Malware Analysis Report

2024-10-19 11:42

Sample ID 240701-y2fhda1drj
Target http://google.com
Tags
microsoft discovery persistence phishing privilege_escalation
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file http://google.com was found to be: Likely malicious.

Malicious Activity Summary

microsoft discovery persistence phishing privilege_escalation

Downloads MZ/PE file

Event Triggered Execution: Component Object Model Hijacking

Executes dropped EXE

Looks up external IP address via web service

Legitimate hosting services abused for malware hosting/C2

Enumerates connected drives

Checks installed software on the system

Detected potential entity reuse from brand microsoft.

Drops file in System32 directory

Drops file in Windows directory

Drops file in Program Files directory

Enumerates physical storage devices

Checks SCSI registry key(s)

NTFS ADS

Checks processor information in registry

Suspicious use of SetWindowsHookEx

Suspicious use of FindShellTrayWindow

Enumerates system info in registry

Modifies registry class

Suspicious use of WriteProcessMemory

Suspicious behavior: LoadsDriver

Modifies data under HKEY_USERS

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of SendNotifyMessage

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-07-01 20:16

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-07-01 20:16

Reported

2024-07-01 20:30

Platform

win10v2004-20240508-en

Max time kernel

597s

Max time network

796s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.com

Signatures

Downloads MZ/PE file

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\E: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\B: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\Downloads\XboxInstaller.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\Downloads\XboxInstaller.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A camo.githubusercontent.com N/A N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A api.ipify.org N/A N/A
N/A api.ipify.org N/A N/A

Detected potential entity reuse from brand microsoft.

phishing microsoft

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\System32\DriverStore\FileRepository\xvdd.inf_amd64_51b9ca7697b3e559\xvdd.inf C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{f09cb65b-7584-3148-88d7-462751ac6905}\SET49E3.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{f09cb65b-7584-3148-88d7-462751ac6905}\SET49E4.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\system32\xgameruntime.dll C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
File created C:\Windows\system32\gamingtcuihelpers.dll C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{c2b0f7e4-3f2c-8840-8efd-120cd7928bda}\SET46C6.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{c2b0f7e4-3f2c-8840-8efd-120cd7928bda}\SET46C8.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{f09cb65b-7584-3148-88d7-462751ac6905}\gameflt.cat C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\drvstore.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{f09cb65b-7584-3148-88d7-462751ac6905} C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\drvstore.tmp C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\system32\xgameruntime.dll C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
File created C:\Windows\system32\xgamecontrol.exe C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{c2b0f7e4-3f2c-8840-8efd-120cd7928bda}\SET46C8.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.sys C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834 C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\xvdd.inf_amd64_51b9ca7697b3e559\xvdd.cat C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{f09cb65b-7584-3148-88d7-462751ac6905}\SET49E4.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{f09cb65b-7584-3148-88d7-462751ac6905}\gameflt.inf C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.sys C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\system32\gameconfighelper.dll C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{c2b0f7e4-3f2c-8840-8efd-120cd7928bda}\xvdd.sys C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{f09cb65b-7584-3148-88d7-462751ac6905}\SET49E3.tmp C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{c2b0f7e4-3f2c-8840-8efd-120cd7928bda}\SET46C7.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{c2b0f7e4-3f2c-8840-8efd-120cd7928bda} C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{f09cb65b-7584-3148-88d7-462751ac6905}\SET49E5.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{f09cb65b-7584-3148-88d7-462751ac6905}\gameflt.sys C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\system32\gameplatformservices.dll C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
File created C:\Windows\system32\xgamehelper.exe C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
File created C:\Windows\system32\gamelaunchhelper.dll C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{c2b0f7e4-3f2c-8840-8efd-120cd7928bda}\SET46C6.tmp C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{f09cb65b-7584-3148-88d7-462751ac6905}\SET49E5.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.cat C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\system32\gamingservicesproxy_4.dll C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{c2b0f7e4-3f2c-8840-8efd-120cd7928bda}\SET46C7.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{c2b0f7e4-3f2c-8840-8efd-120cd7928bda}\xvdd.inf C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\xvdd.inf_amd64_51b9ca7697b3e559\xvdd.sys C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{c2b0f7e4-3f2c-8840-8efd-120cd7928bda}\xvdd.cat C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\drvstore.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.cat C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf C:\Windows\system32\DrvInst.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\7-Zip\Lang\ms.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\uz.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.dll C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\bg.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ga.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kk.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ku.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\zh-cn.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\descript.ion C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\az.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ka.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\7-zip.chm C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sl.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hr.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\id.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kaa.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ne.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ps.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\tk.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ext.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\io.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nn.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sq.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fa.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mng2.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\bn.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\el.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sr-spl.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\en.ttt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mn.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pl.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\eo.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hy.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fur.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kab.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mng.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mr.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pa-in.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\7-zip.dll C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\History.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\af.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pt-br.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\th.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\es.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fi.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\it.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ky.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nl.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sk.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\tt.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\et.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fy.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\7zCon.sfx C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\eu.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\br.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\cs.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sw.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\uz-cyrl.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\vi.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\gu.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nb.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sr-spc.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ug.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ko.txt C:\Users\Admin\Downloads\7z2407-x64.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\System32\pnputil.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\svchost.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\inf\oem3.inf C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\inf\oem4.inf C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\inf\oem3.inf C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\inf\oem4.inf C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\inf\oem4.inf C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
File opened for modification C:\Windows\inf\oem4.pnf C:\Windows\system32\DrvInst.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005 C:\Windows\System32\pnputil.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005\ C:\Windows\System32\pnputil.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0014 C:\Windows\System32\pnputil.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005 C:\Windows\System32\pnputil.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005 C:\Windows\System32\pnputil.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Phantom C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\System32\pnputil.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Phantom C:\Windows\System32\pnputil.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0014 C:\Windows\System32\pnputil.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005\ C:\Windows\System32\pnputil.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Phantom C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Phantom C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Phantom C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005 C:\Windows\System32\pnputil.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005\ C:\Windows\System32\pnputil.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom C:\Windows\System32\pnputil.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\System32\pnputil.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005\ C:\Windows\System32\pnputil.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Windows\System32\pnputil.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Phantom C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\System32\pnputil.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Phantom C:\Windows\System32\pnputil.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\WindowsApps\Microsoft.GamingApp_2406.1001.20.0_x64__8wekyb3d8bbwe\XboxPcApp.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\WindowsApps\Microsoft.GamingApp_2406.1001.20.0_x64__8wekyb3d8bbwe\XboxPcApp.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{BAEE68FB-2B54-4DE3-BECC-4FF62E89ABAF} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Windows\system32\DrvInst.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property\0018C00D7FCB5587 = 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 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Windows\system32\DrvInst.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8A27D3CE-19F3-4CE7-8E51-CBBDC8DEE291} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2F87250D-063D-4871-9399-3A603DFA0E04}\ProxyStubClsid32 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1A9D8E03-A524-4FC6-A566-2BC802898DFF}\ProxyStubClsid32 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE84CFB-60D0-48BD-A7B8-2EA8D5862282} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{a88bbde8-607c-507e-8b2f-ff422ef2c8a7}\ProxyStubClsid32 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7C9F4E14-D619-4905-8EBD-A0033A4FF485} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C5CC7CF6-8DE0-4A10-A12E-66A21F3C3EFC} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2F87250D-063D-4871-9399-3A603DFA0E04} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8856634F-2E22-481D-B9CA-EE876CBB5D26} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{53DA424D-280E-456F-BCD5-F2FD2232198C}\AppId = "{2964DB41-BAE4-4996-A0A0-D036BFFDC267}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{CC042A88-E160-44CD-B089-8C9E6F0AB42D}\ProxyStubClsid32\ = "{0ACBC224-E08F-4B42-8723-B451584D6969}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EA477743-75BC-472B-84ED-275E0D70F423}\ = "PackageInstallFeature" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{51CFF62E-8DBF-43FF-94EF-AC6236A248EF} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DEA131F9-B1B5-4CCD-A75C-B9072A4FAF9E}\ = "IUsersXalServerConnection" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3AC85287-EEC3-40C4-B86A-853CDCCC0559}\ProxyStubClsid32\ = "{0ACBC224-E08F-4B42-8723-B451584D6969}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D4DAB5B8-A025-4A72-84AC-7FE45C6E5456}\ProxyStubClsid32 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4D2BF08-1409-4918-9D84-32EE00E9178C}\ProxyStubClsid32 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{D0425B83-0B06-45F7-87BB-2824E4D6DA9E}\AppId = "{2964DB41-BAE4-4996-A0A0-D036BFFDC267}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{339A4992-B8C2-40CF-B0C5-4F810A07DBB1}\ProxyStubClsid32 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A68968E-D3CF-440F-9DE5-75E5F4C11236}\ = "IEnumHSTRING" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2A4E4539-C38C-4C64-A9CE-DF3BFF410AD2}\ProxyStubClsid32\ = "{0ACBC224-E08F-4B42-8723-B451584D6969}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7685A31F-F733-4246-8547-3DF85BB717A2} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9291ed54-b88c-556f-b870-49a901ac529d}\ = "Windows.Foundation.AsyncOperationCompletedHandler`1<GameCore.Users.IResolveUserIssueResult>" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{05BE69B0-B0CD-4DDF-B3F4-735165435D93}\LocalService = "GamingServices" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{ad73eafe-c034-418b-89c0-231a66c8de26}\ProxyStubClsid32 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{f58e3884-1f75-4c66-9127-a66161818693}\ProxyStubClsid32\ = "{0ACBC224-E08F-4B42-8723-B451584D6969}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{244E7CF2-E51D-4548-8C47-B118642A4D0A} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{276d243c-db6c-47e9-8e21-ae51d4c3dfd4}\ = "IUsersSkuSpecificServer2" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2F3DD6FF-DA47-4AD4-860A-CBA6276C3EF7}\ProxyStubClsid32 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0ACBC224-E08F-4B42-8723-B451584D6969} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C7D04FC0-0721-41BC-B0BA-336A52801B73}\AppId = "{2964DB41-BAE4-4996-A0A0-D036BFFDC267}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3C573F62-4649-4424-9978-ADB20C1AAF14}\ProxyStubClsid32\ = "{0ACBC224-E08F-4B42-8723-B451584D6969}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\ = "7-Zip Shell Extension" C:\Users\Admin\Downloads\7z2407-x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4FCE4871-593B-44CC-9868-AAA631C5D2D7}\LocalService = "GamingServices" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{710318A4-861A-4599-9DA2-50C84EE59ED8} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2694CF66-C77E-45EF-9145-F97BEACE7666} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{36366C1F-B5FF-42B3-A4E8-03DD891A56CC} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{993efdcd-ddfc-4560-9463-72073ab45502}\ProxyStubClsid32 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2bee07d0-da2e-459e-b30c-0399c285e809}\ = "ITcuiConnection" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C67882B9-127A-4D99-A424-EAE92313BBD5}\ProxyStubClsid32\ = "{0ACBC224-E08F-4B42-8723-B451584D6969}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{483DCCC8-BEF4-4268-9F88-82D758F22B62}\ProxyStubClsid32\ = "{0ACBC224-E08F-4B42-8723-B451584D6969}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{903de535-e51b-48d3-b30c-33f95f2bf1bc} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{947D8A77-6D79-4DCE-A6D4-EDAC394FE6C3}\ProxyStubClsid32\ = "{0ACBC224-E08F-4B42-8723-B451584D6969}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A68968E-D3CF-440F-9DE5-75E5F4C11236}\ProxyStubClsid32 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7819FFCA-EFF3-45AD-B95A-810DADD84AAB}\ProxyStubClsid32 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{0796012e-ba5d-43f2-add1-b2aacf6e0eda} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1A9D8E03-A524-4FC6-A566-2BC802898DFF} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{834366DA-2D43-4FE3-8DCD-42FF2274BD0D}\AppId = "{2964DB41-BAE4-4996-A0A0-D036BFFDC267}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{29EF372A-D438-4FAF-A173-8E109B0F675E}\ = "IEnumInstallId" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{80E6F60D-CDEB-4A5E-86FF-C45DFFA775DC}\ProxyStubClsid32 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{59C8ADF3-BBC4-46B2-BD96-E9105D203438} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AD6FF479-E54E-4786-AC2A-10D35C5B93A7}\ProxyStubClsid32 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{E97EABA8-9BCD-4930-992E-2ADC66176817} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{834366DA-2D43-4FE3-8DCD-42FF2274BD0D} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{51AC52F1-FE76-428B-B5BD-94F01E0BE4A9} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4D2BF08-1409-4918-9D84-32EE00E9178C} C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\7-Zip C:\Users\Admin\Downloads\7z2407-x64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{0E7BBE8F-722F-4B8D-A207-60F906BBE00A}\ProxyStubClsid32 C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4D2BF08-1409-4918-9D84-32EE00E9178C}\ = "AsyncIXGameSaveReadHandler" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F187A451-AC81-4283-935D-2A2C4797D3D6}\ProxyStubClsid32\ = "{0ACBC224-E08F-4B42-8723-B451584D6969}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4D2BF08-1409-4918-9D84-32EE00E9178C}\ProxyStubClsid32\ = "{0ACBC224-E08F-4B42-8723-B451584D6969}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{05BE69B0-B0CD-4DDF-B3F4-735165435D93}\AppId = "{2964DB41-BAE4-4996-A0A0-D036BFFDC267}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4FDD44D-55A0-453A-957E-83727B36CAC9}\ProxyStubClsid32\ = "{0ACBC224-E08F-4B42-8723-B451584D6969}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9CE3E855-E7D0-4B3A-8C65-867C37739E45}\ProxyStubClsid32\ = "{0ACBC224-E08F-4B42-8723-B451584D6969}" C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 605676.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 579252.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.GamingApp_2406.1001.20.0_x64__8wekyb3d8bbwe\XboxPcApp.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.GamingApp_2406.1001.20.0_x64__8wekyb3d8bbwe\XboxPcApp.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Downloads\XboxInstaller.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Downloads\XboxInstaller.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\svchost.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\system32\DrvInst.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\system32\DrvInst.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\system32\DrvInst.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\XboxInstaller.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\7z2407-x64.exe N/A
N/A N/A C:\Users\Admin\Downloads\7z2407-x64.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4780 wrote to memory of 4028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 4028 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 2964 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4780 wrote to memory of 3896 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.com

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff824c446f8,0x7ff824c44708,0x7ff824c44718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2808 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4992 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4992 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2300 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5428 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5124 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5144 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5444 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5864 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6408 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6172 /prefetch:8

C:\Users\Admin\Downloads\7z2407-x64.exe

"C:\Users\Admin\Downloads\7z2407-x64.exe"

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s PcaSvc

C:\Users\Admin\Downloads\7z2407-x64.exe

"C:\Users\Admin\Downloads\7z2407-x64.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6508 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6700 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6716 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6812 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6528 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6056 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x2f0 0x474

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6520 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6932 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6908 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7208 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6876 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7808 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8016 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7628 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6616 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5676 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7464 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7984 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8068 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6048 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8140 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8120 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7900 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4168 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3372 /prefetch:8

C:\Users\Admin\Downloads\XboxInstaller.exe

"C:\Users\Admin\Downloads\XboxInstaller.exe"

C:\Users\Admin\Downloads\XboxInstaller.exe

"C:\Users\Admin\Downloads\XboxInstaller.exe"

C:\Users\Admin\Downloads\XboxInstaller.exe

"C:\Users\Admin\Downloads\XboxInstaller.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6428 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7380 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7728 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3080 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7320 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5144 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5844 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3668 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7752 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6760 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7416 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7808 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3080 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8428 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8420 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1876 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4764 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6644 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1380 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2324 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7728 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7552 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8404 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4868 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7172 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7372 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8512 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5224 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8840 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8320 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8348 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6988 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8540 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3108 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7516 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7716 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6148 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8412 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2324 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6716 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7660 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8752 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5656 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7920 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2220 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3460 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7908 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8896 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7108 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1608 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7040 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7348 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1

C:\Windows\system32\svchost.exe

"svchost.exe"

C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe

"C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe"

C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe

"C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe"

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "0" "C:\Windows\TEMP\{f1f156af-52f8-d24b-bcb5-94cd1679911c}\xvdd.inf" "9" "4af22f4ff" "0000000000000140" "Service-0x0-3e7$\Default" "0000000000000164" "208" "C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\drivers"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "1" "0" "SWD\XvddEnum\XvddRootDevice_Instance" "" "" "48fe919b3" "0000000000000000"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "0" "C:\Windows\TEMP\{f064c229-ef5e-0a46-8bc6-69a1e02e51f0}\gameflt.inf" "9" "4000a5b5b" "0000000000000154" "Service-0x0-3e7$\Default" "0000000000000178" "208" "C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\drivers"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4000a5b5b" "0000000000000178" "Service-0x0-3e7$\Default"

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /enum-drivers

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /delete-driver oem4.inf /force

C:\Windows\system32\DrvInst.exe

DrvInst.exe "5" "2" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4b9547ee7" "000000000000017C" "Service-0x0-3e7$\Default"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2784 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7228 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3076 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=7708 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5660 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8768 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8928 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9016 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6172 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7240 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2323925444082582858,662444284493833410,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7628 /prefetch:1

C:\Program Files\WindowsApps\Microsoft.GamingApp_2406.1001.20.0_x64__8wekyb3d8bbwe\XboxPcApp.exe

"C:\Program Files\WindowsApps\Microsoft.GamingApp_2406.1001.20.0_x64__8wekyb3d8bbwe\XboxPcApp.exe" -ServerName:Microsoft.Xbox.App.AppXqq7rzt1gkb5kpcpszh37b7p6x61mdkks.mca

C:\Program Files\WindowsApps\Microsoft.GamingApp_2406.1001.20.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe

"C:\Program Files\WindowsApps\Microsoft.GamingApp_2406.1001.20.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe" -Embedding

C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe

"C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "0" "C:\Windows\TEMP\{50432f94-51fc-cf4d-973f-9cc7f1f9d2bd}\gameflt.inf" "9" "4000a5b5b" "000000000000017C" "Service-0x0-3e7$\Default" "0000000000000154" "208" "C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\drivers"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4000a5b5b" "0000000000000154" "Service-0x0-3e7$\Default"

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /enum-drivers

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /delete-driver oem4.inf /force

C:\Windows\system32\DrvInst.exe

DrvInst.exe "5" "2" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4b9547ee7" "0000000000000184" "Service-0x0-3e7$\Default"

C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe

"C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "0" "C:\Windows\TEMP\{d7980b75-ed70-e846-9e9e-0de8935c808c}\gameflt.inf" "9" "4000a5b5b" "00000000000000EC" "Service-0x0-3e7$\Default" "0000000000000140" "208" "C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\drivers"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4000a5b5b" "0000000000000140" "Service-0x0-3e7$\Default"

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /enum-drivers

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /delete-driver oem4.inf /force

C:\Windows\system32\DrvInst.exe

DrvInst.exe "5" "2" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4b9547ee7" "0000000000000184" "Service-0x0-3e7$\Default"

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\WindowsApps\Microsoft.GamingApp_2406.1001.20.0_x64__8wekyb3d8bbwe\XboxPcApp.exe

"C:\Program Files\WindowsApps\Microsoft.GamingApp_2406.1001.20.0_x64__8wekyb3d8bbwe\XboxPcApp.exe" -ServerName:Microsoft.Xbox.App.AppXqq7rzt1gkb5kpcpszh37b7p6x61mdkks.mca

C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe

"C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "0" "C:\Windows\TEMP\{0cbe4ae4-7a44-d24d-885c-2e06263f1ed8}\gameflt.inf" "9" "4000a5b5b" "000000000000018C" "Service-0x0-3e7$\Default" "0000000000000140" "208" "C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\drivers"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4000a5b5b" "0000000000000188" "Service-0x0-3e7$\Default"

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /enum-drivers

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /delete-driver oem4.inf /force

C:\Windows\system32\DrvInst.exe

DrvInst.exe "5" "2" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4b9547ee7" "000000000000017C" "Service-0x0-3e7$\Default"

C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe

"C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "0" "C:\Windows\TEMP\{bd0ee7fc-0ad1-1242-8af3-7fc3949d9478}\gameflt.inf" "9" "4000a5b5b" "0000000000000160" "Service-0x0-3e7$\Default" "0000000000000188" "208" "C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\drivers"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4000a5b5b" "0000000000000188" "Service-0x0-3e7$\Default"

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /enum-drivers

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /delete-driver oem4.inf /force

C:\Windows\system32\DrvInst.exe

DrvInst.exe "5" "2" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4b9547ee7" "0000000000000154" "Service-0x0-3e7$\Default"

C:\Windows\System32\DataExchangeHost.exe

C:\Windows\System32\DataExchangeHost.exe -Embedding

C:\Program Files\WindowsApps\Microsoft.GamingApp_2406.1001.20.0_x64__8wekyb3d8bbwe\XboxPcApp.exe

"C:\Program Files\WindowsApps\Microsoft.GamingApp_2406.1001.20.0_x64__8wekyb3d8bbwe\XboxPcApp.exe" -ServerName:Microsoft.Xbox.App.AppXqq7rzt1gkb5kpcpszh37b7p6x61mdkks.mca

C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe

"C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "0" "C:\Windows\TEMP\{4c177c2c-d3a9-7a41-8c0e-45d15ba6674f}\gameflt.inf" "9" "4000a5b5b" "0000000000000180" "Service-0x0-3e7$\Default" "00000000000000EC" "208" "C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\drivers"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4000a5b5b" "00000000000000EC" "Service-0x0-3e7$\Default"

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /enum-drivers

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /delete-driver oem4.inf /force

C:\Windows\system32\DrvInst.exe

DrvInst.exe "5" "2" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4b9547ee7" "0000000000000184" "Service-0x0-3e7$\Default"

C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe

"C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "0" "C:\Windows\TEMP\{a3e864f2-de97-c641-8f48-fa9e9762aa65}\gameflt.inf" "9" "4000a5b5b" "0000000000000194" "Service-0x0-3e7$\Default" "000000000000019C" "208" "C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\drivers"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4000a5b5b" "000000000000019C" "Service-0x0-3e7$\Default"

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /enum-drivers

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /delete-driver oem4.inf /force

C:\Windows\system32\DrvInst.exe

DrvInst.exe "5" "2" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4b9547ee7" "00000000000001A4" "Service-0x0-3e7$\Default"

C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe

"C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\GamingServices.exe"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "0" "C:\Windows\TEMP\{aafb269e-6998-664e-99e5-eeb1566ce74f}\gameflt.inf" "9" "4000a5b5b" "0000000000000198" "Service-0x0-3e7$\Default" "00000000000001A8" "208" "C:\Program Files\WindowsApps\Microsoft.GamingServices_22.90.24001.0_x64__8wekyb3d8bbwe\drivers"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4000a5b5b" "00000000000001A8" "Service-0x0-3e7$\Default"

