Malware Analysis Report

2024-10-23 19:54

Sample ID 240706-labnwstejp
Target python.py
SHA256 acd21c48e28cb60e6445c521aa28aeb9e4957eb69b3830761be8786a62db501e
Tags
wannacry defense_evasion discovery execution impact persistence ransomware worm
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

acd21c48e28cb60e6445c521aa28aeb9e4957eb69b3830761be8786a62db501e

Threat Level: Known bad

The file python.py was found to be: Known bad.

Malicious Activity Summary

wannacry defense_evasion discovery execution impact persistence ransomware worm

Wannacry

Deletes shadow copies

Drops startup file

Modifies file permissions

Executes dropped EXE

Loads dropped DLL

File and Directory Permissions Modification: Windows File and Directory Permissions Modification

Legitimate hosting services abused for malware hosting/C2

Adds Run key to start application

Sets desktop wallpaper using registry

Drops file in Windows directory

Enumerates physical storage devices

Checks processor information in registry

Uses Volume Shadow Copy service COM API

Suspicious use of FindShellTrayWindow

Suspicious use of AdjustPrivilegeToken

Suspicious use of SendNotifyMessage

Suspicious use of SetWindowsHookEx

Uses Task Scheduler COM API

Views/modifies file attributes

Suspicious behavior: EnumeratesProcesses

Modifies registry class

Suspicious behavior: MapViewOfSection

NTFS ADS

Modifies Internet Explorer settings

Suspicious use of WriteProcessMemory

Interacts with shadow copies

Modifies registry key

Suspicious behavior: GetForegroundWindowSpam

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-07-06 09:19

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-07-06 09:19

Reported

2024-07-06 09:24

Platform

win10-20240611-en

Max time kernel

299s

Max time network

308s

Command Line

cmd /c C:\Users\Admin\AppData\Local\Temp\python.py

Signatures

Wannacry

ransomware worm wannacry

Deletes shadow copies

ransomware defense_evasion impact execution

Drops startup file

Description Indicator Process Target
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\~SD36AA.tmp C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\WannaCry.EXE N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~SD3693.tmp C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\WannaCry.EXE N/A

Modifies file permissions

discovery
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\wbaseltcdk426 = "\"C:\\Users\\Admin\\Downloads\\WannaCry-main\\WannaCry-main\\tasksche.exe\"" C:\Windows\SysWOW64\reg.exe N/A

File and Directory Permissions Modification: Windows File and Directory Permissions Modification

defense_evasion

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]" C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\WannaCry.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]" C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\@[email protected] N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\Debug\ESE.TXT C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A

Interacts with shadow copies

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\vssadmin.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\system32\browser_broker.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\TrustedPeople C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\CIPolicyState = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify = 010000009791f368ff05bd2cd10481c168f4430f8f617ebc236635815c740ddea8f5fd55bf6d7254841133b13f02c7b175d7b7b560b27ed71efec2177646 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\CIStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\trust\CRLs C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\Main C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-DXFeatureLevel = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\CIStatus\SignaturePolicy = 06000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate\NextUpdateDate = "427039191" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\SignaturePolicy = 06000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\CIStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\Main C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 7fa8efc885cfda01 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Explorer\Main C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\CIPolicyState = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\bing.com\Total = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Content\CachePrefix C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\Root\CTLs C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\CIPolicyState = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 94bf5af885cfda01 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\CIPolicyState = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\EdpDomStorage\bing.com C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\Main C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 3c01aebd85cfda01 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$blogger C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 05b09a5086cfda01 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\AdapterInfo = "vendorId=\"0x10de\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.15063.0\"hypervisor=\"No Hypervisor (No SLAT)\"" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\Total\ = "647" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\ACGStatus\DynamicCodePolicy = 05000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\SharedCookie_MRACMigrationDone = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\CIStatus\CIPolicyState = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-VersionHigh = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\ACGPolicyState = "8" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\bing.com\NumberOfSubdomains = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\JumpListFirstRun = "3" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Revision = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 36907bd885cfda01 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\Cookies C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\www.bing.com\ = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\CIStatus\SignaturePolicy = 06000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingRecovery\Active = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A

Modifies registry key

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\reg.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\WannaCry-main.zip:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeTcbPrivilege N/A C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\taskse.exe N/A
Token: SeTcbPrivilege N/A C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\taskse.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: 36 N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1948 wrote to memory of 4512 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1948 wrote to memory of 4512 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1948 wrote to memory of 4512 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1948 wrote to memory of 4512 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1948 wrote to memory of 4512 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1948 wrote to memory of 4512 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1948 wrote to memory of 4512 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1948 wrote to memory of 4512 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1948 wrote to memory of 4512 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1948 wrote to memory of 4512 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1948 wrote to memory of 4512 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 4520 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 4520 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 3936 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 5104 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 5104 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4512 wrote to memory of 5104 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy service COM API

ransomware

Views/modifies file attributes

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A

Processes

C:\Windows\system32\cmd.exe

cmd /c C:\Users\Admin\AppData\Local\Temp\python.py

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4512.0.1241688307\956889548" -parentBuildID 20221007134813 -prefsHandle 1712 -prefMapHandle 1704 -prefsLen 20845 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {41866fcf-db6a-4be8-8dca-70d5df9d4ce8} 4512 "\\.\pipe\gecko-crash-server-pipe.4512" 1792 1bfc00de258 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4512.1.2101320269\1975330581" -parentBuildID 20221007134813 -prefsHandle 2136 -prefMapHandle 2132 -prefsLen 20926 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5ad1447a-ca1f-4574-9367-bdef6399a29b} 4512 "\\.\pipe\gecko-crash-server-pipe.4512" 2148 1bfb5172b58 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4512.2.58621333\1627521906" -childID 1 -isForBrowser -prefsHandle 2772 -prefMapHandle 2864 -prefsLen 21029 -prefMapSize 233444 -jsInitHandle 1264 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {20d0bc8d-893c-474d-a555-7d6e1d307cee} 4512 "\\.\pipe\gecko-crash-server-pipe.4512" 2856 1bfc42bc258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4512.3.1953912777\1778204208" -childID 2 -isForBrowser -prefsHandle 3488 -prefMapHandle 3508 -prefsLen 26214 -prefMapSize 233444 -jsInitHandle 1264 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {326bbcb3-d7f4-4378-8c0e-ec2902417cf1} 4512 "\\.\pipe\gecko-crash-server-pipe.4512" 3520 1bfc2a1bc58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4512.4.1950062105\1070518515" -childID 3 -isForBrowser -prefsHandle 4416 -prefMapHandle 4412 -prefsLen 26349 -prefMapSize 233444 -jsInitHandle 1264 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {dd5314b0-5425-455b-be45-2e804b27e889} 4512 "\\.\pipe\gecko-crash-server-pipe.4512" 4228 1bfc5dbdb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4512.5.1693956517\1766997694" -childID 4 -isForBrowser -prefsHandle 4940 -prefMapHandle 4912 -prefsLen 26354 -prefMapSize 233444 -jsInitHandle 1264 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b32bd1a0-e0e8-4852-b304-3a729e8d5f50} 4512 "\\.\pipe\gecko-crash-server-pipe.4512" 4888 1bfc66e6558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4512.6.1678162358\247738200" -childID 5 -isForBrowser -prefsHandle 4936 -prefMapHandle 4972 -prefsLen 26354 -prefMapSize 233444 -jsInitHandle 1264 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {138c34a7-9511-4250-b002-eac6ea5c9bcc} 4512 "\\.\pipe\gecko-crash-server-pipe.4512" 4772 1bfc66e6e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4512.7.1299945685\731458649" -childID 6 -isForBrowser -prefsHandle 5260 -prefMapHandle 5136 -prefsLen 26354 -prefMapSize 233444 -jsInitHandle 1264 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8f945143-c8b6-49b7-abc1-7ef6dfd023da} 4512 "\\.\pipe\gecko-crash-server-pipe.4512" 5248 1bfc6d6b258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4512.8.1933460942\1519691573" -childID 7 -isForBrowser -prefsHandle 3104 -prefMapHandle 5556 -prefsLen 26433 -prefMapSize 233444 -jsInitHandle 1264 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5b4a1a36-f3d2-4cad-832b-b84c2135f9e3} 4512 "\\.\pipe\gecko-crash-server-pipe.4512" 5664 1bfc7009258 tab

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

C:\Windows\system32\browser_broker.exe

C:\Windows\system32\browser_broker.exe -Embedding

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k netsvcs -s wlidsvc

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x430

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4512.9.1359508159\1459251333" -childID 8 -isForBrowser -prefsHandle 5516 -prefMapHandle 5856 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1264 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b3bfee42-44cf-438b-8e19-6c1a6022c96c} 4512 "\\.\pipe\gecko-crash-server-pipe.4512" 5448 1bfc720b858 tab

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\WannaCry.EXE

"C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\WannaCry.EXE"

C:\Windows\SysWOW64\attrib.exe

attrib +h .

C:\Windows\SysWOW64\icacls.exe

icacls . /grant Everyone:F /T /C /Q

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\taskdl.exe

taskdl.exe

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c 180221720257773.bat

C:\Windows\SysWOW64\cscript.exe

cscript.exe //nologo m.vbs

C:\Windows\SysWOW64\attrib.exe

attrib +h +s F:\$RECYCLE

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\WannaCry.EXE

"C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\WannaCry.EXE"

C:\Windows\SysWOW64\attrib.exe

attrib +h .

C:\Windows\SysWOW64\icacls.exe

icacls . /grant Everyone:F /T /C /Q

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\taskse.exe

"C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\taskse.exe"

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\taskdl.exe

"C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\taskdl.exe"

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\@[email protected]

@[email protected] co

C:\Windows\SysWOW64\cmd.exe

cmd.exe /c start /b @[email protected] vs

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\taskdl.exe

taskdl.exe

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\taskse.exe

taskse.exe C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\@[email protected]

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\@[email protected]

@[email protected]

C:\Windows\SysWOW64\cmd.exe

cmd.exe /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "wbaseltcdk426" /t REG_SZ /d "\"C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\tasksche.exe\"" /f

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\WannaCry.EXE

"C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\WannaCry.EXE"

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\@[email protected]

@[email protected] vs

C:\Windows\SysWOW64\reg.exe

reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "wbaseltcdk426" /t REG_SZ /d "\"C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\tasksche.exe\"" /f

C:\Windows\SysWOW64\attrib.exe

attrib +h .

C:\Windows\SysWOW64\icacls.exe

icacls . /grant Everyone:F /T /C /Q

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\TaskData\Tor\taskhsvc.exe

TaskData\Tor\taskhsvc.exe

C:\Windows\SysWOW64\cmd.exe

cmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet

C:\Windows\SysWOW64\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\SysWOW64\Wbem\WMIC.exe

wmic shadowcopy delete

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\taskdl.exe

taskdl.exe

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\taskse.exe

taskse.exe C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\@[email protected]

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\@[email protected]

@[email protected]

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\taskdl.exe

taskdl.exe

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\taskse.exe

taskse.exe C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\@[email protected]

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\@[email protected]

@[email protected]

Network

Country Destination Domain Proto
N/A 127.0.0.1:49789 tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 spocs.getpocket.com udp
US 8.8.8.8:53 getpocket.cdn.mozilla.net udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 34.120.5.221:443 getpocket.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 push.services.mozilla.com udp
US 8.8.8.8:53 shavar.services.mozilla.com udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 34.117.188.166:443 prod.ads.prod.webservices.mozgcp.net udp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 34.117.188.166:443 prod.ads.prod.webservices.mozgcp.net tcp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 44.238.192.228:443 shavar.services.mozilla.com tcp
US 8.8.8.8:53 prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 firefox-settings-attachments.cdn.mozilla.net udp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 228.192.238.44.in-addr.arpa udp
US 8.8.8.8:53 53.121.117.34.in-addr.arpa udp
N/A 127.0.0.1:49796 tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.180.4:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 4.180.250.142.in-addr.arpa udp
GB 142.250.180.4:443 www.google.com udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
GB 92.123.142.153:443 www.bing.com tcp
GB 92.123.142.153:443 www.bing.com tcp
GB 92.123.142.153:443 www.bing.com tcp
GB 92.123.142.153:443 www.bing.com tcp
US 8.8.8.8:53 153.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 73.144.22.2.in-addr.arpa udp
GB 92.123.142.72:443 www.bing.com tcp
GB 92.123.142.72:443 www.bing.com tcp
US 8.8.8.8:53 r.bing.com udp
GB 92.123.142.83:443 r.bing.com tcp
GB 92.123.142.83:443 r.bing.com tcp
GB 92.123.142.83:443 r.bing.com tcp
GB 92.123.142.83:443 r.bing.com tcp
US 8.8.8.8:53 72.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 83.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 s.bingparachute.com udp
GB 104.82.128.45:443 s.bingparachute.com tcp
GB 104.82.128.45:443 s.bingparachute.com tcp
GB 92.123.142.72:443 www.bing.com tcp
GB 92.123.142.72:443 www.bing.com tcp
US 8.8.8.8:53 45.128.82.104.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
IE 20.190.159.64:443 login.microsoftonline.com tcp
IE 20.190.159.64:443 login.microsoftonline.com tcp
US 8.8.8.8:53 64.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.142.162:443 th.bing.com tcp
GB 92.123.142.162:443 th.bing.com tcp
GB 92.123.142.162:443 th.bing.com tcp
GB 92.123.142.162:443 th.bing.com tcp
GB 92.123.142.162:443 th.bing.com tcp
GB 92.123.142.162:443 th.bing.com tcp
US 8.8.8.8:53 20.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 162.142.123.92.in-addr.arpa udp
GB 92.123.142.72:443 www.bing.com tcp
GB 92.123.142.72:443 www.bing.com tcp
US 8.8.8.8:53 www.trustedantiviruscompare.com udp
US 174.138.119.38:443 www.trustedantiviruscompare.com tcp
US 174.138.119.38:443 www.trustedantiviruscompare.com tcp
US 8.8.8.8:53 38.119.138.174.in-addr.arpa udp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 92.123.143.169:80 e5.o.lencr.org tcp
GB 92.123.142.72:443 www.bing.com tcp
GB 92.123.142.72:443 www.bing.com tcp
US 8.8.8.8:53 32.161.74.23.in-addr.arpa udp
US 8.8.8.8:53 169.143.123.92.in-addr.arpa udp
US 174.138.119.38:443 www.trustedantiviruscompare.com tcp
US 174.138.119.38:443 www.trustedantiviruscompare.com tcp
US 174.138.119.38:443 www.trustedantiviruscompare.com tcp
US 174.138.119.38:443 www.trustedantiviruscompare.com tcp
US 174.138.119.38:443 www.trustedantiviruscompare.com tcp
US 8.8.8.8:53 c.pki.goog udp
GB 216.58.201.99:80 c.pki.goog tcp
US 8.8.8.8:53 o.pki.goog udp
GB 216.58.201.99:80 o.pki.goog tcp
GB 216.58.201.99:80 o.pki.goog tcp
US 8.8.8.8:53 234.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 72.169.217.172.in-addr.arpa udp
US 174.138.119.38:443 www.trustedantiviruscompare.com tcp
US 174.138.119.38:443 www.trustedantiviruscompare.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 167.154.64.172.in-addr.arpa udp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
GB 92.123.143.169:80 e5.o.lencr.org tcp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.180.4:443 www.google.com tcp
US 8.8.8.8:53 www.google.co.uk udp
GB 172.217.16.227:443 www.google.co.uk tcp
GB 172.217.16.227:443 www.google.co.uk tcp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 227.16.217.172.in-addr.arpa udp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.180.4:443 www.google.com tcp
GB 172.217.16.227:443 www.google.co.uk tcp
GB 172.217.16.227:443 www.google.co.uk tcp
US 8.8.8.8:53 161.19.199.152.in-addr.arpa udp
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 84.162.74.23.in-addr.arpa udp
US 8.8.8.8:53 219.73.72.104.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
GB 104.82.128.45:443 s.bingparachute.com tcp
GB 104.82.128.45:443 s.bingparachute.com tcp
IE 20.190.159.64:443 login.microsoftonline.com tcp
IE 20.190.159.64:443 login.microsoftonline.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
GB 92.123.142.82:443 www.bing.com tcp
GB 92.123.142.82:443 www.bing.com tcp
US 8.8.8.8:53 82.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 camo.githubusercontent.com udp
US 185.199.109.133:443 camo.githubusercontent.com tcp
US 185.199.109.133:443 camo.githubusercontent.com tcp
US 8.8.8.8:53 154.110.199.185.in-addr.arpa udp
US 8.8.8.8:53 133.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 26.211.222.173.in-addr.arpa udp
US 8.8.8.8:53 watson.telemetry.microsoft.com udp
US 20.42.73.29:443 watson.telemetry.microsoft.com tcp
US 8.8.8.8:53 134.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 29.73.42.20.in-addr.arpa udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 20.42.73.29:443 watson.telemetry.microsoft.com tcp
GB 92.123.142.82:443 www.bing.com tcp
GB 92.123.142.82:443 www.bing.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 185.199.109.133:443 camo.githubusercontent.com tcp
US 8.8.8.8:53 camo.githubusercontent.com udp
US 8.8.8.8:53 camo.githubusercontent.com udp
US 8.8.8.8:53 collector.github.com udp
US 140.82.114.22:443 collector.github.com tcp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 8.8.8.8:53 glb-db52c2cf8be544.github.com udp
US 185.199.108.133:443 camo.githubusercontent.com tcp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 22.114.82.140.in-addr.arpa udp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 codeload.github.com udp
GB 20.26.156.216:443 codeload.github.com tcp
US 8.8.8.8:53 codeload.github.com udp
US 8.8.8.8:53 codeload.github.com udp
US 8.8.8.8:53 216.156.26.20.in-addr.arpa udp
FR 163.172.176.167:443 tcp
DE 193.23.244.244:443 tcp
US 8.8.8.8:53 244.244.23.193.in-addr.arpa udp
FI 95.216.90.13:16000 tcp
US 8.8.8.8:53 13.90.216.95.in-addr.arpa udp
N/A 127.0.0.1:9050 tcp
N/A 127.0.0.1:58306 tcp
N/A 127.0.0.1:9050 tcp
N/A 127.0.0.1:9050 tcp
GB 92.123.142.153:443 www.bing.com tcp
GB 92.123.142.153:443 www.bing.com tcp
GB 92.123.142.82:443 www.bing.com tcp
GB 92.123.142.82:443 www.bing.com tcp
GB 92.123.142.72:443 www.bing.com tcp
GB 92.123.142.72:443 www.bing.com tcp

Files

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2b7acdhd.default-release\datareporting\glean\pending_pings\93a52186-1605-4af9-8261-fc4ab57a9775

MD5 736b898d2716be745d3499217b40a6fc
SHA1 05ac6603812ee1daefb3d49ad66174e3ace34697
SHA256 f1b232d6e45ab01a9dbd3e328d65f707ac42d23261c0e2fe9f4a4ef1b8f582ea
SHA512 af7ddc80ed7db1670f945f51e5e3cfa9c86d209d6a75c69d2851dac94a28e0aac1ff6b236d3d9efaa1f0b7e2c613c3eb6e6e56b691097cdc91ce60858c442a66

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2b7acdhd.default-release\datareporting\glean\pending_pings\6a4db55f-d724-4629-b4c4-82522b5c2d76

MD5 2b8ef56962ba466e4f217a83d2f5822a
SHA1 3b6308f6e928d52f33a46a1783125865bd5cdeb3
SHA256 0c39933353dd340547672144792a240b3311a1fa93c34f99ea8b16579b3672bc
SHA512 66ff38d54740a5a3ece026909d3896a5cdb414a5f519c1c45d2b4b99570a7f0ca5664f9b1505a4137c6697f3ba101b5b0126c621854b17592331307cbbe24020

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2b7acdhd.default-release\datareporting\glean\db\data.safe.bin

MD5 c2a118fe7c3a77d6625a5624054c5742
SHA1 3082bb977b78db23e58171c95372411c8e0a65af
SHA256 d744f80ad531ff732f73f00f702ff8c367741fb62cd066415d36b86fb52e4936
SHA512 95123b1d804ac325aa5e54637db043a93c531da3b70d15af3851eb2843e5906131d497534a5727ecca26fe0ecbb9ab6129aabb3cd9d7a5fb378fe85dfa44f7cb

