed4ac0d3789eef86f426952d6f
SHA1 bb21bd7bd27873637f3a5f7c18c6ddfde8e5ad1f
SHA256 123cb41e78fe7b1ba06a78a6af18304bbc158bc1c6070dccde54afac35142fed
SHA512 1a7d3ae0ab3551ae52aaf36deaa201e3eb54910528be8f317ec64f48a3224d1dac5818a89f20144eb28ab70815fb4c46e5c679fc0d180849125be134fb341f00

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\be0a253ed75b2d5c586cb16a454ea63ac3b48808299e7c7ca72f93c77aa78d9b[1].js

MD5 1efcf3a8f2441e4cafa36ffc1550ce95
SHA1 bc36b10b9ca6074059d07d90376a76a0256da26b
SHA256 a46026078eed978823751f9dde567ad5ba9002e6e2e9e30d9f99cb1a3cb19992
SHA512 c890dac7262482c45cb30365da5b2ca082a4a45b9bb26650f9a16b8e47b8821e76d70a9d71def1650a0cffa4fe25926c60b3eb5dc5a68b0e4a9f412beb1d5cd1

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\ad33ead29e90b9c8822f2eaab8569e1e7120be60fea1b902b7191b91c1cf610a[1].js

MD5 1fd9d0dce44be5a15f8aea288339e07e
SHA1 8689d92d9884d8515b1d6ee59222de4ec3fb10a2
SHA256 807eea3de025681e10251baabef7bce368405025b6a164f88c2c62507d4563a7
SHA512 4bf11254eaf6b1cd9a84d51f249bba3b2074313494370c4282164ff1b524c47261ce844cc4d33f3abd0b9e95b862247d27d4bb5bb16d941e394d2bdbe29046a9

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\55e9182f30571388944215c359582495c9cf39ff1218f2a173415d5d37dd6f18[1].js

MD5 1a05b70383e9d83c2aa638a2131400f6
SHA1 79acda102f1855be11511b134e906b098cfdff36
SHA256 c8b402cada8a3bdfbe6e31ea56d8ebac7f0c47504dee0aff84d03e77861f5479
SHA512 197b1c85d8ec741d61bd0ffd5124731c6b0f089dfe4fc9b7658a8d3122c1c540056b7ef196933a7d4b2f267ef062c0a82e1647adcb136df18b92ebab7a04a456

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\ebc57f8a4aabceab9f38dda880bf11c04f2c92f441e535f0bcaa21b294736e65[1].js

MD5 6644b8aee2297186225b03c258f28ab8
SHA1 cb26867fd19bbc00521810e267431f1ff5a88cd2
SHA256 57ff67c208e6a60b10b5cd4ec06ac0a74a2a3da0f9ca88d03868a311536877cf
SHA512 e27b9619fcc7d51512e9a9da2313a8acd6076bbfb5dc91f89b24869f5bb9bbffe496e82967ce342a90204ae3e2c1d4d288e343d81b19057e78d0c1176c5cfc28

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\ce33e1b7ee9a9fe04186a1b433fe261035b0f4098ec10a0d943060efa65e98a2[1].js

MD5 00298bfbf5f0e17052a637bc5f44bbb7
SHA1 b59db0c885f0f68584ed845b4f2684c6d99fa5b9
SHA256 80f47c8fe053cf2b52c91275474153920b2d5cea7826d453ab91ad8c29af06a1
SHA512 97fd2f555c5dfdbd7696aef0e239410e0c4be70cae305490c06bab733aad2155fbf6c6bc5e0400fffcea39cdd4c63ec7f30667802c4284e82879483d513e9414

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\9162b64b75cc52f51964029cd55d55b1d1bad248e3d35b33586df4269fe81e1e[1].js

MD5 0ca563ae4f42d5e626982731a6bfa453
SHA1 7986a51334e1682889900e4f1ab1560c03ba9532
SHA256 2dfe4949ee781ce3174dde10d5972b25bf784c4f3c80cccf70f0130b197a1cbe
SHA512 aed76fe2a45522858ca4ba2f944d83c48f52f720e30b357fa5f9093cd9993088bdbc3a3ea2795c22b0af4921ed1b8ac66fcf77574f7c47180ddf704dccd35cb7

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\60ddd2e451fd1bb0df64b78e010f486ecdc9a94ef809f56e9e327acb537d9cab[1].js

MD5 6b4e7dc3bc00f3df4ef26dc18623e144
SHA1 88e24195c2b5cfc1261c476523e12c9e31683e42
SHA256 1e5b224b9807d2a805c1e1b03b57cfa297fc2d2a1e0fe336223530f635b67a7d
SHA512 382ff8d6e9ee66f78cbcd1b1d02e34ce2d59f194d733fdfea85f09ef80ab60887388f0986dbdaf84fa3909846926d7a5326ff170480ed81bbccfb64fb69662d5

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\10ef4a4b892f4fde2e22b11930eafc358dc1ff59e17b44095514daf733a2f101[1].js

MD5 717e5ba9960893cccadc9177d9807fa7
SHA1 a678fd1aceccc404a08838b889b614c482ab1fbb
SHA256 196e48e36917c02097da9ab3fd34f881dde4f858930f8c449adee612e2392199
SHA512 54eaaf43139fdf4a974b5d3220e6eb104dfad61dbd18448832fec77e078a08bb1b5805649d55eab044d0903e90e1724583be59a9fd9369b8bf6fcadf9027fa4c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\cd456bb506f1b0b06a2eb645ca018d367185ca84725ec00d524e35ce431f4a8c[1].js

MD5 2edbf80f235e03295247b1ba9ab3f1df
SHA1 85cae70ab45a5800f8cf22550e1ebfc7729f9340
SHA256 813c61d5adff98117ba83a8dd15997d7ffc8a0767745667018ddde5a1a8314e3
SHA512 91b600fad20dba3c8e07779159bb915aacbc754998c88d16093a947372195a195ddc5c20fdd552c872981c25dd5bcf9b8f9a9f48b143b7bd23d6397fd290ff61

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\8889de1e23be3333741bd33377c89e88aeab7998ebf4ced2ea65a96d770af729[1].js

MD5 a2ad4caac6b9cf81041df5bde7cd36cb
SHA1 23ba8a36c30c44152f78546c649d27368df3e25d
SHA256 007a602ff68ded82ca2a9630c5b41959997eeff083f007f7095414ee61c4527e
SHA512 e8e4961b13005cab1c7da96f6990c3ab0aa11c631dd2c448fc86f3ec98349c9ffd1d40cd002218ce94cebb68e8d5996e68f659c7bafc15314daa37ebf6f64d2f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\b3817d10909ade9f5c67179673d95341bebf1846190229b801caf899b09dd8ac[1].js

MD5 133a87209ca300901e42ced38b11a47f
SHA1 cdc708adc46663f25c37d1006149be3895b33df4
SHA256 baa4a176c3619b72ed5ccb91e8392503802660589d284a7b2c20d546a825a684
SHA512 82adb8291f5da6ba89342ecd1404fe59db6aa1035c24400bf8d0185e4d5b37b5466e62a73beb011811230049e28eb59f69449016c32be7a8be79d653e2bbbf66

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\13b3b0cf97cfb5da4538eb0c59f252188b4f724f9328c264a58d24a714e41fe5[1].js

MD5 20905b9a89f3b85fc56f8b17988e7482
SHA1 547030a9c1a7f3fa75f2ed3f876af1368e269ffa
SHA256 f0fb5109ddb5e2a36762835cdac048dc0c9d17e6b74c56067c8e51b59796e2e6
SHA512 bea7b5fa8cf2fd4f3ebf6e9785b25317dcd3d3c6823da94ce9676d95d52668814cf683566269a927f845a97f7932b089a45612657ba07e62ae4bf87519c494e6

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\9fe94e6c340be891d16a5026223fc244ac5b117feeda22fcbb3e8b4c01e9f88c[1].js

MD5 828f0ead263d0cbacbdb0edaa862d58a
SHA1 1a378c785e5f5e6869131e66c76f224968e91374
SHA256 1a46a6c0673dbdafd1102d0c11ba46b6d0077ce4d87dc5f53bdfada0ea57b1ba
SHA512 36873cb4be0a4661c3bed0832d8afb946a6e24e3ff6873115446ac85a32c045f652f6574a87fbacb7a1b12278aab31367f6e48191e394a07d1b0c83fde4060fd

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\81fb25c5bd2872ace1af6fe0366b5fbbccf2658667621faefa2a1897af476c7b[1].js

MD5 6d6f2619e93af7d3cd28e818e082970c
SHA1 e14e9daaadbb64b6d01c766e5c5721c2bbde9439
SHA256 9130e5cb1ca76a9ce79b2152483d9bf2f05ae76305ca31f845f9784ac69a8e16
SHA512 887a2c937190eaa6f40d37f9461a6ed96b55b60642cd7d0ac6f491368e89818602b3907de4c6ae1a95a1f9441359482c8521c9f9466437488abfeff20a8470de

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\69a2d98dbcc154a2eda4f778df63a0bca7d3df5d4d7d03eec49644bfa0fde19f[1].js

MD5 f7c57e176f6fbfd18eff4c6a91f055b6
SHA1 835502fa98beea79ffbfc626d8240b543d0edb61
SHA256 a6653ddad064ae353a7c0d63a64f4edfafaa03da288ec06945c7485037c05e27
SHA512 331bffebd5cda6f15e63c12749dbe6747339b2836e5ae63ace9b239811f0e26d96768a5568c01d6865a31771fcbae9a0b226c55677ceb1543a93b69f2fa2c3b6

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\5418f00c73c08d3b23c21e9486aaf8de16ee77af85d668428bf542a636103a63[1].js

MD5 d7230ec6a6b3c63e069452856743bcac
SHA1 ceda82d575c80e4fa9172c303280d934e8a899c9
SHA256 8af581faad5ed6e6659e360dbd7719b633ff39a91ae058a6e83256eabf936de0
SHA512 308c236a59958b1f8b02ca953c50045d69fc317f3f369640e3667c0f68995ec164634f8cc757fdeea32dd2dd6ab3a148e3f8410ca8f938e2e5e446ba37c60aa0

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\22232c2a3309953feca3dd94eb7e06bdc98b12e07cbf8ab6c1ad8b11a7069753[1].js

MD5 34b48e8cf871f87f1b8132fd175d9540
SHA1 026f275328a1d16ff2e7a87bf96ea1aeedb4dd2f
SHA256 f835c0ef9182955172b06f382bc2a746955e3d1abf8fc786e740d14f28143bcd
SHA512 157ea3c1bc5a72ef3812291f6bc3d6f2cc0e74563149c958113e450a5762732624c9964823ac6e21af47ee2ac508399b479cb20d75fc4e6acae5a1557cf29f95

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\7043536ec0248f489b68b5e62dd3336f6962fb50d18a65b766453a206a772d4f[1].js

MD5 cd3d6b4fbb3c0d89042f2c101ffc472b
SHA1 4a43047f618a35fa3df2198d8b0c152260cc574a
SHA256 1ef57c242af32228a2964a894269e53e5636a82757be970b4164fb6bbcec9eec
SHA512 d66dd09fb00b9dbd3b1811f4f08fda99ddb903cce51cd82973333f5fcef52c2747814011af3eea45405ba80face75527e2f9bc600d9fff1d384092e978e29295

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\7693d98990f875a88c91c0385e1b0542bb51913fb34b23f414b6890d90353c40[1].js

MD5 959be10187ff17f4f4b5684a33dcb315
SHA1 003ca24bcd9a2ed3ee644f7b0cabe0d5bf881cdd
SHA256 b757c1c017abda974e444fec6c8a8f182df7106d504b2623a455b03b83292955
SHA512 5d7e7ae709ae373f55dd3f1d6394ce57acbd617208bed1d057b22706988fdf3aff82beb3a0da13cdec87b57b6326a94e77dd6fd80f0db44c08022503c8478547

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\5a130ca7a8a39e0d88f0b43543e6e80e4b8c20405a7af835356add2a156a610f[1].js

MD5 5cabff5d9594a71749ce57d5adccd7bb
SHA1 ed209f1e47643f12d3c28654b80cb45155b06171
SHA256 8c6690ea23392d014da7e4312c3b8e0a9e3670cfb2a94c2a6f936436993a11c3
SHA512 cac43a14840045f9fa5fa54a99605ed7486129eefa4873080d4360a4f74d72a6d684a0025d52e559aed3ab55474ac7c8ecb5260f38daf5f2b8b345829971765e

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\b37f27692abfd4515ec53562e3bd54cbe3a8e410b7f589d78f413e1e14d511e8[1].js

MD5 1da151ce6211dcee054478a90d5fffbb
SHA1 b393795c15a7802fc03ce8dcb0eaca6343487d68
SHA256 ea4e2fca9a65dce0bf18c0b3d3febdc6b96d9d881e753caf86365a54a2c8929c
SHA512 032eaf1c0d5ab3d36bddd21dbb02716c4a25dcadd8ad013f65ec4a11e5ee4b14ec5ae4e29f37108c8c3893da10f6df636c57426441186323b71bc6481876e9e3

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\8e5c1c86f81d1a1ec5db7cc50c8b7feed0ef2eda4d62453cdd904710140a0aa8[1].js

MD5 92955773019de10fe44595dc71a52f1e
SHA1 aec7e38f6f2d98baa62cae4a217c6338cf153af5
SHA256 4f67a090246c3a5af2ff42d8bde898bba57baf0f23e0f4fbeaa81bc2fb3d7ccd
SHA512 00e17654de6e3aced36451227b5f6ba2048220729f35a08dfa839a25fb564ff7d7d4275dbd570d8a75da0245c2dbf21f7361da4640d1d805550f809800645d52

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\7f4c2753c55dc89d4c9bf2dbfbf34e224194f6255457c0bd8c8c1ed0e6350f3a[1].js

MD5 104e0e816d6c1490e02a7d4dc0bcc444
SHA1 64b3fd60616a51f22a279ed14dbcff21682fce50
SHA256 241cab8f966b2b154e5636e304aae43d561853e114a1aa0a59b7f9b7036c72bd
SHA512 a7d38f514c567511a308db7f3bd716392bbf1558b1ff358a67b46bf411dd31760d16512834daa04627c0d3f32bdf6fa311802d038636f8f5ff835c211796a77f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\d9b4f8626ba6e9c4a9b6f84527e222dbb214a0e61e1e43adcc8d71082413d667[1].js

MD5 4f4290523c79e71271d7b6322792dbd1
SHA1 58f3edf07703d1c1e8ea0854b09a32b046e48931
SHA256 6f1d7bf4cd5f0ae6b0a2e6e3ac3ea59b3f55609927f0e6a794f78f6a7ecc1ccd
SHA512 11bec8b39ac3fbc0a593536e9a5832aca310767c484f25c095348984afa23d30fe6d58e32dc5b67072e284831360265635ac0884ac8d74d55fdb0bbfd01c83ef

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\10741c34abbc74f0b5aef2f99412fd13cf3e4dc4a411790f5eeb7574a45aff12[1].js

MD5 352a70e34612278027670528dde0c679
SHA1 0a03b29f6ca46ee6e20061adcdfee38ec286f7ff
SHA256 1babeae62bc4cf619e6b734be542e6c679bc5598d80a584429bd82577cb96b36
SHA512 8dfb8e1b42161ef2ffea18843aacb59f330c328fa7bdefc92005ffdc4afc636ea16ac945fad9ba572df256055869b1fb05da2c980eefaa2abfbcf1a84962f610

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\d6026744c49b4dedc277a86938e884082f1ebc46284d731e96aaa54c4193c734[1].js

MD5 915b4592704757c58cc9c46e937ef0ae
SHA1 556631375bad749ab2f6f462cb736bbfb2b79334
SHA256 6f3808d8c7a3e7687455f76b4d76e5096b4ad134b406c52baeb3cf23f4b176d7
SHA512 a22b3683fbf743520d97c54191124f57ec624793316faac594a93453e07b3085e67452f5d30c4969cbe88db7c0e05c8d2f250a7df3b08ba7a182efaffe03ae33

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\fba9cbce2a76637820751a09b9a6ddef99eefd84cdba178c0049ab102c55b7ec[1].js

MD5 c46fbc2eff39b6652220bf24d03984e7
SHA1 21125bb6ba1aea799cdf40d9009a88622284926e
SHA256 ff86105e3851ecb55b34004de72f7642c0afca03863ba067d6cb4805378bb86d
SHA512 d1db340fc69d870702975b4e00b9b9f66e4ee22a66e34d387fdbe195eeae8d0513f9ac61cb88b5e791f8e3b8ce2b146dbada7c46296c766e021bfed51f35b5ed

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\656b15e231e6d14a29bfc0944aac1cd94d7ea43f482c694edf9502014b45dbc2[1].js

MD5 173b2aafa8925e42229aee6729f6997d
SHA1 44eaee674019e1c13d439b4b597ad291b5129298
SHA256 3bfed28e8473bdd0511d958e0085b84fc8682061568fbba5d4082896dd2c1243
SHA512 08f0320cf17233431a32957057a8148872693e615e5494ecdfd7dde4980ffb6f55bc811f31a4f00bddeaf688e82bc740c7376640ffd8dc366938d1779acc60dd

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\8f2404ea3cd842c0d1ffd9bebf673b8572a2935243f7e054eef8fcc7a898f48d[1].js

MD5 e5aad9123445f602a6bdaee7c2327b89
SHA1 c874566b486c7a32f8ca02e7089bcbe3dd914cfe
SHA256 279cceab0a330c238f0b36de626fd4a529cba168964e876305af5f8ea7a6e596
SHA512 eeb294edeeb9c13f7e834e4be4b2fa8302d06c3f1ad061ccf49ace00b19969e3ffff915f2ad5f51bcbd283b4735f8a2f89d119f9bf43869344f0de9c8ce0dfd8

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\9c18ca8b815db25e9d4fcc99542b7eacb3db8512f1b31d522b9e5ebae8a82add[1].js

MD5 3f530b35b0360ce3a6da5a3d5d6cff54
SHA1 f4b19fdad8bccbe0fb73633cfa65087758dfbcfc
SHA256 390cbe6b5b9a008d8546b94197c2b13c50801a888f9cb45a9d1d0cd4a84db9e0
SHA512 6f5a499bbc5b0391a8a384bd55e3a41f8a407e37b2cc8fa70109493015de9a83f65a0472d742ce99648ce940c253edf86a7e24cfef864aea975c9c1282f7da8e

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\8b8f62c93ba1f851f40cb89cde8ed4b44cc0f892f0fde805b4243f9fb8b8f6f1[1].js

MD5 30d3b4dec88301f91defef6515c4824c
SHA1 4f016cba55992df18f30c884d2700725b48a9794
SHA256 ed431fa36b3f3a40b44ee1e0a1fa8a81d70c4a0247f9114f24a3270c6b2709ea
SHA512 22d029d0fa4942f93e5d04224842dbbf59dec9fedba146c5f4d4e80b33570fec345ca63a0d1d899981f9dd84251b391ba00d68f9309fc2515e0c8a72118840cf

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\4bd1d2c26b9554957dba7a429527fc5b73ff6949c827448ffe265cb819285202[1].js

MD5 423d8383c4814131dc0c86aec646b1e4
SHA1 2c0da065da81eff03e13c50aad4cd074bfc44a28
SHA256 1d1b5eeb69900e8bcf65e10107aa7b268701b538a28ea0e5fa0e867547fd3ac5
SHA512 f3f81e5e55c21fe9b3fc297981756ea87e07d7dee1f2e47ba975fcb1d19ac83826c8a6e52876a4ebe84f6c91a8cdb56dff81a62107c8b14b29e036bd5a692c27

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\aff2cdd67a84ad537fb2b3e904411bfa9eb52ab295378592e4a0e7d9df8153ad[1].js

MD5 98042c2dbb9848e8bdc55a7b10687c1f
SHA1 af6177d954883d703130824ee0980b3cf1f471ba
SHA256 1cfdd34c29197f9d3ae0d689bd5d2e70624a3de74ecef6324e5f0cab9a4c23e8
SHA512 f529807ebd1d825a32b3a6a4d923f29b5a4c89de502ca63cd12e3366f7a65faa99b9a08609fc213911303f2cb56994c287ca42c96b96d4317f2bf6d1d1534680

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\43c65eb03c2fddfb7aa81e4e92eb4fad0d302d328205a1c6e64d8dca3457a421[1].js

MD5 514b64249c8c8fe899e12944065396a6
SHA1 672119bc8cb6c6b15ce33fcc70037aa9f140853a
SHA256 0d968c025a77988fa4ee1eb0c9ea72ba6badb70a259fa78ef1824f3a423e9a63
SHA512 c4d8aca45fa5b068e16f5563e7385e95ec1e3c59b433216a7274a11a507cb2836207baf561982f2c80bded7bbe319f02e89bde596a5765259b14e2752eb054ad

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\7dfebd67df86704c5a4d0f77b495d2f9e6f03e4a7f12d0a030ad6bf27e5f7c48[1].js

MD5 e03cd35a927ca52cb19b24c78fccf1f7
SHA1 ac9566db883500ed4306adc242c60f5578fee741
SHA256 5d5080e06e6777b84647b79b2a0696b9e4a09a20a3d767298f6b7bdb1b9fb634
SHA512 49e32221cc968a5046a22e1441ede45de95c8ee1a3482e259289357c611f823c12e9be2c20fd4f0440d18a6ce6c9204c2b276c207f9f41fb685d3bc5cca30a84

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\87307cb471eea5b064b8452a331c379b9a1e362af6b681c2c2ad75c24b9167ae[1].js

MD5 f86b552bb779fed2518c7fff9da0982a
SHA1 80f014261f9990b0ce53b2c100bcceb090f2766f
SHA256 d60ab980f4abdbd3782f3f97f9b7c5afbd64a3d1f53a885a99176b6e3c9e0f10
SHA512 62bb481d3066ff966819e502e86fec3cf126852bab5113f75ef1fa12a9a09aa1b56652c4ceaf6aa6a39ea805aa0e3d0131bd08479a1ad08bd6c417d4fac03478

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\373ad86d5296a22687959dba1ae9a7bb8a2109a6715cc1cdf4e708e372433aef[1].js

MD5 85c15779399fcbe82b58781af3491c28
SHA1 a58056ae388fbd62854d98435cea655518635235
SHA256 ac89195e72293d679a05497471bce97748ad6be8bcb13bc868a32a0becfd55b8
SHA512 dcb01514cc107543c34c03ca95c3e7f6700d172b86e04127082f50e6d5af3e2c8749d64c4742e829049b2d20251c7b6a151a3cb513cdfad6d13da0d41ee2e653

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\e54a9e00a8489679ed80d53c4b616356aba3814388fd6b3bf1b35d7b509ac2c0[1].js

MD5 25dd6e017b1dd497aab6f67572cfc68b
SHA1 0bff96ffd8a68e0ea99135badee410305ab9e349
SHA256 3d2e74d18678f11dc11736a37e72b9db040cfe92596b502e1781fb7e694e5766
SHA512 91f9134185656fe10fbd2470608ae4af87e41a023b63104acf8a7dcc396bab19ee5d1b315cd67993084fc0dbe758a9953fcd2d4162764109444d8461127164d9

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\4df6ec52559e1c250d3f2e8286e1ffca9f33998dcddcfaf096a4bcd364bbf808[1].js

MD5 3a53a2d2f76db9ed5dad030d435283ba
SHA1 c96112ca2dba8efe39a49e422896d1e40a640ab3
SHA256 7565a4f96b987c05b0334d6b6d9a3c1724bac76644901932320d79068af5239b
SHA512 06ef51d303b932ec1d93ebb0a9b4016aaf97689b8c3150f783dab3210de068541d06ae889ff7eb79278d7857cf7526ceb27bfb0ea8e4d0c7ff82b3a500765896

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\7eaaa26eeb03239efc17d5dce10f98d8be410b86afcc77ae19e91954c8a6af78[1].js

MD5 f18f053710f4aee31cb8005a87591fb5
SHA1 b4b7269ff6fa6f0fefbf4cf2c6e5171985654a1a
SHA256 a47d5a14d3b104577951a947d1f8dbe1cf6eb4846fb5551f5678cc552da0c121
SHA512 8a891611d25ad8aee84c48997807f39e532f15029556a4c0f0b7a1c55443d127cf3f079713c7fbec1ba2439af206fb90e3da00209e4be96d6dd0a0ab87b05c0c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\24ac609da1a8686a0ba1f721d348c671e8acda89c65304a9e1da442326b30605[1].js

MD5 5b4fb7102cb02dc3e321b6f7a4939773
SHA1 a8fd259822faaa995361de0e048278ec3cd34a44
SHA256 ded8afc8545dbff35fc6260b713c23f092eab86e5a200fb991b1404b41f56985
SHA512 3802f619855db382ea9f817f1ee81a20be511db4ffc3de75d7acdbf19019967bf2ff9b105e33230ae9f72f4cd721413440e49c39353e3e8a367919f1079b8a08

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\0555a77eaf8430e8b950135749c94af8bb20c303bafe3dc5d702d3485a5f7892[1].js

MD5 44b4b50dd9fe48483d36925266e73e31
SHA1 7320fad60343906ce50b484cb3e33069e38caf2c
SHA256 35c8103470ec2a10db6339bf0cc00969f85b6026d0b4c538948c8abf92600825
SHA512 aa4588a53b96dbe38e7e5044d8e18456ebbeb2672ce7726aa5834e97bede0c2ea5390734e8ffa2f8a194d9c8a1addd439c3bfd5dd4860eed53ca2f2fd49ffed0

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\ed33bf8077341820769d5083d1c8c0016287e33781b48cc8a50a8ddbf2acf934[1].js

MD5 f9cae56b4b92c236a729a64b25e876bf
SHA1 cb2e04897a746cdee9207989de63dcce718b6aad
SHA256 48488ae7fc867549cc052a64604673e17997bef4ed95bd39581b8ecd53717010
SHA512 6ab50b5243fa56d0b35df3f4ca5963dcf78893b9c4cf4283c9fe2070827409e93e8ea73fe6fa81598785778d82f0b433be1c94799213143937cb0c12d9b42eb5

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\funcaptcha_api[1].js

MD5 759ab24cf5846f06c5cdb324ee4887ea
SHA1 41969c5b737bc40bbb54817da755e3aa7d02f3c6
SHA256 7037e6c967c38477a5fcd583c74892e16b7a9066cd60287c7035bf0760d05471
SHA512 3470ae07eb7c54feee1e791e63a365cfb0da42f570a66e6c84faf5db6bf8395173c6cb60e8c5cf28eae409f26ea5433c3c5d6ea32eb07e5997c979c6e3ccf4be

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\56ecd925347006f84d2915e545b71eb8b69819691e5b1ffb31957f8d0d805320[1].js

MD5 272e03e597db3228f2fb64c95618cd2a
SHA1 38f74b0e0da8ef1afead82f9949cfec852b78cbc
SHA256 89c6612214382dff4c298d7770739f7fb37c6d02c875560a4f56a06604d623f3
SHA512 cb30ace4dc55af13c843b7dd7cce17a9ca65774e8b75d557730f3b45325a390ae0615dafb1be491fe1193ff9163444c38681f13ca159aa8ce7c00f08b8f60675

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\0acd8ff34f3a5c177d02e9011ee74eb3-GothamSSm-Black[1].woff2

MD5 0acd8ff34f3a5c177d02e9011ee74eb3
SHA1 7985774d3676c27586c71bbf28b1f53598951a05
SHA256 ecc55e4682a2b83956e183e86dc4d475e91bf192ea71faab52a8ed8cde83a3a3
SHA512 bd5402b5214bbe9e499ec5cd9c6933592e1d3599ee80f72fd2ce2076fcd50dbc355cf3d58e923ae2400d09742768bbe9086c7cebc8d2560e741726bb37374ac2

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\3c102ace52ea35b16da4383819acfa38-GothamSSm-Bold[1].woff2

MD5 3c102ace52ea35b16da4383819acfa38
SHA1 91a9953eeaf4ed11a424ea57bd3c2dfaa686c948
SHA256 eb447eecadbf640fa5e062754192cd7c2b60b4d37c621320ca3eb7ab25b0c3ca
SHA512 1fc15585854512f6b5652719b8443c3e421eb88699035f18a6e13de5528b72d858e5bde40b9c2863effb3c9cd570197fc718d0c2a61b334ef5133efabd050a95

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\66d562e3299ee732a53db150038c026e-GothamSSm-Medium[1].woff2

MD5 66d562e3299ee732a53db150038c026e
SHA1 f514a9e346cd443d196c1bc401f078a9fa147323
SHA256 252d971616775193836fe6c0c057edc13c511ed2bdbdb61fbe3c4567a3a8e530
SHA512 ee24be2709cb98ccbde710654eb1ba533e432819caa8c6bf1fedfeceec452fa3c5f3b2402efc06e75d59e55b6e7beaa71f88bd049fad8e17449c0fde217a6468

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\6eafc48312528e2515d622428b6b95cc-GothamSSm-Book[1].woff2

MD5 6eafc48312528e2515d622428b6b95cc
SHA1 8c21c748004366757a93c587668ab55cb6a4bdf0
SHA256 dee6942321440ad24c989d45fd96bf0c0c11e63e04357af2128118eb75eb887b
SHA512 c501160df9b93014d510cd22060704b434fac4c6ba242d3e625e1bb6e838aca31889197e74fd4d082f4333147ec18197b2a31619d55d37c9157ec275621ee64a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\38e00f7de6f417aa3a458560a15e2b8a-GothamSSm-Light[1].woff2

MD5 38e00f7de6f417aa3a458560a15e2b8a
SHA1 b451a3a2ab0b04170804d6cf823c6465f33f6f44
SHA256 cafe3fe334035fb21ebef6484cfbe1efa85c46f02113c57f8047c875fb9928c5
SHA512 659f0a9a53e98b2e5dd3256c55b96e5cff82f6b323edd5f92f8eb9897e1376329454734c6c799963ae392833d948eac84fb9b483a5a099c9ab942990a18e7f91

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\d248f191744fa5ae657a96460a4d3089217f9c775183fd4938059c9bcce33681[1].js

MD5 27c722360068e154af843a0f3128cf45
SHA1 0c160db80f71747beb10ec35489ba36cfec4e24a
SHA256 d6fdb5f496709418ea4083c518d39ebfe65b5e8abbd34401f02341a2fa855444
SHA512 22c4c093986c1283b961075b87a9f993cc2adcf9138adb38be6b6e55e600dd6fc9ec27fef1671edddb8e6122a0a91878e552db752176998e16fb2c8b8d51c583

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\576a516c09e7204c02b374a5b2a5051d0754fba0275ff8b8218ce47d79021983[1].js

MD5 f0f2318b794483c27ef9b27eac8edb23
SHA1 8918465a6e7dcfd8f764c85e170828acbc9f0317
SHA256 696b3ed618242fdbbb3a7120c83e7f1cc5e34b9a1a901823624e0ce6939e9ad3
SHA512 d68f4152c13f15ac4f271a9ae6aa181e30493ffb79a19375882b7e529065865c29703de1408a20cdf54b44b196c91207e4052025c06c870833f9bada3f680fd9

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\368df1c2276804ddb717a94753bd92a45680576513611c95659e96e69e5a656d[1].js

MD5 17354052c85b5e158b7f76cd5cdbf439
SHA1 c14caaaaa28fa3e607150b6c347ec2085a13e78f
SHA256 479512d76a2373c9ea62f842e6281d5f54857d7f38dad4f9ae1b5e045329b59b
SHA512 46e767f9eca5b6f7805a89087e7bdacd904da64d0339ee35096201ce22f1066328de306910553d9660e4412d6b640edfd4cd7ede4e587d3d872d2e70e0e71ec3

