Malware Analysis Report

2025-01-19 04:29

Sample ID 240805-dyvsnszbmh
Target http://roblox.com
Tags
defense_evasion discovery
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file http://roblox.com was found to be: Likely malicious.

Malicious Activity Summary

defense_evasion discovery

Downloads MZ/PE file

Loads dropped DLL

Executes dropped EXE

Checks computer location settings

Enumerates connected drives

Legitimate hosting services abused for malware hosting/C2

Drops file in Windows directory

Subvert Trust Controls: Mark-of-the-Web Bypass

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Modifies registry class

Uses Task Scheduler COM API

Suspicious behavior: MapViewOfSection

Suspicious use of SendNotifyMessage

Modifies data under HKEY_USERS

Suspicious use of AdjustPrivilegeToken

Checks SCSI registry key(s)

NTFS ADS

Suspicious behavior: LoadsDriver

Suspicious use of FindShellTrayWindow

Modifies Internet Explorer settings

Checks processor information in registry

Suspicious use of WriteProcessMemory

Suspicious use of SetWindowsHookEx

Suspicious behavior: EnumeratesProcesses

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-05 03:25

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-05 03:25

Reported

2024-08-05 03:39

Platform

win10-20240404-en

Max time kernel

839s

Max time network

841s

Command Line

"C:\Windows\system32\LaunchWinApp.exe" "http://roblox.com"

Signatures

Downloads MZ/PE file

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\nemu-downloader.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\F: C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\nemu-downloader.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\nemu-downloader.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File opened for modification C:\Windows\Debug\ESE.TXT C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\INF\netsstpa.PNF \??\c:\windows\system32\svchost.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\INF\netrasa.PNF \??\c:\windows\system32\svchost.exe N/A
File opened for modification C:\Windows\Debug\ESE.TXT C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File opened for modification C:\Windows\Debug\ESE.TXT C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
File created C:\Windows\rescache\_merged\3720402701\1568373884.pri C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File created C:\Users\Admin\Downloads\MuMuInstaller_3.1.6.0_yx-gl-codex_all_1709777287.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\MuMuInstaller_3.1.6.0_yx-gl-codex_all_1709777287(1).exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\MuMuNG-setup-V3.8.18.2845-overseas-0417125205.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\MuMuInstaller_3.1.6.0_yx-gl-codex_all_1709777287(1).exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\nemu-downloader.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\ColaBoxChecker.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\MuMuInstaller_3.1.6.0_yx-gl-codex_all_1709777287.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\nemu-downloader.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\7z.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\ColaBoxChecker.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\MuMuDownloader.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\MuMuNG-setup-V3.8.18.2845-overseas-0417125205.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{4340a6c5-93fa-4706-972c-7b648008a5a7}\0008 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Mfg C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0054 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\DeviceDesc C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\DeviceDesc C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0004 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2003 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0052 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{88ad39db-0d0c-4a38-8435-4043826b5c91}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2006 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\0006 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{88ad39db-0d0c-4a38-8435-4043826b5c91}\000A C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\HardwareID C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0005 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0005 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0051 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2006 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0052 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\300A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0004 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0018 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004E C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2006 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Mfg C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0054 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{88ad39db-0d0c-4a38-8435-4043826b5c91}\0008 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004E C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\000A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0008 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0008 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0034 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004C C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Mfg C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\000A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0003 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0034 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0002 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\DeviceDesc C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0002 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0051 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\300A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{4340a6c5-93fa-4706-972c-7b648008a5a7}\0008 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0005 C:\Windows\system32\svchost.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\VersionManager\LastTTLLowDateTime = "1251635200" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\VersionManager\LastTTLHighDateTime = "50" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\MINIE\TabBandWidth = "500" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\VersionManager\LastUpdateLowDateTime = "2921051540" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009edcdd2278574a40bde61938ded795ab000000000200000000001066000000010000200000005b9cd980c516a9011b3adf9ac1bc1bb87cbb3ebeedc02bc15312daa43711b5d7000000000e80000000020000200000006090de3c1179200c88f44d3bcf34480efe1ef613d0c8e57aa871f995959bf65c200000005d2b65142b0e82ba34bd884ac63acdad36268a5a261636e62193a15dc683277840000000471cc05b0dc42f0823f6180c510d59f25fb59df4d6ae629d0a0b5fbb99c447fcbd6e9d44fb4d9385f49a7028e008c5e8f29a98fad4342e31fafc7907721614de C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\GPU C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\GPU\AdapterInfo = "vendorId=\"0x10de\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.15063.0\"hypervisor=\"No Hypervisor (No SLAT)\"" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\MINIE C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D9C8CC51-52DA-11EF-ABE2-42101AC9C0FB} = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateLowDateTime = "2921051540" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateHighDateTime = "31123175" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\system32\browser_broker.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\VersionManager C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\VersionManager\LastUpdateHighDateTime = "31123175" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 40285caee7e6da01 C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 30725eaee7e6da01 C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009edcdd2278574a40bde61938ded795ab000000000200000000001066000000010000200000004c97829ccaa67decbee4fd001c7106df84fc722aef98c26a4273321c4ee8ff40000000000e8000000002000020000000f079a2f3b602c41d730978e011723cc22ac655d8f8c8f7c7fc1526d452faa324200000001a367c8b9a61dca5db9cd46e2f492a1e05dad7712bc63264e3cc46b969086ee34000000002a295f59975131f6aef6d7ff2e9ebc0085f842e936f2574a145da0de09ca103c3c9c4cee80c0843143c658ad105b7946bd090cc07ccb313db56648e6f82ab06 C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\system32\browser_broker.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache C:\Windows\system32\svchost.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TabbedBrowsing\NewTabPage\ProcessingFlag = 30be9d4fe8e6da01 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\Total\ = "17305" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\ACGStatus\ACGPolicyState = "6" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\EdpDomStorage C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 9ee54c6fe7e6da01 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\youtube.com C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$vBulletin 4 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\youtube.com\Total = "121" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\CIStatus\CIPolicyState = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\PrivacyAdvanced = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\AdapterInfo = "vendorId=\"0x10de\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.15063.0\"hypervisor=\"No Hypervisor (No SLAT)\"" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Content\CachePrefix C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\CIStatus\SignaturePolicy = 06000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListDOSTime = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\LowMic C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\ACGStatus\DynamicCodePolicy = 05000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\Total\ = "57916" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 1412e6c1e8e6da01 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.youtube.com\ = "18625" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\Total\ = "15857" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.youtube.com\ = "17228" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.youtube.com\ = "20008" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionHigh = "268435456" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\ACGPolicyState = "8" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Settings\Cache\History\CachePrefix = "Visited:" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\CIPolicyState = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\SignaturePolicy = 06000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 15d19d4fe8e6da01 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-VendorId = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\Main C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$blogger C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DummyPath C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\EdpDomStorage C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\ACGStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Explorer\Main C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate\CTLs C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\SignaturePolicy = 06000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\EdpDomStorage\msn.com C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Privacy\ClearBrowsingHistoryOnStart = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Rating\NextPromptBuild = "15063" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\bing.com\Total = "649" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DomStorageState\EdpState = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder\TreeView = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ServiceUI C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder\SyncIEFirstTimeFullScan = "1" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\CIPolicyState = "0" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\www.msn.com\ = "101" C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000 C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy\Extensions C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\MuMuInstaller_3.1.6.0_yx-gl-codex_all_1709777287.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
File created C:\Users\Admin\Downloads\MuMuInstaller_3.1.6.0_yx-gl-codex_all_1709777287(1).exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: MapViewOfSection