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\2b7acdhd.default-release\activity-stream.discovery_stream.json.tmp

MD5 99eb6b7bcd6854254f9bb39a74c9fac7
SHA1 4c545ae8c511e1da21c2e9541b4cd7af8102d18a
SHA256 9cf60c54f1b22ae1cc61fb8c28032d4b1e14d065b2ced9a4b44ed5ffc0f5a9e0
SHA512 0e6ef271b62c16ee065c33c49cc9c3172574dcf459e870f985da01e8362a1cbd7359fe8ad2b4e32753eb2dccdd53405ec31547690dad4483c6fa599a0af8b56a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\2b7acdhd.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl

MD5 c460716b62456449360b23cf5663f275
SHA1 06573a83d88286153066bae7062cc9300e567d92
SHA256 0ec0f16f92d876a9c1140d4c11e2b346a9292984d9a854360e54e99fdcd99cc0
SHA512 476bc3a333aace4c75d9a971ef202d5889561e10d237792ca89f8d379280262ce98cf3d4728460696f8d7ff429a508237764bf4a9ccb59fd615aee07bdcadf30

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2b7acdhd.default-release\prefs.js

MD5 e571f1fd84b3239bc67e598e7bdd2ca7
SHA1 309c35c6bb8113c86fb727b14bdf26de21234527
SHA256 ba18c24933adbb073528430b51e610b3a424f261556eecb3c842bb616861ec03
SHA512 146268f5905d5e6a51eb5c01f7f39b5b8812fdc2414b1ada3404d93d70c56cccaa73dddbe2fbf2a88373fc71cfc6e372b266941f0979075c3fc0c7b2549504f2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2b7acdhd.default-release\prefs-1.js

MD5 a184e79df82cea0fedb1de64729d2a29
SHA1 309c6245395e90c060d0999930d1d3ac19139919
SHA256 f6e4636ffe0116b9bfb32c40680db7cbf93869d1fbe94396ab6d52a993605a7f
SHA512 4bee3782dc5e73848d6aef54c4fbdaf1e2df42caf5441fa3899bb293c64aafffcff4d3ddbbd60bb653f48d1c942d730fe111d3e753b312481aaa56b8e5524400

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2b7acdhd.default-release\sessionstore-backups\recovery.jsonlz4

MD5 72a89e1a0415fb27d7c4f1d25f6efa25
SHA1 3d1984b6094f360f357865f9cbbee2ba6c79186a
SHA256 939d163fc835137210c0ba35f24ed5021475c97b5b1eb9289c28a518319a1238
SHA512 5de03a3e1a780685febfe44e387ae05768f2b7e4caf5c35a34f9cb601aa660003fb4825899737484453fbd5a6a714333070c63284e905f7b4b7edb5537e2f675

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\2b7acdhd.default-release\cache2\entries\2547F4F8D6358638CDE0B31A1322D63360CA032C

MD5 c0adafb3414ba4812b4ac190f2e412a5
SHA1 1503e039effbde1dd1a4f32f5161a486b990e2bf
SHA256 321410764f2a403a4adbb8e09043cf78fa74b3c02e233c8e2351b97647240f01
SHA512 b6b1d4ddc0da2b0d2d7fa4623db2c65026fd7c7cac7f756e1f16ff76b42736615673e48474f54638a4aeda842a621ccdeed280315db2305a10f5eff0bd9e7c47

memory/2648-184-0x000002EAFC420000-0x000002EAFC430000-memory.dmp

memory/2648-168-0x000002EAFC320000-0x000002EAFC330000-memory.dmp

memory/2648-203-0x000002EAF96F0000-0x000002EAF96F2000-memory.dmp

memory/2980-213-0x000001637C540000-0x000001637C640000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2b7acdhd.default-release\sessionstore-backups\recovery.jsonlz4

MD5 19c2a02fe124280769a79b3e5700f152
SHA1 9c76b5ea370390f85d208f81294c7909d0865795
SHA256 d6e498ead8fede210d0ab395f3f9b1216ecaae77382009aec4d7c2c055165493
SHA512 4cec05360a6d883151e4934e1184ded1a4f4942c85e0bbddcc2e18a1d0f682aea99f9a2ea32784aa63178ceb241aa4caee264b8d740b2c28dc797aacdaa67a6d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2b7acdhd.default-release\prefs-1.js

MD5 48dd16fcb41694dd04981fe83c0bfa1d
SHA1 fc77d239d9fb3bbdad100045aeebe9f02de72d20
SHA256 68883b3119aa3a66912d072b6d0e3f80d52cf528cb37da483f18110f10d88a77
SHA512 46bf2f62b2887ef1f0f98fe3daf721aab2c2dd327848ba729bae1899a03d312cbb60030aa26007a1e6341df4376c6d50c426fe075a71d685beee4628bc25c7d7

memory/5356-261-0x00000247D5F00000-0x00000247D6000000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\HLYIO1BI.cookie

MD5 3acf247badbb58413ec07a78085c8664
SHA1 4e5968b4138b9434a0aa7d796b1999a2e12fb6f6
SHA256 1487ddc4e07a400c6333d7dc403d2cc18e3540cde09e66e219c29c2256ea1262
SHA512 f62cb0f8bc4c33dfd351877217dfec71fdab05a5d19000619a6b889a0fd0bf0bbb036e0394a9c513b62186307e6c875a512241ded19d3e342b33a3fc281f8d39

memory/5356-313-0x00000247E65E0000-0x00000247E6600000-memory.dmp

memory/5356-318-0x00000247E6870000-0x00000247E6890000-memory.dmp

memory/5356-346-0x00000247E67F0000-0x00000247E6810000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\ZOHMHXD8.cookie

MD5 99f5f0737f02adf5ae83b29714a86341
SHA1 d76743ec29c324e872887f05bf850ed49a20496d
SHA256 3f22a36db3c93ade992b3cd89ea30278bd16b3698a1a0bb8632ca7b1c18c15b2
SHA512 922bbaa21cce1bc7b6a7f28d91fa338f9d55b727ede6ddfb1028da96c6babbffb48c82fcd1ad9cd5f80d39db5c2cfec493ae9d2434781f7d14e4e949db978e95

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\4QB0KHXM.cookie

MD5 8a2ddbad9a057e6002f65d6025a0dc85
SHA1 ba77a4fc073251b6a83759362640dd08fe83e7c1
SHA256 88ce3ac59ef998469c14b482df8b64e8367bd523fb4d69428a4ed3a188a47506
SHA512 97f5308d091eb5e649214381d8761cbf31fa190aaf7a3752fa2ac49ab9714d806702dfa5a2fbe151b8d6dc626b0627b3ec8fcaba90f38794891a8e376e8505d7

memory/5356-483-0x00000247E78B0000-0x00000247E78D0000-memory.dmp

memory/5356-509-0x00000247E7870000-0x00000247E7890000-memory.dmp

memory/5356-535-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-539-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-538-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-537-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-536-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-540-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-541-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-544-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-543-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-542-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-546-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-548-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-547-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-552-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-554-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-553-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-551-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-550-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-549-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-557-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-556-0x00000247E6180000-0x00000247E6190000-memory.dmp

memory/5356-555-0x00000247E6180000-0x00000247E6190000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10D

MD5 143568a82638cb0628ce7f5f288ecf9e
SHA1 37eecc823f319149205a3eac259a8fea9e637499
SHA256 4a7030662a9ae7c3b7bf2e3f6208352fed75b43d5b5f54a4183f907bfefc5883
SHA512 52783c4be8257eb719b0e07b291ef019fa742cbec508a48d648fc73b16094e7ae53206a048333e2db5e18cd33f3dca2f78a05cc1ec28bf86bfdb9306c060632c

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10D

MD5 6d2be228cc8ce4d730c249c0a1b681ee
SHA1 766b71865375173a549720a7e50910a72599528e
SHA256 27004393b745893abe94b97349e0631b1812a92580b56ab998ab592908e1ac7c
SHA512 7304d370c59043581e62a44812e0477ae048ffff41fa00cf45144989204c206b04448b37c858932959e1c6950e4a2749ca3d59a71778513f609b230496d86ed2

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\DY92NP5N.cookie

MD5 d27e178db2472db4cbb44d5c531470c8
SHA1 5840efccc203a0e63534ece358cb66b2c9d7d835
SHA256 3668a7be71b357e696d51282387d0f34c29f9d9c24dbb951036fd04a4bb484ff
SHA512 a607b5ab32b26da597509c081ea39749de193b7be444b646b499d3b3c4343d8ddbc0c1c7eb5dfdc2c1d6b47acd952afcea4d335c670ef1ee3fa59c98cd19532b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

MD5 1bfe591a4fe3d91b03cdf26eaacd8f89
SHA1 719c37c320f518ac168c86723724891950911cea
SHA256 9cf94355051bf0f4a45724ca20d1cc02f76371b963ab7d1e38bd8997737b13d8
SHA512 02f88da4b610678c31664609bcfa9d61db8d0b0617649981af948f670f41a6207b4ec19fecce7385a24e0c609cbbf3f2b79a8acaf09a03c2c432cc4dce75e9db

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\8Hi2PfQw5eooQrwqITfZZ5pyvNo.br[1].js

MD5 e51b7eb6cb390c2123c4fb6beff38fe0
SHA1 e30f700b250bb6c43c07ff2a654b7c5a464c6d5c
SHA256 3350bf7fb98eecb656369997de56fb9f8a8c97c28780cae0e64b70e5e7575604
SHA512 c03f314a5d882bd94843bf9f651bb6d9150f6580a78ab14d470ae7c2be54c9ab3e68196d889b27ec590ff87ab0151cae7655d80e1efdb1c4a43d9d2afaeef3ec

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\fRSNKQanUHk53F1a1Bi8UA71Qt4.br[1].js

MD5 9085e17b6172d9fc7b7373762c3d6e74
SHA1 dab3ca26ec7a8426f034113afa2123edfaa32a76
SHA256 586d8f94486a8116af00c80a255cba96c5d994c5864e47deac5a7f1ae1e24b0d
SHA512 b27b776cb4947eef6d9e2a33b46e87796a6d4c427f4759c08cf5aa0ee410a5f12e89ca6ab9cddd86c8471037e3c505f43c8b7fc6d8417f97f9fe3c5c47216bc4

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\tlifxqsNyCzxIJnRwtQKuZToQQw[1].js

MD5 cfcd208495d565ef66e7dff9f98764da
SHA1 b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
SHA256 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
SHA512 31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\9MqrCXB0EVjVIRzDOArDGhu3yeM.br[1].js

MD5 56afa9b2c4ead188d1dd95650816419b
SHA1 c1e4d984c4f85b9c7fb60b66b039c541bf3d94f6
SHA256 e830aeb6bc4602a3d61e678b1c22a8c5e01b9fb9a66406051d56493cc3087b4b
SHA512 d97432e68afdaa2cfaeff497c2ff70208bd328713f169380d5afb5d5eecd29e183a79bec99664dbee13fd19fe21ebae7396315ac77a196bfb0ab855507f3dacf

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\RKLRQ0TR\favicon-trans-bg-blue-mg[1].ico

MD5 30967b1b52cb6df18a8af8fcc04f83c9
SHA1 aaf67cd84fcd64fb2d8974d7135d6f1e4fc03588
SHA256 439b6089e45ef1e0c37ef88764d5c99a3b2752609c4e2af3376480d7ffcfaf2e
SHA512 7cb3c09a81fbd301741e7cf5296c406baf1c76685d354c54457c87f6471867390a1aeed9f95701eb9361d7dfacce31afd1d240841037fc1de4a120c66c1b088c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\lVV08F1da0WpM29E8OkhXe0yr9o.br[1].js

MD5 02f23d233e9c3ff79a227592a1ef39ed
SHA1 f4160ad9edeea3009d57373a83b6395409c67844
SHA256 10d583a958ddf9850d7a9d2d85fa2da4cf468e3d5b5f8ab82e3e47ee03366048
SHA512 64ec3227bedb820ae760226bc2b24325dc3eedafcdded9a813bfd2137b22337870164bd1fe6ba415f8c64d64fb14e651b027daa0fdc23ab514e549f222ef22bd

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\gKwIRAF4fg7noG1zyeUz8x3Jdhc.br[1].js

MD5 47442e8d5838baaa640a856f98e40dc6
SHA1 54c60cad77926723975b92d09fe79d7beff58d99
SHA256 15ed1579bccf1571a7d8b888226e9fe455aca5628684419d1a18f7cda68af89e
SHA512 87c849283248baf779faab7bde1077a39274da88bea3a6f8e1513cb8dcd24a8c465bf431aee9d655b4e4802e62564d020f0bb1271fb331074d2ec62fc8d08f63

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\9cuwOQ_qE7qTGKohzrf_gIjTlPI.br[1].js

MD5 fabb77c7ae3fd2271f5909155fb490e5
SHA1 cde0b1304b558b6de7503d559c92014644736f88
SHA256 e482bf4baaa167335f326b9b4f4b83e806cc21fb428b988a4932c806d918771c
SHA512 cabb38f7961ab11449a6e895657d39c947d422f0b3e1da976494c53203e0e91adfc514b6100e632939c4335c119165d2330512caa7d836a6c863087775edaa9f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\Gw7eETSwe7GHmKwW1lRqGPQJXRo.br[1].js

MD5 17cdab99027114dbcbd9d573c5b7a8a9
SHA1 42d65caae34eba7a051342b24972665e61fa6ae2
SHA256 5ff6b0f0620aa14559d5d869dbeb96febc4014051fa7d5df20223b10b35312de
SHA512 1fe83b7ec455840a8ddb4eedbbcd017f4b6183772a9643d40117a96d5fff70e8083e424d64deba209e0ef2e54368acd58e16e47a6810d6595e1d89d90bca149a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\_2I169N92jVtSc_VEsV0nma5sRY.br[1].js

MD5 3104955279e1bbbdb4ae5a0e077c5a74
SHA1 ba10a722fff1877c3379dee7b5f028d467ffd6cf
SHA256 a0a1cee602080757fbadb2d23ead2bbb8b0726b82fdb2ed654da4403f1e78ef1
SHA512 6937ed6194e4842ff5b4878b0d680e02caf3185baf65edc131260b56a87968b5d6c80f236c1de1a059d8158bc93b80b831fe679f38fc06dfb7c3413d1d5355aa

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\psgXZvzYJMEW2ydikIk493Va1d4.br[1].js

MD5 f4da106e481b3e221792289864c2d02a
SHA1 d8ba5c1615a4a8ed8ee93c5c8e2ea0fb490a0994
SHA256 47cb84d180c1d6ba7578c379bdc396102043b31233544e25a5a6f738bb425ac9
SHA512 66518ee1b6c0df613074e500a393e973844529ca81437c4bafe6bf111cba4d697af4fe36b8d1b2aa9b25f3eb93cd76df63abfc3269ac7e9f87c5f28a3764008e

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\nt6a1ZR520utsLoZmSYgwxdOPgI[1].js

MD5 0c2672dc05a52fbfb8e3bc70271619c2
SHA1 9ede9ad59479db4badb0ba19992620c3174e3e02
SHA256 54722cf65ab74a85441a039480691610df079e6dd3316c452667efe4a94ffd39
SHA512 dd2b3e4438a9deaa6b306cbc0a50a035d9fe19c6180bc49d2a9d8cdbb2e25d9c6c8c5265c640ac362dc353169727f8c26503e11a8a061a2517a303f61d0ccd3c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\9xGNA8UskvA9WHF58zbLOHZ5HvI.br[1].js

MD5 d6741608ba48e400a406aca7f3464765
SHA1 8961ca85ad82bb701436ffc64642833cfbaff303
SHA256 b1db1d8c0e5316d2c8a14e778b7220ac75adae5333a6d58ba7fd07f4e6eaa83c
SHA512 e85360dbbb0881792b86dcaf56789434152ed69e00a99202b880f19d551b8c78eeff38a5836024f5d61dbc36818a39a921957f13fbf592baafd06acb1aed244b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\8CgcSSLayxEVUBf0swP_bQGMId8.br[1].js

MD5 a5363c37b617d36dfd6d25bfb89ca56b
SHA1 31682afce628850b8cb31faa8e9c4c5ec9ebb957
SHA256 8b4d85985e62c264c03c88b31e68dbabdcc9bd42f40032a43800902261ff373f
SHA512 e70f996b09e9fa94ba32f83b7aa348dc3a912146f21f9f7a7b5deea0f68cf81723ab4fedf1ba12b46aa4591758339f752a4eba11539beb16e0e34ad7ec946763

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\V_fBQ_iVmAgE_Ta_T-6BNXc0ZY4.br[1].js

MD5 f5712e664873fde8ee9044f693cd2db7
SHA1 2a30817f3b99e3be735f4f85bb66dd5edf6a89f4
SHA256 1562669ad323019cda49a6cf3bddece1672282e7275f9d963031b30ea845ffb2
SHA512 ca0eb961e52d37caa75f0f22012c045876a8b1a69db583fe3232ea6a7787a85beabc282f104c9fd236da9a500ba15fdf7bd83c1639bfd73ef8eb6a910b75290d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\n21aGRCN5EKHB3qObygw029dyNU.br[1].js

MD5 cb027ba6eb6dd3f033c02183b9423995
SHA1 368e7121931587d29d988e1b8cb0fda785e5d18b
SHA256 04a007926a68bb33e36202eb27f53882af7fd009c1ec3ad7177fba380a5fb96f
SHA512 6a575205c83b1fc3bfac164828fbdb3a25ead355a6071b7d443c0f8ab5796fe2601c48946c2e4c9915e08ad14106b4a01d2fcd534d50ea51c4bc88879d8bec8d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\5L3iD467J3iJWEPwIjxlK0MMDpY.br[1].js

MD5 2ef3074238b080b648e9a10429d67405
SHA1 15d57873ff98195c57e34fc778accc41c21172e7
SHA256 e90558eb19208ad73f0de1cd9839d0317594bf23da0514f51272bf27183f01da
SHA512 c1d7074a0ebf5968b468f98fc4c0c7829999e402dd91c617e679eeb46c873dc04096cbf9277e115fc42c97516a6c11a9f16afa571e00f0d826beb463e2d1f7b0

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\Gyuq2bqitqDJM0BeAkbKXGlQXNw.br[1].js

MD5 a969230a51dba5ab5adf5877bcc28cfa
SHA1 7c4cdc6b86ca3b8a51ba585594ea1ab7b78b8265
SHA256 8e572950cbda0558f7b9563ce4f5017e06bc9c262cf487e33927a948f8d78f7f
SHA512 f45b08818a54c5fd54712c28eb2ac3417eea971c653049108e8809d078f6dd0560c873ceb09c8816ecd08112a007c13d850e2791f62c01d68518b3c3d0accceb

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\zXHaGKCOTtmQ_Ueik3R6GTcUz-8.br[1].js

MD5 fe1f9add646fe3c4eb695f76b6eccdfc
SHA1 caf4f7fd1142398e9a9386bce595afb66fd41c77
SHA256 2d790381800ec6ddb18f82658ff2515866a1e3e470b926d46dd8b46ffffa7403
SHA512 1f621757daa2864d4d258c6a69a60490df224ef5dd86a230f8d410e50ac1423a9e0dcb44225c17be2dd14826c54e545626b991cc7741055ba96d1d95d638a24f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\lLk8XmbdNzzlnPRzVzDhaF9yjqw.br[1].js

MD5 3ff8eecb7a6996c1056bbe9d4dde50b4
SHA1 fdc4d52301d187042d0a2f136ceef2c005dcbb8b
SHA256 01b479f35b53d8078baca650bdd8b926638d8daaa6eb4a9059e232dbd984f163
SHA512 49e68aa570729cc96ed0fd2f5f406d84869772df67958272625cba9d521ca508955567e12573d7c73d7e7727260d746b535c2ce6a3ace4952edf8fd85f3db0dd

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\K_V1CARn2Q2lTs5njJKUvUkHyi4.br[1].js