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /enum-drivers

C:\Windows\System32\pnputil.exe

C:\Windows\System32\pnputil.exe /delete-driver oem4.inf /force

C:\Windows\system32\DrvInst.exe

DrvInst.exe "5" "2" "C:\Windows\System32\DriverStore\FileRepository\gameflt.inf_amd64_25b1fe3637126834\gameflt.inf" "0" "4b9547ee7" "00000000000001B4" "Service-0x0-3e7$\Default"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x120,0x124,0x128,0x11c,0x12c,0x7ff815c3ab58,0x7ff815c3ab68,0x7ff815c3ab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1768 --field-trial-handle=1960,i,13777150783963935874,14473809824586756195,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1960,i,13777150783963935874,14473809824586756195,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2264 --field-trial-handle=1960,i,13777150783963935874,14473809824586756195,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3108 --field-trial-handle=1960,i,13777150783963935874,14473809824586756195,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3136 --field-trial-handle=1960,i,13777150783963935874,14473809824586756195,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4332 --field-trial-handle=1960,i,13777150783963935874,14473809824586756195,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3620 --field-trial-handle=1960,i,13777150783963935874,14473809824586756195,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4616 --field-trial-handle=1960,i,13777150783963935874,14473809824586756195,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4536 --field-trial-handle=1960,i,13777150783963935874,14473809824586756195,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4796 --field-trial-handle=1960,i,13777150783963935874,14473809824586756195,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4816 --field-trial-handle=1960,i,13777150783963935874,14473809824586756195,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4812 --field-trial-handle=1960,i,13777150783963935874,14473809824586756195,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=2324 --field-trial-handle=1960,i,13777150783963935874,14473809824586756195,131072 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 google.com udp
GB 142.250.178.14:80 google.com tcp
GB 142.250.178.14:80 google.com tcp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:80 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 apis.google.com udp
GB 142.250.200.14:443 apis.google.com tcp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 20.177.190.20.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.187.238:443 consent.google.com tcp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
BE 2.17.107.121:443 www.bing.com tcp
BE 2.17.107.121:443 www.bing.com tcp
US 8.8.8.8:53 121.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
BE 88.221.83.250:443 r.bing.com tcp
BE 88.221.83.250:443 r.bing.com tcp
BE 88.221.83.202:443 th.bing.com tcp
BE 88.221.83.202:443 th.bing.com tcp
US 8.8.8.8:53 250.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 202.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
IE 20.190.159.2:443 login.microsoftonline.com tcp
US 8.8.8.8:53 2.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
US 8.8.8.8:53 76.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 www.7-zip.org udp
DE 49.12.202.237:443 www.7-zip.org tcp
DE 49.12.202.237:443 www.7-zip.org tcp
US 8.8.8.8:53 196.249.167.52.in-addr.arpa udp
US 8.8.8.8:53 237.202.12.49.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 185.199.108.133:443 objects.githubusercontent.com tcp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 89.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
BE 88.221.83.202:443 th.bing.com tcp
US 8.8.8.8:53 apps.microsoft.com udp
US 8.8.8.8:53 31.121.18.2.in-addr.arpa udp
US 13.107.246.64:443 apps.microsoft.com tcp
US 13.107.246.64:443 apps.microsoft.com tcp
US 8.8.8.8:53 images-eds-ssl.xboxlive.com udp
US 8.8.8.8:53 sparkcdneus2.azureedge.net udp
SE 23.34.232.7:443 images-eds-ssl.xboxlive.com tcp
SE 23.34.232.7:443 images-eds-ssl.xboxlive.com tcp
SE 23.34.232.7:443 images-eds-ssl.xboxlive.com tcp
SE 23.34.232.7:443 images-eds-ssl.xboxlive.com tcp
SE 23.34.232.7:443 images-eds-ssl.xboxlive.com tcp
SE 23.34.232.7:443 images-eds-ssl.xboxlive.com tcp
US 8.8.8.8:53 musicart.xboxlive.com udp
US 8.8.8.8:53 store-images.microsoft.com udp
US 152.199.19.161:443 sparkcdneus2.azureedge.net tcp
SE 23.34.232.7:443 musicart.xboxlive.com tcp
US 8.8.8.8:53 www.clarity.ms udp
US 13.107.246.64:443 www.clarity.ms tcp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 7.232.34.23.in-addr.arpa udp
US 8.8.8.8:53 161.19.199.152.in-addr.arpa udp
US 8.8.8.8:53 98.233.34.23.in-addr.arpa udp
US 13.107.246.64:443 www.clarity.ms tcp
US 8.8.8.8:53 northcentralus-0.in.applicationinsights.azure.com udp
US 52.240.245.68:443 northcentralus-0.in.applicationinsights.azure.com tcp
US 8.8.8.8:53 68.245.240.52.in-addr.arpa udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 8.8.8.8:53 x.clarity.ms udp
NL 13.69.109.131:443 browser.events.data.microsoft.com tcp
US 20.114.190.119:443 x.clarity.ms tcp
NL 13.69.109.131:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 131.109.69.13.in-addr.arpa udp
US 8.8.8.8:53 119.190.114.20.in-addr.arpa udp
SE 23.34.232.7:443 musicart.xboxlive.com tcp
SE 23.34.232.7:443 musicart.xboxlive.com tcp
SE 23.34.232.7:443 musicart.xboxlive.com tcp
SE 23.34.232.7:443 musicart.xboxlive.com tcp
SE 23.34.232.7:443 musicart.xboxlive.com tcp
US 8.8.8.8:53 www.microsoft.com udp
SE 23.34.233.128:443 www.microsoft.com tcp
SE 23.34.233.128:443 www.microsoft.com tcp
US 52.240.245.68:443 northcentralus-0.in.applicationinsights.azure.com tcp
US 8.8.8.8:53 xbox.com udp
US 20.231.239.246:443 xbox.com tcp
US 8.8.8.8:53 www.xbox.com udp
BE 104.90.24.58:80 www.xbox.com tcp
BE 104.90.24.58:443 www.xbox.com tcp
US 8.8.8.8:53 246.239.231.20.in-addr.arpa udp
US 8.8.8.8:53 128.233.34.23.in-addr.arpa udp
US 8.8.8.8:53 58.24.90.104.in-addr.arpa udp
US 8.8.8.8:53 assets-www.xbox.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
BE 104.90.24.58:443 assets-www.xbox.com tcp
BE 104.90.24.58:443 assets-www.xbox.com tcp
BE 104.90.24.58:443 assets-www.xbox.com tcp
BE 104.90.24.58:443 assets-www.xbox.com tcp
BE 104.90.24.58:443 assets-www.xbox.com tcp
BE 104.90.24.58:443 assets-www.xbox.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 apps.identrust.com udp
BE 2.17.107.226:80 apps.identrust.com tcp
US 8.8.8.8:53 assets.adobedtm.com udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 8.8.8.8:53 mem.gfx.ms udp
SE 23.34.232.228:443 assets.adobedtm.com tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 8.8.8.8:53 14.24.17.104.in-addr.arpa udp
US 8.8.8.8:53 226.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 228.232.34.23.in-addr.arpa udp
US 8.8.8.8:53 49.43.201.23.in-addr.arpa udp
IE 20.190.159.2:443 login.microsoftonline.com tcp
US 8.8.8.8:53 js.monitor.azure.com udp
US 13.107.246.64:443 js.monitor.azure.com tcp
US 13.107.246.64:443 js.monitor.azure.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 emerald.xboxservices.com udp
US 13.107.246.64:443 emerald.xboxservices.com tcp
US 8.8.8.8:53 acctcdn.msftauth.net udp
US 8.8.8.8:53 acctcdn.msauth.net udp
US 8.8.8.8:53 logincdn.msftauth.net udp
US 13.107.246.64:443 acctcdn.msauth.net tcp
US 152.199.21.175:443 logincdn.msftauth.net tcp
US 152.199.21.175:443 logincdn.msftauth.net tcp
US 8.8.8.8:53 acctcdnmsftuswe2.azureedge.net udp
US 8.8.8.8:53 lgincdnmsftuswe2.azureedge.net udp
US 8.8.8.8:53 acctcdnvzeuno.azureedge.net udp
US 8.8.8.8:53 lgincdnvzeuno.azureedge.net udp
US 8.8.8.8:53 175.21.199.152.in-addr.arpa udp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
IE 20.190.159.2:443 login.microsoftonline.com tcp
US 152.199.21.175:443 lgincdnvzeuno.azureedge.net tcp
US 8.8.8.8:53 82.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 user.auth.xboxlive.com udp
IE 137.116.225.129:443 user.auth.xboxlive.com tcp
US 8.8.8.8:53 xsts.auth.xboxlive.com udp
US 52.156.147.113:443 xsts.auth.xboxlive.com tcp
US 52.156.147.113:443 xsts.auth.xboxlive.com tcp
US 52.156.147.113:443 xsts.auth.xboxlive.com tcp
US 8.8.8.8:53 129.225.116.137.in-addr.arpa udp
US 8.8.8.8:53 peoplehub-public.xboxlive.com udp
US 20.122.146.5:443 peoplehub-public.xboxlive.com tcp
US 20.122.146.5:443 peoplehub-public.xboxlive.com tcp
US 8.8.8.8:53 consent.config.office.com udp
GB 20.108.140.132:443 consent.config.office.com tcp
US 8.8.8.8:53 113.147.156.52.in-addr.arpa udp
US 8.8.8.8:53 5.146.122.20.in-addr.arpa udp
US 8.8.8.8:53 o741402.ingest.sentry.io udp
US 34.120.195.249:443 o741402.ingest.sentry.io tcp
US 8.8.8.8:53 accounts.xboxlive.com udp
US 8.8.8.8:53 132.140.108.20.in-addr.arpa udp
US 8.8.8.8:53 249.195.120.34.in-addr.arpa udp
US 52.158.160.64:443 accounts.xboxlive.com tcp
US 8.8.8.8:53 64.160.158.52.in-addr.arpa udp
US 8.8.8.8:53 fpt.microsoft.com udp
US 52.167.30.171:443 fpt.microsoft.com tcp
US 8.8.8.8:53 consentreceiverfd-prod.azurefd.net udp
US 13.107.246.64:443 consentreceiverfd-prod.azurefd.net tcp
US 13.107.246.64:443 consentreceiverfd-prod.azurefd.net tcp
US 8.8.8.8:53 171.30.167.52.in-addr.arpa udp
US 8.8.8.8:53 14.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 dc.services.visualstudio.com udp
NL 20.50.88.241:443 dc.services.visualstudio.com tcp
US 8.8.8.8:53 cart.production.store-web.dynamics.com udp
NL 23.62.61.162:443 cart.production.store-web.dynamics.com tcp
US 8.8.8.8:53 241.88.50.20.in-addr.arpa udp
US 8.8.8.8:53 162.61.62.23.in-addr.arpa udp
US 34.120.195.249:443 o741402.ingest.sentry.io udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 xccs.xboxlive.com udp
IE 168.63.53.71:443 xccs.xboxlive.com tcp
IE 168.63.53.71:443 xccs.xboxlive.com tcp
US 8.8.8.8:53 71.53.63.168.in-addr.arpa udp
US 8.8.8.8:53 www.xbox.com udp
US 8.8.8.8:53 support.xbox.com udp
US 13.107.42.15:443 support.xbox.com tcp
US 13.107.42.15:443 support.xbox.com tcp
US 8.8.8.8:53 15.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 www.xboxab.com udp
US 13.107.5.91:443 www.xboxab.com tcp
US 13.107.42.15:443 support.xbox.com tcp
US 8.8.8.8:53 content.support.xboxlive.com udp
US 13.107.246.64:443 content.support.xboxlive.com tcp
US 13.107.246.64:443 content.support.xboxlive.com tcp
US 8.8.8.8:53 91.5.107.13.in-addr.arpa udp
US 8.8.8.8:53 uhf.microsoft.com udp
GB 104.103.243.81:443 uhf.microsoft.com tcp
US 8.8.8.8:53 x.clarity.ms udp
US 20.114.190.119:443 x.clarity.ms tcp
SE 23.34.233.128:443 www.microsoft.com tcp
US 8.8.8.8:53 spoppe-b.azureedge.net udp
US 8.8.8.8:53 inbox.assist.gameservices.xboxlive.com udp
US 8.8.8.8:53 static2.sharepointonline.com udp
US 152.199.19.161:443 spoppe-b.azureedge.net tcp
US 152.199.19.161:443 spoppe-b.azureedge.net tcp
US 152.199.19.161:443 spoppe-b.azureedge.net tcp
NL 40.114.243.70:443 inbox.assist.gameservices.xboxlive.com tcp
GB 104.103.252.150:443 static2.sharepointonline.com tcp
US 8.8.8.8:53 81.243.103.104.in-addr.arpa udp
US 8.8.8.8:53 150.252.103.104.in-addr.arpa udp
US 8.8.8.8:53 70.243.114.40.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 20.114.190.119:443 x.clarity.ms tcp
BE 2.17.107.112:443 th.bing.com tcp
US 8.8.8.8:53 112.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 assets-www.xbox.com udp
US 8.8.8.8:53 assets.adobedtm.com udp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 8.8.8.8:53 mem.gfx.ms udp
US 8.8.8.8:53 mwf-service.akamaized.net udp
US 8.8.8.8:53 assets.xboxservices.com udp
SE 23.201.43.129:443 mwf-service.akamaized.net tcp
SE 23.201.43.129:443 mwf-service.akamaized.net tcp
US 13.107.246.64:443 assets.xboxservices.com tcp
US 13.107.246.64:443 assets.xboxservices.com tcp
US 13.107.246.64:443 assets.xboxservices.com tcp
US 13.107.246.64:443 assets.xboxservices.com tcp
US 13.107.246.64:443 assets.xboxservices.com tcp
US 13.107.246.64:443 assets.xboxservices.com tcp
US 8.8.8.8:53 129.43.201.23.in-addr.arpa udp
US 8.8.8.8:53 acctcdn.msftauth.net udp
US 8.8.8.8:53 acctcdn.msauth.net udp
US 8.8.8.8:53 logincdn.msftauth.net udp
US 13.107.246.64:443 acctcdn.msauth.net tcp
US 8.8.8.8:53 acctcdnmsftuswe2.azureedge.net udp
US 152.199.21.175:443 logincdn.msftauth.net tcp
US 8.8.8.8:53 lgincdnmsftuswe2.azureedge.net udp
US 8.8.8.8:53 assets.xbox.com udp
US 8.8.8.8:53 dlassets-ssl.xboxlive.com udp
SE 23.34.232.7:443 dlassets-ssl.xboxlive.com tcp
US 8.8.8.8:53 241.154.82.20.in-addr.arpa udp
SE 23.34.233.98:80 store-images.microsoft.com tcp
SE 23.34.233.98:80 store-images.microsoft.com tcp
SE 23.34.233.98:80 store-images.microsoft.com tcp
SE 23.34.233.98:80 store-images.microsoft.com tcp
SE 23.34.233.98:80 store-images.microsoft.com tcp
SE 23.34.233.98:80 store-images.microsoft.com tcp
SE 23.34.233.98:80 store-images.microsoft.com tcp
SE 23.34.233.98:80 store-images.microsoft.com tcp
SE 23.34.233.98:80 store-images.microsoft.com tcp
SE 23.34.233.98:80 store-images.microsoft.com tcp
US 8.8.8.8:53 20.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 198.32.209.4.in-addr.arpa udp
US 8.8.8.8:53 wearedes.com udp
US 3.94.41.167:80 wearedes.com tcp
US 3.94.41.167:80 wearedes.com tcp
US 8.8.8.8:53 www.hugedomains.com udp
US 172.67.70.191:443 www.hugedomains.com tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 static.hugedomains.com udp
US 151.101.193.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 use.typekit.net udp
SE 184.31.15.74:443 use.typekit.net tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 p.typekit.net udp
SE 184.31.15.48:443 p.typekit.net tcp
SE 184.31.15.74:443 use.typekit.net tcp
US 8.8.8.8:53 secure.statcounter.com udp
US 8.8.8.8:53 167.41.94.3.in-addr.arpa udp
US 8.8.8.8:53 191.70.67.172.in-addr.arpa udp
US 8.8.8.8:53 229.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 74.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 48.15.31.184.in-addr.arpa udp
US 104.20.94.138:443 secure.statcounter.com tcp
US 8.8.8.8:53 region1.analytics.google.com udp
US 216.239.34.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 c.statcounter.com udp
BE 64.233.167.155:443 stats.g.doubleclick.net tcp
GB 142.250.200.3:443 www.google.co.uk tcp
BE 64.233.167.155:443 stats.g.doubleclick.net udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.200.3:443 www.google.co.uk udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 138.94.20.104.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 155.167.233.64.in-addr.arpa udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
BE 2.17.107.121:443 th.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 wearedevs.net udp
US 172.67.71.2:443 wearedevs.net tcp
US 172.67.71.2:443 wearedevs.net tcp
US 151.101.193.229:443 cdn.jsdelivr.net udp
US 8.8.8.8:53 cdn.wearedevs.net udp
US 8.8.8.8:53 www.youtube.com udp
US 151.101.193.229:443 cdn.jsdelivr.net udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.200.22:443 i.ytimg.com tcp
US 8.8.8.8:53 2.71.67.172.in-addr.arpa udp
US 8.8.8.8:53 22.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 172.217.169.34:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 34.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 172.217.169.34:443 googleads.g.doubleclick.net udp
GB 216.58.213.6:443 static.doubleclick.net tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 216.58.213.10:443 jnn-pa.googleapis.com tcp
GB 216.58.213.10:443 jnn-pa.googleapis.com tcp
GB 216.58.213.10:443 jnn-pa.googleapis.com tcp
GB 216.58.213.10:443 jnn-pa.googleapis.com tcp
GB 216.58.213.10:443 jnn-pa.googleapis.com tcp
GB 216.58.213.10:443 jnn-pa.googleapis.com tcp
GB 216.58.213.10:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 6.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 10.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 yt3.ggpht.com udp
GB 142.250.180.1:443 yt3.ggpht.com tcp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com tcp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 172.217.16.225:443 lh3.googleusercontent.com tcp
US 8.8.8.8:53 1.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 csi.gstatic.com udp
DE 216.58.206.67:443 csi.gstatic.com tcp
DE 216.58.206.67:443 csi.gstatic.com tcp
US 8.8.8.8:53 67.206.58.216.in-addr.arpa udp
US 8.8.8.8:53 cdnwrd2.com udp
US 172.67.166.253:443 cdnwrd2.com tcp
US 172.67.166.253:443 cdnwrd2.com tcp
US 8.8.8.8:53 253.166.67.172.in-addr.arpa udp
US 8.8.8.8:53 aefd.nelreports.net udp
SE 23.201.43.89:443 aefd.nelreports.net tcp
SE 23.201.43.89:443 aefd.nelreports.net udp
US 8.8.8.8:53 89.43.201.23.in-addr.arpa udp
US 8.8.8.8:53 9.73.50.20.in-addr.arpa udp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 142.250.200.3:443 www.google.co.uk udp
BE 2.17.107.112:443 www.bing.com tcp
US 8.8.8.8:53 r.bing.com udp
BE 88.221.83.227:443 r.bing.com tcp
BE 88.221.83.227:443 r.bing.com tcp
BE 2.17.107.123:443 www.bing.com tcp
BE 2.17.107.123:443 www.bing.com tcp
US 8.8.8.8:53 227.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 123.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 krnl.ca udp
US 104.21.15.11:443 krnl.ca tcp
US 104.21.15.11:443 krnl.ca tcp
US 8.8.8.8:53 krnl.place udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 11.15.21.104.in-addr.arpa udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 krnl.dev udp
US 172.67.214.76:443 krnl.dev tcp
US 172.67.214.76:443 krnl.dev tcp
US 8.8.8.8:53 76.214.67.172.in-addr.arpa udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
GB 172.217.169.34:443 googleads.g.doubleclick.net udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
BE 64.233.167.155:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.200.3:443 www.google.co.uk udp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
BE 2.17.107.123:443 www.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 8.8.8.8:53 aefd.nelreports.net udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
SE 23.201.43.89:443 aefd.nelreports.net udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 199.59.243.226:443 tcp
US 8.8.8.8:53 syndicatedsearch.goog udp
GB 172.217.16.238:443 syndicatedsearch.goog tcp
US 8.8.8.8:53 partner.googleadservices.com udp
GB 142.250.178.2:443 partner.googleadservices.com tcp
US 45.79.244.209:443 tcp
US 45.79.244.209:443 tcp
GB 172.217.16.238:443 syndicatedsearch.goog udp
US 8.8.8.8:53 udp
US 199.59.243.226:443 tcp
US 199.59.243.226:443 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
BE 2.17.107.115:443 r.bing.com tcp
US 8.8.8.8:53 115.107.17.2.in-addr.arpa udp
US 199.59.243.226:443 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 45.79.244.209:443 tcp
GB 172.217.16.225:443 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 krnlofficial.com udp
US 172.67.132.79:443 krnlofficial.com tcp
US 172.67.132.79:443 krnlofficial.com tcp
US 8.8.8.8:53 79.132.67.172.in-addr.arpa udp
GB 172.217.169.34:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 k-storage.com udp
US 172.67.160.107:443 k-storage.com tcp
US 172.67.160.107:443 k-storage.com tcp
US 8.8.8.8:53 107.160.67.172.in-addr.arpa udp
US 216.239.32.36:443 region1.google-analytics.com udp
DE 216.58.206.67:443 csi.gstatic.com udp
US 8.8.8.8:53 73.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
BE 88.221.83.234:443 th.bing.com tcp
US 8.8.8.8:53 234.83.221.88.in-addr.arpa udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.108.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 154.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 collector.github.com udp
US 185.199.108.154:443 github.githubassets.com tcp
US 140.82.112.21:443 collector.github.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 21.112.82.140.in-addr.arpa udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 67.32.209.4.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.16.238:443 syndicatedsearch.goog udp
GB 142.250.178.2:443 partner.googleadservices.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 216.239.32.36:443 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 142.250.200.3:443 www.google.co.uk udp
BE 64.233.167.155:443 stats.g.doubleclick.net udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
BE 88.221.83.201:443 r.bing.com tcp
BE 2.17.107.113:443 th.bing.com tcp
US 8.8.8.8:53 201.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 113.107.17.2.in-addr.arpa udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 21.121.18.2.in-addr.arpa udp
US 8.8.8.8:53 electronv3.net udp
FR 188.165.21.8:443 electronv3.net tcp
FR 188.165.21.8:443 electronv3.net tcp
US 8.8.8.8:53 ka-f.fontawesome.com udp
US 104.21.26.223:443 ka-f.fontawesome.com tcp
US 104.21.26.223:443 ka-f.fontawesome.com tcp
US 104.21.26.223:443 ka-f.fontawesome.com tcp
US 8.8.8.8:53 8.21.165.188.in-addr.arpa udp
US 8.8.8.8:53 223.26.21.104.in-addr.arpa udp
US 8.8.8.8:53 userstatics.com udp
US 172.67.208.186:443 userstatics.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 186.208.67.172.in-addr.arpa udp
US 8.8.8.8:53 3.181.190.20.in-addr.arpa udp
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 76.234.34.23.in-addr.arpa udp
US 8.8.8.8:53 link-center.net udp
US 172.67.210.26:443 link-center.net tcp
US 172.67.210.26:443 link-center.net tcp
US 8.8.8.8:53 linkvertise.com udp
US 104.22.22.72:443 linkvertise.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 cdn.exmarketplace.com udp
US 8.8.8.8:53 use.typekit.net udp
US 8.8.8.8:53 p.typekit.net udp
US 8.8.8.8:53 stackpath.bootstrapcdn.com udp
IT 95.110.204.9:443 cdn.exmarketplace.com tcp
US 8.8.8.8:53 js.chargebee.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
SE 184.31.15.57:443 p.typekit.net tcp
US 104.18.10.207:443 stackpath.bootstrapcdn.com tcp
US 104.18.10.207:443 stackpath.bootstrapcdn.com tcp
SE 184.31.15.74:443 use.typekit.net tcp
GB 89.187.167.2:443 maxst.icons8.com tcp
DE 13.35.58.99:443 js.chargebee.com tcp
US 8.8.8.8:53 exmarketplace.com udp
US 8.8.8.8:53 contextual.media.net udp
BE 104.90.24.23:443 contextual.media.net tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 26.210.67.172.in-addr.arpa udp
US 8.8.8.8:53 72.22.22.104.in-addr.arpa udp
US 8.8.8.8:53 2.167.187.89.in-addr.arpa udp
US 8.8.8.8:53 9.204.110.95.in-addr.arpa udp
US 8.8.8.8:53 99.58.35.13.in-addr.arpa udp
US 8.8.8.8:53 57.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 85.82.161.3.in-addr.arpa udp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 23.24.90.104.in-addr.arpa udp
US 8.8.8.8:53 publisher.linkvertise.com udp
US 104.22.23.72:443 publisher.linkvertise.com tcp
US 104.22.23.72:443 publisher.linkvertise.com tcp
US 8.8.8.8:53 euob.bizseasky.com udp
DE 18.245.31.106:443 euob.bizseasky.com tcp
US 8.8.8.8:53 www.clarity.ms udp
US 13.107.246.64:443 www.clarity.ms tcp
US 8.8.8.8:53 api.ipify.org udp
US 104.26.12.205:443 api.ipify.org tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 lnk.thinksuggest.org udp
US 8.8.8.8:53 api.bing.com udp
US 8.8.8.8:53 api.thinksuggest.org udp
US 216.239.32.36:443 region1.google-analytics.com udp
US 13.107.5.80:443 api.bing.com tcp
DE 176.9.175.232:443 api.thinksuggest.org tcp
DE 176.9.175.232:443 api.thinksuggest.org tcp
US 8.8.8.8:53 72.23.22.104.in-addr.arpa udp
US 8.8.8.8:53 106.31.245.18.in-addr.arpa udp
US 8.8.8.8:53 205.12.26.104.in-addr.arpa udp
US 8.8.8.8:53 232.175.9.176.in-addr.arpa udp
US 8.8.8.8:53 www.thinksuggest.org udp
US 8.8.8.8:53 obseu.bizseasky.com udp
DE 176.9.175.232:443 www.thinksuggest.org tcp
IE 34.251.101.162:443 obseu.bizseasky.com tcp
US 8.8.8.8:53 x.clarity.ms udp
US 20.114.190.119:443 x.clarity.ms tcp
US 8.8.8.8:53 api.taboola.com udp
US 151.101.193.44:443 api.taboola.com tcp
US 8.8.8.8:53 c.clarity.ms udp
IE 13.74.129.1:443 c.clarity.ms tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 162.101.251.34.in-addr.arpa udp
US 8.8.8.8:53 44.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 1.129.74.13.in-addr.arpa udp
US 8.8.8.8:53 c.bing.com udp
US 204.79.197.237:443 c.bing.com tcp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 am-api.taboola.com udp
US 8.8.8.8:53 imagedelivery.net udp
US 8.8.8.8:53 images.taboola.com udp
US 8.8.8.8:53 img.youtube.com udp
GB 172.217.169.78:443 img.youtube.com tcp
GB 172.217.169.78:443 img.youtube.com tcp
US 104.18.2.36:443 imagedelivery.net tcp
US 104.18.2.36:443 imagedelivery.net tcp
US 104.18.2.36:443 imagedelivery.net tcp
US 104.18.2.36:443 imagedelivery.net tcp
US 104.18.2.36:443 imagedelivery.net tcp
US 104.18.2.36:443 imagedelivery.net tcp
US 8.8.8.8:53 78.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 36.2.18.104.in-addr.arpa udp
US 8.8.8.8:53 bypass.city udp
US 172.67.132.19:80 bypass.city tcp
US 172.67.132.19:80 bypass.city tcp
US 172.67.132.19:443 bypass.city tcp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 73.79.16.104.in-addr.arpa udp
US 8.8.8.8:53 19.132.67.172.in-addr.arpa udp
US 8.8.8.8:53 api2.bypass.city udp
US 172.67.132.19:443 api2.bypass.city tcp
US 8.8.8.8:53 discord.com udp
US 162.159.136.232:443 discord.com tcp
US 8.8.8.8:53 cloudflareinsights.com udp
US 8.8.8.8:53 232.136.159.162.in-addr.arpa udp
US 8.8.8.8:53 favicone.com udp
US 172.67.160.51:443 favicone.com tcp
US 8.8.8.8:53 51.160.67.172.in-addr.arpa udp
US 8.8.8.8:53 a.bypass.city udp
US 104.21.4.124:443 a.bypass.city tcp
US 104.21.4.124:443 a.bypass.city tcp
US 8.8.8.8:53 buzzonclick.com udp
US 104.21.81.209:443 buzzonclick.com tcp
US 104.21.81.209:443 buzzonclick.com tcp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 104.17.3.184:443 challenges.cloudflare.com tcp
US 8.8.8.8:53 124.4.21.104.in-addr.arpa udp
US 8.8.8.8:53 209.81.21.104.in-addr.arpa udp
US 8.8.8.8:53 oushioutdae.co.in udp
NL 85.17.127.163:443 oushioutdae.co.in tcp
US 8.8.8.8:53 163.127.17.85.in-addr.arpa udp
US 8.8.8.8:53 184.3.17.104.in-addr.arpa udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 svendjior.org udp
DE 23.88.66.44:443 svendjior.org tcp
US 8.8.8.8:53 www.mcafee.com udp
BE 23.219.251.42:443 www.mcafee.com tcp
US 8.8.8.8:53 mcafeeinc.demdex.net udp
US 8.8.8.8:53 media.mcafeeassets.com udp
GB 23.214.136.154:443 media.mcafeeassets.com tcp
IE 34.243.47.41:443 mcafeeinc.demdex.net tcp
US 8.8.8.8:53 dpm.demdex.net udp
US 8.8.8.8:53 cm.everesttech.net udp
US 8.8.8.8:53 assets.adobedtm.com udp
US 8.8.8.8:53 images.scanalert.com udp
US 8.8.8.8:53 mcafee12.tt.omtrdc.net udp
US 8.8.8.8:53 s.go-mpulse.net udp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 tags.tiqcdn.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.youtube.com udp
IE 54.77.102.202:443 dpm.demdex.net tcp
US 8.8.8.8:53 44.66.88.23.in-addr.arpa udp
US 8.8.8.8:53 42.251.219.23.in-addr.arpa udp
US 8.8.8.8:53 41.47.243.34.in-addr.arpa udp
US 8.8.8.8:53 154.136.214.23.in-addr.arpa udp
BE 23.55.96.141:443 s.go-mpulse.net tcp
IE 34.243.47.41:443 mcafeeinc.demdex.net tcp
IE 34.255.95.127:443 cm.everesttech.net tcp
IE 66.235.152.225:443 mcafee12.tt.omtrdc.net tcp
US 8.8.8.8:53 c.go-mpulse.net udp
BE 104.90.24.133:443 c.go-mpulse.net tcp
US 8.8.8.8:53 id.mcafee.com udp
BE 2.17.107.136:443 id.mcafee.com tcp
US 8.8.8.8:53 202.102.77.54.in-addr.arpa udp
US 8.8.8.8:53 141.96.55.23.in-addr.arpa udp
US 8.8.8.8:53 02179917.akstat.io udp
US 8.8.8.8:53 127.95.255.34.in-addr.arpa udp
US 8.8.8.8:53 225.152.235.66.in-addr.arpa udp
US 8.8.8.8:53 133.24.90.104.in-addr.arpa udp
US 8.8.8.8:53 136.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 trial-eum-clienttons-s.akamaihd.net udp
US 8.8.8.8:53 trial-eum-clientnsv4-s.akamaihd.net udp
BE 2.17.107.177:443 trial-eum-clientnsv4-s.akamaihd.net tcp
BE 2.17.107.16:443 trial-eum-clienttons-s.akamaihd.net tcp
FR 3.162.38.103:443 tags.tiqcdn.com tcp
US 8.8.8.8:53 x5s5cjyccfv3czudcdoq-ps2s5v-8f2d664a1-clientnsv4-s.akamaihd.net udp
US 8.8.8.8:53 191-101-209-39_s-2-17-107-16_ts-1719865565-clienttons-s.akamaihd.net udp
BE 2.17.107.41:443 191-101-209-39_s-2-17-107-16_ts-1719865565-clienttons-s.akamaihd.net tcp
BE 2.17.107.194:443 x5s5cjyccfv3czudcdoq-ps2s5v-8f2d664a1-clientnsv4-s.akamaihd.net tcp
US 8.8.8.8:53 684dd325.akstat.io udp
US 8.8.8.8:53 jelly.mdhv.io udp
US 8.8.8.8:53 edge.fullstory.com udp
US 35.201.112.186:443 edge.fullstory.com tcp
US 216.239.38.21:443 jelly.mdhv.io tcp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 collector-30568.us.tvsquared.com udp
US 8.8.8.8:53 s-static.innovid.com udp
US 8.8.8.8:53 trkn.us udp
US 8.8.8.8:53 s2.adform.net udp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 digitalfeedback.us.confirmit.com udp
US 8.8.8.8:53 a2.adform.net udp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
US 152.199.21.175:443 digitalfeedback.us.confirmit.com tcp
SE 23.34.232.221:443 s-static.innovid.com tcp
GB 163.70.147.23:443 connect.facebook.net tcp
US 185.167.164.39:443 a2.adform.net tcp
US 18.118.231.192:443 collector-30568.us.tvsquared.com tcp
GB 104.86.110.97:443 trkn.us tcp
US 8.8.8.8:53 pixel.byspotify.com udp
US 8.8.8.8:53 x5s5cjyccfv3czudcdoq-pnjvnd-d938f2ee4-clientnsv4-s.akamaihd.net udp
DK 37.157.6.236:443 s2.adform.net tcp
US 34.117.162.98:443 pixel.byspotify.com tcp
BE 2.17.107.194:443 x5s5cjyccfv3czudcdoq-pnjvnd-d938f2ee4-clientnsv4-s.akamaihd.net tcp
US 8.8.8.8:53 cdn1.adoberesources.net udp
US 8.8.8.8:53 s.yimg.com udp
SE 23.34.232.228:443 cdn1.adoberesources.net tcp
US 8.8.8.8:53 smetrics.mcafee.com udp
GB 87.248.114.11:443 s.yimg.com tcp
US 35.201.112.186:443 edge.fullstory.com udp
IE 66.235.152.221:443 smetrics.mcafee.com tcp
US 8.8.8.8:53 jelly-v6.mdhv.io udp
US 8.8.8.8:53 16.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 177.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 103.38.162.3.in-addr.arpa udp
US 8.8.8.8:53 41.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 194.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 186.112.201.35.in-addr.arpa udp
US 8.8.8.8:53 21.38.239.216.in-addr.arpa udp
US 8.8.8.8:53 23.147.70.163.in-addr.arpa udp
US 8.8.8.8:53 221.232.34.23.in-addr.arpa udp
US 8.8.8.8:53 97.110.86.104.in-addr.arpa udp
US 8.8.8.8:53 131.151.46.52.in-addr.arpa udp
US 8.8.8.8:53 236.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 192.231.118.18.in-addr.arpa udp
US 8.8.8.8:53 39.164.167.185.in-addr.arpa udp
US 8.8.8.8:53 98.162.117.34.in-addr.arpa udp
US 8.8.8.8:53 11.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 221.152.235.66.in-addr.arpa udp
US 8.8.8.8:53 13175879.fls.doubleclick.net udp
US 8.8.8.8:53 rtr.innovid.com udp
GB 216.58.204.70:443 13175879.fls.doubleclick.net tcp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 rs.fullstory.com udp
US 8.8.8.8:53 pixels.spotify.com udp
US 8.8.8.8:53 d2v83son8kay5v.cloudfront.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 142.250.178.14:443 google.com tcp
GB 18.171.66.197:443 rtr.innovid.com tcp
US 152.199.21.175:443 digitalfeedback.us.confirmit.com tcp
US 35.186.224.24:443 pixels.spotify.com tcp
US 35.186.194.58:443 rs.fullstory.com tcp
US 18.118.231.192:443 collector-30568.us.tvsquared.com tcp
DE 18.173.206.59:443 d2v83son8kay5v.cloudfront.net tcp
US 8.8.8.8:53 www.facebook.com udp
GB 163.70.147.35:443 www.facebook.com tcp
US 35.186.224.24:443 pixels.spotify.com udp
GB 216.58.204.70:443 13175879.fls.doubleclick.net udp
US 8.8.8.8:53 adobedc.demdex.net udp
IE 66.235.152.221:443 adobedc.demdex.net tcp
US 8.8.8.8:53 sp.analytics.yahoo.com udp
IE 34.252.40.201:443 sp.analytics.yahoo.com tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
GB 142.250.200.3:443 www.google.co.uk udp
US 8.8.8.8:53 70.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 58.194.186.35.in-addr.arpa udp
US 8.8.8.8:53 24.224.186.35.in-addr.arpa udp
US 8.8.8.8:53 197.66.171.18.in-addr.arpa udp
US 8.8.8.8:53 59.206.173.18.in-addr.arpa udp
US 8.8.8.8:53 35.147.70.163.in-addr.arpa udp
US 8.8.8.8:53 201.40.252.34.in-addr.arpa udp
US 8.8.8.8:53 cdn.discordapp.com udp
US 162.159.129.233:443 cdn.discordapp.com tcp
US 162.159.129.233:443 cdn.discordapp.com tcp
US 8.8.8.8:53 233.129.159.162.in-addr.arpa udp
BE 2.17.107.113:443 th.bing.com tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 camo.githubusercontent.com udp
US 8.8.8.8:53 private-user-images.githubusercontent.com udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 collector.github.com udp
US 140.82.114.21:443 collector.github.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 21.114.82.140.in-addr.arpa udp
US 20.114.190.119:443 x.clarity.ms tcp
US 8.8.8.8:53 dlassets-ssl.xboxlive.com udp
SE 23.34.232.7:443 dlassets-ssl.xboxlive.com tcp
SE 23.34.232.7:443 dlassets-ssl.xboxlive.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 csi.gstatic.com udp
GB 142.250.200.3:443 www.google.co.uk udp
US 216.239.32.36:443 region1.analytics.google.com udp
GB 20.26.156.210:443 api.github.com tcp
US 172.253.62.120:443 csi.gstatic.com udp
US 8.8.8.8:53 x.clarity.ms udp
US 20.114.190.119:443 x.clarity.ms tcp
US 8.8.8.8:53 120.62.253.172.in-addr.arpa udp
US 8.8.8.8:53 dlassets-ssl.xboxlive.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 apis.google.com udp
GB 142.250.200.14:443 apis.google.com tcp
US 8.8.8.8:53 195.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 234.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.206:443 clients2.google.com tcp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.187.238:443 consent.google.com tcp
US 8.8.8.8:53 www.reddit.com udp
US 151.101.1.140:443 www.reddit.com tcp
US 151.101.1.140:443 www.reddit.com tcp
US 8.8.8.8:53 w3-reporting-nel.reddit.com udp
US 151.101.129.140:443 w3-reporting-nel.reddit.com tcp
US 8.8.8.8:53 140.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 140.129.101.151.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 eaa3db555ab5bc0cb364826204aad3f0
SHA1 a4cdfaac8de49e6e6e88b335cfeaa7c9e3c563ca
SHA256 ef7baeb1b2ab05ff3c5fbb76c2759db49294654548706c7c8e87f0cde855b86b
SHA512 e13981da51b52c15261ecabb98af32f9b920651b46b10ce0cc823c5878b22eb1420258c80deef204070d1e0bdd3a64d875ac2522e3713a3cf11657aa55aeccd4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 4b4f91fa1b362ba5341ecb2836438dea
SHA1 9561f5aabed742404d455da735259a2c6781fa07
SHA256 d824b742eace197ddc8b6ed5d918f390fde4b0fbf0e371b8e1f2ed40a3b6455c
SHA512 fef22217dcdd8000bc193e25129699d4b8f7a103ca4fe1613baf73ccf67090d9fbae27eb93e4bb8747455853a0a4326f2d0c38df41c8d42351cdcd4132418dac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 90a080fd32b4fdd40e7010bc4cc6382b
SHA1 3d03f4dc8e144924f5f8e2145aa848ffcc35bed4
SHA256 6d0540fa0fc9eec6db91bc8b4dead1ecc9ca3ef3d43552ee16da9b2b0957c8fd
SHA512 5b47eec631de682474128309afcd08ede62d76b819d0e97c5e47a71e4ed3dcdaab7e7bb79f5783acedbe20e1c69989548400d1510e726364f3933207f924c41e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 af2ae8549fc22fd932e72141b3506ce2
SHA1 c29ddf9b716a5a0a8be1e8fe84e8f1264ebe3e22
SHA256 c06e73468813d3a7abf2753354c0119851b52491b4fc41f03fdda908a15cf9c4
SHA512 9a3aafd50b823f25ada6fd136921330ec53031bd9f6e35f44678100f127ca1658564e2baa9106c66d5217cd606f516e82809df3779e184f307fe255df4f813fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c944280423d4c0f0cece8a0ba818e87f
SHA1 2a96de641db7e81cd553939cbe24d420c1644627
SHA256 36a9d7d50a9b3d61b05c393f3d4cd613aeb0024ded292e2ec442d91e8b4fe11e
SHA512 7894feb7b8e05ae4aa928339440395427f8134dd2cee562fc13159cba49226c6cba029f8cd40684663fd8b69c5bbe89aabbd3c686e01cdcf0c648b3fc9f3c535