Description Indicator Process Target
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeShutdownPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeCreatePagefilePrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeLoadDriverPrivilege N/A \??\c:\windows\system32\svchost.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Program Files\Internet Explorer\iexplore.exe N/A
N/A N/A C:\Program Files\Internet Explorer\iexplore.exe N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 4516 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 4516 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 4516 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 4452 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 4452 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 4452 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 4452 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 4452 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 4452 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 4452 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 4452 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 4452 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 5568 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 5568 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 5568 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 5568 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 5568 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 5568 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 1612 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 5568 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
PID 4824 wrote to memory of 5568 N/A C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Windows\system32\LaunchWinApp.exe

"C:\Windows\system32\LaunchWinApp.exe" "http://roblox.com"

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

C:\Windows\system32\browser_broker.exe

C:\Windows\system32\browser_broker.exe -Embedding

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\System32\SystemSettingsBroker.exe

C:\Windows\System32\SystemSettingsBroker.exe -Embedding

\??\c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s RmSvc

\??\c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localservice -s SstpSvc

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k netsvcs -s DsmSvc

\??\c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s NetSetupSvc

\??\c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s RasMan

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x3ac

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\Desktop\BackupRename.xhtml

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6240 CREDAT:82945 /prefetch:2

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

C:\Windows\system32\browser_broker.exe

C:\Windows\system32\browser_broker.exe -Embedding

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.0.1545690360\3604031" -parentBuildID 20221007134813 -prefsHandle 1716 -prefMapHandle 1708 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1d500824-49e4-48d8-be0c-dad3523d32c4} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 1796 1e2b8ad6858 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.1.981167189\659924227" -parentBuildID 20221007134813 -prefsHandle 2124 -prefMapHandle 2120 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c1419034-075a-43c0-b581-6598be1b8b29} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 2136 1e2b89f9258 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.2.739465683\1811925536" -childID 1 -isForBrowser -prefsHandle 2880 -prefMapHandle 2748 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7b0f1986-68f7-468a-8758-60641c88e1c1} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 2948 1e2bcd94758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.3.1480926079\1122464787" -childID 2 -isForBrowser -prefsHandle 3560 -prefMapHandle 3556 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {bbebcc82-ddef-42c1-8dee-87200d77fd8d} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 3568 1e2ada5fb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.4.15797552\1990688323" -childID 3 -isForBrowser -prefsHandle 3940 -prefMapHandle 3936 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {37f87527-cd10-471d-ba0a-032ef2cb6a0a} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 3952 1e2be5b6d58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.5.193411064\1290395680" -childID 4 -isForBrowser -prefsHandle 4864 -prefMapHandle 4860 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3b0b6739-4de5-4a97-b364-039343df1805} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 4872 1e2be5b6458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.6.196071315\2035025128" -childID 5 -isForBrowser -prefsHandle 5008 -prefMapHandle 5012 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {dffcbe61-55ee-4c5e-98f5-75b9f411475e} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 5000 1e2bf69a758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.7.1992509800\1374453530" -childID 6 -isForBrowser -prefsHandle 5196 -prefMapHandle 5200 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e26fde9a-b8a5-4f29-a7b1-1b3d0c3553c3} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 5188 1e2bf699b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.8.1209540067\1523591147" -childID 7 -isForBrowser -prefsHandle 5460 -prefMapHandle 5636 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3d28eada-8c34-41df-80a6-df153c268648} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 5472 1e2c142c958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.9.1949859589\1485017833" -childID 8 -isForBrowser -prefsHandle 5436 -prefMapHandle 2672 -prefsLen 26503 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3be28d1b-d358-4b26-bd81-b4cb0198e3f8} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 4680 1e2bc679a58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.10.1928602412\938293363" -parentBuildID 20221007134813 -prefsHandle 4648 -prefMapHandle 2592 -prefsLen 26768 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1e75112b-9ae5-4de0-a074-f2e140408b37} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 