Malware Analysis Report

2025-08-10 22:35

Sample ID 240803-p6546atdqq
Target http://google.com
Tags
discovery
score
6/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
6/10

Threat Level: Shows suspicious behavior

The file http://google.com was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery

Drops desktop.ini file(s)

Network Service Discovery

Legitimate hosting services abused for malware hosting/C2

System Location Discovery: System Language Discovery

Browser Information Discovery

Modifies registry class

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SendNotifyMessage

Suspicious use of SetWindowsHookEx

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of FindShellTrayWindow

Suspicious use of WriteProcessMemory

Checks processor information in registry

Enumerates system info in registry

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-03 12:57

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-03 12:57

Reported

2024-08-03 13:02

Platform

win10v2004-20240802-en

Max time kernel

316s

Max time network

319s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.com

Signatures

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\system32\svchost.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A pastebin.com N/A N/A
N/A pastebin.com N/A N/A
N/A pastebin.com N/A N/A

Network Service Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Windows\System32\GameBarPresenceWriter.exe N/A

Browser Information Discovery

discovery

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\McTools-mcdecryptor\McTools-mcdecryptor\McEncryptor.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1194130065-3471212556-1656947724-1000\{DD8EDB82-B5F9-4E32-9885-B05BE311C76A} C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1194130065-3471212556-1656947724-1000\{35DA8A7E-101D-470D-A681-CAA5AB9FCA04} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1194130065-3471212556-1656947724-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1194130065-3471212556-1656947724-1000\{FF47D72D-BEA4-4582-8BAC-A7EFA26184BD} C:\Windows\system32\svchost.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3588 wrote to memory of 1772 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1772 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 692 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 692 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3588 wrote to memory of 1644 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.com

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa4b2446f8,0x7ffa4b244708,0x7ffa4b244718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2824 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5620 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5620 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4140 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4160 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3392 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=2440 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3600 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3604 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5264 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3060 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6388 /prefetch:8

C:\Program Files\Java\jre-1.8\bin\javaw.exe

"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\MinecraftDecompiler.jar"

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files\Java\jre-1.8\bin\javaw.exe

"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\MinecraftDecompiler.jar"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6872 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6184 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5656 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6200 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3416 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5908 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2612 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6948 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4172 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\McTools-mcdecryptor\McTools-mcdecryptor\McEncryptor.exe

"C:\Users\Admin\Downloads\McTools-mcdecryptor\McTools-mcdecryptor\McEncryptor.exe"

C:\Users\Admin\Downloads\McTools-mcdecryptor\McTools-mcdecryptor\McDecryptor.exe

"C:\Users\Admin\Downloads\McTools-mcdecryptor\McTools-mcdecryptor\McDecryptor.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7008 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6296 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6276 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5856 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1764 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5100 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6400 /prefetch:1