C:\Users\Admin\Downloads\Unconfirmed 605676.crdownload

MD5 f1320bd826092e99fcec85cc96a29791
SHA1 c0fa3b83cf9f9ec5e584fbca4a0afa9a9faa13ed
SHA256 ad12cec3a3957ff73a689e0d65a05b6328c80fd76336a1b1a6285335f8dab1ba
SHA512 c6ba7770de0302dd90b04393a47dd7d80a0de26fab0bc11e147bf356e3e54ec69ba78e3df05f4f8718ba08ccaefbd6ea0409857973af3b6b57d271762685823a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 604ddb175806a235935c9bb10ba76a11
SHA1 8fa5e2d8ede89bac4eeca805586617c1bb0c07c4
SHA256 e111aeb20dd521e060ff2f1092885d77681e1791e7370b8b709455ba76c53499
SHA512 f3d8a8c49a3db6e82f805fb293cb0d1d6e455ec8870ad8ff52da2a867370f3db1860862e0577f45f071bd992f360d28d227f5695356b2acd935d6180701c6c4e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe579971.TMP

MD5 26488a314c69f5d4ce7c33206ac92ad5
SHA1 271b742f5b5780ced3be1a0ba79cb3a6b19610a5
SHA256 5bacd13a435b22f13be249d84392107aab7d5208ff1d6a38d460f93c22c62d30
SHA512 c2acb1ef89b3f0067a123b7536cf9c3ce9c2c4fe83e81e911898f5cfaf98355bd27da3e29a656a4d54fa41b7408ced81d8bb3ab58fa1a4ea44d750056907e1f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0fba1e87d031c7f3979095005dccfa5b
SHA1 7cfbf64ac7ce59f05aa6efcc6c26590e0cd18afb
SHA256 f514080a49b714d10468ef3d8a7f2e06e6a9f7972bdd3e9d8e73a92c07200816
SHA512 906a8fbd797c3ca8add283e20b123cc5fd961feec1516a5b920d41f4a97f1b32e155c36b752c84c79234b121ed924f70c2d3affd23256ff74dc8b2439bb00bd6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 778031d85f01ced3ecc41c25618bcec1
SHA1 aabee5d912ec5be56eeef4aa8e7fe778d91e625e
SHA256 3345344c75e09c94dfeba5d300f68b3a75a6049ac470fdaf584fd4a39d47f64b
SHA512 a7cbbedc13cb5832f5459ab5e46cd8d7631d519be343e26053e25a8f78158f146d8035183abe103be92a069d92b8cf66ba0a1bd986e3650b6a9da07d958aecd8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 9e3f75f0eac6a6d237054f7b98301754
SHA1 80a6cb454163c3c11449e3988ad04d6ad6d2b432
SHA256 33a84dec02c65acb6918a1ae82afa05664ee27ad2f07760e8b008636510fd5bf
SHA512 5cea53f27a4fdbd32355235c90ce3d9b39f550a1b070574cbc4ea892e9901ab0acace0f8eeb5814515ca6ff2970bc3cc0559a0c87075ac4bb3251bc8eaee6236

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 c3c0eb5e044497577bec91b5970f6d30
SHA1 d833f81cf21f68d43ba64a6c28892945adc317a6
SHA256 eb48be34490ec9c4f9402b882166cd82cd317b51b2a49aae75cdf9ee035035eb
SHA512 83d3545a4ed9eed2d25f98c4c9f100ae0ac5e4bc8828dccadee38553b7633bb63222132df8ec09d32eb37d960accb76e7aab5719fc08cc0a4ef07b053f30cf38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 db017f895f6edccb6b4fb37f7b41c9ff
SHA1 813fc0a101ac1444be29925b12886e5cba24f91a
SHA256 502ff981c025b86b293c4db5e45876f6fe0d7f0cba454888894b362ea2a7e726
SHA512 2bbff3f7a1847123953d0b285297c6814a17442d25d75fc88f2a8e0aff5827b591df89e656264c3c5c12862a086fb2a549e1df2155f4ea3ba82319df69b713c7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

MD5 b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1 386ba241790252df01a6a028b3238de2f995a559
SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

MD5 620dd00003f691e6bda9ff44e1fc313f
SHA1 aaf106bb2767308c1056dee17ab2e92b9374fb00
SHA256 eea7813cba41e7062794087d5d4c820d7b30b699af3ec37cb545665940725586
SHA512 3e245851bfa901632ea796ddd5c64b86eda217ec5cd0587406f5c28328b5cb98c5d8089d868e409e40560c279332ba85dd8ce1159ae98e8588e35ed61da2f006

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 73a4f0308fe1d16290630c30ba09c6e8
SHA1 563afa6db1e3e9501d71901a1895d2299821accc
SHA256 6bade523ff291749bcb92f9ca66ddc572cacf499b63140b19acfac9e40254840
SHA512 044f20448aa77959b2f68e9cf6125b0bbdbd2f89259e295fa333e001d8f67e132745423cedce1beb0c6a4a33a72fb87185b764e8eafcefc3b42a01fbb1aa2977

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt

MD5 a8a9a00d054f290954ad4bac93201d33
SHA1 3939d24517a630088f5efc9f704c37199a675ce4
SHA256 a10077bb66322c296678059d569bafd6c663d145d81436db024fa7b6acff2a78
SHA512 db106db4552e9590a1cede0687ccb9024bb4bd264724a69bfc83635503bec14a927fe5e68564d987e031b1ef9edd5d31dd527beeedf6d6294ae3ca3c1e80a5d3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt

MD5 31d4a02a669016b4acf23d38e00dcaba
SHA1 d61302681fc11acf33350b66e99c78704a0c4826
SHA256 7d6d9b72884351fd4c26ab335c903757ffffd8e96b7a8ee221fcdc2e523efe59
SHA512 ee4f53c266d288839f1614581a9769f604cff989c1504d804291d53054654fb80b46c2624fef8e5a1cee23882b3ab173834e70da901c16a6cdd07ab39902ae24

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 eb5a58d445ec6f99324e77df67f59fb5
SHA1 6bd9dd85fbf2d3dde7b79df00860273734e584a2
SHA256 69b1742b99de1232d09b0378d09020960b3078aee7683f75d38cf519f0665264
SHA512 c94970dfe2b37431126879915ea19a21e15e80d2a368ddbfb682c7141040a1070df5f7a43a26fd945d739c957fb51d12b71ebd19336724933d23fbf7cbb2f3ee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.xbox.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 19d7a99708f6ef801d802b715349bd18
SHA1 d787092f7d1601ae55d2e3abbb06ee40a839a594
SHA256 e8cfe4fbf3f3e127e84d94e802b6c6ef4840b154342c1631507c9fe289b4359e
SHA512 21d40150c8d59a8a85bfb983588b4df231a29760183a974c3d4454a6f2acc5c3d31d6f62e1fe2aa36324bd14f165fbb7740c33bf862e6d2e5d97a76e45d1ef02

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 91076a24f5b29e16c4e5be6b0a9c74f1
SHA1 2242707ae17eb84d520596c736395031e6825169
SHA256 2b4b5a63d32280e85bce0eeffccd264d5cd6d91a07b661c8e9f7df0619d61e6e
SHA512 bf4065dae5fe1a8a82d2a46f8e131b3a838f04a4e1e3800662e77c0e44c6fdeb93aac60c21503a0df726bc2d82ca7f0262e796a4273b933da88bc760990a48c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe583236.TMP

MD5 8cfb448c80465ea4bf6d40b956152df5
SHA1 07965dece89ca5630633caefdcf964f490c6ff12
SHA256 9a2296a32767f2e8d7d613e74232fccb9683a2a5ef85e90ef149397d4150fb5e
SHA512 16239d2687d4f3cb11e7f6bafdd01aeca5e31d8dd370cda0c994d595f0a7091ed78bbf521d5dba48d5a11396584fa54363e62bd38faa13ec93e9fee7a5f4e93d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 71a5cf29e66161c8875fc5e0424e2fa8
SHA1 86e9ee3baeb53aa96ed73a9ed400041aaa2923fc
SHA256 bc5fe90706c9b9bd39134095e77d40a54b595e9f7666417e0bc7a3ba7f61ba0d
SHA512 819173162202025b559db12950ad8d2ddf25e1ca463bd0be43089fcc7c685d38da3a4d56bee73c8575c8dd44c6faeaeb08f931b1fbdea61b7016d4dc28e02d4c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\e1261701-c97b-4b85-9b4b-8f987b23d71d\index-dir\the-real-index

MD5 e6a0442b6cb851709e62933f5cd7b68b
SHA1 3ee1c0790b3a60c61e727058b3e21ce220a13809
SHA256 255bd4d1f11820415a05690cc0c4fc1f659abebef480901e2be2671e51ba33ea
SHA512 4cc2b50b662071bba749d106100251c5584cc1d71f91cc08d49cd7a9fd02f8e4f2bf9c2d49f7d2d53e984b256a9f64a8ffa2aa4b7e6e5eb93224717f8855b0ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\e1261701-c97b-4b85-9b4b-8f987b23d71d\index-dir\the-real-index~RFe5832d3.TMP

MD5 12b8ad28ebede19b9dcee232d055ce5f
SHA1 f0bfc30d71a699b97f24ef88b0fd41e364746f08
SHA256 fde5bd3a89441f38932377f289a07d3c85b9f11cee3f441dff241b9f05d2c194
SHA512 26db0cdbaaac7e574697d6b134363fe00c86a1f9bf054a63e066e5779be98598ff7191ebe74ba30b4480267820711bfe670cd375fe58b4b5ffeb66ec4d412be1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\a510c1b0-30a1-44c8-b617-bdf7771344b6\index-dir\the-real-index~RFe58435d.TMP

MD5 4b6d44833960e937752efbe28f39e8e8
SHA1 497356d1921284a049595efc70b33a606bd37a72
SHA256 eec0656b35385ed64bb648747d6244c0d0ffe0c2691d008972708f86b6cbefb8
SHA512 8b5f522a3c9112fddf7ad0c28fdcf82816a55ab9f5679d9fdcfe524e76f1f6f348bdd219300523ce8dda9b9381b5e062ffee9b099f2714b1e46a7b79652ce8b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\a510c1b0-30a1-44c8-b617-bdf7771344b6\index-dir\the-real-index

MD5 c51140c9bd5e3a7d27d7d980260ef455
SHA1 8072b865882fe0ae8bf33355be0668acdf4d2eb7
SHA256 a1aeb593aa233f054da4bf444efcf35504dfdf74f1869d2fb4920df504eb920e
SHA512 6e63ef09880034f039384485860c8b5df92e7c80243c77badb5770cda8c2e209bb3ac8e794e83c2d16be4de819b5f4a981f2c383076b2a5f88e94734af6cc5c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt

MD5 97a3d5eecd0b590c4fecccbe4ca1206a
SHA1 62c4f013c6c16b49c5912c6307423b8a6be224fa
SHA256 53ce35814f8dae1d8938f4848f0bae29297803d6ff6575adebe031ccef7fa670
SHA512 d2a35b23645242292fbc5fa4ffe0c2033f0c103763e3c8dbb7f72e0f0f25488d8d7af95154ad439793f099b85293ccf75838fec3040ff9504c03d97e63ac628d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 146b55707f1bb5cafd8e85500f849678
SHA1 961811f05b2cbebbe6ee097d52e937f9e83b50f7
SHA256 09906a823d80108941ccf03db3c4f0d14d758d5ee4347fcd593059472fbdd2eb
SHA512 452b79378efc408017e4388c2fb7356a66699770a14f889997cd95798bd65ba24c7b89438987ab76343e68d20a3b88cac40b238851e136d50b843346ec57d0a3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3b2a6c0e828e8d65b89b983564e57a65
SHA1 c397e898f32f40ba45819a50955babb4eb2c8298
SHA256 9e066eb0b370958d5ecf7fcf0958c12ccac8579591fa54a2f5835275a13c3ac7
SHA512 3df0f84b41423ceaf3eae1250a62b93f75764eca98b862472bf398b662ac7eda2ed54a251510d42d7449920e8bd3bc6cff9b7513ad8e9964fae90da96ad534b2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 8dd4ad594e22a3d0a16a44f2b4232acf
SHA1 f863aa6d8131395b5a5c4e0826b916ed6e7de25a
SHA256 7a1e71886dcf675a51a0901dcff8dc2765fa28c9451e098553e8bcc9ef624a92
SHA512 50197cb8ba189a077c2d97fc201c6b0372f1cc9c472a20eefed9ff03a36eab9fffda9db09bd2f01ff552bf8a38da617c7fac6315b88c4119ec9360892cfa9878

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 392ddc2911b0d87271f110a8bcef30d1
SHA1 3c6ea49a1846671d1cf800e284c664a927e8b810
SHA256 231eaa1984dba7577f966d8bce71cb95bf8d6c30af68f9902d7cde7190903e28
SHA512 1ef8f0ab86109d65cd3358b035bbcd8f7a35e98e1a8c14c88650274f6acd013d6599bc366108d8436285e143c1b1274d654dff5d954fd7abc36ccc0da4be72ae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000063

MD5 505499682d18372b95f029a10062b004
SHA1 2bd67069adff54a9044e1094afdb2258f3be9608
SHA256 833e8de6ecd67cb490273c224ce0b6dd0badc01679ce80d325922c95080a9c72
SHA512 7a4040633fe1b3786bbc71821b1ef0c765954e5baf55fabd3f56d1a003b05790fc0b25a48e57dc82e65fe49709cc46fbd1eeb8f3cd16be89c907b5f64a1be3ca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000066

MD5 bf92795fe3abe3bd46764d8006ccac38
SHA1 a2eb38416e34a1c9b02b7a35843dcb1e547ae0fe
SHA256 feb062b3e2361417f9de3bd1a352b8955876a1064a7081ad553c4bf4a4517f74
SHA512 acd11e8d1f8e710aa963f7e0bc3d99700e3b066dc101f346cd9f2ae6db4d19e30baa594ae9f132a74b27a7b6d0208ed01995767dcdd6060e7f470b5987f5852f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000062

MD5 e7ce007f7baa90b8ba7552b4c44ab1bd
SHA1 f4f5a84b873ff5f2de9c76414a2c3d63aefa0da2
SHA256 1b18fef1e8a38c8d0a1e70eb5a4742d8a65acc9ddc76f6644e49808dc5e609b6
SHA512 7fff2616a85f5896e970833a1089093879ba851772d5a5946b6bbc14213b7287d45b6cdd9eb7c92e9a984018a6e85361ef7ca64d31c9914975b485a9839bf226

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000060

MD5 0d4a6ae935fce7852a933eb68c24200c
SHA1 f515c8df1cecc7c1b450dc86228a947b565d3220
SHA256 b5cbfce62da4709c30fb6e21e330f8128dfb2711f80101f8884ed3f234b3145a
SHA512 b90718d8f39722c74b241b3147d891ad6b987e1f7bcdd77c1621139684bbd91cb7a701e04540014843c31ab242f72e7b909bb3e3a99e4da1b96558e30b002f22

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000061

MD5 e8a63d7afa88b9b09863c1cf3e23e8c0
SHA1 4de3c570359684e860925d9e9769dca54cc4d4b3
SHA256 273d732ff1db36c5dc845ec5b48d22fcdfaa0bc17a141d9721f9159b7c9106bc
SHA512 5f562b6c62227203f188a7bae92c7318cc574fcc740461a869a7f0860c0fc2b738966e4c61aa4b9c2176e1e729c08962fbdfbc8e1599b8a4cedb6c51fbdfe38d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000067

MD5 0b4bc18896112ed1f11d6cd3730ec09b
SHA1 b67175f1bc4039152b15f1e2a28b4b9a05dc2368
SHA256 bc91da3e46cf9bd7cb0562047e8aaa0cfaf79a680d7d905fb210c4e06436646e
SHA512 675dbc1200c14207c0df7b32c4b2e58766d8bacc07c7f8428352e5c428f915a020361c6804253f687e6840a5386d696495681424244411419414c378e3213213

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000090

MD5 9196e81f8ed7f223d765423c1f9bc8a7
SHA1 88f9d5c2a6908cf36b8daae803578ca9e1fd2929
SHA256 a4e2bcf7ef3c6c614c2142d3c1fd44caac4eafa86a1779ac31cba164e2d89cbe
SHA512 e7d23866fcac017762d2e2f18597124e9147f458d30038f78ba9f3a2bcbe479fe4792573894370ce2d6f93a00401231d9f01955fde351ff982a82ba87a8241f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000073

MD5 5a05e3730599f56e50249e0fbe43e6bc
SHA1 67432850ed4b58645d367ca41822da8a7e84806f
SHA256 4a47b346a8727825683507fca4746fc89be9d4542d412c0d78651d629fc6aecd
SHA512 53a1ae1e418d5a786046c6d735a989cb45bcca70163494c47f171ae6836f6187e5d66659091e4a88803db73d2e6a538ad7074baa8355a01774924b4e45e3d4ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000075