1568 1e2bf914f58 rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.11.1877870129\266870071" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 4664 -prefMapHandle 4668 -prefsLen 26768 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c7513955-b8bb-4f61-ae0d-7c848211159f} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 1600 1e2c0b07058 utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.12.264891554\1573565748" -childID 9 -isForBrowser -prefsHandle 6388 -prefMapHandle 6372 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c5f42f27-23f3-4f57-88e3-7a4888882cb7} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 6396 1e2c1752558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.13.1612052335\1664458810" -childID 10 -isForBrowser -prefsHandle 5892 -prefMapHandle 10088 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {cdc2139d-fe15-4c89-a2f9-a719ea419eb6} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 5916 1e2c2927258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.14.850391450\1152319105" -childID 11 -isForBrowser -prefsHandle 10180 -prefMapHandle 5136 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c8e9f7ba-63e9-4ffa-bf39-e4d280e8c6e9} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 9868 1e2c2ea0058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.15.560746867\139348111" -childID 12 -isForBrowser -prefsHandle 9780 -prefMapHandle 9776 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {16531fdb-11ac-45be-86a2-48db94567a00} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 9788 1e2c2c1f558 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.16.709520205\1582577730" -childID 13 -isForBrowser -prefsHandle 9496 -prefMapHandle 9500 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {dbd6822c-2a4d-467a-8f5e-c4ac57759352} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 9488 1e2c2c21f58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.17.1192926705\504104543" -childID 14 -isForBrowser -prefsHandle 4228 -prefMapHandle 4172 -prefsLen 26777 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {87e2db00-863d-4310-8c1a-3902b4f17b51} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 2924 1e2c2b59458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.18.1035872394\2126104909" -childID 15 -isForBrowser -prefsHandle 2816 -prefMapHandle 6364 -prefsLen 26777 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {fa1a8baf-a9f1-48f3-93e6-d50814f4f279} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 10024 1e2c2b5be58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.19.1823916007\1062645159" -childID 16 -isForBrowser -prefsHandle 9588 -prefMapHandle 9476 -prefsLen 26777 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5d13f299-7752-455a-9d43-b3f3f5e45c28} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 9420 1e2bf0f9c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6332.20.355400822\980990039" -childID 17 -isForBrowser -prefsHandle 9096 -prefMapHandle 9092 -prefsLen 26777 -prefMapSize 233444 -jsInitHandle 1260 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e7d09062-9121-4ef9-a9ea-f2f8f9d9b0d8} 6332 "\\.\pipe\gecko-crash-server-pipe.6332" 9108 1e2c2c1fb58 tab

C:\Users\Admin\Downloads\MuMuInstaller_3.1.6.0_yx-gl-codex_all_1709777287.exe

"C:\Users\Admin\Downloads\MuMuInstaller_3.1.6.0_yx-gl-codex_all_1709777287.exe"

C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\nemu-downloader.exe

C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\nemu-downloader.exe

C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\ColaBoxChecker.exe

"C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\ColaBoxChecker.exe" checker /baseboard

C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\HyperVChecker.exe

"C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\HyperVChecker.exe"

C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\HyperVChecker.exe

"C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\HyperVChecker.exe"

C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\HyperVChecker.exe

"C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\HyperVChecker.exe"

C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\MuMuDownloader.exe

"C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\MuMuDownloader.exe" --log="C:\Users\Admin\AppData\Local\Temp\nemu-downloader-aria.log" --log-level=notice --check-certificate=false --enable-rpc=true --rpc-listen-port=57811 --continue --max-concurrent-downloads=10 --max-connection-per-server=5 --async-dns=false --file-allocation=prealloc --enable-mmap=true --connect-timeout=5 --rpc-max-request-size=1024M --stop-with-process=5148

C:\Users\Admin\AppData\Local\Temp\MuMuNG-setup-V3.8.18.2845-overseas-0417125205.exe

"C:\Users\Admin\AppData\Local\Temp\MuMuNG-setup-V3.8.18.2845-overseas-0417125205.exe" /S /auto_start=false /fchannel=yx-gl-codex /D=F:\Program Files\Netease\MuMuPlayerGlobal-12.0

C:\Users\Admin\AppData\Local\Temp\MuMuNG-setup-V3.8.18.2845-overseas-0417125205.exe

C:\Users\Admin\AppData\Local\Temp\MuMuNG-setup-V3.8.18.2845-overseas-0417125205.exe /UAC:60274 /NCRC /S /auto_start=false /fchannel=yx-gl-codex /D=F:\Program Files\Netease\MuMuPlayerGlobal-12.0

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

C:\Windows\system32\browser_broker.exe

C:\Windows\system32\browser_broker.exe -Embedding

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x408

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca

C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\7z.exe

"C:\Users\Admin\AppData\Local\Temp\7zD64C3A30\7z.exe" a -tzip "C:\Users\Admin\AppData\Local\Temp\nemux.zip" "C:\Users\Admin\AppData\Local\Temp\nemux"

C:\Users\Admin\Downloads\MuMuInstaller_3.1.6.0_yx-gl-codex_all_1709777287(1).exe

"C:\Users\Admin\Downloads\MuMuInstaller_3.1.6.0_yx-gl-codex_all_1709777287(1).exe"

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\nemu-downloader.exe

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\nemu-downloader.exe

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\ColaBoxChecker.exe

"C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\ColaBoxChecker.exe" checker /baseboard