C:\Users\Admin\Downloads\McTools-mcdecryptor\McTools-mcdecryptor\McDecryptor.exe

"C:\Users\Admin\Downloads\McTools-mcdecryptor\McTools-mcdecryptor\McDecryptor.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5096 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7532 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7740 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7988 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6444 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6208 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7260 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8272 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8524 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9064 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9248 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9524 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9768 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9740 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10080 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9076 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8628 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8640 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1280 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8260 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9616 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9428 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8552 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7408 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9244 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9536 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9168 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10016 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7932 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,17217367689049126890,9169376070446314144,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9996 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 google.com udp
NL 142.250.102.101:80 google.com tcp
NL 142.250.102.101:80 google.com tcp
US 8.8.8.8:53 www.google.com udp
NL 142.250.27.103:80 www.google.com tcp
NL 142.250.27.103:443 www.google.com tcp
US 8.8.8.8:53 support.google.com udp
US 8.8.8.8:53 101.102.250.142.in-addr.arpa udp
US 8.8.8.8:53 73.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 103.27.250.142.in-addr.arpa udp
NL 142.250.27.103:443 www.google.com udp
US 8.8.8.8:53 94.27.250.142.in-addr.arpa udp
US 8.8.8.8:53 94.102.250.142.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 13.107.21.237:443 g.bing.com tcp
US 8.8.8.8:53 237.21.107.13.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
GB 184.28.176.107:443 www.bing.com tcp
GB 184.28.176.107:443 www.bing.com tcp
US 8.8.8.8:53 107.176.28.184.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 184.28.176.81:443 th.bing.com tcp
GB 184.28.176.112:443 r.bing.com tcp
GB 184.28.176.112:443 r.bing.com tcp
GB 184.28.176.81:443 th.bing.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
IE 40.126.31.71:443 login.microsoftonline.com tcp
US 8.8.8.8:53 81.176.28.184.in-addr.arpa udp
US 8.8.8.8:53 112.176.28.184.in-addr.arpa udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 71.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 89.33.18.104.in-addr.arpa udp
GB 184.28.176.81:443 th.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 86.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 8.8.8.8:53 107.12.20.2.in-addr.arpa udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 185.199.108.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 8.8.8.8:53 camo.githubusercontent.com udp
US 185.199.108.133:443 camo.githubusercontent.com tcp
US 185.199.108.133:443 camo.githubusercontent.com tcp
US 185.199.111.133:443 camo.githubusercontent.com tcp
US 185.199.109.133:443 camo.githubusercontent.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 154.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 133.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 133.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 collector.github.com udp
US 140.82.112.22:443 collector.github.com tcp
US 8.8.8.8:53 api.github.com udp
US 140.82.112.22:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 22.112.82.140.in-addr.arpa udp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 8.8.8.8:53 73.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 31.243.111.52.in-addr.arpa udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 archive.org udp
US 207.241.224.2:443 archive.org tcp
US 207.241.224.2:443 archive.org tcp
US 8.8.8.8:53 polyfill.archive.org udp
US 207.241.239.241:443 polyfill.archive.org tcp
US 8.8.8.8:53 athena.archive.org udp
US 207.241.225.195:443 athena.archive.org tcp
US 8.8.8.8:53 241.239.241.207.in-addr.arpa udp
US 8.8.8.8:53 2.224.241.207.in-addr.arpa udp
US 8.8.8.8:53 195.225.241.207.in-addr.arpa udp
US 8.8.8.8:53 ia904707.us.archive.org udp
US 207.241.236.27:443 ia904707.us.archive.org tcp
US 8.8.8.8:53 27.236.241.207.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 184.28.176.75:443 r.bing.com tcp
GB 184.28.176.16:443 th.bing.com tcp
US 8.8.8.8:53 75.176.28.184.in-addr.arpa udp
US 8.8.8.8:53 16.176.28.184.in-addr.arpa udp
US 8.8.8.8:53 www.virustotal.com udp
US 74.125.34.46:443 www.virustotal.com tcp
US 74.125.34.46:443 www.virustotal.com tcp
US 8.8.8.8:53 www.recaptcha.net udp
US 8.8.8.8:53 46.34.125.74.in-addr.arpa udp
US 8.8.8.8:53 recaptcha.net udp
US 8.8.8.8:53 97.27.250.142.in-addr.arpa udp
NL 142.250.27.103:443 www.google.com udp
NL 142.250.27.103:443 www.google.com tcp
US 8.8.8.8:53 102.27.250.142.in-addr.arpa udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 74.125.34.46:443 www.virustotal.com tcp
US 8.8.8.8:53 95.27.250.142.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 aefd.nelreports.net udp
GB 173.222.211.40:443 aefd.nelreports.net tcp
GB 173.222.211.40:443 aefd.nelreports.net tcp
GB 173.222.211.40:443 aefd.nelreports.net udp
US 8.8.8.8:53 40.211.222.173.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 184.28.176.10:443 th.bing.com tcp
US 8.8.8.8:53 10.176.28.184.in-addr.arpa udp
US 8.8.8.8:53 pastebin.com udp
US 104.20.4.235:443 pastebin.com tcp
US 104.20.4.235:443 pastebin.com tcp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 235.4.20.104.in-addr.arpa udp
US 8.8.8.8:53 14.25.17.104.in-addr.arpa udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 services.vlitag.com udp
US 104.22.59.199:443 services.vlitag.com tcp
US 104.22.59.199:443 services.vlitag.com tcp
US 8.8.8.8:53 dsp.vlitag.com udp
US 8.8.8.8:53 cmp.inmobi.com udp
US 8.8.8.8:53 s3.vlitag.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
GB 18.244.114.102:443 cmp.inmobi.com tcp
NL 142.250.27.156:443 securepubads.g.doubleclick.net tcp
GB 54.192.139.162:443 c.amazon-adsystem.com tcp
NL 142.250.102.95:443 imasdk.googleapis.com tcp
US 8.8.8.8:53 199.59.22.104.in-addr.arpa udp
US 8.8.8.8:53 102.114.244.18.in-addr.arpa udp
US 8.8.8.8:53 162.139.192.54.in-addr.arpa udp
US 8.8.8.8:53 156.27.250.142.in-addr.arpa udp
US 8.8.8.8:53 95.102.250.142.in-addr.arpa udp
NL 142.250.27.156:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 api.cmp.inmobi.com udp
DE 52.57.223.191:443 api.cmp.inmobi.com tcp
NL 142.250.27.156:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
GB 52.84.90.86:443 config.aps.amazon-adsystem.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 191.223.57.52.in-addr.arpa udp
US 8.8.8.8:53 86.90.84.52.in-addr.arpa udp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 6.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 id.a-mx.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
NL 79.127.227.46:443 id.a-mx.com tcp
DE 162.19.138.117:443 id5-sync.com tcp
US 8.8.8.8:53 c3.a-mo.net udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 79.127.216.47:443 c3.a-mo.net tcp
US 8.8.8.8:53 dnacdn.net udp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
NL 178.250.1.11:443 dnacdn.net tcp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 46.227.127.79.in-addr.arpa udp
US 8.8.8.8:53 117.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 47.216.127.79.in-addr.arpa udp
US 8.8.8.8:53 116.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 useast.quantumdex.io udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 prebid-eu.creativecdn.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 px.vliplatform.com udp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
IE 99.81.13.238:443 ap.lijit.com tcp
IE 99.81.13.238:443 ap.lijit.com tcp
NL 185.89.211.84:443 ib.adnxs.com tcp
NL 185.89.211.84:443 ib.adnxs.com tcp
NL 185.89.211.84:443 ib.adnxs.com tcp
US 141.101.120.10:443 px.vliplatform.com tcp
US 141.101.120.10:443 px.vliplatform.com tcp
US 141.101.120.10:443 px.vliplatform.com tcp
US 141.101.120.10:443 px.vliplatform.com tcp
US 141.101.120.10:443 px.vliplatform.com tcp
US 141.101.120.10:443 px.vliplatform.com tcp
US 104.22.37.96:443 useast.quantumdex.io tcp
US 104.22.37.96:443 useast.quantumdex.io tcp
US 104.22.37.96:443 useast.quantumdex.io tcp
US 104.22.37.96:443 useast.quantumdex.io tcp
US 104.22.37.96:443 useast.quantumdex.io tcp
NL 185.184.8.90:443 prebid-eu.creativecdn.com tcp
NL 185.89.211.84:443 ib.adnxs.com tcp
IE 99.81.13.238:443 ap.lijit.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net udp
US 8.8.8.8:53 b0ef8bac8db7aff49400be39e89026d9.safeframe.googlesyndication.com udp
US 8.8.8.8:53 cdn.prod.uidapi.com udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 connectid.analytics.yahoo.com udp
US 8.8.8.8:53 static.criteo.net udp
NL 142.250.27.132:443 b0ef8bac8db7aff49400be39e89026d9.safeframe.googlesyndication.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 104.22.52.86:443 cdn.id5-sync.com tcp
GB 18.245.255.11:443 cdn.prod.uidapi.com tcp
GB 18.245.162.34:443 connectid.analytics.yahoo.com tcp
US 8.8.8.8:53 oa.openxcdn.net udp
US 34.102.146.192:443 oa.openxcdn.net tcp
US 8.8.8.8:53 96.37.22.104.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 84.211.89.185.in-addr.arpa udp
US 8.8.8.8:53 156.102.250.142.in-addr.arpa udp
US 8.8.8.8:53 238.13.81.99.in-addr.arpa udp
US 8.8.8.8:53 11.255.245.18.in-addr.arpa udp
US 8.8.8.8:53 86.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 132.27.250.142.in-addr.arpa udp
US 8.8.8.8:53 34.162.245.18.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 cdn-ima.33across.com udp
US 104.18.35.167:443 cdn-ima.33across.com tcp
US 104.18.35.167:443 cdn-ima.33across.com tcp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 oajs.openx.net udp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 34.120.107.143:443 oajs.openx.net tcp
GB 18.245.143.83:443 tags.crwdcntrl.net tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
NL 142.250.102.132:443 tpc.googlesyndication.com tcp
US 34.120.107.143:443 oajs.openx.net udp
US 8.8.8.8:53 192.146.102.34.in-addr.arpa udp
US 8.8.8.8:53 167.35.18.104.in-addr.arpa udp
US 8.8.8.8:53 87.70.96.34.in-addr.arpa udp
US 8.8.8.8:53 143.107.120.34.in-addr.arpa udp
US 8.8.8.8:53 83.143.245.18.in-addr.arpa udp
NL 142.250.102.132:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 cdn.ampproject.org udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 google-bidout-d.openx.net udp
US 34.98.64.218:443 google-bidout-d.openx.net tcp
US 8.8.8.8:53 www.google.com udp
NL 142.250.27.105:443 www.google.com udp
US 8.8.8.8:53 132.102.250.142.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 105.27.250.142.in-addr.arpa udp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 ce.lijit.com udp
US 8.8.8.8:53 sync.quantumdex.io udp
US 151.101.65.108:443 acdn.adnxs.com tcp
IE 54.154.198.113:443 ce.lijit.com tcp
NL 142.250.27.132:443 cdn.ampproject.org tcp
NL 142.250.27.132:443 cdn.ampproject.org tcp
NL 142.250.27.132:443 cdn.ampproject.org tcp
NL 142.250.27.132:443 cdn.ampproject.org tcp
NL 142.250.27.132:443 cdn.ampproject.org tcp
NL 142.250.102.132:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 10.120.101.141.in-addr.arpa udp
US 8.8.8.8:53 113.198.154.54.in-addr.arpa udp
US 8.8.8.8:53 108.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 eb2.3lift.com udp
US 76.223.111.18:443 eb2.3lift.com tcp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 onetag-sys.com udp
GB 2.18.108.192:443 ads.pubmatic.com tcp
DE 51.89.9.251:443 onetag-sys.com tcp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
US 8.8.8.8:53 sync.adkernel.com udp
NL 185.235.87.215:443 ag.gbc.criteo.com tcp
NL 185.235.87.235:443 gem.gbc.criteo.com tcp
US 8.8.8.8:53 apps.identrust.com udp
NL 77.245.57.72:443 sync.adkernel.com tcp
NL 77.245.57.72:443 sync.adkernel.com tcp
GB 23.200.147.41:80 apps.identrust.com tcp
NL 77.245.57.72:443 sync.adkernel.com tcp
NL 185.235.87.215:443 ag.gbc.criteo.com tcp
NL 185.235.87.235:443 gem.gbc.criteo.com tcp
NL 142.250.102.132:443 tpc.googlesyndication.com udp
NL 142.250.27.105:443 www.google.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 52.201.208.6:443 cs-server-s2s.yellowblue.io tcp
NL 77.245.57.72:443 sync.adkernel.com tcp
US 8.8.8.8:53 ads.betweendigital.com udp
DE 51.89.9.251:443 onetag-sys.com udp
IE 34.242.213.176:443 bcp.crwdcntrl.net tcp
NL 188.42.189.197:443 ads.betweendigital.com tcp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 192.108.18.2.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 251.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 72.57.245.77.in-addr.arpa udp
US 8.8.8.8:53 41.147.200.23.in-addr.arpa udp
US 8.8.8.8:53 6.208.201.52.in-addr.arpa udp
US 8.8.8.8:53 sync.1rx.io udp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 ssp.disqus.com udp
US 52.204.84.172:443 ssp.disqus.com tcp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 s.ad.smaato.net udp
GB 108.156.39.126:443 s.ad.smaato.net tcp
DE 52.59.198.80:443 match.sharethrough.com tcp
US 8.8.8.8:53 176.213.242.34.in-addr.arpa udp
US 8.8.8.8:53 197.189.42.188.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 126.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 172.84.204.52.in-addr.arpa udp
US 8.8.8.8:53 80.198.59.52.in-addr.arpa udp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 8.8.8.8:53 csi.gstatic.com udp
FR 142.250.179.99:443 csi.gstatic.com tcp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 99.179.250.142.in-addr.arpa udp
NL 79.127.227.46:443 c3.a-mo.net tcp
NL 178.250.1.11:443 dnacdn.net tcp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 196bf8bddc724096a35c72b590ffd479.safeframe.googlesyndication.com udp
DE 79.127.216.47:443 c3.a-mo.net tcp
NL 178.250.1.11:443 dnacdn.net tcp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 adsystem.pocpoc.io udp
US 8.8.8.8:53 px.pocpoc.io udp
US 34.98.64.218:443 google-bidout-d.openx.net udp
US 172.67.75.64:443 px.pocpoc.io tcp
US 172.67.75.64:443 px.pocpoc.io tcp
US 172.67.75.64:443 px.pocpoc.io tcp
US 172.67.75.64:443 px.pocpoc.io tcp
US 104.26.14.167:443 px.pocpoc.io tcp
US 104.26.14.167:443 px.pocpoc.io tcp
US 104.26.14.167:443 px.pocpoc.io tcp
US 104.26.14.167:443 px.pocpoc.io tcp
NL 185.235.87.215:443 ag.gbc.criteo.com tcp
NL 185.235.87.235:443 gem.gbc.criteo.com tcp
US 8.8.8.8:53 static.vliplatform.com udp
US 8.8.8.8:53 odb.outbrain.com udp
US 151.101.2.132:443 odb.outbrain.com tcp
US 8.8.8.8:53 widgets.outbrain.com udp
US 8.8.8.8:53 images.outbrainimg.com udp
US 8.8.8.8:53 log.outbrainimg.com udp
US 8.8.8.8:53 mcdp-chidc2.outbrain.com udp
GB 95.100.245.166:443 images.outbrainimg.com tcp
GB 2.18.109.60:443 widgets.outbrain.com tcp
GB 2.18.109.60:443 widgets.outbrain.com tcp
US 50.31.142.223:443 mcdp-chidc2.outbrain.com tcp
US 50.31.142.31:443 log.outbrainimg.com tcp
US 8.8.8.8:53 64.75.67.172.in-addr.arpa udp
US 8.8.8.8:53 132.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 167.14.26.104.in-addr.arpa udp
US 8.8.8.8:53 60.109.18.2.in-addr.arpa udp
US 8.8.8.8:53 166.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 31.142.31.50.in-addr.arpa udp
US 8.8.8.8:53 223.142.31.50.in-addr.arpa udp
NL 77.245.57.72:443 sync.adkernel.com tcp
NL 77.245.57.72:443 sync.adkernel.com tcp
NL 77.245.57.72:443 sync.adkernel.com tcp
NL 77.245.57.72:443 sync.adkernel.com tcp
DE 52.59.198.80:443 match.sharethrough.com tcp
NL 185.235.87.236:443 gem.gbc.criteo.com tcp
NL 185.235.87.221:443 ag.gbc.criteo.com tcp
NL 185.235.87.236:443 gem.gbc.criteo.com tcp
NL 185.235.87.221:443 ag.gbc.criteo.com tcp
NL 185.235.87.236:443 gem.gbc.criteo.com tcp
NL 185.235.87.221:443 ag.gbc.criteo.com tcp
US 8.8.8.8:53 exchange.cootlogix.com udp
US 8.8.8.8:53 shb.richaudience.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 143.244.153.54:443 exchange.cootlogix.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
GB 18.154.87.148:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 67.220.226.234:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 148.87.154.18.in-addr.arpa udp
US 8.8.8.8:53 79.241.63.178.in-addr.arpa udp
US 8.8.8.8:53 54.153.244.143.in-addr.arpa udp
US 8.8.8.8:53 234.226.220.67.in-addr.arpa udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
GB 173.222.211.40:443 aefd.nelreports.net udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 sync.cootlogix.com udp
US 8.8.8.8:53 sync.richaudience.com udp
US 159.223.97.109:443 sync.cootlogix.com tcp
DE 157.90.211.246:443 sync.richaudience.com tcp
DE 157.90.211.246:443 sync.richaudience.com tcp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
GB 2.22.101.110:443 secure-assets.rubiconproject.com tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
GB 95.100.245.251:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 token.rubiconproject.com udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 8.8.8.8:53 110.101.22.2.in-addr.arpa udp
US 8.8.8.8:53 109.97.223.159.in-addr.arpa udp
US 8.8.8.8:53 251.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
NL 185.235.87.246:443 gem.gbc.criteo.com tcp
NL 185.235.87.196:443 ag.gbc.criteo.com tcp
NL 185.235.87.246:443 gem.gbc.criteo.com tcp
NL 185.235.87.196:443 ag.gbc.criteo.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 4dd2754d1bea40445984d65abee82b21
SHA1 4b6a5658bae9a784a370a115fbb4a12e92bd3390
SHA256 183b8e82a0deaa83d04736553671cedb738adc909f483b3c5f822a0e6be7477d
SHA512 92d44ee372ad33f892b921efa6cabc78e91025e89f05a22830763217826fa98d51d55711f85c8970ac58abf9adc6c85cc40878032cd6d2589ab226cd099f99e1