MD5 6c2c6db3832d53062d303cdff5e2bd30
SHA1 b7a064a64ceae5c9009ef7d6d8f63b90d3933c9d
SHA256 06b77ee16a2cd34acd210b4f2b6e423762ea8874bb26ae5a37db9dd01a00ff70
SHA512 bc2d115b53035b700d727af9d7efaf32dd2a39a2344f3f5fa1a82586be849ec7803e8320661e66ab7dd2a17e64b7897e95bbd84502b91997fa46eba4e67e8c7d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\3US3nNU_RgsSNFm9Bzw6xgeuOHk.br[1].js

MD5 d42baf2a964c88aaa1bb892e1b26d09c
SHA1 8ac849ca0c84500a824fcfd688b6f965b8accc4c
SHA256 e3a15dab8cc5adbd2cfa1a162bf06583da6fb7be3831323d819cd881bfb0672c
SHA512 634bb1c984c9d74876051937240295a5ed5dc6404379decafbc4df074aefda5246ec33be84d2b21e0099c7bdd406e9cae6ebdf0ff01ddec3806b89dc50810c12

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\IPjqENt_x1c56fZCsFxov2V2J84.br[1].js

MD5 9a4dafa34f902b78a300ccc2ab2aebf2
SHA1 5ed0d7565b595330bae9463ab5b9e2cdbfdb03c4
SHA256 ba98a6ebc3a03098ca54973213e26f0bf9d1e7e335cdfc262346fb491c3cad69
SHA512 1a8b4fce1c0e585bfcf8f11e0192fb04a80dbde7035a9c8fc426cd6383d6902bd77222331372ea33aa50d92b7cc7965656b11f480085af70267b3fd8355ebfd4

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\1rUTIFRcUHTZUBaDs_0q8KvUlR0.br[1].js

MD5 c63e610f6bfb2687ee044cee7d3e16c7
SHA1 b78022432ac754cc41335341a8e07f2676bad789
SHA256 c150d5e192ece8d69ba8029d87ecbc66674013b8418264cc86f0abcb0da0a38b
SHA512 11029009d8d0885d16a4b546816cc0f22f51ffd035fdd87d58eaf432017947460a1a78a543c0eb3875af49342a240ea606aced23654bc190ba6a4b7101e13a3a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\K3hC1_cQXGFr6cxRJVWYpzZJaAM.br[1].js

MD5 02b0b245d09dc56bbe4f1a9f1425ac35
SHA1 868259c7dc5175a9cc1e2ec835f3d9b4bd3f5673
SHA256 62991181637343332d7b105a605ab69d70d1256092355cfc4359bee7bdbfb9c6
SHA512 cbb43000a142807ff1bb3bfac715cef1240233117c728f357c824ce65b06be493df2306c7b03598817f09b02e9e36ec52314f88467679c5bef3ee1504a10c7e6

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\S5CfiPe20KYzgk41QYV0hHSpAqU.br[1].js

MD5 40db00a163efae868a27e4b2a8874649
SHA1 8dfeb6afd53a1bf0ae27fdf68823c955ecaa7303
SHA256 eb68799ccdc7acecb25e2b678a5e43975f0a8233dc6ec646e84d68bc2a7b4551
SHA512 39b54ce7b090567ea4e2e96d5d64addb4ef9071832766a396822bac74df887e0f4e370d0664b123e33f5ee5e10ad8587511f094698c3af9a64ac272bab53d8a6

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\910ptS3pcIDQ7a5acMaHuQliuN0.br[1].js

MD5 8898a2f705976d9be01f35a493f9a98f
SHA1 bc69bec33a98575d55fefae8883c8bb636061007
SHA256 5f30270aa2dc8a094d790e1e4a62b17c7d76a20b449d9b69af797a55fada9108
SHA512 c8575df93fbd1f65a285d484257adfe12733e47a6524a18d5910d33562eefd1d9da7197d16c7a3cad3bc5ad89546ff0fefe90e5c96e7850ecec9708c90334349

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\NfTD8Ovh04Y_Ni14YxqYB8R_2_Q.br[1].js

MD5 f1cf1909716ce3da53172898bb780024
SHA1 d8d34904e511b1c9aae1565ba10ccd045c940333
SHA256 9abac0cbfa6f89106b66cd4f698ead5ccbf615ecf8cd7e9e88567a7c33cfec01
SHA512 8b641e93405565b4a57c051edefc8e02d6c929ddd4c52f9bfbd19c57896aa40426bf5ed6760dbd479719561c4f0a25bfc4102f0f49d3d308035c9ca90b1d0fce

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\CcMXS8Oo0OUnUE0LzYK9AFJ6la8.br[1].js

MD5 0c0ad3fd8c0f48386b239455d60f772e
SHA1 f76ec2cf6388dd2f61adb5dab8301f20451846fa
SHA256 db6dde4aef63304df67b89f427019d29632345d8b3b5fe1b55980f5d78d6e1e7
SHA512 e45a51ef2f0021f168a70ac49bdcc7f4fb7b91ff0ddd931f8ecbd70f6494c56285b2d9bc1170804801ce178244ccf361745b677b04c388b608d1471e0695ebeb

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\eKvcHdnNwo1WcxoSioV4ztnfZk8.br[1].js

MD5 fb797698ef041dd693aee90fb9c13c7e
SHA1 394194f8dd058927314d41e065961b476084f724
SHA256 795e9290718eb62a1fb00646dc738f6a6b715b1171dd54a3d2defa013a74f3da
SHA512 e03c4ab727567be95b349b971e29cffb3890cfb1a1ddf997b34b9d69154294a00a5112f4ffca4df4e26bbf96afa75e5943e965edc8f8e21035ed2ef30b7688d8

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\uiannz55FdT0j3p9jGwegfI5aIY.br[1].js

MD5 45345f7e8380393ca0c539ae4cfe32bd
SHA1 292d5f4b184b3ff7178489c01249f37f5ca395a7
SHA256 3a40a1ff034448d68d92a75ababa09ba5f2b71d130f5f6bdf160dcf8851529a9
SHA512 2bfd00bf303ad5a1e8413b5ee6a162167605511fefb8df61a8f40f80382f5520df690a53b1058365f1d81562b2668376886d0f829517a642fcd87412801fe987

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\ID-70CBAEOXh6Nwxga-CxgpUq4k.br[1].js

MD5 fd88c51edb7fcfe4f8d0aa2763cebe4a
SHA1 18891af14c4c483baa6cb35c985c6debab2d9c8a
SHA256 51f58a23f7723b6cbd51b994cb784fbc2a4ab58442adaeda6c778f648073b699
SHA512 ffe417fa00113273fe7ac1b1bd83c98a3a9dc12d41c77b60c52cc5ffd461d9ca2020c2444ac43771d737c70c58eca40786a5c5762b60f30da523f709684510df

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\ydDuUFvQrnTEDpvE14Ya7abrPGk.br[1].js

MD5 d807dbbb6ee3a78027dc7075e0b593ff
SHA1 27109cd41f6b1f2084c81b5d375ea811e51ac567
SHA256 0acdce370092c141b0c6617ed6e2163f04bb9b93d3213b62c2bc7a46fe0243c7
SHA512 e037dfc31d595b459660fe7d938eedb4f43d208d247174ee8d6fd0d125f211142cd73497e4601893cecb6f565b7e2e7815ce416d72bb95504d3f277e4e806d11

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\tPLNa5UcMaQEzzg0acZfPM45N6I.gz[1].css

MD5 9baa6773c6549250a3393e62c56eb395
SHA1 5bb4eead8609cd30b9b96b23ec4fd0082ae64c1d
SHA256 dadf403df8cfe888e59e6a051aee3783a2bf0bcc60dc1d09a7797daaee726ca2
SHA512 cf12319cf07897864828d9c950df4a98a0628d828a7fee75f1235fc5d3a57c90a40b5ded2743af2e62b1d13d3f6be0d302ada054e7c0d7164b8ba12054909b8d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\VbSztIaSY8XAi9dm3h6m51N3zH8.gz[1].css

MD5 f8a63d56887d438392803b9f90b4c119
SHA1 993bd8b5eb0db6170ea2b61b39f89fad9bfeb5b5
SHA256 ef156b16fdcf73f670e7d402d4e7980f6558609a39195729f7a144f2d7329bf3
SHA512 26770bb2ac11b8b0aef15a4027af60a9c337fe2c69d79fddaa41acfd13cac70096509b43dc733324932246c93475a701fd76a16675c8645e0ec91bd38d81c69d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\_ykiGO1K5rjAQeICdJheT3jfLeY.gz[1].css

MD5 7a903a859615d137e561051c006435c2
SHA1 7c2cbeb8b0e83e80954b14360b4c6e425550bc54
SHA256 281d6234fd292800c2a5dbd14e524c9cee0d4438188b0b7d873abf41515a7666
SHA512 aa47efab7ec689b838d1e5adfe26e035e8b93f2b806f1954214447cb2065fa5906f81a70b4c656b3ce1490d8ac2009c7e7b0f96491d6d4559c41fb25d08fe35c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\g2mFaePdYzQOubI8JEItbebrED8.gz[1].css

MD5 6d94f94bfb17721a8da8b53731eb0601
SHA1 ae540db8d146e17cfc3d09d46b31bd16b3308a6d
SHA256 21829c74fce2c9bbbb3099a7a487de71465ed712410c32bc6c69884db07a90dd
SHA512 bf33fb4858b56f888108bcd5c2691613b68715e260e59c1e37a050a709be04a8e0eaf5509667183a0d51f1201e58c02df4f744a0772242ee5b61595c44c072e7

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\43BJuM7qM_8Wd1WfIZM2_oK9zrw.gz[1].js

MD5 b743465bb18a1be636f4cbbbbd2c8080
SHA1 7327bb36105925bd51b62f0297afd0f579a0203d
SHA256 fee47f1645bc40fbc0f98e05e8a53c4211f8081629ffda2f785107c1f3f05235
SHA512 5592def225e34995f2f4e781f02cc2b489c66a7698d2feff9ac9a71f09e5284b6bbdb065e1df9c06adfb1f467d5627fbd06e647abf4e6ab70cf34501232126ad

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\fA2nfv9M_xDQoHURetRHYBL3o74.gz[1].js

MD5 93eb1d78eab89dde23f00b1f2d3a49d0
SHA1 2c2d624cb2f0df14a4b03888007ca646d2d5da90
SHA256 ae0ed2da3076dae103ebd8b58e3441c15395421a1e8985e11a93383d4bb818ee
SHA512 4b193c735cfb55ee4a57b7d77a857397a288a6be01e92a99c43de0435610401286f2cbab5f77e88f93978f86129dffc71c5bfe3a0b72ac2786f83beadbc89459

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\2IeqNnpxuobNf8w1fP2Oy2HEFfk.gz[1].js

MD5 22bbef96386de58676450eea893229ba
SHA1 dd79dcd726dc1f674bfdd6cca1774b41894ee834
SHA256 a27ce87030a23782d13d27cb296137bb2c79cdfee2fd225778da7362865eb214
SHA512 587d5b5e46b235cdcdf41e1f9258c1733baee40b8a22a18602a5c88cba1a14edf1f6596c0ab3c09f09b58f40709ac8cf7e1bb33b57293aa88eaf62d0ab13fbf4

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\84Y3K3A2\favicon[1].ico

MD5 da597791be3b6e732f0bc8b20e38ee62
SHA1 1125c45d285c360542027d7554a5c442288974de
SHA256 5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07
SHA512 d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\D6FF5F73C93552B677E3662F8A94E112

MD5 75b3090045e305e7db4ab0418f1730b0
SHA1 215780feccaa1be2dbf50322c41fda1757b3a464
SHA256 03c7d4e28436276ee3daf8b6fa7ac48f7b2fde209275f3f3453e4e186b096b61
SHA512 0b1d4366c84992206893768dd4dad1143f9f23788bd4bb8048218a45dbe86faca9fd36886d97417879d6fdd652638473f31715abd1bc337e3bafe52fdb05be5a

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\D6FF5F73C93552B677E3662F8A94E112

MD5 0271e8bb2a25f3c32df23c8b660d5e9a
SHA1 99d5319b009780dea22ec20741177094e975eaf5
SHA256 c78974bac03a7de2f678fd261c12bd6c2474eb7355d10f8f7fc56457a765289f
SHA512 856675155737cc3dd8e25e2f71a7b235b8f234f68165dc92dcc6c3dc8014f769f4d06098e52909d82be1eaf04358f72f7be19da50d5dfea1d6fe9f89f0e0138f

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

MD5 822467b728b7a66b081c91795373789a
SHA1 d8f2f02e1eef62485a9feffd59ce837511749865
SHA256 af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9
SHA512 bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

MD5 c57e90ed8a9def176365b0a6b963367f
SHA1 101b655891fa722fc9ccfb702231fc7f3ffeb1b0
SHA256 ceb444b5e5742de190d3b77dddcec7951d00325b03eab63be28492f3533ad300
SHA512 1dbb01a67433bf4f3cf8f7dbf39647c822af353457787941be5081e955c2c17f6d00f807b62e1c83372b2a3e8140696d607da231086e6b3557b4a749665020cb

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\windows-antivirus[1].htm

MD5 b58d1e0f8ca0cf2dd449268832fbd2d4
SHA1 aa52706e2e60c44ca305b8c052463444d1d296ee
SHA256 132b3ae685d93ac7872de1bb482ddad99f00f4a6297d176d407f3901644b1116
SHA512 9f4039302081629c7ef388215c8e2e99259fbc2dda523cb911d00bd8ee6981e4a0dd038b9d7ca5afdb311d180ebd28393b39285bbac030e9478f44374b4ec760

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\all.min[1].css

MD5 41baa247bcb3c3cb66053430d1641cb9
SHA1 bd2008f5749703583d69eb26aa801b7ebfb7a1a1
SHA256 87529c47f12cff33961a2573dc4ff11994671465382df39ceaa9096eb7f0d158
SHA512 d7992a9c54bdd00a46390d361e9834f355eecf8a3c2704c83a6ca6f4453b5559bdf99e31e67cf3b6279698230c857d231127d72bffcc2fe080db32b0a0259ecc

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\main.min[1].css

MD5 f950776487e12948d2d0e859af320c8d
SHA1 23f2821edaffc9095e334e5cf14d0f8f516f2a29
SHA256 89aad9b54353b7c2f5b55904be8b20af5de442e786aaf5e32e037ea03f0c5a7b
SHA512 8465dff3f8313b696fb5693c4f2574e8745e7b7f3845e61b4f269e59c7759d9554806a30b09c256a47eb281fee49cf527e765f4120cf7c8a3dc92caacc388ff3

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\css2[1].css

MD5 eb6605647feb3c5f81ca95fcafbaaa22
SHA1 71aa04c7466bca21ecaeadfb7f7aa11ff2d16f71
SHA256 2829a413d0fc949c381b18308981256f6ab232a6eab7c59fb52d1922eadb45f2
SHA512 407fa51d65f7bacd091031e6969121de1c1b1a87d82c1b4893f80f7bb54187ab82ad9904d52e85cc73349818527d11b640f471e10bfd6791439cf48ddd456909

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\js[1].js

MD5 cff06d24e27cd94f62ac9715a8a71863
SHA1 84073e4b9b668268741c5b8454a681b8f1d423ca
SHA256 63ea5f470259fd39320ff106c54880acaf9d20438729661ccc00ae65f1f54346
SHA512 b17bfe05ac26e6de8892911dcb898df99ede840267451657137e9ad4e9c11ed8a7dbec96213efbffb970ff3014572111d88f6eb9842612a8f93237b6bf7bdc91

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\trusted-antivirus-logo[1].png

MD5 0fce772ce7b2c2dd82e95b83cb5281f2
SHA1 5307578ee4ff22d7fbf20ee48b9f09774b3e088b
SHA256 d40aa9977c25d9e3f61a6a0ee25a1f8bb96d646c7a0ad4f0bd19096699ba8f4c
SHA512 7008bc6f184d1898925b81d2562616b43e533b88bb53dda0332566a5693293273b94565945a9c9aaa91fba5d1a3b571cfa574d841c60c3dec08c9a49a1183f81

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\total-av-antivirus[1].png

MD5 aab79b62117dab4eec599df52165fe86
SHA1 f1e0d78a4ecd4e6700bf0f064cf117bd3b407ed2
SHA256 74e0b37ec68eead45899d45f6aa83b22e3a1cc31006773932e1ad4b63d419c78
SHA512 3da2445a848feaf0be68f5b23e354d1ea159652f868bf3e37442cb6d258c1603af89c94423967d4cda4f466d5459894ba3c1ed17049f69140f7bf70a2cb4a642

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\totalav-logo-mobile[1].png

MD5 923e6f9641f8cc07cf9d13ad5282afe4
SHA1 fedf50cc7f3fba4cdff7d0f0322a37b626be81f0
SHA256 8434a9c04c13b1d210a9c5c25ab8151828f0bc480e04fdfb9d5529e35664f59b
SHA512 60381106b94126012d29528e09590ee884df10d3405a0592680d8aca61062908d5ef66f8420fd0eb3262cd7ba3f65beb8206e3836cc9a260623aa7e9d70d4b56

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\totalav-antivirus-2024[1].png

MD5 4f24184256c7b0f5bac099faff916cfc
SHA1 9700f0d8bc64c4c33a97b39152cda1f4578b64cd
SHA256 43cce9526bf9c739bc0dc4b96e8811f16310e709151afa97d8a418f62dd9f754
SHA512 85641dadfbcc8e93485989826482374471ee7138fcbfe50ee6ba831c05f3d2027ba5de760c3e44c6bf647fd8cc90c2e0464564aa4bc1b13e048d6155f1dcbb67

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkaVI[1].woff2

MD5 d4e5cf548d6dedbed35fa9fd65b37ef0
SHA1 8dd0032d263b5b53d94d28ec2bf57f447003b78c
SHA256 e4dc9aa04d9819fc4345ac9544831278f3ffd8ff4af8401199a8c8d7412cc353
SHA512 6fefd05c7605afa14da4490f8824d15950f5bc7f254a91d09b4437d1a10699ccc9f04e519f61f34e6485b345e43f05042ae8ebb4ad8b2d3c63b084c3f8e0382a

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\vb100[1].png

MD5 0b7a2c50b733411da8c5d3d68366d12b
SHA1 70b62f697246bfa81f9a8b01d0298ea67c1d09c6
SHA256 7ebec0926489324b2975cf201d9a4c4097b031f2f7970828d506478a6665d99f
SHA512 b514b549957ceca41beca50ba5f8fa52c09a09539e19de0ef6de59df4c19ad30bb5a3715409e9a2d7b3008e633154948ff48ee6d755fe49d976b703dad0d9162

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0RkxhjaVI[1].woff2

MD5 0b446876c607d0feb845428ea1fcc03d
SHA1 336250a2c154c28ee20aacdd9fd97bf6e1f06e51
SHA256 94e8ca0e6eee74ff87df4271ff3a804414f0b44d5377f4eccd48d68f17cef36c
SHA512 781bfbfe775ea9f5d28d05409cadc8a809397297ffa18bc6bd55e7c366a7a85d2b0bb838408f9a8e81406fa62e182a06cba33dea442d8486264958593a60728e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\avtest-top[1].png

MD5 26b4deb9072e6c70160e602a94d21865
SHA1 9d3b4d50287adc224464490bc37531db13e946bd
SHA256 65e4f51995c60f31824fc09dbe5d48e387d298a3abbab55c689075ffad8ef32b
SHA512 f6392eae1e8a9f855c6a0fc11d9bec2c9d2593961bcf05dd65ba2263234f75f91b1910c2d72ec9484338422421520f64f158de0bbd1bd0d7d3276860bba9ac59

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0RkyFjaVI[1].woff2

MD5 e6888e94f2367285f7776ed161bdb8ce
SHA1 8998bc474e7df5fc9eb9c4474b8e3883003caf98
SHA256 ab6514c3f0ca678239df01466c3aa34e38f006e3cda016a408cfff09cc71c507
SHA512 4d039355a51ab5232e96996be84522278371c2f8fe95f5d637a6082fb5a5a7c237fdd8431c6b074459d9b196663e91e449ae2689e373431d6db1480cffa27290