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\HyperVChecker.exe

"C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\HyperVChecker.exe"

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\HyperVChecker.exe

"C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\HyperVChecker.exe"

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\HyperVChecker.exe

"C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\HyperVChecker.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 roblox.com udp
NL 128.116.21.3:80 roblox.com tcp
NL 128.116.21.3:80 roblox.com tcp
NL 128.116.21.3:443 roblox.com tcp
US 8.8.8.8:53 3.21.116.128.in-addr.arpa udp
US 8.8.8.8:53 73.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 161.19.199.152.in-addr.arpa udp
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
GB 92.123.142.131:443 www.bing.com tcp
GB 92.123.142.131:443 www.bing.com tcp
US 8.8.8.8:53 57.110.18.2.in-addr.arpa udp
US 8.8.8.8:53 144.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 131.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 www.msn.com udp
US 8.8.8.8:53 assets.msn.com udp
GB 92.123.142.114:443 assets.msn.com tcp
GB 92.123.142.114:443 assets.msn.com tcp
GB 92.123.142.114:443 assets.msn.com tcp
GB 92.123.142.114:443 assets.msn.com tcp
US 204.79.197.203:443 www.msn.com tcp
US 204.79.197.203:443 www.msn.com tcp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 204.79.197.203:443 www.msn.com tcp
US 204.79.197.203:443 www.msn.com tcp
US 20.42.65.91:443 browser.events.data.msn.com tcp
US 20.42.65.91:443 browser.events.data.msn.com tcp
US 20.42.65.91:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 114.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 91.65.42.20.in-addr.arpa udp
GB 92.123.142.131:443 assets.msn.com tcp
GB 92.123.142.131:443 assets.msn.com tcp
GB 92.123.142.131:443 assets.msn.com tcp
GB 92.123.142.131:443 assets.msn.com tcp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
GB 92.123.142.137:443 r.bing.com tcp
GB 92.123.142.137:443 r.bing.com tcp
GB 92.123.142.137:443 r.bing.com tcp
GB 92.123.142.137:443 r.bing.com tcp
GB 92.123.142.137:443 r.bing.com tcp
GB 92.123.142.137:443 r.bing.com tcp
US 8.8.8.8:53 137.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.142.131:443 th.bing.com tcp
GB 92.123.142.131:443 th.bing.com tcp
GB 92.123.142.131:443 th.bing.com tcp
GB 92.123.142.131:443 th.bing.com tcp
GB 92.123.142.131:443 th.bing.com tcp
GB 92.123.142.131:443 th.bing.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
NL 40.126.32.74:443 login.microsoftonline.com tcp
NL 40.126.32.74:443 login.microsoftonline.com tcp
US 8.8.8.8:53 74.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 76.32.126.40.in-addr.arpa udp
GB 92.123.142.131:443 www.bing.com tcp
GB 92.123.142.131:443 www.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 89.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 154.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.111.133:443 raw.githubusercontent.com tcp
US 185.199.111.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 133.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 26.211.222.173.in-addr.arpa udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 watson.telemetry.microsoft.com udp
US 104.208.16.94:443 watson.telemetry.microsoft.com tcp
US 104.208.16.94:443 watson.telemetry.microsoft.com tcp
US 8.8.8.8:53 94.16.208.104.in-addr.arpa udp
GB 92.123.142.129:443 www.bing.com tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 129.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 8.8.8.8:53 watson.telemetry.microsoft.com udp
US 20.189.173.21:443 watson.telemetry.microsoft.com tcp
US 8.8.8.8:53 21.173.189.20.in-addr.arpa udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 8.8.8.8:53 watson.telemetry.microsoft.com udp
US 20.189.173.21:443 watson.telemetry.microsoft.com tcp
US 8.8.8.8:53 209.143.182.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp
GB 92.123.142.97:443 www.bing.com tcp
GB 92.123.142.97:443 www.bing.com tcp
US 8.8.8.8:53 97.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.142.131:443 th.bing.com tcp
GB 92.123.142.131:443 th.bing.com tcp
GB 92.123.142.131:443 th.bing.com tcp
GB 92.123.142.131:443 th.bing.com tcp
GB 92.123.142.131:443 th.bing.com tcp
GB 92.123.142.131:443 th.bing.com tcp
US 8.8.8.8:53 tse3.mm.bing.net udp
US 8.8.8.8:53 tse4.mm.bing.net udp
US 150.171.28.10:443 tse4.mm.bing.net tcp
US 150.171.28.10:443 tse4.mm.bing.net tcp
US 8.8.8.8:53 tse2.mm.bing.net udp
US 150.171.28.10:443 tse2.mm.bing.net tcp
US 150.171.28.10:443 tse2.mm.bing.net tcp
US 150.171.28.10:443 tse2.mm.bing.net tcp
US 150.171.28.10:443 tse2.mm.bing.net tcp
US 150.171.27.10:443 tse2.mm.bing.net tcp
US 150.171.27.10:443 tse2.mm.bing.net tcp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.200.14:443 www.youtube.com tcp
GB 142.250.200.14:443 www.youtube.com tcp