\??\pipe\LOCAL\crashpad_3588_GYMRCAKUHXMABSPB

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 ecf7ca53c80b5245e35839009d12f866
SHA1 a7af77cf31d410708ebd35a232a80bddfb0615bb
SHA256 882a513b71b26210ff251769b82b2c5d59a932f96d9ce606ca2fab6530a13687
SHA512 706722bd22ce27d854036b1b16e6a3cdb36284b66edc76238a79c2e11cee7d1307b121c898ad832eb1af73e4f08d991d64dc0bff529896ffb4ebe9b3dc381696

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bca7b992344b7fdf2464edd010e7a79a
SHA1 5b6f247310f5bf5759e7ca5db646889c18bb3a3a
SHA256 45864159d24fc3440595e1cceca3a62674773221a0c7d0b1774253d06171fea8
SHA512 124146d2c99eb54211ef5e506f63232e68138021436207038634ed3b0dbcb11ee37cb61d96abdedadb19070197fdb6e8baf91a0d2dbcfe1edbfabca795c59e08

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 3e552d017d45f8fd93b94cfc86f842f2
SHA1 dbeebe83854328e2575ff67259e3fb6704b17a47
SHA256 27d9c4613df7a3c04da0b79c13217aa69992b441acb7e44bf2a7578ca87d97d6
SHA512 e616436f2f15615429c7c5c37de3990c3e86c5e1da7d75a0f524fc458b75d44a5be1a3648a628d63e1cf8aa062e08b538f2f2bc9c6a0b42157beb24f82c571d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 68f3e850603397b3a7cb40f4a8c32daa
SHA1 5fca2c24692692f5a0c9ab3d9c696ffe484262b7
SHA256 7884c15b5ea62e80d5873fc9671a1a99bca2e3bc28dee78a503177cec0766ddb
SHA512 0b09295d300852947377b91fa70ccf7af13a37b7dedb43f389bbec8f073edf4afc3c3bb48402a026ab35341fd2225ada395f60c0808033bf85d0bcbbebd54467

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f75994438ab315acced864c8e7d75d45
SHA1 d92e8d60a713086c1bbac8a0c5175aeef203b200
SHA256 416967320bc01c1a37dfd1828c274525ef642570134ea2133fb8262e5ef61e87
SHA512 74e4954ec95362188cdeb9f795422bcb950df545cc9b0c7a7fc0c3bb27874b2f1a5c1169f74f7028596e1b6c15a6c7bc57d36e6286e737667947ceee6fbdee47

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 ed3c7f5755bf251bd20441f4dc65f5bf
SHA1 3919a57831d103837e0cc158182ac10b903942c5
SHA256 55cbb893756192704a23a400bf8f874e29c0feee435f8831af9cbe975d0ef85d
SHA512 c79460ded439678b6ebf2def675cbc5f15068b9ea4b19263439c3cca4fa1083dc278149cde85f551cd2ffc2c77fd1dc193200c683fc1c3cdac254e533df84f06

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 24a806fccb1d271a0e884e1897f2c1bc
SHA1 11bde7bb9cc39a5ef1bcddfc526f3083c9f2298a
SHA256 e83f90413d723b682d15972abeaaa71b9cead9b0c25bf8aac88485d4be46fb85
SHA512 33255665affcba0a0ada9cf3712ee237c92433a09cda894d63dd1384349e2159d0fe06fa09cca616668ef8fcbb8d0a73ef381d30702c20aad95fc5e9396101ae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1 386ba241790252df01a6a028b3238de2f995a559
SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 027a77a637cb439865b2008d68867e99
SHA1 ba448ff5be0d69dbe0889237693371f4f0a2425e
SHA256 6f0e8c5ae26abbae3efc6ca213cacaaebd19bf2c7ed88495289a8f40428803dd
SHA512 66f8fbdd68de925148228fe1368d78aa8efa5695a2b4f70ab21a0a4eb2e6e9f0f54ed57708bd9200c2bbe431b9d09e5ca08c3f29a4347aeb65b090790652b5c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 db9b1a9b75e757b94e0a6a302dcd8f62
SHA1 fb69406f541f0e845a082fbaca0f42e1f3d49b43
SHA256 7d00444a83cffb169f944c40b6fe009f62451a2bec014710f6e24c9c4ae003f9
SHA512 c4ff158c3fd5898a8e95acdff92662af607cd19665054017967b40a5b40d672dd9f36545f616e1aeeeeab0ac01391320e1a15a83bfea55360daf89ddb961ea39

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5834c7.TMP

MD5 00645fe53856e60eec4c624172cfdeb3
SHA1 829defa329f8942461debf943f2679ecd1b6efcb
SHA256 6a8c78064e918b637631a7a5ca77266428aa3c7e9ab2063d1e18cf4d329cd5da
SHA512 219df9659f1a2cc278db0c172896832ce569355ece64730dd3637776331d20dc348c09e252bc06e255da87e4a3308e2b5fcf6a612e41ea69c67a8484a8a0c108

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2c08588423779e5c5fad170bb3a39d48
SHA1 2415e5170f7e09a02983224cf053eb567dbe012b
SHA256 06465eafded73256c951852af02566aa02b0a2af4ee996f6b2d9d35153a0aa31
SHA512 1aae19506cec5fd36f78bba1b7f237503dde0715f64dd7fbaebc17182fbda2d7d5bd69eadd794c37876fe3d0dec3c85c4e2de442eb914c92f82145118b99f37b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

MD5 cf604c923aae437f0acb62820b25d0fd
SHA1 84db753fe8494a397246ccd18b3bb47a6830bc98
SHA256 e2b4325bb9a706cbfba8f39cca5bde9dae935cbb1d6c8a562c62e740f2208ab4
SHA512 754219b05f2d81d11f0b54e5c7dd687bd82aa59a357a3074bca60fefd3a88102577db8ae60a11eb25cc9538af1da39d25fa6f38997bdc8184924d0c5920e89c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

MD5 209af4da7e0c3b2a6471a968ba1fc992
SHA1 2240c2da3eba4f30b0c3ef2205ce7848ecff9e3f
SHA256 ecc145203f1c562cae7b733a807e9333c51d75726905a3af898154f3cefc9403
SHA512 09201e377e80a3d03616ff394d836c85712f39b65a3138924d62a1f3ede3eac192f1345761c012b0045393c501d48b5a774aeda7ab5d687e1d7971440dc1fc35

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cfe1f95d63c2533437c33d5206e3e105
SHA1 47ed11abe47b72cdd8065ee394853395ff474067
SHA256 8045a815b1be47e5462e47192afc5ac9d2502808a3713b856feee786094a90be
SHA512 d4df467a98a8837c76c0f2c3d540e1449e1243a991a4313c480d0b39c32d85cc42d1e5e9c3164ce0f322a0e3a2fdbf7dc2d7f6569f4ec32732da33e9f7c37a67

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 59f61c9168bf47cec67bcf16dd0502aa
SHA1 1716393bd931260ef66d768d2ed21d2f048ca6fa
SHA256 368ba36682afcf8c5240975aabd2ce04076c2e4d0323104dfeab50815f132044
SHA512 e00be2641fbf0d8c8c3801062134e470ef3a86f2fa26c7047188c1c3432e24bbac001d6dcf984bdf2e4d908f068eff4950871f935427b4b9de9f171341a81ed2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 2116a6c8a2d67c4a26ace2163137e807
SHA1 118ff5a3848babd1ef25f96d1b6147088ec50d48
SHA256 808c182f5173a529509772526f94a430e09f2f92afa5d1fc8fdd848861141e76
SHA512 d2e8417b140c4be14e08b98353d5402da14d274282209f51cdc64f1cc9dbbbfeffaf2c309d21deb53fdd4ae77b4aea6e2c5d8f83228d226a2989af9f78850cfe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 dbdeb915bde466dbc6d142311de2e0b3
SHA1 970b19c040157c23d09e20fe5fd02091d373ffb5
SHA256 5e1e768d91d29af80f5cb427361a2a5cd0036b86ece51d67d720e0901dc44ccd
SHA512 5542dd5b240d3dbe8cb3d83637da437ff3066ed06679de953b401c1a3c7017735a1b68f810f54eb9f9bfc3e2b75314dec4d3f8b0d3e3af6fcc74365c01cd051a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 a11ea591f589e55dd39cf8f8b269e063
SHA1 b71e9087056dcece25546136b4a794426cbf1efd
SHA256 f592876b98edaf6a78247af90cb02ed7d578b85615c4c45c4e1f3867c2d5b44c
SHA512 2299bf2070a77d7fea450ef291810f23d8cb682b76fbd26d8af64c0c3b88cf954ec733b1366df0a5eeb00a505718189c9a52ec4d9dfabd72e86038c22dbfefc6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 61ae1161886346d96fdc41ceef5213ca
SHA1 15766a02697380a16b36a149b9f9756d463d360a
SHA256 274f4f83cc8e75a4194dd399752970d18fa6246b326e65b53891d2bff2863c60
SHA512 8d3302c372607504183260ccb58ef73f90e2e6c8ffeb64bf62ecb81bcb7bbd71c5ced21442cfa1f25240d9add8fdec6a47c0ab76ef634040919dcf1f7ce8b3de