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\64e75ab497587ecb8116534d8b56e8724123f879f6a148cf60cd696aec657d1d[1].js

MD5 8b0adf7ed0db3f2f42b0b94c6762b343
SHA1 a73d82bdd7f7011930751bd1960c36267a1be39a
SHA256 3b2fae5ae400f518387fa7f81a500694fa06d45e65b527ea832bdda7334dfade
SHA512 de23607b9f8c3e1a336069977743a47339271eabff6028b101530eaf4728de68f4a8493ee95382cc86c61452b4322e0a6b01c60250b142074bda32fb47426d2b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\4531aa9a46f1823e16f9abb3bc6325c948c9dafe9d9efee4664c1f8ea0d8dcf8[1].js

MD5 08d3680568d91e8837a1b25e5bb77037
SHA1 dcc7cb04ebc805d801da01b9469893511b8152f9
SHA256 80da3c26da21126e5a659096055785d71716e0654df79c7b192ab686efdeedfb
SHA512 b831ed27daef667019e830f4fdb74fe24b9d14ea65cbdaf7356dd18cfde5bd59e82e629a14fae918726e104315b16073784710ffb2f1bb2d33c8965efea0cfe1

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\e37c38380dd60e38049fadac04425553ca7666a0e0d56f5e4f48e108a7f705a6[1].js

MD5 358356cfad8ecc841b9be40ef17d065d
SHA1 4dd5588b9356f13c8678f86880bd7b6ac7d8ba6e
SHA256 afcbeb62932c53cbdc0e7853d5326ae7584d0a33713d2c1567d98ce7dffa9657
SHA512 6f78c0c23acfcb5d21258abebd5e008d29710884a57d2dbcbe0940fc5d59188874d056b1ddf48d50824e3c4c838fc5077f4d9343efb202d01b3c4fdfbf4b2216

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\051b3b21607f13091c1ee009a66c90bff4c06ab275a47b8de3c1e7eba383cbae[1].js

MD5 a83e44b95e0a9b8f66b4a84de041ce0d
SHA1 4ee6139f2bafb36c1122aba9f923ffd9547c1d8e
SHA256 b168ce8fa20c41a171f79c9efc9a5bf13e3b5c0a1681e2c11f17e12337dead26
SHA512 d2617db469045aa41a9b1a0377cda2ee179cc2cd423df5262ce1903cbc79eb0dbbca816eefdddbc5409fefadaa52702d31ce63bae9e3e281d13b74fed7004062

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\9ccf93e65568293a9d6d037257f446e7f26c3a5cc764663620e3cb3162f7e92e[1].js

MD5 aa268fadb94e60b9cf87795f6b6768b2
SHA1 eb7f02a542c95ed5c9f5ca0a8113fa97fc003bf4
SHA256 f815249eeef1adefc4598880b17f3616a409495ac16678098b6a2f47a610827a
SHA512 f907c77c53df5259ca0edaf550b181c82da7ad148876f32b52fa1080da53bbadf2ada8ebf5cfb9d8edbe0f5a9165e2178a65ce87a900e1f95949e5d922e67016

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\bd18305af9e4ce41099df37e554eeb1bf2cc139ffba636e356666ccd9d07481c[1].js

MD5 807ab99224303d842eee39a1fcd8f0bb
SHA1 78bad9cd23961acfbb15f21e1a41a9bc95e47411
SHA256 d7f1c31c5169751f2b69d2b5485ebecc5b7ceeccbfad557f7c06012f01bed220
SHA512 9487ccb6330e6768c5112cdcd38ad3aec3ea3ed76f82697bd012d9bb9b7582022e1fbbda871048eacfd59af23f557663611a38106c5db42c8eb7f78e73f59c9a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\54c13aaea011e94d285d4171277dbaa0a2ec1bf763b408d71f2adc7f72bad919[1].js

MD5 66e230caf3492ad77b339ae981503cb8
SHA1 b00be939ac155028c0cfac6a6f702489f975cbf5
SHA256 f547512caa5bc9f842f0d3a8eea540926d8314e9d245ee0548b3d33add06cce8
SHA512 2b74dea0ff39dfbe41de3972130b824929900b9f0f775d0eb928f7c6487f768aa472f52e348203a804e63965ae5bfd6a45681b360d2d9983a0d69b25df824d30

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\ba8d8575fdb6e0bab85e9715a0084d297ade28957a6e64d73ec56af6c0a648e9[1].js

MD5 e4e178664ba5e01917a1f67fd292960b
SHA1 1b7c2008aa6355abde66d0c1019c2348eb2d7892
SHA256 6dce243341e4d162b94248714a39a36514a399d8ab6da21112954a794d9d020b
SHA512 48494ebfad25d7e061019157df63224f05ee64d976a7fa2a1cf99780592ed68f55ccd8f1f725662a47ed229c43f1349d39fe663cc4d5bc4696937c828d0c8a77

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\bfd2f50c2527f8a6ebbbbf122681bacca468837269df925ecd2b7ee178b918b0[1].js

MD5 c3ffb12e8fe57cfaa8d19493b49bbf53
SHA1 45e1353735204560ab1b50bd5a82ed77731187e3
SHA256 9bd16875f6bb17c6c4788d9ff482068bdff981ebd4e62c1b45a3bd3f60ca0271
SHA512 e0fdd2b259ed046041e665f53dde782ee736ddb2648f2b44f642dae4154b7fd8a19aaa2f97bcbbbc0a34498ff7a908205e714bfb6f627481291327a3e734ebcd

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\64daef195122aa9c881d456010e7b98d698b1c6b1aaba58c81abc27da0db8fed[1].js

MD5 3f285fcc6203f183f74d2dbeb9e0387c
SHA1 6b289d9c1cf6b6a9c36bcd63dbb51567a2d11d31
SHA256 341105b7fece7cb942c10161e0d460f1c70499efa3727f08eabd59cb5d7f4e2a
SHA512 c79c2775f1bc4ea05f00bd547a9644faac56027ad3951ae9642a0610a7a142ba3a06bc3b849e7c7282fc5d0ff9027f608d5046bba4c45d75a5437f6d079b0369

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\56728bee27a8608f7bbd04016bc65d1b97165cdd2db169a8fd975dc92ffbb09b[1].js

MD5 d964211ca3fcbd5eb79d6c60a0cea37a
SHA1 21d7b7385e5487aab5fdb29ef6705612ab3206cd
SHA256 c69a833d65f59fba54ca442f282e3c643115736dbb0ec3692d49ba3cdac5b3b4
SHA512 e36000ad6ceab96499ae37d5e49d30b455b1fce10df6d1b4460847d069d20a1de3ee468ea7b94e544a2b0a9a7278404fabc637803695b5cd3ba9b1d89bbebd8c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\846daf4727935bf2ce0c89ac0f21292485a9e326c1485ad9717a862220944abe[1].js

MD5 4263dfc37a1167214803ed1e8ae56f0a
SHA1 6250c5d7ae6e8d148aca4dd6da58ecc6f4ccd71e
SHA256 f570e18e96e9f0d8f611078db35950e212d9e7ee990d1db0763c9c9a0deba093
SHA512 2e2aa5ca2fb0d3cf7298558deed3e9a1507b926ef96892a4bd75e25c21bd67b0dba545ec229a177d139c6923ae910863a385b7699268e2cf6c090fadcf659704

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\1eba4a5ba48b46f09a1576cdd3e3440341efdcebc7150e44b4e743da95e3e830[1].js

MD5 7ba1001c4fb0c8e948ea394fa9897a26
SHA1 1a1e5684284d0551f22327a4a73eacf62739fb04
SHA256 badf12881b5ca48663e3f2675f88b6a15e6b5ec747a754db1da52f54dfe0f5bc
SHA512 571ef53ea0d4e2894d28044bb5b05424048c518787197b54e5e2387f26ab984ad9dd1fcc0c46ce16dca91bde69fddf4b58eb20026bd05bd01854afca03afe838

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\2d85da4f9d2a484be909587bb1490c109d0e2657b9da180d1f0d2bffce8c8508[1].js

MD5 5ff46d1a324442e7282b1c683c16d67d
SHA1 9a745bf3b6002680ff331ef496075f9cd16efd37
SHA256 03fdbb8c33344c497179315cdb236a5a025863dd3723224404d5efa192168db7
SHA512 910f32958d900551333a9fd23c0942574e00af2da5a26a4bb01890fe781292f4f49d3a62e43e3a892c3798dc1bb0bfccbe66dc096c4ab1ec252fbfdf51671c70

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\d0cf8a226060b1ed63a49d6b529fad512c3ccdbc7fda9ef61e5b582000f9685c[1].js

MD5 3c7fcf81126ea24623eda6672295b67f
SHA1 e80ef3ce0e0c80db2b8d66491a7bf7955ac3c1ea
SHA256 15e67e525a0d7313ec048a0dba08152295287b06c5b43cddad08d8090c0270a0
SHA512 1744d8b5f603da90eb79a20afaac9abed8a4f6deaeaa7f6cb7266b931b8502a123a077e85ba6b5ff6c28c0685bf0b97ef67d7bd327a3607e6e160aa5a9defd91

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\5e740130ceecbb0e1340b712955c239f6395e918d1558fe7982933b895d728e5[1].js

MD5 34bd2c226ff83cb1b5bd1ef563722abf
SHA1 a80e1e6b1f59b6087380e358f9be83d9a89f30f1
SHA256 b0ecd8aade5c8a346f4023ef64f9dd221daf8d48e032effd8b42d152a5b53392
SHA512 6e8fce2feda97246ab55002e8035d89bcf8c1c9e3fff28dc91470c1ae067d68ebbae96d60773e4593d0e17f318166895626286d6961b83e4afd3234b2cca2a82

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\233c88de4cbd81d3122a9e025f944fe6768504556aac154f3cd73252fa051dad[1].js

MD5 2e075fdd8d4c1ec5b52f5d831c860348
SHA1 6dd21a250c9f1e8f96350a27f7bcb70edb62993b
SHA256 2c82a9eef2169016fe3b0dace43fdfe773809537e106ab9fc5fe5187f256f559
SHA512 5ae6002226c9a3aec6345c795ee60c7375e35298f0b8cb81fd65668f8b250d1ed00bcc111c1258b375ad244612861ad4733cb952cf44d4c4f05e6c0dd0fa59b9

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\35f0d01b47b92a779a0eb4c083a91f682d01b13e759d03f4dfe2f87bc608c2c6[1].js

MD5 84d9075a08e19292ab91ccc64eb0aa43
SHA1 20230c41d262ee0dc2d24207b2e3838e13fd8a0f
SHA256 c6bf59cd780aef654e98f6d4c41b07a733452dad88e6e0dff3d7634f1d57bbfe
SHA512 3d2c4d1d72457201acee6cfac93ffc1fec2f89ec9f1251fae458cf215f26c91034f0b9335db2066c98d425060af50a2f5517d1ddbbd926483cd8137bbfddddf3

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\f97eb41a12dc145846afb2e40be96dc9dd4424a5e6e8ca5609e0b1076011675b[1].js

MD5 709884ebcf5362bba67850d281de250e
SHA1 1f567e6882b152aaa8e20fc035ed050567f09a6d
SHA256 d44c6a143a06903e09e0d769a713dcb6e5258cfe13af40380ef45073ffa68834
SHA512 d87af99e113b37be51a0c0c46078549c5b5b278409b03b0bc3c8ce2121996e786f0dc90675d1129198f1f1f6c1d07e353f69138e1423d3d11f3e531bf2aad061

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\b386a6bfc8e0077f1187ab64fa702226-BuilderSans-Thin[1].woff2

MD5 b386a6bfc8e0077f1187ab64fa702226
SHA1 eae686cf06772ed74ae521dd368c20f2e82bbde1
SHA256 8f51808e29888947c7ab221f744a9e285702e62640bb1ee3af565047eff04738
SHA512 88c18ab3cfb580e5fbadde7ad144da995becb75ffc301354e25e6982bd2190021fdd7ccdb6c165395ac2e5ea3ac00805bc26f81bb6cac064b08c2df61a9bdfb1

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\f1cad4800853bba09a023250de102801-BuilderSans-Light[1].woff2

MD5 f1cad4800853bba09a023250de102801
SHA1 76e1a6ae10ac4db2a3e4e8bf6b7edd692c4537f6
SHA256 e73ceb9052ea848498daacd8a9fff37846cce47324b38df12e9dcf0bf25d2e3b
SHA512 4e869ccea434e71f03ab513b3aa6212da3326cb9625c467b782df48367cbf5c69fb8a073d68180877cfde2510dbe74670046b897125b55f013fe595bb7d3595f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\e1f6e032096b2924e561c3928b9dc73d-BuilderSans-Regular[1].woff2

MD5 e1f6e032096b2924e561c3928b9dc73d
SHA1 f33a3bb1b04f04ed1b93b13d21b6b3ce529690ad
SHA256 fa802b853572d8a40ee939940d0cd9562ea8f5954c0522b0777e01fcb546c3c8
SHA512 b13f6e1f984d28c5f4cfc4ae2298b321c314892cab1e5ccd6f1f61ec98d8c1a39669078c88ba541c91648963abc6e16e0a1cdb4e9449b4be16927e9bad8d0f37

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\cc7ad65e0558327d8fbe8ade40ab94e8-BuilderSans-Medium[1].woff2

MD5 cc7ad65e0558327d8fbe8ade40ab94e8
SHA1 6c153e9bf971f196db25cb2cb3b62f77f0a1299a
SHA256 956e1fd407995ff1ecca3bf42ca0d01086edc7eb6a965e1d9d4a48f197a8bd30
SHA512 0af63a7bb1151ef7564472b90ddd766857e3fd78973195817aa751d97093558688733876114ea7341063c7f1bc01f90aba1016980ce2c009a0cc399f40614377

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\60df02cbc9b6a531c2d3cf32025a4dc8-BuilderSans-Bold[1].woff2

MD5 60df02cbc9b6a531c2d3cf32025a4dc8
SHA1 71ce31d6e0f59f98855a01b3eb9a37a86352189f
SHA256 2d73eefd868f115745117f76888a9b0124453918522046796a55c3621ad2c15d
SHA512 cfc2d4bc147bc757054c07a7e347091922d4ff9b7a0f856d0a3c278f5a98fac1a539d05ea5c375868b372f006a530d14558ac7027723f83f3b22087bd12992dd

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\b715a5dd019d1b8771a3031ff85c972b-BuilderSans-ExtraBold[1].woff2

MD5 b715a5dd019d1b8771a3031ff85c972b
SHA1 5768744eb85d3137d094458e4b7842c1c5c526cd
SHA256 e9ca7a8587bb3674824a28a8a80836e3483dc3bbe97c658bf7c984c5b424920a
SHA512 22e09e48a13ced3a3cd95a5f40b5e9ccbbad8abbd0d6af7dd4e411d63c662b09f1ad2453909a6c7a0d0ce34f250f2fbf0d7f076dced281f133ab7f21d2008d1a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\e[2].png

MD5 2a637d3d825673c0e3462fa4ed9a1c5c
SHA1 81668d396da22832d75a986407ff10035e0d5899
SHA256 69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7
SHA512 dc7c40381b3d22919e32c1b700ccb77b1b0aea2690642d01c1ac802561e135c01d5a4d2a0ea18efc0ec3362e8c549814a10a23563f1f56bd62aee0ced7e2bd99

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\fetch[1].css

MD5 71c6e4dcb559033bffb685bfcac9213a
SHA1 25f961c9654c8b6ebdb65fc84b3e218fba9fe9fe
SHA256 77dcc1c86b052027db7eeeec2d6bad3d899360ca512a5c8ff38db272e9cee5c9
SHA512 f7065427eab4f90046446685101518f036d4472bafa41da4d0c80f30e3accb19d90f29c0483ff7b95a8282d1ef68b60457818e4c1457d307208b56d536e9ac68

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\fetch[2].css

MD5 b492f11b43071608d4333c42cc0fc9d7
SHA1 1e9233fcb1ee0b1c0336abf292b5c31d9a486f20
SHA256 2fcb42ab042ee859f7a870cb335cadb85d169623f04d31064fec9aa59985a8ba
SHA512 c3029f260fd54d85970ddc4ef2dd7ff015f6f0ecfbcd0da9774316a034d58f413174b2b04a355d399a22e8427b2258cd5eb45363da464122313d65cf148c47bc

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\59dc4960d692ecd4d1c46d72048095b94515fe07a5ea6d619ac5a475d25dfe21[1].css

MD5 dc3b9ea9dee1bc7f318ae5b071a6e5aa
SHA1 83e0e08390aa0185952e80e93cd1d6e5c566aa7b
SHA256 53634c1fafe542b574c77432db764fd34d903a070f13bc0c625508b32335b1c7
SHA512 bfd498c522ecf185fd24649d02a0531bcca917aa8ea8d7c4523a341510e582667850f815634d654cee807d83eac03228918c12818c6c9936a600d5f6f1d451aa

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\97a9d5a74599e95902f6456aea6e3cfaa9fe463ebbe0ae4a6a5025d40e1b7866[1].css

MD5 320b76a5da05c77df88280764729d852
SHA1 fd7f77a8f528aa07d53cb5fa358639f8f24b4308
SHA256 7a12dae4bc25e091340a07fd249700a458beeba607691debca54b9e237d4cbf9
SHA512 57a8aa764e62253230b653d766f40dd40a47fd0df3bf06b5c813b2cd31b2f3977c28f2dfdf4d546ea9eb2690393b90ad4ec19b8c4c9b11511ef31f48ee2823ed

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\4b5dce375cef78073d2192583d1ecd458f10c308fa99847d649d5ec801bebd61[1].css

MD5 47da8d8e6057368baca4e0766417e741
SHA1 a2ac3944b0f88b08d8f48000554a5707369be01b
SHA256 5166ef53e2db222cd1d3dbd029d22f23308ee443da9a6412cf5966ddcf588737
SHA512 d835059b1b876e9e632e58d19d4794c43dbff9ad44b7e7b5101ca7720f98f04a59542f557695a6fce3be75e5eee8c7c7ee8707862b74a4004a44d58f18179a38

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\2014d436eaa3e9bab47b47576325467b[1].js

MD5 2014d436eaa3e9bab47b47576325467b
SHA1 c340f786b8a607c19a3768580891af87056d8e25
SHA256 5c03728863b3a18f06d149bd279d260cab84bd29ad62984fdcf414acb5ebd801
SHA512 ac3969a99316e4586039fba17359e659c7c22415eec0b62f3255ea2e112122984f23bfd8bbbe1c9acf47ed4e396f0224ced780de7c0acd43517fa4da5e62b592

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\00e1d37a965af4242dc6b296d6c883f0[1].js

MD5 00e1d37a965af4242dc6b296d6c883f0
SHA1 77623cfc910b5328516572602edd445bd502da22
SHA256 2758dc0884cdc630cebba686a41b738a9a90c7914e8f2c3c5d10a6c843f45d89
SHA512 395fcb74489d0b8caa50cc3f8cd032412cb53396a68e17a6f4a469a0976274d464f0e7c714d7200d68d6b87176020276bbb0f1806ca106379123296d79c0109b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\7a81d17cdb0f3f0ab0a2666e920db90f[1].js

MD5 7a81d17cdb0f3f0ab0a2666e920db90f
SHA1 756969c46ae2314531ecef4e4393d17736b0d81b
SHA256 3c446c003ad9c683ceb85811dffb979af4f3d45beb7f626e6bef5da186d26dcb
SHA512 cd921d53f0dc188158ce8b0baf2777e2d3f4e42c48e5104acfa823c2f8779b90122f8d8183327da04a53e4d7a4e762d89fc60664ad35c5b8011469d90e0e67b6

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\metadata[2].json

MD5 6825422edd0827d527ec97809518cf09
SHA1 aa84b69ce5638c5dadb65c5f13442bf583345e64
SHA256 3d89dc262c432b254cd8d981178b62b1fcda6a6922c6f8db9d7e5b1378d3da03
SHA512 8b5d9226d9b1be8898ba02bb11daeb503f529a44080ca9002dd5ccf558dadd9f8eb72318eb6c72b3d571793d9e51db272b73f70432f61f5040489b5357aacf69

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\4e61cb871e67232aa4fbba92893cecbc[1].js

MD5 4e61cb871e67232aa4fbba92893cecbc
SHA1 f0bef38c26f2b54dbf9da946b78e0029c74dde6e
SHA256 38cd94d4117fcc13a306e388c2e61c9909327767cf23e8fa98bbb748751b3e4e
SHA512 71eb65f1b794c0cb7359f1ee88f0be5756acd05ee7542e9ec2fcda06ae16ec0b937c3d9ddedbe4f3ae751693fc89ea06ad0394ad664597dec527b26fe5b13934

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\c784d67e60875436ca5b5c4533abee1f[1].js

MD5 c784d67e60875436ca5b5c4533abee1f
SHA1 321e122d5a56169c140044ecc8ce323236af59f5
SHA256 244aa0dd7511acf423cb1dc823e0186c705c82160f59d54c8566e7413d34d519
SHA512 7d973ed1150e3afeef6f5cbb75bdd2dd1ff305e4a4fe9d621279b39617579f98e0b71a402b6dfa9d781a246d2e62430a646571cab8d964d22dc401a6ce00e0bc

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\2ffcfadeed2e20b3e6395cc3dabefb7bbb60cf00a17ca915c1b3828eea5a9c7c[1].js

MD5 7f34a9b58680bfd34e9c4b7055a1e185
SHA1 bd0b32f4fee20f62d5d8c283661511bfc029ed61
SHA256 38c153f764f2ca808b7df729195c5722251160b35894535f688b1944448e6a7c
SHA512 dea2cdef68ba49d76d29ae67c0bdc3c5ed81bff2e841b6e9598b0d6fad14a92f93180c7217b2615d814e1960912d28aae7d6f998fc4bcd9444a35d1976de07eb

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\metadata[2].json

MD5 00b158ef812c95c06bc818d8d2edefd2
SHA1 3962fc95cc6d4699e2f1a9120f84964c107d66d6
SHA256 03808a70dd05919e74306df1d4b1576f5b295d3d209b8c0ea3b9594d38359be6
SHA512 70d6e40ed532bef6d2cecf440984c9f7d206de4667271286b2bc0a517967d2edcecfadecb19a5f8e4096548339d368b32cdbfbe5db4949b7b61187bc31b21c81

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\387db712abb03fb024d26c84722a64c5b07b2514a05b78fabef0385811c7a9c2[1].js

MD5 2f2b030cc014c3f92143f456d161a6c7
SHA1 c5aa87b02bea4a2ec6ee04cca5b0ab93d5caf908
SHA256 9ad9efd4332d90b66a2dbedd1647320fe2e762005871df37e7ad5e2004eca4b9
SHA512 55dcd0ede35189f0c003654fa07cc9bff4fb92d903434dcdf78ee11986cf3b8a536ee0ae71d077b5fbcb17cf1e65fc47ca781a6e61a687a646ffb891f581d324

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\158746f8e5ce3646e2146038efd86a4a6d54b93c32cf3382907a0fc9ac2b69ec[1].js

MD5 b4dcc2e0ea44b52c242a572809518557
SHA1 d1523e5f7a300d0c831eac6f941beae97861c951
SHA256 5881963c71a7a95925e27f2f37a3ee248b907b2d5128f6f4f86e8522aed4bb2e
SHA512 e0aa04c37f493748b998a561d837b410a9308a9602c087b0c7851a29abff142192ef172511df353039ab78b0dbad14fbb5650395ebd72a29fa89f27fa4d7fe04

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\b0fbd6bc5e01a6149d6ad9c8333646430db4f8a31d66566d4204d6848b65511f[1].js

MD5 2ce6f3578c0e96e9854c38afc94d345d
SHA1 bc5c3376977f89288f643c9dfc488154808c439d
SHA256 d5afdbd2cdb7d6bf6c67145864345c9ae25d2f8df7e2d2181c2a1bc95fae7a3a
SHA512 8d827a71be4014780cdfbbbe74e510ccd5ec57fdd1ca0ca4dd4db52533463c85393388b4547781411a0a727c45745d5c2b497a4a89341c0f0109ff19121984b4

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\db9fc460739ad55f353cf4210955bd6cca6df76bfcc762b8320bbf9244c1db63[1].js

MD5 16fcf299e4a4c474ae799f364aa9227f
SHA1 9de010c5cc31d7d7b3b252b0dcfe40b5af9c2fd6
SHA256 42279ae6747bd3829fb4f5006c40b26a682af9ea082f22f5b712af2e9164c973
SHA512 96a6082d17fe4238d025070c56b57a084c5cc5be53982a3cefa09823d9b444b1f6959a3f0a16351f6d2783104ef153086baf30b5882f0d285d1c6e91812bdebf

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\b82696a81c4eb2c4993918bfb0efd0f3605440f861ff017af159c5e0cd3cb64e[1].js

MD5 9c40ba726d8eaf17304827506c62f61c
SHA1 1c2bafcaa3c46982afe546aa958d66767904bc06
SHA256 de4792d6b973b2749f241fe3bd9558f6a8fccf193918e17cdc00500b262bbe09
SHA512 0f4fa1f58dc872b4b1e8a856a3fb70b0a74966596888d2c0079bd6ee9e3f6186625d3bcb95cf900b8b508bb0b42db05a60851f04c7da9bd783b860006336f866

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\5f2ee2913bf919a8576bbe4120a6d41b933e814a4779a0a3fc1d9d941c5ee368[1].js

MD5 dbb15e1ec7f86f32514cb1afa06b72c9
SHA1 c1dc3a5586afb3ad13c720f4d0d1f859a30c29df
SHA256 b6f43b4ac263dc88582dd0b651d5b2cc5590590fce8c78da3fa9b14df4429eec
SHA512 9b458fd8ad7d3257e01a02892e91a650308cc60f6bff3211caef70432bf6db1eb1881f2974d8b3badfd0f9136c3b286ce2aa670e107e57ffecf599187d6f64b8

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\0056022aadda7fc97ab043ed4f014c54aa31c5b13aa2d33840a736db2bc286b4[1].js

MD5 c362b1af77147e9a5c49e4c168f8900a
SHA1 561c07562304d19449a63bc954ff0a4a2319bd61
SHA256 8b11d3e859f203b74e3ca3acae449befca38c06f9cca65e062e926f55918a3e6
SHA512 daaa57ddcc10d68f35519384b69e2041a992bfc97498262413b87799e134bef214cd0bec9982fc758b4e11851a812cc97f64eba1c79b7b6f462a91721bfb2d7b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\V39MI41D\ff63951d6cdfccfb4876af91fafe5ac9c2d92daaa5b3b22cec9ece02f9df98db[1].js

MD5 02c9827399983eed927448a27a268228
SHA1 1d3932360aadee20ca282dfdb712aa6b0ffbe72f
SHA256 09cea0d126e57d944d51fc083c79f2c1ca010d66380efed0f27b748940f958a1
SHA512 a5012c49bd5de3e52da0f49a05a12e3516c5185a95c2f493c00663814a22ed13e9feabc1a742af1fd0e4fe35a47106cc43ce676bc03d34ecd8af5fe85b3ce3f1

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OF24NV3Q\53445e78987ee3a8fb94a4b839a6ca35b1b56b87ad307990a598b7b3a1655ce7[1].js

MD5 1d601c3aa17ae1c12586da29518b9943
SHA1 bbd028a8d38f74a09bef9bc2b9f2390fab17db91
SHA256 330eb4f1c345c268f158ad5510723d800e72ad883cccba6458e0135eb9508921
SHA512 6b30c28f7e9c186e86ed594dbe7cc8675ec05010c10cf2d2d4eebbc013151d52cafd310f5c70b3f4f76f633c74fb8b1026423d3e70baca419fa3ee34fcb9ed5f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\WOO5ZXAO\cdd640cb5681f766f9525d90f066317f[1].js

MD5 cdd640cb5681f766f9525d90f066317f
SHA1 259ee7bfd753457db783eca082f9ad4850739c6c
SHA256 d1f0b2f3174f8d5f62b9608b4e1336bd11a76fbb92bb6f79f73ef6853dd8c9d2
SHA512 6c06d955c33212eb4da0ef5c553b26de0152147db4083543b745e68620678a025b6488a1fcf5872d6df91669e5d8cccb2d9511e4e13fc7683d027959e12bdf78

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\9Q71W1QS\content[2].json

MD5 a2005a3f64057897b2ed1eda07b39554
SHA1 528e87ee3bc81e5d1267d39c4afde9ff84c4462c
SHA256 a65ffcde5eca4f78f45d92e0475916d96f077a5703c9faf023b9cc4912b926ca
SHA512 10846ba9525eea8043a8d384aa48805eb4ba8cd8c3aa3d1d752f8759fca1cdd305745349e5ee2724e93edaf56a3936e5a4b21b89447ff1cfbc33b7379f1a9c2e

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\595PRM5I\suggestions[1].en-US

MD5 5a34cb996293fde2cb7a4ac89587393a
SHA1 3c96c993500690d1a77873cd62bc639b3a10653f
SHA256 c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
SHA512 e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\datareporting\glean\pending_pings\700c71c7-d346-4abc-ba32-6a825bebf24f

MD5 75b71793b8861b59378f71fc402b3079
SHA1 f3b4301510f126776e482ec22243df0c5744f584
SHA256 fda138f42f6ab4f5e334fdf1b5b3d1316afa70c1438d0ff76815f33b4f0f8acf
SHA512 621a603ba7b561ce56886be81bfd85b5a47ca6d03a09c07bc21a6b5a24eee857e6fc8887f6bc704ece7746cd2745f4097b67ecacdc984b9e9e5de0372f02626d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\datareporting\glean\pending_pings\996942c4-11e1-45be-8e31-0f17da348f97

MD5 f5f9b98c7e1452486ca75a162eead3aa
SHA1 1bdca63bb926d2c0139b68038ea96b55338e49c6
SHA256 3395fa8311a0278472c49ee03b17ae255b5cca29b50c5dfe1ad08d34c9f882da
SHA512 ca14c48c865e88a0971ea7722f56bed66e81db013b27e9d17481af57429ac51417169b2f9a81373be2ec6e283a4fea5167d8f71f7047937d852ca2b197cd5878

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\datareporting\glean\db\data.safe.bin

MD5 097551954cec8683f56ddb7d7e0ed816
SHA1 ee8878e4aefb80142caa479e49c9de07548eda72
SHA256 6bbd396de92386c391c4976df4876d0e3a580cf4a9cc4e35b25b8f040e2bdea0
SHA512 62f54bc239511183ea31b4197b80d7dbdcba11733392804cbd1939339f9fa431b45e7f1c5e0cd04d9887607bea3c1697a712d8328d9ed6bc027b968f0ed79a27

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\~DF04BB4AEFF6770C64.TMP

MD5 9df429d1c71e3753bb1eef0ff6868170
SHA1 53d1047be87bebf25ec004a4399060761f699d6f
SHA256 f4fe12caea84add7e896c180c0f83eb37e1c9a76a4c1697d28aaa0766a84e820
SHA512 e3cf7619f40d817a842d1d3d3ba0f5ecdb663f06411cd015b5d09d1b000e04ace2c2810a28ae51f52ae66d96b7fa29c658bd4e1c01c9de07ce16908f0edfeeae