MD5 b786554392ab690a37b2fc6c5af02b05
SHA1 e7347fa27240868174f080d1c5ab177feca6bd84
SHA256 ebe47cc89c62447316148809bda9095bd07bd5392a99ab4b8ac8b9f6764cda51
SHA512 b71cdb76464a775fca909cabd0a7435c34de3ee4e19c40f5bebba6415295f0be2f82532a2ecda043c787ea4e8c23fd4e582a4d4322923fdf603a56e3fcb8b567

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000074

MD5 f206f8337a187dc42199ff6772838d22
SHA1 cb3f334350c77fc705d9dc3db778dc1b4a03af0a
SHA256 40163312d820a039fbdd57dfe4de9036a06c844474c845f357451706b7a20f2e
SHA512 97666a93f1a12426dff44c283ce0fb3da390a557ed53d02d5c79387b346d2f2bf77d0ab89c7d138848bf268330391119d9f1c8ea5032a93486c53c913af0a651

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007b

MD5 ca46fb91d9f093b16bc7542267096ac6
SHA1 d9f16bb44aadcddc25cab57024a21c089bf39363
SHA256 52d0802e2a9786d832dd0d428e5d48dd91f8231420c9869fcd338c2717b64444
SHA512 6892fc4de6426cec03eb466c0c7d6efba16f9c9bc0733360b0aebef8e01e87560fdfd0a1290d72b17df7972f4a1e5cbfcc2b03b72ce382fbddee00c7a960fe84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007d

MD5 978dfc5547262fb4acfb10194968c94e
SHA1 5f682a28f9f3995585d14b53b291f566754ec529
SHA256 04a130ee03f595f46da3b7bea19ee8a9f5b73211b326ef6fee5912c67c1c3505
SHA512 ba5f472f85ab351439f687f69002efcda2bb2364c35fabe217dbccd37db5347bf37f66fda4b5e1e846035752477a5036174a175ef0352f9c6de08de947cfef99

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007c

MD5 14e59b83709ca646d3ed1445759713f0
SHA1 67ad688e4e321c44e54707c0c63144b898ccbc47
SHA256 98064b76af7d27491b20a6a5cc1f64daa5420f94ce757912eb87733e3823f976
SHA512 c40d7c2744d826af509fb915f9d8f3967ee5ca8ed459e88be3f6934bfeba4932f0f724a1894231e639aa8bfc85bfe825a226ee8b7765e9a3af72c43c5db97757

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007a

MD5 1bfe76226e9814857da39b197085b79d
SHA1 2ff9de47fcdf4de66417351142d259cd57a3a0a5
SHA256 128070057ccbfb35266a8a618550876aff4c175a8992ca942bc4f046978de3c5
SHA512 1984dd514b037bd5a71f4393621b3d7cb98f65d2a26992b5508512f8d0fdabd35a39eabf695d9717ba0be08e180fcb10a70c92de2a4550eb06853068acaa82e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000079

MD5 47ae4e5c8bb5850a7db2580b0c170da7
SHA1 3f7b0c28f8d96c3be1fb4a0183d325c04a5a0529
SHA256 1bb4ffb699784e4764cc490e1e19b29e6f0c5ef48b6e343b8049d4f09e586992
SHA512 8241439fc785932b0897619fc11285dc4d81e7e737b11773d40d94e7ccfa5da47b5e7ce14ec457dde9eeb1bd77675e91bf8b3b6109b7605fdfca04688bdcd38d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000078

MD5 ec22797788f067219b240689a243f25a
SHA1 62eec65787ad0bce4c10eb516517db70958b41bb
SHA256 a1f1212401625b1f03ce14b64542f11adcb7ecb4d3a47bbefb8ee50fddfe7f54
SHA512 385219883da4276218784a3a959139407b61db225cc7f16402d5c6a6901e036167b7b865ac11497f3fb7bbbc238fe966528f60a26281f3e08ee7ea27a33fba3a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000077

MD5 a45bd7c96c6e7eca7313ec065ebccf83
SHA1 152adb0cb4c03584ad08cd4d2e0a17fb0d49e23a
SHA256 b5a532e67ca244d59b590ef6f93d98eb2db7f2bfdc7f34ee0961110dfecfe509
SHA512 7b288f8b125efac763c7dc33504cd3ab1e0dcf2138e2310f62f36164da6e7ac339f3163b43b71758746004b95393ed92c93274ed1d599f19f4bc775cf50f7602

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000076

MD5 6a9a36b5fbc10e5d08ef8f1da748b4ab
SHA1 808e2598711b0019a495e042ae276cd1b5f07318
SHA256 692dfc1e97aa5b8cf2210d9c9117a026ecc2d6bff1035ce88392eb76ef17c294
SHA512 057697513d9379f14551b3431680bb18dd440ecfb381f50e64c143ee2b69665c5b38312ba22b7b4be5b11389ed7424239e9ee2b30baa58dd1b7be751f66e8aa2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000080

MD5 5bcf8259ae799c9c49d3c79c8dbb352a
SHA1 a6a066bd384358f18cf8cd19d008e2e9feb73977
SHA256 914f5c3fb0d7dac8f0406a3ce7e021a24791b8d5440418086fa7395f47aa6a31
SHA512 e9b471f5db01ef162aeefd9460852da469ffaa6e0ffeb944a76750df62bdf2e110223822b7d5d639e53c9fed14a62dc05a4aa964d2856acf8b4219445f167d2b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000084

MD5 0d9b71ecd82a163562f5dc16cae6a3db
SHA1 d23a43609b9b57337ac5f3b206a589c44563c36c
SHA256 2cf1c82b0ce3a8094df8602235b263e2bba6e3f3400c6caebf95150ef9b19b28
SHA512 a1dcf07e161fce5e0d2aeeaeb9f0ce2b15ca16cca4902d290f495cf99c3122ed4b44b617629a49feebb8302dc6fa42d6fd69db4c7936855dd5361d4bd44d44ea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007e

MD5 17a63abccb430d0633059712c01da0a4
SHA1 94b0851507386517c53de67244bc867274c1d102
SHA256 8ced709ca1e66a1e5784989345f09a78e3a8cf148eeb4511f6b281d1bfeff42a
SHA512 021a89dbf096699d9807cd7873318d5ba58f6fe7a94a305a9171ae6a940dc42a05e095f4aafecb4e51dd03b943515b2ae82f1c5f16b5cf95a220213ee9f4c8cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000081

MD5 8612876eb62fff08723bcccc0bb1e6e9
SHA1 6148498c72327a5c3600c3419b522ec3f6e12c4f
SHA256 5dc49cc4280d94ded8a56bde62ec2f7e037f9c028e78d6e5f7473d59896c026a
SHA512 1f14a3cd3f4067ea74090b4fd0a848a58090a929460981b13c9695d1f85622809c8183651ad1d9f083931498f9a5d5e30fe074706f81760ef63c8704b58abe4d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007f

MD5 d129184b28c2f3e132f22bb0aa05abe5
SHA1 c4f8de0c8e3f46ccd9f4c82626cf1ef32685424c
SHA256 2a38a62ca27fe55578fccfab41f62555a31124768c336622e7b40abe756329c6
SHA512 60f2ed628a7506fb65987e8c163a0fed0669d820f5c71a4e8ac1738ae4a66983f38f3aacaa560d6c8e305ab385a7cc5fb7ec83ebde3087e4c786ac6563d7abcb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000082

MD5 f399b56b2feeffdb6b4ac5abc51fc1fb
SHA1 ffdf2a35c60ed58061db3c4899818dbac610bc82
SHA256 2b90f6078d08070224780a34433ba452a2ca6fab086c6159cc155a95c9743b00
SHA512 0f43ec46fdd66654babbb9a54ec3e1b3c3e006205a234d59f435a89382ac3c9899231a200e9bd8e5d88d06f1f42eb434289ca121282f7189e3c7326812e091d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000083

MD5 542099579d493b593cec4abd198add6a
SHA1 5f39a5847d9ff5645139bc25c93bebaffc3ed272
SHA256 1e3f762897c4564a73e6991662bf47fc0c0e648af88a5cf02ab12ac62ef87fd5
SHA512 e2530b05360d566e2ecdf68469840ce29f50b0448e1c6e1077b7d77c4e9e2897d960e139f134a9a0d6e496099e4e1dde7ab35e1df853b453b981091bcfa13864

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000085

MD5 013c6e98241deb5f89e43e9fd15d0479
SHA1 64bab8bd003081be3792b4a50157628eeb030ac0
SHA256 6a5616f761ba6b5cec3f0c37f730086b0b38d0011dddad96666f26fd84ab997e
SHA512 adc691d42cde443c7136cb66a76bd7c18f1f52dc2df8abb6dd4873221f76bb77894d97e6978661a3712474a99b970a7b0cde416949e947c02b3511278c1a4866

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cb6ff49254d50a10cc0fdd4713874625
SHA1 278cbe565ae4b847062e87c06b41708776ccfa21
SHA256 3306264f99d975ef4b1050fc5545c6febbdc5432c03c6e4c5acfb62d1f5d9c3c
SHA512 ee12bb143ad0547456b8ec10b60d28af4b93b14c72d232cbb87bc19bad165bbffb9bb7876d7a0992123c51f52b75003414a7a3a8d4155de1881402cd4063e367

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3e3ecd4162cb1cc2fe25ab1a2c0fb036
SHA1 31159d189851067477d97a898286bf5d886667c0
SHA256 6d8a67d6559053f14eaa6d6e263b3bb3a52995dccec0eedaac682df1a22e1d37
SHA512 ab829a627b8520bac6e512b9898761146414824431c6358c3074addb43831a368954f59f776d0a6da4f35e29addc71f1d8d4eb74e5b2815e4ce07449696e4117

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 aee0d0aefec9ea849122d945afa87e91
SHA1 039fd01fc0f44ecb96ecd8fd416a6b3752432d30
SHA256 d86aa63da897440cbe9b1b515cff24f7b48f7a453745219875c85ae9f4a32d31
SHA512 5fb0b1912d84688fc48f0b106b971a7835b948b10f7dd721dc12fd589cea18912af258d6038ce13538eaa2736c092f957e0342d4a57d6f829725fe0cabf87846

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000064

MD5 8a4fef9ec689284223bb0e91ceec063d
SHA1 ff98e467402949459df4d7dd6d9f119a1c66e8f4
SHA256 f2d2eabd5e508b5ac5ed7069bfa1d3885335b3985340cfcf6d6d7ce5c24352fe
SHA512 d20666c90b382eb1f4074060aa6c8fbcd4c8aef80ad3eda3de2dac7dd8c3aba426db7a1d50d604490184fcea6803c976f62a0d32a18ff174c228de3ae5d43bad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 722bcb35aad4fb16ee76843a8d2e3d93
SHA1 842860d2fdc661620edc6c82d27288024a63435e
SHA256 3f683581669fd8219be257ad9481b60c24f9efc44276a2c78b9d0bd0c5f810a1
SHA512 ce4366702fcb356422d270f9fe3b16ff279261f6cc7413eda942915c04041fb7620ea9aa287a9f519be54b9bd5bd1ba6195c8ae0435d64961402e471e757d359

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000070

MD5 b576652319aa7441da5c94548c6db70b
SHA1 4f1c2dbab8ead44236e449084c519f30788d4ee6
SHA256 ef737f5f2c87ed6f1180d3ec8870e46e20ac4c614c9f76260873c5f879a19f20
SHA512 9a03fdd748e2d5bc522041369e07ac331daaa539a7c1eacfbbba144b882970aa4ac4d2e2e5535f5b0ac483ba738dd9d42b3ddff6430814851389879c4081c569

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.xbox.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.xbox.com_0.indexeddb.leveldb\LOG.old

MD5 653d2da30a1b52c727b79bf526e507f1
SHA1 ba6e7ca48c16efb18571d69dbd0aa530d21d1721
SHA256 89cd3bd7a6ab405f452eb41bf4d672501c9fe86ea59f320f504566d555a562a4
SHA512 089aa3890fa81b6f0f068ffaf5440b57a5c0ec8caca41b94dce0d3e20226bed4a520f6b3d8636e39c7ddfd730a1e4ac06c002f6fda0b29684c31ac055b4f0ba3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.xbox.com_0.indexeddb.leveldb\LOG.old~RFe58d58b.TMP

MD5 a5a5405735c498dc306667d9d5ebde55
SHA1 2171a0dcf2e59ec42a5facba6ebd5512651cbcbf
SHA256 5e85f1f27a3b1e786b9a95fa5be97d5d22dce2693f41058f5fc78425de4b2e63
SHA512 70629f611ffb699ae11b49c24f2ce555be3e9b86416f1e461f2f1c10b04ec527eae37981da71220da7b49d8f25969d6a7132d8963b5efc4a46f3300dc3af0347

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000086

MD5 7dbd5dca202b651abea7db3d092712f3
SHA1 cfefa958e9cc089a5355b73145f8bc834a00552c
SHA256 16c7b582088cd626101f338070c7046b3fe902a4ffa0069651392314584a4b46
SHA512 eb9ccaafa365a2965ac92a9b34a065913825aca5fa1dd8db772a97fa5928bbc5bc80ff6b536d66f523ad7f0f5304ddab861e0e5d1f19ee7f2b633ce4b41d9c3b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b0f9b4d3ec42a0b0_0

MD5 9ffafee36192b3b951d544dba82053b1
SHA1 e9598b7c2f3927df00bbd478c488624ae5fe7746
SHA256 c0589a4806fd93d55888e9489c8ed7e2ef457cc671b3518936189c9d3920b926
SHA512 eea5a04d086bac7c5b8e0ff8f464513b79f708aa9d8feb54a7b9b8939faa2d26685da164c9349fbfce7a2838dd75597ba7af2660be75cf871dd8a234f8d5f8a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000065

MD5 69b550731f9a789a39d18eb917e43a4c
SHA1 20721285bcc8dfc47777e43b2d94a224469a0b50
SHA256 230bd4129d0d79dd196efcf6d9e8db962c5e750fa539dfb5b72ba43666485066
SHA512 0de48338b7108eb2b9206c57d382c69703f1424788f7c665f44e4ebf8fbc92da8f11d10416c03f37d62c0d72cf760b902ef52f8e41caeb89ec221f0fac76702b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000072

MD5 e51f388b62281af5b4a9193cce419941
SHA1 364f3d737462b7fd063107fe2c580fdb9781a45a
SHA256 348404a68791474349e35bd7d1980abcbf06db85132286e45ad4f204d10b5f2c
SHA512 1755816c26d013d7b610bab515200b0f1f2bd2be0c4a8a099c3f8aff2d898882fd3bcf1163d0378916f4c5c24222df5dd7b18df0c8e5bf2a0ebef891215f148e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000091

MD5 5009982b60a0f93eac4c1728e5ca17e2
SHA1 c0f932d333b91a4b971a52ce88bc96320745064f
SHA256 2ffc0ec332938cbce14008ab246c3d918800189aece932e92bedd8adb8332fe8
SHA512 401dd0a45c177130628787b92a17642783d27b1a977833af4110d81cbf2572a159a371beb473baa07ad38ac8297551aadadd2ebb80401a73acd580fdc03964aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 db71e1d5d9ed970923c09dd0f46ae37d
SHA1 068114ac8ebc4924cb5597999ace2056816006e0
SHA256 152b094eb2c9e59e9f081244f77aac6734f6cdfd387e1d449a63d190620c79ef
SHA512 e30eebebd05d56b56f52b06b425468399b34dba7c3d0a41230f6b66f1148db7fa9e124aeb61af86141a9252deb2855f2f7f5132a67c0ccf1c428147ec6c5668d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3c4670156e79fce979f1f8a42abaaaf9
SHA1 c162b61cc603307ffe5b9a8ba553220799bc9e98
SHA256 efb11a262328ca837f9008378531fb1250371b2b76d847cbddc4621b68537c45
SHA512 13c6f51c34ea75bafae0338d7cc3febeea1f287293ef995648e8fe3dc3c42d46cbc6519976ce80e171220515a11ac9ac28acc577efd4063cf69c23edb456934d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fed3f7223100d68ccf9a8faa0bc744f6
SHA1 a0dea8db3796719144221d1a9bb2ea886b54a6aa
SHA256 447be7eaf6e23133133676ecdaae7d49931736c7946e61a0f67187668c5c06e3
SHA512 d8124d0a95870c646da2714a10c5780339b716ca21ceb8e4935b415658022a87ccee1aefd9ff0c9fbf6252b859650ad68e7ee755d771970dcce0c233532ad51a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

MD5 b07f576446fc2d6b9923828d656cadff
SHA1 35b2a39b66c3de60e7ec273bdf5e71a7c1f4b103
SHA256 d261915939a3b9c6e9b877d3a71a3783ed5504d3492ef3f64e0cb508fee59496
SHA512 7358cbb9ddd472a97240bd43e9cc4f659ff0f24bf7c2b39c608f8d4832da001a95e21764160c8c66efd107c55ff1666a48ecc1ad4a0d72f995c0301325e1b1df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

MD5 2448f641fbbbdd88f0606efa966b052e
SHA1 25825aef444654fdc036bb425f79fd1c6fc6916e
SHA256 03f060bf37ba360360d6a7413d98e485e7d8e6f69e6a1de300c788d439b78d02
SHA512 d56e3b19d3f4c6d6663117000b99071cc453b6fd93f708bb8cb92d5adfa0eaab749d8d6cef4f19fbba548d31edaecfd0a74ca55dbca7d5f5f1fe66879b27b9d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

MD5 68f0a51fa86985999964ee43de12cdd5
SHA1 bbfc7666be00c560b7394fa0b82b864237a99d8c
SHA256 f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f
SHA512 3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

MD5 3051c1e179d84292d3f84a1a0a112c80
SHA1 c11a63236373abfe574f2935a0e7024688b71ccb
SHA256 992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3
SHA512 df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 49c84003c4ab05b67e207e1bfcc93d91
SHA1 c85ccab9be5efc78676b5775024a82e1e5508183
SHA256 e13ad82905295a69c561ce935465d4fb00529a01fb324a182e599fa567ed7b2b
SHA512 fab1c88098556e5ac93802fc9f9be022ddf3e950c54f7e43f47a2c0078ee591b083fd2bc5e09bf83da01dab344d3f40e0ad777cc94aed274b12d6f861996c65a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2b387ddcaccac5b4406d3c49496692fa
SHA1 f064e9a197a762041dbd165fa3350a732b2e3547
SHA256 edda56d15556439667e17b4a693a672a0b7cee742c8023cb2d2b07327335d0fb
SHA512 7eeaa5aa03f8b9b31f7018fe909ebfd1cce452dc6ed19c86bc1777ec98c1c5d2d26761b61a098a5012c6b37acab1033a7aea6391f047764aa1d4162f4f34675e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2692c453923e2a46_0

MD5 e2e7881a4d41dad0f4ae5579baf70658
SHA1 50a87228697db6b01d9ff98694edea8624ab4293
SHA256 6801013056800c42d8fba1e766562858314150452aa0d378a83e8d99b4ed8963
SHA512 ffe0890006077f7f67f987c4962cc9fa5761c858edaf818df0c36308e73d8559a8892b8381b5ea1a4da86492bcc9e6d96cce7e6c9381e3ade4c14070742dc60a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\18599539e464790b_0

MD5 102762555b9d7001519efe4f0b6e1231
SHA1 c4ad52c89542703437f6d14569dd716d11e9ba61
SHA256 2c2b5f65eb227b21aa7c8f1e11439ef3e4bf06cd14c16fdea33fd62e92e4a67a
SHA512 855c4c221a831b0cdf9f8a8a8c9b7ccf80ba652d383d6939a9f3aa8169585ea6624de48e5c5eabf9f70cf1cb0b3fc78a318984da434881c4c3c37dd588f07f07

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\936efd0e97fedc4b_0

MD5 c77a58f4f946c35db872774f96ece5d6
SHA1 47c4d568ffc1b6aef946f493b740f83d7d9bb1ee
SHA256 7603b453f0090c229bd6d3b948a17c4298f809c328c950c47dc68e20cb632773
SHA512 133a7857ec719a91b64f09af1f33a7c38f1920dd13cd94a38ef0cef7272f5b04094436e6c70db6c6bd45d61e198ab7bd18b8d98070a84cc8bb9ff7157e525ae4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5cc61787bdcd1601_0

MD5 dbbea239707b2e58a6effe37d2b35c81
SHA1 b035b92e216fbe6340f9813e41ac40499a5318c0
SHA256 deb12aabcbc8101a597956e5fb88b2806e5873c5f99b78644053c2c333750098
SHA512 e6a55b04f970be553468bd742eb8fdfd823d54e0d51432f5f4d24de818b64e614efc92d1b7446b867126eea05ee60f0f36ac79903c6ad25e35e434f09b0be644

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6c9eede6fe4472eee003e247cac23d6d
SHA1 f3571e6a8536026750989677bebc5af29801aba5
SHA256 8c6f26e0bfd6d375be13a0b7d5f70603ee789c7b34f141ae1c5b61b12bd11772
SHA512 bc5d25cbc0266cc547ce4884944118ebce13d7333301ddfe8fd0b229088813d055e337d72b06194516f38f4dfbda0ea33830091c217fed5503baaf6bbf4f97c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5b71a5ad454dcb402407d5281c0b805a
SHA1 ce235d596305a9a8e082adbf6d234634952d41dd
SHA256 11d00fa15558a2b124c3cd8a4f420d85fc8b06611e547b534c070acb7d221308
SHA512 dc706c3278ed25e8f9be9fe9eadff6232791dba88192595e3f6b466ffd06d4de418dddd32a5a68cc6d3454eb12878a199faea2ad662f08fc508283064d15811c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 7a52e58831bc9a05ade9247af61a394d
SHA1 cf24063edd4cfd4747e8b124bfb35bd331b094c1
SHA256 d4a51cd23d578a44fd7f393a8688faeb97ac1f50d4dd1e7fc7b11784b585d96a
SHA512 694351963dc00c751b3362ffc4f154b3ef33707fe461255ae4ec4060d3914ab8ead6cce22483bdde8f44ec54bf5e8de46b6387e41ef66d5e803c107e6465a76f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cac16bacb81fbd10e27d348881f943b9
SHA1 caec99820f09df90e37bd22f12d95087c380ca96
SHA256 7caa52fb36968fbcbc9773c754e9b91d8118e7ce00621ff1c4f011702c9cc971
SHA512 7c8ba8b6e8d1a1f54db02d5abf52c1582c33e2e5c66fe9d28a4bc719a617cb49af57d58aea92c7baccc9c6f211e5cbbea9a8ffb5e83f2248e337c9f20a31ab18

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 bcd08c0c6de6f71e25d6d534a7293a69
SHA1 6b4700291b0d6f84ed2599360418bb5313ac5564
SHA256 c8604a5999e38f2f04734be798e84de0d1d0fc35c9154e15c90e0112a07a2eba
SHA512 286cf8e684c856e0513d91a359ad84f1758183ff3ae1b0f4656cb95a67ac28059300a744b00971789b7e455f14b70fdf5bf59a7501ba6c32e75e1057b7d3ec39

C:\Users\Admin\Downloads\Unconfirmed 579252.crdownload

MD5 33c9518c086d0cca4a636bc86728485e
SHA1 2420ad25e243ab8905b49f60fe7fb96590661f50
SHA256 ba30ea16cd8fbd9209d40ae193206ad00f042d100524cf310982c33369325ca2
SHA512 6c2c470607b88e7cd79411b7a645b395cee3306a23e6ba50b8ac57f7d5529a1b350c34e19da69aeb1ffade44d5187b4a1ef209a53d21a83e9e35add10fc7867d

memory/3660-2682-0x00000000000A0000-0x0000000000E0A000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\XboxInstaller.exe.log

MD5 e57a6e70b8ae6940ed761121e5f86bad
SHA1 aa080336f2f6fd47ba55b7d9b5ff21ec27c665a2
SHA256 3f9e9790ecc228887f345c8cc495b550487c345c2ddb63aa8d81f45d02741f44
SHA512 16dc9d8b849f4a330e81fc8dfbfdc29823fb9fee7983bd9de7b936d14ccf94561b6697d67c237fc11d9720ad212b7c3b34b37921eb50fe315ee1b9678f058d9b

memory/1752-2689-0x0000000006110000-0x000000000611A000-memory.dmp

memory/1752-2688-0x0000000006100000-0x0000000006108000-memory.dmp

memory/1752-2687-0x0000000006130000-0x0000000006156000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 57eee846bb13fb61ec75c35e94d4b8de
SHA1 df09d6fad54d37b72159aaed94280791b43933e1
SHA256 55f8c374d16fc8a47c608964582ee24504cd2d9cfc12056cb2d809324a8db67d
SHA512 1189071a8b0e2933464c1cbe10bffa9cc23ce39a29c0337eaf2efb0c50e394d1eddc541edcabf190db9d076621ceafe0238b505a6eee882cb20160f083204dc3

C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML

MD5 7050d5ae8acfbe560fa11073fef8185d
SHA1 5bc38e77ff06785fe0aec5a345c4ccd15752560e
SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
SHA512 a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 de699062d08bb1235b64a585f9e142ce
SHA1 024523bb3dc92eff5ad82220d02767ade52fe5ee
SHA256 72ee75eb3669adc46154fa4d4843e89ca2680cb6a1bea03e520e16343abe61a3
SHA512 a733b0b85ae1507e0817cc68fdfabe46b338e82de79d5b8297967f6bf3e466e4b927dcac211fc907dd4ff5657b6137db63092acbd7b692ad6042213b526b17d1

memory/1752-2720-0x000000000B780000-0x000000000B78E000-memory.dmp

memory/1752-2719-0x000000000B9B0000-0x000000000B9E8000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

MD5 3f05c4104136fccfd74eddc0f1a8fc11
SHA1 0f84faca66da1bdbece28ff10eaef52d0dd460d7
SHA256 5c4e03bb71b2b9e4e4842c35a9f9e8242af81d5b051c1c4992a335bc4e12106c
SHA512 06bdd967b12f8edd38391a6eb463c7b19a89dcc651411b67270e2e2cd4492c8c49541cb9b6596d520e912802d97a73900415c0878f9af5dced2fd8260d27469d

memory/1752-2735-0x0000000016680000-0x00000000166A2000-memory.dmp

memory/1752-2736-0x000000000C2B0000-0x000000000C2B8000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cca525ce3316d3a37209ee9411397035
SHA1 99d09f1882777989bb24a6bfc15fa2127609e548
SHA256 822e2e37f49c7cd1c8f8a038eb6c970868c603c7968282c861ab71454b603f7d
SHA512 322079949ba3498d368a3cdfbda2217fa1b8ecde5e5901680145f9010bc46951dbcc9ebca52b353cdb21d434f13fd39fd1c5976f24409bbb9aa6c919ca912645

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d2

MD5 151fb811968eaf8efb840908b89dc9d4
SHA1 7ec811009fd9b0e6d92d12d78b002275f2f1bee1
SHA256 043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed
SHA512 83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d5

MD5 3cd22a53c96bdfc34593536506702186
SHA1 97083012bca4c324640be31fc8b130f38bda5638
SHA256 38800b7f50990f919f575de8801058f0981c08f2a53044b915f1f8ea0df2f10f
SHA512 8feacbf20727aa9cd8c18bccd143337984aaf31eb1d3956a5d8191b1289cd5cd7cf501f6d18ca9a6bc79523de9d6142b658ae178f66cbc3c2a69b78e3d21b328