C:\Users\Admin\Downloads\MinecraftDecompiler.jar

MD5 c10010affca9ead85316a802287f7e8f
SHA1 9bfbd67dddd74cdfe6b30280284ad4d7dcd51df9
SHA256 697e446938cff06d9f1bc354a6978e02d451f17f800a698513b53bf7cd37236b
SHA512 636b1568c9b2f3cf054ad35ad62cfcc8861ab52f5d271f75023596c30784a4e2876e602c325a3c31335215695fc8e2b417b6cde34c86363413397e9ed5848d84

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

memory/3540-804-0x00000219B4020000-0x00000219B4021000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e57911b7135d2c75b71c75f2955339db
SHA1 d7a8525d58cf4c05782b3cc122a07f5cb597caa8
SHA256 13eaa1df411d486b11bbb57f881fc1b0ec8b6c56e424e5eea7dc22d761039b32
SHA512 d8fa7e3cff053c3d5a8d23ce9bb3fece05c3beb4758dac3ddd9ad271acbedbec1f41f47d963efa68bffc46fb0245678f2ef41cd11523e88ebf3f40e75650ce18

memory/3540-815-0x00000219B4020000-0x00000219B4021000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f1138ee8c704542669d5f069a0d9d29d
SHA1 d31bf7d3a3f2c870a69cff76c1e7583fa2d20a73
SHA256 065a869d11bc7c855ed26aecb1a03633b071555e7ce0497c1a3d646c2a13e7ad
SHA512 70fb3ff79f2631f2745970b5df006e1a86a7559586c34df32277212b692c0537c6e813906993a124db33c528a935c36f1bb2059549a115f6207be0f198196771

memory/1084-836-0x000001BB403E0000-0x000001BB403E1000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ac2b550a1fa19d134bb9aceed96cdf70
SHA1 ba0fe10dd821ae56ed3bec9a2d94b77a867e1a2b
SHA256 a1824d31c310310ef7d99e130b3dc56cb83e159702588a4e0d1a7095ea6e8e11
SHA512 0092ff847ff897a9fe9090b45125140ea0dbd21c0c5cd5d4dae5f09a980fcb70ba4555956515df3499241783e2277398c1a00f8a16a96eaa05385a24539a9200

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 e24da3315da97a449b509a8e4e2f0eaf
SHA1 0f74ce029499d992355e75a2243aefcebd658c8c
SHA256 24d23c6647c57834dbdd7e63a6b86ec2674d0f2897f1351a1fb0275a20d222f0
SHA512 cf4ee692865d6c77acd23710849fbd4b99fe247927cf9a77ae31b0832e7e2172c0bcd68788e5d1da9deb5fe6bbe3daf5332afcb62ec301af8f3402f301b46635

memory/1084-857-0x000001BB403E0000-0x000001BB403E1000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 7df25b76b9ef5a29a54cec94717d68ec
SHA1 4a0d44d58087ddc2b247735577706b3e1352e90a
SHA256 4adc93de0ac990a05e4666b418ec063eef6b5f08137ddb4966493da99a75803c
SHA512 0d995fdf6353c3944dd85ed28804e61daf96059071d1a9cd024c6af4d47931f9c1fcd4d1b27c9e246a10b6bf7b4fa0557664fd1d5ee8c48814567f33efbc12b3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ca09be71d94f89966a375b78aa1b2733
SHA1 b60b75a97e147fd3959afd12eb3a0f10a01bc079
SHA256 5a15da1bd0a390378295d83cd3cf0055c19c86aa58ac7133ddd6506617071f78
SHA512 8e155ffdc8dffcf501e5cddcbb0d5c61dd43c5f6c0d000a04395906b066e25b82f99694a6a1c489d8cf23839ef01aa5b8b4f422974eaa1e26d0237b6bc8d11ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 04e9b23df972f82c28a4e7ddcdcafbfb
SHA1 738b80196c05c25cd1754d9289ea6b93790aba2e
SHA256 fea24f32c3ccd5cc37200e93d35e3a0d25a12aa8452f6f81d760ba9ca2fc4c83
SHA512 203d665a28aa3caffaeb3f295c37cac6e9f3d121dcb08973aa0a8398afa7fe89f1a5e6d8e84d872213fd0058608ebbf3e91e8193b207d791edd0a5350793efa4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e74a64f3be767586252806088ad2e65a
SHA1 a3ef4fa4e7d64db741648b75f695431b06a7e362
SHA256 192b1385c6fceae568ebcd191b7c140150ee82fd3b18e32a9c495e412830d329
SHA512 397884341903d6c8de3b68f28c3636dccdada03d767689ab3cd85f20387510c248a33ff9c0bccc71689eb966f62d00a2e2075e376c57ba64bb4a3f92900a163c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 1594a95ea206b6dba56d670df0efc4c8
SHA1 531098eb4408a923efbf22e4dba2c65dec37e805
SHA256 3723003adca0a36ca27122e48a0da86fc2c8cd6ae5d81490682706a447d7e0c5
SHA512 dcb5feca5a9748f1fdc54fe07b06b40e059248487362598b5a621097fbda1d52daeae59ef03218a57138dbe5420fdfaf2ac96049057b39c68031d52d80ea5198

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 7edc40645ed2b699e8ecb56adaa877e6
SHA1 187c4d372d87ad30b2667e31b45c35eb7fcd2d7d
SHA256 ca2b4ee859eb9b1705d10e99841fe8d599d9f12ceed79200391ffe5c3f3a237a
SHA512 d5c1e43f8c0feb396b6c2b2fb5ee8a73aa36be987018610a64c9237f14893287449a79abf8566a2c43d7dedd39259473360be22527dbddfe8a7541d631c0a532

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 68ebf0b32868ddfe6829ea7b238ced86
SHA1 1fe66f28a0d240eaa9aafd09ab436d7c5053f379
SHA256 ec8a1bc94db96c753c9d95857e77532dfbba583f42c4c91ab8484449523b91cb
SHA512 d90e449e71813d1858c5d37a3ef07988e1f4773e4a89140f2cc0aefc774c868b897aff3dc45936fe28d54fe29ca84c52997bd787784231e92506acbe73c377fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bf7ca8c10f3cb55b22790f29b288a5e0
SHA1 8d1a5174ba2884e35224bc0049ce3e7621419050
SHA256 180f30819b55211958e48a1b9e9e3d86525a1cb90ed9bc1b5e1bdfd5c60d36de
SHA512 135be94da2ec00016446b4d1f9c105aa6961b0df00b4da9aa9a7a564f0aa5c129b6eb91ff657251ade1f63ffc12ec74d51bff50430cce08f2aca9d0b1e6aa24d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002c

MD5 958e72d173944595320c1377b3015e44
SHA1 ba650126f7d4e739dd399fe8e2ab9939df2e359d
SHA256 0f26af205e088a2d95b5bf8a01905d6beca0acaedca901c6dfab31dfa114ac0b
SHA512 684a460c6f17bfc866d5d3ddd8486f068bb48ddebcc08c99a8117658a9a562fa4e982cd3ea64dcaca2336cd670d058d4be49de477cfe56b7db02014bdef00acb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002b

MD5 56e6be029d77f578e709c24b614846c9
SHA1 489c375c9f3497c386174d83cad05129e537ba2f
SHA256 25f1d7fee2bd9cf97933b907f627a6ff47534b2ad58fb99676f17b472fb1cbba
SHA512 efe69b930590d01364af98e68539d8bda4538ca7becb19b8b38f6ad6838c3f42778bd5625afb6f76c12aa360b6d3a13d42419bc0a198cd4c043852130a90e8bd

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 4b87e9074ed7d8fbeb7d99f42dc9d893
SHA1 9c18a0af7e098f0e191b8d29f8c8e485f800846a
SHA256 9cf56b285680c98c4e2612e6794c0510514d5921a2112f40469f5df9b397cf9f
SHA512 c8c023aa3eee94ced04b9e15f0ac72491aa57db18c0f5a168c2620948bcc8e6bf760fd9100aa5b778f36b895d9bf42b4a1424cab91529ab14de356834eaf7913

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d13131afad3b126fad3efe8eb0b269bb
SHA1 feaa07184a8bcd51ca9cdd52b7d7d17bef07eacb
SHA256 2f830068531f75b08e2af221de7fc6bde2be7b077aa12d6897f1a2d3329943eb
SHA512 aeb2c77be0a9aeb5da427a6be5a01ccebed5f74f15f0d1c84e5a6b3efde56057260e6b58be4eff3288a0754c370c60d3c10516592bb0d499b34b72d69969d2ad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 24f77675823b45ce56de2f7a1140f23f
SHA1 54a1a1a4d7191906a9339ff53fa79f97b0a4a862
SHA256 029b5e6f6ab5077f74d058ab02856c5c1057e1583ba8e5db36ffe5da53bf5ae9
SHA512 60d566ea8b3e2121163832c7bd4fa4996198c8b302e54a4fdb27ad39d81d541187e61af00188e6fd89320e983a913ee520ea91474c3151cac12ae0d1f97e0c74

C:\Users\Admin\Downloads\McTools-mcdecryptor.zip

MD5 8c8725c9c617ceaeec04bb7b29465d94
SHA1 ce94c07dff38025db5ca497f7f389912604e9b19
SHA256 cd718cd3bc8a0928aef919f1106bc4336d88f95183f3d791805470294fd34d82
SHA512 a20c01d4b38e417065780e5eb70d3e76a8673632da54378843bdb95a1e494df67c838c267658abc8b965f87b054f5bc000714d94041f146c0e554640f28697f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 d2b29ea0a42694b2e116b398ae6f1937
SHA1 6480792b91aa3943357e6f75d7673029e70d92ab
SHA256 93bfab69fda232ee72eded58b3b0cb327b67becb3590092e0a9e9ffdc06b8ab5
SHA512 b354aa93639cc3aad2e0147744e32906cf05d0496ac1e424d0c3aa68a4a90b82aa7f76ab22ac0508906b29403e09c487599273b56cb60daceefbb8f3d0d2d469