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 7f868e557b098795d645df9ea302427f
SHA1 001f3306144559b4049a8ab139b4139f51e59c0e
SHA256 b228e23ecfb7965e3badefcbb031de0b4bb887634bccb34a826ac8ac89124ac5
SHA512 56fd8aa514cc25db5a2c9191d665eaffe90182cc5e4f15317e0cfbc9adf7336d9ad937d20384b0504f784e5939b76b4c4b0020cb06e4a472c650355cc6c4c89a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\prefs-1.js

MD5 cf959e7498898d3e03ad8ad72da2f59e
SHA1 dad3edb2670ac7186d50fc00000fe2ca8abe102b
SHA256 db06be7c48afcfb40e76ceaf32ccb9706b8823dbba78d9d7a09f1fb6f4806d05
SHA512 a3ce8df996fd4bd394f50a72ac0df550caf8e11d7ebb5ba369f30233eea92772b0a86fbe255889cea5ab898c4ce038b7ed009a8f3c6a06595e9e0b40f8c407a8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 9eeafa06f5229c9485d06dc433b50b1b
SHA1 e9d0b2abe99fb9ac5368a0c62e9f9bb8ddb73dc9
SHA256 2b2b9b7a5dcbe3659ac96cd21860db806f11c1b422cdec3aa69f0925babd1a5b
SHA512 acdcf9b2edb257531bf1057b118a36df8536eb81c0610034e36fa37dabec66159f21459130701ef012b0797dd270b03a57fb3c8b49b720f4ab444e79049a94fc

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 3f1af39b6879a02a2615cb119f036e1c
SHA1 19ce3ac837f8a5696226ecb251a53c23a184e88d
SHA256 d22c8d46123ee31d54b075a8f5d8b8c0f7bd05e4b8904d49c1a60d89fca908d3
SHA512 0a2a20bb877f8561167c88fada975adf8be2d838b270ee4dce9fe31926a40a7e47f770310c80f71519c20fa08ef4fa2a3715b83d272ab1bc432f9fbd95ac6999

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\11941

MD5 e21d654eb1c84e5a4494d34743cd24a3
SHA1 183b796baba4323c747fc05cfa5377e5f7e8b257
SHA256 f9fe284c9192e003a6c8ea57e81675ded928f3936124758906e8cfaaf8ffd8f9
SHA512 e1f1acd7c34e168202a33a0fa700918c4dae663709a720df91fba8f86100391dc0e57e7684c308d6db20daca5df7e1a6c450fa6961f54a0333fe02a0790f524a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\10381

MD5 5761dcc8ce2a6905cbf69418373f9595
SHA1 5cabf45b78b92035f57c6e9cacbbf8b673aa56e7
SHA256 e2d7e2012e69c99cd33d69a1d57f90c29293f3346abdf49a6242d5eefc678154
SHA512 4f3e1fa397af8423f8df0327f78ca7c2fc1b5c55f83fa9e139e07b76a589336b70508adf9fd1cd81d9a8f028c6891d02535b6ac50c9684f8662c0762863484d1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\16127

MD5 c1833ecbf43ff4a70abc1697502bbe10
SHA1 65caba2ec0559bdaeddba963c135869e15f0744a
SHA256 8fd7545a3ff3eb6f220d1495cf9cd699a2569b942b3303e008e0342b45775545
SHA512 c3bbaf19e695f91950e01fd08f20dbd24bab9e9f3e78efc7043ff56be59dadd2092804446b9e57d7e110084855d6c22be465f1c0740ef4dfa1ecbe20b9eaaccd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\18046

MD5 6aa97b65409a55ab2ea43c8f31d26f24
SHA1 cbb8c86d21f80169f54fa4d86cf1a7f7c33239b7
SHA256 0b546aed7acb80faacc778d7271376b09b9c70223404a117063addcac942a88d
SHA512 f5bfa14d45dba61bd571c819c71167649125d04bff06dc41b7c3ffc95798ec7fabb9ce96dc643e9c7cefa917d142c11b5b47964f8427cfef197ae00d5da206c1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.roblox.com\idb\3140325527hBbDa.sqlite

MD5 21eadca3770204e22f3289dd6c62d8ad
SHA1 d0480573f112a7809bbdd196fdfae8ecd6a4ea9b
SHA256 eb4872599b00907db18fba90758dc3389565012e77d3e3aaf458970bc5e1027d
SHA512 7b738cffbd176ce5ada1f3aa895a5507d96702b726a381122f6c3eb627a7c2d9b48953ec4f9efaccd9dc4cd85c6e267a3cbaaf694c1e85d62339fa393f9bf495

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\25980

MD5 c02fe32c7826a4853bbb9f0c88e3d382
SHA1 25c0ce040a63143881f9ad529671f977a8c11be4
SHA256 558c6ff7aeeedd79f4d064bbd11c839429e4d86482e6989fe9d28487fd2952b1
SHA512 152cbd263f5fae623c61054ad2bb9f80aa369b90465fae2ecd37285a86eb27f829c88c8efb9e28a81e37540707887b56a66c811d2a86d38aff2b3332b7bf85ae

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f3a9294eedcd9baf9eedb23e708837d4
SHA1 ceb773b3cd5ae7237cfb36b1b2da3bd61b65e44b
SHA256 0f9f26279ac61a2a8f0ed4386eecca10da6504cc93275c67a7f95367c3975579
SHA512 647c4ae9c5ced3cf6670cb48c16a12401b0d7c6cabaa7c03745e5bb689fa6d98fcc4d28f057dc0ff2ebc01b732a810f2dadc987e3c4a8b32d6ddb32c28e653f8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\22596

MD5 cc10d8198d9792c7b45c4ca54e71c954
SHA1 05888b88da103b3fd7cb36c34b8a422c35b88573
SHA256 ddab835833fb5b840a6efc2ac8619b3bdea57edfaadd671d6986432530859091
SHA512 937f161a7c87892384b2ff9496ee1d2ae83a81bdcfe40626c24244fb5f3ea020adde9ecde703d5ab13b36ce41d7c4bfef823ed9e58f38b60eea61e104b0716fb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 77b3e37ba72acfbf065887d1f44523ac
SHA1 793b0f0ce2eb2024410bbbdc5970eb9882437a4f
SHA256 bad709575b5580f02e31b24dc23a8871bbee449b405eaeea4f5c01eb5dd1f195
SHA512 0a657750988ed594365041306a509e6adc061257ee178a44146781f07fb0151616038dd09b686b939fa87d075358e4b5e15e9fbbf24f1e7458e94fb760a4c96d

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 85430baed3398695717b0263807cf97c
SHA1 fffbee923cea216f50fce5d54219a188a5100f41
SHA256 a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA512 06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

MD5 fe3355639648c417e8307c6d051e3e37
SHA1 f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512 8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

MD5 3d33cdc0b3d281e67dd52e14435dd04f
SHA1 4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512 a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\prefs-1.js

MD5 936d23de4443cc192ba6860b15ed341f
SHA1 b9fc3cf70e28d0cda981bc6c092895747e6b034b
SHA256 03adcf6d797cdd8f5989e81744015769a737b1f37ecf42ded9ff943e78d91924
SHA512 1584f2422c6d7794e5f5dba16035766cb2a3650838b5e846a8a79d607951653c9c9b918d836046e473b14d0ddf88b1c1948912f170dc58c47bfb2e6748bf808a

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 a01c5ecd6108350ae23d2cddf0e77c17
SHA1 c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256 345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512 b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

MD5 49ddb419d96dceb9069018535fb2e2fc
SHA1 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

MD5 8be33af717bb1b67fbd61c3f4b807e9e
SHA1 7cf17656d174d951957ff36810e874a134dd49e0
SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA512 6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

MD5 33bf7b0439480effb9fb212efce87b13
SHA1 cee50f2745edc6dc291887b6075ca64d716f495a
SHA256 8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512 d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

MD5 688bed3676d2104e7f17ae1cd2c59404
SHA1 952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

MD5 937326fead5fd401f6cca9118bd9ade9
SHA1 4526a57d4ae14ed29b37632c72aef3c408189d91
SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512 b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 c88ba0620ffaf5efe7da15829b430289
SHA1 6036edc20f8759cf1c697d71d74c223678056248
SHA256 4aaa33d8d6e6401a514c65eded645d0de6c7cbbf8466953bb9d3c268fca2bf8c
SHA512 aa38853b32254f5fe3e16b40ed84f04c5cf3bf111f4d45e05e11f75b70d851357e807cd79e04b17e23230ebcf0f3382e666fbd431d7d3573e712f064c75c9599

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 f741859f465358e19b6561ea5e68ccd5
SHA1 3d9aa5739768c80cfe77107b8c5d85502cd25350
SHA256 7a01e809efd4f84fd6ba2883a4db300e6ae939d4462544795001aed0e5c7d73e
SHA512 dbc13e73d7d0fe1628df6ac1b98d7f47bd4f180ad8324617d70506c2bf3f1c7a6fbbf1e0eddbc29a044cd0580384c903c1edf22dfad7b015ae16c8d34f696f60

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\14796

MD5 cb9697cec05dbe7026982ba14d1deb06
SHA1 8de5fae0fa5ef380424516706f6599eb770294fc
SHA256 5c78227e42b98a608d1e25e67417ec75cad77e3a03f13bb6d9d0613a15733562
SHA512 bc3cc34715498cc4bf40d4ac5b9663ce3358b3e75d7da7a21d37edf30c863322f61283c81d69db72d8cbaacd1df3ce44af36f873bf896d2f5438c6b59da39415

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\3328

MD5 3ff036649061a5eaee87f2b96737bd18
SHA1 75aef8daed5d0e51ad0b7db6f6166b9bc04f29a6
SHA256 8c71ae21d1086527a4c1f0750000f5bab48bf7c7ec2c159e48cd99528eddcaa2
SHA512 b829128bf71eed147165a157aa9ac3e24d8361a9e4663bfa43561e0ac55b8f98d1a3d03c51e3ca6b495c32ac3ba0d41c80001c93b41217c8df6c5608962539e3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 b6e3abeec337c3e505b26b9b1a15a900
SHA1 839a5699ee23e3da2d7c17e1f73282f968167041
SHA256 1898bbc51e7688138385629fc869c00df0be4aaf8d424742d2eb7eaffb5fc9ba
SHA512 b4c3fe9700003e95650e01aede6952d4db1fe3da8893b5124b546deda03cfa16009c4fb6b7926304c310ed49c302ebcd54e8b53140f070d91fa39c724e5b4ce2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\26874

MD5 6827515acc13d08a280bb60e9a11fd81
SHA1 aebdc753407045907ec0020e6876f4991ac3f5ba
SHA256 b8ed16ef39323391e0a175823b5c3abf143371e71fd0f90a5e5dee44b7015392
SHA512 a1194e441ccdd2d31b168bdbf7ed435353bff131070f9756b6e9ad59db609b1f48226cd04d74855c742ad8bf3839ec3547347b62985d8b41ed6963de1f518d82

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\61F3854E9AA2FF3B5C85A0CC98A77ECF08130E37

MD5 3321f2f06e6973e4ad3e498acf613880
SHA1 830f064d2a2a8a8ab378a7de7c87d278ca2ed160
SHA256 105b5bee8ac63966424c69b791523bfcdd7d04c19aacff5fdd1938bc94131783
SHA512 0d83d3ab864697ab793c7dbfc171c4698b8b9461aee4c38981e70dba8aada4b69e486a6dcb92fbd0d2e8a70d2a38d610c33c43ec577a4fbaba03a207c3c05785

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\88AB45CE0BCF50C78BCF1A4655CAF3A51EE42F15

MD5 7799eda9b56ca9dd96a00b95cec63830
SHA1 6f0931cd6b6cbbb8b2fe81b10afbd23d3b31caad
SHA256 8f847cdb66f33798cd2bf3ee3a7889674f11057414e5b7c77dd005db0138e990
SHA512 8c3cf0a944cc0601a5e90a5f3d91218e2f2cff0c299b88dfb43e24f53a3810c93e8c6f152cef87caabe4ceec974cbad9fe3b26276405b7ccd383009ae494ef95

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\51C83BEF6C78F76D246DB82AE9F8010CD5502E37

MD5 d8062f2665f6f9e3b0dabd14675af37b
SHA1 3edbb547c9c0cd1f9b3c966d3ac466f43a3d8172
SHA256 f6d7c5d1babccf51826807ff5ed839e324ee388a03027004a49c013187eda607
SHA512 537e1e6d5e017fe516b2e7ff6df2e7c06914c1a76515d45a907a98639b5640e34a81fdb37f11a04db0284a0f0cf22a2fa0294761ed2c172fdc616fd16e7876f0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 31a9060650cf673e82d0b129dccaf8a5
SHA1 652ae48e8e7d74d0dcac5c4a75c4e8053b655ef7
SHA256 6e15f830b22acc578cefeef992340741f5e8b6b9741f240524b3dae1b6bea7f1
SHA512 8e6e4089aea22c12a9520b9f25f3caefec0f6eb54b182bb4905c9fa19ff4f62bc25e9d370a8701d1307668ecee1d3133d18756a10abc53a2de4ecac74746ad8e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 a5ff71f2b934f95695e2a159add8e034
SHA1 77b7f5b5320aff3ccc0b77399b3384649591d599
SHA256 de99dfab145caea0ca2a30fe1f00a0f23a01fb8a40099a56cb284a6de3362524
SHA512 556c5a7e8d554a03ffe6089834ac7287d1344ec0e485df8c3c8b007e0bbf708d6da1626fd9af3f114c212d5926c26296d7777c7c6bf010caffee188876648a81

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f84a8cb2065a1a861a3161a45493f855
SHA1 f3e0ac1193ef8904668ff8210304589dcf7ff546
SHA256 040e3eabd3437eb1d8aea47a5d17f079373246740aeebb867dff35d4fbdc8e0b
SHA512 5c707cbbb77b60819a850b4d776405a75aa70ef06bcd00a65a8f822e96ee1196fd201f534f235ac574348326ebac100c4a47cc266d1947ef0383a563c1a50271

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\14685

MD5 58c191e629cac79bef09e79c1dcaa898
SHA1 b20bcf50c3e343f6845a6867eba91173f23e566f
SHA256 d96a8699934774aaa4f7de058c28bebe54b270bb6631eee076adc9d4758ff7c8
SHA512 39f2830d183dda3485c80eb91fcd1fe16d4ef25b699319369077e89e1e805acacd5962d555c012af214bf442e5700bde25026efd3161fa7331f4e93d16cccc84

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 42a6e2dba25c1ccce3362b53a8ba8fd4
SHA1 a5515986b584f6310f6afdb0d8f45969806a48ab
SHA256 5f2050998ce7bd7a4cde784d9ad59cea75c28ce4d278d43f310e09033738a608
SHA512 7c2309982a22def3517662aadfe12da9dad71feda84a6a77e163283a8c3899592f1108744ecd179864902761764ed97ab1e7ad3552b7527164d4114656b7248e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\17791

MD5 638dd8606d1dc2d740ba6a65667725be
SHA1 19e05ff4568e5c30077fb5d198c27cf085aafda7
SHA256 2c4eb4831300b501b4b702959db6e526f7f6e5c83db82a167fc43f2f3d3e6b43
SHA512 b8a6f497bdb64cd966d4218ff8e5cb1f5ac8b9527f66a980163b40852bb09a081b2b61ceca8d10a6725bed793498da6afa400c50de49f2ca1d018ec33c51a2e9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\29700

MD5 079829a319e649c827e59b5e85436115
SHA1 067a67e2cb8a47323927a03be077f6b1f98b7e4d
SHA256 ef85aa88e1b81dfa1607746b36e1ca9a034c52ce239f57792580783744a1ea9b
SHA512 12002783025848480823d6b666ddc6173b686f18e4d336764bf8dabad44446edc9729f2338fe10feca679d5c7a74669a1a0e43fe055be5e3506948faff46a05a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\11224

MD5 c0d45b0fde8061ca9b02f741585f6057
SHA1 31244746390419af2be3ae0bccb06ce16f059b55
SHA256 49f66992d75df483906f8cb8f1edda9cb3208d94028bb69fd92d62e8c597f2e1
SHA512 4520cf3f674c49c623d4babb931d6197e8a57e339cf24b04e6470df355d5b7472259c177cd84dee8cc7a9f629beb410bcfc13a29611378210508b150bdf84944

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\29812

MD5 5de02a2a06e402a1a5bf6baae994cf4e
SHA1 b43fe7fb63754e4755c054dc87f51c40848375a9
SHA256 5564e9b1dc324b609ef19d646bef122ff218a3235aa62ca555f889c653670ca6
SHA512 061066fe2df7f48c4f043485b5a1ac3ca4070a9833b71fbf24816a5e24cc6aa26567c6ab1127c2a61f0f2e79ef6bb223971896dd6fb16cdf361a0c3caff7501f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\18792

MD5 15ffc8e2224be0eabc37e90914203f57
SHA1 b603d7bc091f6acf913fdb5ff6a432d99ed329fb
SHA256 2563e8ea54040238bf70333bafc4dd115bb3e802d6cc220b66dee1f0c1049907
SHA512 f3ee0634e6f0c9a581a4330602f8d17334c7cfdc1b6b5c6b9b1363ac5cee18d8c178c85aa93187b889451ebe4b9eb5c9309794d7426f38bfd6f26c2e70909379

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\3037

MD5 47909a5de50789a7f653f39430848efd
SHA1 54d43cc943c039502470c3d67fc5487eca81ae70
SHA256 6cf256777ae5a480851adefcd954ddf45c7d40900bebc9c274d8ce9174e3ba61
SHA512 ed97135bffe21582c3b80457078c0062d02331563d26b8c7c8bbeb207d6a33cdb50ed154f5881809e93bb80e9ff020803217340767ad657cce61192ee052d94a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\E049536DEABDF445A5A39B7D6289FDA9A6F2C5AF

MD5 f240d2f01c57da1aac60b0f975213469
SHA1 4abd2086579db92df065510c08a340976ea87f17
SHA256 be0b9c49a0ef36d5df628cfea4cb0a085b322ae5fe35a32edbd1277370acac20
SHA512 516d7b5bff743ae5b52fb3c16d3f03ba4c34f1460ac0e67926d42adeac16b0086a18944f5934adad225367818bd7ab142b2e1b9f0110b039a12e3a3454affaff

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\11993EA3BF3D355927605B079BF182BDF694A9FC

MD5 70db503868981e6638e25b1531cf37ad
SHA1 6bffe2a9df4a7e21f79d7305307560ea40e607ad
SHA256 7769862feafcc2ff34b1675cb7fada1d8e9efc356b49e1befcae7d175619d137
SHA512 91036d023319abc554f7098236518b41ddeeeb2ecc6984bc2fc23c653a91b67f08bf6fa60d877b03c26e517dab134e8ea74d5666a51c270f7378ffabeeefc403

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\BFDCA89ACF6F498F88512BBBCD18735CBC9EB485

MD5 70a96838ca163a44a749de8e0ce8c596
SHA1 2608a173a845ad4c05d7c322c50d3396c7f70e6f
SHA256 73e51bba3ee1c0ac3b9e2fa90106e1f78c4d62e2b139fb5278bbade354f02b01
SHA512 7e307e8c5e24157fa326a35964a7339ca74ff08c2322af7ff85a8113da527b7f155c495de0c27242652e00228336d69037365e4ef2bdfb1bed27168a88a363bd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\C20E036239CAF315DF30D2CDAAC4F746820BB89D

MD5 1752aefee097c58b7bf8d77626cb0f16
SHA1 ee106f0789bf34b7b1e691038a905dcea127d9ac
SHA256 6b3cf6f49fa26439a7c4d73341d0908dd77b85eb89ddda198ecf28c9f59f69d7
SHA512 d4783a9b572d9654a8fb518aaca77fca0d97bcf0038d53e00b82287e448ba87df52f1515b238dad3a992331868ece3dd1b6be780265fb66723919fbb87210ba8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\0D0C8B41B123A60A76177A339C5D673D74E526C6

MD5 bf93a6d2dca89d47ef2648a0b25e6c5c
SHA1 ff623ad00800e9424de86812530450fa42278e98
SHA256 a28fb2b9aa08bffd99cbcc0ef481f0356abbaa7fcbefdc3cd5cc700b77c67dc6
SHA512 9ff5448234a692c0f752584afb498e0479c1a86d792b883f0599edbec09e9080dbf65f74f645340f751982bcdbdb6bb8531b1be0950bd5b7fe76122757fc982f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\1692

MD5 6e04ecab878f4bf0527071ab7e023c94
SHA1 63c9bf357894e71ed9c84abb1173d2ba5e18b744
SHA256 6699949e60843019e43c09f731e040e23958783e31b0bd03f37da3e3960db493
SHA512 845a41a3da4e2b62c397840758bc9c5107f5f746c627197d3dfc5989d5d5905a309010bfa512ba65da8cedac7eff87341936f5f0cb47381f57550f47bb76b225

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\21409

MD5 a9fa51e25d886e40021351d8eb1f6431
SHA1 f78a35e3374bdf0b98f86296532cd455f54bd0c7
SHA256 220a256d6106f2a9e27ebe05ece1832607837ba1e5225f5faefcf6e9280f3d3a
SHA512 cf4abf3a69e3afa3e948491811f06195c5182929682e5835559e6750e7e78d92be350820eebea41f4e3dc8d0241f2620af4a457dd87ea51c89df3310ea1ac5c7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\10378

MD5 c9941a38ce6e2dd3cde50915b5bb13db
SHA1 5a4a2e95a3e14f79f6f3c847d7faebfa2457824c
SHA256 63c73cdb5442763d03aedf9273fc9877159734147fb4ff9e467c6809c7a9a360
SHA512 d70610e6c054e1ca85ce5772dd227ee23c3e3b2449a5289e4cadf149aaba8ec42802a5b04dd55e622d49bb9b159df96b4c0e69ec7975830c965014551500ad7c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\17193

MD5 5d10464bdd5e1020c1cd32f1597153bf
SHA1 4e26fde1a42910eb2e53a46d286c025a0b019771
SHA256 c547ceea1bd7c3f44ab696f68e09036e977e7b9a4376b95f40fe708b3583e360
SHA512 bd6e9a0eaf2b5924d15810573bba4ade791d8b9e7e6b86fc55bad3521136ab08462257fe124d17dc17a1258195bdebb063742f7e7a03b1b7cf2cd7e01ff53004

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\3847

MD5 8bbea69d9274e81af88d0d1ed8d4803b
SHA1 95f3704b9256da5b5e4015df8a85cf81106de580
SHA256 09abaea8dc6927f74ce46b76a95e4c114e695cc49a79cf42fe25b85485ea59e4
SHA512 2bdba368605b0bd5717d7e89fc62b9875ebd6bc232c3d275392d6e04e5961281d11791b6b0a3f07f1b11c0f3a2bb91b60c142b2fc52354be84b56b435405a845

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\30084

MD5 0ace98b4f0fc3a5ee624abb04e8ae0b7
SHA1 78e60201db9824e3cc67cb2bb65fc6030856312d
SHA256 69b16a1ee3a28b0be33503a2a1aee4dbaae641a8ad1aa3819fb21b66bc2f781b
SHA512 8d62d5366159eaaff993017fc7f55fe171a32de3a2b49fbc60ace429e1c5f8d5dd5df5ee93774d5c11b7de77505a8552b2e3becab5f2c1ec45a1530b9c70b6f4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\24054

MD5 24bd1e6c538d24c7c2d2366410308dd0
SHA1 3269b01e41792d436ea01fb9177fd864479c4a1f
SHA256 ae0529a2bb6153b4739d9111df06bc682650187aeb818955835c8853b6f2b399
SHA512 3eba8f6127f39a06c18eb64670b2a15de4fef817d067ec38bcd25771c7b1f06641cb760f845c0f151d9bd88f589f4e0b434340f0159c8d221545a0345433af44

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\11164

MD5 93b4a451e57425e240fabcbef4658915
SHA1 7f6c2117e9c331488d839c31b5a9eb5e6d0fd307
SHA256 6a97fe244e224ca80cf5ab81663d1db6ca46ef90e58df2aa1e907e78afc55d02
SHA512 3e808333f3ad7ce1453b6d7bb5592604c58d12d2a161e97e7fb8ad9228d2211a442db65a7faad48a1d3802149e736be582f67e18268eecc29f0eb16be5f72066

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\30196

MD5 c1825c3cb1dc0e7550ef3f585423af71
SHA1 e97a384e1f93f3229621951bc84d2c046fab39de
SHA256 69506e8012a4f2fa43fec2f63c88b6f22ce636c026513b3fd76f5d992ffa0bf3
SHA512 a8c966afae14e4c5fd83f52dffc6c2d0b0c62fb1428dea4d96f2ad40195c88f9865af7f7c063aa287d6b617e7205508327564f0fcafac738b49fe9c2617c0757

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\18492

MD5 5f70159520e975d9954484b653a2eb1e
SHA1 eef9bf1bf195abe4abde5d4c4ddce8a363a4d334
SHA256 8c37b472a21fea1a20b606668f6fcee2d24da7cbb9a616c44052364ef066cbd4
SHA512 50cd7489a397c97db6b6875ddc117c3bf67d08bfb6b1d095139ab698e2996b5bf0ef77c5910091892670cdfc020c8a61e5350fa7874d691e49e58ef0cb925b46

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\24911

MD5 1e015473a57ff06485fd9c921756de4b
SHA1 4b0e214fe34ff5b9fb65c7bdf92d9a6440425313
SHA256 714cfc0f935c2a5c0110d6399bf9984c2828fdfbb1cd1ddff66ff16a3238f6fd
SHA512 65643ce83b7b880bceca268dbb43374fa8031115f38df7fafc8464654b86acca6c4aa4512468047feb76d81d2e01711a0205e397a1b8d048f4ac235e938855a5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\11736

MD5 db19919339653a2c454cedff7010f36f
SHA1 5e8eda32427025f79d8cdbc79add493af343ea78
SHA256 a15d779cc15e986fda74c62c8fb97cd256e210fd92abb9c2cf960707a98e4ad4
SHA512 c15bdaef0e528d9343a5bd896d0157437bf57adb9d60db27b8f0a3f6996f32f6a47a0c1d1e48420516b742aac3c68783d88f77ac3c1485cb5b1f5d4862c09d8a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\30320

MD5 a8ca6412d6724a09d5b627d6149460b4
SHA1 3964961f35785285d2b563805fe75dea05b8386e
SHA256 8ecd0f735aa23d8094de38c17fdc82d93afcb99250ec27e0b0a20d202a03f6ba
SHA512 351ebf8aff30d503836fb6b4a6bd06a554b60eb3918109a968993dd1f92950c77c1ffbf853ceeea41a698c65159cb10f168b38df7d43d01b1d154929c0b88059

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\18728

MD5 203dfff55c62bd9d2fe17180357d6514
SHA1 378f16be51aa977ad6bb511399b428629fcecc6b
SHA256 1c8d45248eadf65e754982b7e9ec518b97222dfa32e8ef51bb3cff65bcea882b
SHA512 dd1104a3e29e7d782fb118ff385305ebecb95ab6a7753f64de7203642e994cb8fc6272d6950ccb8c0a43f910de058318f481597f7b1401f2dd807139d3e96ed8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\21320

MD5 4ed34619e33a0542e86a56e00a6a315b
SHA1 212724e5a1990acca3e43ba5fa2f21ab51ef97bf
SHA256 69462fb4aaf145162d0594f6d1e78c901b0bb0ed33b1771e808bb7e1511f8299
SHA512 4baa859f57abb46488f479d5e025f0434caa7b20b92b47bfad9bb7b56950efbcfbc10dc9ad58f9beaa324fc8576e907114d0e27308ca57095a0a1720f4dab286

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\4992

MD5 db73670015a49ada0a88753a1688e44b
SHA1 f6253a02d9c32d7b8520077e8ca250794f9bd829
SHA256 edd01c676949232307655279b1c383c809d1fa65dbcfa4ec3ac26715d28c1ca5
SHA512 bf30ebf88d8852d1b11895c752b5445e1fb819b8a0685a426a7cc396190623f90dd2d51d976e4edb2c47b3c3da83ec522eaf879cfc1b7d50db7ba023d477cae0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\05EB7F6F7BD0BA633716511CCCAD442933622565

MD5 f7896aadf1c07a509a050d6ac3a71a4b
SHA1 ef2a75432ecf9a64466d4b65f62827e65d105d91
SHA256 5c01d6812795cc2d22e1ffe6ac54985b8086578320971263011185e1ca569b32
SHA512 76f90ba7f3e06887af777b22066d437e9ce596b35e48968ab3979de61d1486b5fb21ca47487fb2c9adccb3d922bcd7c313a4f2dc402653f9f0925c873f7c9924

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\71BE13A736F7D4BDD8764170A171AA654BF9264E

MD5 555cd07b85b16576e1ec2210b4f96783
SHA1 e1c2f84a77400ae2cebca9dd95ba9ce0e8152148
SHA256 534a1853e965cd64dad86e59ffbc20d35b8a18f8a5c4b66251c979dee193c8da
SHA512 0c53f6c4929d9e06103e4c5c1c13b8e978c1e628e486633c2d709f2a35ddf5d1d0334cdef005bb7b85ad5f72ff2417c25144f40c396af5f1d9ffdb1581030e66

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\BE2D3D60C4D6C94AEDAA7868122CCB76EF5AA608

MD5 f00802f305cd102ec245efd2b44cd8c5
SHA1 d1a3b5063f1911845f7e83dce5cf9b63035f9865
SHA256 40847afce63e3ff967e8919345baaf5cdccaeca7ca3db9310b57a59597ea3ead
SHA512 bfef6f000bff9a1a2997d3ffb2189b5b127a13d70a1c86be83a0e66b5c0dd15d51ec561500567f50c73b1924f01d43816af89e0725ace59407411a2fcd7ff9dc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\7505C2B294EFEF808B30D034AFB6A215F17E6F38

MD5 d2674b5d24890a26bfaddfb606fc9598
SHA1 a19e0303e6e6a16acbdce27fa2fcfc2ac28c16f5
SHA256 32c50d56c95f4380c3779b9e7beaec0d30015a50f802beef97df14d1724b08bc
SHA512 df704ce7939d3b8c16487ba9011612d24ee2ac2c3b189fb981f521af93d52b16f0e2cc1e51e5ab58f3e651a90af3918e01026e1e42e4205beb8495b11fe06361

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\CF5FBA70D7243048D4F0F4EAE7DB9D1742EB1D64

MD5 041f9961faed2662a0323b26b7a2e6ea
SHA1 ec719e2a5228d616ec60205934d79154bee9bf33
SHA256 761a9a863bfa41ee84d6f7b2a7771156356f4df7d798116c6357e851ac507e6a
SHA512 f5eefb3209b6c42ea2462a25f5875ee0cf434ee3f9abd323134a38e191791b62f79eb867c4fd7adfd1c8f2bf3397bbd83e69c23c203c5d1b9b21c8f988316142

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\8742

MD5 1de1ea7d8abac396d85dff6130dc336a
SHA1 37e49f8fd5636af493a6fd0086326703324dd0a2
SHA256 9338970ca33269f4237ab6aa4c2ebf3466c45037573adc6ce5ca4b2855779c8d
SHA512 9d1ea073588261c36ad31dcd2e350375f3f71b3e20b1ef1a73ebcb5ff67eac7bffb82e1eeed17a834d5b00376d7496737427ce14838bb7595395245f335ca251

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\C8346BE2A3CB54E99C43B824ABAC5F037264A4D4

MD5 643f6aebb853771b9d2c2f7076f85a55
SHA1 210259877594b12cb48db062409159f3558e2636
SHA256 b740e450950de6b939449ebbdf4d6aea24e65ea84d3b61b24f66fda8a0e51fd2
SHA512 554e3a0db2c94c6519a9c5c28a6ab50f638e186fd8cba0b847a3e2ee2ae88de3213b9f5aad390f4cb04affb086e730231035a60bafff213c0ec4f3b6d5d5e83b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\B5141334764A8AEF9D288548CE29C471E602A16A