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d3e875fa4a17a174b1ed3d284c29bd23
SHA1 f6f72f9dafe6c7e6ccd559aa0d3ba74be827d7f4
SHA256 87c583decf2a0426451b3e0fc3844e08b4dff57bd5c7b8f2bd20aa36ad37b892
SHA512 7b4e002f503b9edb4c6f5fdd34a7587cd2ed66b6d7b728e224323e3f9c968b9a1f6c949932edbd8ce114685f7df0e97a7391f8c91507a5d81415f37c8ab18c30

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4b3bdcf354110b2ad61a1623617b7dd8
SHA1 e314f9ae85eff3bafb7a8834b4a30519329012c7
SHA256 17fa5196b9faaf4352b7272c3a48d16fa2d5d59eb6b25797104bbcd5154fcc83
SHA512 2de11ea5818314e665bbc86b6194ce584da16afc57eb9b9cbf7ccc0d86b66f6b7280314bb6521ed44daa4b3d970188eb3d257421857da5a67202162ba40b355d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9e79f77879f2d1da_0

MD5 aa4ff28c15d491e47797393bcef0bd68
SHA1 9e8ae82f6712c181bd0d5cc0d049a072b6b2c938
SHA256 d5b586ec89190a8f19225004319bd83894b2ac546b13a078dc334877aae1d9c1
SHA512 55da4115d52d08bfd123efca86d3d3d1c1adde37b75d3da66b410d92606eac4b2dd74d5bebd4a13d169b8ef76c3fe6b00b45bcb7cc65f47330f3df4efebb729a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e3

MD5 0d78964806b61a003056e27b74af4e96
SHA1 552a63787619ff3d4ced22750d601de5f551f0b7
SHA256 af16c22e9d7ef9e378c71fd0fbb435b4ce73454005c8a11482c976ecbcc1ddae
SHA512 9f7af8dced29f2f8c998f6399e8351d3ca35f81b1d392c59179cda0afc78840278d0a85356cf1709a9be0356a566587058adad8dc228d0ebf62399e2b5696abd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fe6d3470eafa30601a7eb079835352ff
SHA1 201cb4e9a7974861932b057f4f059837db9c77c8
SHA256 ed52a8e736f17681b240b64580628f90943f092410b0bcaeb04a34d387871e12
SHA512 20633d65c002e5045339660e4f72fa323a6f5a077df6345c43cc51ec8da2f93e34144d96f107fe3fc272ae6e2e4ed758e6f2d97090e014a08972fa804e778846

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3f1957460a47ba6da75d8f3d7f294b86
SHA1 3c07fc04c9425bf681367c749717a0b8a4492fb3
SHA256 612c97cbcc06a54578b51c706188e9cd033c05be767daedbb9e8c937d3ba287b
SHA512 a04b9de7b0d4464b38b06670c35f8575334cfb50d5dbc9e3b84e62cdb0b04f78ebf847402a04179a59bc7cd15bd1c6acbf3c2b88f1372ee6b527c81eba4d3e79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 6e568485ddc54895ad69765061ac939d
SHA1 a2fc2f462494515c2fbd3d867f1e499f96bdc693
SHA256 36c09c648f39e238782cfed95b5df185a176695b2b62515a8f370aa3f0ff92d0
SHA512 29dd4ae9ad479a49d4440f0452ad27bd762ea0e85db21a96f1936b22dbd351e0fb437dd1b419aa135217412e0d91500f8508e546f44ca573cda5f94001dd677f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e9

MD5 69083e28e7f3389556ef76063fafa474
SHA1 b5b8a9e92f430f34471bb33a7049d19632b097d0
SHA256 e5a80dd6f02925afbcafed9cbbd84c11748a0c16f9f4489a5924877f26ecaa81
SHA512 53e50f05f18f2d876ced7b3d0906e2247e789d01a9ed567e18f153e98161e4f07a8237f067d7170ccb50c1d22463c2048489a1028a529811cf2e93774c78bedd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e0

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000da

MD5 63ea11b6688aba3f6fd408bebec94341
SHA1 a310c925442f5f9dc571fbed89576303419f77af
SHA256 fb51c46fb1f824ef07c1b58cff5ab5b0f2da8f71e8301ba70489f2d8d7bb7b11
SHA512 75b85bf735ecb740db7cf89a088f6afbdc0d3a9fb79146b085e84503a670a8cd8ff6a72d352387a7f2a483c417f582ee4ac51a93d92100333f1a6cbb427f81da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000dd

MD5 e48529b8266011d469e2f5b6d3e051b1
SHA1 fa65ec31446a1941f6ffa756891090c4742ff3e4
SHA256 30fa90d690a249afc2d05987fe32b42120b57a81ab7ea87dc387cb4c427333db
SHA512 b0f6cc67d9c4922b530b390c3c0c80e58590a253128a710a19abe88ec7eefd01e531f6f01dc80617a4a2eadd6a8370f5f20f63a056759fd40681628c141ccd25

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ea

MD5 35d263dd13283bdc83f67fe1431f2d18
SHA1 13520c319aca4ac7fffd9fd6157bae5ae478ce7b
SHA256 22f74876d37f79b5ac0d5d7dc68a6e1aca4a4b438bebd9720f116e5e59b24bb5
SHA512 d9f5a6d7630341dcea822002f5be4944dee35de7abc72cae681e174ef7c67e61d538ae58ee0f6c5617777d819f1afda0e8113c8d8b88310b8e585ed6f899e9e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000eb

MD5 08ebe64a298d39cca8af1a71ad09ac5b
SHA1 8cf43864fed578fec7fe8725e9413a1d4c74f8e1
SHA256 214a7aa3fe20a462703b4042c87c017b9fae15bbb8b955deeb502f31e98f3980
SHA512 495a7e126bfd943a257097b3ef9eed22f27ad8c568d9a9868109717b6c059d05c4c38f6471e5286fc2b60270cc8d9e10c6da1c0464125538fc5943e5dca3c1bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 b9e44e5a925a3a9d660a98b4a61db04c
SHA1 d09afda8afa8218a194af5230fb656a57db3f45f
SHA256 e60d47f138764bf6528fc15432185b4e4f37fd7cfa85ad8383c0d7c741b506b2
SHA512 1bd82d6736ff944282e4e9e4061970834978bdcbe2d872f4010403d14d48dd23d676b4c68a352fb2666e637d6163c6af56be08d57799384414983566032e6266

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000f7

MD5 bb30ea3b46964f49ba85f475efd1fb6f
SHA1 1bb4aae7781af8b933e1dd4dee56879a3ef92d38
SHA256 7a5bfdc2463dfde6b169ca4555ce9f5a0fb21c15c3ac807967590df27dd800e6
SHA512 bc52e8de4712d416aebf1d403d6ee8dcb6386a93dfc6727613af487f73de69db90913a9e9781660d8dec121d720ceec9c84b260c76f0f6f565ae80967eee7474

C:\Users\Admin\Downloads\KRNLWRD.rar

MD5 0543fb19e06332230138146e743561d1
SHA1 eda5c083624948c1388ba73c33447c97ddea7f41
SHA256 a5236b3142e898d26bf6f106029a3dafc72960eb4949b1ebb59cac601364fd61
SHA512 e7d934d87b730b484c578f3db648224cc192f292a1f9434a655719015da440b4d15458348a85c2f88d0b6808ae032a3f082f12d1b53fb0a7405425d95f7a358e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 335a97e755f5d113bb03fa33fd3ee4bb
SHA1 1f6937fe84e88656b447d96344abdc52e4d7824c
SHA256 9af8f83cda7a3bcc973bc4ed4faa73f33a600634b6ff43ae6afe059cbe56bfa9
SHA512 07c4ca918b57c9dd57fef1d3dd466ba9e0f2a0bf3ec6df600ef8e8627601182e09bfa0469650da53a8aeb419f411a62817fa72115cf39bf59fc8e5f99b560bad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 99e2c71b903dc8d2d2ee76da8b371f40
SHA1 524c249234afbff29694b54552def09585346d96
SHA256 f423d4c2bc73d9f95a9f8aa36ae986f5810217e45e68e5a9df2fb8db70ddad78
SHA512 2464e5eaffe776fa871cf96ea04c91290802004ec48480629569d2337e5e65461df088aefcb37f16c9e0c58c3305e5710ae19868ac2e1689f54bed1094d9ec75

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 575673d2c64b9e210b502ba1d8b39be2
SHA1 07273cdb8cf526b0a3ba825502b9d8e5e25b2493
SHA256 f9f5716156ccbd6243d735a93fe7b0ab05473c60300cc99b4229250691bd1c49
SHA512 fb7b1ad615b80e870a960cb9ba91f17679601afff6a7ee7e7eba9bd768616638d88f2bc7644646941e9060dee603e2146229c572dd217d0b106a3d4c72acc0e6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 211d3ef12ffd44d7171766a9eff28437
SHA1 703219317f17095f40c2e04392fc2e0188962f36
SHA256 6cda412c4640f50a6aa97b7d0c7d378663c4ea756f0ddaa1dac209328877dbd4
SHA512 954faec297ba3e90d3f08b4224eba13545a237358801d4a068605b00ba0b9f524f3927bcd8b764116245582b5d2158c5970f6fd9e367c371b62db08f794edb3b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9698d49856ecbeec2b14263598ba6700
SHA1 d7e47576b945cc777d540aa6e40c65d66f35b813
SHA256 3bb6085d241b7cd604513853183706e208b309a3b8c64037ef30885d787a09b3
SHA512 48d650c44c1be5e43c3543a9f0afd78c59ede310746b37cd54a82fcd4fa7d82650a0b85b88668c02bd06de001f9d479825d590f3f1d428ba392b555a468206fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9b30082dd5f3271bb55dcd8498ddded1
SHA1 ae9eace04a014bef8f498aa8d48ec8b07d9483a5
SHA256 5f1d50990617ab94b6c9d13017b3d05582aaab3ccf63b031d88faf5f1dbcd464
SHA512 e31304a8e391aae77961058ddec18f2a7558da49785e25253bbc3c7a2f63fd4a9da2e4680ceffd3cb4c29d3a4829566b261a0e99047a3773551bbfab0a3287fc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9412c8b664751f90_0

MD5 54bd1e5318967b98807346896053b7d6
SHA1 25b2d345927fef3f3987fed52a45ab94344ee8ca
SHA256 5f4b42effdc4c7e80b49a223987c53f44fd3ae3ec0c50c9b0343bb19982138bf
SHA512 bbb7ae5cfbf2b6511372921445ccf2f251310e8b40c3a40f36b1cf0f113516a3d7c0df727fb289319757b852247690ddbe56dc2bc4d370c82af8fcb4b8d10bab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06450eb6a7b09545_0

MD5 1b11faa8a68eedc5b4d9241037df4ee2
SHA1 5f6dc5b08fb1fab5f2fafd56752b344c45b864bd
SHA256 72b0c13d4fbc251a94ce0207a950a0aab6fed3d2ffcc247ef4de7320264b78d2
SHA512 6f859d593b78d088d6be6384f3f42a3695d65e3b49882fa6754692fe45d0662aa1e35015bccdc69736972e30d4f8ed8e61e48fdb8fe10d5ad4b33bb6032d76fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e55f0a6d1b533c66_0

MD5 e46baf5c038236b87bcac0afd9206a46
SHA1 a3015cedf9dbbfe79b8989c91269f0e1a8c15f74
SHA256 6c5e8edaed622ff4ac1d76c8b8706a6dd545996369d6512649b9f0621e927fe4
SHA512 5da933d7cfb90b221485a36645b0dac5a031e771b407df0bac8f4e6d1644b4c4597284b79452bffbb5653824aa2d3991ae2695d625cab217afdde3a0750bc771

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000104

MD5 5c2856b87426a451cd3e535f5bf6552c
SHA1 a6b869f96175d67be8b7509457c04d9b3738248e
SHA256 73f1536f9a0ba747bb52bb81601dcf5504b5c8f60be022893a9ee676739b5adc
SHA512 672b9eee8db5a4b36d0f174e93a01e5a5457892390c64bcfadcd171251dd350bbe083a8dcee90d4846903b52181a93b8183c908949e1dd36cdccf1c9aeee53ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000105

MD5 9a642a006ccc5edc7ab92b616fa09854
SHA1 0117986cc68348c6a2c34b35698bbe77f00a1650
SHA256 2f1d61af6d6e65f06a3e9a83f80e2ba877c4165ad0e76567c94f58ee95f1298f
SHA512 78daefb7c62e05cc69fb3be8301f4e15e50c998e7d3196f34131f896d00bdeee5707131347f8e72caceb51b6447264b4cd38d459b72ff1bf62970b519084d6c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a0895b97d9f050ba0ec394c513355b5d
SHA1 96e9dad02450d04ca85e60b7009af6f2058522e0
SHA256 b7e0d5b8e3412cfb1a7857b1c8321512b1ec1fb218ba76dcc7cbeeb20a14c7d3
SHA512 56dc33e409c41b1936e105d37111093935a714b4e9f767d28f3833615b9ba6b011f372cb3f798cdf8b98b3be1e35a83baedb41bff3dcdce4ebad04adb6a35271

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 85073cc6172374e16e32aa9c54e9ed33
SHA1 857e62b9f144876bd606f1a74b0f49630152aacf
SHA256 a8b5c52807af715b4498359496fd9f7264163027fbe1b70eff3698362f31c801
SHA512 80ef75755bd4243898731c5251548434dc8f8ad764205096f4cea4d9154fc2a366561b5c9070756d56b4d9393a966a231f8dc2bb88cf3b21a43b9829591048f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4d3ba59d122bc354_0

MD5 c6de43870bcc9e6ee2f8077027ae6925
SHA1 a967849cb12ddc19fe11aa625c69cf3ad802c0bc
SHA256 5c1cfa5b0d6a70488584a39849f69d949b732744ba302bc164394dc8349942a2
SHA512 c6152728be89af165b41aadf7d3cddad5584042348c27afb0099f5f0f9556cd94b21966c5f97ee71891e66f2480b5f03ec64bbc6df832380eb117caf25230f24

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\71848a3da7ea1aa8_0

MD5 c0abe8d4858816aa6b3d97564dd75f01
SHA1 917125fc86ebabcdfe9c2deda9ed2d00c6a07a4d
SHA256 422e53e50d9a46e783ab2cedf2551e2b2d353d7540fb562e38aab4afd3b89156
SHA512 77d294931ceb2f6c1b03e52604dfa81ad2e5ac8dfe6124d7898d7574d8766a7602a8636cbf400368d6a06951eaea7a8a9032438fa4f33bb2ac302508075652f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000f1

MD5 a91c8acf084daefe905c538075d9e3ff
SHA1 398a0d67e3e87fb1f01a644a5b9820ab5d5d69b6
SHA256 9901aba2e46fcf181f9b641590df7bba839243151e8747c1e6798703798bf4af
SHA512 2c0aaa2bd478af9cd3424bb483260dfe174f1c02ee1638565c6dfe43f7181e12e0788dfcd19316c6a884dbb02144ffb35fb886caedcf29f8a2c65ba70079fc0e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\79339bbca662dcce_0

MD5 606566d71aae9fa46c71a0ca20a1c60a
SHA1 df58c2dd9b68c8e8e3991b7566942a884518601d
SHA256 dc5baa4d6b662f7ee2b21f72d3d84459dc4131b76fdd4191679ab78c8deaec33
SHA512 7e755ed263199d4454da8e42bc80f2f93fff7c0419e8e944af1a87b1e28c4299ce51bd5e1a8026a051e3b6567df42e6c9d89f59e11a9e10fc915920600167a0a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3e83b06c51f231a5_0

MD5 11828a4752917ddd33ec8f4d7b71ed9d
SHA1 7bea9396c0062730424e70f55362f1071bd891c0
SHA256 8aad885e6d88b04f5cbea2108176b58dfc4bb632121839cdd9318a6b5f7f89fa
SHA512 3bca916f4e914b7cd21ee569961f4f8503626b0d34877196cdd4cb7f360017e37af5ab404874dca0203357a73b68c5e81976d7706c2d69a4d0113f261187214e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3253506172392b6cc866334b3775b3e6
SHA1 efb20b5f6b0902d15afae9df7b28b09adfd0ac95
SHA256 c1742c3ff87c157d31f379b841c6f05dcfb10ce1158efaba47625ba27fcc6657
SHA512 5cecc7ac44f267f00edee8ca0d1a8bf09333c15a20d4c46ad734e8c8e768515db5bd3425264e14ab61ccfdde692d81a392d97add868a56e7e5af1c592290f0ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1bea9728dbeb1bb54c5cec89a6c87fe7
SHA1 a10e2b4d333d6dad8bdba7c081a2c184c9001627
SHA256 9cf2673bb0e25e4c484afb487958115d027a35fa9b18c19778c798f73e1ca362
SHA512 9354c19a36ba331b83864956d5bf6a295a12a5099283a07785641af09956f9a1481e518c5cd6dd499c2e9673fa995f8d021e8e8a23110989a1e27c7cd124b5d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5032715d5d104169_0

MD5 85008f1b6863a87552cdd672f02f4b34
SHA1 69aa4b76180d5c7b61b9fa7c86f12760a955137d
SHA256 82a46da18223dc62823b1baa8386d36824e001ac34045fd72d6b41a0817773e2
SHA512 6dc38bada72f5dcb0767994fa91ea353e11a2a9f86f7caf86d821babb49810613e99f976117329fc505ca6a59390d0ca33fab7acbffcd2214542ecc6105d1dbe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\26a7bae82638801c_0

MD5 5ac23c3f28811f11b7fb449673e3cb03
SHA1 ce381c22864fa1ef3680e496ed694d30b6415e9f
SHA256 fbf2724497973bd27794448d65da834754a99aefa6b1de1f02b83980ff922b66
SHA512 15f6627439c64996f6422e715be92ce922c5dc32c7e790251cbb29ac15d2007b2b5e92237e526bcb8f3cdd070c644a49b3996099bac43e4b2ce6824fe05712ea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0580a8e1646d7bcd_0

MD5 2719fbb6f9349bf74d839ba927a539ba
SHA1 6bd56952ee6c66a32520e1b6c327828c7025fdf6
SHA256 eed69fb738f1ba2c46aca6876487c1398e3e1b90643cb6f6857b6606c574e241
SHA512 ea74a0db316277bba739cdec6b49449bb5d77fd4564fa2510e79599801f889c466fea877104ae4df0f0551bbbe541da8d22946aef3eb18af7e40bfb38c287679

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\695c42f61090a800_0

MD5 7815d8dc5880967c53284efa74b4ab84
SHA1 f180e68823e76b0786896c94a07bd8e7a147cc79
SHA256 680be98a3f3ff2517c14067304709d12f5b4d0c0afc151147dcc21b1d6010014
SHA512 7b64eb4c02afd741ba25a11eb7600849c46bdaf5dbf89be095d156d59974c4050f0404b9ca095c297344a7bab7a07f1d081f01c6ddc12b79609a5079640ee45a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3f02c4494b1a18ff_0

MD5 ecb0025227e5605019e1842c6695dfb4
SHA1 73b567e7052a36ae05e50cbeda43e188f4176c1f
SHA256 3b32856c3cb449778a6fbd9a8489b97259dc5d581bc78b2e9d87be8b0ed95b1c
SHA512 615d87bb0e7b47ddc7b05516e65e7fd76fb940bce1b63b61531e496eaa8531f52bbccdcaa0f193e7fa3ac3a6e0a6ebde2fe5840fd62254fe590e0d2139992ac4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8ee73a31bd0cce7d_0

MD5 93ba1a7ea9e81bc2389412b9f5e06a34
SHA1 379f32e0d1c744282de86731540a532e07007207
SHA256 c7a7ddfe75f0c409319e9cfe8c5376d2ee32b30c2b6f26e5f729593b42c092e0
SHA512 f22d1c32ad77a391cd77e46cd2f0be1a47a3ab7b7dd8f249ae34fe44b1085e62f4f455d82ce6f97711ec1051373ee04e53800f370647a00ca48b40eea019ad3b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d5c7b277da2282e4_0

MD5 fd353ede88c5eb341b766501f804721d
SHA1 be9605cc5e999ab24a822a4782cdc94e3633d07e
SHA256 3343dba969a810b97e6b86722a1bc87f9a0722ea8d9cf0a2f09240ce6b5de4f9
SHA512 9682c7ec536fd790fb5118be6dac8f3253df52f3d9258d461a944aa0543b88a42e770b8e5824180f57f748f87358d98dec5f4391123c6d5bce523722273cd28e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7a29efad91a1117_0

MD5 c33f5b782c455f2c4b516f0a9a996667
SHA1 5cde98e8404739510aa6b9b860c8fdbf6e0b7a0e
SHA256 1e18d9817b0cab6c11f378e7a8ae88a4fba9ac39114fd79372e3d55d49b73e19
SHA512 bb039c6c74f228c22dd2485ca93e877e77ea16b51080e216be2ffdc2061f93c3e761f6d779f0aa2dc996f4ca27609963b12811933199750e0958efec62959bcc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ceb88c56dd50d3e6_0

MD5 7eec508514e1abff9d58c49d15970d3e
SHA1 f20a4cf42415fe375ae4c6738adfa46143bb9a84
SHA256 e750378d4ef39be282743eb0e4f181e1578a82214780f86ac875bf3e17fcbb91
SHA512 b15cee17197ebd69933ddb5f9ab7977b5e9ce0e5f794df48729dc5e9bbb4d7e470cf292b5b417a9ed1d0e4365633c325ed9783eda894d51d31408d3d42d2382c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

MD5 ed0c158e34e47cebd777f75df461fb2f
SHA1 dc5d55f2c4e9430b1b98c12505a38c1cd71361eb
SHA256 1d3f26c3b3215c79bce969390331b30d1d4e96987e47e6993fa49a223922d3e9
SHA512 f73fc5b8eab0128875617a4cf6ea0a4fe956a62f64c1b92af9bc89d3512caa447a98f944faf7c1b8d005f3dfe234d0f60b49d3f15f8fb9a122fe13a549affbfe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

MD5 7ff92b5666ca57d4797db85380b07481
SHA1 f8da4867a1e934c0d3e09cea1a8ac85b54f3730a
SHA256 c0e6540b919dc6c1190cc78a45a41cf0c02b80da1443c3a6c5d45cf332d797f8
SHA512 434e109555ac8f0dcd81cb4e1eb9d0bf06c72c30abe507b4d41951442ae6068aef4d478038c4baba9670d6fefd0a336d1a2db5c43ec2ebea3f58a77aa3e4517d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f89251fac2b69325_0

MD5 fef38bdde84d9d4005fa63452c263ae9
SHA1 56085e3fa9c07f2c73e953e60129855d580ee2de
SHA256 4817b0f6bac04112028384eeccc49b839a86b8feda8acba56f77020c109f227c
SHA512 2151a57e889fc1395d6528683301349778c3815b4c2045f87fc6413a46bf1d8266c6a98c33f087006277286fd598df9c26576bef4de204fde7f2989d0ca88fd0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

MD5 738661fa746a4991daf64e1db5e04cff
SHA1 9f738d7628e4cf04fabcb774885ee27a4c6aefca
SHA256 8f09394e44154735eec1e889691879f23fa4a32e74979100ddbeafa3e227bbe1
SHA512 3a169fc552c05694bdc35548d0edf20380d0f4090cc3ecbcb70bd608a20b089f1ec362504a5dbcad6ac8bafdf1f07395d333a8a640895252cf846e9811bbfdec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

MD5 f5cfe25c28e69b274e0f7455c541cedf
SHA1 6c648d6969bf7a2bc49e7e13045005a796cf9b45
SHA256 31e98269896bbd9e963bd58ffda05f5149acc16c69d0d4866e8c758fcfbca236
SHA512 b3c90c9c8ff0cf4294d7fb890580f4919ca3d6c2152eaae9892dc23399b62f159f51c8f7699b6d373d98f9797652b9938fec8115b401c92793c3e4d25192dc3a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c035c55e661cf4e0_0

MD5 9a04174d72779b6dd9b32adac66254d4
SHA1 285b8a7a8d3c96888d545297ce8468a2f3b806ad
SHA256 6e41a0b1a09cc730ec8d11668fcd1fca8df0a4908b8028dbd7c6e39f58dade08
SHA512 a5c630242eb3f1f1657543ff20ec36e1d579fa875e49dbc7e001ced15ad7ff23cd8d54f60373bec9e061e216a0654e7fe42c81eb97281b1521f3be48c0a45181

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\168251be7271d371_0

MD5 a617c85893091dac1962b02c191c4f77
SHA1 2be436c698a7c993c393be743eb653a41e862943
SHA256 24736f4bc3e3f2b1ccd13dac36730236e9ec62fbc99f0792428897f70a1b5413
SHA512 f2a33293f5dc1e55e176163c7733df0d49fddc0ef392beee1a668d3fe28cf6d0f377df3e81073e37b3ebc20223731ad9a4a8a54ea8dcc336fed43f20db323f5b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bfd9b5c29c5c8524_0

MD5 ae7e8b0a5a35932fd2393a755484c79d
SHA1 5c4ef0cf607814d0be15dc0de541cfc246317a98
SHA256 42c1e01a1b47ac1657796aa86d677dacb3be27a40a2ac7aa44b8276978a8cd98
SHA512 e6cc17d10d528e47852396eb5ab525fd06aa3040394108563448f07bed1214a6093784d4ea06f8e2e351de46d7fcc8e56f95b20bcc47ddfdc48260e67474197a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7cd09434523dddde_0

MD5 9855fed7e953f94bcbd29597719a57b4
SHA1 fb5b5d8c51c4c4840f65dd5e5989aa5ea4cf468d
SHA256 b70cc45b622a1e2bc02c749150723f8c5c04c1b2aa0501f9722861987e67525c
SHA512 1cb1fc454e0b8d51f78723fedd87da6edeb447284d442d7bbd3d8b81fdc169087ab505c4013e788a7dd5cb6cd75209c1058a5a45e55f691a82908103a522b417

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8efaf556838c0a94_0

MD5 ee4b4e6f5134e9c01fbcebb735fddb89
SHA1 2f26d529d89810c3af9cc24fb80e275f2996cf30
SHA256 58703a9f5fae019b5f0ff7d095622126d44d3c0a75c2522c0482862c798b6fb5
SHA512 0fe4ab0b73f889196d68c9021c1c4a2875b368325cdae0e27fd6acbcb1a74ced207e9514c9ca84705b822cd1b8e8309a5a3c36dce3a38813d545e02421c539e6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2e4bbad99a372cc_0

MD5 f61dc08c1fcfb635a7876c234915e26d
SHA1 69d87d84fcab4171c26f88abb5ed94b461c46a58
SHA256 76ca98fe9f6ed864ab1828e406e64711e981572c85db2dcca8740b8e12af4716
SHA512 9ea6faad9b5b240a39d264ea618ee5de2f99e1d377d5859c34089b75439eb02f7ba52dd5ed3ab151ad00863861afeee3b70c647e00c8eb04e008e3688a868d22