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 74531717d74788ebbfeef1057cdb2300
SHA1 aa2e8c3883544ffbf0ea2de8f432e8c077c22d1f
SHA256 4814ef8f62fdca9c7645df7b54b92371a129a4d1846683185dc17f564f417cad
SHA512 7ca6961c32f1bc0436fa1ccffc425129cca9979c1575d4209009234dcf352bf6d6b2f2c05c56ef8bda9d240986cf68b924f1b989cd75123496a43cbc8d7b5fea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 bd30278ab6cca99e627c112e3ed50506
SHA1 fd1eb48fda8648a2826de7df9bbd8063b8ab90d3
SHA256 a718ea90d47f75f6b15689d312ead9b71e361b5efaa15b3d9aec46d98b39d304
SHA512 e73b722b8b0a685e4e3e2a51a90f9a2de0a8218c1480761c6ce675a009ff6918a18672106244f0dc66ff3672ecf88f84eef70b2c82d008a4988f44c55d5d4175

memory/3144-1416-0x0000000000920000-0x0000000000928000-memory.dmp

memory/3144-1417-0x0000000005210000-0x000000000521C000-memory.dmp

memory/3632-1420-0x0000024397770000-0x000002439777C000-memory.dmp

memory/3632-1419-0x0000024395C00000-0x0000024395C0A000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac9b40a0411376f7_0

MD5 265cd457113bdae0356e2e5e4ea54b58
SHA1 6b4117a7fe8de28aa718864130f6fefd9ef8b1b6
SHA256 29b587594a94ba4b2faaaff6441529fb9ecd4fa67eb392f36646726c06c6be8b
SHA512 3d0457aa34273f33c0263c74826b5956d5dbfed9b9582ce52077b8159a2c0cddaa978789cf5b9788c0ea2857d463b2a7e0a067ad8b50057c1517f184d1a86fba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\54621936eea23565_0

MD5 8611667592b2918188db94a9d1f4bb71
SHA1 826a7a27e7c84217f2894d0cbf432540060835b9
SHA256 667ec54a4c3ec15572bf76950eab55d9b887c192ada085632c07359b498c316d
SHA512 8134345acc4d1adac2f33dcf6802bf892c73165fb174b6ed19199d7e2c2d4b78a03858cdbb72ca487226fc1e3073346a60696eadb955fe8e406521e4e5534cbc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d00019f29c31fea5_0

MD5 a36f2c5f4e7ead4d6f602322a7cac95e
SHA1 dbc5e5de842ffe1f228f5c3c804acbbcf26832d3
SHA256 285027329f65014dc4c7bca729d8bc0daca70ecddfa50fe75bda7372e6112b5c
SHA512 dfca4a435b2adc56c965cb298a61a2e6e60d40fba530994494730b477af108d83f2ff813e412ca5fc29e139a8adb62a469fbe607d521d3fd17557ca9aa768e3c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cbd83c2e90693c9c_0

MD5 d618e0a7a4baaf95a4e93ea5d7e3f7e2
SHA1 13f7a677048e66489d4936978f40a260512fa149
SHA256 9d5f7ab792e25f290e8c2c128fc2e9d1640d04aeca15d4f2a2fef029e4210492
SHA512 dd1897dfe14a78d31f011f5caea5d6e6e21c9e1d87d597d237a85f144fab203da74fe687faa5332dc55005b3cf525a2f841c1d91087eeba7637a34192c317346

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

MD5 c594a826934b9505d591d0f7a7df80b7
SHA1 c04b8637e686f71f3fc46a29a86346ba9b04ae18
SHA256 e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610
SHA512 04a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 416e956b8c3a538071f78b6ae9bdbc03
SHA1 a7078ce98de8800c0c7abe1d0f3c5df12930bc1a
SHA256 65666eb674cb2b59dbd9a21e1b094739d16b1b3fefa0dc9a16380e55e22a4690
SHA512 1b302f7326f1b107ebdb3b96485c84b09b5c4fa4534edde4ac1df5aee05f921dcfe8b0715e8d0d3226b3e11a7a8b4daed9f755b3f6003c958eb47cef75338a5b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0b2c49d090673e0c2af74d9c801528bd
SHA1 183f2d5ee2c797faec6d6d2e5f68a1cc74280e5f
SHA256 84be9afe156fd740e36748abf339aa15dd49a80a9783b8a4f0523269e362a96b
SHA512 9d541167304f5f0731e43e89d856907b2a9b1a68b4f85aa926fa7b9e402d1b67305f5fc17ad15ee408312d3ceb1a5d12d052a364b351d7dcb1c919ed79759f75

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 344b83546c015b9890e7b316f725dd11
SHA1 be38339a41a29f6002c3474a86b3c403c1a0a4dc
SHA256 b1f6cf7ceadc29ab28449ec0cdfb0ce8cbc32be48fb885b1ea4b4f03fbc52c4f
SHA512 cb17ee69e1a4f2a909da73be10b6fa540aadb1d5156b48082132e5ac83effd38414201ee7ed3ca2ecab809f01ca9b69ac54d580201bbfc76bc3a0da628adea12

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d8c02e8109da3dbb175ef21067a0ed87
SHA1 bab792a29ee5fe56b0879bf75950ca8d76703be2
SHA256 f3523cc478e78f25d0b8bb9071f619b89d7937ef4c4246996d70e931ac1e3454
SHA512 f55c43936d7ba2be0688564a3c32611c60310e88b62c0ca89e4a85dfbc192fe87ef4e555e3d8d63f4759f95c5fba05aa5553f40b9736e203921e45bb66d93202

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f34c3da2-a89b-4e37-90c6-76b9e53d0258.tmp

MD5 7a2b4119b88baac429365b6930dec285
SHA1 35c67385b6da84c100e821c639bfec40f9ee6a82
SHA256 29c74cee0292f31af077b7d011495977a473c3d0590a464ecf0bda2ce832adbe
SHA512 cf73832718198498c948961e2ed2eba659e7ec8da14baf3e2b7512443cdc0c64481e67b31890e982c8c402bb03854a26b728ea0b8ad641ae658ff3d9d1b05c5b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 58af9a7acc54e2b7b0a70eb077f9c706
SHA1 fa71b27e74992a7fae49e491042c73d1ac2c82c8
SHA256 fedeec45de17fbdde0dff321b377bbdc9cb073bc8b48dbc4e70810f4fcee2e0d
SHA512 c170cb1e5682712306c10c09ff7ebc98d104c591fe7c3a2dce1dcd7352c597758a7a9b4eb581335eb1f6e2f9662a1e4807131aad3803728bebb7d70613b4315f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5b0701.TMP

MD5 f87903f0b045c80949fd028a6d19bb56
SHA1 15b423adab64dedfec947fb8410f10dba55c1c52
SHA256 2af951742f98ced63e70bfc43de1a980fc336cfb9b968e1bfd67033a95213e3c
SHA512 c60a63be0b0d81fef0c07ec17b23ffc5e402fc85954d5367585f90acee036d69ccd9c837c05954b40c2f7634cb00f84ce90f5030f565b2488afa59ea71f82eb5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 a205d1333c6c84992517462a9cd98317
SHA1 dae9744d91575b3ba3a445a13a7c6004f82f1c34
SHA256 b5c3c95fec1471f393c75da03218dc05b01c7b3bc76edf5c717202e3357b8904
SHA512 f57981498b97650ce5c450f1b94c8fa5dffdcc58b114a932291bcd46e70bd941653d1bbaa10204073b2193bc7d724dce3614177ea99fc9266e02cfb967e60eaa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4c5dc4138ff87759250741161755aa75
SHA1 65d33bddef2f27f42de5f96bac2587ebb4afe0d4
SHA256 db98627ed17d05b6b0ff28e4ad68b00bb4824f37888a7b2d9d00962ec5fc92fb
SHA512 9f2289bf24fb45e9a39b84a351f3556ff596b4edb767320c63db0c679994328e22648a9dbdc21b5d54f38be0ab8fca80a156c2bbfa04c515584fe1439110fc1d

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\McDecryptor.exe.log

MD5 84cfdb4b995b1dbf543b26b86c863adc
SHA1 d2f47764908bf30036cf8248b9ff5541e2711fa2
SHA256 d8988d672d6915b46946b28c06ad8066c50041f6152a91d37ffa5cf129cc146b
SHA512 485f0ed45e13f00a93762cbf15b4b8f996553baa021152fae5aba051e3736bcd3ca8f4328f0e6d9e3e1f910c96c4a9ae055331123ee08e3c2ce3a99ac2e177ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

MD5 903acff81aec95fb624ad47960f14af1
SHA1 de8d7f3ae08621987d76e176118e1da6a7c2475f
SHA256 05d439f7aa4807ebfe90919429e6c6d352ea3816ce6a9592f4df42c2b22871d8
SHA512 c25bcf91200f1ddd174f17f2f95e3292cc8702884c3c0d79803a55effbddf66f43b7c243644c12e788cc1367d2f335ca67e07ec0053b066820719301693db767

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e4384637ddacf994_0

MD5 f17cbf7a430d5e40c2019b43625f9cf5
SHA1 fcf30339b303c356f00d35b45e4d0c9b11b43a08
SHA256 1a971469d6362a28c77136512d21615d9979d400482cd4ee6ba0af77ca2f3457
SHA512 29ed466daca95697e38c7504dcc6d6cee956d9ccf81a014713ef21e810c8cd8dfe429ba5b1ece45d02137b0cfbc16d84aa5fbcc751ec1b099ec91502731fa26a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\580fd9376c2d4a3e_0

MD5 373ff43d6b3f124b6cc537b974239964
SHA1 b55f10421ccb869ce492dfd271a617953692c7d1
SHA256 d815df19582a00aaafc79fcc87424ccfc05e3cefa83f734345a20169eeb75356
SHA512 de05301dd5494040910ede61b8e7cdb0fb69acdcbbf49ec7bd3118007b84d4ae5c71847d2323c8f365aa939284e924583453ff5eeb84749ba410d8778bf82bb4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7e23bcf4dbf5c221_0

MD5 0644297b965be6c5766ec4075ecc8a95
SHA1 61b507aba0be0843907d1144ee3551555abc6f0a
SHA256 63a255adedbf606eb0f46911734bfdbc37e684a9fdc322ae40f7be91a7fcc93a
SHA512 2cd5fd57ac0e600233b5c42519703e36eac1169432fa9ace68024067675e54b64ad5608f39b8d91be55ac11aad6aa5787395908024f39c9534d928b25f949b0c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5a994fe24b451732_0