MD5 414fbdaef7ee922b249bc8cead09834b
SHA1 14c6db75b5afef00a736ac943f577c68768976e1
SHA256 7af384461895a88257f888e353a13033d7d8458aef0021956d90b00a9f5d768c
SHA512 60d8eb14b0aa1ce9c8ae925e2ce0126b75076f65d0917d433d157af29f9e91cea0b8f2a794bde07e3141be439fc0cb2cb8e5a9ca368f06040ca1e84f16afccd5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\6C3E98A33DC9184060AAD2B595620A00C6B0F8DA

MD5 72c47340e92bc9eb3a12b8ffdfd3a350
SHA1 f5cf3711f98df9cb74a278ba2946daabe795ba77
SHA256 569b3a37c0137c2f7267a5e0b0c13e611aa870d09fd63a4b68a872c269cd71d4
SHA512 88e1629fea60537ad217671fb3446ac0c284f24cbe35c073889cfd1c6b1db50e2edbe7e361fdd95d5e0f64223024a739569ff14a733f449b9f4c1bd067c5be79

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\E1E5F90C5D42E8AAF6267CF5C1D4F4D7211B2A50

MD5 17dc30046dc7fe0a906a5849bcb5ecd9
SHA1 c57d32e5d945ad597b709c1041e531e2d9eb7789
SHA256 b687812f37f337e8f79c17d51acd5d5e0910c64a1cce6ab1e5d1fbe2060d704c
SHA512 449a1b1c3aff33ee526e9d012a82937ecea8700c41d97bd5b943f54ec4cd343080a47546f4a4579511b618f92c11152de1156a5bd54ab794a77fc9e9889a8011

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\55E5E6FB4DA0D621CA2B27FEAF7A867987DF935E

MD5 b483b5d750e421b0937a27990a72c0cb
SHA1 c0e4232a52e2b6e69cd0279fbcf552c922cdb763
SHA256 a8d52f9d538b0b55e431ece839481c5f7ea451773a736664694c261a8eef0bea
SHA512 22ed4f4eef2b0f043ed3a57066aefaa8ca9f31fa3dc903ea9b8d2f614e14033d097e9374e5d73cfbf43cbed3e5d137e252b8940d8336137799953b567f7c0428

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\8B7287CA6C1FA675E9D1A953060967D1E282BF10

MD5 839fa21016291b150e6b7597e856c115
SHA1 93c383fc66f5a24be30f47fda1dc1c4f5bf2082a
SHA256 5255873ad1a842c47e6293951ac7aed1f24777d96e06b8b11089e698bd280712
SHA512 f60329970231868a7a5f8c050dcbdae9ea90e0d5bc1629e28a368be2c0088835ea3e9ee2958dd4efc1508e15a756e9cd02ded0e582297e81292a6d9e7e920d3f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\739025F062E977A263D0043D9E01EE529DEBBEB9

MD5 11805e91bc3f983f54b264cbab0b8149
SHA1 ebd273b1e7b8ca7fb51ec7bd647c6c34c4241a56
SHA256 f4a70746166fefb63857a9a185177203448e6e31b23dcfa92f83d2f9f8efbebf
SHA512 539053178a334bf6b864b702d55395629fe71df36b214c6854f5ec7e147cada1c25440739f6be70398ef1666777d9991713167dc1ecda0e63c4b9653535a4c55

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\3CD97724EBF47B50AE59221DC942CCA5EE96ED82

MD5 e6828655d18820be96375b7bd3e940b5
SHA1 999e5f8816dd504878714153ab7323cba6f93917
SHA256 657e10bf146f0afb42488b6afacbf47feb1d3d8e1f7fb5af136abdfcbe40d937
SHA512 67b4469f478305b62375ed4625291a8e4df44ab64e84035a25dcb305e9df6d95c368f9c01ce1bc47dd36f6418c1de7f9f5fce36679df5efc4360cc1ef720e59f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\3CC64668187C540A26A18501F41B51C0CD662225

MD5 41afb6f98139f1b3ffd89234b06c2bec
SHA1 54016e4d9ad58ea435adb35b0d995344227b1ec6
SHA256 d3a4be59c9be3fdd70241742783df5e462680fd98c33f20ccc6b943b4075f343
SHA512 4277c5a74c4d3478a3dfdc9f31e68127ee7f48a34bf8255a5772d9d05553147038d74d9fc4c997d6977836284f4706c9aea5ca92e65b64cd087940861ee88ae8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\574CA2D1FC75772817A27B20A0F129C386A0113D

MD5 9625c9369e2698cfa89e6d88e0175c15
SHA1 c2f41ab410b1c2ef113b32c77c171d2fc51140f9
SHA256 7f293eb991204eeab26c05d19901b7010fb29f22c85e34393baeb8b774577037
SHA512 6de7c5a78c5b0514e5433231c14260f013361dad33d70d93a06e24a096ce6aa64a539c52bf1604194a1420feb822fa4c2bcd4f41db25175dcc077476a9d87e93

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\050DB43D78BBC79DCD9ADCBAE96500FE04597F1B

MD5 b4374ae8acc7bda1eb97d8c66acaa6b2
SHA1 bdda95caaf600f35c4c6502ffeac462de64d785c
SHA256 db4133726c121c0df1091571558dd4b0904a29d6ffc6597882cc435a8c917712
SHA512 b3ab5f734e71f0028af634cf123882b997e1e81be5a9c15dc3120ec7e097a775ff9714caa960328ed0aec83e6a2835edd4393cd28559aacca5a0b8b59e3d0efb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\5759696408CC362AAD43661B4E32560E15A7872C

MD5 8eeb981332019b4a9d64359b694beb99
SHA1 87184c6e4502d77d1bf2470c7fdf67760fa72dfe
SHA256 dd7c71332df15c6bc249becc499474ce7392aac6ec006aae1e02c32c1e784ccb
SHA512 d590bec667d0c22fdd9c3cbc8cfc190a140704ec3b6344da2d4cee91d061a7cc42496b62c174d1ac8b0a295c6063abc7bed996d79d13e7f06837e45a62f12392

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\522337E965BAE0D93049A98760C05212D1B6213B

MD5 f16414ae0c9a94bdc35ba0971e20a28c
SHA1 87f09718708749432c8de2017b237ba2c925f9f3
SHA256 92e30f06acccd3dce3c40a22473e37afeb9783c4e9a432d40553b525986e88bf
SHA512 c9b6b59e1b20d4a05572fd82675c5f63f3eeab1c297240db7a82b70a6b32f718839f8b8fa67b3bdb7d23729b25033f147c43083101af4359b777553d0adaf7f5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\9C29916B899C579DE3BA8409A772D155B031D381

MD5 ad0adb128138bac178bf3c58b87b52a1
SHA1 a6b15d4279f0bbd049559d7be8a73047b4f1794b
SHA256 2b5dfd7b6d352418157f9d6fe19504c537347488b67f46c59ad276dd9bf0a248
SHA512 327b28c599957a1ed29fb31fef10fd4760035642954c6be8d77b1e7960383000679d605599b76f574577b6f279ea5b11501a5175bd2d3a2bbaae58935c0b7987

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\4E3562C55341939E493011A1EC297C2A4CAF51DB

MD5 7c9efcc6b46f65aa1ff3873394f1326e
SHA1 a27a1a205773f302631f710fd02c2aa59f7a6fac
SHA256 54b9f35c585383221024cfa77e85db7f26e00f9e7b94ac72d73f3662a23a9bf1
SHA512 59e764a96082db3818f89943f02c8398220486c3af5fc95bfdbedf84c99d83ea8a5026670ada93da19ba49bd58a235744ee5f3dc17923d90fb7b3a0eaf1876a5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\AC5B4849CAB26A6FF5E0D69715FFD2D5203EA01F

MD5 13e8e3005a965ec30a741157cab2ca86
SHA1 2354a83fafa44d88dc8e5f769035e8dd01d87e70
SHA256 7680912590e97ca4d414b09df2d46b5a8a44b69f9c191f7bbe31ac766c330bdf
SHA512 4d725cdf6b780f6d6ea86c4a7ecde546bb8f9d044b39d5efb6d6916c6fdb59f5329734aa65b245556f7671883f10741067cebc9d72ca79fb4be4d9f0bc41b45b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\A7F40BD699DDBF8E09FAC50BC003B92A14EB8F30

MD5 9bb3ffc75ca834951191058a58ef0c10
SHA1 e4148049dd3a577e7e86ec77ca1b3dfb1eac947e
SHA256 9ec358e8c704f16062d1768d8cc5130943a4e80b4f8d1798cc03dbd77791936d
SHA512 e3b0bf3fe036a60253a4a66e7eb8d842cba74ffe2f10979db713c9733381619609bbcc2c7a7a400ae2d87364ab8591e7c29f48de685c8ebe2407ac3ee2906288

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\96A0D2F1C4ECD10450EA183542E05ADB3BBB4257

MD5 438f7e42904e6877868338ba2410a214
SHA1 dc06919c9300587ec4ee1bfe70766b5c24967323
SHA256 2cf08441087727098f05d2e38f300f6ebec2f93418aa7aff43067933e524eba6
SHA512 709caaa865433125dee934a608c588fd91c2a23365e3801e74d5919d42e803b4b260b27544b5b16f44a0c2135f3d6a60a19a7c59bac4409329444730c055d77c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\DA784CCDD74E697C1B9356166222C06487BCEA54

MD5 ec9ec5b6e2287ff6ed6cf5e1272c4426
SHA1 2b44a3e7537a1a6df4d643a462552860c03fd50f
SHA256 39e2418c196445f891e0ffb583a91205ffd2b8a016907e38a9fb40f870696d5d
SHA512 59562ab6409af94fd9b2a804768a7591ae01d62148a444eadeda4aba52c6857880c7fd1b846c63631c57353f1aae4d502137ef4e4cfa17ee4579ead279d97937

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\4C11E373FD9A73A5E61FCB5291518B290C3C15DF

MD5 7c6cf0e55da7b01be6b064f95d75fbc3
SHA1 383ec52018817f000f2f60bfb11469060b8ee4de
SHA256 e04e0469e3ca8689f724cc5ac022bd1fca69ce439f623c731edb5cc33379b548
SHA512 127da9388153dd610dfd76fb2d3a9f675240ae2b11a6d80c6ea578213e14df8ff439be8b9a6dc7546ce9a4aab06f84bc2ad8b1f1292bf596d68076b3911a999c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\36BCFA23A4D04A528CE70EF12214E3995E132134

MD5 e99253f2b0230aeb2f8d536575f5828d
SHA1 2d7ab68ec09145ecca67f14135658724d2627c6a
SHA256 1b80445e604962c9150ae49c8242a74daccc32784d178a5d911de264baa9f24d
SHA512 e64fe3ab21419df7942328e1d885daceb658f3b076aa83556f604fa9d5e76727cf3c7ec950dc70c78123d19e2d294e4a77dbd6efb0d3c94002cd071628244828

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\A876C8AF86717633E6E46572013B957E820A5E24

MD5 6ca3664fadbb69d0961ff41108e06220
SHA1 b4328003ccf88244b80b79d3bfa1ff96797b1aec
SHA256 e4e68eb6dfdc2285c09ba83d6b18aa72dcc9875b71234df5532a326cb25d1a1a
SHA512 2c6293df2ef35c8453e3928a3355691a23af2cd9dc2d45508a26c44a543f907cd3bfbd1f63da10c01f7fd1c084f0f82e2aa457b3a3833771f7d4ed8c5d27f39e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\F27E0CDCD1C7E6F6CED7F2BE71ED722173C6CCAB

MD5 3af42537d43cb6bc3cbe84a72a95a72f
SHA1 5422eca532d4419d4c9ab9699ff052a8ae19b26a
SHA256 ec6334d3e8b013e672a862d220c7e82270693c6bd0a29938940dba852bf0c8e9
SHA512 d82d56323dff63b965f149254cc3c2d3c654e8895239833ca6535d73c50f34fc7ba430091c53b4a89da1650ce2246a1159002f8e2abc34eb4e6697076fb51bd4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f3825023462949263ee77e5058128965
SHA1 136951615c1a46aeafefd6129d40a141bfb5b029
SHA256 4582a220e4c2ae82233cf0f694fa9c9336b0e3de25a8e82f6fadfa7d079a5c25
SHA512 46954ab29995b3c0e093b47c0ee384379e26fa78f1163910f74feca0fa08f42cd55e5549a76cbc92eb56f45fae870d744b7fa5b467259a40feb0489e19e3120d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\17509

MD5 30e6b0fd362429b0774f07e0d28026ca
SHA1 b4823873339342772534b71458e7abb0cf7e5588
SHA256 47d707c1ec5151b5aaf0c6725a2990989c75c0a36cc3e3d7358728a1291711e4
SHA512 5d76fcf71dbf8a54529433c0a82326ad9480d6bdca83c294367f9080a33f4b9469e21a4527bffc019a3222aa5a35079d0b7d5ca8a848a29bc6908a8248c47d08

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\1AB33D663B69F4F748A08F27D06DE9DC07B327E9

MD5 dccfaeba03cb51aef3cef0948d27127f
SHA1 8507c1b3f13df1960d7e53e2acccb9a8be1523c5
SHA256 a487b6b0380e462705addde36c969b0f1022c5722141324d10367afadd639f71
SHA512 194aee9158c2dc3420601dbae7abee7991a4449ff40d45000d6b409e8811dd44e918c618c7f9cee9774fa976771da6e352f9672853a1ab59a8e8834103fd83f6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\4222

MD5 3d6f8e8e9cd3c2a703b1e4a9e3379f9a
SHA1 c1fab053279fed8ddb43a261233ec7b4f2833490
SHA256 33e8653c169fab1d640ef282d95df13dca8dd43099dd445b56b37a94849b23df
SHA512 956edefb41aee21e613ffcf8f725f037026dc8281073531612c13311d28382e9a864eacd199a1e87c3b5590f8d951ce3c0f58c842031d36d2ec9067262385c0e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\7375

MD5 82349b0094fd4f3ba96186ac5a8dfeae
SHA1 31179b4a22f2610afc37b7e2b9931a9aa70a1291
SHA256 7b30e784527c828e4689aedcd94d357cee7a6fa173d5aa30d41a7cd0266992cd
SHA512 868c7de2833a1497be9eb88138b2feae7d2034f411b60ef4d6031e0a0d32e708138080450dbed4d855f689e56343950662d53a039815dff92e34e45323b4b228

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\10080

MD5 f99f2f2c6a645e519df9acfc934a92dc
SHA1 192c1e0610b4ebad7bcfe9c530c41af2a53de395
SHA256 aa04e478c36221045da88f5e4cfa070e237df09834d7538efd163edfd97bc3bc
SHA512 56b1f51ff7a33d09b825cdd767843fce7b1f7afa57871f86c8fc23ca33f905100dfa504532b173901def57ee72881fe0390d6628962adabe018063e5d2b72201

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\16499

MD5 df40da73f8364f720e4e5251c794cad6
SHA1 b579a4233d202e63ceda2d9a0dbd920b15eaf02a
SHA256 71bc6acea430311531ca8b9214488458c2858dc1bd1d54e2cc14156739178b83
SHA512 91cd4af7ef1e3af0b90057131ca69084a638fce6a4b3793a2448928b6839a1fe1d482d7347702ee70c45c3cdb4be98b9ab13632ddd38b5ada6bab8f782bf1402

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\9855

MD5 eefab35f5dd3490198ec86ace4688913
SHA1 6fb10e90a4d8a6b12a9390214f5e603595a07ec3
SHA256 859f4b3ecb193e8b8954453744e358e2ad54a32af3d2055721a2cac53ca433e4
SHA512 649cb8fa1ccda83f041cfdba554290b5d13928b9b19332c6a3cf800e4bb79e2163f336ae200521515d1bb6e1312820cf1dcff8ced82f350c06fff54721575761

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\16274

MD5 6874da5e5fa0aaa493a67a2f2045322c
SHA1 9687cd1d70d4797322d2bea29c2ff9a138b19838
SHA256 f2ea6df960348badebd9b6312780df973d5cb1a2b08d8e5cbbb7281031257bde
SHA512 34cb16e580dc40bba42d52b9ad185d3248cc210432b0c5ba91a9cc2b3df4db05b471bfe864964a462b2c7b09e511df4553869e1fb6c41c34e2a5dc1485f43499

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\856

MD5 a79c936d3c180666217df8261c8f7dd8
SHA1 2a906ee0038481eb31901055bcb055733a495ea1
SHA256 10ffb814b80b6362327638b6ad1b6af0fcc3f09c8a25b44fee8e471512f9aa89
SHA512 3a2463f7f21e51b1955ab0985a76bf14dd033c1799d620042470358ce79179aaacef95193d272b854a535e63a53f457bc69b21c63ef82cdd699cf8c4812cf6a4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\20561

MD5 507b12af342b0657cf76182a588d8f9a
SHA1 65c17cf6d25c62fe0a756a6a0fad30cdea5a4754
SHA256 cdeef7d11276416b81621c54cd858e93652fefe194ed6acf3d11d1632a99eb0b
SHA512 fb36fbfc29a3f3b9847c79b5cdbf98f2cc3f2c8009cdb31c0769b7ec4c45903900141b49b181ff4dba3e53ad4b7d675cec1053d37cbe25d9e691bbde4307bca8

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\A14C26BA4DDEF07ECA3E158614497D4ED03032A2

MD5 7aebbf2bf6db87a925a588737b772a07
SHA1 6b09e44b8ba85f778161fc903950f8d54491bf57
SHA256 ec9de99393b39693eb4ae0c6b63b72b81467418aa497e07f54dc634a9e3dbfc8
SHA512 1b408ea11dd761b92264957bf6bca0087bc97d35e58edda66636d1fb603fc3bd3c7e802c76da41e9665fd45defb3c75b64f6f86106228d70fc47e6ff87f89b32

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\17794

MD5 a0377f2abeecf3434470393e975b0847
SHA1 b4a5b777978f917b091af574c4f3d92bdd8045ba
SHA256 c7b004bb715515547cffdfa60d44336a23234440658633a8cf4fa8effaf8603e
SHA512 a28b4df7593201ea221f43491fc8bbb7d44810819ec71f8194a579fad29f39789c29576e15bf28f13663073025b27f5201454dfba0d8bc5f474ef385e61d877a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\1366

MD5 a909737ae2e02316d07a1dffc138cd66
SHA1 3bb00a08b8fad66b0f4a2e3b2e3b3759dd739f85
SHA256 26cf48b1b3199950aa29eabc76350febd91cad6fc78f0dc1aa3d17960aefd56a
SHA512 1f1dd0ef5eef47a49f7b5f8057ba6be20995f1cea37134378e16fd4d69b3e164ebce0ef3bf99c45369cab65daa01cdb99eabdda4f68c6c07eff19d5a5c442e16

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\30307

MD5 febb4d253f66f456fc1b8121ecba1a54
SHA1 8b68a0abb8a074dc5d5d06d4cd082989b22ff158
SHA256 6a0cb9a1014f47d819e81780e89d1c84e8f14257bb7dc94fc574f7480364f3da
SHA512 9cd022a8a674c0274d4069651f66028e3d41ddcad588b74846f128418ab07ca8898fb76c465a53ac76b5c9149e15b8bc07f0e74e04efae461a1908943c2cae46

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\13867

MD5 03f2d04950b0c4d00e94931f21637886
SHA1 2ec7c6cf384989ad4402da55bb118fbc8c1508fd
SHA256 b6369c1df3e6fea7de0cc3f559f77bbe45ce9f5844e236babc72f4477fb8af49
SHA512 0eb7ae2f3648701087f0ed0073d24a5f8a4d498aa8144f7abc24946e59e1b7d2c47861ff759fa779fc5d2ff8f53731b99b2a7d7c75a77fa3f513a8f4265987f3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\23776

MD5 d34d884a83841f50c2cf1d6f3b270279
SHA1 d0b2b9f5db5c95800a7144433803604b309599dc
SHA256 4144f87c0c5276f976f0526a2d785916db8ce935eb04855493caa0b163416f25
SHA512 9885ff9ebfbb57b489942c4c39797d05065b4011abcf521fe1263d1f9b31c914a3a0c8577c15506c17dc86f2686ae6009950dc3de91d3965a80606e5cf374788

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\20510

MD5 58f82184bb4d036b05c52798a0ea779f
SHA1 56934c339adc4725ba5c2a3783df5aed2b414662
SHA256 6556826cee9a58c9afbd75a017aa312dd8d6b93fe80154344f7c679b92d4ea31
SHA512 3ca1d701107addcbeaa15e20c2fa299579f0e22cf58fd8007e496bf98e92beccbffa084dfc50376b30687b91024282f658d1b5b3ad5f467c055e098f5fcaeb8c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\10714

MD5 3db6b75ecadae9dc8993bce4c53ca19a
SHA1 baa13d15f0710a1a3157c966f0c8d0ca364a3f9a
SHA256 e3d9579627dca7e5b84993f6535dab90060e1e997c2c944502f682af7d63e059
SHA512 bfaf24711e30c3d360d27e14e8dbb704907fe8bf8ab36f25a2309c63e32c980462f939301072c89ca119dace3ae52d7b291503a0d0b697eb0b0029714087c256

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\917

MD5 fcec435b8dbf0334f5d7e7e8d33607a9
SHA1 e2b28be4587f4ddf4e03b2e2ae01401e07c3e60a
SHA256 c7560fdf1cb7aece64d28b1d8bfe2d49f542bf3e3f9812a1a424db67983c8787
SHA512 a12ccba1113098a2c8ddbdda05d6ace6c8781cbeb5a242ea22617b93f6cf45d376eafb87a55d374c407d370092f849ada4fd7445cce0f9666525c56bb770a521

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\27154

MD5 ae238baec6b2e8951f709ef024ad2585
SHA1 85c35a7fc632c4b4c4d71a0adc9521cb7c652c85
SHA256 407bcee235d63f56c64bdaadf9c05fcc81c46d6f1c1d478961a2a3ee788f1882
SHA512 2a7d732b9fc3b22915499bd742dac178a73fefda2c7f72b97d8a47f27b9846cdb34e6621fdf16d2a6ab70b811398959968debdc2108c7f990041f4bada7173ce

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\6662

MD5 699775be57e76782c73408c44effccf5
SHA1 af5b69dcfdbbeef5538e9506de7bf82fc99176df
SHA256 0c96557839560d98ff095efdecff04e20a1c7fd1989575d314a0e528c207581f
SHA512 ae82ff7b0fcd8cde63cc2f9d114d0e4426ca695cbf6f55f99673b2f01b89714b5bdad99787aca14b8aaab83c609db7d1839bf1f50f151b7f3423def1a119fc5e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\2D8B1A13BF4DE864309FD52B7BF93789A675C733

MD5 d035fa7b7eb9969d12a900dacffe66ad
SHA1 e3247e98cfe2036de5b632642415e02d144291cf
SHA256 0ae7f0888a1d336ef85f3eb29d1f246a375868728b8b76e79fcc3bb807b4487a
SHA512 49d7adb4a3d3e82b8c9e01bbbe7eca9e7ff86e5e4a4187af59ceae85eb7ec3258ae64378efb86df09895c06580023a1e3d68f300267824d5c0cddee0318b831b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\864C98471D65EB86F8F985AD75DFC4A416BAAE19

MD5 2d876b71ae2dcb18c719eb77782c5673
SHA1 d611868ed65f88db9f9189e491b4500e84a70726
SHA256 3089579211e7f1c9376fdc7b48cea5e9b2035e884b51996662bcc7bd4d02b03f
SHA512 b298904e3b763f8368f7ca80bcaf1b919d7760a422c571ba619af16bce283a31678327884a0d07afd89851a9b2d384d6f79d31934fc9b037f48ab21a7195970f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\E63BB282E2060D26E713C67FFE0DCE4741AF2219

MD5 f66496be71b31d31817f940356b87c4d
SHA1 4bc6a87fdb37222bfb28a9e32407223e758dc797
SHA256 9df97a56d9a953e3ad6c083978f63e6d5fef878dca7a0e59863bf97d434d78f6
SHA512 85488208a55ac1ec6c984ea46e0c0687c2f77a17922ee13c4e1e682110f3f96f1d3128552313838d838a755345863363bc215a5f0da407c562a4f49fb7e39975

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\22093

MD5 c129b4b08ca75ae831fc15de7041ff2f
SHA1 a21e241ae7c2a10564c9b485523541c3d111aa7f
SHA256 5d007d86c576e12c5b1aee44091207e219e4ab9f383cfc53bbb7a10f3d2b77e3
SHA512 e423f05fdeed85cf78f6be26c9b49677dbc68d43fc0af42cbcc9a53f4fe01b5c7116e08892bb12b45b7a5273debafb939f0b10eb5ec79b7e4dbf03c1be2e04d3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\12348

MD5 7f69de8b63ce35887593b30831d27994
SHA1 96b64f215a9d9e37f5ae8234b9b4fe5c0b184a59
SHA256 b382e76c6143b05956ab3179f2a5afd742094fb200eff32200959af5642ca316
SHA512 9d2405352973daf70a499fd85bfa2a8dc6b25c5a0ed1d97f87538a7321077ae8f0222d3882a64119cf50e2de4cc6acc6bb1087e820c3b02f60c56e53a6ae9c31

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\5653

MD5 446d68ec4fbac1a80ed50494df6a9333
SHA1 fa6cdf25a5940be4e4501b2aee5579f95607cd2c
SHA256 7bdcde21767210451bd0762d06aebc47c429f0d33d3fa72ac9339aaf77e459e4
SHA512 3355c25a47915444f07ab81e9182e5a7816e207f2ee122faadd4d38695ea4f7860c38c32d2ba359b2f864cb633dcbb0daa520496e87a571713a0922415942567

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\4104A3014ED27A49BA6699F7F8BEDBE9909B5064

MD5 12bd3b94eff119f3df3a12355cdbc334
SHA1 266c842d7a022b1aa7d7d6d618c752429874fa08
SHA256 95936de02c1197ffb72163d202d863dc140bf62c6ad76b353e891cc80b1a07c9
SHA512 9c727edfbeb1d621f22073016da9fc2ccb4131a856b1098ae1c38661716aff3f9637364e55ee2c167dcf4c2ec432394a3336a4f05a565e271dffdd4bf00f55fc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\36666FA3760CD3A6C81680EF8CBC1FEE73D74E31

MD5 c2fa761305788923100e736dc0669df7
SHA1 ba6f3e3ee69ab1a68d2111f39e9afc5e473feef8
SHA256 338992f2c3961a0f07b6610660d7a2784fe479913fb9e55ed3145e4792de4ac3
SHA512 9971c8e9efed96c3895b7ff261604626084d3634c3ae1a1d4626c4b0bd4f1ac1413e644988a96d7b88ca9cc4da76e55efc5ea80c7d57fd3c2293ef20a50cbb52

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\25807

MD5 f53d14077d2c5669d84aba515d0ba832
SHA1 3434291ecf1b5a2be78d17450353cb831d65379e
SHA256 6d0d4648b71a2d44497ac04430611e54f1fe809cd09c2fa580d6e2504417ca05
SHA512 8ac20522680cc3c76183464f0ee6bda00395b2c6ec5c3d68017e99a12a14f2eeb013a251ed923a8e8d169cd5b9b71ae7456545801ced665129d304d3279cdd9f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\627343E1E5801FC8E58C8C7CEB8E6BD70704223D

MD5 5e76073620ad166ee6d52b48480a3533
SHA1 08422f45fb023f5cb94ffce45b830280cf25b085
SHA256 7f7bef2be5a0d8f7fdead60aa29233b4e6a14c43820a241d032d2cf2e2e4f6cd
SHA512 cb6212e95d49376e01434537ba4536591088eeaf434c0370982872aa398c9821de38e1c11769946d541855c0a80f78bcdf5bd95be5cd0d3d4cb5307b0ef16923

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\5CAFF5C1E40766ECD6B981F4D1F0E33B406232A4

MD5 87bb7691d3f76acb46050836b501f701
SHA1 3fa5f5ba5e72c34876f85d569c01a70779a6f68f
SHA256 46b2ad025e598ccf1fb3290cb54b1279aa96d156f7b83a0e1d654e4fe4c129b4
SHA512 c543b65371c1b87b34b7bbe7bfc5240f23a2574de685c745ca337bcfa86b9b044516df8bf84f4b1e89554020ae4ba3b25ac3df30fcc16df7509e4da5fe074c5a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\A6D05FC846CB61CC2A8178A7D2A554E3A754D1BF

MD5 8678eb6359562af7b592549e2aabba08
SHA1 512675fb856942718167685f3676bc34df036dd3
SHA256 fc835301bcfe5fc1c1f05858938d65a92810bfbba28c2108d6beba5f89fd0a95
SHA512 120073d1357cfce55e1168754b49adee0d86d1c7182ac699e7550b6c4db0bcb0a5e4586082b254d563a67ed9d41874521f3575e767080fe97dee903872b662ca

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\C5E567DBB090E25BC91C82735EC06E31D5B5F9BC

MD5 1bec89cb1ac8c7cf875314fe46f7cf1b
SHA1 b52607dc6d804b37072422e14b3344f59a5cd642
SHA256 bf48bc5611270396789ede8000208a1963bb0b062966800ac6c372ed24a540ec
SHA512 632012dd14fdd7c8c39aad343ccb942c349f29c6a6ae1decf9e0a51480056fdcae7bb11f693faddbcbb18a5ded750327aeac7bca91643101d20baafd0d1b3ce5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\A0634D0935426073915EE2D1C7789F8166AA2143

MD5 fdcc297c392d564e5062b8380485ab36
SHA1 d0071703313364872712f79caf375e00e0f178fc
SHA256 555fbb31333a5147a98f8c10f3cfe9ca9d06ac594f77ffa4df65a4bddf588550
SHA512 6e0e35c5f9cfba99d7aed2c2f9aeb26ac12aec405305d3c6961e43bbc504eed84df7e2a342f1350519ce904dd0aedf797940d3b433f29e15790ec984a05a5a29

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\F27D0C2BFB70538ED19013FB055D01BAD3CCD452

MD5 5adc7996e2380f433ee3292ba655a7bc
SHA1 fb3a635817267a3d0486bbc17b773785c609de66
SHA256 7bdf5b62507bf906cdcc51fb98051ab53c8cc5ea1cd18624d4527d5dda4d6df9
SHA512 56ba2c5dd143e46c546c1c1617f776ed5cfb5042260d4c3b982e4f8f59f2910fdab4bff1521687e75c64548970673575173c013a66c630b8d32017c1a060d080

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\82781E75DA05281F3F2C9DEF2E38A3FFB17C2801

MD5 f67200c0f9a95070c2f343a91f18c946
SHA1 633b53efff7a232d0bbb121c5b173faa283f1ff0
SHA256 ae5a2476c73fec4055c034eebc884ded094a4d9e1c2942eda51312042b730f13
SHA512 c22d073f8b9493f17d0d5d36f036173887d9dec36dd8b2ac0b3eaec63831374050f586bcab85acca4180f26243de0528407f95ee50a7ffa602113be928cccf77

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\C09BEE0E33B18F0DAB38DB43F7F15CF6E3190ADA