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\avcomparatives[1].png

MD5 51f66db390eed194ef2326582b6017f2
SHA1 9ecb5ba6631f9fa0972fffcd1846ed7bdd39c1f5
SHA256 3b0e906059914ad59ae0a51a73b3cd4b5b60ba52ffb794f3fb33a9e5a2999801
SHA512 3544fffc8c8f0ab936e09a43942a57ae4e7ccdeca4da93d2754710db7f43c1f005164ad3806d8f0507fa6faed850a83f2cc49f59033c00a69f8fff48cd767cb4

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0C4i[1].woff2

MD5 c07cd0d1a063582245c8193d978f799b
SHA1 ada34113ebfa1110648bd003e1c3cbd9b134276d
SHA256 616b98706b02b2744e0f51dfbe070c56bfc6e73e0963b0200e9908f856a6e3de
SHA512 8bb7e4a9b11b4bc9c54043f21b9e3a8a6c8037d90147060dd89d62bbb4fefe09e6d6f58ca66f81a60b26ce24b77f7dc834b76d3be4c3932455a9d6f64680c196

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\scanguard[1].png

MD5 b6ca350f226a671bd8d3edfa1801ee4e
SHA1 7b2d68c3a5be90eedaf2492de502e4adbac1ff74
SHA256 5439988791e0b5ba97fbe31e14ad5d4c64afbdd5c42a876b82740842819c633a
SHA512 d339142e6d937e9d8c6fdb544d0678414e056bede46a1aff582b757e7b070613535fde8bbfd51f92407f87d179d4fd72289c618b2d9c58160611df74149cff1e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1y4i[1].woff2

MD5 b94f001b27f8c83057b118dff8d859cc
SHA1 50cc5b23d0e525c1a4a43374cf86bc00a0c3244c
SHA256 32028782d9f727a340735d527ab309e35a1329627bd0f4513e7ed4e451a88359
SHA512 6564cc9b7ab62aba8847f988c26fded82cab3cae26b83d6c8754e1370214193351b394f4a1ea5a2a64c5d71f2ba81c697c85f23d0066b1d0ea24f3f7faea007a

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\scanguard-antivirus[1].png

MD5 d6eea19c710f7f67626ae3eb1d7a72ff
SHA1 b8fc418944b04a79db5f8f2afc855e5d083d978c
SHA256 62a60a83bfe82e9cd22e625221e9bcfa6ba506108c11abb4f4f5201ba9efa74e
SHA512 6cee36f95858a3ae7c7631fe1f7f009e6f318e33b38d38aadfcd73d65351a8f68633ef40f1ed083700b5c9c78f14e143aea0c30e50684acc496f25450835aaf4

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\pcprotect-antivirus[1].png

MD5 ed4cb0e8375f692ebaef595b808e29fa
SHA1 5ec42a2360b41a6c94a7ade73102de552d406814
SHA256 88b3e938d251cd31264fbd894db21ab4f5aa873628f267ecd8aa7aa6e4fafb58
SHA512 c5fa2f2f29cf81824ef7b54721ae0f88aea073c8985085db7eea2bdf88ef1169ae622a834cc11184db7ab2d59e0446e3d0810c5b99bf831eb84c64b1571f2eb3

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\pc-protect[1].png

MD5 7827f526a43085d2cfe8ecf9a99d2d01
SHA1 23c221cc29637ebd88b1c553c592e7b32254cafb
SHA256 5de5c3588bf66ef9b12cf37c24a1237d50dcab14cfd096da23681b5e12bc6d5f
SHA512 fd18e7ff82881a0ddc46ef1bba529ed9bb382d07cd3084ff040d9e5234adaaad9ba0d5c902656510d45d402a37abebfcfeefb6c16ecf0e4a8de5f2e242fc4b0a

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\bitdefender-logo[1].png

MD5 10aafd299dea151c6e5a60b833fb5273
SHA1 d81428a7a49b3557a65ffe22fa458f950088561f
SHA256 286dcf41b36e79b710cbfed9108b87baaa5555c2f36ac915b0374d0e1e56528a
SHA512 41812c011c619691d6e838e333da90045d00f0f4046b62e4233cbd840958f183277087ff6fa2b3bfb49d482488aff580472bf032475361d0999f6e5303493db7

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\bitdefender-internet-security[1].png

MD5 cfd1601bc271c8e31cdc82497189d091
SHA1 fe80652bd9001517b58b053c650e26e345815e59
SHA256 e601ce546a791bce073f510a9b595b805045bd73daa2c736f757ef0f0cf9afb7
SHA512 49668bc8610266204e89b8e77f01a821932e1e3c6f4af6458026b57cc0769d8f5db7172b9a1abfbb68bbf3d80b6bd021b348c206e60c61b09d70b0a0e5aa773b

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\norton-security.jpg[1].jpg

MD5 eb96b5a5b0dd803dcf532952338833d9
SHA1 472a06f0e224541a113f744ec394553708dbe90f
SHA256 62e9882ee01a32d5e1ffab785227d9ef20afc3d5e18d93e666c97bced98ff131
SHA512 db18fd85e001f4ea61f11a3ca86a03fc02d7f758fefbf8ef1964804437a0aa73d63bdfd3251c85fe9cde717c9162c34f6a6ed5d41062cde9b93c07049fc84fe8

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\mcafee-logo.jpg[1].jpg

MD5 1d5d26ea8147383a0bd020ca3937f867
SHA1 7298f0c5af2f1c4933e83c3ad5b29082e4dbb77b
SHA256 72c357afc636799128081c5e912a528b42505afe5e650b2cafca8ded0574d6a0
SHA512 1c484fea43f1badbe40c8dedf74e97c388e99086b6d226715a11d116cc131fd4c201f4a614d8fa3f8d0b10f416ee15bba3a10109437174e9b6e10aa006dc3eb1

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\avast[1].png

MD5 9a21ebb088381d890079ee168c9ad0c9
SHA1 ca5b45a8737dd5afe9d6bfc0592a83f0af1db578
SHA256 69ed7d23211af1e799c99e4ab14a533338456a27d1256a7ef0ba762300bb6b18
SHA512 6e0cd04ab5db4d83039a6aa8afe7554641703ac2bedcaa10ad6f4d6737f6065724a23d7c62201daac34d0460794adcb220df87c9b9d4640b698e7565c0dde944

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1y4i[1].woff2

MD5 d03f336b3845249375499d014fa49b55
SHA1 ed53cd9309f75b3ec4848366fe3f723b257cee02
SHA256 73eaa9830823855f156cd4e0b27e7096f7e623ba026bb5366640fb0540cdd081
SHA512 9afed4ed45b7efa1c62d2e5015cd177934a682b1bfb4b9793b479f076c6e299f70770ba65f138b2046d5356625fcff8dfb5ab2a786df824204192720cc46dee4

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\aura[1].png

MD5 9021f89d24feb90b7d16372922d8f603
SHA1 20b83b991892b9dfee3e5fec890c4242b624edff
SHA256 e82522cc99b4b82d813dd8fdc8fe2959bab18424809f9cac1c6f41ae28ce997c
SHA512 0758afbfd2c1a096d2e5bc3fa72a7e6cf991a0d5a389826596f6a2fd6780898e65e88cb6db67fb878ab1850512631a4b2a8cd7edc7ee9d7804e34bff7bab3862

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\icons.min[1].svg

MD5 c11df20a6f721d77f5f39cc1927f70ec
SHA1 e8cf6e486d0f6f8e02f4aa75171d89ed915f9836
SHA256 17b0272267c124c68a66dffeda9ae8786117e25d71a5a4deaf353bd746f74c34
SHA512 b9b74d95a3bccf472d3ffede792d45ebc67a8e7afa69bb635227da36f63aeafffa15d86b2557b20a280838bf65ec845836c64ef0e623417ff879d8ebc7745333

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\BHJI9OEC\favicon[1].ico

MD5 8b068047003516b823b488f3bc6f2c42
SHA1 c725126b0e26a3fd094df9e7a4a66322f68727e9
SHA256 f936d81360620ae8a75e2fc1aadcdf91642a2e9ab595af534d018e806eac4800
SHA512 2ec6fdf91431e9b632379a45b2192bd0ffdbd3d9e5d7585c765f0a68d6b4b19f810acf5908276a42ae1fb8c10ce83a79dfacfd95d69a53e109d83272cb61a13e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\bullguard[1].png

MD5 7f41dd36a2a1782ac90344b4a213fe51
SHA1 5ad5c1ace77333b75dda42e645bee7237a938b78
SHA256 84f6490fc66a9ec9170bc909ff80279ee1d5ddd64d92b538dd874bfffe385e0b
SHA512 b7dd62735659a274de5df07098e8a5e113c0ec124d5fa5d5b226aebcf8a4bff74ec7b9a83ff5bf7c5456dc5023446986739092ae3cbbf60480fdf2ae1f51d58b

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\kaspersky-internet-security[1].png

MD5 da509a20bfb1082793e70d7d9d2a745e
SHA1 e731f073ec34f68c024350b4788764bf3ea90eb1
SHA256 61518880964777d5b7822efddb1c12d734147ce0fa5bcfd163f008027ede2de4
SHA512 479a4ddfade335a045f3e14be1a4e52c995d542018c3d6038da08d4ccdd386ee6af5cbb433c12bca5e1aaf7f0557e33723e9b4425c746d3cca8f5b46eecb870f

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\avg-avg-review[1].png

MD5 ec2b213071b3a0293d9aba348e577b43
SHA1 8d16c00933c00b454a60ef6fa2df4b4c5bbe6977
SHA256 f1314d0d2af2ce36dde450e87c988ec95851dc0d6b32e75fa389b3811ded1cec
SHA512 6fc4e05e9242b3db6bf9b506c776a6a7f72d94a8475f7b524a4d0d4ed052e6008e0dd3322e19b1e6e10818b66a14cb6d781ad2558d16108ff17e61518584f470

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\main.min[1].js

MD5 25283174dc81227cb2fb12c01cf9bd91
SHA1 60e52a94f3e6e7d95b9caee5458aef83b65b6389
SHA256 b05cdf2b8db251f1c788f6c2a19b9d4377784b2258d8577d32ad07df1beb5d40
SHA512 8f7d9bc02197f54917cd896d7edfe7e1cc4850c50a4f2ef4b00f5ad580d754134978cee072d166c398ff55d885912a34c88822f61c48ae2ddb64878fd924c740

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\zone-alarm[1].png

MD5 2290ac5d9e137a213c54db52ab6c9ade
SHA1 e3ed31310842d791f5090cd5e5e046f4fe07c264
SHA256 51945baf913a4adc673fcef4f3f430c79ff9ad086aa032d3199e2f22eda24145
SHA512 840185135016bc84df142769d79b1e86d5e4fb0c3e4fd73ee61fd0f610f6dfbfdb0ae9dc19089f136a5635c7a88f3ae29458489b6b07ffc32f66b9fea453ac6e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\screenshot-2022-01-21-at-9.53.58-am[1].png

MD5 12b8d7dacfec576d980afd7a16c3e448
SHA1 2711659700f428fc653d7e49ac9efef912cb10d0
SHA256 582432bf2f090d7705374f9e02c680534ab26ff10171f03042a2f82c3cf86f88
SHA512 ab384331d55d7269f439872a07c0a3eed3875be734168a5f907aa1faa3cc87c59336a5e83b880dc3eda2f8798ddd3ddfe7a393d29d488a70d5a30dae8f74951c

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\f-secure[1].png

MD5 c632a715fa82c752c3b3741cd418fbfc
SHA1 91d69677d571b22eb90c5ceea70e07e8eb595d4f
SHA256 d335d07c8fdc610b7c4d046b84d8e7994a3dadd96d772c7a2293f80764c739ca
SHA512 afc40574803493b12854d4e18672d79b9e4be66cbb358e27323886efee086adbdd2594dfef481c5d6977db18555d05f07e9402c732ca8f3760413891c192b8b0

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\trend-micro[1].png

MD5 d2692265dff3be1076a989031bde32b5
SHA1 9a0460be4877d226d2f00e7a64a199a134fc2c26
SHA256 12957ad7752e827b8d9ee606c390a23739113468df3eef9a3197582a520fd22f
SHA512 f637b030af904d2f12dfa811ccca997612b099e57ecd006f12e30b62c1cc84dc5d90bde5bbbe6a6d1316fcde75f19426d649dfae41d604db3ffaee8da55fd47d

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\panda-security[1].png

MD5 e4fcd7d45ae4b55e9ecd7dacac9881d9
SHA1 fba9fc2ba79c116066aeea3704409b7044583697
SHA256 12ef5fc74c65e49d6bc0a9bbe4bf8d98742d1c618608637d6065493a3d4d53fc
SHA512 aeaf0e68eace69295777dbdd1fc1dad7a1d2a027e7ef811ad3fd5ed728df21cdcc8fa30acbc018c267936db3fb630eb0cc2719b627875682c01a9292d0004400

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\eset-eset[1].png

MD5 d0cc39857d01aaa72e1e7a99cf880132
SHA1 7e0784372c6a74704e8418a9aefc8a39efcbe225
SHA256 de733c985b4fda43b717931f2125752026c9963b1065ab2393aae6bb76ceb870
SHA512 e1783be05ee1b4b417c275fe0efeb74f82f4c20ac073a7517f5e9a59db098961b98291b6a8a74686c27e7202d1a662b70cbf2d7a4a7a7e2a578f30edacfe01d0

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\malwarebytes[1].png

MD5 f9860b78e24e68f923b6a2a7e177fe5b
SHA1 196e81e9f63af3363c890364fd3e04109c59ff24
SHA256 befdbf5b78e838825944cefd4c1d007aac98114d9cff1f03e04603030be2293b
SHA512 dbb657876558a4a69d61c5a0ac4f694506198e368521c6bee85846c7395dcca5db8060a9f4023d6f41842cdd490d8584a5b04efe941c47dfd3128a1528966ae1

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\aura-antivirus.jpg[1].jpg

MD5 797ea744d28d7cf32e5acca452a95743
SHA1 866bd11f7767ae64acd580d56f93ea2d4d54c601
SHA256 049127fc4fa3e4f696f3066228564cfbcae8b8390da25f184442df3ff068fe9e
SHA512 131f0e2b1f4488a34c5e7fef9f780968f52edb7dbd677239535efa683bdd7c1f7d045608d60d1e9f3a56779f559cca9ed26085649c888ac74915e26310eedc51

C:\Users\Admin\AppData\Local\MicrosoftEdge\SharedCacheContainers\MicrosoftEdge_iecompat\IECompatData.xml

MD5 d4fc49dc14f63895d997fa4940f24378
SHA1 3efb1437a7c5e46034147cbbc8db017c69d02c31
SHA256 853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1
SHA512 cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\6DA548C7E5915679F87E910D6581DEF1_C38D8904984D2954143A33BF76CEED45

MD5 feee8f223c74840e11787f07cbd7f47a
SHA1 a55267b302b35d8eb594bbf73c210988e0da091e
SHA256 78c368c171af79f1c52f90799c9d8f96665c3eda1eabbbd8cef84b6af03ecc6a
SHA512 daa1cb393d7af648f54d28ac45d96a34124d2b23a12ea689cc83ca7af10b2a34dfab1ffd586d52f42a4e3e715e020f4d9dffeac7075f0c90a4c5f1ab09c1b1ac

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\6DA548C7E5915679F87E910D6581DEF1_C38D8904984D2954143A33BF76CEED45

MD5 eb693c4bae4927778f4f38378b16d245
SHA1 834959095f6cdaf8340d654ac400ab5745af7668
SHA256 be0cbe33240bf9876daf3cc52b4e8d4a78668b4c30a89f2e9c763aaac6dc30ad
SHA512 6abca0ed0ac9a6345ad3b9623c83b4c3517766d3d99d46df7ce79dc4692103ad19c88d9a62eca83b6ccbca5af80110e2eb47de67672f4aa84d2137d03f3c2144

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

MD5 8d1040b12a663ca4ec7277cfc1ce44f0
SHA1 b27fd6bbde79ebdaee158211a71493e21838756b
SHA256 3086094d4198a5bbd12938b0d2d5f696c4dfc77e1eae820added346a59aa8727
SHA512 610c72970856ef7a316152253f7025ac11635078f1aea7b84641715813792374d2447b1002f1967d62b24073ee291b3e4f3da777b71216a30488a5d7b6103ac1

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

MD5 ed05755e42b5d94c6904b7b09aca0c63
SHA1 06488023a99c7acb6e7895c97e67f41832f480bb
SHA256 8e7b9d664f9fd94fbc355103102aa40ee0d6c44a985c47b1d0d77dab396a40af
SHA512 daaf921dcf35597c793e334bc50ba19f888d01a0a10e250f3f5f9230cf7968d1bc1ea21677f6ad31bf43a16e5f22045f6f6fbfd5f1d34b9bbfcf1ae8265d4173

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

MD5 65ce3ac28935423cf2e3fd3431c20e18
SHA1 b2f19f8b4fb50ea79ca6b902a3d5cd9ef08b977c
SHA256 1a1e9ee03aa4b1a4bb9f4aae776725ada6c2cbc4dadbcbb4b01eb5fbcf67051f
SHA512 c014e95778fcfee929715c6bb2941bffba253c2e823f5a8b674259628e0af3b56e21a9fb6734c62d37c85761857a7aba2ec0c654ac5fb1fb799a475a3a732aa8

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

MD5 eb662c2df0bfaba96ce6fd8f5f39fa10
SHA1 914a8389e3042ada94c356e214dcd18e9b8edf85
SHA256 e26a4d1fc02576374728d79585f7e8744f5f94305331d0dc4cff99439ae8312a
SHA512 fc7ab9b20bc06000eebbaed34b6c35ba8502184ad138baca78b5097f74b68c6d3088c3add747ca6591114f49cf5eb96c14839b87342abe92ae331be53bb9b5e9

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\4FA45AE1010E09657982D8D28B3BD38E_DDBD94486534E9D7296CF30055005EDC

MD5 79554adfdf33809a53a3af4ab68862d0
SHA1 e4ff6116af84f92a50b28bfd30bfb65227b42f01
SHA256 cca9109df3280be7ab8da1f91e58c1267ffd75fb7dd190e482b156fe1767b9f1
SHA512 a44fb0e3b2177ff43c6d7abbbe9ac0abce0f3d737eaab697662f4b4978be3bf517f7127c983af3e7abf8939b748df3bbb87b4a1f34537a8c7ceebe1c7115f1d5

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\4FA45AE1010E09657982D8D28B3BD38E_DDBD94486534E9D7296CF30055005EDC

MD5 e380df33c6e93ac273b658ac2d572efb
SHA1 4c8d57ccf0c514ced2257276b7cca374e2869a6b
SHA256 318ff615660c63577d3e7c18f83f7050729209b81d6da63525449c8e4793b3d7
SHA512 8a5e453f3f5922f08df56c97695de10da94a1bc0f12677c058634e028a97dc802aa208954ea9c120f1fb67256cacafa27cd04d665861a45d418796d6b69fa308

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\B3513D73A177A2707D910183759B389B_7E5D18460A0A79E32DD63CEFC28D618B

MD5 59666630a25e96bb6536f92cedf3c529
SHA1 f3a859e5e2c011751dd9633d55e8de3996fd4400
SHA256 55afd42a234058ba3c10187bc3c5f639e5a28be8ee950d21742930848164708f
SHA512 12bbf0365289e4c0f6bc18d656cd9eb0bf2ff0c2d6915b0db55a8a32a241cf05578901dcde90a1fa8ffd6a22aa48dfd9c6a0a7d51ab488f482946fabb7c6e240

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\B3513D73A177A2707D910183759B389B_7E5D18460A0A79E32DD63CEFC28D618B

MD5 c3cbe0fb1133a2ace9a93e6802d18f02
SHA1 c6c41e2bd12d80b69adbfea5cc17373f5214ec80
SHA256 8d823ac33f1f97866c695fc3e5825933f507c8d17d88c639f1f0eec35036f4b3
SHA512 48d219155a697c7dd4be1b04a19ecc60ad77e7d843304ee9314e8819de149670a8c1bcdc57489b1d266e846418a3290300a7a6211058be375b0e58314e064c63

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\6yHkeoctgwgMGxeIhCJOH603zvY.br[1].css