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a267b7c21d8b8c9c_0

MD5 e96cb18bf5f007170c5aaf307df3d2f5
SHA1 d8605db765e04efa57780b015030b1924fd18b01
SHA256 45f80a9699f91b722d0287dec755f32812d7b01e5e2fb42694c5a2095755887d
SHA512 6d9b0b15339318531240e44a0c142029219b051276d8b282fea2800f38dbc5eafd046c1e040ba67cf635d9c344800eea74d55e979fcc481891220384c0dab4d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8decd03ead133bad_0

MD5 47bc07e670106e8ebfef46f1a4d123be
SHA1 b1eb0ad5c3bc0e4f811cfb45c7c4177fd8ff3e84
SHA256 c6e620da0d1775d4076b3f09a7bfaf5aa5b582671cd5964bc1cee2f850fff9a3
SHA512 856a4d05d59e512c83f49323bc2513ad5a5b130765759d03d03227f91467ac5859db6d7ef4a4201dd997f552a8861c806d9edcf425533e633fa9ceb621208586

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3dbb3008455b523_0

MD5 322e91eb256043f409176b446300a84c
SHA1 87c3526d9c4b56a37d0da977ec3a9fda73384e32
SHA256 0114df26b21e4d93f400b9cc734057ab373c30429884da38e30ec7409ebc655d
SHA512 b52ce956cebebb4ce6d5b6cb734431e62d62355fe7af60dcbd2874a7123dbae3f81bdb8d7f7c82e613ea59a74c6abd16095b84d0c34dfe8d005aa661438ddad9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a09f6271ad0c4092_0

MD5 24bddd63a5f557553dee7c4c9cedbb7f
SHA1 1326127bf928bddb6c9e84bff587a3e08ac54820
SHA256 5d1e08dc2371e7694221ede7245a00417729eff06dcc586ba7d406f5e983b073
SHA512 c33032a2a517be60deb224e412efabb1314047d64fb441766b34253e400df096559cfe92383d8e3d55bbfd056e0ed5f14849fb488c8583ab84697defa7168904

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac9b40a0411376f7_0

MD5 09258dfe3917f554c45ce97bd32db3b8
SHA1 05fd5a06466369affe43f122775db950e1465f0c
SHA256 8d66a5b46b127c823245e24d930491918cdf3368db0c65d8909332b51594d0e5
SHA512 566756b2448f2262b33cba641175fe7b903737a738ef1112b9684bb565073857138779294f7b27fc6a5b45901c6a94d23f87ae59a99a6d0b793b2e1cbbbefff2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9aee5cd509922cea_0

MD5 fbb7703f71202d3e63e5eb1bb6229885
SHA1 d891c8271c90845985bf0e77bf591a4aaf293fce
SHA256 2cf7bbc49b489febdf9cfbcc21aa1362293a49f070451f3566eff81012814154
SHA512 d3e583b8a4bfbe1d79a4e56611cd31dd3fdfc937cfb6601a7e62f71f0486c5a6858009115277827bd1371337dfaeb1cc3c70196c71a50f4e83a20aee3fc8ad4e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\54621936eea23565_0

MD5 03a4970fb48caa83dcb6bf3022b9f0a4
SHA1 7f1bc90aa1bdf006125e2dc1371b16f2208bd564
SHA256 1969ee1d4361fd561f0a935d6c8a33a731a8cd2737cb3ddd3fcf9a556ea554bd
SHA512 a88f5607a37aae74528f90b6e1a1734c5744af4b67658d491a02cdddab76086068ec7fef0fb80f02e1b3090cab746738e07ad347dd58f91f062e3c70514719e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daca09b4eb185a45_0

MD5 b8d8d6871c56e9dd5926283b7c7ad873
SHA1 f7d7e3b97fe7e94baeb5484735cb95eb148bf71d
SHA256 4f8692555340987d1c074c2fc6d93cf37303968ef52c5999095149f344ead76b
SHA512 c9151971a03255af6d0fef72d1192b7fbfa445ee8a51edf07f69867b517b3672d9e3986fa8918f26f49d737c853f7d6d06710b4e3227199d579b37abaa17471f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\99fc964690d035a3_0

MD5 c4984a1e262ba43462bacf4554b65014
SHA1 2933c68a390a1c02eed5f4524949e384f68d6e0f
SHA256 d7f2ec2282132ef1595f2f3bcf591ad401fab3343fe14e95b684f6d6f39d1b8f
SHA512 35bb09ce22ceeef15ecd197c57658c16d3271251bc8dd30238b70f2c133d897675d4b88214191422292e604eb55a0e81a5c03e38027b033f1d83b169316beff9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c096246ef6fcd368_0

MD5 8e37e978cea89f08870999525a87c1ed
SHA1 5e443681e3e80dd680bf8abf96d74b300a3b4296
SHA256 484d37cda0bc1c2035e23fd685ca32c6e4474eb6447adc24f389b75f9ddcdb03
SHA512 5c849e1e5318ec89dd827fb6dbb96f666f2aacfd44ad058c932bd417eac115aa79f26968f88238a606926910b26dd9b50ba035df28ec0ecdd0ce25bbc5133b0b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\94d3546748ea4974_0

MD5 2866daf2d0679dbfd92dec09835f378a
SHA1 8339be0edf7536a93bbba8ec4cde25f2fed4602e
SHA256 ea3ebfdfb8fa419c2cae36531bfe92d5bc115c855ed761c18acc2fd4764f7153
SHA512 8086fe8bdb7de6869795e50b29fdf29f44515af61e69e6961472e1febd763d800581642889fd2ca935399b98eb15d6999f69fdb7a55ef14aa9e53f9c4d3f6560

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f53a46c346367cfc_0

MD5 b11f3f1d5968d0729822c0d30569abf5
SHA1 32e4f7f5f517c8ebb0e68a6c58430c18504d0874
SHA256 8910d79f982fa82559485137611d17de7a7354f34da818541b757e9f985cfe7c
SHA512 5306de339fb74b900f59dffb8047f4e4a6190b7e6ea8e162bf5d2e6b6051bb8daa409ca94708cbc8d8fd9ce1b408f908127bda3d4f056420a1458210fe7d68ee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c98e4ee8513173fa_0

MD5 912555842988e04f8cc5389325ec1cab
SHA1 2061aefc0e5306bd99e34a226693fd4df74002da
SHA256 41481a70acf0539479a70ec49ec0809f6dc8ff1b37bb35166741d93143b20e9f
SHA512 bf2e56f290bf359007bb810ba2c90e6c9f68b971920742020f3fbfb2463de57eafe1821b8c3bf02eff9506513f0024e8cdea5a0e24d6c9c1792a308d559d1e07

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\71cf33e27b57a88e_0

MD5 99be024c11d61dbe62d61f87a3084950
SHA1 d90a4dd7024182965a1692583c9a281ade4a996a
SHA256 24a86de56a5ae6d4854ee83320f7feea7c50009d9cab3d8f47891fa0b1a7e614
SHA512 1ba7400f165c3ebf1eb147c39f59f9b633d66e90f2efab17bd5572aa3435a8f9719d683364893d64faec77eb51000d55687807c6ab5038210b3da0be09101c09

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5b2f11f3f15a5775_0

MD5 fe6447b5955b8dc94d7641a7f512bdaf
SHA1 9716b14646eefdec26abf716f9148dc10b8d3430
SHA256 0f44fc494f77b95bd711a220a48a57285314d5e7fd8991d1d27388bd6e4b2ce2
SHA512 d93067e94b0e5a7b9cdc6608ff1256e89ea730ea3527fff8be116ca3cd512591d382d507fa6b2a44022feead6319d41acaf9569196a9867d066ec67edd4e0289

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b1d7d09e2437e8ee_0

MD5 ae4daa015a04d31f9d6a269e6bd788ae
SHA1 43c57552da45018e38022903ac4d0be84b1af24b
SHA256 3ae742965c5f6ea656b697daa2c4a3387912a9a3651607856312fe0f938abca7
SHA512 e70b2908ab58af32d7deddd10300bdb0f48e3ad1cc51a5855cd0c63e6c1e0183cf46af20105249aaedac61a7e50d046ee9b60ff6db96ce9ac9e92b11309b6c4f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aa20c296787a3f88_0

MD5 fbbd8f464bf1113e98543a3939df13b7
SHA1 08edccbe02941a4281776fb0ee52ff207b1d84f9
SHA256 aae5220ef634f8dec73588a0ef092d35f79836986b104c7227e82f28154b9e1d
SHA512 96b3dd6b81bfc84148d73adb3572fad36534f1f58dfa1183a3c78b329514e926f6aac77a9b2ad471db8deab450b0a45726456f47c0be9dea7879a0001e032a57

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ba208775fb5fe09_0

MD5 3238f332050a0616a198485e4cf6f80d
SHA1 1c110d123427c033de60afc1f4a459a85ebad856
SHA256 8c7ea97fad2ccd7bbc88fa2e3cd61e97c53f085ad18cc4cb686b513ae1cee6c7
SHA512 3e7c15726e56d7d5dd937960b41a0678e0d3b13b95d1409999baa8b29ad9bf7719ee326f70b8a14f114bc231ef5271aea13bc1f613556f84230e5a59e071f673

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bf93cdbdfbcef344_0

MD5 7848be31444bd0f325bc832557a759d9
SHA1 68fa2b15adf091dbafd41cd84deeae453c1ea1cf
SHA256 40d036c93ca2cac571f3f622c02bce0f3dcd2773cfba880718b425d3322fafd1
SHA512 658221f78fc4b2389d64bdec36b00c72503f65c746ac6af282a3d33b1f7dafd6573465b6db8be5a8d518458f9ec980c668bb4abd9210c008d94feb156e88026c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ae8d0b05a4b538df_0

MD5 ba2392336fd895225325840bbcde416b
SHA1 4089a7de85bf1f027b9b52c8191525ab743f78b3
SHA256 4da79965aea4d2cc8c686c7e2d002d0a8e213f85fb616952b52eaa104fb31277
SHA512 360634d4a61dc7bed84ef162cfaf2d26eba8528a74200adbcc0939388fadbd2981e5cd895c2eb0dc067a449a801f245ac5ff1824dd95e82bc93edaeae60338c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6555170fcde345a8_0

MD5 e565db718d519a6341316722c74e39ee
SHA1 815cafa2cc9880b48277e9c4094599fe35a2df91
SHA256 837ee1a8a32fea67077f4ed12c1f99fbbfd4b5398f2c902fcc4c30937b4dea17
SHA512 6cec39945f4007053710535eb871e6f8e7cc48aa9b7451671879794959787283a1c95921d5a64f12122cafb6474c9c4bba379c851ee693b3bc92504a922781f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47d4e623e47f5bdd_0

MD5 c9486fed2da91ab4a577c32c96816de3
SHA1 38a6af9c8c843476983ccb62eba720c092245aae
SHA256 7b2b409737e3e0a073f54d2f919ff9cfd7079ef359a31876d1174c1725e125f7
SHA512 bb5f1788ceae788aada5cf8c3e181534d6ff1e3f38952ef0a2106b4e9fd788ea64e505610e2d24019da7f596aba86ef350f7f51daac172a7975f358119302cb8

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 262fafd586229011f6496d839f9af3c3
SHA1 fd94ff1f7ffd7e78c3e6722aa865073dbdcbb3c7
SHA256 12e41435c0adca8eea9b952805ab321c9295867e171ae842bfde5cee5537ad0f
SHA512 48e9129d6cbeee958ae5fadcc9e5d69e180090ffceb5e8d8210cc718bb2ab5d890c5a9b64bdcd9628ed75fa83c89782c7a176bb56edfc0840a026adf3ad9514c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\edb3b6840a8ddc0a_0

MD5 0948cc394baa0fc5b4f248efcd2e11e5
SHA1 c53b76ff5221a7da14568e317aba6d474062a083
SHA256 3721ed461e52a7adba2bb54596a0bed4ec8197694ec5f7a71710848c9cbc964c
SHA512 fc9417c736066e0d0ea3eca336cd9acad43b3f648d72dce66d667816e2c3d985172452130de8cc1297d2aab4d09deddb15736694b065982c0d81638696127f72

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\02735674612cbc52_0

MD5 03a883d83d0553974ec32cd63c0e0fce
SHA1 634b01e195b77b1f303a89492f85109c59bda21a
SHA256 741995014d89ff58abfb581d16eaec26767eebab7be83a06637740f21e52fd5a
SHA512 0de61181d7d5d54756488c58d6133e28f66ab25e66e45b5c1216e445283d7d6cfea57e90405eb94cbb3ef2c1c516c235ebbcf8e1ab38b095296c5e7b825ff9f5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\64fa70d4ab69732e_0

MD5 5da93d2c800838a4adf093fe56e1ae5c
SHA1 8bad7b088d131417ed71eadb5c2489bcb1c69d61
SHA256 66898663221079d4e519343e53396f3f7bba5c203f68ef7e56ba3ac5f43b4c37
SHA512 1ca2585965e25fab32f9b9f79be5ad0f7ecd091b422af9e9940f86e29995f3f2c9903d6eb8bfa9c2f96d14ca3d530007edc5f2fa9dc5c89c3988efb1b89b4308

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7cf9843337c39c04_0

MD5 0d31efd99834faa01e8257b2e7d78885
SHA1 55c0df96a165f8582726d89ad42f2c246e3a1ecb
SHA256 85da237d70c5ad491477d46fbf52ecd693c67680d05eef7fc08c194fbb0a6313
SHA512 3f7172c57f86fb7097571aced19906996f7545ff58f3d97031dd0209bb69c7350ef1065488db794c0f34c37529d4cefbc1dda1104d36aa89db28e582f44ea980

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e5987d08f7b6e11_0

MD5 e5fdb47b4cd74c0d26d94043dc757b97
SHA1 434be9c66c0dcbb24741dc8b60e13faddf606c89
SHA256 ae98c0eea2ccfe5bc3b9fa38f40c02dcfacfdf20a973101e0c3e2e9b9f7db4fa
SHA512 041a9845ae6de86d39aad742222bab1b462840e3abcfea9dc43143634cad3e2203c6841a1d1976dc6a6d9dbc501690ba901df7a7141e9169d3e8abaa4dc53296

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a37ad9a49149528a_0

MD5 62f6376090a64e134ee8e574e40bebdb
SHA1 af56eeff6a42a04af664f8458bce9117dbbcd8b8
SHA256 da5e7a2c7fa1a85ca91c91d1a33e6c0bb2132b695a1039010674b498e376c885
SHA512 bd44d409dbc3861d0ab6df86855669711be946e6846d1e4a69813688e1216f7b89b465a8fc247b80ef72f4627e4007e39f68f02657908bbb1d49ef2e9ba846ae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e3d18be5d494e38e_0

MD5 fd925d04b0703728ed89a02e44dfe861
SHA1 656c7819edc700f2a0bf499f99773cf89eaf890c
SHA256 62d498e13425b6c7ccf394491cf0dc8f53e78f72c38d25e34639ff349abb4041
SHA512 11ecc22ecfc4cbad02258a716ac6d0537540c32665e2066d21718533fe0b12a571486ae88905ad2c576d9e6deef86ccf035e0a5ce9ad8f3e0b5aa48df1771a8e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5801d3329fb36c59_0

MD5 c9efa3ee5249f5cbd5dad68c4135ceb6
SHA1 481dd4cf2dd709e0170aaf8ceef5139834dccc08
SHA256 57941e739d5c6844b05f1e5046a14a463fa17650c1e7e8be0013a43e93f2a92c
SHA512 f4d93be6c2a5d92c8ace0614cbe8043974b0ab6cf4cdc2be36fe3b3333e7463849a38f5a620f5cd07d0af14bda4bdee8ccf59cae8b6411592cb457753f0afa29

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\99110e9a19c3c06d_0

MD5 f5be549c37c239707c83a06649b90266
SHA1 2b08638849b0b5e5e444161784bc1d24efeb51f1
SHA256 4b26a1b3ce40f4fc7342704490668c5392edde3e16cad72b5806a95552d16658
SHA512 6fd3ae56a0cd04fb23ec7aa81673aa1a3aa56ee2de1462116db1dca9be72468b755eb0f98654725441b427b9da57ba758d774358f02e8f78cea8e960fe73c878

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\960f838b42b585c9_0

MD5 02233f4833d92485353067b45062fef4
SHA1 cf3c3245ff490f097a2df0a039401a2c6a6a02a4
SHA256 c38dd0848b7acd0d8e184e07d2eaa63434dda8cf74dc93b7c14c9ba143c45854
SHA512 3cbfe462b32b2b77e816f8ebede9ba30d6596bcb5ac389f9a3572f1816f8ad31f8bc21dd082d55f36bbc3e148eddf3786b274481554c27306183f0a0a21af94d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\718aba49c9504085_0

MD5 c05cd223d4ac45fc7cdcb7f7008f69af
SHA1 57fb7367614a461c2dada2359e28eb6a9c32d628
SHA256 53eef04760c2774d17ddee95aabbcbce231c5209ac4d8b1fb702cdc0738a1347
SHA512 cc874f4a79051e9ad1406825be524c86c0b450e8542ccc9df1930f70fa40f753b387279526220ec85b20cb7de52f5eaf966a3c203652f698f859fe7cfd0201bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6b462fc8990cd7fd_0

MD5 274b53d7808629d78361a81b9db738d3
SHA1 3c5da2f83dae6eb20a1514bcb53758fe3dc56053
SHA256 d5b1285cd32e5cf3e4652d10795f49e4096bfe6ef07f886f04257f7bf0066c9e
SHA512 afd3cb490290db2509f60c4eb5fd04ca850a999b2d75df3de422ecca83b315c86d1564227868dd7af0ef19ea2fa9d0bc2e22c54341e4f2bc7f869af650ac7578

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\87bfea9426cb2ef3_0

MD5 bc21aff45157eae5e4689cfe882cdf35
SHA1 c197eb9b882d60df117118a81862205e871b5e50
SHA256 68dc8354c3556d6f922e178f6d8235388a9fd8f174fddef446b46f1cd6690929
SHA512 e2fe89153a426cc26268c0af8b1e7edb57d3249e25de12f287c9f08a711d8eec57a98b93f7ed341456179b5223f8fb6ca5fdb37d3f24bd7d1de6cffdcec80af6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e8f6640eef188435_0

MD5 cc50bac98feb79e7f1769498bb3b316d
SHA1 e7d25f64446c830ea7f3bf71a4d0b6a9cdcfacd0
SHA256 d5a5ed15eeb3b1baff242b83f3209e52f27081040ff2486873f1d4ea61202ae1
SHA512 de0b8e3c7c368b4c23cabc4da9dce4949c2c7839e7294281fbcea59d5681051e591645b660e6dfa908317f0343d1df3889112d1fc3c8ca29293e59a354d21cad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\62f20db8aae8f96d_0

MD5 66fbb4fc09f671d7a586195a4162f673
SHA1 c20853a5091088f6f69bd36feeff6b81b71d6f3d
SHA256 5a8cbddb717dc3c44fc09abd86d00275a76eef99c26615b0271e9dbd6df09cce
SHA512 6ca4e67c2672945f7239c2d7d286320eacae31fdb8c884613db15fda22ebffb4b2e28e2bfddc43083745cb18ed2c430af0097a4d6c85b7bf9b724b5427426773

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\59fc8adf66a76ab9_0

MD5 7d83422a5ff90ae2630b314436290c78
SHA1 0546532a90bace32ff7cc5996c52eb23b0d56e07
SHA256 a1ef489fae383ea6ac0e279cb308ff8999c2f49cc27b69675c6762e10b55cdd6
SHA512 45a06fb1fa81ef325e726c6a3d239732fb263c7570f717b9e79b887dffffbc547b2a4a0cd9124491e51fa02b6fa7187963f3b4541c1b9f6de97998c91b031a98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\635e64b37935c888_0

MD5 d617ad2a802b673f8859759584b3179a
SHA1 a7ed9df5a349b029a66063594aee108b6303fb5f
SHA256 fae4707510d60c435d96b85b1a10fbb0787af44e95af76f7d7d78cb7866e23f7
SHA512 fe9aeb9ce0d50c30a284ca4e2e63f198bcefc8c26a0b7c8cf72cb1b91ab01e25bee563b11b6b176d45b9c59a00bc48581ef31583e30093498f89ab6d7fa1129f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ca5bb3c84b908d6e_0

MD5 b646fb94e8fc2d423e040b4b3562eda3
SHA1 ac0c4f905588d3fafffea9946a475780998bd79c
SHA256 a2ab75ee2171821987d24b5debbf2eba019ea1bd0db90c2ed979dfb098018d25
SHA512 fa360a4a18ecdfc8d149888d9daae9c9f251a7ad9fa8222b8d2d2754229d7f87a9ffe573ad329293159493db1be1e7db9a072b8c4caca1b1b8a1b85a9fb421b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d00019f29c31fea5_0

MD5 c4ee88c4006e4faf6882c78b98c2a96b
SHA1 7a3a9e03a21d06bf70a3eed4bcffaf55cb69c6fd
SHA256 f00284c821cc0454467aa09ca6668f62eebab30f488b887aebbfa3160543dffd
SHA512 ffe2c11f0aa8294b5db060831c7b88d10e42ee5d579bf6da98668b98fee2cb4f53db48ca209ef1412bdb43cae9918aa48c2efdb03c0edda814bd2cd8d0e726c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a66a1246c4f29f4_0

MD5 b05408a53e89519dcab79d8e9abfbddd
SHA1 fe2dc1d9db3c82d62c6a573129fa0838e0f8af23
SHA256 9de4a93cdeb57e24265ebf89ed4a424aba526ab46a0378bdc97ce91782cadbe3
SHA512 19ff6b55dddc4b38ec34a8a3f5beff4a0f53fd35193b7d4de7663c1ecb0c34c2b0424ce3219f4e02dc6988efbdc5e986a32aa32fbf752d584cd15b243b7597c7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f078f5fb70fd150f_0

MD5 9d9d2797882329d18f409c8a55062cba
SHA1 629413499e3c9c5d89431c86d891e3f3cc9c8da6
SHA256 9dc596a5ce8e3e1700902e1bd5239d2c7477d157206e298caa9f0ca132150a4a
SHA512 f2a6701230aa8fc041ab9e2ca54f79e6489d686c12e419bcf026beaf9bc755fc240eda74c23428e1b628f058af9ef50e812a2cab12adccffc99acc8eae0461ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\632e260441be7404_0

MD5 0d7f438f6d9f52c4ec9f9999af8f1bb3
SHA1 2fd431103916c79278d59aa1739f7f7bb1f8938c
SHA256 e3e387dcafa52a7387e7613349e9a08d2bdfca45e1163f808eda66ccc85ee30f
SHA512 1dfede9f00ce796402b7a26dc2e57d250a3101202ec5b693d84d39270032f70443afae7bffec4946df055df2c4b7f1eb1e40e9ac8f9112b455b4fc737b0a9083

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ac673f66e12ce14_0

MD5 a9d2eb4bdcbf114d2ec657a12e65190f
SHA1 e1d852988c56299dcfb56b3ae33fb4709ef9fe85
SHA256 8edeaa9a3adbab9676d6e7f9872a86fd6cf731127dc2b0df8e8d98e1da0004cd
SHA512 6fa668646177814309588d8ae91845df6d3ccf1fe710bc22f0fd8af1ed32c4f696805a2d021284b74e6acbd74ea2468c449414f54e08ed9745de5ccfe6707dec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\48b1105b4c2874b5_0

MD5 40eb5caa7901e8a46603f80682d13f86
SHA1 5fee86a68d29218a97410c3dd5d198945cf0f598
SHA256 52478aaf2fbccaa8786be78a2a52719601f78567cc1cd265c27a0461a83b6f11
SHA512 87d85006fc08b9235d47f0bc9882a9a2399fb353ce947bf64706335044dbf3bf733a36107cee439308526ed563ad758ccac24ff47d1baaf2ee3cbb3815ff9d08

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a6537dab24e365f9_0

MD5 25cfceb3328e9cca61cfa90d82a05bc6
SHA1 d4c1feb79bb2c6234ac71b7f5c70cbf68812c5b4
SHA256 f22df70eef410548d4653e5092b68108fbb432c9cefabbb63d017b643fdeaaa0
SHA512 f0c676a021f019a7101a7b48b2757173cc6d7e2c0eee60712d60c3bcddbd353d0b44c8cdbd36740a812122e5fa618399003eca95e6d798a214e4b408f6d6d06d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\603d2267d522446c_0

MD5 67560b86f9d1279aa57dd348e24a43c8
SHA1 4a5068a8746027be937dcd9f5ff2d23e7bc4b9d0
SHA256 a77e976d700bab007944a8479f605ae3ffd38d8972fdc8cdc9201f41f7b5ac83
SHA512 05b02ea6733d2ff4da96ff82425d630437ee3d9fc7f5d6a5ba54a6c7266130f5084b337e342a6d60f24eed722e3f18840fa7050eea3946bcdcbf84cb684eaed2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af2cfcaf6d9b18bc_0

MD5 87a9ab14bcf6ddff8cc950b7c786a48d
SHA1 3dd5863601e1414ccf19eb7d483c901fb2423198
SHA256 ddb28e45bd8b49594ca30f3e2da394539d5935d605a8220d290b6278ade5079c
SHA512 e93dad8073186ad43b805384599fd86504b67d24a6488aeeef50e9e3f615101ceea68d9625be7a8b0878c867696712e482b4a0d33902634059b2629e9856f878

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d3b0ad57bdf7db9_0

MD5 2419a68d8083dbfe76395fbebc8ddb82
SHA1 b241c853f526163e0d5aae7fb98eb5ce2e02f689
SHA256 18090ab539d966f8a9724ba136246f378d62569b1c0a7dd9f489e2e6a4c842f1
SHA512 fb582ede421dc54aacb02af10e4877e9d2b6f1803e89d4188999a9de202a7ae01ba2e5573bb57021bcd53c1d2fc7ef75aade4d8d3cb613316964fcd92fd628a5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1927a26afb9a8b4a_0

MD5 a5d30a7fbc85d0ceaaa5c6af61476f1b
SHA1 6d920374ef7a3e72054cec4030e08189edd9a29c
SHA256 8f544e99a0e587c749c577d13576d9dc7f54c2ef451aac94051737dd837b77f3
SHA512 aa55036e9dbe92b5a175bc37d09761b6910d56f5be6dedb212ddaf05e5416db48a49eceddf76d5eb80f6b85c4ebf6dad91be52aa251827f1c6034baead55382b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daea348421cbc209_0

MD5 9b25bc8fe42991280fc984b8197f16ec
SHA1 7640351810fd4e07aafc08108d5ebcb1b10d3ead
SHA256 8a77709f9230134482a1d37b84bd76cb59af70a3cb0c4b95ab6ba7ef14ce3a82
SHA512 92fc0ef4c99e799dde53bd3ef8b3c1cdf971a2404ff1828dcd9d1abb734d712e9434fc154563330a6b172ad140963f130fd11c7e011672935439e10335830c8d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\718cc3a9e092869d_0