MD5 75180bc7877e110625efa7ea3e4b55cf
SHA1 c3d965892b625067295c886e455e413eadf9ce4e
SHA256 70320df1a3156e01deab572b4952faa3f80c3ca7d4b1671f5af0d90b5afc05c2
SHA512 8f53b59aeee6d0ac6367d11bb568c2dd5a8eafea46f736e606e27d41aed175bcc5d7847f512e9ca3e1f73730302c00f297b806e321a6e03ee22f4cc9a59b253e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\5328

MD5 7b9f14c2058b2fd48c3fbb77acc65b4b
SHA1 9ea92e7a699225f968c75ad0e0371f734ac559bf
SHA256 3ba722092a04fd30c0f44c1cd2d65543963246e8f436070e3d49fffca6209f9a
SHA512 c77ff7e80d28b2eeedf5d52129cc64ee05c5a186cd25efacca3eab6a9cac786e06bf3da025f799186dfe8882189236b55d50659edfe7d344331b97fb8ed944be

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\24809

MD5 3df0f8b7c6fadfdc5345613186c71434
SHA1 03d6d7eb933686e97c47cfd1399e5bf16964efd5
SHA256 a917aae2b56ede6f8cd25d49b089eed5b8073d378832dd1c25b975e0012ddfa8
SHA512 5c9028cd3661cdb843c5e34e2792ff9be9de62773aaf96a96ec6f6fc0af2cd71a47124c21b22064ecc29d0b4918a62119b690cd91ab4f2084ca74e5e09c39b57

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\27528

MD5 c62114297e7bb8c4e4605e519c04a931
SHA1 ac3125c9c442d8adb42f3f2433d7946f9bcdb2c9
SHA256 2657a42cf1e0e5d5c71fb31fb8a0d6b15fc298ee97c17504585647461eb4312d
SHA512 1909d2c4d2313c900408bb6bf2983ef3ce2a6894650801e8e27d0ef2cea053751ec8699d206745f794575209ecf8546c5b7c906ae18f563ac20b92b3bfb7cbf5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\7722

MD5 ae57f6c4249867a25c0bb60144f48e4f
SHA1 a00ef84e21ccedf18361b3a0e6ef3851c50d9b33
SHA256 6abb358269ba6da3bdf0a691f49c210ad72167315eb98e09393ec117d7d28182
SHA512 04abf5fa9536edd760fc85bd592d39e2ec8985a9555d8380ec41d8c398b757a28ac74f8aedbad3499e6b0e2e8573283e807a07adebab0967d9e6f6b872f445e0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\11884

MD5 06d0a8d4d56f7b77224db0a415e6a0a7
SHA1 4eaa462154cb6ba135d54a2503f1e6aeaf6b6a2d
SHA256 feae94662330a37a019a5c9d27254b1df020e6eb28ba129f26b691c55ea1accb
SHA512 2eb25024f69858aa8044c97e0152a7c12b2322d59f6e380dd24e27f3cab03ba472cc5aa938f3a57966328abbb43bc62981e04978f98e40393d1d5fa7322746c7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\32276

MD5 c762afa147761c93629880b1678fc1b9
SHA1 80209784113094d88cf03feac28945e57d0d6ce4
SHA256 542fd63e2933e077491f8ad888c6cddc4bc9f5634214f6a617d379a7515c68bb
SHA512 9c578374a997e112801399533c3eed80140e6515f74c30cd72ff47e10d0b4ae5ea8519ef1464d1d6dc938d0eb85060ae81bebc7f32a3004f7197db66c7f35bb0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\32163

MD5 98a034cc0947e5ccd0172d676b1a997d
SHA1 1f52438567814ded551a38e98370ee6a58d9c098
SHA256 82058ae3b556b9d22210e109822ee5647c2fcbc103fa42237c2d8af0fc88aafa
SHA512 e96a880539286ba0d3d2996f271b58b667584ab6cc64540aa87fffbcf3c6fa43eee7f4aff01dd15ceb998256ebb76c8d89313aafad6288ca0dde8b59af8ed72d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\22367

MD5 c19acc0ca31c07ecba35921a36ddfcbf
SHA1 b351b2c3421fe5d1c04f04dbb562fe4d2304ee71
SHA256 2aedf7668562ae7f1bdc5bbd95e37767ebb515b9015703deec0c740114afabc2
SHA512 39100746d5b464e978b7bd26da2314ec445e54a2f941c05bc26e6592de6cf89671e8b6e2b28e7a073091e40c5904868a9ef1fa98a03dd8bea1eb39271a16e0bb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\25744

MD5 bfdde1619dd60f6e535ae3d4867851d2
SHA1 28d676d3490394d1b02b15d272ba5bd68a3a1110
SHA256 ea25b5a53fa54e9f9663bf5a48942e2a6bf1999d84b7327751d3062454c51a41
SHA512 9bba4ea53f9e89e2eb135439ea3f8dd12bb058fe1aa28b15b4437106df96a5e3fb74578f96e6d4f964a2ee6f21b8e980fc17248c80ee101c2cb59b3ac3394c75

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\24847

MD5 33f73de8390b391cd090bfa159129bc5
SHA1 88c73d962e70db83c5fb86688fd7be3b279496e9
SHA256 7da6b9714e1de33f1bd4e6a2fc2c775d57ac3c6e2912f6a33b670c4e5efbfb66
SHA512 1e8ca67143b57a940e38bfaf5ec78d3b9a54d07a988f4d4a4d12826e9914bd158669cdd99a093507fbf4862d5579cec73fed1e6cb1b66b2eacef6364d5241082

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\24735

MD5 0676fab75e30b78c8efbf3f00a35756c
SHA1 628026af314fbcfb6994bf5727c2a1b4c460653a
SHA256 b672c0f3385b2481f42c8ff252dbb9670c5326af7ceaf2b55de2c4d16dcf461f
SHA512 e3111d602e75b72b5cc29b7ee6ffd74fe0f846c5038894bbaa5371be091bfe027ce427d12eeb85eac619b72c86f6456970536986fe90f190c439647c1b7d69ed

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\31041

MD5 35efc21d85e8cbf672c367f5af9a5b33
SHA1 85c05ff899cc4c93345ffb0e403a152e3f54f636
SHA256 b50281a195e335fc5d5a477b9fe24c084acf42879e36fe88bd2e3e1167e8afdc
SHA512 36c16d746fa1c99efe99e875545c9f60c35457352115de457a7d07e870b93616cc258a0e52a8cdef35a991f2666decd1874f2c9c2c9145cb50352d9992d6326f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\22824

MD5 2bbf4d14e0ff857b6b0d402838580cad
SHA1 39b75478aea5d840ed01c6cc234ebfa324a83038
SHA256 396ba221649064bcbc523a2f7477900c1bf3ac4d47c196c02ce5df564d5ec62d
SHA512 4db43a7bd92a66e69c730fad39808c6c372423f9c7095f0f57a1d9e543f6085c51b5602da2e1becdd5345748ff9fabacecaa81b165aa6f54d2a83a432fc5f4d3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\E3C93FC4EB58CA0F855A5762564E7DDD0FB1620A

MD5 e8cc67343d13af78222336bd064ecb4c
SHA1 6e232324717c048582aefafe73d48afde8389840
SHA256 9703e419874f7ec6cf2337825cdf55025f93fe31533a51951d60cac0b6112c16
SHA512 60cd539e3af72d72434aca4d0e5e3c18e00f43359481a0826cbb61fb7dab1fe4ea57c7257fe77c70d8e22ff2eb220ec4505affac8b46ad0f3b10c89e71965e23

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\F014A5E58ED93CDE24CCEC2CE9AD3AC49430070F

MD5 67e70b567c9a7bcb2ed293356d537833
SHA1 9308ce5dc71328c396fcd91aa1935315510d4eb0
SHA256 30d7b518d995aaf615b4ba10f5cdc57c752c528f45b0754de9a753f4096430c7
SHA512 f1cc94722183964efbe2e531ec3b76cf19ee95b0c6ea72ad5f5570a47ae452bb8d3869efca6b71a685697df9cca4630d80741c6e19f42d4f38855f9d223f3c46

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\2885

MD5 45421ddb692a7ea0433ef363e19edb18
SHA1 4d9a1543049a26ea1a821e11de4d0ba114758cbd
SHA256 08fbaad8ab66a2de502c68bae9853bd4f311677e82e684ec58cc3e2620ed78ac
SHA512 2061cfd9cafd66cd906b8cff1cbeb79e815b06d36403641996af0c967a2939348086b0563372418f0c7f4c7a4bc223a882130ec8cb9eb0f1cd016aa5dda76376

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\7865

MD5 1e8f06eee7c6b0d59ee070c6cc559f97
SHA1 c11210717419b34fa45b1b9d0909e05d899dc1d3
SHA256 d39ffef9938fa02bd12ebd1dc22da7378912cafb7429c910838dbb732d20f8dc
SHA512 082dfe25326cda2e6cb774a747678f50fc39f152eca4451d0617e466b9b8f1c9aced06d0c16548b02456f5f5d9a8da39eaaca29f1eecbc8c0a89a63799433bfd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\9529

MD5 f2dffd010f0d328822fb5f60bc6428f7
SHA1 571e63e1bd89c3f9171556cc279101ca8f3da220
SHA256 4861fc9a6a2cfdf956aa5938585ca37718c8670b090f663922b1b9915769674f
SHA512 75cf5659df2b6016c963704405f125334ab08a4de41e94a16f67e55ed4b03a24455f398c7812776be24dc53187058ee1ad6e3af3d44cdb67c0adaffba9130109

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\7285

MD5 5407be668ad805e9f65cbc970b2ba238
SHA1 40a63d94a75782d5878ff81ef9fe9ff65ae6919d
SHA256 03dc3068a730ee59e46fddf7b7bc5c67f51a1b991b1558f08d267c709e3a6121
SHA512 4ea5905ebcefdb9074bbdc24b8589c8e7c0e54e759f4d41d18e469b9e8baba0cca88d42ec732ea8d002cd3bcc6ed32defec2b0af159e46d7dfcbd5a1ee68d89b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\22042

MD5 67734a2838d13953a3024d3c50030cd5
SHA1 736a0d37ef301f08591672aeb0972bac5e36377f
SHA256 c3c4e2355ceeafb197d178a1f283ac90150d1e48c4936906750c96028f1478ff
SHA512 298b3e7a562428975d3bb7f4d6c4b348a07b7833a86fee70c6bda9c3529710dc3e501b93c9bc40d5a7f61dc3573deb544f6dde4d331c90c46a83f4bcc77929ff

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\31277

MD5 1f3d4bc85f527d2889d25a843704b626
SHA1 5770de0830adce31fd6bbaacbc4633d3f20ff7a2
SHA256 e6d874e04a32f77a52d9f19cb74204835f9354ccc7eae75ba82070949689a327
SHA512 45cfcd27db0dc8bc54bc5576fe07dfc9b22f82eed9a97cf10cef85e938efd02d89cf3150756144dbde62ba140482b749df8537c4b32d71de052d913e49233b10

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\8082

MD5 9b30d31d3a08b451ac8466d921205898
SHA1 66f504b00215a9fd065b73c8047f58073a155969
SHA256 be375b9ad844994cb4bd0ca162a9876067b3952517f97e69c8aacb4eb63aeb69
SHA512 687a053ca72a710a6eb414054f0dca3eaf87a20069ecaa15b485075d0a39cf5e2abc2532080fdd3bcc600d6e9ecf60c5a851e22eddda3eb4d813b1122da2e59d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\2347

MD5 d39e8e3965ebaff879c9c90cf183ca2a
SHA1 d67d6b8ca882fcdfdd4620b6fee132eb4697cdf6
SHA256 9e20ab130ba4cc8de634bd042467f61118b9c83d841d65921de09194732f2218
SHA512 a234de16683e1c2caf6ab4510014f80a4713db542cde5286ee2cc56f7ed90b59cf8819c8a517462fa651720e5e8ea55c6166e37f4658c4f88c738d160c6e38e0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\13727

MD5 e451c1d4775796983b14e7dff8a5fb60
SHA1 280bdaaa31e285d3a027f46ec3adf9b25d8fae01
SHA256 0078d43f288a9e8076c03fb650b7bb69c08882aba7d1c679290746001bd13d7d
SHA512 013260f43d445f47f63333f03fdacc1824cfb18da1624015e09b98c051342d88bd6e2836f05813a51548572187a5feaf794a34a0e59253932505ef2af1b6397f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f59bb88e4e42d3482f59a2cc06e0a6de
SHA1 673de100ac6a73031fe442899ed2f1acc049004e
SHA256 18b895677dd53a433e4f7594cdab8487a552878b72d8bf3d157fa13b4de59ef9
SHA512 bec1bb39096ef528634f05ca0c2302aef91796f8b060319382f2706c97878e983406528b868cab0e5f7281a8f9e5d703db68758afe10c686de1a0412a2a6fe8d

C:\Users\Admin\Downloads\RobloxPlayerInstaller.NVSUME38.exe.part

MD5 d1a15efc4d315a7338411a44e5bd755c
SHA1 aa2941aec278af6993404469db55baac2271bd30
SHA256 ea542ad389cf9e6fbc19e47f62c47409d7ed3228cd988f89bb46a99b777da89f
SHA512 c073957d0fada046f9d7872c029a129a878621a305856d7cada9368540eb5518541345ed1e9dca4534621b9740134ed4c860cd029292ce7fcb97f5cefe8126c9

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe

MD5 a0396f9bb5e0144808cc7c7fda47e682
SHA1 76bef1c55c6f288ca5988d344c4e92ee8f3a6329
SHA256 b5d35eaf2ca4befb5ac6de8680609c9a86fdc257b49d21ce4c8d17eddaa1b51a
SHA512 dd49140d4661d813501d67c44d5fedd6bdc7ce731242fb33973b0b7a5b603344682fe1bc393fcf9fe3f5ad10ed9f1de7dbc42c66ec16b84063fe535f288ab7e0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.roblox.com\ls\usage

MD5 438e3eeb719bef0b8ddce560c73c7fc2
SHA1 ed4589df7f23b81613b5a7d74ceeaf099214d5cd
SHA256 726c240e2b28a71efb3168a72a8033a576c811b50cbb41eb0a0703cb8d28ccf2
SHA512 d1ee4129b9abcff1570cd361f9dbfe4f92224ea802fdfdd98cc7ee07804cdf0f737821304863c32f836479ef6470891a0fdc8d2e23bfe108c6d6894af8c6a787

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 13f815caaf6fab2ea7c399d1b3ae2170
SHA1 0d69c3156f46b63d47f2f0a402a322d4b7b214da
SHA256 f6b7d436316aa3a7dcff8c4dddb2d062c6c3d637b6ed6b7e5b40d8040e865f01
SHA512 07f6dbc3bf07429e19bac206aed49be7f76f5d395c3ab27c3407a0ca319bf4c23b2b59c6a7aa2effb21c1fa323b6ee4ff43c76e78f114e370d651d38bedbe5c1

C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe

MD5 f899ed8284f9df71e4dd43b152dd60e9
SHA1 715796f8e8c83699dc2672f5acee91dce08715cf
SHA256 8d886a250762d21047a8a579251909225f5adab2e372a7f03e2c1c8c3d294152
SHA512 49b6ec6cc9b7256a19ec18ae5045fb01118b5ae1b2aa5b6e4d9b66daca8b7b3dcbfdde84c20a416378ece260fbb06addaed2c3d6af7eaff4958934fbb81dd796

C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\e602387055ae7b12c23fbeefeb417682

MD5 e602387055ae7b12c23fbeefeb417682
SHA1 4efa866cca9693eafb65a6babfebd64bf99037da
SHA256 8df68686863894e7f47069b854d07d6eb449269f527c09433495efb130f33dde
SHA512 87ee31aaf7929c3ef6ddad322727185efe0702f239d81eeda85ff0bc5c873316a660129aecc3bde5809de1449efd5de0f458db27610d126a69dddf35d38c27f3

C:\Program Files (x86)\Roblox\Versions\version-2cca5ed32b534b2a\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MD5 610b1b60dc8729bad759c92f82ee2804
SHA1 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552
SHA256 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08
SHA512 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdate.exe

MD5 4dc57ab56e37cd05e81f0d8aaafc5179
SHA1 494a90728d7680f979b0ad87f09b5b58f16d1cd5
SHA256 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718
SHA512 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdate.dll

MD5 965b3af7886e7bf6584488658c050ca2
SHA1 72daabdde7cd500c483d0eeecb1bd19708f8e4a5
SHA256 d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19
SHA512 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_en.dll

MD5 4a1e3cf488e998ef4d22ac25ccc520a5
SHA1 dc568a6e3c9465474ef0d761581c733b3371b1cd
SHA256 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011
SHA512 ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe

MD5 60dba9b06b56e58f5aea1a4149c743d2
SHA1 a7e456acf64dd99ca30259cf45b88cf2515a69b3
SHA256 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112
SHA512 e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_af.dll

MD5 567aec2d42d02675eb515bbd852be7db
SHA1 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37
SHA256 a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c
SHA512 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_am.dll

MD5 f6c1324070b6c4e2a8f8921652bfbdfa
SHA1 988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf
SHA256 986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717
SHA512 63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_ca-Es-VALENCIA.dll

MD5 2929e8d496d95739f207b9f59b13f925
SHA1 7c1c574194d9e31ca91e2a21a5c671e5e95c734c
SHA256 2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df
SHA512 ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_cs.dll

MD5 16c84ad1222284f40968a851f541d6bb
SHA1 bc26d50e15ccaed6a5fbe801943117269b3b8e6b
SHA256 e0f0026ddcbeafc6c991da6ba7c52927d050f928dba4a7153552efcea893a35b
SHA512 d3018619469ed25d84713bd6b6515c9a27528810765ed41741ac92caf0a3f72345c465a5bda825041df69e1264aada322b62e10c7ed20b3d1bcde82c7e146b7e

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_hu.dll

MD5 f4976c580ba37fc9079693ebf5234fea
SHA1 7326d2aa8f6109084728323d44a7fb975fc1ed3f
SHA256 b16755fdbcc796ef4eb937759fe2c3518c694f5d186970d55a5a5e5d906cb791
SHA512 e43636d8c947e981258e649712ad43f37c1aab01916539b93c082959fb5c6764c9c44979650092202839e812e6f252c6c3eaf66d3d195c1efd39c74c81ad1981

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_mk.dll

MD5 064035858a1df697913f06c972461901
SHA1 b6be99ae8e55207949076955389bc8fec81937fd
SHA256 4850260d2cbb4b4ff3490eb90ce55a412268ad699f946b1cd686ddf9f0403bd6
SHA512 9459056e919854213117b874e61b526af4ba35c3c3e195b204c5c3e59cc4dfa2b4a45c32551e1de144842844f246f5e0d025cdcc78dbf7265ba5e26e7209cd91

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_mi.dll

MD5 1866ddadd9397dbf01c82c73496b6bff
SHA1 b210a9df7d6a5e116fe7a9ff8d455b6cbfb5663b
SHA256 9b4bb2ca3366a1935b4869796efc0601f94356b45e8613d28e023dd516f48d17
SHA512 76fa5cade101d79d012e00904bf18692f85967ceea0ed7e81da4df65b85afc125a00127d9e06c8c59ffbfd2dcdc88488157b61922960559fa17d13dedca3ee59

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_lv.dll

MD5 30849a9c16061b9a46a66e8e7d42ff81
SHA1 2d0e86535d964acce8912c6bef3cc12346b22a6c
SHA256 b8075c09d33cc6b6ff22fdb29ccc3dd319ce867f4b77a1d165f6f8d8cb4977e9
SHA512 298ee10ff6cab7ff38d31e3a7826dedeab8e9ccc616eae4ca2e5ec333f42e5c6744650857031d8bf35034bd46c7c01a2646362ffbbef1f421995c73ba999ff0b

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_lt.dll

MD5 7071c732cf3e4b3144cf07c49d8eb44f
SHA1 3800bf304b44d9d27ac26bed6ccc899669dc3b4f
SHA256 9c75ef5c3f53c643d7bb8c5907a0cba6ca2d1d64e6bea39ce06b4ad5a20454b6
SHA512 be3a0942e2af843adeb8e9b6acc7cd8adec956b761f71d8eb0a02835ee5be115ac064fda7088b0813d40ec3a24e7bb77816e9b67ef0cbdce1562c36880b15049

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_lo.dll

MD5 864edbc77831a64a3e3ab972291233bb
SHA1 fa1f3eb3320c1b1a329cbe786abecf2a8e625cbe
SHA256 aecab1eb46075d1a1432b3e14537f860a2ded49a13ca82f17fac44b40ad2da51
SHA512 3d54efd01d6317fb4746b55db2c847a506f594cff055f0db84a72ede02dbe3aa03d8e65ea06c5ae365f44312a26cdbc45ad5f9a0de46d2b9c878aeeb24566b89

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_lb.dll

MD5 269e84b82973e7b9ee03a5b2ef475e4d
SHA1 4021af3bfde8c52040ad4f9390eb29ae2a69104b
SHA256 c3fb0cae3dc5cdd86518d60f998c3adec1c0c5804a74ffbb9a346a73d598af07
SHA512 db716e2f6527af2dfeba4c22ff00e159d7cc0b482fc126e87b8b3d35b714bb382676066097352b6ebb87c8dfe7f6144e83100f0c9a9990b0d23c810b6c575c21

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_kok.dll

MD5 ca3465347e57624ee2a5dd2299d4f4cd
SHA1 551a151a8d49489c90400e18c34633aa2c2b8a4b
SHA256 5b9509a1ae34d89c89c8e657742495037d28cd03e1cd48aef4dfaa7aeebe29f0
SHA512 a4bdd458a7628a9f0664e1000512e056718cc924510a21704ff8c69b0b251a5a1c7f6f267d66325cadda1536aaee78440348be128d082112c71732e485ac93f3

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_ko.dll

MD5 cf91a1f111762d2bc01f8a002bd9544d
SHA1 db2603af55b08538a41c51fc0676bc0ed041d284
SHA256 baa9fae4fb8939e0b5fe0c7f393ab1ca40b52534f37bf2158a9a36331a221e75
SHA512 9db864dbd194885b46f7bed9875f1e531e48f7644ce4494b8dc482c7516a6f783cd35129d2565b272dc674491a08c844a6da88bf9fa7843fcf89c96b4e0af799

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_kn.dll

MD5 60dfe673999d07f1a52716c57ba425a8
SHA1 019ce650320f90914e83010f77347351ec9958ab
SHA256 ef749f70e71424d7f548d5c12283be70a6d6c59cffb1c8101b74f37ecacb64af
SHA512 46bfe77a49f14293988863a8e4dd0543202b954b670940d9ad5dc6d2b46e46104d8d6206be08a941f7e02b8ff3e2e2366b7b795d02352cff18971f8d0df5fcdc

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_km.dll

MD5 2ea1200fdfb4fcc368cea7d0cdc32bc2
SHA1 4acb60908e6e974c9fa0f19be94cb295494ee989
SHA256 6fd21b94f62ee7474b3c3029590ddf06936105508f9bf3509620c42dc37486c3
SHA512 e63b80a5929200c85c7a30a3054bd51eee2f27e603501f105073868690906f4619a27a52e58c90ac2ab5d5c34a4739dfdd2a511574afeb7d0118de88c5544f42

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_kk.dll

MD5 bcb1c5f3ef6c633e35603eade528c0f2
SHA1 84fac96d72341dc8238a0aa2b98eb7631b1eaf4e
SHA256 fdd6bffdb9eca4542975f3afe3ac68feac190b8963f0a7244b4b8fa6382381d1
SHA512 ecd79ddd9f3e6db1d0471132c453c324ab55bdead21de77392f418281bc8a2dd43e9009912896ffa3d55d4d3ef17b0aa847a084369b619eb04a2d2313641d520

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_ka.dll

MD5 3bc0d9dd2119a72a1dc705d794dc6507
SHA1 5c3947e9783b90805d4d3a305dd2d0f2b2e03461
SHA256 4449ee24c676e34fea4d151b3a752e8d0e7c82f419884e80da60d4d4c1b0f8cb
SHA512 8df01ad484bf2924892129c59317f3da4f79611be2ca29e208114e5ed2cb96a63f753511dc4fe97e281417366246f2fb576cc6ef2618a67803ae7ac01be7b067

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_ja.dll

MD5 b507a146eb5de3b02271106218223b93
SHA1 0f1faddb06d775bcabbe8c7d83840505e094b8d6
SHA256 5f4234e2b965656e3d6e127660f52e370dc133632d451ef04975f3b70194b2ed
SHA512 54864e9130b91b6fd68b1947968c446f45a582f22714716bfd70b6dc814841fffe939bc2f573a257ec8c62b4ff939643211fb29cabc0c45b78a6cc70eaa3752c

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_iw.dll

MD5 45e971cdc476b8ea951613dbd96e8943
SHA1 8d87b4edfce31dfa4eebdcc319268e81c1e01356
SHA256 fd5ba39c8b319c6ba2febf896c6947a0a7bae6aa0b4957bd124d55589f41849d
SHA512 f1c9fccf742fa450be249dbbf7e551a426c050ae4af3d2e909f9750068a2bdc801f618eb77a6a82d13421d27949c9f2a9681a44bcb410ccdeec66b24a70f6a9a

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_it.dll

MD5 497ca0a8950ae5c8c31c46eb91819f58
SHA1 01e7e61c04de64d2df73322c22208a87d6331fc8
SHA256 abe2360a585b6671ec3a69d14077b43ae8f9e92b6077b80a147dfe36792bb1b7
SHA512 070398af980f193ff90b4afaecb3822534ef3171eca7228bce395af11ca38364bc47cab7df1e71187ef291f90978bdc37a8611d2992b1800cd1de6aa7fda09d9

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_is.dll

MD5 5664c7a059ceb096d4cdaae6e2b96b8f
SHA1 bf0095cd7470bf4d7c9566ba0fd3b75c8b9e57ec
SHA256 a3a2947064267d17474c168d3189b0d372e36e53bf0efb9c228d314fc802d98e
SHA512 015dcb17b297a0aaad41c7b0b2199187e435855fd3977d16402be774622cc4f6b55d04ba9159a89e26e350c5602928c76dd9386be3974437b41888a0cfdddfa8

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_id.dll

MD5 03d4c35b188204f62fc1c46320e80802
SHA1 07efb737c8b072f71b3892b807df8c895b20868c
SHA256 192585d7f4a8a0cd95e338863c14233cdd8150f9f6f7dd8a405da0670110ee95
SHA512 7e67ea953ea58ff43e049ce519ae077eec631325604896479526627d688f2fa3bfc855a55ac23a76b1c9ef8cd75274265b8238423b95a2437be7250db0db31b1

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_hr.dll

MD5 0b475965c311203bf3a592be2f5d5e00
SHA1 b5ff1957c0903a93737666dee0920b1043ddaf70
SHA256 65915ad11b9457d145795a1e8d151f898ec2dcb8b136967e6592884699867eb0
SHA512 bec513125f272c24477b9ddbaa5706d1e1bb958babac46829b28df99fa1dd82f3f1e3c7066dc2fe3e59118c536675a22fc2128de916ca4c478950b9992372007

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_gu.dll

MD5 f9646357cf6ce93d7ba9cfb3fa362928
SHA1 a072cc350ea8ea6d8a01af335691057132b04025
SHA256 838ccd8243caa1a5d9e72eb1179ac8ae59d2acb453ed86be01e0722a8e917150
SHA512 654c4a5200f20411c56c59dbb30a63bfe2da27781c081e2049b31f0371a31d679e3c9378c7eb9cf0fb9166a3f0fba33a58c3268193119b06f91bebe164a82528

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_hi.dll

MD5 34cbaeb5ec7984362a3dabe5c14a08ec
SHA1 d88ec7ac1997b7355e81226444ec4740b69670d7
SHA256 024c5eae16e45abe2237c2a5d868563550ac596f1f7d777e25234c17d9461dd9
SHA512 008c8443a3e93c4643a9e8735a1c59c24ba2f7a789606a86da54c921c34cbc0cb11c88594544d8509a8e71b6a287c043b1ffe2d39b90af53b4cde3847d891ba8

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_gd.dll

MD5 c90f33303c5bd706776e90c12aefabee
SHA1 1965550fe34b68ea37a24c8708eef1a0d561fb11
SHA256 e3acc61d06942408369c85365ac0d731c5f3c9bc26e3f1e3bb24226d0879ad9c
SHA512 b0c1a9d7df57d68e5daf527703f0b6154a2ef72af1a3933bda2804408f6684b5b09b822522193243fd0756f80f13d3ab0647c90d2bed1a57b4a9fea933b0aa9a

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_gl.dll

MD5 84a1cea9a31be831155aa1e12518e446
SHA1 670f4edd4dc8df97af8925f56241375757afb3da
SHA256 e4eb716f1041160fd323b0f229b88851e153025d5d79f49b7d6ecb7eb2442c57
SHA512 5f1318119102fcee1c828565737ce914493ff86e2a18a94f5ff2b6b394d584ace75c37258d589cce1d5afd8e37d617168a7d7372cfd68dd6a2afcd4577a0bc51

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_fr-CA.dll

MD5 b534e068001e8729faf212ad3c0da16c
SHA1 999fa33c5ea856d305cc359c18ea8e994a83f7a9
SHA256 445051ef15c6c872bed6d904169793837e41029a8578eaf81d78a4641ef53511
SHA512 e937d2e0f43ade3f4a5e9cdeb6dd8c8ad8b5b50a7b6b779bda727a4fe1ced93abd06720395cc69a274ce3b0f7c6b65e1eba1ecf069db64edb80d007fbb4eedbb

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_ga.dll

MD5 3b8a5301c4cf21b439953c97bd3c441c
SHA1 8a7b48bb3d75279de5f5eb88b5a83437c9a2014a
SHA256 abc9822ee193c9a98a21202648a48ecd69b0cb19ff31c9bbf0c79dab5f9609b0
SHA512 068166cfdf879caf4e54fe43c5265a692fcaf6a9dcbf151335fd054bbec06260bc5ed489de6d46ca3fc0044bc61fa1468fea85373c6c66349620618ee869383a

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_fil.dll

MD5 7c66526dc65de144f3444556c3dba7b8
SHA1 6721a1f45ac779e82eecc9a584bcf4bcee365940
SHA256 e622823096fc656f63d5a7bbdf3744745ef389c92ec1b804d3b874578e18c89d
SHA512 dbc803c593ae0b18fd989fdc5e9e6aee8f16b893ae8d17e9d88436e2cd8cae23d06e32e4c8a8bf67fc5311b6f2a184c4e6795fed6d15b3d766ef5affc8923e2f

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_fr.dll

MD5 64c47a66830992f0bdfd05036a290498
SHA1 88b1b8faa511ee9f4a0e944a0289db48a8680640
SHA256 a9b72fcb3bdb5e021b8d23b2de0caeca80ddc50420088b988a5b7503f2d7c961
SHA512 426546310c12aeb80d56e6b40973a5f4dffef72e14d1ac79e3f267e4df2a0022b89e08bba8ab2ffa24f90b0c035a009bed3066201e30fe961d84ed854e48f9c5

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_fa.dll

MD5 cbe3454843ce2f36201460e316af1404
SHA1 0883394c28cb60be8276cb690496318fcabea424
SHA256 c66c4024847d353e9985eb9b2f060b2d84f12cc77fb6479df5ffc55dbda97e59
SHA512 f39e660f3bfab288871d3ec40135c16d31c6eb1a84136e065b54ff306f6f8016a788c713d4d8e46ad62e459f9073d2307a6ed650919b2dd00577bbfd04e5bd73