MD5 3116a5ec82518e57f535b4a6555a17c0
SHA1 b1541be3ae51d4769e1b7eaea413e609f9a22b9a
SHA256 c857954354946e635d866468d64003d4067471fb56cc41fefb9618c1562f6bc6
SHA512 8a7f7d59d36fa0111ee85b7ce43448505538e60373646acb993543cd6f7e123e01fea2aa55f090001c11259fb1d9b6c6c1eb6b9ec6110eeb4f1f354167bc31ec

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\mOy7YpeLJ3c40BBAFNUI6SmOUTY.br[1].js

MD5 16050baaf39976a33ac9f854d5efdb32
SHA1 94725020efa7d3ee8faed2b7dffc5a4106363b5e
SHA256 039e6b3df1d67341fb8e4a3815f0d1bb3292a2040334ceb9cfc4a8d6abf2fb55
SHA512 cf0d54f0368ffbc6908216fd2573df8f5fe4c34ac08e17301b8734b3fabc674672a7f456707f632f82f44b36812dad8a0cf81a51d5cea21ea7f0e18500298375

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\6mZmj1db42G_jniFgdT7MCvBgyA.br[1].js

MD5 2ab12bf4a9e00a1f96849ebb31e03d48
SHA1 7214619173c4ec069be1ff00dd61092fd2981af0
SHA256 f8b5acf4da28e0617f1c81093192d044bd5a6cc2a2e0c77677f859adcf3430ac
SHA512 7d5aae775be1e482eada1f453bea2c52a62c552fa94949e6a6081f322e679e916b1276bb59ff28cf7c86d21727bcc329ecb03e5d77ca93204e0cd2694faa72bd

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\JigriHckblqcu1XwKpT4wumVS2k.br[1].js

MD5 602cb27ca7ee88bd54c98b10e44cd175
SHA1 485e4620f433c02678be98df706b9880dd26ab74
SHA256 f1c39ee3528b8f6bb887150c10152cd3bbf849c4b305da9be3d4a92614e2f3f8
SHA512 b27a3b7737ce984e6ad448f68b31074f8a98c6ca5d66f3165d1dec650097077da9c80ef3045758c591a1cf0dda74fa4ba8039426d312f50f082d2a0f8e7de21a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\hFmcgfyHxA1QPvYPHu6J-4z4zDQ.br[1].js

MD5 b51a4f449428e1ca737bd8def38da60f
SHA1 6d9d2d579bc3e1a2cb04f38fdfa8a11b4bfc9d4b
SHA256 9d7b2c7890d0241b3ccf643d728bb00542a178ebecb1867664475a2ce90142e7
SHA512 efd37e07ee65380f4772afdddd5d7569691a63323668672cea7e8a9aa10f42b4357e5987cb4a8f4a3859ecf4dbe8746f0b9859f65a1128533bd04814f5683e73

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\yZjAz6-B4hIBhJ6D3nAyY_Ebn44.br[1].js

MD5 2df9793cf020a37c88178be84311427a
SHA1 29cfe86239722d4f4af07c494d676092896a8600
SHA256 a69d257eee41e843881d548d2e4ee5a0727b889ab22bffdaa8ed1074e802bcc6
SHA512 e9a35ec1e466feb3e273fb991a3282ba1c45fd0eacea956e9821914cc4261377684b062bde888ebf5767bbc055db191dc14e00af8037b5607449c06e5d2dd082

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\zlfm-hC70pZAs62UVTTl3KShKOE.br[1].js

MD5 8c8b189422c448709ea6bd43ee898afb
SHA1 a4d6a99231d951f37d951bd8356d9d17664bf447
SHA256 567506d6f20f55859e137fcbd98f9e1a678c0d51192ff186e16fd99d6d301cff
SHA512 6faa73d59082065426769a27081cbedcd22146ef948afdd9a86801f205b2dddc63e03ac5d555ef0af23ef05901ebffe7e8aadd82260ef505cb89d99e572fdf4a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\HqDsKR6xyRoUSYXXRfEdLVt772I.br[1].js

MD5 1db5473c2bffe85c98f9a3f692c6b082
SHA1 d5793dcc912927c670380bdc8d65c4980d8fb478
SHA256 2898df3498ab696d144a60acbad462a4c286a5e615afded2448f55cee482f4ae
SHA512 a80c4873f73f406d6422169fbb078ac3f63a04d1c2b536cbf0faeeb19a1b9ff1ccaac6efe7e8d35ee91b783cd36ad27b202eb1db9b16db318981f6ed56554fb2

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\bZoYCjmU47EB5ZXOFwiUrOEP85Y.br[1].js

MD5 488ba6d86258269d44bf3091941225c4
SHA1 7016d57f1d866f483dd94f6ab1a5e4d153b7e28f
SHA256 3adb4b48650f5475cfd46123bf4c1fb4f60e61211470fca93c330f21c48e847f
SHA512 927b9a30c391efe67b0370270b8a61f56fc8f1f1585037802f3e4be52ddf7ce44becf763c0f0b539537fd72d525a72270157d83e33033e63eecd9406cd92aa6f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\rbBaKhtkLVke-4PIWp9e6AV5_kg.br[1].js

MD5 6a6a1291533f6ba2d08800cde3d936c3
SHA1 634ec182826760b335e20cb5ec466f3728f57775
SHA256 8c038777aa2043d5aa55680abb118cf9a266d7b059f242589a6300f83c4bd179
SHA512 992bf911b3edd7c630018954f94b28950b574c004f82f30332db38d5172dd996e5a63645203dc42665990351aec61086fdfb188248aad1771c2a830bdb882076

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\ux1mL_BeI5W_NEKqkFEN1fLUu0o.br[1].js

MD5 f4973107191f6952dcd8455bf071ad9f
SHA1 c619dc2ecceaab7d512e246c714013dce72906eb
SHA256 2a07727096a3541a10516f6ae12a50c121af5d4834db34ef006c60b41cea9374
SHA512 976c2dd2f07072c3360f3c98cdaffd80704fbf09f069783ccd781f02116afe494ad832e0d586dd16b24aca861f9eda8fb1fa3491cfc1ca0166d0fd9d440a4105

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\9YAQCrq1aCvJQNyORXytYpPYETs.br[1].js

MD5 be2d8a4651ce06cfd994f74999a4e024
SHA1 605b3dbe002f3480683ee7130b8098fb57c18976
SHA256 da463de775286aa611759f49ab574cd1bfddde4e390f32dce49603b087d9d67c
SHA512 0cecb0fcd377b14b8681b58e42f09e2d82af78fd67066675485c91eec0d45f7de670960caafd9471048d2c1c467c234bf27fb48c09164888fa04e84759b5d507

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\hulMy94NWe4P3UsIN3zt_iGS9n8.br[1].js

MD5 472e4c0f78992e66f029d6cfa0061b36
SHA1 c04a9b6151f4113564346bd2d3ddf4b1bcc3c7f8
SHA256 627cbd6266a53e45d4a8cd0dcbb580dc2e07e7f2327d936c103031c2003f187f
SHA512 c02b98dce8cd787f5bce00c590d08dda6761b3eeff0de4cb92127ef42a277160145c6eed66e1b1372ca723c5fe5ae899a13c593b31290ba6b48e6e3def1c3016

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\Q1Z1cF6gZCkTBd0Gx8Q7LjbPAlQ.br[1].js

MD5 7a0dd3b8ac06a6b4a01953955606ed27
SHA1 af6453882542d8bd119a768c025af1c94bf7b3ca
SHA256 f1b3acd8757d2c9db87cb851eebf25909c0355483520475c2ed1f29bb36e062a
SHA512 e5cc3aa206c4a62e746ea9743ae92fd5efb4d46f12c9f51ba04eefffc58e04fc8b085eb0fbeca42290a8ecd3d8c07b40ad80f80db3cf3309d098022f948865c2

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\Bq5XLXS2IAyPVC8Nn9yIeT6NYOE.br[1].js

MD5 4cd8ae0c7d5bfd8612fefa3502360e72
SHA1 cbd05db258e737055cb85f7015a05d64eb9e1bca
SHA256 bec4348c91c7671de3f2d9bc0f4e4d29ae6af0543e2dd367a76579c2209cfdc2
SHA512 fd9019b9a431f31751dbe1ff3a68b851d1cbfe780ef53ec7d20a959561a83eebec61242c29c21d414c432a2c6856dfb41570d6501a6aa7d2d96b734ca3b77555

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\Xs0bcRwli50H_9_TOsfurmNnZ64.br[1].js

MD5 1511e1305fbeae4e2826ea0e2fe94e96
SHA1 b1e8f4e08eb188c1ff157375efb8afe5077ec33f
SHA256 e5c67347f550530145ab3d849e51e480fefdbe3bd7bb97b714b19f7012edcfc3
SHA512 ddb65679b2ba30e6e93b0e182f36fdd134926f584745f056a52b1e35467152b0d8d5ff7ef29a8530629efea00f31d54c6e15b518cb859d565062261b4b5b9b52

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\5WEwQve87H0O12hmcE3ZlbmonJA.br[1].js

MD5 b009645da0b41a50a36774cd4184db8f
SHA1 63b45f55adf2e6260541985212f120b1022f72c3
SHA256 720ae41bad43a48a7576ea1d9db0836d3493488d609bde1052e4dff8a1c2a150
SHA512 8dac8570ae8f37faf865f4b894973013e10cc87e491603d117d9b910eaef7031d8007f728ed0bb3fae935800a9fd5233d586328dca1071361c26ba35ab1418e9

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\y1tiMssL1_ZRGIkBjxDYmR2kX8o.br[1].js

MD5 e3c4a4463b9c8d7dd23e2bc4a7605f2b
SHA1 d149907e36943abb1a4f1e1889a3e70e9348707b
SHA256 cfb7fa1c682c6eee2b763b37e002022463cd6435434a16f6335f33fb98f994a6
SHA512 3a4e38e4c631d8e845edbc01c986f73b0368f8049beea7a3e8a34bdd5864c34103a48b19749c11b5bcc71fdaa672ef6c42e305e1cc6b37abea934766f3deb068

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\8w26ODmd1hk4C30WJtfkdBYFSfE.br[1].js

MD5 072d0f8c7fdb7655402fb9c592d66e18
SHA1 2e013e24ef2443215c6b184e9dfe180b7e562848
SHA256 4cd4cc3d07bbacdecb7331bf78fc5353b4b2664b6c81c1c0237136123d8e704a
SHA512 44cecee114212d2901dd13f9200771c708ef6e89b9bdcb75edf898a1e39833aafa4c7f8ebfc2f613d46eeea35222a1dfee3671a1b42679a94beaec099164f009

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\AsdMf7D6KLdP5SQOeuSIZtV8-sA.br[1].js

MD5 43b58b6b14b60581457ef8a405721626
SHA1 fa9da729b92847cc05ad81625b5667f299b75c08
SHA256 cef3b449403a4725a3866768f730e13f1bddec067cc67f306f023de2815a2789
SHA512 4c22ec83b8a81e0716c4ea9c643cfb4c4f9256447a114b7b0e05c0b38bc073f4a0538e2a385e963b3e2634ef34f66050ac2c36801772a345670409be8fd2e829

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\FGo-FiPnrKTD97A-w2y-TRqRFe8.br[1].js

MD5 fc817aad216313bf7c51b71b089e26b4
SHA1 0966f62e4262ee73c8f97933c4f4a6b1a1bea668
SHA256 089379bd2ac014a3448868c734d53404efae9b809d2b4b60f052159b56e0d7e1
SHA512 b7ffc0ba024a7a0c1668ee1822807f0bcdd521da82c55803cd41ef68e4590885ab1126ebb4cddddac55cb6c477e09712b8550be9f76e3e9d9a54dd738389b4ad

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\4DQ1QFK9\suggestions[1].en-US

MD5 5a34cb996293fde2cb7a4ac89587393a
SHA1 3c96c993500690d1a77873cd62bc639b3a10653f
SHA256 c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
SHA512 e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\nc60aT-MXWFDGmlflZLjNBVVxkM.br[1].js

MD5 1c0981ac86e2ea5b7f08f34548af3280
SHA1 57324208ddb3a9e80abd3346607d712c999c2e50
SHA256 00ff3483d93259aedb929a9fee4454a623830b18a08f08781ac1961c1e98774a
SHA512 0f7185a8579d9bf1b89623bf126c58789010c76f7e279a3f44064c78b2e3e04bb0a89394e6be185618071153bc872e43a69211255f3470e1120e51ab0d5f2329

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\8tH293BphaRNSPJ2rM8AoZ1AZcU.br[1].js

MD5 fa2ef6f65e9c95af42d21f99d38a91a7
SHA1 6820ab9e4fdccbef2000b97fb5cd1878a4b28571
SHA256 6108960affc29a0cabf3c81a46265229010d7e5523da39bdb9c5d112d0ef8c4b
SHA512 eabbaf63183c9344e037e7e0e0f2e08f8615a64e812e672b032906d04bd4f70a87895c05e14769d6f44b13a0963d5254895e60e439b9afbab2ce50575e87bd1c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\t5vZ9VqTO-Sl4hN969ySbvZgV0g.br[1].js

MD5 6932cd1a76e6959ad4d0f330d6536bb4
SHA1 e2e7160642fe28bd731a1287cfbda07a3b5171b7
SHA256 041eb2e6f2582f4c19c0820acf9a0e9a2c7262edede0d397a5f6f0215e83f666
SHA512 28bd0bb200704fbac0de2d7c3d1c64a38d5567f79bf24b9c9894c7c6a3b80bb69a5c9f0929cf82163c8e8d39cb6667a2ac81dcb4e6d2072cc7fedfb63219e584

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\n7roHZRr1mbNerR9FtbnXOskd84.br[1].js

MD5 98ed2ab2571e3f450ef265f9e506897c
SHA1 79747169dc2d59a689f575879b86109e25a7f4db
SHA256 4c4535af86d197589edaf1f6d9e9cdfec2afca8fa4466e8ad584327d0ec8145d
SHA512 0e752507b9b6cf1da4c622d34e5578aa523f123167f3429b6df24961636c67d6d2cd3d05f6cbf3ab292761e798dad80fdb29682b38bbe0d3a7f4823b2ce944d1

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\FuMDgHCeJzgAWeLCBq2RRKwyGUA.br[1].js

MD5 9560ce96b8d6be578de81f89a9dbe366
SHA1 bee3a806dc2e298190d72787eaef8e06f17938dd
SHA256 bce2ec13d1bd311bb2ef76ce5c015aa5e08272ed591f768cdf2ba2ccfe4a96de
SHA512 a900101290b9e18868da163392c441bf3862da18e55a39a6c266bfeec0f1b709d2f7898a2ee79c565e9e64d45a56e26364719ec4d0f3d2885a9eb105a441c9ab

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\fWL2xzriHzWjhZXNxQ8Rm3CwUUU.br[1].js

MD5 ca42e3253b64b3e1cc112764fdb38dfa
SHA1 d09178830437f890fde8580c973f5e7049039536
SHA256 75cb5d690846dd621f5794d392600ad61904a928366ddde80f3449ed0d684b9c
SHA512 39dc86d8de9d8fdb4ca9fe8e4824ef35a038892dca766e3c6f0a30eace54fd74a9c2149061a4e54fa7dbff63b5377eea09b6d25eef16104478a2b90e5a746b73

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\2pI-3yxS71qnL6vzhVIltDQouTg.br[1].js

MD5 12ae5624bf6de63e7f1a62704a827d3f
SHA1 c35379fc87d455ab5f8aeed403f422a24bbad194
SHA256 1fb3b58965bebc71f24af200d4b7bc53e576d00acf519fb67fe3f3abdea0a543
SHA512 da5f5485e1e0feb2a9a9da0eaa342edaeeefaf12ce4dcd50d0143bf476356cb171bd62cb33c58e6d9d492d67f281982a99fef3bfd2ebb9e54cf9782f7b92c17b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\lcj8996lLPHohM7LK16sWWtGSzE.br[1].js

MD5 2937c6dcad55e5e4a67945f4f803c7cd
SHA1 27399487b23109021f178841013d476f92b057c6
SHA256 acb0819704ddc4062d6a3b565ba7fe999fef298778b4b56c284e8f1bebf3c9b7
SHA512 2c07163f841a09d2061af35c7183984475247ce50a9000b4b2b0b5240701a64b140eca99853238db08bb94e9b9368bdfffe9e83185eda1745fb02e6f81110d3a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\wNhUjm3kl_kvyfrio44J6j1zdYo.br[1].js

MD5 2ac240e28f5c156e62cf65486fc9ca2a
SHA1 1f143a24d7bc4a1a3d9f91f49f2e1ba2b1c3d487
SHA256 4325982915d0a661f3f0c30c05eb11a94cb56736d448fdc0313143818741faa3
SHA512 cb90cf76cd9dc16829a3ff12be5274bd26a94097ad036f199151f1c88534a15bbb8f8dafdd699e51df5c38e73c925c00728f807b20c0b097a5842963525baf4b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\LTCT2zdUcB3ayDDUpC7BI5zxXuE.br[1].js

MD5 480df9ada0ab4f05ef58e5cb2e2392e1
SHA1 5510d9c30128875621b2f587563e7c1d0153f164
SHA256 1c56cffb0e9950e4a61b6955e8708befa2ceca71017838f1fc233e2038b23c2c
SHA512 dae1a6680c0f1dfcac1c2b7b23c459f162d3d00d83548dce37bb86a74d2c04f2ec6b68449631eb53dd176153bdec74086f287b02688ef8d4d977671060709d09

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\2RFgnacsz6nPw9vvxd8AGFyaQr8[1].js

MD5 e849f94cd30ec77987643a0d405e33e4
SHA1 d911609da72ccfa9cfc3dbefc5df00185c9a42bf
SHA256 b39968f3ab3c3867efc7115c77d0239b0a2c505ae87766231bf46e32f7797c43
SHA512 dbc5ef102c16d14a99f090821176b3706ba08d87d1efba817d763af969a10f9058c7aa0ce54d442dc816e84d294b52dc78623416044c1b6efa59a28055b48504

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\IpXJDHKzfGJAg49_x5sRfvVvsvk.br[1].js

MD5 6100d2a3324e8efd4da73ec7101f3000
SHA1 cb9987c5bba13d8fe33f0b420155aee4e8ced2d1
SHA256 75eb6620c2b15bbbdfda091dbaef7b9db040db70de388c30ec9df68bbc33ddac
SHA512 4db99f39035adbf3688ff934600817fd52dcd048b7a7fb2a5050d4376861f966ee11ca13f1744adeee3f3b1d620683853b64b36f6a88f28d65eaebe4b7346fdc

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\RvRBoZ5KQDNHwbHfo-_ZBZIoYQo.br[1].js

MD5 718c9d9c2d2a498de3c6953b6347a22f
SHA1 b2f1a5400618972690d509e970cc3abeb72513f4
SHA256 66133f155e3a433e9eeca08dfc3b4e225d358e1a89ab0665379eff319f9f0081
SHA512 ac55ef9f45d29cfcf7d80c009df4c55335f7c3b55d66aadde275f580f321125a2c7669f7157d5bf9a34b3513c1231935a461f46eeebdd87b7801685fc95dc6c3

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\HdiojNH85n4iu87NAQvDH5bKMnM.br[1].js

MD5 794184fae3c0890ae4ea642fd8f7fbf8
SHA1 91f8e72f3517d86a28edeb1b476f90fa5f972168
SHA256 00ea5dc006fa84e08d604bf9708135b98138ae0a092bd2c101a912b5efe3fe17
SHA512 3bcbc295c3e482ba7d8d99df3ac396fc1da973745a82dcae8d02270afed54b758d3f2c9811ed3c08e817f78a1a6a73eb5564d05e0c78d8009cf2608d14bb96fc

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\ciI4DrhPUNmhXgxM4MW52bFXjfw.br[1].js

MD5 ffdc7892743e65d4e1747d695ab8fa3a
SHA1 02c6c4d62ba6806b28f1c69462e55e631ae13970
SHA256 e7f80dfe7b61e64faef1f7408f32ed0194ae648931d406fa987ec50c7326eb2d
SHA512 d85141d067a79df5b680fcc0d2a49e913847fed449315c238f08b2b92847cc5549798428b4921483604898dd44a75a3595e08e14ae132c4ac72f72caf731422d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\BFQDsdSF9E9Gp0u-xRbmGVfJfe0.br[1].js