MD5 4839db3a1f969730112e009d8b9ad120
SHA1 679bcf0d7d75bc9cab74d4185abb5332c4501469
SHA256 671b4f37623292ad14ee2a3ba196b2dcf0ba5e8c10489d701eee7b4bcf5429e3
SHA512 8935190554ec68b34694b5bece142180ec6e77a5eb9ffba89bb2341c37a1d68d2e313bce3375ab8a3a6f0849f33a68535b89f1d80a06af835af0fab44279b3d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4f7a48c4bb682b17_0

MD5 e2528d212707e1753a5197a970ce3e24
SHA1 80720bf67887948e8c8aeeaaa2369fd0f0426bd7
SHA256 35b9a1226ba55f2486877d137f79c3b032f7c40398b963e7a72aad6f17296ada
SHA512 ae9defc7d9cdfaf1ddaf769d870108abe975294e3e62c47089d0752e904708ae8f568bf12efd313d86c31f7702dd6a1d832af18da3d221a5c560a31e7a10d457

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4d169b468e9ff76a_0

MD5 d2b34cd49bcdf184b380de8780530125
SHA1 3aaf32b3bd042daecd94b9e1f184be4e5bfabe1c
SHA256 6ee73c3f21b25c75c750ee15cc9b9c3f01b96ab84d80799a143d54b5c88964cd
SHA512 54e8d40b44e2f89058f0df7b3a7cf168ae51cc5b29977b99042881936871fddc849429a4484ba20df9633dfb721642fdee22c7a954e7d5f483a7e9423faaedeb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 7e767060e1a938414a807c0eb268edd0
SHA1 8458c606d66cc8cbb4119d227dd508bda2926b13
SHA256 ef4bdd68c942dc55e89b1faf042670dad2e92fe9ae769dbc4d505c91fef6d93b
SHA512 31016c434f00f60736c9bae71bf598750da6bbd54a5b9ea64d3dbb6e71d5ddcb53ebf9a917bfa27af3f29dd2a154c34d811ed178c83ada697a715eff2c92a40d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5a56f819525106732e4205c410c87520
SHA1 2c100fca4cb7a30f66056bed38ac80540c5bc2a9
SHA256 0cd30fe4eb7edac1c80e159e893040475b3d0fccf8b69527d6d75c1f4b84d0e8
SHA512 b54b4b30a77c63a80e64bc4222b17b5e825ab3b495af598d8ed945db10758fd6f7387a0da739b51c0cf280fa45aca7df670a38bf4c1941e47e448f386e1fd299

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000103

MD5 1d36a8498cc851c77be8d2ff7dd0c87e
SHA1 e4e72850699b2e18c976bf659668e11466536eae
SHA256 aafc5669d7392ca7dbae6c9383d7bcde94c4ceec9931a4935531a0ee0d5f938a
SHA512 2c9fa35779f367c1057578eee28509af3d7d0121bd2f7a59273e08308d97b0977b8d522f28a63a5000e086197248ee76e3800d2680f8bc3ed9f0581b7978bedc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fbbc3b076556d40d_0

MD5 02ccf2c0869549a86cfc84c5277d914a
SHA1 a7ffc02622a539e81c1dda1dfdcfc3714fa98354
SHA256 e93688ead817984d89a6e968cb37cf82ebb1c3b054a9edb8913484828f6d47df
SHA512 486ea50c651f1e24839e8063788fc13288c3facf1bb4acd9eb2a545095bbfe64c3f6ece560ed3fc13679af1f73a36a82e66b5aa88aceb0091f9979be98721947

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\94f93ada55bda7c3_0

MD5 cc0ea2b0793866be15dd5bf7393e41ef
SHA1 e40a58c72fa45f3a0563c2d02e28187ebd218744
SHA256 c0db0a3a42f80b30b63954fa4de01d45dbf9f1e9a2759a34397df8a3ce410671
SHA512 605f67b4f60a359d52484dbf2aca193f755673a13a34291c3387a083e221382eb168def7d2ca9568d6c1c3570f190d77c677b7875511fe427924f52d87d8f3ed

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fd25918e0ef5054a_0

MD5 5313509552fb6ce12580ab15f1028910
SHA1 05a73395ef21113aa1906c22ead442b71c22182c
SHA256 b86f6f9f5c263bc1affc4d20c363130c0f2ed76dc4bd4546c0530e3f28254038
SHA512 de48c895775ff8af69ce57d532782d36264ebd6a5070a4a694460549033ca4c88416a7e05e38739f1cffb809df694cda067db17279c8cdfeb7e6acb22e3fab6e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c807b8e9088e4030_0

MD5 6ccef2263c9a56deeaf91a6c25c6bd79
SHA1 a29cdacbc89b3ce01705cbf2cbfd32ddef13fd5a
SHA256 a90293edd715fd29271d8f57644cdd1ba9bf5f1f897f29961379d6b699899046
SHA512 5e4000d1875c34ed54ec1ef79b62725f2954a9569fd7018c014643b9386003e4cbe21dc1f84e875a2dd073bbf2086c93b103b62b769cf35471abd3fd2c45c76b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fe54f6337f304ca7_0

MD5 c4baa4d5da1102d18d93f63d1cad8682
SHA1 9b47c1ed5d8b8a740ff0e68181364512468aabac
SHA256 f45dcb52dae77832f0cb8169d22f8ef696e8ac9d30ab77d8aa90f3c34dae1b8f
SHA512 7da497db94a1726b4327acde0ecb666c3b78472ad53b606c020d11e55ba17858d7268e7eb7fe6684096e7bc8586cd630dadbcfe84d4d167268209560bf818373

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000113

MD5 05ba63bec444128252c7fb66aaa33ab4
SHA1 16a9b131fe49577c184d3ee3d087c0ddccbcdd61
SHA256 0c8290ce4e15b1a44f94ff8a74c0aa0cfb4554d59b49159e8910b4d5612123f3
SHA512 61e86cbcd9d4e135fd90c62070291bc5a39918e0d2a4365e6e0e8028139311b6fb5c248191d8622f1141e39fe8817a25575f91014a8ba63f0e5bdb85093d50b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bc5c7606bbaf08d7fc3a83f66359aabc
SHA1 8ee8aa8ab4adfba6cf03659c24c11dda8c9c13df
SHA256 156e82d6efda932b72b4f29bee487b7ab037322d238f99952945af5a012ac2e0
SHA512 cca9df53514a7fe78b688b6c2c55abff925d80f4de10a868387d7684934d93c31dd1e97ceaa0068c0e848b325a7bdb103ab29a89bb8b6f921f697f4556be5fe2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000121

MD5 a539c51a9b58f10d490cbd64a7508fcf
SHA1 95563082a107c42c0a6392a6173228b56724140c
SHA256 e3642d40ef65ee613c10ec06f126da324e87c07d949fef4bf613d05ea8efad3f
SHA512 6f916959a605b14cbabec58d1f0c986941e204c4db4c9fc1596e6facb39dd53f89073b44e59b3f26b076cec7869b9a131ca1462db13f387f4e07cf03ef77749f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000124

MD5 baa80a18dd87df5735d95654441feed0
SHA1 e600bd34f9822eacbe76dccac24d70178a839d2c
SHA256 cd12b1ca0960d19a282b891a804a3c21729d00ef26ea23b674e908465d4a691a
SHA512 ba381c34f3be056d6d44debc209d97921c2bdd8e3af66a8a899e4ba2b67d163395789e32aae31ee80c7d0d0c35685c01d1e734ebcb7645ffa54a72f0729adab2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\70faf906ee2b1c1e_0

MD5 c429fc00c496f4830a6b544ec7dcf810
SHA1 46cd86632198d1380daa2254d3893bcc57f5a8c5
SHA256 f11d45ecb3889be4c881c6cb66a5c0cbbe02a028d4f5713e1ebdf855c6df8818
SHA512 f26b3829a24e65086430ec2c44a092a2ea6af14f5916cabfb377735421eafbb9944c02859f2abb3cf03c451b2e4356c0e62a867cf9ae3971171757e454eeb6e3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0c89bc6f8759fab2e75e832f745136fe
SHA1 628170c547cd2fdd25066bc15ddae134af65b901
SHA256 a56530ad91677e22771bd32acbbc7c6d41ad6cc6fa99bd232dce2db65c580e8d
SHA512 11f8b8bb157367838ba71fb5fdae2154946b03ede95ae68f9a6b6efe3a9307641db6a5b675e1a8a8ede52e530c6ecffe46a170c65a6498b302cf92ef4c5d537a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9f6419d3c70448a7f36afa60214bd237
SHA1 c9920a9e334a4f7ccbd9b768d0d97d96091b41b4
SHA256 a2c006e4d70e622bd8cc8daffc523d84e1c07fe784e8249f20f33d9586a165ca
SHA512 113dabbd91258bf95cfbd244dcd98b073287e05721eacb96b3fedb6d9e0beb2c7fe32ee521153bd6f1b160f555b008e06b931694c27da5b46d6166d7a427f5ed

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000115

MD5 8fc04f0a1a15bc42f5a832fd31f447a6
SHA1 1fdc1cbefb2a9bc601fb299241022d695b3013be
SHA256 8e5e82e50f588067cd159c159fc88735d4123d3ce180b0708d6e2535b048add8
SHA512 2e3d44c486d41ee24ae02e0dd8fd206b3f797885ca304d40777327d61ee494b3fa77ed1c7b8fae1a2df34120efab31fe63e2053ae44b8faa7b2976adeeb094a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000119

MD5 d70733f3684a4bbbeeb305bb5093b577
SHA1 aa70be874443404e93fed8f72b33ff023370aa0a
SHA256 3a0a1611682713fb40adce4f3089941d73ae1a0fa79e65e0dbcc5f9c37c76615
SHA512 97b631218495f82f3e0c6721e4b48f37edecf160868812c622e83e05d76ad6dc5e4646703f092c3cd6d2851a55c27859a5da263cbb57fbe64e922ac18f3cf8b3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000118

MD5 02b7dbeb7ad0d79d9192d3e9a27c41d6
SHA1 3ab7affecc6049912eb03987a5cd19a25c5fdfaa
SHA256 048af52305de26990f0be2fabbbad9218d36f43ab84254fe7a9d3fbd5873c5a0
SHA512 5d69f37fed26e74f5ff033e093058a4e7b48986f95793b901dfb60f58a46897ddc83ad9459431c95fb56a033bd1850af3b41ca1df8d2f0a4c88dcb385682a5ab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00012a

MD5 2491714f90949d65a173530d70841fc0
SHA1 c38bb6b571a942d4dbd4b2e2f95896001c62a4d6
SHA256 9d634a6d68a9e39826247d83dfd3b23d4d5ed9c297242d07b16ee38a339de826
SHA512 d5e2a733fe8f0ba0a6fda521787656e277356d93b7d3c89af9bc0a08ede5511e77c03a75c88da5718cc4fa340277787327b3a68daf59e907a03d4ee0952d0c76

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000116

MD5 6581ab53c220b5828e37162349375431
SHA1 1922912ca5ab6eb5a55db138b183b38d066e85c8
SHA256 a8e429611131e3fdc2018ec943a36100dbabb4aaa788c8dead6bdcf927917293
SHA512 b8fe079bd4aacd01fa41799999452b27051a4ccb4dbb91d9e1f2662c5d6112032b1633dfb2e31db71f57fb4511a48b55646d034bd6f81caf017ed0dace0603f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00011b

MD5 f600f93565f723e864f381ebd758bd98
SHA1 223f40fe72e86b5a24645be77515d661e3f94988
SHA256 7829cbd330402a36930b50c80e0b60d8d5bc0bd3b29f622679a43dcb0690d15f
SHA512 f855eff49b902fe0aa020ea7514faae6d4ff9b52fb37a6a762b0f235b88feef713e377e5794fd5e6bf0d6245c388ef7bd41e8163e3e0841f03af8aa767bb146f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000117

MD5 bfe7ad4aa54cff8909b2d7632073cc30
SHA1 7c2e625bea4d449ca78cde09ab59dc6c9cb4726f
SHA256 47d477915fa5912616e2dc5df8c5780f9202671678cf275472bd39f3381c0098
SHA512 b083c9e0766f281a39f582404f08b3d3314c7757ac151c4cb00bd3ceceb4fa06b12d08d881a2c6bf80a066ecad22fece7cff41269d2dbd2bfe38d873922a31ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5de9f44e801f6134_0

MD5 1112cbed609b3b95f160ca3fa6dc5901
SHA1 ab6c63a0a198e5f572ab3e84643d5072f6df9609
SHA256 a54eefaf8365eec13a15e564cef51a8be52c19b1e762ec61051f752a4849b67b
SHA512 b91aee60877ee37fd25f2af9e729191b62ad7bc9820e71e9f911eff5a7b5f90ddf5ce7bd9203ce23a3dea668e18f122ae3e1081248a4e1c81f95922194ae1dfa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\65a17db215bfc27c_0

MD5 22981c704680115187d50b187bfd4e55
SHA1 ad103b1a6b84c64ae7851c5b78ca11060b64ab06
SHA256 e441afe57909a653852d2cbeee2d005257fa64b59d6eed79e14d194f1a9f1347
SHA512 16afca834b515b13918375573658c5d3d123fafb56e1b43798559502dad513c87f7522941fb3fea03a362fd3ff1400a9f1e732cf194530348c240021cd7111f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3fd2be14abb3904c_0

MD5 30592fcccefbe1ada5b6248ff870ad51
SHA1 c7f7421587551ca83d14f0a731805c9b9d4f9e60
SHA256 c9b7c6c0416e3141ec6d5d6e7137deacd54e930b4928a29b65be086587d33d04
SHA512 c19d79e2d8af7b21d848f0c164ad47877135e1d04d8ad187c0e77be0f1abacffac02027e613f828061f0adec2601d99a5ca43a1fb80cfd4ce8a056b95187aaca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b07f53c03d60c350_0

MD5 d7c3f14f3ae1c3403c2281831f4e6aa6
SHA1 13c67fd65a3c4ea314704ab1be5f9c7f7853115c
SHA256 7adafe6f69862011e0964afd45a51b100ea9046e8f245a4501b460d70d41c6f9
SHA512 a029b6de7c7cb5783f18027bd18bc7f60f1f4b75c0d6ac58f71bed17fbf65f2e7143979588e0f645685bfdfbd0ea5e84e87a3fc0ae58dc1b81212f88cab5bdc8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d5666b24e92933f3_0

MD5 6fc64c1a4561f23b4eedd734a509b022
SHA1 7101b87f57ef425a867c0a7f47903457a96eaaf8
SHA256 a419101a79768ab730d6a6e55d56255b4024d947f15ddc48a8f33f8c235b13a6
SHA512 84a4afb78a0d6da3a3dfe7644f37bc368fb5feb18f7bd3e26a64745559c51951ac8c5d2a8e5da240f9b52ebaac383b3c50c80ba0e751d71cea8b7a606e8f78c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6c1672ab31cf33a3_0

MD5 62f284999430d200a9df36b122dd86d5
SHA1 52659ce8a018a07d31ba0281ab27a18b9b4f714b
SHA256 d8eaa1cb462567594ea4dba6abc0573fa89c8742c6f0e26563d5913d533dfc2e
SHA512 14c3888324c80e85a5c75a2a04c740f1e863cde028d1c82865c78cb788a62166ff0f7cbd4fbeb61a92bd5c44cd14e98a0958ef32e522b2c96ab1fd75148131e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\16dda77d-189e-4470-9736-16298769c58c.tmp

MD5 aa56c7e064e9ae9997c56463ba1ce437
SHA1 36ff604492a7f3dbe896323db09866a299cc6fd4
SHA256 44f49f94b9e3de41d4b7acd2cea300247234a3d4245b6e5eae384ab776827b44
SHA512 ae85dd04e5f53ac227c777d8f2b1315a3d840a7af5b94e657df309284f45aaa5cccdca330e028c0d91a6012bdbe4617bd2cd97c630bcf700c3602bfa14723357

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5749bb82992b1880acf0f86cf16a0698
SHA1 186b561635ddb2b5510ec896f6c4b1af5104b72e
SHA256 df9d5d8726233db46e9b455ea50140b2fa6a22aaaf7843bab928d9913ea0a867
SHA512 49abd5a0a6225406fb75658d7f06f3102beea399b8e10a6b39aa204430d910cd4c0b852da86d1ccf9af7054a7ebd8010dcd2f2a77116c576386815e8c37ee32e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00013a

MD5 a9c707ebcd0ee149c0d5a2900e886714
SHA1 27f0a33dc469a5066459b7a55338f1faf57e4bfe
SHA256 1f7d79b7f10fe433047824174fa4eb2c66f7eabe9e20302fa60e2d854e8abe66
SHA512 d1cad91f0c9da7f6dd585d75863b9717114453e9cd8635bd8f536d99f7cb0ecfc5efc7fc28aad3952f2b6cbd017ebcfc426d4bee7a196e977552830652fea58d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cdf07720-670e-48be-9244-8b21bfe2c5d0.tmp

MD5 3c8ebee64b4397a86510c43b4987ccc2
SHA1 7dc8a2d50e96e01eca76b3801d901e1873c0e256
SHA256 eaec0358c4e1123eb19459d13d0befb0f785f6a19752b2d306825de149fb032b
SHA512 207971981de56def1724b174b218140f883571eeefee1d492a69daf6e42cb06021e8556f989c23942facc908e81048d70935b0f4a00eb47bcb3f5142ca7e044b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 0076b11dbbbc31ea38bfa14ccd90a5d7
SHA1 fd6d569d1a6c1715f0d5312fdedb4c96790a7ed8
SHA256 c62a7ebb5b075eb45b6bc6703b95578af8470e75a58cc7b86be935122938b822
SHA512 615e324e7ef847845c7510546e92837651ae23bd7e487fe4f79ae97c2a5d1bab091fbc94c903466cf3b6f42b66870b3e7bfc8a2daa3ad5474c29b3d727115a92

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 428a52b81959a7c76eb80eaa3f310c5a
SHA1 a1e6fd78c5f3ced53f07b568daf47a4193078c76
SHA256 239d9fd73b434b7362b134e744ef0e3f18699db43ac64aae6c9e7062c96d3f4d
SHA512 b01bb9869acce93f54bb135abfcd987cdddc1ab0c12ef5ea117a0eba25a9b40eb555923da8cc1d300a96974db0f3d7de938d31a199d9ff3559e06e1a8be5a426

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.xbox.com_0.indexeddb.leveldb\000003.log

MD5 6168bab2674a67d62f5e15653ddd2370
SHA1 fc6d175614c76b49cc30f93332e3ced9aa46eb3f
SHA256 1ecdf330f7ffdbabe492c19c9843338bc0f803d19c0ddb015d53aee533a5919b
SHA512 d132696e6bba59e805dc1b7a4114cbfb9d1c53a265933356565d65c8cc71b99be1095c4dec78e5c97c31bfe0c6e4f9169c6de1ff040bcbb2e7e0c0435937aafa

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 d3fb326ec1ac54e61d917b2ed645d667
SHA1 8ddfc446b4eefea825e606182015bea749cc7002
SHA256 d1a0e923593ca85a1304813fdaa1476c23f428de5814bfeeeb792b6f8628d8ef
SHA512 bf4bb4ce196bec536f72dd9dc9e9b2e739fce51c1570dd04dd16c30a47f3d020a2031f7f0aefc803fa6b911ed1b647acfff5d1dda91f23182886a6cad13c5b7d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\445904192da822c8_0

MD5 b5b9ff2aa9c93f5b8966155a1553c08a
SHA1 00e7cc5c25b5bcb99e3fc4ac01c2f7c7cbe71a20
SHA256 e7da1125006e91fe090b170b8dd7d174dfd30a9419c59d5b8a523a10347cc8e2
SHA512 3a91afb79e2c062bf70af508cd7e9321d7327d98def3d29c78f05fdc21f463dcf565167cc59ba6a8c85d47fbf0ce2e9e88a7c945a84ddf4fa38edb0532509e1b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f6a51319518a19dd_0

MD5 7f9abdd6608c93797b6b74171044be99
SHA1 576f10c1434179838653efbbc3e1034c533536e7
SHA256 4a5e99b739a834eba4bde1e3443d75183a7fde197c5d0e9357a3c498ff9f7131
SHA512 ef72df5759f8327a8337c14ee902e5498d909af8522028108683a1d1d29f06e8da5b9d07b2978a193f7f985bfedc6daaf8cb106b89a7ed6be51077ccfe07a036

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ee46582361c18fcb_0

MD5 38efd23ae9a03ec9ea609ebf55b393d2
SHA1 d8b508ec80368c8fde8e1b3bd42190a5fd4d3c6d
SHA256 1e6dc4bb98cd7700903000a9cff435d082640784c5e0e4bf04f8e68c64a1275d
SHA512 84185ce7002b49ebe1e180b8db67db1bb8a6f29c0606bfbb9c1eb1e45b3fb549c72d4695364d6cdc0717b16167409f0e193ed2f5ad6d840e97c93fc8787ccbc7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5e2acacc56dbc610_0

MD5 88edf4bace8d88a52dbecd6f5bab1177
SHA1 68004ffe6ad514fec4c44d4f0ef3ad1d310ff234
SHA256 3fcfe720e510f7a4f9b78568e0b9c8d0b74ac1eefad2413b4b3312112d6bc9dc
SHA512 f1f46b358efdb6f471ea9234259cdec9064c31265037b94d06cde3c2083e33ec0400d7c7278ecdf40981acbd8944a8ec338de4e5fa285665ce1cafe07cfc4314

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5cf333f30af9982e_0

MD5 85f3ea7dabdb0fb12acdd3f2cd67f533
SHA1 b5ed693f7097ffd14d6387b232ae8b17579208f5
SHA256 243414a19ccd61fd391210f86fc7ee6963b6b874f2e5e2008073b354cf73c7b8
SHA512 2c9445b28368b44e5358486f8d16c2a885f5f8edf73a40c5794c9c479d2093af30f504a0262306220ddbfacc3bbb23ed90c3bb4453e7b2bddf0cb6ca5edcf8b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f32271f467c67dac_0

MD5 f7b956f666e11eb9f63b0baf9add99bf
SHA1 a708cf83bf9533e44bb65786dda58d9b50c20d79
SHA256 30db46aef2a0a36e1cd39d84c6b6e48b71caf381a65c3def3702476958254f84
SHA512 eeb3823acf79ca26d09f145811aef1e9993636fae6af5e210f3235f7b77234cd9bf151b47dbee1e0b0ddd0dfc7d91dc3c3617dc56433188d743974aad7ce29f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\03114a5f9aa8edce_0

MD5 37ed19af88e931b826fe3f6b159fad0e
SHA1 f91623b1db1513b55b93af3fe8d080ce67703c1d
SHA256 9d611f005ef848ed0e22e9fcabade7762f4261579a950d4d1be34c91c5ebdb1b
SHA512 dcd192694e34d22dc619f8976047223cae829ebfeaee282d2f1e20568758f109262e66cf04795550111ae9e80bc04260d5348868371c4f41c317f1b482ac41be

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000f6

MD5 1aca735014a6bb648f468ee476680d5b
SHA1 6d28e3ae6e42784769199948211e3aa0806fa62c
SHA256 e563f60814c73c0f4261067bd14c15f2c7f72ed2906670ed4076ebe0d6e9244a
SHA512 808aa9af5a3164f31466af4bac25c8a8c3f19910579cf176033359500c8e26f0a96cdc68ccf8808b65937dc87c121238c1c1b0be296d4306d5d197a1e4c38e86

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000f8

MD5 3901431a1cf953a09fb115f792530d50
SHA1 9d3f7fea615821763849cd320e3c9fe501d9cbda
SHA256 f6495dbf769719aa52f4bd6887e8e84a6565368841249e480143f6bdafeac85d
SHA512 b480791f426899e8c212d327bce05f9e9b9a9efc0ad09f73168103291a236bf72cc6c3c0f4048ad2feaa560a51235e1ef91dd11720cfc273b99f59fbd60ccb52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000fb

MD5 93ff74c969ab8ff235274b68b596d4f5
SHA1 e1c57cc47e92ef507e28259013adec61ec5832f0
SHA256 d09aa2f266688add22a32fe9956fe3034800a567eea4f13b0283ec4e6750ccb8
SHA512 77f3cbe3b6bafd5a693ce408d3797fb9581d276afc9f1415741f7cf574449d9ed716e0b1d81e6f0e76aa8507282822cbfeef98cf221447cc0ca89233aee5bb58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000fa

MD5 59b0045fb45761f9ccc0b3e1169aac7f
SHA1 5b2833555a832e304001e70beb830a3390c7a5ba
SHA256 cd41329f00864ef7e08ce90014b2ab5b15ec111bca5b756a085d4c96af0803f5
SHA512 00c276a389290e295d448e0c0c49f5cac0871d4a87605a94ba5034078843e148f32fd6536aa3e7b6eb38a27b840843f19e6af4dbaa68b6c4d7499af1779f8393

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000f9

MD5 6e07a797474ab1d3b4e58a78b7f60b51
SHA1 3d424ed9cf431117fbe8c4d10874541b0642000d
SHA256 ae9723463764bb0448650bb80d6f8075802ee9a1d9bcd38a5cf124112341e715
SHA512 eb6cdde46bb9db70ae398d1186820a6c9eeff3edb078494a0667c461ca3f0b9997e7ac318da948bf05d0b75d3a63d1a0e487674cdea3996a4892d9f7fbc68f70

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000f4

MD5 741df343b4e154bab67b7297aa9e614f
SHA1 04617eeec1bc3154039c97a0862821b4c1099336
SHA256 4e8763c282cc3907d0d00e97d7db60f9cd7a52c763670cce707d3c91ee8e05d7
SHA512 44d0baf07f941df7024049c4f9f4b7a8e405aba38852d0536f8ccd87df9c17f2dacda1a241e4c11ec60ba83ce4b493142a67514953458c2a7dd44026eacaa706

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 05649fd017afb90c2e900d432f11e592
SHA1 ea4d16c6d45129ada47698cf9a04f55cce799aca
SHA256 049466d9416fa80e81a4d10534576e7020e6ec92fe407c0617c01acbf4081a8d
SHA512 bbaaf19585d4f723f4d057d2723a764a58466d170082f68f17b170dc87b79f2f9baad8d56765d471789c1f2335742f785ec83d6735c4fdfa5e356c12ca2d312c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8c64e1c2ed34ee68436839c7d53b866d
SHA1 85e60ae0d7301f2830b8e84745aa102b1a6481b2
SHA256 248fd76bfeb99b15f6b9cef66ad3d6074f3a95773793dd19c3cc41a47e44543a
SHA512 251810d1763c40a5b8d721292fff041502f0097a58532574deb745d5cc69a2fd543f0a9d661891eff10c4fdf224e025bc809047fe8601137056c9e89dade7feb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 73aade39d2668d4c02ce692f6f8622e7
SHA1 622370e09191e3ae2957ba0b070f6d33293c87bb
SHA256 163a3745d28f268aac8b3b0aba4a8c3bc3f09113c8650243e95d014f2fd6f7a9
SHA512 78be789025256fb4db066cec0a3a20246137b15ce4c995f22d1f7753e9fa7b90c3b5db5e91d32ee3037ba1e5049d9285be3fcece16dbd507f1dfa4005e1ba1d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\14ff8116b518ca2d_0