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_fi.dll

MD5 d45f2d476ed78fa3e30f16e11c1c61ea
SHA1 8c8c5d5f77cd8764c4ca0c389daee89e658dfd5e
SHA256 acf42b90190110ccf30bcfb2626dd999a14e42a72a3983928cba98d44f0a72e2
SHA512 2a876e0313a03e75b837d43e9c5bb10fcec385fbb0638faa984ee4bb68b485b04d14c59cd4ed561aaa7f746975e459954e276e73fc3f5f4605ae7f333ce85f1b

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_et.dll

MD5 b78cba3088ecdc571412955742ea560b
SHA1 bc04cf9014cec5b9f240235b5ff0f29dbdb22926
SHA256 f0a4cfd96c85f2d98a3c9ecfadd41c0c139fdb20470c8004f4c112dd3d69e085
SHA512 04c8ab8e62017df63e411a49fb6218c341672f348cb9950b1f0d2b2a48016036f395b4568da70989f038e8e28efea65ddd284dfd490e93b6731d9e3e0e0813cf

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_eu.dll

MD5 a7e1f4f482522a647311735699bec186
SHA1 3b4b4b6e6a5e0c1981c62b6b33a0ca78f82b7bbd
SHA256 e5615c838a71b533b26d308509954907bcc0eb4032cdbaa3db621eede5e6bfa4
SHA512 22131600bbac8d9c2dab358e244ec85315a1aaebfc0fb62aaa1493c418c8832c3a6fbf24a6f8cf4704fdc4bc10a66c88839a719116b4a3d85264b7ad93c54d57

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_es.dll

MD5 9db7f66f9dc417ebba021bc45af5d34b
SHA1 6815318b05019f521d65f6046cf340ad88e40971
SHA256 e652159a75cbab76217ecbb4340020f277175838b316b32cf71e18d83da4a819
SHA512 943d8fc0d308c5ccd5ab068fc10e799b92465a22841ce700c636e7ae1c12995d99c0a93ab85c1ae27fefce869eabadbeafee0f2f5f010ad3b35fa4f748b54952

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_es-419.dll

MD5 28fefc59008ef0325682a0611f8dba70
SHA1 f528803c731c11d8d92c5660cb4125c26bb75265
SHA256 55a69ce2d6fc4109d16172ba6d9edb59dbadbc8af6746cc71dc4045aa549022d
SHA512 2ec71244303beac7d5ce0905001fe5b0fb996ad1d1c35e63eecd4d9b87751f0633a281554b3f0aa02ee44b8ceaad85a671ef6c34589055797912324e48cc23ed

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_el.dll

MD5 ac275b6e825c3bd87d96b52eac36c0f6
SHA1 29e537d81f5d997285b62cd2efea088c3284d18f
SHA256 223d2db0bc2cc82bda04a0a2cd2b7f6cb589e2fa5c0471a2d5eb04d2ffcfcfa0
SHA512 bba581412c4297c4daf245550a2656cdc2923f77158b171e0eacf6e933c174eac84580864813cf6d75d73d1a58e0caf46170aee3cee9d84dc468379252b16679

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_en-GB.dll

MD5 d749e093f263244d276b6ffcf4ef4b42
SHA1 69f024c769632cdbb019943552bac5281d4cbe05
SHA256 fd90699e7f29b6028a2e8e6f3ae82d26cdc6942bd39c4f07b221d87c5dbbfe1e
SHA512 48d51b006ce0cd903154fa03d17e76591db739c4bfb64243725d21d4aa17db57a852077be00b9a51815d09664d18f9e6ad61d9bc41b3d013ed24aaec8f477ad9

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_de.dll

MD5 aab01f0d7bdc51b190f27ce58701c1da
SHA1 1a21aabab0875651efd974100a81cda52c462997
SHA256 061a7cdaff9867ddb0bd3de2c0760d6919d8d2ca7c7f889ec2d32265d7e7a75c
SHA512 5edbda45205b61ac48ea6e874411bb1031989001539650de6e424528f72ec8071bd709c037c956450bb0558ee37d026c26fdb966efceb990ed1219f135b09e6e

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_da.dll

MD5 d34380d302b16eab40d5b63cfb4ed0fe
SHA1 1d3047119e353a55dc215666f2b7b69f0ede775b
SHA256 fd98159338d1f3b03814af31440d37d15ab183c1a230e6261fbb90e402f85d5f
SHA512 45ce58f4343755e392037a9c6fc301ad9392e280a72b9d4b6d328866fe26877b2988c39e05c4e7f1d5b046c0864714b897d35285e222fd668f0d71b7b10e6538

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_cy.dll

MD5 34d991980016595b803d212dc356d765
SHA1 e3a35df6488c3463c2a7adf89029e1dd8308f816
SHA256 252b6f9bf5a9cb59ad1c072e289cc9695c0040b363d4bfbcc9618a12df77d18e
SHA512 8a6cbcf812af37e3ead789fbec6cba9c4e1829dbeea6200f0abbdae15efd1eda38c3a2576e819d95ed2df0aafd2370480daa24a3fe6aeb8081a936d5e1f8d8ed

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_ca.dll

MD5 39551d8d284c108a17dc5f74a7084bb5
SHA1 6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884
SHA256 8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07
SHA512 6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_bs.dll

MD5 e338dccaa43962697db9f67e0265a3fc
SHA1 4c6c327efc12d21c4299df7b97bf2c45840e0d83
SHA256 99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04
SHA512 e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_bn-IN.dll

MD5 a94cf5e8b1708a43393263a33e739edd
SHA1 1068868bdc271a52aaae6f749028ed3170b09cce
SHA256 5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c
SHA512 920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_bn.dll

MD5 7dc58c4e27eaf84ae9984cff2cc16235
SHA1 3f53499ddc487658932a8c2bcf562ba32afd3bda
SHA256 e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98
SHA512 bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_bg.dll

MD5 8375b1b756b2a74a12def575351e6bbd
SHA1 802ec096425dc1cab723d4cf2fd1a868315d3727
SHA256 a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105
SHA512 aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_az.dll

MD5 7937c407ebe21170daf0975779f1aa49
SHA1 4c2a40e76209abd2492dfaaf65ef24de72291346
SHA256 5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9
SHA512 8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_ar.dll

MD5 570efe7aa117a1f98c7a682f8112cb6d
SHA1 536e7c49e24e9aa068a021a8f258e3e4e69fa64f
SHA256 e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01
SHA512 5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\msedgeupdateres_as.dll

MD5 a8d3210e34bf6f63a35590245c16bc1b
SHA1 f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693
SHA256 3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766
SHA512 6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\EdgeUpdate.dat

MD5 369bbc37cff290adb8963dc5e518b9b8
SHA1 de0ef569f7ef55032e4b18d3a03542cc2bbac191
SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
SHA512 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeComRegisterShellARM64.exe

MD5 7a160c6016922713345454265807f08d
SHA1 e36ee184edd449252eb2dfd3016d5b0d2edad3c6
SHA256 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9
SHA512 c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\NOTICE.TXT

MD5 6dd5bf0743f2366a0bdd37e302783bcd
SHA1 e5ff6e044c40c02b1fc78304804fe1f993fed2e6
SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
SHA512 f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e

C:\Program Files (x86)\Microsoft\Temp\EUB606.tmp\MicrosoftEdgeUpdateCore.exe

MD5 c044dcfa4d518df8fc9d4a161d49cece
SHA1 91bd4e933b22c010454fd6d3e3b042ab6e8b2149
SHA256 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2
SHA512 f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

MD5 e014e363ab82cffb0f168e69f3fa243c
SHA1 edbbaaee1d4fdcbbe2d74b10a7fe0a8f407e40e6
SHA256 08759f895ea68a667ff8588e02ab4ba69a9757f19af3087f9e27fb1d3cfad11d
SHA512 477f5425a7a658d38e1843481151ba3a2a4a186717033a3802993b33534671d68464d5d9475ee3a71dcf8881b00a709731a76221fe1526eddc12fad3b0f5ce77

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\jumpListCache\LtDQdtkWKSSZbmr6Cgmgow==.ico

MD5 b4f8f60bc7270b56ae3e6cff74b39d54
SHA1 30e8e3752e13a51cc26d89c0592b0bfd36934d38
SHA256 bcbff095e0e5ca2f74f0c26dc788c7c7cca8e87e2ab596ec9457448f1ec5d77c
SHA512 b3247daa5bdd9647e77e9303afc74f001cca6d24aa5ec81ab80cfaebf2f6fa0bdb720a74e78df8fca0c4ab3e8a79deedc989d22e695b59fd892e47482b1d20af

C:\Program Files\MsEdgeCrashpad\settings.dat

MD5 4094975577ae423c0af098ec3cfbd3d5
SHA1 260fe9666376dc4399f8760cffecaa5d751cfcd5
SHA256 fed1acd96712bc7fe422e74401b009b8d4a070f84405e7c27fa13e4d7cbfaae2
SHA512 263766f217b2c0acc1a5924dbfcf6d0bbb502295a7038be4c64b4e06a1ecaa7f4316dda0acab7adefdd55382287453c667db566e84505c3b68628df00c0208a3

C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.61\Installer\setup.exe

MD5 f9e45fe262a291c37f52e1baf1cbb75c
SHA1 2c3a47de71610e3ad80e34fa7d0af9690d56d8ea
SHA256 76974a5e0e00af7c5d759a30b04ec614e819a4fcbe418fb1312b0426b87d0b26
SHA512 a7ea36dc3c2322f5bdc97ed4c2cf4d1a6d8261f80ad774155e557127b0b3491aa6fa9bab14bc2f65d483bb9a3680ff0c8f8920b0920b3058e0aa5f992b22f94c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 4852433dc34a3ce68fba58e1b2489ba3
SHA1 ceccbf8f9f7028c9a5872d8a955c6881d0d84690
SHA256 64d8b13edfec33384a7f1ab7f2b55a83dfd5a34fd3c6e329c5b6382c24ad09c5
SHA512 23f574a6fa737bbc76689ecf21766248ad1a264c8155b3a1e4ada0aef7a6f066be608096a35c7e1e32b78e59971731280ef37f7033bce7da53eb48137de887ce

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 45ae7c20cf11c07028a04c1f0920a1dc
SHA1 17ef46790e2bbd150bf83062d69957540722ed65
SHA256 d89ae39972ef4671704a70f4c05c73cce5ab5cdfb03d4a177dc82bad668803b5
SHA512 df9b6b86768aabc795a0398ca4a0cc8444dab5591c8cf95989b612ed3f981f9db4cce9baf702a9c5e31b599a4c3e4ff126391906a5229e882d7e088ece4c1baa

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 50ae3b49e056be6f8bcbe30c3c4f5d4d
SHA1 3d1a31d2a30b805f46938f24697d313ff7d776dc
SHA256 4c1860e21df5a53725af910920973efd98f0752902e2e9b0304740e90e263f86
SHA512 f3b309f98d4be87c462c6d5cb07e621ad72580735340f32b6c53fbe50b3ebcad34c147fe9dd270aa0b560e79decf1e3c4a6010ca307866e199fced32b63bf974

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\10337

MD5 c2c545645cc03df21ecb341f323ba62f
SHA1 debd62a30c284018d7f8acdc97c560a4cbccffd0
SHA256 014e31f6e408767bf8949b5b01b6183b2fd1cc875cc130269f87d35f338d0c25
SHA512 f090654410f42da8baac95cdc5402b1074938f5d4558363ff38f89708f1ca6394e6a9b991cb8db6fdb218e7ad83c8cc17308f4a6d61f8931a85e7e022df80fc0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\7C08D58A862BE1E1E0347F90F7D2B2436A081F57

MD5 14bfea99f0d8f5161ce3656974886c81
SHA1 5bcab23ee7ac6e6f8a5a1aee2c7d6ec1c7d49309
SHA256 414222dd93a3f7a6e98ae28abcb917250ecf452c239ed51e17697027e8445d77
SHA512 d700ae117b6cf5a8e1f6440ea1a3244a403a12b92cdbcd279a99ea847673d6e3a04daf69cb1fed06a191299cc1d440bea84f1f8010e84cb51ac4e325e4fb0221

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\8920

MD5 90e305bcb5653eb67b4fcbfe133199ce
SHA1 059a86d6f0746eaf6a5a109db1845a6483bfeaa2
SHA256 508acee3a605e7518d2f7144c5f0f4dfc77dce6a7d14e8641b30e8fcf5f27525
SHA512 fd564420b1124577efa73452ecdd173e0c592c5bd5acd9a8144cca3d9cb8d2bf4abbf4f20f9b84bc0dd2edd1fff5439dba6a09ea6902b7388b1b0b4260a9783b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 0db47dcfd4894e5cf5c928706fd582e8
SHA1 ea35c6cb397b64852626e9613ac1db972204391e
SHA256 10cfca55c38f5d10e54ba376a45aaf03a19e7cea7441fa522046b4a1c10fe7fe
SHA512 f7a3c0e234a09fc29245472a6ad3560ce0b54857df375e789b5881ead4cf7216dacdb1ee473660345a59e56449606b4715596ebbd61ba023bff5517ca2622da1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\13403

MD5 017a4105ac70de36e59f18653d148baf
SHA1 2c3e9986275465a5fa8af93f39448dab77a2372a
SHA256 80447b575e55bc38ccc6ba625909aea116c2285e958b1576d95ff55c763631ff
SHA512 d09e634b8bb9c2a08625e66281623c3b82dbf6c51eaf9de8d9c3087a45d6f31a590fe239009087752624093b5918c79093ad073bccf08878a9ae8255ac03cb45

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\23200

MD5 48c4eff7f5299320d2155a6581b1ed8b
SHA1 8a32e1a731934a63066db362d784e18464390f3d
SHA256 03734029bead38b9991370fc56fe3a1413b2358775befb25709f811accba5722
SHA512 5ae26b433a6702566b2b79078eec007fae3106f38e4dc9e8ba25f0f44a272c8848d59e033e2d0c86d41fccccb19f128803cbbca744c652ab448db104fa5265e6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 47a7dfc83fb858dc4f06346277741161
SHA1 3c76ac53c789edf0bdbe44afd7d816b0ba9e31b6
SHA256 2459412f5d4672bab8466d906a540cec378586face5a8c3b2accfe329a114ba9
SHA512 092b26a9c635629737ec2f60fd2155710e48f6e9b40b19730fa2a65a32ef2633d6b548e82f70454646232c37b043f36e51d0e92033b4adeaf26cbbb6faf6dbef

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\1589254D0776F2CEE773849283F0C99B0273CD16

MD5 ba86dd2ce097ad7f23225770f7f42a71
SHA1 44f9ce2ecfc13a6ed1ffd8359a34f74422f3f3a3
SHA256 205cb08ee46757f3d4be5ff5825e039dbdb545806e476077b1ae2bfe08d398ec
SHA512 9a7c16c96b4d4ba4dbd3a05e703e86c4151752d339cbc49ce19c07c0f765118ebfebd6b76d2bea4807ef17f5b9a907af4d675f4afdbd9d20476c345b6b57c15c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\61BB0FA9756698B3EBF308E787FA1F275AB80717

MD5 ef11ac985f4605f3dabcd30dad3a135d
SHA1 3c153a8091f8801dee07c9ee2d4567eaa761ae75
SHA256 b59aec0b417ab8f30941e85a686b3ba477f31e6c46b45c3cd6893de27403ea7f
SHA512 3dfaf0d009448541563591ab9f760b92dcd3b148b425745c7e7e10dbed89bda7e37157b2a759ed339a24c357116fb9ccf951cb5fec67cfc0094a05ddb52aab6d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\05A2E07584DF16249EC5998A97E4B2DD70839CAE

MD5 f515863129b64528a52c67c5a07dc780
SHA1 1ae726866da1917f778ba2482f4943144e4f0193
SHA256 16a190d75bcf2973366190dd5c7392777c03505b171d3e3a0a77ab5e41ab44dc
SHA512 ba368d6023d868e048a2bff29c073cf622ce07f176a38672e1d98ddd53ed8b1103e441613c8f871ede38b310451883717b4821270d37c596b923cebc2955d485

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 ed4156dca1e97c08d8fe1595fe9a4612
SHA1 50bb2171a38174dab08d1edf1a15d830ce1fd1e1
SHA256 a6c0450176bb8a4ef685148c99aa7fee89fdea25b17fba11b7c88bda8c7c61fd
SHA512 fd7079e6a87538a38a08842086629445a445e8fcfdbe4a327585e0748b014fe92a43cbbf03caecfa3102cbc04865060b63f521bcf3b20cc0fbc75a9e66eb30d9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\30647

MD5 609035cc8be4bd90b4221fbb7e6c9c10
SHA1 a08d2dea305ef9d8716bc27e35b797b599668488
SHA256 23917201997b1cbbbe1237da47150228e550da269652b3c192506a6b4609d9cd
SHA512 a8591f8baf363733e05d354560b3bca452ea9ff4e6bc88fefe1e58d5dab2e589cdca4629f548c62ce2a77a17da8f68a8609b8d7080123adaf83eae46ce3693dd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\754E954A5087932D8E8670242CA2E87114EA26D9

MD5 8202e4dd5025e0c7fa9e299a0872d03c
SHA1 f9eb9b19648d22b4f5774c2e220d4a55579ff73a
SHA256 753774b0f13eadc4683c2b2bd3edee8e0d30e478f7b31e37f5ae7ba01aea844f
SHA512 9509ea6600e56f4c7a1b713e0811656004d4e9f157c31167b77e66bc09811dae016e294772cf7dcabe7714fc83c95a7347ebf3455f3d6d66232eea1328effbb7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\C645D47E441EA67C848E83D888C11AB056090831

MD5 4d03308af904b5621c1468f744c638dc
SHA1 1c0a2e0d0e44eec40a663631eaa10d13b2489440
SHA256 c02fd85e52bb7f3b1bc445e91c012d4e3847566f66e886af366740020591b897
SHA512 c1736f22ccc343e077c4e816050b4eb3a53fc0ad7e8588eb3fb9a6c570fe1778e53118f5ded0aa19759afc389826c5ca52cbb97d9e19d81368d24d860060dc66

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 54d7948a40a64c388c679bf295c1a58d
SHA1 49e5a4b83070fa5d74ef7ac76619e8420aee3fa7
SHA256 12da642d12d667a1f5a524384e00aa9c99da4acb95d9c9694ac5de407d29cc0f
SHA512 0fd4aa4e3e65fee2f4a9affff97269612fe9fb9f10e8918cb066f48edca1605fa41853f3a56482003fb80ed80c1ddf702cc9c95ebca52b01a4309933e3f9b5cf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\jumpListCache\0Vn1sQHBg2sCo8DWcDuibg==.ico

MD5 42ed60b3ba4df36716ca7633794b1735
SHA1 c33aa40eed3608369e964e22c935d640e38aa768
SHA256 6574e6e55f56eca704a090bf08d0d4175a93a5353ea08f8722f7c985a39a52c8
SHA512 4247460a97a43ce20d536fdd11d534b450b075c3c28cd69fc00c48bdf7de1507edb99bef811d4c61bed10f64e4c788ee4bdc58c7c72d3bd160b9b4bd696e3013

C:\Users\Admin\Downloads\BonziKill.FUX64y0t.exe.part

MD5 02de8ba54081c709bfd74ffeaff8fc48
SHA1 f6ca91c930752a784a1303e7c384f52c818be10c
SHA256 9e62b4c476a408327165ee389bb197dd34948cd55963296947650a14adba9319
SHA512 b2e76b7c0bd9f5602bbe67c401866b5e748b97d7a497fcb5ca277ffd8f1c47b5dd13539ef602fd1a9422931893e5cda9b8bcfc4f884fc5055329501b56a6e35e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 d35592072f25254301aa126950d5bd0b
SHA1 4c951eb4847b1f61642110841db4265c81252e53
SHA256 2b52886ced9a1c30967b202ec623a560bd2afedc5f12dbff31acfa3e9ce8331d
SHA512 77a219ec92d30efc310b2206e3fbf9463fd796b4246d89fd52fc399e118e42ac309239917b90abde5384a4c53d31cd7ca234e6c4f578e6cb713d41b07d254a95

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\default\https+++www.roblox.com\ls\usage

MD5 0eecab070c77593b907bfa5243303388
SHA1 4593cff5b754f43ad823495b4152a7cc66c0c11e
SHA256 5637801771397afdf662e86906c674affa08e2427575532d0cbf2ee29f8b4ffe
SHA512 81aeb46a069e7c02c8c73b4daeb18f234e0cc6297dfa171def61d6192204f3ba96a99fb987abf88b2cced818cd6e86519fff445463b3907f9eecbf1537dc4fa8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 cb8651861ec123793353e036b1a9ee21
SHA1 d50acef589075d376f8beda640ffd4cac7827076
SHA256 b1adc6872762dabe971c7fbdea90a4be9331a8ad07e499b0ce466a7f65bb4cb3
SHA512 9ce0becfef0b79e9d26e499af82a2d76a287913a24937bcaac6e8afadfe9f7257fbfcae0c238e7cbd6990f5b7b82e1861cff1a6d4d2bdd576ef2a43ea8fa9251

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore.jsonlz4

MD5 192443c08b8bc42791adb7c26efcb23e
SHA1 a8293ef95d2c779e2619949653493b4fa6f408cf
SHA256 d0eba631268310b27c060ad03048e0f6dd560a8cd560d9a1435f88e73b13fcf3
SHA512 23c37a1afe82e08d6baec3993dde2b5e1866f15792468f7a50d7876a43eb258b256fde7b358b21639a7269d9247cc90036ad6dc69796dc0517f3c471d1d77977

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\prefs-1.js

MD5 e67e2aed208a8a687fbb8a6da8d3803d
SHA1 c9f13fabc4274955829eb94e9426466a38fb681a
SHA256 9aa0d60c064d65f1f0ed4f103a74bc58659147ac14e17d76e81172a5ec082f5d
SHA512 cee9c2d836b6c9a47ed72bf19031cc760d054caba889fc3af554977be39a978855dcdce726781b92147f7b9e061c5513e619ff21dce61ce588a0f993882edeac

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}\1.3.187.41\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe

MD5 a9ad77a4111f44c157a1a37bb29fd2b9
SHA1 f1348bcbc950532ac2b48b18acd91533f3ac0be2
SHA256 200a59abdeb32cc4d2cec4079be205f18b5f45bae42acb7940151f9780569889
SHA512 68f58a15ef5ba5d49d8476bee4a488e9a721f703a645ddd29148915d555ca2eb451635c3b762e5a0f786d69bb5cba9bffac3eeee196f1ec7ad669e2d729fe898

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

C:\bonzi\BonziBuddy_original.exe

MD5 ff8e3bef2b1c444e59d21d5291c81d96
SHA1 a838dc974a49dc0fad824cedcf794c8c9651d410
SHA256 50a65ffcb48cb6ba99ccf79d855696cfdfb28ff21d0f71666c8fae9dfedf878e
SHA512 b872737dd5f1f114785bf948fa8018aed228be99dafd07bf850bab1a4772564f59ed2cc60faedbf3eaf84f12908e1ed2bf07a526484edc6ded0692ce575e4927

memory/7432-12952-0x0000000000400000-0x000000000046F000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 d09ff1f638dd851c9241964054569973
SHA1 18303687efe45f691959150335217557657ebff3
SHA256 f8e12a221e1d5c7a7854dd56b54b6db65d8ca3260274a6a2a3135e01f3a0b18a
SHA512 56241d593f0710b4e3e6fbd0d12de1a7433b2bf4ebc81bcfc8139c9caac33269023c8f9a7af26a16df0fa8f0ecef4db9461028f9bdd8ea1f975dd9cc7996dca1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ebb35b71b42235836aec7bb196c4916f
SHA1 2e2595c0a9242660c75396d99421d013800acf5c
SHA256 679b1968fdc50d2970cb671eeca53cac5382784fcba825062061863e8d7be869
SHA512 b103ae189bf08246a0c273ee36f58be643e2322cba5d9d40a938a75b64553c8688856ccfd877ef08992d4690a2999c8c4897067b2d3093fd2031ad39a34dabe8

C:\Users\Admin\AppData\Local\Temp\MASH0001.TMP

MD5 7eccc259af24ba7a5a0638562536068d
SHA1 acd3e0fc2e10dfb2e57efa608a60297efb32e54e
SHA256 2e682f6b72fe7f464da31c01cb4769c8fcf556957405740140394282d4fe0db7
SHA512 7fc719c7c0499efc6eff2594e1e46390a421db4ae6c36c5f8822cccca52cedf6be4d9282e49db246a9533fcb929a70cd4e7a25e09984f69db2c922f6c4ba6f8e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f9692f6430d57886f5850c28db9ae815
SHA1 0b3a32f6893a2bff1373c3705fbbef5ce8d0fcaa
SHA256 3625d7ef767a9c2c8b7f8d60f790ca2cd3593410a1fdc03ab9769b6fbaf240b2
SHA512 8c3e3e732268bc034ebef1eb6d78dc966b6853c3306669b5c7cd22f1dff7d97ca5c7e2573dd88e6e4a936444dad46b3b884b93c4847b60d4344013b26f6d62e5

memory/7432-12984-0x0000000000400000-0x000000000046F000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 23eebcbbc5035f83b09fc82741e0e748
SHA1 caf8e88c518d93d80707ce1bbcbf269cab1000d0
SHA256 cc8c100d231b08644dbac968a9a47793387a32da2764f4f78b28a6238ee6ad9d
SHA512 4c3dbcdcf96f0cdf610d06178038ce2f7458c23b4ec2177d9df747edab3995cb7826e6a42431d0e2de46366c7d51b325d80864f61da9a07a52911587209d6670

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004

MD5 87c2b09a983584b04a63f3ff44064d64
SHA1 8796d5ef1ad1196309ef582cecef3ab95db27043
SHA256 d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0
SHA512 df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4ad6565004e40dbd0b700c54ca70b736
SHA1 3466a9261b90855326585d08948fd21e6dd87423
SHA256 51695c4449983d2da3a6d4c85b1cd01b35cf84afb08870007a62a27bf2931782
SHA512 e2ee25a8656c45d97440331fad922292e0adb29becf3721ec2dcf070ab8a9de6e98d9cc31c91ee17a786f13b456d2bc18038eb3b067cf2bd10ec855341bfd141

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e60ea3db56991e1b012127aabe8df5a2
SHA1 4cee0e438ba0d7861199f147711f1231ebbb1e13
SHA256 839d72143f4f0027f419b1f69b9e630eccada7f6fc0b325c4c5f9902c1879ae3
SHA512 1a08f7342a54ea470a4f7be29c5cfeb1f5861b1a03f80714a0c054679684a7aa6aaec7cc76f7f105f56efd3a7679e1f7c3a4da9fd3ab03a2505dadd3d8edf5ca

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 8dbcf2482e5e5219c000090fa3622300
SHA1 9fdb19c89242259ee77452302b8ba3e981574fb9
SHA256 5cedcb40a3503b3dc5b18639601a1e36e1907fccc428e1745dc948f0af67adc2
SHA512 7710c63dc9c3b3fc9606966fbaebe17de28c66bb87fc1d386a35576ecb46b4c3e53ac00858019089a94cc4972dff30ff67896d29cb4082b48647eff903aef562

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3715027c0897cccb3f77b949870af551
SHA1 55ab6cb027f8b0d0a00269f2fdd9b26a50e94796
SHA256 4037fe06fdece4c122531dd9868d458d038e83237da7ebcf41552a80fcff3ce9
SHA512 131c1fd79f5dd066a29a2858b11ed807e0615a98dd3ef46c945c0b6f2c315f0efdfb472e7b7c4d3048b878c2e3b2ccbb2affbf79e9f6a317fd2330cf48812af0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 12cacac5b74b0d2655c655c70ae83042
SHA1 c80199596a6b65a9bb934229abc37d72e9b84b50
SHA256 a1f85cd2f5f662b8b2a6781cbb75fd12b0042823d84e81ed4538b8a1cc7d4fe2
SHA512 462bb0fc69f3439fac45a54016643d2a5cab41d46dc1c5f23ddb3a5a5e964d5d259cca6a938513e09349634aa2cf5cdb2eed020e518caf201570fd1c21aca116

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 ae1bccd6831ebfe5ad03b482ee266e4f
SHA1 01f4179f48f1af383b275d7ee338dd160b6f558a
SHA256 1b11047e738f76c94c9d15ee981ec46b286a54def1a7852ca1ade7f908988649
SHA512 baf7ff6747f30e542c254f46a9678b9dbf42312933962c391b79eca6fcb615e4ba9283c00f554d6021e594f18c087899bc9b5362c41c0d6f862bba7fb9f83038

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe6710da.TMP

MD5 18eb45222e4309f7d3dab6f54d0b2778
SHA1 f195d1f158f52ea472ba3c0feb48b02b22d1ea4e
SHA256 6838995c858b66e0325452ebfcb4eddcbdb7aac2cedc8b4b3bc875dd31668de5
SHA512 128a0274ec3815684ca03ea3a75a188bcaa8392081242d42523abd738c8b2b21afa743b518ed3a37c33e1086101a230540da80050bea55030ca117486856deb7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 439be88b47e54492709c4c3d69880ee2
SHA1 85ad1eb79a7659c4bddcd97c0a97e78ee927e49b
SHA256 3ec52b47de1f9d60c2284cef59539e04d3eb38830ba59210a5f76a0ebab38564
SHA512 f73c153cb28ee75ead19fee769d0991fb9be9980b458b29d5bb5a033c427892a603c26b4e84b5515a267e59a8572dc53c1ce5ecfbc5c3478b22a617e81591cfc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 42afbaa7d9b9724715cfb6b732ffbd4c
SHA1 904aacd4176fbfc7b88ceb10f0b77b8152efea40
SHA256 1f3af18d5841849fb452f43cb7d74df0c7020c726ce9546b7ab4c4509adad970
SHA512 f89b60517b96c27464ab1b06eb6249021c6143b700a2c630e762caced44872d76c7eaf4d7c3b64e586ca7e543aa62f52fd7ac257938e07220464999b429adc52

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 1762f69db0b34b07ce52626598364d19
SHA1 bddd9cf38074941e461b40c66cab3f0766985a46
SHA256 d6c14001062095e685e7e6c7ca573d82d3fff062efdc79ea81037a119a7eab47
SHA512 9f22f0ce340f050b61be68c5e743a4cab99b6ebf84bdc9b03d21ed8d44dcf1d7ffac5308198b345ac33eca4578e9a9963ae890a641be6ed587f912b0b57ee5cd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe675edb.TMP

MD5 5a8207bb564e0ce2ac561ed8ffb5278a
SHA1 02d4a64fa43bf1ae72d757fa8dce1a56dcb319ff
SHA256 6ae6710e027a6904b45490b5a1259074c4ede647c866130967ca30f26f34c5d2
SHA512 7efb7f59e571fe4a2c168117970754fd11595eb2502252fc17afcfa8ffc1da5d5955debc774ad5baea23b0f0a5c3053c1bbc8c66ec8ae4f30551a3d07ecd6a19

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 057447183428117c979d18f5dc8feadc
SHA1 0e8acdd9a352c9e3dba6e4cf25a297b9d5dd2d0d
SHA256 0440be9d5bcdd2c8123b7c5d8cdd903d879f5380a369f97dee447ba601b75593
SHA512 e344ec6ef4aee1e8d0d04b1691fad2b4eedcacead906176142f67b1c2753c232f1a9463be3904c0d9cae6450b558f2c833d6912c577763167f94067d4f11a4a6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.dropbox.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 be1a554450f11344cbb4e6cbc23e5dce
SHA1 9cd064fcade8534a1af214041f021f690a3151f9
SHA256 024df19c81619563e246f9030eb0a85ee7a6d755d882ab52c5182d60dedf37f4
SHA512 524f949435353bc27965db69de021a9ba0abd7d04d75f8e80b539f83777b025b83e319e9f74f4c03f737e2c82a552f6b71e33445759e2f8f430a1b52c840a811