MD5 60c8196199a6c715bc20652c09f64e7a
SHA1 fd861e01ba063850704195b35e44db2562ae815e
SHA256 708df52a72db22b1a287439cb9aa3ef2037bb67c8246835e36e673f70695a390
SHA512 7f16a9c7f5e6df6d78fa1d08818580dbcc4c7453db9d095794c730bb0f67e14070369e610b90225acf6961fda6471c7f497d59da0a7fef2f95e8bcc180b63a0d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\8aj_I6fSAQ2HauP0CPPAfDwa2j8.br[1].js

MD5 4ff32905762c3a445028e11ed69f04a0
SHA1 809535e72d3dbe00f945893f7581eb3897f4439a
SHA256 336342b76b1eec2f9698dacb5d7d7749148a2036172435cd0c1a80a80a9886e7
SHA512 8b20273037fc33b549b6322d4b6a7623b0e24cf737c8d562e226f3bee2f5ba5a0692569fd0039e296146e9845e4f00ed5f08566980ede5fe449be08ff1f0b79f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\WPedHfV8dQrn4qkif5azDZSqmn8.br[1].js

MD5 f5dfb6428494da3c1f195528588587cb
SHA1 7575a1f3dc367b2332d837a46d1dd2748b225c38
SHA256 f45968b3999174976d6fbea229f627f0bda56fd84f8b1924c01da624bfea01e3
SHA512 bb677ee6f22dfe28ca9ebc94a6ea7b5bdfb95288ba246c85c135f083c3af765964dbe5f3a028dca6e8a6396e967f24c2734442432abf00e690f34bc8106dfe9d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\5cNYI-KHtSpU1cTpIG4CXkdsXFg.br[1].js

MD5 4bd9efcb4aafe3b855d455fd01d22463
SHA1 6be51274703da67c1becaa6d0196bc8c93050815
SHA256 851dba4ff4d8c05904831a927424bde15a8d037313ced005820f4b2222ee1d03
SHA512 56f563a5d16d3e55852140e5eb5006f610fc3c0e1e3567a8549ba16625e4dc1a30bd51c2bb4888ff83361921fcfd8f63f0b8b1b8cfe32933cb263e7b684e4b60

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\pYx84E5QxKsDa_GCjDkQj38YO0k.br[1].js

MD5 487d9ac02e3cf57172045869ac3f97a2
SHA1 47c9870beb200a74d274fdf9e98aa2efcd54efbd
SHA256 a97799ff4c48323ad3314a13e6a20a69145d0f8257fdae6882551d6fb6610ea6
SHA512 f13633d84fe8133da9d1823ce418cf42717cbe79176c9c11f4a7dd66905ba1aef571b968bd29d7c7ca91d802b4b36aefdb0c5d715e480215754c5d164eac27cd

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\kNUdPzzLEbQzYr3icm3MTxwk6-Y.br[1].js

MD5 fc3708a7ac43ace3d3406c2e5f7f1116
SHA1 cbd3116ecd59fd4a44f8b3cd958cbff724989a29
SHA256 37d9b83c929f1a8d94c4f29000cbfdfa72c4bc61c3950df02523252928591c29
SHA512 12122417b29aed27eebf3bb36e740c86567daef7060b5e8d64d11c83a5045e6eca5f3b1bc5a6d6b1a8e3eb23f8c34d48b63fcb41e43143e6b146fb2d51cdbd58

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\y9cMttd-SwSaYuiqhqk701fxHs0.br[1].js

MD5 142a83c5800451a9731a262400de2419
SHA1 1e5f6598f7f6b43a6f4e1b2a900ce1676e0c024d
SHA256 7d49a33d66c98ab838f9a15d2ff49bbac72c1588d979644fc174116d0afcb852
SHA512 b1d7fa83b4bc787409c088f7cba58acaa031fe3239a7bc139b6d4839ad6c66156e44cdf6f545d7b6b9309b3ebbfa0b17d9f307884f679cb6d2ae11c6935eea2f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\jBIkCV7jrEq13WeSObdKprQ65HI.br[1].js

MD5 9a8aa12e9602f15ed71571301da78859
SHA1 e404e501788aa409f476b3aefeee122476814e14
SHA256 259f58f6f176e8dfb4589b8a1fe0b11e308a0806d0316da4cb5defb2a19868f7
SHA512 3e20bd493d1bb3cb8340ad95996bde2599c3987832bb834ab3a0db3e01860f73f0b135f71ff8633fa77a7589f4b811dfcba06f9c7a45c6089d1b31d34dc5fdb9

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\MCwdqGFTwqu20jt3177s57V4wZk.br[1].js

MD5 41e1135d5d4aefe240c4dbd7b71f40dd
SHA1 cd1d7feee9a4202cf3a32172e8c5b081855f3061
SHA256 2e51a8c4ab5b014aeff1eeac9da5a0937f5ca7dcde7f089f88db05460f2c47ca
SHA512 8b43c0246a2a3447dd0fc818a67faf5c76d4bdbae52989c80da3004f032033cd2fd45e484727facea150125766a8c6b9b1094b855b9e1d23495e85d8ae1ce041

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\e5E3S-lkItFHIqVf6KjzTWPZb6Y.br[1].js

MD5 00bee03327af12e5db14aa0967daea24
SHA1 c8afb873b9fa284b539010ca72220db8aee40fd6
SHA256 c8f912cc21b8a576a62b9f03976f49a6b6f96f10fbd1042ec56af4da02d985ec
SHA512 494860cdefb1d070b4f390ecf9803fbdaa88a94bf91c84dbd9b95d4e86205c1ab7b28e24aa074ca13a86fd74194cabd25fc4a64e4dd8730707879dc351f1826c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\IdUTPeerhJUBvXEe7f4gFEe3qoI.br[1].js

MD5 f8867659eec16d15e723c56aeb7c34d5
SHA1 fbfb3436e5ba3b1653aa2216c717db403d9a0b8a
SHA256 c33b076ea6748367e9898c67afea2f0042988e544142d42bf324cbb62fd89d70
SHA512 808bb92c1ed4ce68711ffeb5836ce93cd4daa66d17c3ffa60cc317ae32dea841eb00e7b2b19fa3957ab7f1fd6c88f6cd5c45bf1c7ac67c30e5acac0acd8b851c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\QtJVX2BWG_pKK8Kg_EqULgkLsrk.br[1].js

MD5 4a7fbd9e7ea63c6d763f333644256a62
SHA1 ef3dc9076b76d0a6109d42fa88915165e17f14e0
SHA256 d27b551812ab2092c10677a8a587f808164cca3fae2d49d0b2a89fa348330084
SHA512 de3966360449e59d45f0671ab3a2f0a6fd2c6c61328320d257fe17877168029e4515b06b373433f2e0eea7eb4d07184710e0c01b643ab7f836c586e6ceb91c5a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\DUK18cY3cfD0zk-_nBEv4bFX75k.br[1].js

MD5 600aab0f07672850c21b8ad1f208c021
SHA1 1164fe094cff4bebd4a1d307f6083aa13dc2f556
SHA256 be32f8b54035cf1dc8c7eb6e9b7b297262bf16275c97df2988f02084e4843390
SHA512 f6c1195c7dca727848d863d0d653f8ccb814d9a0c2b0481d511bafaa5b2278bb9b7b3d954cd26593a8e277bcce0f0b555457068c4e992eaa011bdc900bb05535

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\Sak18YEdud5YruovSDAmdGeFvwQ.br[1].js

MD5 05fe2a61a9976966980fffb4022503aa
SHA1 5e9674c688713776c503f1907eca82038bf4b7b0
SHA256 245b7fda2dd4a5091c386cfcd0f155130eb2e270cb4850bfb0746878b8244fe8
SHA512 014b3a3ff35db69374906912d765fc43bed04a7fe8872bcf4999829732f241379e42dbcf3e49f5dabca015200b5e39af4cc702bf6ccf15902053bf115416503e

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\W6JA1dqYURoDF58Us-rKOCztnvE.br[1].js

MD5 d8ad2a416eebd8d93423a34adc94c790
SHA1 0a1bc70d16cfd7dbd54054b1b6fae9d057d0aecb
SHA256 d1b8098f80e98d9dd390242a65c088f98eeae382ee40948d82b3c9d6d3c43aa5
SHA512 bbb85f1c88ae8f202b2a7dbe8bcfb4966d7017b4f1a5f608969f0cf82b5911d742ce685542c98c05734b45751419533d0c1d2e35cf1ed09dacb7568f0646546e

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\CuoJ-XSESmq5e-S0atX4JdNgEbQ.br[1].js

MD5 2f0016fc606eeae0bc4b2a3d01e02d7a
SHA1 f4767ce1d5405a2b28543570bc14692fbaa9a998
SHA256 2b0277c292e4a513ca0eba797f9958a9388f49cafd6d2497cf309e9b6370301a
SHA512 0844e67bbd61dc7bd6b1c25ea0ac3ba41b685279b538c8f07b484e2d957acc8c07ccb84ee166284950eac904f3da4a6252a9a4c40f7f60478fc088584a0e2d61

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\bGGMgLQKrBqF0e1Gl4gVARrbZSE.br[1].js

MD5 a5cd0e7967e63784f3c7df62208f8a5b
SHA1 6d5f7455a4eaf1e46a40b770d70e7b67f4288d5e
SHA256 b81be2cbe94d80726155334b7f5e64ecf24f57a9f6d41f2e0e451b8c1126e71f
SHA512 b2ea551e11203f059c4d23b70dd4c732e5c67208e726d1d476c0a8d536785a2d8857870aa646d91447c937bb2a99035b372987dcfeee6e2536c3fdcc81c13c6a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\pCjAnNfKRza-LKbFI9VevrRjIwc.gz[1].js

MD5 22720d009b7a928af6b6f0a9a765a588
SHA1 6b23f5332585ecb1e5986c70c2717cd540ced735
SHA256 9f0fa7d003ecd211bebb45d69143294a522936c9446b3c0c359cfa2369374c4b
SHA512 3f80f974c9aef814f760d1ca43af03bfdbe2e5d7ce036c0c007a754bb957d48009d0e000e3879a9d9bab72bece9771871c776ead6bbbc1ae62147ab9b11807a6

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\warmup[1].gif

MD5 325472601571f31e1bf00674c368d335
SHA1 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
SHA256 b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
SHA512 717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\dliRwIxSaWxw-rZZkpFj-NPxBOA.br[1].css

MD5 2eee47c5622d26407e89911cd891dd7e
SHA1 4c3fec3d5045555f3a16f87737361b9b0f4c838e
SHA256 6a62a1362ac786ce40a234316088c308226d5dbbb62849a8da10f273a3d6839b
SHA512 58c91c64ba88f6833bd7dd37862d15a06f9b462d2009aa9122e29ccc39c885d1c399f1d71f2ba031eb2e98ad90539aa7a72c36c77bdfd050deeb7ccf7a0cd9b7

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\_uzlXsRnS5Ra0MSF1ACv1JzUOlU.br[1].css

MD5 edc542c94d01808fe099e72d6390361a
SHA1 2a1a63cdaa90bc0dc84cd1e5b1036582aab2078e
SHA256 a47f463d2af683de10fd19417124cc0fb77431ebcef0e7c298e35cabbb4a7a45
SHA512 e6dfc67441d5eb0a9df9b27b19b98f62b392b5706118adb1ec56ad1495fe6484774d4465de0a8af38b62144ae014791456da0a117635121f9728407ffc086ecc

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\1R-JM6t40iN6tU4im1nztWFM2-I.br[1].css

MD5 1f6521be62933d297d0b2a07a02405d0
SHA1 30d252c170856420812ef8abdd3d50cf0e5b1f62
SHA256 daef5e5ddff21f5b0bd63a88f55ecbb2221705fc2e26142dcc73eef151208cfd
SHA512 520992151fcf7d0d70a7af2cf8d164fe6fe601602948e8de8491585d72ee4536686cdd802fabd66220a83216130ed8c77bd2b7710511a8b5d6be88997303fece

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\sd09ZoqYFtYgki8gbUcaMRzc1N4.br[1].css

MD5 106fc8a3d4abaf183196304e32f55670
SHA1 96a373b97020d145e025506175da7d5005a0994a
SHA256 0b5d9cb00d4ee8068bb96772a09ab0275c477504f45a46ba53209deb4b12bda9
SHA512 7d45933b6180fcdeb4ae61a4b422449aa0ea06054a123cc73a86a262dbd2f391f07a49e0a8e3e27d1a02103cbf1f6eca9777378e68a25616cb7c016f1f0ca511

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\MQ6FjmtU3HtHUWBpUy7g5MH2bEs.br[1].css

MD5 b98f6b3fe0b14ef1f9405171a71bf518
SHA1 b26be4889733c762784905c5843d339d48671f3a
SHA256 35a685dc01d69c30bfb1072ec529949ad065d5e06dfca6c83f6ceffb7a67cf37
SHA512 4814de8fe1e387e04b9bc8cab25b33d156feba049deaf5a1c9680f9d81a6b6e683f90490bfb8146f571e00e4180324916d87b095d1d66838abe9fb09a81b1bb3

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\eeGCipqheoe_uezlnNy3LLj5EpM.br[1].css

MD5 6938a507c133f3e0c9bb9b13e99c0e89
SHA1 b5999eeefdc8e0cbbdfbc9dc9997586f32562059
SHA256 60039f6f768944de42ccfa29ca687548fbbefeb6f283d8c3b92e8338f141c1b2
SHA512 00dc05c1001f362eeb3ded8df3c73596b933e4323e95e595cec7572f1ea2346b2aae0ef4911f629e7dd389c82e0531ab9fd9f9a36d0898c944a810d39331bccc

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\VktYCgYmJQhASKykbCzusQ8Uqo8.br[1].css

MD5 9611c650c0535e6af3e1eacff0f5a707
SHA1 618e96ea90c9457c4bf8d8edc8f0a7d2ff99adc5
SHA256 f7e1fdeda028e8b0ae8530050cde62758d762517409e0b030e2e34c4bfe3cb4a
SHA512 363d1c04b1bc3aee043dd0a12d8dab02ecc4fbba312d20e7f1887729c41c8717295a3993acb95ee405fa88e4fd9f32ef4895e5d48b3e54b6293806cfdc012887

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\BAy11H3wRXaRcm85yqz4_tjE_U8.br[1].css

MD5 66541ad000b292f2c78aad70be38ae63
SHA1 b340d641225d893042038284ca4eaec355b715b1
SHA256 0da83cf66a0a78cdc32f9f126bf483acb2af47b29cb96996f3e451043bb355c2
SHA512 d43eab0afbf9de3c274a8bbdd54a16f9956a909cfc88ae2edafe4fc42908a628a3ecf59e0ad9e86c700bbe94f5c0166fd466f6a7fa362d8ec8d2757adaef282f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\10hV_LeOgcPE0OV6RmTIShvXtbQ.br[1].css

MD5 3d30d31bb574351f0f7218085e443487
SHA1 dd10ceb04d28e6fc22d89dd1098b3f847e2f9c18
SHA256 bd676d9118a01f1cd3694c2587a413890a10cf33e8ff2577e24fefebda843ae9
SHA512 8bb4c65d6730679d2aee49eae1be1c4e4720cab44b5833bf06e2c23a2c3f4b4b5dc985807489116b7135b64c39c2bc04c7e9c7176c0a619b46ccad784b8b280b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\HCr-NzLR4hN0cooQ6Hk3WYStjdE.br[1].css

MD5 8082e4ff545d1ec2806dab73606073e1
SHA1 dec8fde9de97d3c63950bb0d0f06b6aa301b76ad
SHA256 75efa75f4d65997d8ba7c3bca7b589ad47f8fb3e8baeee1cf385ab4654ce18cd
SHA512 5fbb430eab3f1fdc2bd599349ecfcc7d21ce79973ac499472c118e3102d9cee2ec456614fdb42485d53c3ae32ec75d01d91d2bb6b6ab700f50860b209fe69717

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\VGIZX1PGtSZDiUj1vKBA-e6uIjo.br[1].css

MD5 bd8c71fed561769598a3308fcfba9898
SHA1 a8a7f2aea0115ad2d5ee0b7a92f9ccff25a60c60
SHA256 14a575843dd5923be3d259f6b439d623ad12750975ccdcdec4089fbdc4314890
SHA512 5942811425861210c64bbfa963719e132aa0385559ba15877658b921d77576341e4f750752d0522d58d88fecf895a19948fa6933a9d7a396242f4a5b9c7cb269

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\dVMW5tVdi3_S7aODH6eNGoZMETI.br[1].css

MD5 7de639b4fc93e9446fb7c2e25348f54a
SHA1 549289614e690a370ddc0b6c0a2a1b1677ededfc
SHA256 7474a8b3ff79ef4978d048750414478d0ea5b07b80ef115eff19a032b4d403ec
SHA512 83899675fee38aa22d8e7d72a8f80d4bf5a48b2bcf49f8078ff8c8d32686ba8e0c136606ca00e375bc5b64a96f588ff478bad780a2684907458760c8b1c35493

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\lH4M-N_xcn5ismDDpuIWlJANFzw.br[1].css

MD5 cd24bf1b3a1f467c71249ad3edadcda8
SHA1 71967626c2624ad9e674e42dc4c554f54b2ccdfa
SHA256 0e660963740594a0c1cd5532321a9eca1e6570df95c63d06990954aee6c44649
SHA512 af641c475050ad91662ec253e1976677e0bea91c3fe718f88295035d6fbcf805d0c0e1d1e57bb747c61cdcd614596cc4e361ece2c80d4a36f92b0bedc2d969d9

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\ILpAc2VIof0cr4Py3y4rAFMboow.br[1].css

MD5 998f2930c284aa38f8f4b84c303db2a1
SHA1 e841f739b35342a74057ed5653f0e35a6252e3c0
SHA256 8165ec9b41e7ca4e973d709642ec1055a48c8883aa9866c93bbb56b74a099191
SHA512 b6d65941eb64cc20d246ae342fef265f61a3d325b5e4e6bbafcab96fc3cf1077e75f39d2652a9ba8988ba5d5440d4afa9ab311dad49708a8546bf399757647ff

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\7APrwFbw1Ly9Oc0nCuyUM30nTqM.br[1].css

MD5 d9835ef4f64bd2a74ea5b56a261d0ad3
SHA1 71c769095d46efef657255159b4a13699e1ada3c
SHA256 fda16e171f394b894e1f819e9495f7d3ad373c00d2eda3346d349d3528227c80
SHA512 5b6f734609038572c663d26c3862418b8a2f6203ad8eb79eb66187a95d786b97e67312a3b617f3db8cddc3cb2c519bc47ff223b866e909b91b777a270d65cd12

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\sS9WdiLA9F38WKJqRP3fX-VP9Lo.br[1].css

MD5 0f377e82bd7c7567a19a65f7a6895475
SHA1 46a2708bd8aa676e182ef538e17384f170668ff7
SHA256 81513bc42881612c4a530ce3abaaa528f4827ee756a91355961e0ff062d02a98
SHA512 e3d1fbc658e221cf14995af279d11de7e1b74df4196a9f0d2edb1730dc35331e176b4f451d194e6849f6283ecc1b79c82dd0eeee03982146d0bc47f281fee0fa

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\icNDaHbrcaIFIZRVzDw7Mn4j_ws.br[1].css

MD5 f654ec802f348da03d6819277ba55b59
SHA1 9ec2f6b099de70e8d4245631f67af20d6c33cf5c
SHA256 ed87e79a9530f88f0d0533c6b454695645388d20d17db1556ada0008aca9227b
SHA512 edec6d3a1f886130f18060e7dbd57ec762647dc45cb0750b22d570e0d00f47edd815634709e76051ab3984c62243962fb6f677a3d3fce1c896ad1faa4f59d4b3

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\aWcvNmbBScgv7y8smTMInr1pX1k.br[1].css