MD5 d12c438132ab37dcda1659d46a28583f
SHA1 ad6821345a5b0d58d0c1c1089047c2ef397b9c05
SHA256 dfe781f3a9e84a0050658d4aacdff03bfa3fb164df6eb404b40494ef61e12356
SHA512 c89715190f96d4558e4d9daa0f2df1959b3673b0cfca8f90f190d8e32debaa5500316378ffb05e9ff0445fd901353d9bf65fd6b9f1b23ffcf85132596a151fc3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0bbe00d9bf7b798e_0

MD5 be90a3608196c964620339e8ae87552d
SHA1 960c6639a6654d2d7bacbbf2c5a7f9a0fdbd92e0
SHA256 b4f2f4824104cdd75d4d39dd63547b940ba10dc31358e70ac855d52f85cdc431
SHA512 0e5badc69ccc984e268b40100eb3203436ad0406be1b7bbe53f961d62c3d7d88d3b7ef18e432a1a6c63e796f7d38d55f3492bfb6ab5911d291b452582daa4186

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3f02c4494b1a18ff_0

MD5 aff9e851e805326c900607243e4945ae
SHA1 8b765fcc32b6e81861110613548ab9d4723da124
SHA256 3f09159b468d25abcdecebb029e7b5f3c27b9deee4eeba412cabcccd63164671
SHA512 8c306606557758fc3084f90acc1e937d4728df15a49bd17b2e07e089296054a1c547d8ef2b62d14de2624ec580e230834d850d25fdfaf768b5e82870b1154560

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8ee73a31bd0cce7d_0

MD5 a93d315336723c4bf1b6410d5c1e55c9
SHA1 206d9456d167f64e1c8ca26e60d862aae9b9d2e9
SHA256 f8d746a05653460dcb6d5f0bf691b83a6a8cae74d6e91c34de6b4e19793c048d
SHA512 9e073c65ac70c6e597a58c9a536ffcf35fa3ed86bce7cc2ab6433621e5ed65e478dac184c4686640f3d1762776115384f249dbbf6f9e7bd60848683e5674b841

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c3f984cc5870b63a_0

MD5 e77aca04c2ee8f55a9e0c3d1b4dc990b
SHA1 bfa33cada3d4af7601e18407f683106e5ea567dc
SHA256 cdb62161111afceb5ca46c654399741e20823c4ad0cc86e30323f37074182c2a
SHA512 d8f6b74aacdb1c387cba172138862c9cf0bfdac8c32857cd98a40ed25f3286ec08f6dafde33a583c4bd4a4db0931474f8ca608c5f01f8bb4d2d9c70d84499407

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7a29efad91a1117_0

MD5 87dfc9b05bb7e404e196b9aa209456fe
SHA1 d4ef94c7e60d0fa20d9e4f1531dbc5979a5fb840
SHA256 9ca06159ed02469642956aa79943e7861090a7af4982b9d8cb3f215dcfb45289
SHA512 8188d57a89776ef67a8a363caeb376f278d6653e495bea3454a99ac8cddfc29b2607d817b0456c214ff042884eb6b7a79ea2246f0d1b97be532d090cd4cb5541

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a614899219c1f2bb_0

MD5 483c770489c627b3534bacc58f0563d7
SHA1 ed121fa047601d27499cf8707aea4c9a4deb8ea0
SHA256 a376a301827f52530857822162870e3d901228707ef05a668674b18c52fb5d98
SHA512 61b9316ef3884c4aabfab8fd610caad138993be8da22ce309b5d147198bdb9a4a7e5b937a15cab1109ea86ae5983cf6e348467dd6b0f296d6badcc528944878d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bfd9b5c29c5c8524_0

MD5 e8c0411a446808c63c3c9e19a04165c7
SHA1 a0c41a318eaf821fd009a4b0ffb472660e4bc177
SHA256 1053cc13b09e22ad8626e803811d30eefcb55c953c182ac90ca1b78376faa9b2
SHA512 a15964315358070e2b00c26c933d510ae3119047ad5e2fd711b4178470b7effe2e5cd9d6d068ff768233d087379738435fedf689301c6cfd55882e602b4a55ca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ef205126cc52fb34_0

MD5 318ecd17f024cbdb65812fb61db8c26e
SHA1 d36c3447eab35b9f57aa7dfc95e96fb7cf209de2
SHA256 0b4fb91fa61c15a56e993ca97da1567bbcefc9f08f1c0f35a45ac858aeed9b19
SHA512 db9f497df08258b3943a8405d0585c2ffad3ad3f310eeb633c049eff53f4c3d78af231a16ec67e5846eb683e557a624eeeeb5f2b461c78a20b028e6cddc0ee85

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2f003113425c0ab4_0

MD5 6ccb8e5598f0663351a3b8dfbecbea71
SHA1 9da6bc7d38c1d942433c515f32255b471762f3b2
SHA256 35642ee4b42791e38d4cfc35b6d1f70cfe2021f79542f4af951d05048a2597e8
SHA512 d3914424570992766ed5cbba06fb0ecd8b012803b8fef82dcca734a2d084655cf046fe063e844021db97cb9e940067412f8af3d3f96ccef3380f8d4c74ee31e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004f

MD5 8068b5e9d3e4ddcea8b36f5b0c543749
SHA1 256d49e8aa6ca09ea77d85ba5e7d06e8e6885274
SHA256 2e9946c38a0fce3d734c3aa9511d3fdfe602e58f817926df2e260afb5a5608c5
SHA512 1bce896d65c97f9cd45c688002fc097b5f84e8aaf481fad432d5d013b7d1681933a50594bde3c732317dceadf9f298d508d5f9e286ce069ebc1a8a1529fdb8f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e504183595893c5c_0

MD5 36136daafc93e4f533402712d4074b5c
SHA1 9a10424af33c76b03e9a6f5bfe5da99da3e676fa
SHA256 8ff34bcfa50ba13efe987fda48771f02793343abfceb8f88bb9bc58ecce53743
SHA512 cf0bae7929294eeac0cad7dc8fd13416955c4ddbcd4c05d8eb76a2c6d7c69b698ff5aa74db4682349e5cb87baac97c56c0782fa34b538e6ae7394fb772b918b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

MD5 ca116bd40ac08c2641a6e8a0aa92ef1c
SHA1 ac5596bedb7c3f734a77f0550fbf95532e26405c
SHA256 2d10bb0314bd6438a66cdb82e7d86a52436fb1431dfbd7bb5acb375f976791fa
SHA512 c3804010222c4c32c49a38cf9ac6adec431ac51d566d2aaf28f4f170186d6d9c816f6a57c6d4b66fd9ede070aa2380cc6dbc1286b1f7e27c53bd3d1df64cd046

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

MD5 12d5e49bf16ed7d093c167cee8544423
SHA1 4f06741cdadcaad585519da0871849002a9985d1
SHA256 a54ea7005daa029361d64d9624cbaa9de071805f289405544e24af9187e30af0
SHA512 668b96e2cc28c946bc6579b085f0fcb8df051e7ea06ab3eb1f23256709ea8d61865aeec3f26ae8f2a9de4616e2ae939407f248e60bb1eb26e90bb79e5686aaf7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9412c8b664751f90_0

MD5 14703faa93d28a9458b9f571ae85f878
SHA1 e3841d899b7630a81712a805e7651b95d901b821
SHA256 8af635ee7e8da996c86b3465aeb182435f64599b9a25f9333d83a2c658665448
SHA512 0b10c411d6f1e3fbfd45b397acb7dee5124c8f0c9573e9ca84130055f1f87967041bb1b594c7019ae94cedf74403239e8e86c5f10e1dbbfea72f2ed07e8b50fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f89251fac2b69325_0

MD5 02224a51788ec1a1a6ceac9bac8580ac
SHA1 eb76420dc0855d64d5120d8cecf19ba937f702ba
SHA256 51c3e0d1e6e1147fc90e23f656d5e902ce0ccc31b4d2c97f527832607112cf55
SHA512 c64e049e56379040979a23a931030d7a9d67dd002bd6292ef191cb8ebf5d4ea635c6b74a83838cf33c44339694e48faf26bb7129aeccc40b7489b33ed7f13882

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

MD5 1bddb2963d1591583aaa420561179df1
SHA1 71ecf457e7b9688c5bc0e5e407c4e3930d1338d4
SHA256 12384865acc78df075d0a08cf9fe3601a23a0e661979b9f4860a753fba6f8f2a
SHA512 6e562dfa2b8443d240aff63403a842493288765598234725338e8cc7fb3fc408b7f7fb483373771bc44ad6b25e1be1985fbbea8c9edaa35acc8952e334dc48e7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

MD5 ff4556f8a37e24f24206c26a83422db3
SHA1 6a12483792224eee1e0cc6cd90b4d0b7fd3e1a27
SHA256 735381f0d8e6d4bcee801702a662b44a4881b61c04ba8b511155acff462230e9
SHA512 5779f241192960ecd94c57aeb2fd6d5522e9e2946b29dea2d64d58f107d780cbe43507444f1cff032b5625f5d09e4c369133da459554d6aaedefbd3f9ee9b53f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b2a2ea4987d45e0f_0

MD5 95581e5c6c56d34412521964db2a6730
SHA1 d7260bdeda5cd3b1dc2f29fc56b50661d1958e05
SHA256 94300c473973422d142dbb0fdf7159f23c61ede38bfb769a9bf85bfd5c66c5e7
SHA512 f1bd311716d8583a92135bc41e1e5e81e0334af4a694a6abdc3e82230b4ae04aebb5c430857eca75f0205ebde0f224c9cc0483ac51b5992b115f1e9be5b64e4f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\83d6d3a772bbc707_0

MD5 b3956e94f072daa67a5e0900fcf2492c
SHA1 d07dfb7008b0b93dcdc01725bfba4050bc9bdbb0
SHA256 ce0efa83e8a3f15d04938ac60826dd3a07abd1f59f4a077ee09c26519af81320
SHA512 f166c9da444960c83b571f2d241582a6c2ce9dd374dd675016add8e5009979138f3da972c7d9ce99acd0a9c62554867149e9854f1d1f3f4764fb72a39a3edee7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06450eb6a7b09545_0