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 438cc45eb044953ea8b0d25fb5671c25
SHA1 8973935bbaed6a72eb5a73c6227e8391dbfd9a56
SHA256 f1c19903b24d4ffdb76dac5bc9f36cbc7216bbe42c5a6adeaf4b2ae588b56b2e
SHA512 8093a259e13ec3e68a7a61e48d79c3f1c022523498d5df7af88c79a53f093b4885d8f89b43d48e3dd281ed9febb83ef943e63f7a1c8cceec3d711ff75829601a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 be0b1d2bcffb625a3dd0f199e0d526b9
SHA1 fb3e60e2ca098a5b51015d0b7ad7cab7c69b0160
SHA256 f97a39442732446aaed6f24c0581fbd306a31fc6fc8e5c6442018f6b63bfc65f
SHA512 823c161913ef9856cd21596fe30b4199b74adc6978275c6a9c57a09b06a4085225fe0f1cf4127ef1cbe1f78a82f6891364a2e4282719404392b800ab44cad8bd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d

MD5 200cd59ecd27d6747d525cf933aae56c
SHA1 8f955527e5a43b96861b9d5d450de693e92e8b40
SHA256 da0f26a52f95585a84691188652b1529705fd7996913d07035e28313ae9d715c
SHA512 b7f7022c9de36743b7fe0d855d52def6b152860cc442f50ffca7f7142749c88661710456c26783219e08fc65711dee66775d792cdd929ee6fe6a048e1630c8e2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ec7d3b1a53107fb4eb05eb3c966b05d6
SHA1 4572ac6bd6f1e1fb23adc707cb6c0a62cd966475
SHA256 9294cf21467434a4fefc4bca5be5b5f4e3b55a8113c401606b76d2b28891a50d
SHA512 ca38337ad38f6eb3dff3c9abb6e8f7b02419061d6fd8598363a2dd01590f4406b1b552d01401bd8f991c99485b44cc56f2712fa376e8aa1ad4c05499a2e91986

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c

MD5 431eaf269d703ab11ba0b8f1059186d9
SHA1 bd72ac2d9af7a155f752d8639f84c2287a161161
SHA256 2ce19d669e06b335024e9b50b58fdf34403f573152b419c4fbebb9a9667a4bcb
SHA512 aab094923429de3f6fee82ceccfae9c444a1e8fa33816b40899223128889eecc9bfd5429f71f707c666844084b4203af871b7ac4244bb264377ca1e195d9366c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b

MD5 ff50af2c4abb5d64e799f7b0f516df98
SHA1 afcf39d2cf6e0293ae9fc5c5e30905fc8bff4b55
SHA256 6379584fce6616cd4962f018dc1a31059e70b21ddf9efb6e7b6b6e356bbe3066
SHA512 915cef4f1b1f0afe9a7c1806d0ebbd997a9a4ecb6fd6c82843979ed11b7b16e5a92b210f91ceb7637b893f77345362e4baf86703999705340b91f2d3d4f7f1ac

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e

MD5 ec6d10f1b29e9cae1066a984009ca2d8
SHA1 f7a95a05b09b1d35c434028d3cb0b3f955b200fb
SHA256 6a4c50c84f4d95353d132501891954985e15fd74da8a98f93b220d75d446341c
SHA512 cda4edc6d714f800a35389b25ffcc035daed4030ea56a3aca43635bff905c3d139bfe6a08fa7736cc4f95123c4d57ba5584608c3f7021e54372cc2dfa274c339

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023

MD5 c44aa31f02a69235b8725a0c93939078
SHA1 6cd5f39af2a7a8c91407616fa87c6feca6b3de8b
SHA256 310bcbef68709cc8e61e11d865cb444cf05242b8bec6a8e9bee387b72e75db9f
SHA512 265143f9656cb282dfe2491ac98319858ff80ad293eaecd3cc5a0a83687657f7731055ea0748766ab418627c7da4b918552a849c406ae41211794438bcb1611b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b

MD5 9dbad55c793828f59663d20819aad1c5
SHA1 8f726923e8a743c0e6c9d9e8c064b6047ff641a6
SHA256 c0cf59aadf474bb9d4d02d4d606b6b362204e90046a73c4a76b2ac3789be1d94
SHA512 98355decaaa29fd0c7cd572d5095251394d0f81e05112c678b742c8f688546632e8b4685eb75389d7848ac42c8914c8472c4ef4c6a524fba11df111baf3eda7f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028

MD5 54d0e3b7a94a7bc6f2876b16478fff8d
SHA1 ce66c29200a1685730145eebc030a5f60dda7646
SHA256 4d9f99cfb3a7714e4553206471d0e0260dc829cc84943d32b86dd9c970a95797
SHA512 a01cc8fb5ed324f09424e6ee9dc9eb8c2147aefe046f16849181ea8a05343ebb34707b477d7789221d68b51f47fba60691009d35db6ff68fcb3afd7b2aa67f7b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021

MD5 39a0ed5b709a44701a01fd992fce3d05
SHA1 dce42798fe10a307b9d49a4f66306340755ed56c
SHA256 78e88367473423a1883ffc6592ffaf8a5d479a02d606aa31e594acbab6ec9a24
SHA512 abc19395c903b6ba94c475c18c7701a829e89cb6e8f81a3ac8c5c0847b179ce1e7c875b9884f41b49250967286ceb162bf51ab4cbc8d1a62bdefe1bdd15c1dd6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020

MD5 3f82bc5a06a08bcc5f1b84db6d0acd48
SHA1 c0b0108c54468f6b2ff63df7d34a51efddcd2c74
SHA256 c525d3dcdcb4be51517f706cbedbff1e0aca7acb34c9e43ba98019aa1f310aac
SHA512 8483a6f84588eb9dec7d83fe809c58e70fd1890f8c7297c98a3b267d7364c5e2da88a98756110d1c13adfdd0b23ddbd83e93b2294df38f00b20eeaf7f243b83c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000022

MD5 b827589948719fd259812380cca54675
SHA1 c43bda716733b3df706b879046d63564034e5ac2
SHA256 8e433bba11df631b330e6f8e35f35a77d32b2de49f23b40378c741b4bbd89c1a
SHA512 aa1b0677717b351dda5365bd22362bce1ed63c120b8f69718a4b4b8a35b3fc6c76dbeb1b729ca0918df88900b85df546036ada035699ed0123305a9982872731

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a

MD5 3d50107d069f2f2acb85f642408eaed9
SHA1 6f3febc0240c0100c715679a8df54739e2f0ce64
SHA256 1766d4b7a2e34a76d78da2f77921e5825cab320ba4aae45145721d0490a4b551
SHA512 0ff70e96e75d9d381af9856500d684f9eb5a52bbde4d1a74697fcecc5e83a679b93d8e322ae8f2868923df085affd7ab3d10f622541ca0b0abff4682ffa7c8d5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c

MD5 2dd74a49acffeea973e239ffd527e6e7
SHA1 eaf8db2da8750022f152cf2181cfd6849c1b7555
SHA256 cbf32d87d2e3630b729a3ee9db1423fe4020bd8dc7f4c81cf9d80338e4244ddc
SHA512 fc5b2aee7b16d10ae4d3bb318c0e41609183a3d5f580d02d4c3b2f1e8f458f5f3947c79bde31de8c3d6b63ba6d646e6df036cba08b7d025817793fe72be2a9db

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d

MD5 e0933f00b6331024f45e567b8ede8438
SHA1 d7851ef32a16e64e11ac00b1aca6810a32917782
SHA256 ed48dc4952ad79db2c33a9fb3b0db4c4f7e96a79957628953aff409473b77269
SHA512 91c41201eae818ec6524e93044f1847fa9de1ed5d4d367904d81fd662d65a1d080079ee16f7eb71fa594fbdca63c6a581dc9eb460e927c9f7764361d2475ebd3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002f

MD5 cc3dd76ff872b583a75cd8c67ee60859
SHA1 858095b915c51ed893a038d65bd3bdc868eb0acd
SHA256 6e869ef0c1cc76fb998d5c8bd0c23a0edd01b0565688c531b0d327eb56a6d7bc
SHA512 fbda5d36fcf3f8491aabffd8ceed4e993ba86fb864513e1298d467bc7dc897e1a3e3d6385ca789248b3052e2422ac71e1e44fd671dd991ce8555cf02f0765e65

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032

MD5 8bb7d6aa8ce78e6a9a7c14b88066e165
SHA1 8a013fbd6535919611826665498d7701ecf316f4
SHA256 77563159e000e077f3e7f509dbe3318f5a66effcdf07d48a75f2986b0f5a4435
SHA512 530ac3ec8040ccd5ac92a37c70e6bb7cb9ab9647345fe9812cfdb07caa48406a9905425604c4bf73f995f24eeff997d292570340746574d6c5496753d2e33393

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4edd06a34bdc0e011ff44538de3a37d8
SHA1 41a8f0b22c7608cfe96b034fc768e6e86de6cf11
SHA256 cf7f4fb8fea4f06b6a17b069d6eb5d97d16a15b988cd87cd400c636e8da98f39
SHA512 acdceab73481d727f5444e2b084145440245398544da6114f55a3b53ed9f61ee30d8466a91252f1adc24c50e72bcef2fb9c54fe95f357a63a907997364a242a1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1468f4adb581f8c5f6b5d0e4b23b5dfb
SHA1 b148dc48ee4cc8df1ccebcf7d773481ef2077048
SHA256 be073da162901114177eab95ca62ab4004413ff863b0a9f8b665d51d46b43499
SHA512 ceb6a1363c49dc1b57fa5dddf50dfcc8c52530452ff1d0aa071a10693d2b517c3383b5a938c1aae77093ad6eecc091b7750831e78fc36bc3ed0f74c0b2b678e9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 675cb66bf44402292c9f513e881cfb31
SHA1 d386b8b985974dbcc333a5b4c4d6b249a7ba649a
SHA256 d34eda46ca4c4455ea9ab8434b3306eabebe0fe1eb4742d10d0d7e3294e31025
SHA512 9891cdfc97ffdb629392f22423daa9026265bf38db0728263a3ce41e2357a25e50577cf81ca79570915dd0fe4e43facdfd97b3165e3fdd80b4d6d3c910aa4c06

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 d480ee3fdc9d8d356049ab1067d6ff29
SHA1 e01df72cb63f623b6fd250de0ee6b6b3dab918ab
SHA256 51305b4f61a716d9f3cf425e7480e3de76fb471067b7115769f66b1ab28d6636
SHA512 2bc8d100e349da11eeeef39cfa0ceaeb31f56ee370342f65588d61caccb815126177de43395b4a1852cac4f11efd3d62c25aa260a709ce3439dda660da0ca22e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 52984692a7f6b75958bd87302be41950
SHA1 7c1e18405426d8cb6d1d469b9b0d3ca4318ee2d6
SHA256 46438709dcaf08f50988a1d9a8969bc65d9a4d2a00b8886b96b0b99167203bcf
SHA512 edb740abbf6a21cdd7931cbc8ceecb841117e1af1084db947d2a006a210be378388ddbd9333cadb6efa881de6ec7c66351a92b511da0f02abb8a067e59d5dbb6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 6c0f284a83b1ba7b2e852dcf954b86e3
SHA1 1de21a6dc989234929d994e4a9af6a468ad1fe35
SHA256 b8dafa180f313925040c43a99ed75df8ef20e95e49f7e5598be1fa1647318cf8
SHA512 d21b65b9dfed80b670cf4c4048f366019f45f8549d2858173bceddb745e31bb90eee87bca6c1c8751a2f95f1d667e34fd8174b8290d1f9c4bb2c31449ecb36a4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d853d3f261d4539b1f9b296b623fe89b
SHA1 c83f6278789462c2a1d822f3e85cb6dc50583a5b
SHA256 8ccba5b64dfc86f46868dc67f05c2f383c09d37278a73e31ef4ddc77b6319650
SHA512 170f20c76fb558b175b87dbad56c3936f5d8db861281fb1d2672c2d911013c6a64b36e052aee1fa3b6be9f817bc9abf2e0e28ede55120c014b0cabf87053b006

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 db70abad5e003a135ab3fdf3ad860d1a
SHA1 2c9b87706422646298830efee4a662396ecabe4f
SHA256 aa1305cde5df21dcbe7d295f053057289e75d06890d215e5d01a4f6ef6e17b75
SHA512 1af5d8f35eb04b477a977a39b16b518219ce015f23acd80e5eeac73166b70eb21a50b65d0a465e8ea5595117dcb7506f03621dad8e2393b67174eb93eda16190

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6f204e1cb80034b06f03b4178c9b2403
SHA1 89c14f4f56ee439d01bbc9e382d91ca9348e6909
SHA256 af9fdef7372f790cdd635b5b33083261ca6b7905693667b1854861d565e6aedf
SHA512 45109410e0ca0ce87337fb1a6eae905d5c78b06ac0a17bfaa00f682c5c865d3a82f5683ce068f0aba1ef355b2168f56b5b157e0186d7d7fd79f20bb18b277d8a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 1795559a2084c178dc9a615b83eab4fc
SHA1 28acd7ece51e7fc9e14c68c363f40d65b53e6ec4
SHA256 74ec0663f74a3ed8caee79552927b751474921c6e346b886b7d1c9f31a2f8a28
SHA512 2c7f88fcf66227a7cb4509764ed5fe1b856040f7b86c252886865c7dfc919f43da69a032a53be00168b5b214406a84ac68a72f9f339cff9e57d346b1aeb569ad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

MD5 c75c47b5d6f25329e5c682ba8bb18059
SHA1 4d806dea02f14cb38ed520772d5db5f596210cff
SHA256 c1dff0c4034159c6236b089d0e70b2c2786f17c8cb93bf258acc83c3fefa08e9
SHA512 19863238ed03c216e42a0bc999d6b8791b679e48ab86a846837395645fdbb1ac9a94f65fe63610ccc8793f47189ff5329d66914c804da4f93a8226d5cd0bc31b

C:\Program Files (x86)\BellCraft.com\MASH\MASH.exe

MD5 a01e6daa64e1408a0da357c9520fe23f
SHA1 8ce8943df98d7892d135747ea8fc1e9361d3558f
SHA256 bfb5038b834416ddccfb6dc94d42daba460b96b664135b830a99a68a252186b7
SHA512 4a6a1fabca4db87883af2576a71295f7a8a7eaf66e29a3a22c0c57a23f67414efbab4eacb3c311a2b4394c77cc9a83399ea5a6603789eda4951876449527383e

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT20.INF

MD5 e4a499b9e1fe33991dbcfb4e926c8821
SHA1 951d4750b05ea6a63951a7667566467d01cb2d42
SHA256 49e6b848f5a708d161f795157333d7e1c7103455a2f47f50895683ef6a1abe4d
SHA512 a291bb986293197a16f75b2473297286525ac5674c08a92c87b5cc1f0f2e62254ea27d626b30898e7857281bdb502f188c365311c99bda5c2dd76da0c82c554a

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGTCTL15.TLB

MD5 f1656b80eaae5e5201dcbfbcd3523691
SHA1 6f93d71c210eb59416e31f12e4cc6a0da48de85b
SHA256 3f8adc1e332dd5c252bbcf92bf6079b38a74d360d94979169206db34e6a24cd2
SHA512 e9c216b9725bd419414155cfdd917f998aa41c463bc46a39e0c025aa030bc02a60c28ac00d03643c24472ffe20b8bbb5447c1a55ff07db3a41d6118b647a0003

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT0409.DLL

MD5 0cbf0f4c9e54d12d34cd1a772ba799e1
SHA1 40e55eb54394d17d2d11ca0089b84e97c19634a7
SHA256 6b0b57e5b27d901f4f106b236c58d0b2551b384531a8f3dad6c06ed4261424b1
SHA512 bfdb6e8387ffbba3b07869cb3e1c8ca0b2d3336aa474bd19a35e4e3a3a90427e49b4b45c09d8873d9954d0f42b525ed18070b949c6047f4e4cdb096f9c5ae5d5

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGT0409.HLP

MD5 466d35e6a22924dd846a043bc7dd94b8
SHA1 35e5b7439e3d49cb9dc57e7ef895a3cd8d80fb10
SHA256 e4ccf06706e68621bb69add3dd88fed82d30ad8778a55907d33f6d093ac16801
SHA512 23b64ed68a8f1df4d942b5a08a6b6296ec5499a13bb48536e8426d9795771dbcef253be738bf6dc7158a5815f8dcc65feb92fadf89ea8054544bb54fc83aa247

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\MSLWVTTS.DLL

MD5 316999655fef30c52c3854751c663996
SHA1 a7862202c3b075bdeb91c5e04fe5ff71907dae59
SHA256 ea4ca740cd60d2c88280ff8115bf354876478ef27e9e676d8b66601b4e900ba0
SHA512 5555673e9863127749fc240f09cf3fb46e2019b459ad198ba1dc356ba321c41e4295b6b2e2d67079421d7e6d2fb33542b81b0c7dae812fe8e1a87ded044edd44

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGTINST.INF

MD5 b127d9187c6dbb1b948053c7c9a6811f
SHA1 b3073c8cad22c87dd9b8f76b6ffd0c4d0a2010d9
SHA256 bd1295d19d010d4866c9d6d87877913eee69e279d4d089e5756ba285f3424e00
SHA512 88e447dd4db40e852d77016cfd24e09063490456c1426a779d33d8a06124569e26597bb1e46a3a2bbf78d9bffee46402c41f0ceb44970d92c69002880ddc0476

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTPSH.DLL

MD5 b4ac608ebf5a8fdefa2d635e83b7c0e8
SHA1 d92a2861d5d1eb67ab434ff2bd0a11029b3bd9a9
SHA256 8414dfe399813b7426c235ba1e625bd2b5635c8140da0d0cfc947f6565fe415f
SHA512 2c42daade24c3ff01c551a223ee183301518357990a9cb2cc2dd7bf411b7059ff8e0bf1d1aee2d268eca58db25902a8048050bdb3cb48ae8be1e4c2631e3d9b4

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTSR.DLL

MD5 9fafb9d0591f2be4c2a846f63d82d301
SHA1 1df97aa4f3722b6695eac457e207a76a6b7457be
SHA256 e78e74c24d468284639faf9dcfdba855f3e4f00b2f26db6b2c491fa51da8916d
SHA512 ac0d97833beec2010f79cb1fbdb370d3a812042957f4643657e15eed714b9117c18339c737d3fd95011f873cda46ae195a5a67ae40ff2a5bcbee54d1007f110a

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTANM.DLL

MD5 48c00a7493b28139cbf197ccc8d1f9ed
SHA1 a25243b06d4bb83f66b7cd738e79fccf9a02b33b
SHA256 905cb1a15eccaa9b79926ee7cfe3629a6f1c6b24bdd6cea9ccb9ebc9eaa92ff7
SHA512 c0b0a410ded92adc24c0f347a57d37e7465e50310011a9d636c5224d91fbc5d103920ab5ef86f29168e325b189d2f74659f153595df10eef3a9d348bb595d830

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTMPX.DLL

MD5 4fbbaac42cf2ecb83543f262973d07c0
SHA1 ab1b302d7cce10443dfc14a2eba528a0431e1718
SHA256 6550582e41fc53b8a7ccdf9ac603216937c6ff2a28e9538610adb7e67d782ab5
SHA512 4146999b4bec85bcd2774ac242cb50797134e5180a3b3df627106cdfa28f61aeea75a7530094a9b408bc9699572cae8cf998108bde51b57a6690d44f0b34b69e

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTSVR.EXE

MD5 5c91bf20fe3594b81052d131db798575
SHA1 eab3a7a678528b5b2c60d65b61e475f1b2f45baa
SHA256 e8ce546196b6878a8c34da863a6c8a7e34af18fb9b509d4d36763734efa2d175
SHA512 face50db7025e0eb2e67c4f8ec272413d13491f7438287664593636e3c7e3accaef76c3003a299a1c5873d388b618da9eaede5a675c91f4c1f570b640ac605d6

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTDP2.DLL

MD5 a334bbf5f5a19b3bdb5b7f1703363981
SHA1 6cb50b15c0e7d9401364c0fafeef65774f5d1a2c
SHA256 c33beaba130f8b740dddb9980fe9012f9322ac6e94f36a6aa6086851c51b98de
SHA512 1fa170f643054c0957ed1257c4d7778976c59748670afa877d625aaa006325404bc17c41b47be2906dd3f1e229870d54eb7aba4a412de5adedbd5387e24abf46

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTDPV.DLL

MD5 7c5aefb11e797129c9e90f279fbdf71b
SHA1 cb9d9cbfbebb5aed6810a4e424a295c27520576e
SHA256 394a17150b8774e507b8f368c2c248c10fce50fc43184b744e771f0e79ecafed
SHA512 df59a30704d62fa2d598a5824aa04b4b4298f6192a01d93d437b46c4f907c90a1bad357199c51a62beb87cd724a30af55a619baef9ecf2cba032c5290938022a

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTCTL.DLL

MD5 237e13b95ab37d0141cf0bc585b8db94
SHA1 102c6164c21de1f3e0b7d487dd5dc4c5249e0994
SHA256 d19b6b7c57bcee7239526339e683f62d9c2f9690947d0a446001377f0b56103a
SHA512 9d0a68a806be25d2eeedba8be1acc2542d44ecd8ba4d9d123543d0f7c4732e1e490bad31cad830f788c81395f6b21d5a277c0bed251c9854440a662ac36ac4cb

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\ADVPACK.DLL

MD5 81e5c8596a7e4e98117f5c5143293020
SHA1 45b7fe0989e2df1b4dfd227f8f3b73b6b7df9081
SHA256 7d126ed85df9705ec4f38bd52a73b621cf64dd87a3e8f9429a569f3f82f74004
SHA512 05b1e9eef13f7c140eb21f6dcb705ee3aaafabe94857aa86252afa4844de231815078a72e63d43725f6074aa5fefe765feb93a6b9cd510ee067291526bb95ec6

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\W95INF16.DLL

MD5 7210d5407a2d2f52e851604666403024
SHA1 242fde2a7c6a3eff245f06813a2e1bdcaa9f16d9
SHA256 337d2fb5252fc532b7bf67476b5979d158ca2ac589e49c6810e2e1afebe296af
SHA512 1755a26fa018429aea00ebcc786bb41b0d6c4d26d56cd3b88d886b0c0773d863094797334e72d770635ed29b98d4c8c7f0ec717a23a22adef705a1ccf46b3f68

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\W95INF32.DLL

MD5 4be7661c89897eaa9b28dae290c3922f
SHA1 4c9d25195093fea7c139167f0c5a40e13f3000f2
SHA256 e5e9f7c8dbd47134815e155ed1c7b261805eda6fddea6fa4ea78e0e4fb4f7fb5
SHA512 2035b0d35a5b72f5ea5d5d0d959e8c36fc7ac37def40fa8653c45a49434cbe5e1c73aaf144cbfbefc5f832e362b63d00fc3157ca8a1627c3c1494c13a308fc7f

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.inf

MD5 0a250bb34cfa851e3dd1804251c93f25
SHA1 c10e47a593c37dbb7226f65ad490ff65d9c73a34
SHA256 85189df1c141ef5d86c93b1142e65bf03db126d12d24e18b93dd4cc9f3e438ae
SHA512 8e056f4aa718221afab91c4307ff87db611faa51149310d990db296f979842d57c0653cb23d53fea54a69c99c4e5087a2eb37daa794ba62e6f08a8da41255795

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.dll

MD5 ed98e67fa8cc190aad0757cd620e6b77
SHA1 0317b10cdb8ac080ba2919e2c04058f1b6f2f94d
SHA256 e0beb19c3536561f603474e3d5e3c3dff341745d317bc4d1463e2abf182bb18d
SHA512 ec9c3a71ca9324644d4a2d458e9ba86f90deb9137d0a35793e0932c2aa297877ed7f1ab75729fda96690914e047f1336f100b6809cbc7a33baa1391ed588d7f0

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\andmoipa.ttf

MD5 c3e8aeabd1b692a9a6c5246f8dcaa7c9
SHA1 4567ea5044a3cef9cb803210a70866d83535ed31
SHA256 38ae07eeb7909bda291d302848b8fe5f11849cf0d597f0e5b300bfed465aed4e
SHA512 f74218681bd9d526b68876331b22080f30507898b6a6ebdf173490ca84b696f06f4c97f894cb6052e926b1eee4b28264db1ead28f3bc9f627b4569c1ddcd2d3e

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tv_enua.hlp

MD5 80d09149ca264c93e7d810aac6411d1d
SHA1 96e8ddc1d257097991f9cc9aaf38c77add3d6118
SHA256 382d745e10944b507a8d9c69ae2e4affd4acf045729a19ac143fa8d9613ccb42
SHA512 8813303cd6559e2cc726921838293377e84f9b5902603dac69d93e217ff3153b82b241d51d15808641b5c4fb99613b83912e9deda9d787b4c8ccfbd6afa56bc9

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\tvenuax.dll

MD5 1587bf2e99abeeae856f33bf98d3512e
SHA1 aa0f2a25fa5fc9edb4124e9aa906a52eb787bea9
SHA256 c9106198ecbd3a9cab8c2feff07f16d6bb1adfa19550148fc96076f0f28a37b0
SHA512 43161c65f2838aa0e8a9be5f3f73d4a6c78ad8605a6503aae16147a73f63fe985b17c17aedc3a4d0010d5216e04800d749b2625182acc84b905c344f0409765a

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\Msvcp50.dll

MD5 497fd4a8f5c4fcdaaac1f761a92a366a
SHA1 81617006e93f8a171b2c47581c1d67fac463dc93
SHA256 91cd76f9fa3b25008decb12c005c194bdf66c8d6526a954de7051bec9aae462a
SHA512 73d11a309d8f1a6624520a0bf56d539cb07adee6d46f2049a86919f5ce3556dc031437f797e3296311fe780a8a11a1a37b4a404de337d009e9ed961f75664a25

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\Msvcirt.dll

MD5 e7cd26405293ee866fefdd715fc8b5e5
SHA1 6326412d0ea86add8355c76f09dfc5e7942f9c11
SHA256 647f7534aaaedffa93534e4cb9b24bfcf91524828ff0364d88973be58139e255
SHA512 1114c5f275ecebd5be330aa53ba24d2e7d38fc20bb3bdfa1b872288783ea87a7464d2ab032b542989dee6263499e4e93ca378f9a7d2260aebccbba7fe7f53999

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\SPEECH.INF

MD5 8275c5f0d81e4bdaecaff93426f37ee1
SHA1 8b96c3b0eb9fe86a2ef8c6bde9095c4af26f6c40
SHA256 a8b41751f021ec02a909a7eef1d2a99a22bb583c525f4d2c91631f999faa5887
SHA512 53e8bca5dbe83551fd61d7f5819763bb013aca9b5952a7cfc8e5d5efe33ee6448749352e004616f2ba28c8383e3907663147208b2a1ff5d235cbb0f117646d2d

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\SPEECH.CPL

MD5 5b6a9e6737531dfe95dcb29208d4b639
SHA1 cc812359c46383d4c489a76825af8c6d01964463
SHA256 9f58d16004d0b59392908cacab9e41a638af4a05026af17127ed9792840390a2
SHA512 84b82dcd51bb4db6b5b4bc907182350125ef1accf9b5167f133025ceed8ebddea563b17e749fa9105fe0b89765907ed297071a183f3e8b8ec31ef4a4672796cc

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\AGENTSR.DLL

MD5 1233b28631b64f0b2fe25e340d2c7646
SHA1 e785e3efbd6805af5a6c6c9192854d5b4250825c
SHA256 9ca0974c15e7f554ebea658aea15fa9739f801137e96348deecb53132effd812
SHA512 beca42ff5da8c4a07fcd4304166dd1f6d815a6ef3a3e51948c2566c2653d20fa3d669701e040ce38e0ceb89860394f82f205ed88de7fbe50c359dc3869f7a19f

C:\Windows\Temp\OLD9846.tmp

MD5 b161767acba91b2ad503524165fff9b8
SHA1 d3c39c5820b34eb2eddbc92cced7ea60aa28dd27
SHA256 6276ac775e6b1fa9f428cddc459a61ffff545b33705cb3e7e059771da942ae2d
SHA512 eb74f76db115f5fd8b1eac358494526eb8cc9a184e234c737f2ffb61953a8d8e69083887d6605667b5a8e5e1ed0c8c50bf596ccf7b73ac52ecc9150b76420403

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\SPCHCPL.HLP

MD5 4add01eaf6d9fa8c21bc2ec6e473a878
SHA1 3b72793b1d34aa2292025fa94f59546fc030a8e9
SHA256 e04674b406f2ac0acb4080ddf2aa131251cec70cbafbc9b4796d5ee180597a48
SHA512 8304244576ead82539c3a0660dd66b8c3d0e5cb9a2a1c32a6a9df8e3c8e6b359d0ab5210c86813aee838ae26e3661d0f3e494b8ab45343c1f9a9141da7ca2b1e

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\SPCHAPI.INF

MD5 b00f1393bf87560945b6b38425998a79
SHA1 2fe00a212f952f7e4a53d53880ac90ef8d8c32e5
SHA256 9e7e55b61d3619729829b263e0af2320223c7eda74eadb2644c63d728405c86b
SHA512 854222c8d68ac0d556fe0fb4e1bbcdccde963bf1fe82c1689dd86439a519d8afb5c9db7bca4939fbde011dd4c84c09610b779adc64a18f0caaa57783ce29c7ef

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\SPEECH.DLL

MD5 898fc91bf6424f629e933273b6e46ffd
SHA1 2c777a8cb7f6e9a469f6d6486c98e70414949acd
SHA256 171d545ca7d10188875fcf103b664be2195996bbed2bd4dacfa8cfe827f1a441
SHA512 de7815a04cbddcff2c2ebef4c6d441936314924f6bdce3b3fb4a8bd4b62b761c7dbb3b99a12deb45b23b186f42a431d67b43fb9950f3d447ee9f721bf6cf6ffc

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\SPCHTEL.DLL

MD5 c546b50be180b4f7810fd78c7fe8433f
SHA1 d7b071eaff8d0498724c1e779731db51e41c900c
SHA256 ea6b0454ac40794ce46a6fd8fd244179cfe76293b18cdb52f02b372dc0f64d1d
SHA512 34ef3830a489510b42dbe0b084d3e688f7558ad2f806e344b760d5e25744763792ca52a664c312a47417cf629a74ddec302f47eed813e76316ae2e5aaaf6612d

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\VCMD.EXE

MD5 367351856db877b6c659dc42dbc89df0
SHA1 6725fba6e42487929f75c59fddf44c8d090a50e5
SHA256 6b2c21142bbb3050101606f05956a60dbe04f971bd8034d918731f8e9450cd35
SHA512 2c5ea481d64203751fa059bbf54e17a826df8a89d73d923dc4c5a68a0c25687cc3d74e511cd740eb801c6210c18a51bf268d3dfb9648a83eed137bd384640634

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\VCAUTO.TLB

MD5 695b08aa62b0dd9031fafcc1bb2a16d6
SHA1 1b151114b4f1fff8b3ddac92f4e8b3de2cc02ff3
SHA256 0e74c1dcbcb38daeb9d505b94f74b32ad8d37e8a26ef4022d46999eb3727720d
SHA512 f0a816783fe19a740c50cef76f5747ba19f86fbb41ee95d53c234f0bdb1e28e7d9badf55fef6e7e8e1b9d1d656ef5c4f5d59baa418fe6968e42a083963b3f128