MD5 bd836fe3637f869fc3a70d435fe9f238
SHA1 1e0adbee330315ae3b0e29f18a6c20a07c2be457
SHA256 b2cb5a49e2c72297e7d06d4069934a3abe936ed590a2f33e05cb7d17a0c45373
SHA512 7245b1ac3bd77b29be4e078b28ae60b0bcdc10242fda75102f9b791d89675154f94c9e559c09823cb9a5692a5254f12359b4b8863577c6eb5421792b33d88dc1

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\8hd1-XgnZ26SnhiiMN_GgejYN8w.br[1].css

MD5 543ba21ecd2122b9e2722a8592f798fe
SHA1 af01924c68e4af8f0e4dfd714251c7ca13204bad
SHA256 a56d074f65ea1a2984273f50023e1e9f052c67c11993802477465864262e90c1
SHA512 75893745f25d01a8e8ace911588faef8a8d92ebee653052b8e38ebd64feef7de6594234e1a6ec8b80c7cdf4e9ef049159c0f0d69bec579b2293b29e077f6431a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\y8SHyA2Zg-jJhJ_j537FVXgLyTE[1].css

MD5 636771501c97578647d100e958414f6e
SHA1 6411af7deaf30f719aa30d747d06caa00ec99496
SHA256 495badc995d2971282fcf03e09f79b4cbec76f1cee00dab0792edbf11c8d5ad2
SHA512 ff31f0de632fe366d76bed0908e7e8c99f13eb089878c94c403483b378a9dae3f60492f308c2b8718ddb077b3ca88e502696873568992aa3529640890aa6ef3d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\Lfl0lb6933v8vJP6dsB9Y1NAiS4.br[1].css

MD5 5526e220e8361c2060d3b1aca4f15933
SHA1 8ef0d4a9007e246a5cae22fb5024efddaf777fc6
SHA256 32f3bae84748286a68d1829c21120d992decab2dfad30a12b4b25107f5012b27
SHA512 b7ee2f473abe1ffe59259008031057caad6a53445226b21ce8709506c76d27a1dacac310ca149b97639616547492e520eef6bd7b52554a64a9fa12e509e6f4f4

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\7xFYQjcCPSyd5_tuEKGm5v_jYxk[1].css

MD5 479e143e18965a678e44c390a352a869
SHA1 5d873b6c4bffd59982f12a0c601af93f0dc8861a
SHA256 2864a6dff76b395b210cae825758222e3e76ba28570e96c7451a8da1041a2cd8
SHA512 e5b59e981125d7d2fb2f927a83e4e724c3ebaff821a397bc5cd1355fb92f8201868be4b5c1e58fe861ffd75de02d2a854cf25f47f1f6e74770633affca2e9450

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\Qo1KJzoRMo31gE9sb--6dyXZlXw.br[1].css

MD5 28a8f64e4905b546edd6dbeea93e00bc
SHA1 910214235e1f01f5688146404f7407e6a7da5272
SHA256 bbc6825dee137e4cfb54e382883bf3658c652abe76e866740cb25bee18deb24a
SHA512 7b1de8c6ca437c9648350b296eb66a51ff837157097d78b2e85ee89df99bddf88cfe33b5d59518951f10ac6f1cc0ef63f106cbe73b8f6919cceef80bf8666dbe

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\6vW-cIY2Dxj_U1X3fdBnNVLFgF8.br[1].css

MD5 20ddcb32221014088551c51d8e17894a
SHA1 a76227d0b08c1fcf061d9f3f05abae72b770e3cc
SHA256 8ebae08e690eb1c2cf6c5c7e8afc4a04e309cdbfa31d3e00100d87cfd13f04e6
SHA512 d3d1c9321fea8656bd4fea3e13aa31b8409638c9009751428271c81ca3dfa556db73923d1591674bc0ae68d531ed0753a154412f913d2103193ebc3d3778cc7f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\GZY3PyHImAjt56VIC2PBbIGPof4[1].css

MD5 2f46ccdbf86244d2d1f9f79446474cd0
SHA1 e603ef7f9652a064a8f31befe8490ed98104eb3b
SHA256 553635afff0292b5b30f9101074af9bcf092aaf9a68bf43d20f59b28b1cbe8ee
SHA512 534c6ea51520724b8c0eb9c7a7c47e886e14dbc7dea31481a68e5287c7179db4421ee48abe6b5731e6418a959748ea8bfb687371cb3a089cb3557357c4b85e76

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\d9TRXXZEoyyMfHxWr0fybsRFV_g.br[1].js

MD5 7b169525351adee62444748ac99415d2
SHA1 efb5f23c960e992779f0fa9ed5daf359cf65ed03
SHA256 c3ed28565218307605564551c785a609522c3b9cb990b93073a4f98d1c5afb67
SHA512 3e6d3feb46f6b1a2fb524aa93d7e64cba70f49f6ccdfec594ddbc91106433672afac9b3538b1f833ff39e5b24ee5b01afed66e8c5656612ed7469ca914858ef8

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\6ZpK9fh9cD0LYcXzkYpUR9MV_-g.br[1].js

MD5 bd33d48372e231bb5d17d474eb72c3e9
SHA1 b7a6d7235c9c16bbe2afff80479781999a1e0c54
SHA256 0902692225cf325455e896941a7def89a27e00efe6f30bea60f1ecf9d9651483
SHA512 9d1ea258b0f56b120c433b96ba56963d7512f081c9dd2cda57cc6e8da75a99f1d9a9b34fb7bbfbcb7d19d4e9580126f183d719736354e53ea4101f884fe86902

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\FIrq4n7XJcH-bxJlHvalz0nETAA.br[1].js

MD5 08f7c1dc1aaf048802adc436d9d542bf
SHA1 c92d616f5da1e5c3cc42c5ed4c74e57592779ffb
SHA256 4b2bfe5490e08692e57a12ada60c818b163c800e17c7c2b91f79ff6d530f5f60
SHA512 ce968bfa7ada540f2a49123830e55197caddcae083ca2363581508b815ddb3b5594f642d455d0002e29a2bc4017f496d8d174a142692cf18e0f6d20b1a836b25

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\Xo9L0hF-2YL6ekhVpxQvIHf1v14.br[1].js

MD5 f9c1a051cdd4ff16e2ee6de304e9b2f6
SHA1 a52c395c78c6d0c0e2f7a8448a340cb996622d95
SHA256 620840599904aeefd4c9fa2afd71f48dfecd8e29092b35221fbda340488486a9
SHA512 0c45fdb66e6cf8dbe77b25265a985187e2bd5a190e08f23b82533d24857a8365c7ec954df2bca889990a585d5d4bf7f176c050dcc7682453778e8874e2441367

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\skJpwS9jLsl2D3hEtFkK0UWsyAA.br[1].js

MD5 20c1d61ba0bd6d7ce084dc4eabca9950
SHA1 3bcf6db9d5adfdf5821340c6cc17847d6f635856
SHA256 161b2a9bfcee632dc9a088882e5ce016e34ad1e0734bbe8e2b3d48ef6c8baa3a
SHA512 e239cec8227188739ba44e3083ef8d7dcaf90d16ff04774f6da7cfaed0daf41919be6067f5dfa3e6ddb6ec466139759da91f621f5145839e04bd2c3f017d30dd

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\_cgKjkVFe6xavGJzVujq8m7QFko.br[1].js

MD5 ebfbeee6d28e1393a387963a8892f560
SHA1 3a5ea1c97ce3a9009502f292e42ee22b47b656b0
SHA256 af85128a7b99f19c413ec0872d9503d32fd95391e60d229b1ee3db839139728e
SHA512 ef6313d4a6fe714dde91674019dde0507c8f1bf105d751fede8dca1357bb27a8d0b921a5413c8f02a70debdcdfae2a7a035a86f4ec145e88f41c9a67f9bd5a4c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\iqYxm8r46lk-3ernDKEwdszk1wo.br[1].js

MD5 6dbbc36cabc19d1de8ec05c6ecccfd96
SHA1 631c927bbd5ee3ea6d31c40d1529720dc151bba1
SHA256 03dd0b9127451450fcd3c706ca79f6663f121eef7630ddc908571f08c1e79f8f
SHA512 5fc5f9c9f884589307f9c3f1ddc97cbcd5551a8df2e7d5ccf2181dd69d57332901fa31182bdc3cbf0594ffd03848ee6d980eb51bcf49301bcc04027bf2ea81b9

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\yt5G3936XbeOUUYvhktH-Zp37Ac.br[1].js

MD5 505c1b97b12647fad0e3392277fd7cb7
SHA1 8ec44fb4a2f04bf2dfdad616397ef84059094ddd
SHA256 a2246c34f2a1064973c523ba3c09e21deb16ce351e3c26ffaca4ffbca47867cc
SHA512 08715bdcdd35d8a3a4b07d584d00bd7861e41b87228707af38b32ab5d6002fec90c5004083935798d4addee473316021e4ba9685977e047b7914e68722ff4e8e

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\Ap0ruFYembaL6JRXvSodfz5Y57k.br[1].js

MD5 8d9e2b8c8feff68c9c951633fc454aca
SHA1 175410869be43219d4eaf0faa79c1e116ad4a3b0
SHA256 e59282aa7fb0c0166e758668dbc6e76f798211df0b596cc2063c81ea6e5620af
SHA512 ec2d5b44633526d91f3d38e9142e3fe595c77b7b3a9de07bd69f17b5d7a79800a7833b5f760fe5657cfbd9df61afe796c34174ef33e11cbde25fdc4088b47309

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\G1588626\xiLiwvf1fPHGHn1FtpBZ7OjyW7k.br[1].css

MD5 8d8b62b173b93037bb3a53aeeff12611
SHA1 c16dd0ef80deb06599ce69f249e10ea8b5806d3f
SHA256 c58b7b4387b2e8d16d09c314829ba0aa10afc9bbc560625331140f897603020c
SHA512 05269f1ada684e2bdbbd328abae353d9aa1a741638bf8021a96519c2e52b95f7fac98cdb4b27aa7a7b6ff8f734423a344e556bef49108069ce9bdf28d3beb4c5

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\V5dpoD3fjhPtv-hIh3ssEsOr5_M.br[1].js

MD5 02dbe1b08948a345311fdf0393604fe3
SHA1 a1c1d3ec09e80b3480df001f4cfb351afd09dd45
SHA256 f80560fbf1ea024970226f3995c031cea0116a6741593af394ad9cd55499f12c
SHA512 fd911c725ef9c51bdb579b922bdccaa60765c431c7695978d1f35ff6181d0672de32ff0c33805313fa90af326bcee517d865131621670be6e5ef6be0b87add62

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\LLsqdhmv3RjYgfuepDBrVLeWshY.br[1].js

MD5 a4514e4edb31d874583b43d2e53e3620
SHA1 55ac469678b62eb69c5e3f1c3d78a63d703cd70a
SHA256 a5a84a25ffdf1b34a268a98c8c8484ba773360cc4f9fadd526a4c7932677f088
SHA512 1890ad66ee5cc00d70445b13849f0c8e71faad5d3bea610966617ed4c48b9418ac640c9ead310853e30e6611e6fb7771b1dfb1e3bad86010b5c34101a86d4d02

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\QhINJ5aAulL1ot_r_8dLH_aIfCk.br[1].js

MD5 c90db02af84faf8176baee9032cdfff8
SHA1 89e07ed70c29ebcf9d70d790b3995e16f0c0303c
SHA256 d9ae63faa687efc124f80b09666ba7c35e6b2a0537beb91c17585176154bc0ea
SHA512 00d91908e1abccad452e2e56c4491f3c5dec36fc73fa29b4a18e246837ce33414d37ef1a016470477ede8c25f5980a651b9bc0bcf85bbd43508abdbee942b168

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\O7fNg96R1_CsQZshpnEC3v_JCPI.br[1].js

MD5 04e46d18c015e7c22cb2e4b43dcefd05
SHA1 212f9f2089a5f85033160582dccb1b41a7e4cd15
SHA256 a8172a1cd35702e0679aa2fc817640738b09d8c2a1bacf4a132e68d314407744
SHA512 e3fd5f578cd864c0b1905c3342c3539cc98d78de8a4734eb2629558eca566f464890425250610de11cb9950c481ddb5c3abf6557e189d7153461f43fe62d34ad

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\7fEdNSXLMWxUxQ1SVSMGfOMYvxY.br[1].js

MD5 785d3c1d93d18e5478f0c3ffce35cd03
SHA1 1f7533428af383a196cc2319477b762f86500514
SHA256 b32b54f6d1be64df456502b677407d4cfa5f10e98cde9350d9e63331fdbb7bfc
SHA512 f374ded54893e2cc95d2f8bae4c7896f9cb4bc21e0c53b773d31f90e6d940c6adb8552130d210d4bd43ab69ec25bcd64887660581dc5fc454c634c4e7b6037d7

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\esOctj82OeWwzSTLEhAwV4AVuOk.br[1].js

MD5 f4dcfc55769a7a6c23a57b62a631da1a
SHA1 c220a13d008033814a7e46c8d6547f016bea5d75
SHA256 d9e102f9e838797794078979641d8dca5dc8512cb428dbbd6c382bc587269bdd
SHA512 108673ad4da3eded27564e86a9c446fc7bb0047bbfeb83c35e208d640129eeceb92e51aa0aeffedf861b96e3bc963617142e75c64054d8738dc809be1443b790

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\XpyaFPNakGOwlPXoOWhSNZDWjDU.br[1].js

MD5 eb205ad97c03ff1f0fa4e8181a33abfa
SHA1 d2d31430f1ba4bd909684fc0fcb3c5d866cabba1
SHA256 e0fc19557fc40013231e79254059b16aa64019202372077962ad0345f6434cd1
SHA512 c1793630aacbc4203f7911e41a07ef941ba96e0a6c20a13dced139dea3e2f6edad9cfe86001d467a58709d2f3441c6154c26670c163a5209f1da1516869aa6e3

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\SjH78-y4jHjMXChaxlxNFQ9_yVw.br[1].js

MD5 5f0a4b48c81384ece1fad9a3ebf027a3
SHA1 4c0b05dbe82958a8c806e40e835a5a0f95dcb1f5
SHA256 391324ad7a9b52e786edc162271f50f481bb82d749ac555d1964c66c211f1627
SHA512 6fdfe3314c7e00d3b5c4f9f426a73169f2e1a5f8dbef5d04fa239ecba83c391a6a9e71e9a60f1ef3bb0fac7b7023d03991b980ce4ff8b7c18ccc96d7f96d9115

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\Yp5uRx1ZvJMBOj_5nU0FUN0279s.br[1].js

MD5 aba86a34f3fdbcb7dfe2255fd75141d8
SHA1 1266746ddfd30db4f4db60a1df92ce696378f7fd
SHA256 fa3c61a6725a959dccda1a97e82b433ef359b49d646a5d389cc47822085b5a2d
SHA512 ec138e078f3e379c40a7cf2c674ca9cc06a3f985c76a2940ca797d39202513053b6a4ea2ece875a303aafb2cc2004ee2c5aa4a6df1c31c09aa3556ba952cef4c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\cVhztCgE3ZjlZ4NrICPGsTh1WbQ.br[1].js

MD5 60e4aa30ef7eeaf5faabb4d13bbd7f0a
SHA1 4f861c616b0d90c28ce0e8495a453f73f4d0f2bb
SHA256 796eb10fdeacbec23196544f9f66b423262923ef7b6f79977e9a157db3d24aac
SHA512 11bf27e4426bf5b7d97cedde31d1e775b5158a1e950006718ebacf0e1e874fb3284c79ecc59d4c2b7eed2e35c54695b4197a855834d0331f8fefbd603dd8e480

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\LJBbk33xj0wpN1yZ2F5CHaTSir0.br[1].js

MD5 7be60932f0676b35f83fbcff69473a88
SHA1 12ef061b866583a77b864c90c3b6c3ec6aa5721d
SHA256 5bc502c29b274dbcec1a0fb1840ae397bf6b8d0e8310ffad628331d92a33cd67
SHA512 2c7bd4c070c75e9757e674c3ece1cbbbfff5e3d2a4b414902cd1857ddc762269605005c531e73f363c7fe73ff82d30f2d910a8e6060cd11225179c14b52fcbaf

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\Mi_1CQO28mEq97e_dzQbiA3Bgx0.br[1].js

MD5 5f3115c3009aff3032b00f3f31c28603
SHA1 d9f5f57b2b591b345f2438935c326a24fb0b0399
SHA256 a487c62d5426112a6bbd972231976718299a30f38a2e56928334743dafab6419
SHA512 2511e1486a072f94a810385e3bdee26febda2823be99ebbd67c7676b0de36d504d0dbe00c40a2762440526d8f543c7b863be12e41f10f82fa026ae1fae8e3443

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\T5889cz8zTrV7Rl2tlyjGriSuv0.br[1].js

MD5 a6f3b2a6eb5c698a83357f249e73d3a9
SHA1 5c97ef08eeaea712f711170e4f85a2e8da864427
SHA256 0428a936e0137d674e2050c7addd6dde4cfec14f8ee849570ffeee19410cea2c
SHA512 bd262892d3aacbf37d83bccc50c2c3563e3aa0569363ccd95a4a778a49aa139e241d005d66ee9b822b6b592033d2656b80b532cdc4ca2911e381e80d0368392b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\pxzfjFIjWTDQikh0A5aT_cguYyc[1].js

MD5 e8a5707d6ae6dd7e93ea8c3a23dba987
SHA1 a71cdf8c52235930d08a4874039693fdc82e6327
SHA256 543f13a90187beb6441890f93979f00b8efac566716c71d465ee731ba21b7d26
SHA512 79fd0ea1cf0b0ca67ac7eec0cb6ea684d6ccb6243957adda88d95fc3a21997b7a07a0156d87447da3c5165c198388404f72d9d41cb335955071e4692c332a0bb

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\PmNLAq2f0t_lcD3LTchFOVy6h-U.br[1].js

MD5 bed1cc02420cf32c17391e0398e3ca5a
SHA1 3e1090349900bdb30176f5dd1795872cfcfadb26
SHA256 217acb853dc6e85c93c8bfa3a6c1d75a921a431db1a84cc6bc7e7afd38bf4ad9
SHA512 869d58ea5c29ffa8f782b52ce40ee4163abe5c3bbd324265d01ab108b63f9b9d4f861b34a659a5bb8c505d18fd214a9d7a7dc8754365c6dadb3d94e4ef0acf4a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\TjyWAmemrltxca9Tew0hTL__JHg.br[1].js

MD5 a5c8347d508377bfe32f8552cae03433
SHA1 262e55e266afe8fa8cd2a3e5e99bb1b80128c1d5
SHA256 aa03263ed1863a42418d316869fbbc0bc1faad3a1983b444ee73ed6636779b7f
SHA512 93b6731e9410ebd804dae3ad0bb400887517aab2b93cef8b0927b331280979d9ae14b0ca42d6a860c6468e5b54295d7e298ba768139db3e280d4b922681b0065

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\MHGveHjpT20MyFEdoL1KWdpZGoU.br[1].js

MD5 72eb59b535349ec6a1f05224731e1141
SHA1 888ccdfe928f7d14b2ccfa896ba0bf6e8bf9f602
SHA256 e4b8926b77eb745ba926945450ae3a54f6e6d7e91871e0cb29d96b8036acb1e1
SHA512 eb7875a0ab1b99c20286c2a6a2057f600583824ff2e36f619202c0f0a413c883be6c7fe9bf7c534d580260f53fb9308464fdb41be36a15a1bf321b3deda6bf69

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\ma_TCbjmjpD5Cjb8bEBjSHKLSuQ.br[1].js

MD5 39d5fb779f37d1171ca3cabdf9390ddb
SHA1 2c1629c3f34d4ba4bf3d0fbcec2f226e7512fe6c
SHA256 ab155d7c07ca36dcbadc72956a59fc267ef2e4d57fe4c4e29cad59a6fb2e89ae
SHA512 78ea6557844fa23e174f007ec3535b7d6332b3ed523d491ec546aae2457175ce9437f9de5f8273df505a23ac490e25ed027eee4ad88a2ba9f07dd1758230f02b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\tnqblgZNWS_oGvSvszmDIkOmB80.br[1].js