MD5 5e71ba5fd0598cf4ef72cd5072e49885
SHA1 e19fe2eec64dfd9923e53fdfdf4fa79c7cea4a69
SHA256 20bdaa915a9408234f7a7822f655b17458c423149a29e92a157a79541c8b9e67
SHA512 c0550dfe8301a23c2dfb871586262763ee58934e82bd7c8cfbe48831c768ac36d7ffaa711b16cdcdfa126632b38ddbe6a9d8e7d9f4340cd83adf71f7462687c7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e55f0a6d1b533c66_0

MD5 e542e129b1a9ed0b7296e61edbf9f7bd
SHA1 693191070e499194c79cffcc28fa7b1a94381fce
SHA256 4868b1a58467703dfc332b8ddf6133d816b702c28d2186948ed77af1e605e4da
SHA512 d1cd565246d7d2431432392bb2d2e6e984502e8e4e1ebdacbab7d5eb1890ba5d0a1cbc248d85981e37d2e80af5724543d01ee8cc03149baf1edc98d66f3b3154

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2e4bbad99a372cc_0

MD5 0c166e99b333dce5f446498bc5a761cc
SHA1 1ebbd171f38aaf9a7d5b240b4dcac31f38210f26
SHA256 556aa45fabe67a80e4b4d2f536748fa89a93e102eafe82ff22f53d32bd1f4cf0
SHA512 c120950cf38830ebe816a56602983b9328785055c5086bf68809464d62e214d4e12f04ca9f08208bcc901fcac3e2b8f31523b6304a309e86f401232a31957953

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a267b7c21d8b8c9c_0

MD5 7308513beae31cce7c8b08f47585c7d7
SHA1 5b5bf8d994b6a4d1f5c60fd5ab1714f370b9a920
SHA256 6561097eb9c9011cfe41648a21b8d030ee69490a4e296fc0e65dfea9e658d5f5
SHA512 20a9c32868468329e6a558c048e4c6ee7acc2fc846587e3ea105b647e9a0f453a0309d3327e92a3db4f3f9a31be721c66bbde50ba66068767dc5e2f1858c4c71

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3dbb3008455b523_0

MD5 af1d6aaf6ed7be829210348defd818be
SHA1 fbe2b258eb1bf2efd72fdd449aedfc610632a38d
SHA256 50e2ac0b5e724204ec9c85ffa0f658358c957c776681c065810593c742b51c54
SHA512 30927b76eb4c7709f676277d1ae67e5bf8044a3e90027498ca48d76cbd0af9f2a125064d09b30d1644c64afc592334514b877a8e89a088f9d9f757493c5a0305

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\573623087cb12fc0_0

MD5 756905469a7ac52ca76af9e4503a60e0
SHA1 fe34c4b0f12c70f58d0a725b5007bb8902063900
SHA256 689c6fd9a9a4acfe38796fc2adb2f09b3de909bf65c7bec9a8b51d03f7322719
SHA512 860d15fce088fd0acd5e534b79809d9b7c13ab7d62c2e91c9293243a91cdc20015778da556c5959d7095569b035fe13d00eec11b86c1a22e886c16f0e039d577

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a09f6271ad0c4092_0

MD5 b095a314eab05a737c544a9dacf4e80e
SHA1 62e913ea8afbfa66e870ffa837b8c584f7b9c32b
SHA256 ead209f51179ef6e67a9f2763908962cff0e217bbdfe68b291aa0ea273d2e443
SHA512 84a65f0318bec379d9752e41cebb4f5748392ddfce1edc7a739849d7de0b55a49c60204ba400ee8ebfadbb80d65000d7c7c2eb70c06d17b8772c4b75f4794594

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9aee5cd509922cea_0

MD5 dfce4cfc63fb829cb6da70a9c8e2cbee
SHA1 6e3161fb081d163866da5a4b48b8924fc4896830
SHA256 e2a7ea441b08eca20a905c4ea704e706f909a9824678a9b8aaac0fbc16b7d612
SHA512 8ee8964c280ad8eacefb07f8cfbbd29ace8a562d7cf21234b3f2f73e3022f7199052ec71db3be67afcbae8bd0747bf4b9489508666de3099570011414e48e54d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daca09b4eb185a45_0

MD5 7cafc674b7927db0c0ecbda6cb285c6f
SHA1 1f9749c1638e5d06035eab22feedf99836f23f98
SHA256 33fd775fe42764d29d1a2a626baf37e35ab5567aad8707a0dba98843b3976afb
SHA512 fbc444a1ac78c37585469687af2e4f75b92655005931a707f671f80d37762549fff01b20757877c6bdcf586efa73c94b77e80dbea93a17e9e7a1ac3c0c59de4f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f4cd1d1d887caff0_0

MD5 bfb454db014c9ff71dd2468b5292a5a3
SHA1 ae5da1ab037b4e73c3f4432167c7423dc27aee50
SHA256 d3cb18507676668152d0d0141c209de2614a17cc9f1b99d061b183b119855d60
SHA512 d8e4cb6013bdf27d25f3b437d8238ec2a39748f948041cb8aafef257a7b178fda496c2d4649ce1ae7db097fcc6f189261057d12bdf0f5f89067c55b221409cd2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f5b3fcf3b14c8211_0

MD5 52926b1688c3b12503a4339c59ca6ae7
SHA1 b3c0b34a6f9bcf973d707236824921b490246431
SHA256 5b541d7787cf69ad64511c25531e2222ecb9dc62f8941b6602c0923d365e67bc
SHA512 bebbf67d7ab4cc9b39722c09563f93a17a7710139b864dab23f148cdc2260442233e2f64684d3241a960a64b1ea3812a73772ff7d56fbb510ede7f4a859a8b8e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a51ef587dc6dd4bd_0

MD5 65845a3520838afcd706e739f7078749
SHA1 bad9a9c63856a47b85f81f1295ca89abcec77357
SHA256 815b0c42cfefa7c50a90d95b927a94e361980dec3fa645c18ad9a560ab44cee0
SHA512 a62f074e330857c3e9c79091ef058952bad8675edb8e5ca9807b62685d662d9971faa5b997756bb865fb298c4cb79c88535957253139e991f94efa207a64d012

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\71da1d13654d7e2a_0

MD5 7bf4d6e9de485a270a5b47a10c11f2f2
SHA1 8d069658ab88ac6500c14c0473860d8c584ac99c
SHA256 6b42fdd6c7a5b04197d4fb5fc75073481217b02b01097c3b7d7a8908010c8cfb
SHA512 26e6526f7e724c3583fb550284a75d03b834fb7d03148e7dfbd47ce90e9d3ae15ddf20732be86703bbd7a196ff3b18a75036bc2244d5c1fe5d4d49d3df527d35

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47d4e623e47f5bdd_0

MD5 afba53a38bf1b0f9bc0e51909da8aebc
SHA1 3437c53c31cb7849daf06f261ed4f91c52970e2c
SHA256 4b8e575f146d2e445801e5a69d79c1bbe2f0cd2184391a7806a9d23d2e24aab0
SHA512 e87ae488beac68452b863d96b868e0b635a4945950845eea2aaae665c388a3861823efa4f8fa30c708aa21edabdd37bc0001f9b1907355dc600c2a334a4255f5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ba208775fb5fe09_0

MD5 3bea321a2bc5de5cd6b8e96033a97978
SHA1 5f7e4e0ca8aad9918072db80968ec5389bfb7311
SHA256 0f3f2d61fad7b1dfa4638a3fccfbb38b6d867bb362027f379179ba0737ff20e4
SHA512 eb69a91da24970ebb532e4fe76990af7d4e734cfbf4e49e313c6b4f046636cec1ef653abca83e9ebcb0de212ee4cedfb439af7d318d1eff952e02248e416bb2d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fe4ddd4c20bc4133_0

MD5 7156dea08e80e016dea866aa99dca6a3
SHA1 56fcc284e6cb264d0d6f3621f0f21c121da512a3
SHA256 017ee3ca477a7f787d62060bc1d53278ecff8f63e7138dd899ef054ec581efa6
SHA512 efb7f9bb2b4b46dec697664346ae2d33ae7c2469fc3924c19c3ff89de9369f4154d84c670129b5a65dfe89fb55d0dde3edd7f15e3f23e7fa4e323d966685f25c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b04c72f6467d41b2_0

MD5 4372e447ee7d7885cd77d8fc63c421ec
SHA1 bcabb370a8559083df8c8bea04724cfbb30bcbb8
SHA256 6539f520054f8c1bc932f993a63f0113e03763398a4ec10ec6383e4260e394ab
SHA512 6765fe588e279f4abc83cd2207f7b2c215b493275ec8553c706a22c2fd63ffb06e31ca20a84a02355d5648e70d4b8a37b2716bfe3c8afafbd1f374069a090cc2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ae8d0b05a4b538df_0

MD5 ec9042b10d8dc8086b6391b9a078c6b5
SHA1 250e3d3a99a3bf21911eb4f4808e57b640f66b52
SHA256 7509a1cc36a87960f813ed6fe268d496cc453a5d30bf82130d9bc21bf95c8d6f
SHA512 0cc9427b7d70e4aa983e9b7c41d9633166f129023aa35eacf35fcbafd7bfbe1e57d8e82683795c1bc1a242d676f24e0155346a2048094a3943562400d6dbc0f1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9c0109f54c03223c_0

MD5 1bf0ef17a18243b78dac7375eac245d8
SHA1 98fef9fccbf39a43ffe87c486817922e20220322
SHA256 0c2e99156fca1df09529ceab46e2bfa11e39ece873d580c2b1beb85168611c0f
SHA512 871662d49efe214aedf141c7c1fe1804e90bf20a25a34b10a22678550c12b31568eeadf1652f3419d58b20961811ad9cd5f7f6b301b993969983df40fdfa95de

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aa20c296787a3f88_0

MD5 02a0220f60396c042308c12aabeafe5f
SHA1 ae777fedf0d432f67e4c598cbf249f2939cd5ec3
SHA256 c62c1ffe75bfc9e1c3a24b5e680adf927d4276a0acaf78ea7d423915e70d13f6
SHA512 947d81e7f4d51e9598030606904246970996c0f36c772941d97149c29124f37ade9798c12f28f70213f97b6620c11c30e2f8e1da163f89758ddcc6931598206f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b1d7d09e2437e8ee_0

MD5 8cdd01f1790aa8217669c23c738379f3
SHA1 7587c59026c564ba7e8d41c9bbf962a2c892cf45
SHA256 f14779d006f1e6a115c4a246eda73e5618a3098c87116150f5723f5412e8cb9e
SHA512 b638a157aa8f95a6863f811b7e920d9c36643129defd21185dce152c431b11fa522e35141e4a2f413c10f6d98afb16acd34373f0e9f938f351c2c39c3756b952