GB 142.250.200.14:443 www.youtube.com tcp
US 8.8.8.8:53 c.pki.goog udp
GB 142.250.179.227:80 c.pki.goog tcp
US 8.8.8.8:53 o.pki.goog udp
US 8.8.8.8:53 10.27.171.150.in-addr.arpa udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 227.179.250.142.in-addr.arpa udp
GB 142.250.179.227:80 o.pki.goog tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 142.250.179.230:443 static.doubleclick.net tcp
GB 142.250.179.230:443 static.doubleclick.net tcp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
GB 142.250.179.227:80 o.pki.goog tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 142.250.200.10:443 jnn-pa.googleapis.com tcp
GB 142.250.200.10:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com tcp
US 8.8.8.8:53 yt3.ggpht.com udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 230.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 4.178.250.142.in-addr.arpa udp
GB 142.250.200.33:443 yt3.ggpht.com tcp
GB 142.250.200.33:443 yt3.ggpht.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 i.ytimg.com udp
GB 172.217.16.246:443 i.ytimg.com tcp
GB 172.217.16.246:443 i.ytimg.com tcp
GB 172.217.16.246:443 i.ytimg.com tcp
GB 172.217.16.246:443 i.ytimg.com tcp
GB 172.217.16.246:443 i.ytimg.com tcp
GB 172.217.16.246:443 i.ytimg.com tcp
US 8.8.8.8:53 33.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 246.16.217.172.in-addr.arpa udp
GB 142.250.200.14:443 www.youtube.com tcp
GB 142.250.200.14:443 www.youtube.com tcp
GB 172.217.16.246:443 i.ytimg.com tcp
GB 172.217.16.246:443 i.ytimg.com tcp
US 8.8.8.8:53 rr4---sn-aigzrnz7.googlevideo.com udp
GB 74.125.175.201:443 rr4---sn-aigzrnz7.googlevideo.com tcp
GB 74.125.175.201:443 rr4---sn-aigzrnz7.googlevideo.com tcp
US 8.8.8.8:53 234.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 watson.telemetry.microsoft.com udp
US 20.189.173.21:443 watson.telemetry.microsoft.com tcp
US 8.8.8.8:53 201.175.125.74.in-addr.arpa udp
GB 142.250.200.14:443 www.youtube.com tcp
GB 142.250.200.14:443 www.youtube.com tcp
GB 172.217.16.246:443 i.ytimg.com tcp
GB 172.217.16.246:443 i.ytimg.com tcp
GB 74.125.175.201:443 rr4---sn-aigzrnz7.googlevideo.com tcp
GB 74.125.175.201:443 rr4---sn-aigzrnz7.googlevideo.com tcp
US 20.189.173.21:443 watson.telemetry.microsoft.com tcp
US 204.79.197.203:443 www.msn.com tcp
US 204.79.197.203:443 www.msn.com tcp
US 8.8.8.8:53 browser.events.data.msn.com udp
US 20.189.173.7:443 browser.events.data.msn.com tcp
US 20.189.173.7:443 browser.events.data.msn.com tcp
US 20.189.173.7:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 7.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
N/A 127.0.0.1:56467 tcp
US 8.8.8.8:53 166.188.117.34.in-addr.arpa udp
US 8.8.8.8:53 161.99.165.35.in-addr.arpa udp
N/A 127.0.0.1:56507 tcp
GB 142.250.178.4:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 csp.withgoogle.com udp
US 8.8.8.8:53 csp.withgoogle.com udp
GB 142.250.200.49:443 csp.withgoogle.com tcp
US 8.8.8.8:53 csp.withgoogle.com udp
GB 142.250.200.49:443 csp.withgoogle.com udp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 49.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 216.58.212.206:443 play.google.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 216.58.212.206:443 play.google.com udp
US 8.8.8.8:53 206.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 consent.google.com udp
GB 216.58.201.110:443 consent.google.com tcp
US 8.8.8.8:53 consent.google.com udp
US 8.8.8.8:53 consent.google.com udp
GB 216.58.201.110:443 consent.google.com udp
US 8.8.8.8:53 110.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
GB 216.58.213.14:443 encrypted-tbn3.gstatic.com tcp
GB 216.58.213.14:443 encrypted-tbn3.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 172.217.169.78:443 encrypted-tbn0.gstatic.com tcp
GB 216.58.201.110:443 encrypted-tbn1.gstatic.com tcp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
GB 216.58.201.110:443 encrypted-tbn1.gstatic.com tcp
GB 216.58.201.110:443 encrypted-tbn1.gstatic.com tcp
GB 216.58.201.110:443 encrypted-tbn1.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
GB 216.58.213.14:443 encrypted-tbn3.gstatic.com udp
GB 172.217.169.78:443 encrypted-tbn0.gstatic.com udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 78.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 lh5.googleusercontent.com udp
GB 142.250.200.1:443 lh5.googleusercontent.com tcp
US 8.8.8.8:53 googlehosted.l.googleusercontent.com udp
US 8.8.8.8:53 googlehosted.l.googleusercontent.com udp
GB 142.250.200.1:443 googlehosted.l.googleusercontent.com udp
US 8.8.8.8:53 1.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 142.250.200.1:443 lh3.googleusercontent.com tcp
GB 142.250.200.1:443 lh3.googleusercontent.com udp
US 8.8.8.8:53 ssl.gstatic.com udp
US 8.8.8.8:53 ssl.gstatic.com udp
US 8.8.8.8:53 ssl.gstatic.com udp
US 8.8.8.8:53 id.google.com udp
US 8.8.8.8:53 id.google.com udp