MD5 0bafb033e93a012c059886bae732e934
SHA1 3c8a32905bd1c95bbab7914b09079b442320e428
SHA256 884be8f6c6a93e3d82a49391ab8fa4b7745c8ebdaf884cb0b7968f8a6c6c4f0a
SHA512 21050e839d08256342a08e288068f28b029acb3da74b80d4ff69b6a5debf5c2f3d93579cb66cbf3018607dd593f63ed2279f9fe570155016934e24c1051fed85

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\NW_w0EXs3h3l9N3PeqyVuRIrqp8.br[1].js

MD5 1219dc0fc961884c63e3746a49d110d3
SHA1 394c2fc179a2701bb15efab41a3fa052258603f9
SHA256 58ab30f993e014d3ee0e952c74811a8b34b13db0ac41a97e94606c507bb0f798
SHA512 6403ff66b8a5fd0ea11d27ec5c379eceeb9ad66762ffa773ceb0521eadb85828f99b8ed8223683e4e164180bd5e984f000335f3337d532cfe21e9aa5eed5c57e

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\B41j9eGM1DLNjQd-XrgY_sctGDk.br[1].js

MD5 08caa80b9ebedd92f3b935ab00ae92ee
SHA1 d795bb0fa8604d0a0f0f9550b0dc6046794a7501
SHA256 e2de191955db0403bc58126b270e891f5fd7c2be9eb78dc07c893c10f87ceba2
SHA512 683c328377d7f435fd18a85a65585f06e3f232e066e72afcbf54402a1b1a1153e51aa94e479c22915a98bb7cab9f3d7d9c0ee3305afb9670af5eaee56612e2f4

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\TFi00n9kt1lqPoE9f5YVPavsHbE.br[1].js

MD5 f4995a452a1152dbe4cb468dfd0b5331
SHA1 1686c393d11997201fcda1c5c626e3f81839a3ce
SHA256 7edfdddf8032cbff4286cb3ae77e68f478485bd96cbfc0c8a84852415e10a25c
SHA512 cc141089f2e4009b279eb320162000ac705918b7bf548a68062a3b3ea337b502cb5658354f6541e2325b2a1184c8b380c46ba152fd76d9e5da315fb5dc4bc21d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\fYa4G4wbz4PjD3tZaW3pycMuo2c.br[1].js

MD5 78ba2bac4274ebd7d060d6f02ae001d0
SHA1 1a47860dc9aedfe69ddc6e14a6c4bfc583c24d4e
SHA256 b908d312f517d62b6ecf48bd2fcdd83918e098485fe9be42139aec090775fac6
SHA512 00dcd24f8d096ee625feaf2e8376777d94535488871716dd6682ede69c60231a3dde168c76336a17a3bd6c4327ec138e33e1c9189dfe7427c5d4ee97b2374ce9

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\x2emqXiwLnoij1FAO-zonC2BP_I.br[1].js

MD5 e4beab3a36e7ae0ce172d24730a979a4
SHA1 ad06a095b6a09c73bf2ca1793222ef13d23c228d
SHA256 1adef582c859ed9b4f071cd3196b66ac13503c1346176e78837abccb390249a1
SHA512 9a0503536a80348e2467a4a91df33eabbd1688e93b3d8e68e538a7e39b094a1aeacde7e23746a7804f180b64f49ec22bfdc24a10104e4a631464891c3133d19f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\WjC77O8uVx9--UZpQC4Qfpa7qaE[1].js

MD5 10102e62e2b6e663ed22e989af46c43e
SHA1 1edc8b99bcfb0cdfffead624663d6c127b04398d
SHA256 fbfdbb1fe8b890ca294b4d46b4e747949d618b12bf0f9476553fdde6c7a425e2
SHA512 104f2e4767c6e72e75ed009c13eebe71349c3a28d01e7d972a3c5fe9b272da0d94d9d09bffc82411960755babb52a9ace12baa8a1823d47687a70ae75001d885

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\qwce00QJxdHzNxXh5H1mBc8QgBU.br[1].js

MD5 2166c09ea15ba88e843d4e84df2c48a3
SHA1 cbff10ff66823d5ef13309a7913c600eeaeba187
SHA256 02f6e697a3aab3be32f5fb28488862bf9ed344b4d60ccdf85cd1e244ff285c62
SHA512 5ad51b625e96afb5e3452df6214b1bc63676e46490bfc15efb3fe00c27adc35d4336a85d00f9d37a840e3d98b61fd90ded6c5a18452f03033be9ac4c05ad24b0

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\XHTz08Zi0c6sFHzx8iGuzDkeBxQ.br[1].js

MD5 89da4dc306ecb647431b4af296889cfb
SHA1 090713319cc24df43749e2469bdac13744a6c247
SHA256 3729d8b9b7abcb42b6faf16cf2722ca841af8a249023d02cf2124b6aabe8bca9
SHA512 fbb1f657751609b8b8dac2e02101c6a1813c25db7e44674361534b5041c9fc2aafbbcc6e57383040d5068e43f0cf0d0d93e1ea994b2a0f4ff46d6d50e38861b1

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\TueNRc9LlMsxXyLmvbO3Lx8gjjs.br[1].js

MD5 cf959b39bf34de05f7fa4de498b25a6b
SHA1 cf1f70e19b79db53504124bd987d6aee2cc0ce4c
SHA256 390ce0872575dd423793f621116accb0e0a567d4200df29e302463ef8a5e9db6
SHA512 62f8f0159cbe2bcd6f0a01a880a48d63bbb6ca20b40f689fcf3db8706e95945e6e7109d41c3dc2b6351ad53c06fe1e4f371db7a083318dcd6be1d48aba4000f8

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\I_ndi6vVBymh23DuqRe-LcSg9Uk.br[1].js

MD5 c04ff9174ae73dc28db8a8e4aec5aeaa
SHA1 31a8790654c9012e24574c8d3496743cd355a6e2
SHA256 fd5483ad8cc2e5851b4d4f1826b693b21129352d41ab1a4a15e6d5fe938b95e1
SHA512 281f347fe3ee2699acecc272db7ac4e8ed5f0e6580a5a9dfdba5a2b5221ab43c0889a29ed0f57f9b5cbe24817a6989d52403c90e6e76888dbba87615ed86cf08

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\Nz3080e44w3456W4QiR1L5nz6Tg.br[1].js

MD5 5a1a81312bf61e94fc97db3a171c2240
SHA1 5b16c57ade22cc6948296b564d0e9b3fa7c81a49
SHA256 3e371f38691430d58c417a3ccb0c9fb4f9f7ed8e92321c42d2cf6b680fb349f9
SHA512 75bd3bac62bdd1105e460bd89a1372bc3f0bf47da4c7b49e758cb175d9a52bd77090ded7af2ce0e6e804e292495ffa44d004e1c6862f39eacc44f1fd488af5e7

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\BP6PAIHB\EmG-XMIMCcq8zmcVBBO7jkFERAE[1].js

MD5 3e4edb2eb04a481fa178a913b0be387a
SHA1 1261be5cc20c09cabcce67150413bb8e41444401
SHA256 2d4a25ad08e943d4ea3f7fa7c1b17350ef6759b8c99fac2501f9b1920f2e9b48
SHA512 96605553e8eac4f95033242ec19f79a80d2f42d36bb01d564073ccdd6d78f509dd9046edad7ea5f6a02f1718ae927002f424dafd9f61d30f44c66cd898b2953b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OPXSX38P\sbi[2].htm

MD5 139da2f7c2b707a7c3a2e2d8b7d0863b
SHA1 dbb395168249d424a80f5d6e9c4350ea2f75bd41
SHA256 c958a236dccb951bd8b338285685e501402eeae33db926fd0dd5712672f24515
SHA512 057c09e788d4fa6a0b724e2c8a3980b89bd084a0c833bc77712147164b035376238efc0848838f08de240adbd83beb523d899dbb7bbaab4984e2708e8764106c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\NJPeXRPI4yyNaXUHIeOQwQkEzeo.br[1].js

MD5 a329d68c29b855079673cd57fdeb17d5
SHA1 6e60280fa765a583a2bdf359ad3d3d8289963f25
SHA256 c8c9892bd8650d840fe82c698c2b49f3ef711b95fecf617c23bf33eeb310b0ff
SHA512 ac67fe7cbd8844179e7eb6df0643e30694dd41e87c90215b9be37046c95cae10e020cd176ea3a4f3ea0620b7e3f574d0ee2a770299b122b6cf65e767b457cac5

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\WjLJz0ZZ3W6qclUa_RsS6VdZFzE.br[1].js

MD5 6deb575ed015ba9f359671380474ef88
SHA1 0f8f36fa0b0cbc56fa091dbd60d918a0c1f2c99a
SHA256 f015ed4a8bf649fbe3333f1b9e3214ab9cd495bbdd6387812ed79039f2ddd394
SHA512 d3ace5a16cba1245128b38ef256ec2420a44c929830540dce0f8539ff45dcf833257a82f132c4316d9acfa907823741ae4146a67c99242b0ee1b1ec9471e40e8

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\HTTYDV38.cookie

MD5 8294ee26ad5f825e211b3c5f0848776f
SHA1 72d67f0c89978c9cf43dec010806f6da2f789847
SHA256 056a7f9647b8688576a94066b379d9adccef5d3079e0c300c87f8ae6c607f0d6
SHA512 27b22ec78e7daafb4bf97b08a2cab17c7ef7f014a7835935cf6f8e0ca18c97cd003a75a369d524d464e8f1babee5d56937108032bf28ce3631cc1079720969cf

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TYAA4AZZ\2px66ekbvo_tgUawZtULh3CktBY.br[1].js

MD5 b144847389d28f2c8f850c5c7f0e7013
SHA1 6425c985a78df22769636ffa15022a47c6122dee
SHA256 4512f9c1de8ebf48d491ef4d0e5538a42f003aed748668841228541c189a4ac1
SHA512 dc7c04c4de409107c2bf194072b8f91c2b5485fdbf3ffae4cedec57865d24f763e885df28c5a5b7816f975b1f9c6e4d225ba755102ec6110f9b8007f92499108

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

MD5 b8cb3d9490ad4195f641caf0642e33db
SHA1 f760d3635e743517cb7e3234373b6fbbe6fe571f
SHA256 034ba78deb20d29c228d3ad79e71ccc016ccc4f8edef7f18b2f0dbb3622af0aa
SHA512 5e027bc53a44ab1e2974f0cedab9e063444c707afc418facadc6bdd2fe0d9c9af186550a8570178240dfcf36838616deedb8843531e70ea2d4584051db9c3add

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

MD5 8aac3f9a9efd6c016fb32fb4847b0310
SHA1 efa34280b330dbd44b1d40805468e8910e477705
SHA256 4ddd458a7d2d28eb1a697f0effb8b946b8ede67f5dbb5dd2d9f0027ae8036555
SHA512 966a71d543e5683ce5d3734ad9da5d5f3b8bd67197207cae125f6e549ec06765d44431bdf97c148b09d64446d8fa68f59b916531de88a664fc8c0fca90cbd0eb

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\~DF6577103ABC772B41.TMP

MD5 a0cc512f73c1c00719ba01cbedee1b35
SHA1 ed99a2139c6bff8c67293dbca7b45b433bbee757
SHA256 d2e2578da4f9c8b89cddfdc1d1c9497dccfc624db5a8f3e7bc76e58f0d38a3e9
SHA512 3a4ab5aadffc86ff9b20ef7f83e22bb58658d64d2ca9233de768ba0f6eebbb23ed0813b40f0fb20c161bc511f25f7eb06c0cf0b1b5d6890b583954f35df99e32

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2b7acdhd.default-release\prefs-1.js

MD5 7f4e63a850bea179472553abe6bfdb1c
SHA1 a1a218ee2fe841d91779bfe2984dc69359efab83
SHA256 6316a1937b1e386376f1e9d46bddbffa8a17fd83b628b9fc55d877da19203f16
SHA512 7ea4001cf07bab1337794c1768ff4d32f426e5f1c0fc396eaef91ab04fc7e974e25d88001074711a7922092079c1fd6d03fb28182fb89f5697a3c36d54257e62

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2b7acdhd.default-release\sessionstore-backups\recovery.jsonlz4

MD5 074fc4aaafeed0a9a70483a60add1c6e
SHA1 a97ab7b2a9c3200a1004263f913a30bdb0a35f04
SHA256 ba1347ece7f34d6a69b52ed31b0f69fe2638b78d1e07663f5a6f4a1ed6b75320
SHA512 749fc45bcd0dd41fddadc81bc71b5005c171226d643a4383bfa0e539eaa7f5d9a9a82a2ea2a727bfaa7e1d11e1bac126a60a48f39f863379526e70e3e5cc0843

C:\Users\Admin\Downloads\WannaCry-main.WJ78QakQ.zip.part

MD5 3c7861d067e5409eae5c08fd28a5bea2
SHA1 44e4b61278544a6a7b8094a0615d3339a8e75259
SHA256 07ecdced8cf2436c0bc886ee1e49ee4b8880a228aa173220103f35c535305635
SHA512 c2968e30212707acf8a146b25bb29c9f5d779792df88582b03431a0034dc82599f58d61fc9494324cc06873e5943f8c29bffd0272ca682d13c0bb10482d79fc5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2b7acdhd.default-release\sessionstore-backups\recovery.jsonlz4

MD5 99b4985cc3e5a4471f2a41c268440797
SHA1 5b894ed0e2a9561a9824dd47756fff2ae9920511
SHA256 068ca9dc9d38f55054921b5b2c8bf081b021a2ed943d80c358ab01b7533d54d2
SHA512 3690165b0f7526e4322715f26dc80bfbe337e35dfa981cab445a4eca00944a38cf81996a8c292bb0100b54e55cf522e5e829226d81e05d05b407f6417b89fe11

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\msg\m_finnish.wnry

MD5 35c2f97eea8819b1caebd23fee732d8f
SHA1 e354d1cc43d6a39d9732adea5d3b0f57284255d2
SHA256 1adfee058b98206cb4fbe1a46d3ed62a11e1dee2c7ff521c1eef7c706e6a700e
SHA512 908149a6f5238fcccd86f7c374986d486590a0991ef5243f0cd9e63cc8e208158a9a812665233b09c3a478233d30f21e3d355b94f36b83644795556f147345bf

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\@[email protected]

MD5 7bf2b57f2a205768755c07f238fb32cc
SHA1 45356a9dd616ed7161a3b9192e2f318d0ab5ad10
SHA256 b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
SHA512 91a39e919296cb5c6eccba710b780519d90035175aa460ec6dbe631324e5e5753bd8d87f395b5481bcd7e1ad623b31a34382d81faae06bef60ec28b49c3122a9

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\@[email protected]

MD5 7e6b6da7c61fcb66f3f30166871def5b
SHA1 00f699cf9bbc0308f6e101283eca15a7c566d4f9
SHA256 4a25d98c121bb3bd5b54e0b6a5348f7b09966bffeec30776e5a731813f05d49e
SHA512 e5a56137f325904e0c7de1d0df38745f733652214f0cdb6ef173fa0743a334f95bed274df79469e270c9208e6bdc2e6251ef0cdd81af20fa1897929663e2c7d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2b7acdhd.default-release\sessionstore-backups\recovery.jsonlz4

MD5 84d94a1d1ddb1efa7ea72ca0027988e0
SHA1 2dbb97f77e84cad3d09665a778f60824e9a82176
SHA256 9f3cac39aa352a454904a06cbbb00abffd0d3f6ced7981cf3e08fcece41de2f1
SHA512 7270d93b7f00e3519ca96ae7fd7a366072ecaff37d73ee7f52646804f202d2e0a10cdb69c86390c0aba9b802510c89789fa0e87282f1f77393fb94d55968048d

C:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\@[email protected]

MD5 1acaa698221b447154ad53bbfce45b04
SHA1 e3e39d48501c5923612e7baeaf75c168c2ab824c
SHA256 fb2c8167ffa49839aa8da3bf21310272bbe1814b62f8a45e82c18f7013b7623d
SHA512 a549705ddc409bead20c902eb439187e887cbae97bffb81284747b63bbd341bacefeeca79cd04a286071a9ec63d43e485617ba5c705481a12fcacf6c5435b524

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\msg\m_filipino.wnry

MD5 08b9e69b57e4c9b966664f8e1c27ab09
SHA1 2da1025bbbfb3cd308070765fc0893a48e5a85fa
SHA256 d8489f8c16318e524b45de8b35d7e2c3cd8ed4821c136f12f5ef3c9fc3321324
SHA512 966b5ed68be6b5ccd46e0de1fa868cfe5432d9bf82e1e2f6eb99b2aef3c92f88d96f4f4eec5e16381b9c6db80a68071e7124ca1474d664bdd77e1817ec600cb4

C:\Users\Default\Desktop\@[email protected]

MD5 c17170262312f3be7027bc2ca825bf0c
SHA1 f19eceda82973239a1fdc5826bce7691e5dcb4fb
SHA256 d5e0e8694ddc0548d8e6b87c83d50f4ab85c1debadb106d6a6a794c3e746f4fa
SHA512 c6160fd03ad659c8dd9cf2a83f9fdcd34f2db4f8f27f33c5afd52aced49dfa9ce4909211c221a0479dbbb6e6c985385557c495fc04d3400ff21a0fbbae42ee7c

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\t.wnry

MD5 5dcaac857e695a65f5c3ef1441a73a8f
SHA1 7b10aaeee05e7a1efb43d9f837e9356ad55c07dd
SHA256 97ebce49b14c46bebc9ec2448d00e1e397123b256e2be9eba5140688e7bc0ae6
SHA512 06eb5e49d19b71a99770d1b11a5bb64a54bf3352f36e39a153469e54205075c203b08128dc2317259db206ab5323bdd93aaa252a066f57fb5c52ff28deedb5e2

C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\TaskData\Tor\tor.exe

MD5 fe7eb54691ad6e6af77f8a9a0b6de26d
SHA1 53912d33bec3375153b7e4e68b78d66dab62671a
SHA256 e48673680746fbe027e8982f62a83c298d6fb46ad9243de8e79b7e5a24dcd4eb
SHA512 8ac6dc5bb016afc869fcbb713f6a14d3692e866b94f4f1ee83b09a7506a8cb58768bd47e081cf6e97b2dacf9f9a6a8ca240d7d20d0b67dbd33238cc861deae8f

C:\Users\Admin\AppData\Roaming\tor\cached-microdescs.new

MD5 7336d27b8973888b0a092d0c9bd588cb
SHA1 3059de7fb5a10b0c84354a39d731553c105b27c3
SHA256 efdebd0c5a53dfec36d6a1edd7bf2e13ff1e16078be8a5428332e70ff9767223
SHA512 23fbb82f64c770a336ac0c284f08ce7d56f42f752eb8b3fa17cf45e74f0293f366eebd2c9119cef011b4c0846199326da3b0b455572c5f3af099cc235b932a52

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 115012af27db168bd0c7cb645d2b2f9a
SHA1 cd7c9e9ce29588252c157b60d20422f116cb31ba
SHA256 789b36cef961bf857deaefa671861a616b16ddc8576d6de218654ee3b26df72d
SHA512 6568827e7fe46e58811b9e51f0ae5e9931678cba228f5e065632de398d36c8269105391f7908f578476cd84851ebc2ff08d1217c19e1901cb9a356ae7ff1116e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2b7acdhd.default-release\sessionstore.jsonlz4

MD5 8f704f5681c60584e7ccef8313dd4f6b
SHA1 62d56f4c61a40e16ac3be18a85d4341c690741ca
SHA256 84fdffd936b70654b4433f525287edcbc4f4314315d0b002892195ec7516e6bf
SHA512 2181799d9e3d729b692660802d81d99578de56700974ac0c92b2cf371479640aa58a3da3bedff1d395793d8137c3b512d729ad4e1e5db02b850ab1b725008fc6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2b7acdhd.default-release\prefs.js

MD5 a52ec2929f88826ef2a3bde8acd07368
SHA1 dd99b046f084731f783ed4529bf6e75d25c37ec3
SHA256 9557bba2e63fb30ac013e8f04bbb3e23db8e30b349ddd19ba388376fced26ae0
SHA512 9f736133d1d71933e06191e6df974da122ad9a581719f25d52ce8813df958c89b5aabed48d34151316b46ef155dc89c6da62fd0e404b0a74092bd6a9f77adf94