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5b2f11f3f15a5775_0

MD5 e09f299987242933872acd4a0c14a6a2
SHA1 44e0610a4696c4cae6b2adff4485a10007e51ee9
SHA256 7d0618f6a496a05f1a95a4266371e5740872961f95724908e5d6368c215a49ec
SHA512 6ea6ceb62d033543cc12d472a28ca88e2293f355bb499d6bbd88a22fdf93d969dc7eee67927564bac6b9b76fd46bfb2b0080716e3c692ac2caf9a5afdaa9bea7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3557d97bacb52931_0

MD5 4983f42bd1373ffffb9e5fa563cc59c9
SHA1 1b1fa384704268599ac37d67dd7f5dfaf3a79bf6
SHA256 174a4ac03c4141384829a723ec03e13eb22df0889813e81d51c1446cee6506dd
SHA512 ce5acd1006d32c3daa1d10f3d9302ac06b9ab251e393adac70dd8396c023ccb678616c720022c6318345ad45f56f9dab38d4e2320df76dd6a47f76a2cfbc695b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f078f5fb70fd150f_0

MD5 5e7c18ac8040f0b908c76fdcbe604bf8
SHA1 d02ac7f3666812e144d425ba3b2dbfee91267cb5
SHA256 d61ac441c2c6bf998a98d1fcc68d4bb198c7c7eff113f0437eee4343b67a055c
SHA512 bfe741ea58de1bfb0b3a6abdc5a65de30459de7131da758704ecde73039206078f1ee4e8049b758f7076f9c81dcc14b515337575b20d80283fb3fd3cbec3c7e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a66a1246c4f29f4_0

MD5 7d4c5c166df2025e0b1dccbca5d57707
SHA1 b049febdf48999a22e87baf843a3696926cf83c1
SHA256 bb0c82a82760a1cb039bb5460d14e1ddaad92d1e3dcfd4ea2fafd952c12547a9
SHA512 ed5311c98d466c418a988ed06e65fc1a122ea07b8967a720e5b1be4225a38386a80cda6969d3086749bfda8e90c81ea0af177bdda89ea0ec7eeb761d9449c951

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e5987d08f7b6e11_0

MD5 7aab734a84c3ae22d5c4ca20b69963ec
SHA1 ee78252bb9b31adf6889ea8487fdb8e89b70f3f0
SHA256 640d16ca5c346be75b2d6d3c24ff71e8168e98c0c18accf381eecc9f23aa0c94
SHA512 2527be9a226530965a463b7a79ae4d152f950bf2e6f4f223b8cac7741be8fb000e40f6fa1f24c98e91bd59dbcce0b548eef61260248d4eee90a64cade66b7d94

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\81764cdb356c9506_0

MD5 107ccd72d42a4c61f4ae09a8c0dae159
SHA1 e800aa9a4d9e8930a4d254302998d4dd585e1f55
SHA256 4b1c5333149ef67f67e7acc80e5c46cb093a39106f023952537e35a507923de7
SHA512 f49514f1f7c3044853f837216c064bf4e7654095fe4a649decb1feb73f8166b74b1f9aec8f216dbf066ec53dcf6aafc2f66cc2b22f48f2f75eff761e0779a93f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\02735674612cbc52_0

MD5 5b33711608733617e46c0d4b42095548
SHA1 0bc7db5af41cc6b5671e9fe73b751b1699c9b15c
SHA256 2ab36e852fce6a7596c5e3a62d210150b2ed4cd495d60c9cf549f9fe484f2aa9
SHA512 8067b9f6a9a0d2dfc5c4143a4e3a875d430b93b2227efe4eaab7f18b056791fd969955c6eaa06773234e60a55b9a156eab2d121befbe6356a61144977ff35ce4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\edb3b6840a8ddc0a_0

MD5 ade5a11e6e2a9fd19759bcf107b544cb
SHA1 98fc80bc8811e7feb46f1ba099de728a3c3f95db
SHA256 a15aa47fab4d66569e7e0380e8cf8fb687b0270d6de6526a2d744cad2d33c082
SHA512 3318f59f9c3bf5a81165c963f1eccddfe77a65e644c82d7b3f4536d44b8fecc476925715486fbbbb76e21f054e84aaad7716952be950b8b8fd435aebf9e44db7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9b514ce627124747_0

MD5 05c2c093c20f590f1eed318cc7dab6a9
SHA1 3179868512c96f56c0ac6ee554b55d756815939c
SHA256 19db73790a70cf209d8ce7d224e434ed1a83fd6945874dc55f7aa9cdc1f232e2
SHA512 09bf1b4b66ff53d23fa3fbbac72b38d246cebab8c074d740ab704665b924515e5372725c9655f7d5c702e54055eaed7177e6cd58acb1d816a5512e48e8848c21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\14ff8116b518ca2d_0

MD5 011e71e0f65357fd250a60d3bdd1b0ca
SHA1 2c92e3385ab432e0c43a9124bc7fc55f774126a9
SHA256 1e7d950930d1739f5d9c1c5e631a21f1b4f2aa7c9de1115d8240735f3b1d2938
SHA512 d363f8cf243fb588bde032dd0988d63e5ed8fba7018168ef88175f096d1e8dd91325e1d7035259eb2a1fdc5b9d066181381d127fa6320b97b209d7dc33cdb40c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f9af4bacc442d47e_0

MD5 bbe8f4c78d90b965b40ad09cd63f9683
SHA1 76270d8de4ebf88b712e457d02bd8386eba6a67a
SHA256 fea67eb5ebfc2648e8976c54756505e2cbb653e0c75bb1dfefac574fd22d59b9
SHA512 786f2c544b41a656b6a8774cef58df7492b34c53465224ad80936d85d70b6067c6600fb220917c45ba4eb24378470ed32f0f81bff0bf9c7f02cc2eaeae686568

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 35562feb5f8c2bf0f2c60dbcd3ab5624
SHA1 4cb0821edacd44330c964e6338f2ade316374eb8
SHA256 7868e9310026901125dcb5b7f56d67c8cdbcdef98271e5981d8e6ab86ab42ed8
SHA512 5406adba166dc7c7672783aa130bf5961838ff4a57c37d384a3f88712d2f2a35b6f7b4c99fa8d1a4d6ee47d39875894c9e8160869024293ee4cd89edebf7a9e1

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fe7d4a89f1d4b420ff5bc4bbab078ea4
SHA1 88cacf3a1ab1c98472e0216f030b64a1fc48e371
SHA256 8c3bc63f85951841cc5161a4687d187190d93be19ff7185a60b43bfcd31b29c5
SHA512 b7ae5d260913e5178f4a91b361aabdc08ebdf1719fc86a6e7cea54c07369c5e73e3239a349eb8b096e8cc3f4f8d1a6148688c7719c51191a544e5bc8b37f9d96

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1481b3438743f45726421015ccb8662e
SHA1 f0434532b5eac8155516cd7e690c7ce02aafe97b
SHA256 ff2aafb7ec5d7da50c4380a5968bb089364663559aaeb1d03cf38bf7f7038629
SHA512 576be437e0a204c445ab9fae694fb56816b646ad7d4aaae0b969ad9d6c524a9f5f7992a8569476ab7a513637bd0cfd704c342d6c3334deeab1720c1b5ef5bc12

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3ca63924d34b920ff7b7a0af60afd2a6
SHA1 56bb37ce6f5ff0097d848d16f3d6f25ed9b92d37
SHA256 31d3891bd5370d2db89d05d741a9d83ac41237e4127829c233e839fadd6e3be4
SHA512 69a6b01f80fa5c6cb94b9f6d09cb89b3685260641c2ff3befe6e58facd833357ea5ad75f9dcfb199d74eeca23ca5589180013a55d8202edf6189e3696f05c04e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000070

MD5 6931123c52bee278b00ee54ae99f0ead
SHA1 6907e9544cd8b24f602d0a623cfe32fe9426f81f
SHA256 c54a6c3031bf3472077c716fa942bd683119dc483b7e0181e8a608fa0b309935
SHA512 40221fe98816aa369c45f87dc62e6d91fcdb559d9756cb6a05819f1cde629e23a51803e71371f4e4f27112a09489d58ed45b2b901a5f2f00c69c082b3576057f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 08fb95af68a4e9ccffd10f2b91b5c3f4
SHA1 cb49cb26c2f5d1ebcd487051489cd84039392025
SHA256 bee452ea8ee052be0e8f8049c929752627c6e44da4bb1cf7f7a94c3fbdca44cf
SHA512 3f8b3a411205a98480210315a60cee6ccbe0c0dbe576db6034562147ab39235d7259ad029e9837f9748cb03f8d6c5e0fba586262db443f49b9c5efc72e4de2c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 e07085e0510a8d1e0bb5d3371187beee
SHA1 0f5c8a5ac0e891f0f52d9b68e7bca0748fedadb8
SHA256 e80b48726034219eedcdb9859ee52c660a512f6da27758a215a4fd40d9303248
SHA512 b1da90de2e9ad27be8a44062c665559eaf2c62afc8e1ffca47d7b6446aebb141b028ae725273c065825fb95ae1996634421bcf8ebb987de7b65f96eb73af66fb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b3ecbaf46a09a6be90cfdb19cf119623
SHA1 e222109cdaf0ceda3df92fc48131dc19ecebe714
SHA256 522ab0c5b33f6052251424ecdfc5143fb15c2be1c4ca13a498b03ee8d092d1b3
SHA512 62c6d89870543925ed6fa13a0f8006cbf1485154b4083c91c6a18835daec4e68d2734ab1402d64137f8433f7384dba52d687fd3019a33f716e72d88d0ada022d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 23469e718d211511bf8b1e1aa9e3bcb8
SHA1 c275c9288ab6ae47e5d4ab5d762316bfed4ea0b6
SHA256 0123deeb3d3c26eb088cc93eb948bb56336446c3db22a5e5008e9d052e6388b5
SHA512 d80acdaad7a80616c0917d75aa9eff79e1288b4e8e1afb16d28feff80d68b19de6f06a335913c229adee8577fac88f1be53db30c37c7d6441bae97d6141eb9e8