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\VTXTAUTO.TLB

MD5 283c7d582752fc0c025421fca7b7e1d0
SHA1 ee6149b8023ec61b18b098ec3e37648c610c51a3
SHA256 544b33cf240a425cccc910269c68b99b411b2374571ab8af51a490f9cc277f77
SHA512 844a6689000afc5fa724e1e1fbd4e4efc6ba6f67a4c5d2ef88c0c963feb5f9cbc62779affc11c318bef4b049a77d6818b0b2f8fd0c85cd14e6ae7414885b482f

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\VCMSHL.DLL

MD5 2f8c18e8e067f6b84bf8c6c482862a70
SHA1 1c350c5a4674115cb8ba5620ec61fbebcd8fe974
SHA256 437ae2139661f2fb5fd97b34ee751521db477ee8c3454c920c5480020aaf94f8
SHA512 1a5a4d6064cfa35106c865661249d1023ab777b1c216c34dc0e86df435338cf1f8d8589fb567d34956e71a607db4aa8ce43039f42d5fa3ddd0c68506064588e5

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\SPEECH.HLP

MD5 a7db03e26dd567b3ec5804d5064c738c
SHA1 37abaf849e1cbc0eacd545c19e7ad81d947c113a
SHA256 56dbafcfa4a628fcd20e49bf169115bafe596104f8dd51d2aac8d7cabb452c3a
SHA512 d7f033695ac098a07f6d7cd00f0bee86bd581d3ab9b8f4b5073337fcb1277b5a49a99ea7d65819587ce2d807e0652c7ea0d98524f1cc934be64776c25d2daee5

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\SPEECH.CNT

MD5 4653630ff6f8405f6d26000802e638ac
SHA1 3e6978815d5e0465c7ec557a2da4c253fe89427d
SHA256 51d0efea836528cb137914a6dd77f049cf0457245fdfd608c3936605adb11c57
SHA512 961db65e440dd831f2b490d4c80f306047e65cc0ef6f1c921a732b89a11b289b84e8556d4711ab9af0821cb01f4cb84f8ceccd51865448f93a28f5a02678805d

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\XVOICE.DLL

MD5 06201e3ce75755e5eb4138a0a3e1925b
SHA1 05296f4e2774b9c3270365bf19304bf28e13fd51
SHA256 2bb50939fa7068791eea58c1fe6b112bcf5bb423ca55b9698411957a6f82d1b8
SHA512 0bdd01a7f42a3b6de0ca094d55d79437897e2f329751735097d2b7c4ed07792ba81c07544ec9a1f8c89a9472b57b3067dc204bd773721ab8398637949ae74d77

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\XLISTEN.DLL

MD5 ce7367a398dd2d0f77041316906114fb
SHA1 128bbde9b589b94f88ae9799043b3c05fdc73990
SHA256 287fec5f90f973a5aa4100bdbca1c9cbb0e242f908d218b975b9623ea25f9393
SHA512 a5151b5ff83ed72288e76e9f7637ea83746e61a2d9b13476cec6ddbb072c36b4c5929c40dd0c39a600338a9d8c4a5bebad304b0d29d9f4050a67ec2e894b8519

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\XCOMMAND.DLL

MD5 198c46362e9e7742f7efafd936624bed
SHA1 87b628c2a14a1c5897fd0281a682e9bdcb32bfcc
SHA256 0bd009b376f9ee2c2cea181adc0014c6c9ba91a4eaf7a3b98441a1696d302e89
SHA512 8c747cb697294df0daf092c8f139ffd18c92a098b1b709359739644029b5523d6b5d9ac80d11e1a4fe885ad13fe8a810222d6d609997b722ae0908421f9168a5

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\WRAPSAPI.DLL

MD5 8ccb0967e7371d64933fca913065789f
SHA1 63173da8984611aca496a253dba336af23aeb558
SHA256 8e0a80b885a73c8b62e87ab7f2a4b06a556b4db37a1fba9b37db2629f4c36a49
SHA512 9064f27f70b7a4e48dd9fac1954060fbdb5d5b35355f7be5c8a1221cc931ef20df7e4543b28e4416f86ed0c56b6a2a204d78db4c70e298bd29db5ccab2349d3a

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\XTEL.DLL

MD5 69c2b85b9db59f7ad8d04e6dbfbde511
SHA1 4547a87c80b3ff9e2a148f7c0822c2495240aa5c
SHA256 c32846fab920f5da84005aa169ff259c54a3b9504faabc52f2f53d240ed2418e
SHA512 e677a28a20b4b481d87cd2007dfc3d6f8b88dcd0cdf25df988a43b8480458a37c145ecb8a9ff48ae41586fb571230e79208ba7baf74dd27b78d93412fbe1ea11

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\VTEXT.DLL

MD5 c0a7306a302dd35145a37286dcfe6e04
SHA1 beba434997c5f60e988bd98928c13273996cb516
SHA256 b7a0114e8bd9875e98fa6c98215d3b4582e0d1eae9b799b912145e88095ee815
SHA512 ada43188cbf3d877ed055fc4a7395482a7a0adff6268880685b450f2f79c081aa8499f4770cd70c70c146002ac7fd516421202e275a71568872b879d0696d80a

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\VDICT.DLL

MD5 6dc843c473b68ea93202a32b6445c765
SHA1 3616292d1b84b9273471af195927d422d7fb9394
SHA256 08b35a07bf0dd5b231f7b25aa48476a7f78c9fca7a76c047103025d1a95952fd
SHA512 77623c61303b1f5fafb5d5af3e1d409af37ed3bd8c8c8bdf83206f2b5ba248553758696cf16835299f2267265689ce0fcb8564cf6823074257ce6964ac0bd517

C:\Users\Admin\AppData\Local\Temp\IXP001.TMP\MSVCRT.DLL

MD5 63da4613383ec70e047b4cd5c48f0b05
SHA1 578dd3ee844678c24c0831b6cc61a7dfae410bdc
SHA256 d4287ab5e4988dfe99bd54243d50dbe8744094f11fe5f9809a1a6fb9728c2124
SHA512 0fe7226cba7984f22367d03dafe568e8c0e44956a831fda93d4bd8ad9cbc9ee87dc03e4a56696c0bb0e5f8ec27a304c06cdb56c52d87263362359523f0a220a6

C:\bonzi\netscape\res\html\gopher-audio.gif

MD5 0c428f6883c912e150ce42c954b1bd36
SHA1 bcfcdc2946c6e8113083d57538de5713aa033e9a
SHA256 39c501d97b098136e6d3ef487ebc2a04b00b367af8bf04a16ce183064656dc2e
SHA512 d809489178b96dafd4a0c95edd56fac21625aabb2b7dc8260345eb96b9c3c7ecb1b18505746bed15581ebfa1265cf96c8aff3953dbc6d69d56b31fcf54db228c

C:\bonzi\netscape\res\table-remove-column-active.gif

MD5 cdeeb11aaefc565b7e2e6de6c5122adb
SHA1 67c0bbae8ac6dd12cb66621f3539fae6971d91e0
SHA256 1ba095a2abd0fd53efb16480111e199cb06cdc0f7205c73691ce83e302af1c03
SHA512 b123401eaf3d0407638c1e0f3a17d102987b769139d83f2af346d5f5c3a1f16a7aab17bd9c046583542d15fbdcf11d24206a4bdf62885bf87b2aca4ecacb77a9

C:\bonzi\netscape\res\table-remove-column-hover.gif

MD5 f6f8b831f31c8a4081e61403b258d944
SHA1 389daf6bcd0ba84a413dce4aff02ae9800eb1061
SHA256 f19d34969cef9b58e845f4f3630ec3df5a3cc054831f3880c1b68a34afa431d8
SHA512 01bb9b06927083d052b11a76ce147073bc25d7c95308d189dbc5598776f83ba26c22a260450f41c2d18e4c3ec86aa24719a90bdeae1417ebd4b1066b80c8fbab

C:\bonzi\netscape\res\table-remove-column.gif

MD5 90ef7ea72f363d421c608e37141f0e29
SHA1 891c963cb3c26628dcb18db5653eaca5275b0f9e
SHA256 dd6549e0c43acaa44bba371928f96cb02f71440149f6ae4d2e9ad4706cbe2231
SHA512 6a05229fd5e33ccab5b5e4f185395fb77447384c83b2d0ca5379106e3a06296a6e372acf8c3be7b7d1e8046d5b3002ec5c4c4c22ea186fdff828acd2aa5702d5

C:\Windows\msagent\agentanm.dll

MD5 c08f348afc0ecb15e248135a246521f9
SHA1 30ccf959611ca0b1f131beae65299b7129230d39
SHA256 6b187a95242a821ce1e800dd80cc7a91fdbee498900b2b7fa6225a273a43496c
SHA512 0392b7159ddb651a43fe0070a1ac243a86d941ee3b82c939009653c301e6d6f2ef86f16d2f2b092c488e002ca5fe02ea9a6a4f5db298ea74fd1a19c54976377f

C:\Windows\msagent\agentctl.dll

MD5 7ac2e4204766364617db08f2b3b13f32
SHA1 ebfa3608b0ccf6f169bacbc3d8cf574a84c07bb8
SHA256 6fcff6c942593c732c5acd0c56f5c4b686c2d8fb8247734693c4a8f9c63c2636
SHA512 6f3a015c77bfbb13ba1a1d7535fefe683604833db391a73510d97760b198195c0e577d8da40b33e51a7c50ef1e6fd501c6aa11169b29b82b19664b8a294c0bd7

C:\Windows\msagent\agentdp2.dll

MD5 44f0f16bf6eb8e1443ae788ca4eab04d
SHA1 0c80f7345466fdf0d69565cfb07cd7b60fd7726e
SHA256 5f6cee0baf6b35b36edf3f2eda0b720173e3d30c945b734749bd0dac861bc856
SHA512 192b9b198b248a2c1b33d7d47e3444d4645e9f657c90229974a2254a538e9f9dd8f36b814385db0c01c4aca67fcb3d7bf64baf6219a35270c426ac6755fdc92f

C:\Windows\msagent\agentdpv.dll

MD5 677e9dac87b67494de9a0e7bdbf77890
SHA1 5dd20234aaed92f8db592b4efbb6b9e40f4c3b39
SHA256 3f7b82d4031c4fd14ccd00bff04cf4be7f9fab842083106ac795957c50857108
SHA512 7d7403fad4c13f8c6799b7433f76c8e6ff1ea4cd25fac800b570a429e4a7a9204c94f428c83eb359c5a84dbb6baa00a9353ad5a7729e8d9a8bbf3f92371aea7e

C:\Windows\msagent\agentmpx.dll

MD5 4e91700e7bdcfb69946b078b3174031b
SHA1 f20c61a08a1d0186449ef4cfbff0a72e6b603cfd
SHA256 6aaab6093d5a2390b9a3ec83a820508bbb041c07e50b874c736228900db50bbc
SHA512 aa02128092e42c5cf27832bfc52dba7046a93cb528dbf1b07dd1ed90ca25738ba4106a8b6bb4f07c4581b402735b8741b10f14d27594e360238b82130177b125

C:\Windows\msagent\agentpsh.dll

MD5 909db998f06e949c59558f1d420a169b
SHA1 d113a11c32951b094ba4322c607b76515f5c9a29
SHA256 9f3e5be482329e337a7f2516723bfb8886de89d75f551543b3832bbc6a06f987
SHA512 7ad570f1b9b76b3270a69c3783c961561ec8d025975dd2820972a5c3af2206c990c5d04be10963aa0f2bcf91b155d50fa22e459ba6198f621667503a6a3422ae

C:\Windows\msagent\agentsvr.exe

MD5 f209365e10daeda9a084dc30a8096487
SHA1 7bfe1b5c9771ea232e96981fd79cb9d97c1e9203
SHA256 7a8fa00e694d713a128802221815fcb114999a392851c72c02a73564f1d95844
SHA512 d68b440b721df12b6586f246878311c2b89001515c6b71f1f6eaa351256b6148084de0259ec2c4e03aabb00dd6f5caf27be14b6b9f6b08911c6b99f3332865fb

C:\Windows\msagent\agtctl15.tlb

MD5 1968971f3fda39bda6239badf0234b8e
SHA1 02ba4512136d20202fd0d395e7ba13ecf535f460
SHA256 7bdbbe55f8f84cdec639e53a427229f73d507cee22a0c65a8bb2009e3807b4a2
SHA512 ecf7cae871bdd2d1dfd1cf9f28ca6f5a8598b8d6bce7e01a17451ec48af38c76c1e3e25316739e0197baaea7c7be7708ffb5ccaf879ac0de1617102decfbd26d

C:\Windows\msagent\chars\Genie.acs

MD5 22bdce2c97e773a7614b34d7c1720232
SHA1 ce5c3c484a9fa32f403e4f2fd2360fd6e38b8320
SHA256 87887195179efe07ad6ee7a44fafbc0fa6b96d0990ec604f5651951c647f8f9e
SHA512 83ad39d3f83754452d557061f0792fd8af85d358ee4d279b27f2dc3a3866193b88df4d21a645baa3ebcf2b81a348af461114c61aedad554e665fadc3cb26d07d

C:\Windows\msagent\intl\agt0409.dll

MD5 c537ade8e61db55bf89a84e682bbc6ab
SHA1 8180ce84f2228cf62609f30fff32a631932f82ee
SHA256 fb0dcabdb076b8f81a5416c107e5ced3222cce4a1c2135f0068e3410be15ad88
SHA512 c26c5a1b40270189184e83f7689f07b355939de227a3ce775e74c49f422ca5de97c508f004ed2cc7f828bffa27a953ff6a3fd38ddb112f9ebcd941675f122359

C:\Windows\msagent\mslwvtts.dll

MD5 e7b6aabcee0108d851c4da46ef088138
SHA1 eedfcc7f11145906df7955c9328bd8e2693eb53d
SHA256 e4eea18ab949eb224892f6dcb6b5cd73a32b981486860376eba82fa54171d467
SHA512 3a7f852eda6e9294a4a8921077164197c1e4e532eed0c3e918a3b781f7404fc9a166c2dd15796f5df19d368a249219306fb573ab2bec1e2dc1800c59c360dee8

C:\bonzi\midi.bat

MD5 27d92ebfadfabce5ab3fa8f842e6a2e8
SHA1 2fbbe766c10820436a34ac47dcc49909a52228ca
SHA256 2acb21881a9c9625c653dcf43a79c6f5fb81d65bec36d290f12e1f2a6a7763c7
SHA512 703031215f5b282d9e4889cbfe69a80098a9663d2fe056e05ef58a9f431fd38afc12f6165b1417173856c9bcd263ff92ec985d1624044df2fe64316b2a18c021

C:\bonzi\clippy.exe

MD5 038bf1f54a35164fedb79e2319e1bc49
SHA1 e92cdbb5bab92ea3f2d6b0f8f40a5b5df199c6a9
SHA256 655a8c2bed8e2d85b24525aa426e5d647f15ddfa156967d64f144c497e8c9665
SHA512 5928082b8fef2a491eb84ed4ba01c8428cd96425c8c2d433dc6ef80d9c0d4866bb9c20871c6d1268824e435f42526e4e1eb468fe451f0ef02710edb35c08f1c6

C:\bonzi\netscape\navigator.exe

MD5 ac9cdd36906387f84557acddb219f405
SHA1 2539465a3c843d70615810afc7bccb7a5929e096
SHA256 b529c4308f6c2ffefa022bb8b4c1456778f3a15bc0634cb109436a72fa5b3aff
SHA512 0204726358b6a319c1c3cae7f6c67e415139fe2c99169de6bcec6029bae3299601b8d01fe804410448863361680fc74e0939bc2d91ab14adb889623c592e4250

C:\Users\Admin\AppData\Roaming\Netscape\Navigator\Profiles\3y5iw7r6.default\search.rdf

MD5 939dcfba9fa92f86bcacb487df9dede1
SHA1 74c89a6c3bb22b3509d86e6e1d428b4a206a3c9c
SHA256 451c4475c6c285da263f91049224c87cf1567c4a7ad6236f3dd52290d65fab16
SHA512 e29940cba038a737335e1be397605930d207bdaebf7324b57da1f4894e4f416d665f33e9eb5adc7daabd166864271c4cc42e824479f2fc9e8c6ba48422a9106a

C:\Users\Admin\AppData\Roaming\Netscape\Navigator\Profiles\3y5iw7r6.default\xpti.dat

MD5 32ec167f2fa3f058e397bfd282052605
SHA1 f2d353cc55e5886a4b25cbaaa394b4e31e61ae46
SHA256 0bace31bdcb264d133fec70ed0be092c40c225a4621f9242545c7dafd992423b
SHA512 52fe825d07b8f6134e27038be5614bf904afa35731dabd9096b13d91673c018a9e8b85daa7e04cac4f9b8ac539121c1ea4d97f8ea05398783614f9756a0fea7e

C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML

MD5 7050d5ae8acfbe560fa11073fef8185d
SHA1 5bc38e77ff06785fe0aec5a345c4ccd15752560e
SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
SHA512 a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b

C:\Users\Admin\AppData\Roaming\Netscape\Navigator\Profiles\3y5iw7r6.default\prefs.js

MD5 99940ecd258d83b3355ab06fca0ffddb
SHA1 8d94cf5c736408c218bd7e483cea3357124d232f
SHA256 0a9bcb3c03867313418c0a1e97eed0f016a3c37ca56d16793df8df90e2f2a212
SHA512 057432f34bc2daf33eb2d4ea7a182521e4edb39c4229fccb875615d7d42d405a642e09974ee8d59d1bd018e328126ad8e6dab7d6a2b6ee6a77734c7785ea75b0

C:\Users\Admin\AppData\Roaming\Netscape\Navigator\Profiles\3y5iw7r6.default\mimeTypes.rdf

MD5 6047f42624d9930caa8d651fa94d28f1
SHA1 ebe84276ea707bf822cf6673064a2c3a6de1d22d
SHA256 c9aebb4219a0e86565a9399c14b70219ea4f066464102848010cefc425d72008
SHA512 f9b83f91669152a5ca10c95a9fdd502f6a4f7124c76c0fc1958c781d8b1e09e2b28f27705b390b31af23793ac31a709a6f29d5cb00595b0eb8fbeb33a50aafd9

C:\Users\Admin\AppData\Roaming\Netscape\Navigator\Profiles\3y5iw7r6.default\localstore.rdf

MD5 ea03cc19c2a3f622fa557cd8ea9da6eb
SHA1 2d8aee4b5cbfb5e1c08f2a4c9af2110bc1262b11
SHA256 f72301be0ecb4ce64e26fb8ee57cf4bea3dc8c8f3830f2fd0c91ae893ab5e592
SHA512 06f6f5bdb6609f0e72291ef82aaf55c035fa1fdc0906debbd7807549d6b61579428585b91ceadcb8aba511ef7a144c9636c6216afedd9753bd26e4e72f49c330

C:\Users\Admin\AppData\Roaming\Netscape\Navigator\Profiles\3y5iw7r6.default\chrome\userContent-example.css

MD5 d3765c7d2de5626529195007f4b7144a
SHA1 257aab5a68752a4de9375aa50809f3faa8b83b26
SHA256 10cd5c7d7fb1f6f1123893530099888822c6cb8a4a41584534c2d2eba38f5ba9
SHA512 ca8e87d31f8df9fa1f9c46a51aa2960b980949c4e5b360c82297a5ebb3a823f7c63fc8ada7db53f8e7fa25cf409d33d492f573e5ab061ec7659204577f4f0545

C:\Users\Admin\AppData\Roaming\Netscape\Navigator\Profiles\3y5iw7r6.default\chrome\userChrome-example.css

MD5 4788fdaa51b0a238cb21f5c2877ef06d
SHA1 866b51a43c76c9ee058f7b507791c86e5df8ba5c
SHA256 bbaa6de3247c9d5c9991f8d14b9022491578e603a6b2e2838e760a87c658a719
SHA512 3e628961b1d55dbb795cd08508a3578d2affd8dbcc68a4ba336e0d02dfe069a747cedb05d9093b52c36c21ec9f8e9123055e679caf6f13b2c6d600b4cc5be748

C:\Users\Admin\AppData\Roaming\Netscape\Navigator\Profiles\3y5iw7r6.default\bookmarks.html

MD5 7ad9a2201434f3b56abfe706bd79d78f
SHA1 e0730e32d407ebe1c716aeb85e4d46a86c9f1e29
SHA256 5720d23c8d052f33acbd334c0b4f4c4a4fef47638b77690f2228615682ee8a3f
SHA512 58c12594d2158608e7993ab11cf879d6587fda9b9ea8fc8d846db7d9f919d2e5f231c5ecbfce24c9c661a98e8db73b6f1eac775d74362b0f9677e45f93738e5c

C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

MD5 3f65a11947e7c8181bfa92ab3b4f5ca2
SHA1 0569c6bd09c628fced30a9c699d136fe29683b0a
SHA256 82948f95df8b114103eab0786e7c927cff1c9907368c86002565877d8588b6c8
SHA512 9e1d01bbbb12b634afb7cc0104e1e78552749b73f16c7319b592b4bcad38d76b07fff3629e2e78106222ce15c672e37cf1b36c74fc3332c54378f832c2984906

C:\Users\Admin\AppData\Local\Temp\tmp13062.WMC\allservices.xml

MD5 df03e65b8e082f24dab09c57bc9c6241
SHA1 6b0dacbf38744c9a381830e6a5dc4c71bd7cedbf
SHA256 155b9c588061c71832af329fafa5678835d9153b8fbb7592195ae953d0c455ba
SHA512 ef1cc8d27fbc5da5daab854c933d3914b84ee539d4d2f0126dc1a04a830c5599e39a923c80257653638b1b99b0073a7174cc164be5887181730883c752ba2f99

C:\Users\Admin\AppData\Local\Temp\tmp14421.WMC\serviceinfo.xml

MD5 d58da90d6dc51f97cb84dfbffe2b2300
SHA1 5f86b06b992a3146cb698a99932ead57a5ec4666
SHA256 93acdb79543d9248ca3fca661f3ac287e6004e4b3dafd79d4c4070794ffbf2ad
SHA512 7f1e95e5aa4c8a0e4c967135c78f22f4505f2a48bbc619924d0096bf4a94d469389b9e8488c12edacfba819517b8376546687d1145660ad1f49d8c20a744e636

C:\Users\Admin\AppData\Roaming\Netscape\Navigator\Profiles\3y5iw7r6.default\compreg.dat.tmp

MD5 9fe56f7b51467b9fdcb4a44e8c3c5961
SHA1 65640637fe73d712d24f2d354f1761df283c71b7
SHA256 d0d70ffbe6c66d1659c319a4dd11fb8eaef7405309782749bbac21c2538bbf2c
SHA512 ff0d5be0c4d55f1b2f06fbf2a90cebeb3585f70a5fe2bd475a5ea68c3ceedad2bfb1edabe40b85fd1ff4dd34cb413f46b358ebbdec834b9699522e6a3533c8ed

memory/1760-15881-0x0000000000400000-0x000000000046F000-memory.dmp

C:\bonzi\optimize.exe

MD5 5ffeadad118403d9496653dce94300cc
SHA1 c96574ebffd8fc82bc6b4bf40bf306b5602b38e7
SHA256 9bee3eb4c6544d6e69543440bec4f1f246fad1e17067bb6e8bfd6daac7ce475f
SHA512 76726b8a982c53cac62068a9b9531918b0230537e526f517634d14cf9459fde69303c83067cbee50b4005b9fe55108ace1a2eda980922c46925cfc8aabe59e3c

C:\bonzi\bob.exe

MD5 a7bec276ba3a17576158a93d459b5949
SHA1 63d6d8bd7b09afe34147dff20791deac219d71f7
SHA256 407c9900fe5190df594a3ec97b17fdea941fe801e644013544b52a6b5afc6b4b
SHA512 f93da09998f257965ebed2e8d95f3f4728bbb61ee9eac5e1f428841a23f69eb122d0fc43700165d9a6dc6f3cb22c8cfa8f5953768366697bd00b63964addac1c

C:\bonzi\start.bat

MD5 76c6bb82f14dd70654068aef25870133
SHA1 d53fa079e0024e75eb1fe30d18d66f67f7faebe9
SHA256 83cf30717ac40183d3df880f523d533e47f50c62537157322c0026a1318c8409
SHA512 0c5dce308439217b25362e7ae7bf61dff3339b73d49c8d649b1efa2921ddcde02698cab8d3441e6d41df78f3cf66a523256b929d5c85209e137e9947e29d3448

C:\bonzi\LimePro.exe

MD5 a6ba111c7ea638edac79ce34bb7a3de3
SHA1 903d1af04439189479bbaa8eee77f1503f1c54c2
SHA256 6c87657cfe2d7576333c2887d90f543c8fd4241e50f653b2c3a95efff2c4a268
SHA512 2b32ca91b42884cbd134d3471db74995321c1edcf1b2d579e1f0da4acbdf70ad08e05407bf93d711d966e2c3c5a0e25bc5338de5fd878a5bb0823010cdcdf9cf

memory/2432-16158-0x00000000025A0000-0x0000000002908000-memory.dmp

memory/2432-16161-0x0000000002080000-0x0000000002081000-memory.dmp

memory/2432-16160-0x00000000025A0000-0x0000000002908000-memory.dmp

memory/6128-16157-0x0000000000400000-0x0000000000768000-memory.dmp

memory/2432-16154-0x0000000002080000-0x0000000002081000-memory.dmp

memory/2432-16153-0x0000000002080000-0x0000000002081000-memory.dmp

C:\bonzi\nice.bat

MD5 5a179439c6002128ec64a3d68aff9508
SHA1 7ae90b60346cef19765a13080b77b4f32c30f3c3
SHA256 acd994492884677f79a440eddf52325feef9db71bc1c7ed7cbda03ea14cccf10
SHA512 f865f75e7037e6d26037ed082e6eb08f5aa62ec8d3ee9a5ba079b9c9f700c632a3278b6f42d79747e3787a2ab3b405a720b0668383d22929ba68b1fdf7f3735c

memory/6128-16269-0x0000000000400000-0x0000000000768000-memory.dmp

C:\bonzi\end.bat

MD5 83f1281124f33a31fa88e6ca1c7c503f
SHA1 35f7824bfa87a40083e57991f41abe01dbc6fd94
SHA256 e923637d148d84c9f99bf50e1b1ce8c262c3a40ee2a043d90650e7334cb862f6
SHA512 0d903d914b548969476f541794312febb72e56fb9a0dfc6e563d16ff2e8a74c6b13e184729d1f2254974e0625e032483470172b6cc270c416416fea93bac0906

C:\bonzi\boi.bat

MD5 e3fb07dba9803c1f174b725d2a05ea51
SHA1 98fa2129f93fd56493914d527f07f727c2b45ebe
SHA256 a7a14afe50ac26962f92bafbcadead48ca2e8fcb546cb259819bacd8156fae84
SHA512 ab3e817ad01e94ff8a6c58ca89d64a45077f0de49ea8a9e7059509cc7d694a005deb9043897caf060d0a78cfb8cce54ebdb9b3cb0653975771b23340d548dbfc

memory/6308-16422-0x0000000000400000-0x000000000046F000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\MASH0001.TMP

MD5 d45fffdeabda99f9e4013000427729c3
SHA1 ae1d44182df93fef21b177a3b29d95043557db11
SHA256 1afa525f7d7bfc80164bb733f41587804f180b4f54b81dfa72c7cc1a5debe9dd
SHA512 a85ff282e31ac0af26ebc0bfee4c00d0daa4f3b5548400ca2c65c2eca1f4dd2dbd0160a8ceff20ac61336b0295668c993e00b4b0163cd2b72e0ed3e32b49b9e9

C:\bonzi\StartBlueScreen.exe

MD5 b01ee228c4a61a5c06b01160790f9f7c
SHA1 e7cc238b6767401f6e3018d3f0acfe6d207450f8
SHA256 14e6ac84d824c0cf6ea8ebb5b3be10f8893449474096e59ff0fd878d49d0c160
SHA512 c849231c19590e61fbf15847af5062f817247f2bcd476700f1e1fa52dcafa5f0417cc01906b44c890be8cef9347e3c8f6b1594d750b1cebdd6a71256fed79140

memory/8220-16515-0x0000000000400000-0x0000000000409000-memory.dmp

memory/6308-16586-0x0000000000400000-0x000000000046F000-memory.dmp

memory/1760-16587-0x0000000000400000-0x000000000046F000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-18 14:08

Reported

2024-06-18 14:38

Platform

win10v2004-20240508-en

Max time kernel

1778s

Max time network

1787s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://roblox.com

Signatures

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4872 wrote to memory of 372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 920 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 920 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4872 wrote to memory of 3596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://roblox.com

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb533746f8,0x7ffb53374708,0x7ffb53374718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2172 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2752 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4724 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4724 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4820 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4456 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4160 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4216 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4804 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1284 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5288 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1392 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,15123840998486240753,10710991494915056400,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3624 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 roblox.com udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
US 8.8.4.4:53 google.com udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
US 8.8.4.4:53 google.com udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox.com udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 87f7abeb82600e1e640b843ad50fe0a1
SHA1 045bbada3f23fc59941bf7d0210fb160cb78ae87
SHA256 b35d6906050d90a81d23646f86c20a8f5d42f058ffc6436fb0a2b8bd71ee1262
SHA512 ea8e7f24ab823ad710ce079c86c40aa957353a00d2775732c23e31be88a10d212e974c4691279aa86016c4660f5795febf739a15207833df6ed964a9ed99d618

\??\pipe\LOCAL\crashpad_4872_JQHQOUEIZCSGHIMZ

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 f61fa5143fe872d1d8f1e9f8dc6544f9
SHA1 df44bab94d7388fb38c63085ec4db80cfc5eb009
SHA256 284a24b5b40860240db00ef3ae6a33c9fa8349ab5490a634e27b2c6e9a191c64
SHA512 971000784a6518bb39c5cf043292c7ab659162275470f5f6b632ea91a6bcae83bc80517ceb983dd5abfe8fb4e157344cb65c27e609a879eec00b33c5fad563a6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c7274ea10f8196c84e25bd84d61fbdd1
SHA1 4b178cd9c40e4f3279cecbdfe2a7f3f435bac681
SHA256 4a30664cff402be5679c20a619b6ba92fe8e860814e8f82bc7b2d1fab254befb
SHA512 f62d4a5a51b307853bf89227cd8c5fd4e718bcc655577906ac9251bdcd8d2d6f61ae5dc8aa32d4110b097f9b598a375f8229d57c410d9243a57ade13e51fbf71

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 e172b3b2be2892d5d1ccc52050f6a0e6
SHA1 f42249e7c51d10c0572f0f90a6232182800d2a8d
SHA256 46d26bcc64dd6e7d285b9914b58936c351265374c820b17a32894f0494e4169b
SHA512 b64d731d3dbe8daa7d00a0e32883c42c38ce3c0c820a3c2007930fb177ad391014176b47aaca1fb22a92c1ec3cc0ef559920ee0547fcdfc4e3264c6f000331a1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 93d7aab48b0d5e6bd090b784fdd12a63
SHA1 822555d3dbb41220106d3f26c777d462c39bbd91
SHA256 39408011424479fdb901f2aa1502657b226e9df44c9074b6a54df059c81db6c4
SHA512 bb42d3ba34a6815d56441b723234932c558d447171578aaacfa9a81127e0f6ee7673c692865c71a0d571d24a9eaa4a3768edcb1c0b37aad8d462492c9625c56d