GB 142.250.200.49:443 csp.withgoogle.com udp
US 8.8.8.8:53 id.google.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 172.217.16.246:443 i.ytimg.com tcp
GB 172.217.16.246:443 i.ytimg.com tcp
GB 172.217.16.246:443 i.ytimg.com tcp
US 8.8.8.8:53 i.ytimg.com udp
GB 172.217.16.246:443 i.ytimg.com udp
US 8.8.8.8:53 youtube-ui.l.google.com udp
GB 142.250.200.14:443 youtube-ui.l.google.com tcp
US 8.8.8.8:53 youtube-ui.l.google.com udp
GB 142.250.200.14:443 youtube-ui.l.google.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.179.230:443 static.doubleclick.net tcp
US 8.8.8.8:53 static.doubleclick.net udp
GB 142.250.200.10:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.200.10:443 jnn-pa.googleapis.com tcp
GB 142.250.179.230:443 static.doubleclick.net udp
GB 142.250.200.10:443 jnn-pa.googleapis.com udp
GB 142.250.180.2:443 googleads.g.doubleclick.net udp
GB 142.250.200.10:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 encrypted-vtbn0.gstatic.com udp
GB 142.250.178.14:443 encrypted-vtbn0.gstatic.com tcp
US 8.8.8.8:53 encrypted-vtbn0.gstatic.com udp
US 8.8.8.8:53 encrypted-vtbn0.gstatic.com udp
GB 142.250.178.14:443 encrypted-vtbn0.gstatic.com udp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 codexexecutor.net udp
US 172.67.211.231:443 codexexecutor.net tcp
US 8.8.8.8:53 codexexecutor.net udp
US 8.8.8.8:53 codexexecutor.net udp
US 172.67.211.231:443 codexexecutor.net udp
US 8.8.8.8:53 stats.wp.com udp
US 192.0.76.3:443 stats.wp.com tcp
US 8.8.8.8:53 stats.wp.com udp
US 8.8.8.8:53 stats.wp.com udp
US 192.0.76.3:443 stats.wp.com udp
US 8.8.8.8:53 pixel.wp.com udp
US 8.8.8.8:53 231.211.67.172.in-addr.arpa udp
US 8.8.8.8:53 3.76.0.192.in-addr.arpa udp
US 8.8.8.8:53 pixel.wp.com udp
US 192.0.76.3:443 pixel.wp.com tcp
US 8.8.8.8:53 pixel.wp.com udp
US 192.0.76.3:443 pixel.wp.com udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 www3.l.google.com udp
GB 142.250.187.238:443 www3.l.google.com tcp
US 8.8.8.8:53 www3.l.google.com udp
GB 142.250.187.238:443 www3.l.google.com udp
GB 142.250.200.1:443 lh3.googleusercontent.com tcp
GB 142.250.200.1:443 lh3.googleusercontent.com udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 142.250.200.1:443 tpc.googlesyndication.com tcp
GB 142.250.180.2:443 googleads.g.doubleclick.net udp
GB 142.250.200.1:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 partner.googleadservices.com udp
GB 216.58.201.98:443 partner.googleadservices.com tcp
US 8.8.8.8:53 partner.googleadservices.com udp
US 8.8.8.8:53 partner.googleadservices.com udp
GB 216.58.201.98:443 partner.googleadservices.com udp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 syndicatedsearch.goog udp
GB 142.250.179.238:443 syndicatedsearch.goog tcp
US 8.8.8.8:53 syndicatedsearch.goog udp
US 8.8.8.8:53 syndicatedsearch.goog udp
GB 142.250.179.238:443 syndicatedsearch.goog udp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-if-v6exp3-v4.metric.gstatic.com udp
GB 142.250.187.195:443 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-if-v6exp3-v4.metric.gstatic.com tcp
US 8.8.8.8:53 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-if-v6exp3-v4.metric.gstatic.com udp
US 8.8.8.8:53 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-if-v6exp3-v4.metric.gstatic.com udp
GB 142.250.187.195:443 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-if-v6exp3-v4.metric.gstatic.com udp
GB 142.250.178.3:443 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-if-v6exp3-v4.metric.gstatic.com tcp
US 8.8.8.8:53 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-if-v6exp3-v4.metric.gstatic.com udp
US 8.8.8.8:53 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-if-v6exp3-v4.metric.gstatic.com udp
GB 142.250.178.3:443 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-if-v6exp3-v4.metric.gstatic.com udp
US 8.8.8.8:53 195.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 3.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 a11.gdl.netease.com udp
GB 92.123.140.17:443 a11.gdl.netease.com tcp
US 8.8.8.8:53 a1806.dscd.akamai.net udp
US 8.8.8.8:53 a1806.dscd.akamai.net udp
US 8.8.8.8:53 17.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-619326-i1-v6exp3.ds.metric.gstatic.com udp
US 8.8.8.8:53 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-619326-i2-v6exp3.v4.metric.gstatic.com udp
GB 172.217.16.242:443 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-619326-i2-v6exp3.v4.metric.gstatic.com tcp
US 8.8.8.8:53 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-619326-i2-v6exp3.v4.metric.gstatic.com udp
GB 216.58.204.82:443 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-619326-i1-v6exp3.ds.metric.gstatic.com tcp
US 8.8.8.8:53 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-619326-i1-v6exp3.ds.metric.gstatic.com udp
US 8.8.8.8:53 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-619326-i1-v6exp3.ds.metric.gstatic.com udp