MD5 338bc74e3baed20f82ea23fbb3735aee
SHA1 d525db38da0714148444fcd7f741f7142cc1ee6a
SHA256 3b7105264447d437e77638b79c5f9fde924f208b17aa4ec7a686382d65af1cbc
SHA512 fe80e2c1985440dd024bb6db6b4bbe32b2e09792f1b0279d450f3a4dad4384f15f024ed4220b86be979a9bbdc0d4b9e149d5106a11f9c18802bfacee591743be

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1b3ae729fa63607b7feb2c631d3459eb
SHA1 fedb051df78cff6dbbe57758a745361af8c066b0
SHA256 a40d9b053243fea7f3143fdd478ab4ef64c2e5289ab38cc7941284b647a2dbc1
SHA512 7d9d1b6430c3d9d5a3c2e2c22c2931a330e4f352464d4d504bbd016463b56193ec5ad8b20fa42a0827eaf8260cde95be77d04a0457a63dfe98b805764dd55e88

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9d5a4ff41ebe07ad2fe0a06d35a647fd
SHA1 0d1fe1b00f514eeefba669d773d46577884bff78
SHA256 b44a294dfde71e359c7b90ff7066a707722e38a84139e43d783fe3a64080ae36
SHA512 3856d3de24e0581a80dc25d88c526dfeca61c765779e58b541894fbf421f01e319563a109e749be26d025bc8d3b998170f754a872d165a20b27247c2308ae164

C:\Windows\System32\DriverStore\Temp\{c2b0f7e4-3f2c-8840-8efd-120cd7928bda}\SET46C8.tmp

MD5 f774906ef43b913502a0c43ed3ef1f52
SHA1 eb8189f04b8ad345f6c2cddaf75995f2e5c51250
SHA256 e34bffc4c15f93c0d1b89a328ef805f4a6cfa1edc9f32e561365c3acb1e787b6
SHA512 ce39d6ea2c333f58b4c048d7e71276db8aa57fa58357e6c03e19c1016891f90f2b614afe4b9614aabade2237cc529d0bbf453d75941e09d98d6442b8e0f48382

C:\Windows\System32\DriverStore\Temp\{c2b0f7e4-3f2c-8840-8efd-120cd7928bda}\SET46C7.tmp

MD5 b25c718c1fdaa59c0d2cb1347b8ab5dd
SHA1 459752949af2cf0e8b370d0bcbf32fb5effa0abb
SHA256 617642184092f455fc7ddfe31c7de53db39459a283019d816f8c9a6574dbe501
SHA512 adafcc0d6c2db9f3a73cf21aaa26cea5cb02717fb97195c1287e09837c95ec8953fdb47f2d2f6f3651f497ddd8e798cb4d026191cfa85a0cf32cef646293b164

C:\Windows\System32\DriverStore\Temp\{c2b0f7e4-3f2c-8840-8efd-120cd7928bda}\SET46C6.tmp

MD5 3f7d0798fa33199e799a91e87dc632da
SHA1 78e9b8d66cb3147e5663a90e83c8a38d166b9b87
SHA256 7db6fdc2752f9b8884e19b8af9aa23e7f5db8fb525badd75952b753e93923122
SHA512 f2884d2b17b31442c16773fda2a4fe07ca4860ac749b8d5b765f2d4887c9d2c047826255fd474838f90d31fa5e5bc0fcbb776fd10e69d18e510e06f16fdcb44d

C:\Windows\System32\DriverStore\Temp\{f09cb65b-7584-3148-88d7-462751ac6905}\SET49E5.tmp

MD5 ec55ff59890db29d01aea48070a62266
SHA1 76ecbd14b6b0e6dc143e6e7cb51e4e4a12875899
SHA256 1657a5c6ae6674d8d7f0534d1b5d729f7253a78935decf9cdb2f6c41098bc6ef
SHA512 4b933d5c596707dc7c4da0981839c8307cb52e6aa12f382a4a15ac0a74602ce4d3bb1587350ecc680ff18c0785c9ab8265d402c4ca8b2864cd3a3a484ec67620

C:\Windows\System32\DriverStore\Temp\{f09cb65b-7584-3148-88d7-462751ac6905}\SET49E4.tmp

MD5 1ec0263011cb6d0b6069c3255abc5adb
SHA1 1ca79cc432cbda91380cabe67a740c5a408462ae
SHA256 d9a7d1c495660c0b7eaba6fd57d759e387be7f291aeceed6b5e8bad28063659b
SHA512 111f65003fabdaac578488e22a30bc7a232650541f138b5847c08cad9ff55b96af1b138f27f84602764aee258a3145c7fa486db2bc0833519c0155a270b84c79

C:\Windows\System32\DriverStore\Temp\{f09cb65b-7584-3148-88d7-462751ac6905}\SET49E3.tmp

MD5 793989c73db1ed24a218f045ef43e2ad
SHA1 f9b0deb8bfbd884093bbe25e0200f460bc98917e
SHA256 158f89b26732c9a49abc5efbf38643a17c525826cde2447bfc386db0b15315eb
SHA512 ce3ca3a4f66b36abe8c23cf94059da297bfbba0c8e0d9df5ddf0356072f9778dd5b992c7e1bce2b2ebde77a652338522dc0b871779594eb3a7582dfde3740b79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5fdb18e44da9c9ac0adb4ce20f451f32
SHA1 08e1ddceddab261447003b3f17fed08439096f59
SHA256 8ebe493ca3d6808b54d5a9504334ce7a0bbee9231171c1f54becddfdc7b630cd
SHA512 5db0707d1b242aea3a34f75bb21d70b6aeddcfd350022fa39e0748b789a29805b209e73a00d108f514332cabc816b0b713d567236e2a7d4367f40be70353406c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1860c9a2cc4cd16a4150f4400e343cc5
SHA1 30ee212d043e49278393e6a418638d35db02c9c5
SHA256 c6414d1406a438cdfd12c8445c90141c3545f796984ce304bc5d28a1a21ddb17
SHA512 a6eb3818e33beb8dc1cdd16425821aa8bb9ac640598c2b6b9eaf13d22f7db58c1572d1734ae6d2ee50bff5abcc248a72e09f736d07757a54c259ee2ccb89cb38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\index.txt

MD5 5ad57ec0a26872bd88bec5e7443c29e2
SHA1 85c1a51f2c9dcbbf404d9930d2659b718409ebe5
SHA256 863fa1a0f708741047484ec6f1f080d5541497a4075b3452dbdf71dd449d4434
SHA512 fa12bbbf1115fcf8246b8e6b5add60831e99269aafebe5e2d2c5f3ae13ca004566eec2431845f1d56c52c42488ee142514cba3ddba0f7562e66650dca04ad5ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\index.txt

MD5 45b53686778cb1dca65f689015998422
SHA1 86d4a0dc0d7f9d4ba792caab6456b84b1bb46d7d
SHA256 30a12e3f3ba6d35c75c3bdb03968cf0999546c22a193181bcef76dde6a569111
SHA512 7b4a8e06a3d36e48443635eec2d9d5c56b98117882c5ca79be85cb28169cbcbf2584b111a10a34ff63ef646fa75f69651f5ec22bf4dbe1211e02298a6bbc076e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\f9ad7340-1344-41e4-a683-cdf36681105e\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 441c2cb35d19ba9b68f2cf244dc87a4e
SHA1 c13696c5d1ed7b4abf9c017ab38557f45b1a151d
SHA256 7562e248c001c1e20181a8551677fe3755580397762848504e2e4a5b1d101e1d
SHA512 498faceddd73667f380c6eecc875d1e1afdd76b1e6c83f4965f3baffed3ab15c4255d9d28afc83a6119f53a7625d81aeaf5f10eb154b16e58305ef95d376206a

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6b7b32929c640b940a578057e3552733
SHA1 54b5b9c683c42643ec75841f3094a12c200c046f
SHA256 1e44f2f8856126d2b1395f967b1a38679593651d5b69f4f7030e4198d1d3ef81
SHA512 87ac4f529961070b3ed90793da256b8ee694baa2e8a8e4f736f32e97b7051b39255a7c3f70ac88df6ab7c252aae82104d90d57b753cfc0426c67ddefcf17b347

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\index.txt

MD5 80080d0043ad7fb2107af30cea84cf28
SHA1 49f0995ccc2d1a4a0e4bed67403f16f495d3afb0
SHA256 0524850160737ddfe779d05115fdc342d51936a4d67d66cfc4c16247a2327870
SHA512 3d81bf557c5728bc7e21aa3cd73f7d675cf42540a9423c3cd4a604b7986f9a299a1de23d5a42225715de11bb28ce8a1dc074fd85d1a18a154cf1c055e6dbb057

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\2ae17631-f0cc-4394-b47e-3702fdc6242f\todelete_925a02cd30dd2ad1_0_1

MD5 a7036e778283f527a7e97630d65ff26f
SHA1 aaa3a26226e09f19dd56bd524f99f79753ccdee8
SHA256 30e5a929364aa17eeadb2ed88c6d50675ad124695506c7302c6bb9992248455c
SHA512 22aa9ab26bed457a422c426b560e6f4902cf1920590743a1577d6f7bdfb11c632d6a34d19a28c426439f0af98bd1b6c924dfcec6074cadb20b10a7084b7f7360

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 d34c2e5d8e02fd6a33b236d1c4fe7f7a
SHA1 f6a4c9582eaaf753c5ad96685f5e1aaded0c87b9
SHA256 89c11ce2b0afd57151bd5e45550050c3b5589cd3228aac1b281ed171e7d549bd
SHA512 74f5c63843fb740bfb5247b246286750d818219aef688d77fa6d2f7ca4fc8defec61b934f2a578915003b13df824f9f929cd34e7ca154edca8dc1bacff3543f4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9bb5d9d50a990a44a333e1efe91824a0
SHA1 6ea72a30a648a99fdd1aecab584dec0bf3824411
SHA256 3813d1ea2126d0db9c16cd28cb70bbe468004cf87acc246ff577b57fd05affda
SHA512 10ee87c24b879d80ee5308702549c5f2c8560e8c96292a4eb81198cc72d9d2dde0d9df3bc2d848be4765cb230002b5666f160c09b58548dda431cbc22b45096d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3b2b085bddc363c2795e1916d5fd9da5
SHA1 38aed4d109e5f555c69ef2af4d4f2291a673da99
SHA256 ef61e578c20ea3423679f8ed6a5337d362617a0e08f906b822f83f7e0da96a91
SHA512 2b2fd49a9c3ce67f07554e1897bbad501b6f55a7d639b02037556380cd265079da25e8f77444e1e69f10f85617f541114988be7fd5e32edc7b1a415ad45db9c7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3656f7ddf0d78d64_0

MD5 4f624457680975ed1f6ca510cd143ec1
SHA1 4252c21abc41219d84dbeeebbb34ed412c1477bd
SHA256 d97af5c0f5cd923a14b5b098999cc7962dd1b66585f39c9c7286fa2273e96175
SHA512 b7f35883084374ffa00e3db77aaba98f7d8db91c172730fcb8c98ccb0b7bf2c3c0e9e9a4cebf4d7cf677f9cafa599a1c27ad8bb3f4d3da9bffe1c5939f1555cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\f9ad7340-1344-41e4-a683-cdf36681105e\index-dir\the-real-index

MD5 9cbdb6f5b0ddf07aa0526471b846f735
SHA1 0d7b6c5c18311e479ccc5092cfecd6f1031e9621
SHA256 6d02cb2dd677859a2dc8ff71419cee7b15bcf2627facaa68565fff7533031402
SHA512 2c30e8a6257ec125d6f9350de9136e91d32ee2911c9556279291ac0d22803cb7a2c4c7d967d68e7e451d8ba49578a2b5a9031daab0a4b2b25421817869a24438

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\f9ad7340-1344-41e4-a683-cdf36681105e\index-dir\the-real-index~RFe5ffeeb.TMP

MD5 3e13a76e6a5aa209c886f49ae0f8c77a
SHA1 ec13ae317dba35e75358391811969cdfbf313fa0
SHA256 aa5db9314ab53c6a84e52dce68d155b1cd47c16c3ad3f496cbecf3857a35157a
SHA512 0fd1beba9adc4fe11bda65db509a768d9656e4fc6b24e1dde51afe896958ba46e798b838b73aef8fc5a4877d7857cd4656860d73e2861dafb67f49e042c029f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\2ae17631-f0cc-4394-b47e-3702fdc6242f\index-dir\the-real-index

MD5 c42dc0669c5c03917f79fc4b2b18b0aa
SHA1 8275677889271fd271c5e56cfc13977025a01076
SHA256 0a3e1431aba8882eb33fd62e407f265809a837bbe0b2185e9c6e2a2fd9378bf9
SHA512 081179974d1384f68d5cb501aa4656a8aa5a0464194384c93fefecaf6cc5de122f19241e173214fb538d90467dcaefa71ec73914bd386ab766d6a5d3adf09b6b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\2ae17631-f0cc-4394-b47e-3702fdc6242f\index-dir\the-real-index

MD5 a1b5db230aab7dad7e0d9b40d79d832d
SHA1 ded35e0f72dda0b8691091bdeffe35baab32d272
SHA256 6b3405ea12726129bbedaa3858838de66cdf142c2bfbd3b26fe4368358deed1d
SHA512 ae0f353e75e0c8a73cc46559a460a679db484ad1114fa234531a2930dabfdb939d1139ebd3a1d32ddabf341fc3ca242c8fa4d280f990b304f9359c17ed104e7e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\016523c449929e1ba4b2689b8bfce5aae7410194\index.txt

MD5 ab4f93b3f87f9dd72ce647ad89ec957e
SHA1 9477620ab1f653718dfb276765c4e19670cf03e0
SHA256 16db2543973c7d20b36f49845feb2ac46ea0a1865e88c12381dcca0c2c5f7a91
SHA512 dbbb1c0828ceb3284e8144af072a5be5cea462dd6bed2890c0205f28362eda217f91fce3b7cbda3fee8bba9090952c638d08269b8d71fb233eb28911b1e17da0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 657581922e6c68eca9808ace25f053b7
SHA1 fead577be7def48ab0296596e34cce28125d119e
SHA256 bbd51ffa3e4b772a28307720278b74b4553e325084588d647ba9bded31d298ac
SHA512 d53e382b0cacdb07e06d80e5c53867139c801c042d1282d04fe3329e046c06c7227f27e789877781fdf72a76197fc950e1633ebea0d4e7f84e240e8360b8a6f4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f380b3b86e8a31afc743d6cb7b36638e
SHA1 dca5377584fb5ac93ea4cdeed5ac2eba382722a9
SHA256 840cb4fec2c8168b7acbb8dfabfb51fbfefd430599dce899abf3f59d8026eb70
SHA512 2cb8fd78ebf052fa841bde4f1d794ce966e4ed0228c88d9ebe8cb57df8e6649fd9541b637f7e1de9655471a53d79b8f6e61fc4142a459f9c126a60ff8d6bc84a

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 eceaab5fcf352b58bcc8eb492e32af86
SHA1 92e8b092fb9d3be642481a56e6b85fbb6bdea8a9
SHA256 11814bcbf24caf3d99b03bbecfa562bb376da43e1f89ae089573d175dc23335a
SHA512 bc9664aad821d8f2e80b0545178f3ecc5afc4f3dd1f1c976a050af74236c0ca662373b4af0deb3b5767474dfef1e3cb30213f71c94f331a937d6318249b60f6d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 43e4486920becded3a543d2f949d4b5d
SHA1 693997aa436e06b88975c78ee1acbf07ef831b4b
SHA256 76e07a776e486c3ce488c8b4882b164be791a28f01e8ac392c8cab77b3b19ad7
SHA512 f77e01238cae55053f06126243de36b7e0abc8f0f877aecbcc5482256263858ce9f7d59dba9c018fce0c3aa9b43e09a8d9a7cfb1acd94bd9b6a3a8e26b7e94c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 9f2b1769d0c6e9bae49c5608cb212d05
SHA1 5fa4465e25680d7ae5f1597a33bdbe25f5b40e78
SHA256 c39b9ad88f772254625840a9a45e49c5fc9bde8830416bc148aadf00fa821967
SHA512 28d79128a737c95cc36f8f78ede1d8dc3c9f34b37eabccea9c13bb8fe1237573be25bdf56269d6569373cccea063205c8b0df75dfdc850c3574d5931aeed1636

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a370f6fe21d3f35f29ce33185e0c8cb1
SHA1 531f6c94633d63c734e6bacb33a112e885dd8cdd
SHA256 96189f6ff50a5b118c4cae1d684497b67790422dbaaa99b569e2522121926451
SHA512 e8c1b5e2976a1767ed60aff7b85f809dca527bd36afc116c0f14b040e8f320b89927b3f447036a81691a805ec9edb567de14850c5536f509c10f18356ca20aaa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 e3127fb0392bbe9531622ed1d7888988
SHA1 6950aa8c6545cd85c4a4ad457623bb81692f3dfa
SHA256 2abacaa71152ea1d170fe7395e4d7da030e59e50b70be3c26c9b7e51adfb65d5
SHA512 aa5c567767d87fe8a799aa82e3d0a16d7960b83dd399b81e267893c866ff162af441a60a8515e28f7845180da842de5fa4c58a37eec573b5f3651525e824b283

C:\Windows\System32\catroot2\dberr.txt

MD5 400ac769f1b1e193d984227d5fe23add
SHA1 372e47adfaa4f8f57f90a50f7db3faf5755f1931
SHA256 1fda8041958a0ee002408f738d66dbf521e95fc013692ce54b833679a47cb1c0
SHA512 09c9cc977ac682a80d8fc07087c038065cfd8a514cd80b19082719c31bf7002a0a98a5777cf1e88966bc744e4a5263c8cdd9be0650e7be5827e6374fa9cfbb04

C:\Windows\System32\gamingservicesproxy_4.dll

MD5 7f51c226cd234f3a3cdff214262850f2
SHA1 8f11d7d0acbeba3d4eba58e0a6db85de70994e9a
SHA256 d42c76ec488fd801419cc8b7f7b71c36e69ca83c7d6290bbcecc90009ba93e50
SHA512 dc58142cf8af74ca1236f49865c029b1d7422df8d8d20c978de586ba0a3dc88c6ed66079cfa96d773bd4f50791bf92a72a741530b47e9f3e1733b3dffd94f512

C:\Windows\System32\gamelaunchhelper.dll

MD5 2932bf3fb43f0f0e71b40a8cbd8447e0
SHA1 be25edeae99bc824baf702370c16a82fdff144e4
SHA256 4cbb1f7c040503ea73ba64ecc5247ac3f9faf27599ae1c3adecab2272a7f680e
SHA512 f63fd2da6d2791decc0bee12b2e68dba79e3929237db7d9dae516c16de57d8e620602b883b5b0befa007ed7e61aaba3052baa48a8a36f829d0fb2ad72420318c

C:\Windows\System32\gamingtcuihelpers.dll

MD5 4a522427547c716c59873b33a5ccd30a
SHA1 a0795f418c22863739d53b97632419f5cfc18812
SHA256 9724181cbd01b65c00cd601a60701197c1898bbae26b2f043b7cd6d6c52d30a7
SHA512 561a953ec8650371ee103d4562cc59f791a4fb5ca8fb041be5ba6f1458ffabbc39cab49427172fad96b9558ad548f837ed1e532f59706bb77824164804ead9cc

C:\Windows\System32\xgamehelper.exe

MD5 f148c2efa6abc66af80cfed6d5e406ed
SHA1 74dde1d6a46a7169d559d249e823a60cf037b488
SHA256 ecf37f51a47b5d5bb3f7020ab0267d5f13cb3263a2caddf912040c5868b3b369
SHA512 afc5fc56ee135c4088aed494541734801fe10829cbc4e7e36802fea7b17837881a45d654845403c47065453bf7a217439154e3664acdb2c9dd2bc9932a1a72bb

C:\Windows\System32\xgamecontrol.exe

MD5 8904f2960a99ba111e15b6fab071659a
SHA1 d38bb55697c53e9e46b49588b6b7310f7e296685
SHA256 141b3aa3364f046326b439aa9d49d705727eb8c0571e16fb5771db6a054bf5e3
SHA512 f1b34c2ea3299a6c4548b045b9e9c58ecf162b31339b798d9ea44bb2c9f3532df72c2276d7aa31f32f7abda568df66a44b852aff804a60f159ab926849d3aff7

C:\Windows\System32\gameplatformservices.dll

MD5 4c31c52d6135f7914842ba5e007d025c
SHA1 906d3c3f45b410522f382c3962a7f07e611ae651
SHA256 58d57389e7227af162b8e74f6123e775520d74c29005647174a12b9ac710b0db
SHA512 b47801444b8e7a25ac483418213dd7a0c139046f1b2279fa8e5e996a096e600b45f6eefdee3f9b5332cf8a52110276827b352f2bed450d53405e492ce6ec0e6e

C:\Windows\System32\gameconfighelper.dll

MD5 4117bb28475ad238b3e34b1eb133c8cb
SHA1 f43d9c47b0b567967f9b5cf8a844e6cc68986476
SHA256 35304890ff010af74c727911972510da213a8cd19789a7bb8f640e494563a41e
SHA512 aed8258d8a1f0e4d17f254cf49372d28bb7561b857684a7f295081266b77c1f19b4fc0e57f3c9d43fcf7cc5cd8183df4cad88575390707366e7de4b13bd5f3de

C:\Windows\System32\xgameruntime.dll

MD5 122d106bd4b13603353ec76c57cddc54
SHA1 921673d793ce5e902a13a597e0f32dd766c542ef
SHA256 6abbbb116bfa94a725c5cb7496eb50cdb5ab1b88f18c1dc874573a0814d5307a
SHA512 0be90d5ab843c4bb50c98a9feec10d7df11444029172cf5722ee737a21e6fb03999b0411cac60bc82232f18748d288f74e141ed5baa7d582e9ddcb5956092548

memory/5260-7631-0x00007FF815660000-0x00007FF815716000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 0b14a5e5f879880125145745ae883645
SHA1 9fdafd5f98499a171effa44239e81538b0c773f5
SHA256 9b512cc634e14538a1f262c467d729fa816d60d4df65289b3dd191f1c113ad0d
SHA512 7d111edc2add0e6ce506652fafe635e2b5cf8a6ea263a6bdb0e382c8884469abdbc849fc47cae852157ceed34ac2ee6ef2cb25b77ed38e4c1d96bbe2619262e0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6db9f996b53a867ad07139ef10360ef6
SHA1 af67a0f6d2423a75d7478e564207c80456a66778
SHA256 669f6c93d9644f87450ae702baa6449e15cfd5e847afe4256463c797439aef10
SHA512 f1d98e9638908e912684a5bca9aa21d7b36f60c184be457e6589f1369c35141fd553ea070344132229fe1fc2e30a516427f193b1c703bf6f393e1d3dd33b1f6f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c36b5680d96d25249ebc79cb6a78d217
SHA1 e6712e064248a026a7541655e7ce0a56a9197788
SHA256 14c106e54177b58238efe17c8b64111e911386a3944ff9678abeb16520b5b52e
SHA512 88fdb5625dc873e61cbca22375668dfbe323533b528b13473806680820bf26c1653b894c8314b080ab7ed1c1808d31130a0e4ceff96faa03d0ce080c529d5f5a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 fd75bd1d74a6293c046c942e670d6256
SHA1 abf905a209fea2c0266965cbf95d96cb488eeeff
SHA256 dab7cdb90eac8cbf7e3d7bd5befd5cc3e858f91f786fbc1017386101cab4998e
SHA512 fe0ff28e9e9dd8cbd17ee746671f5b281f4b08122d3436923bc8ec6a9ef2d05953d292c5c3072b4804de2de71e13395e8c9ae50a77aa8b896257954ce7d9f137

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e0f0f17f698bc405b65403e9b7b09d3d
SHA1 e69ae4684ea631edfb90e4b5fa4722267709b2ff
SHA256 c2774a436ed05b3c83b51f74554fc9cc2744c4e89d3b421cc70d05cf1da783f2
SHA512 d8d21f4afe4c8494600879028d732db9e7fd9730a6696452ca789774c81ac31f8d95554990be311d2de8ce577245789fb9d5bbeb2f8f0fe1a7c7fc3098f449db

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d1b2c6c38591a492c1f175fc4e3aff57
SHA1 91f01bde77d28f0838ae0370e2e10f532aebcb5c
SHA256 8c087508d8ed8bed8d62c2030367b5dbba1231928ee69ff469c78f64ef7bad78
SHA512 01df7d40fd3287e961c869ceb77bdf5f4182d91b8eb7265bccf5f5074005497fca739fe801a3eb9549f67f70a967c14441b02b6326426ddc05f25323d6a1708b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8f5d1285baf724b78e5a2695974e9327
SHA1 6fe56f284407965df9c4faa8873ffaf80dd9e0df
SHA256 e0ba9189b9084ccfa0ac8f42a8124fe2e27c083e0f7a98318d46fe7eff7eed5f
SHA512 a145142f7691d07b2a08f3a5d30c579f81f6cf3468ec6ba0179a88fb00d64da997deb54a32f4a51a54a5804ee66f4e4a00cf0d3dbb28eea47d899742a82a30aa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 34d927129de9b536a8f42d5deb34ff10
SHA1 3b7cae537a884ba1fb71702d969485cc204fb077
SHA256 115c9d607e80c6db20e2a27d45ab0e825ba7363a8ec9db6530f34d4f43386b78
SHA512 2499bfad37a1354861fb6c42d66b0127f266fe0249a64da1f99f9106f02f2d7df118642ae93581c0438203109cc93cd5ebdf7cc6bfda318fc21c78b95459454a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 fbeaa58645c9d1b9f9accbdf3b88b1fe
SHA1 afe3ffc3c8abb3f91de0b5786ce16decfaac34d4
SHA256 e7ee7567397e576d610cfa94f34456bce417a20c699a2cbfc3d28418cce00d7f
SHA512 3400a239319113c7a228aecdde42f05276ebcfc6869405681ebf591eabb3d37e7f3cb3d73995bfb4ac4daf9e929557764c8c96e817e4d4096cbecf70f576da73

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 64184a4362dd8bb25487799b10216bb4
SHA1 5e38da42ddcb375e78681ce4d0f3718c4bfdb61b
SHA256 2d622adba35d0e2c6f2007fd86fd391822f469eb4b4054f5bd0a7e48b924a9ed
SHA512 3f7dca8f729537126e1679ff72182f97b10e61db90aacc2bd7330fbe1ca5c0c44e1015e711af7265897861451d1e33193f0f170199c810045287b9d0136ddd00

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 17978c4966dadb169a624f868cfbd227
SHA1 35a6070a8dca2fcf9a6a32713104f99e80bd326d
SHA256 62cdf358e6d18cfadb682db718379dcfcbe6380a9d75f2e3420e35fc01f4fc76
SHA512 9bc8dbbfb08dfd257e3790e95e07e08ae3c81ec4fb8fdc5234701d3f8dfbb64e38ca049e4ea6cbb4e7e7c67cdb3a47923d075463575fbaba69fed8e065842297