US 8.8.8.8:53 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-619326-i2-v6exp3.v4.metric.gstatic.com udp
GB 172.217.16.242:443 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-619326-i2-v6exp3.v4.metric.gstatic.com udp
GB 216.58.204.82:443 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-619326-i1-v6exp3.ds.metric.gstatic.com udp
US 8.8.8.8:53 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-i1-v6exp3.v4.metric.gstatic.com udp
US 8.8.8.8:53 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-i2-v6exp3.ds.metric.gstatic.com udp
US 8.8.8.8:53 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-i1-v6exp3.v4.metric.gstatic.com udp
GB 216.58.204.82:443 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-i1-v6exp3.v4.metric.gstatic.com tcp
US 8.8.8.8:53 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-i2-v6exp3.ds.metric.gstatic.com udp
GB 172.217.169.82:443 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-i2-v6exp3.ds.metric.gstatic.com tcp
US 8.8.8.8:53 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-i1-v6exp3.v4.metric.gstatic.com udp
US 8.8.8.8:53 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-i2-v6exp3.ds.metric.gstatic.com udp
US 8.8.8.8:53 api.mumuglobal.com udp
GB 216.58.204.82:443 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-i1-v6exp3.v4.metric.gstatic.com udp
GB 172.217.169.82:443 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-i2-v6exp3.ds.metric.gstatic.com udp
US 34.36.47.246:443 api.mumuglobal.com tcp
US 34.36.47.246:443 api.mumuglobal.com tcp
US 8.8.8.8:53 242.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 82.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 82.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 246.47.36.34.in-addr.arpa udp
US 8.8.8.8:53 dns.update.easebar.com udp
GB 2.22.98.8:443 dns.update.easebar.com tcp
US 8.8.8.8:53 mumu-global.fp.ps.easebar.com udp
GB 2.22.98.8:443 mumu-global.fp.ps.easebar.com tcp
US 8.8.8.8:53 8.98.22.2.in-addr.arpa udp
US 76.223.88.1:80 76.223.88.1 tcp
GB 92.123.143.233:80 a1806.dscd.akamai.net tcp
US 8.8.8.8:53 a11.gdl.netease.com udp
N/A 127.0.0.1:57811 tcp
US 8.8.8.8:53 1.88.223.76.in-addr.arpa udp
US 8.8.8.8:53 233.143.123.92.in-addr.arpa udp
GB 92.123.143.233:80 a11.gdl.netease.com tcp
GB 92.123.143.233:80 a11.gdl.netease.com tcp
GB 92.123.143.233:80 a11.gdl.netease.com tcp
GB 92.123.143.233:80 a11.gdl.netease.com tcp
US 8.8.8.8:53 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-619326-s1-v6exp3-v4.metric.gstatic.com udp
GB 216.58.212.227:443 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-619326-s1-v6exp3-v4.metric.gstatic.com tcp
US 8.8.8.8:53 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-619326-s1-v6exp3-v4.metric.gstatic.com udp
US 8.8.8.8:53 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-619326-s1-v6exp3-v4.metric.gstatic.com udp
US 8.8.8.8:53 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-s1-v6exp3-v4.metric.gstatic.com udp
US 8.8.8.8:53 227.212.58.216.in-addr.arpa udp
GB 216.58.212.227:443 p4-gdq4vzfmdbepy-zf7xyqcvfla64plz-619326-s1-v6exp3-v4.metric.gstatic.com udp
GB 142.250.178.3:443 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-s1-v6exp3-v4.metric.gstatic.com tcp
US 8.8.8.8:53 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-s1-v6exp3-v4.metric.gstatic.com udp
US 8.8.8.8:53 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-s1-v6exp3-v4.metric.gstatic.com udp
GB 142.250.178.3:443 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-s1-v6exp3-v4.metric.gstatic.com tcp
GB 142.250.178.3:443 p4-dqd5jai4aiifm-cg2pb54m52dd7phv-318707-s1-v6exp3-v4.metric.gstatic.com udp
GB 92.123.143.233:80 a11.gdl.netease.com tcp
US 8.8.8.8:53 www.mumuglobal.com udp
GB 92.123.140.26:443 www.mumuglobal.com tcp
GB 92.123.140.26:443 www.mumuglobal.com tcp
US 8.8.8.8:53 www.mumuplayer.com udp
US 8.8.8.8:53 26.140.123.92.in-addr.arpa udp
GB 92.123.140.26:443 www.mumuplayer.com tcp
GB 92.123.140.26:443 www.mumuplayer.com tcp
US 8.8.8.8:53 nie.res.netease.com udp
GB 79.133.176.223:443 nie.res.netease.com tcp
GB 79.133.176.223:443 nie.res.netease.com tcp
US 8.8.8.8:53 ocsp.digicert.cn udp
GB 79.133.176.225:80 ocsp.digicert.cn tcp
US 8.8.8.8:53 223.176.133.79.in-addr.arpa udp
US 8.8.8.8:53 225.176.133.79.in-addr.arpa udp
US 8.8.8.8:53 comm.res.easebar.com udp
GB 92.123.140.26:443 www.mumuplayer.com tcp
GB 92.123.140.26:443 www.mumuplayer.com tcp
GB 92.123.140.26:443 www.mumuplayer.com tcp
US 8.8.8.8:53 ps.res.netease.com udp
GB 92.123.140.26:443 www.mumuplayer.com tcp
GB 95.101.129.27:443 comm.res.easebar.com tcp
GB 95.101.129.27:443 comm.res.easebar.com tcp
GB 95.101.129.27:443 comm.res.easebar.com tcp
GB 95.101.129.27:443 comm.res.easebar.com tcp
GB 95.101.129.27:443 comm.res.easebar.com tcp
US 8.8.8.8:53 o.pki.goog udp
GB 79.133.176.222:443 ps.res.netease.com tcp
GB 79.133.176.222:443 ps.res.netease.com tcp
GB 142.250.179.227:80 o.pki.goog tcp
GB 92.123.140.26:443 www.mumuplayer.com tcp
GB 92.123.140.26:443 www.mumuplayer.com tcp
GB 92.123.140.26:443 www.mumuplayer.com tcp
US 8.8.8.8:53 232.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 27.129.101.95.in-addr.arpa udp
US 8.8.8.8:53 222.176.133.79.in-addr.arpa udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
GB 92.123.140.26:443 www.mumuplayer.com tcp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 14.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.clarity.ms udp
GB 92.123.140.26:443 www.mumuplayer.com tcp
GB 92.123.140.26:443 www.mumuplayer.com tcp
US 8.8.8.8:53 sixhorse.game.163.com udp
US 8.8.8.8:53 bee.tc.easebar.com udp
US 13.107.246.64:443 www.clarity.ms tcp
US 13.107.246.64:443 www.clarity.ms tcp
CN 45.253.144.31:443 sixhorse.game.163.com tcp
CN 45.253.144.31:443 sixhorse.game.163.com tcp
CN 45.253.144.31:443 sixhorse.game.163.com tcp
CN 45.253.144.31:443 sixhorse.game.163.com tcp
JP 35.221.121.192:443 bee.tc.easebar.com tcp
JP 35.221.121.192:443 bee.tc.easebar.com tcp
US 8.8.8.8:53 192.121.221.35.in-addr.arpa udp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 h.clarity.ms udp
US 51.8.64.151:443 h.clarity.ms tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 151.64.8.51.in-addr.arpa udp
CN 45.253.144.31:443 sixhorse.game.163.com tcp
CN 45.253.144.31:443 sixhorse.game.163.com tcp
CN 45.253.144.31:443 sixhorse.game.163.com tcp
CN 45.253.144.31:443 sixhorse.game.163.com tcp
US 8.8.8.8:53 timejs.game.easebar.com udp
US 8.8.8.8:53 c.clarity.ms udp
IE 13.74.129.1:443 c.clarity.ms tcp
IE 13.74.129.1:443 c.clarity.ms tcp
JP 34.146.213.177:443 timejs.game.easebar.com tcp
JP 34.146.213.177:443 timejs.game.easebar.com tcp
US 8.8.8.8:53 c.bing.com udp
US 204.79.197.237:443 c.bing.com tcp
US 204.79.197.237:443 c.bing.com tcp
US 8.8.8.8:53 1.129.74.13.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 177.213.146.34.in-addr.arpa udp
GB 92.123.142.114:443 www.bing.com tcp
GB 92.123.142.114:443 www.bing.com tcp
US 8.8.8.8:53 www.msn.com udp
US 204.79.197.203:443 www.msn.com tcp
US 204.79.197.203:443 www.msn.com tcp
US 8.8.8.8:53 browser.events.data.msn.com udp
GB 51.132.193.105:443 browser.events.data.msn.com tcp
GB 51.132.193.105:443 browser.events.data.msn.com tcp
GB 51.132.193.105:443 browser.events.data.msn.com tcp
US 8.8.8.8:53 105.193.132.51.in-addr.arpa udp
GB 92.123.142.114:443 www.bing.com tcp
GB 92.123.142.114:443 www.bing.com tcp
GB 92.123.142.114:443 www.bing.com tcp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.142.114:443 th.bing.com tcp
GB 92.123.142.114:443 th.bing.com tcp
GB 92.123.142.114:443 th.bing.com tcp
GB 92.123.142.114:443 th.bing.com tcp
GB 92.123.142.114:443 th.bing.com tcp
GB 92.123.142.114:443 th.bing.com tcp
GB 92.123.142.114:443 th.bing.com tcp
GB 92.123.142.114:443 th.bing.com tcp
GB 92.123.142.114:443 th.bing.com tcp
GB 92.123.142.114:443 th.bing.com tcp
GB 92.123.142.114:443 th.bing.com tcp
GB 92.123.142.114:443 th.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.8.8:53 167.154.64.172.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
GB 92.123.142.168:443 www.bing.com tcp
GB 92.123.142.168:443 www.bing.com tcp
US 8.8.8.8:53 168.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.142.98:443 th.bing.com tcp
GB 92.123.142.98:443 th.bing.com tcp
GB 92.123.142.98:443 th.bing.com tcp
GB 92.123.142.98:443 th.bing.com tcp
GB 92.123.142.98:443 th.bing.com tcp
GB 92.123.142.98:443 th.bing.com tcp
US 8.8.8.8:53 98.142.123.92.in-addr.arpa udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
GB 92.123.142.168:443 www.bing.com tcp
GB 92.123.142.168:443 www.bing.com tcp
US 8.8.8.8:53 zeusexploit.weebly.com udp
US 74.115.51.8:443 zeusexploit.weebly.com tcp
US 74.115.51.8:443 zeusexploit.weebly.com tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 8.51.115.74.in-addr.arpa udp
US 8.8.8.8:53 168.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 cdn2.editmysite.com udp
US 151.101.193.46:443 cdn2.editmysite.com tcp
US 151.101.193.46:443 cdn2.editmysite.com tcp
US 8.8.8.8:53 46.193.101.151.in-addr.arpa udp
GB 92.123.142.168:443 www.bing.com tcp
GB 92.123.142.168:443 www.bing.com tcp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 74.115.51.8:443 zeusexploit.weebly.com tcp
US 74.115.51.8:443 zeusexploit.weebly.com tcp
US 74.115.51.8:443 zeusexploit.weebly.com tcp
US 74.115.51.8:443 zeusexploit.weebly.com tcp
US 74.115.51.8:443 zeusexploit.weebly.com tcp
US 74.115.51.8:443 zeusexploit.weebly.com tcp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.142.82:443 th.bing.com tcp
GB 92.123.142.82:443 th.bing.com tcp
GB 92.123.142.82:443 th.bing.com tcp
GB 92.123.142.82:443 th.bing.com tcp
GB 92.123.142.82:443 th.bing.com tcp
GB 92.123.142.82:443 th.bing.com tcp
US 8.8.8.8:53 82.142.123.92.in-addr.arpa udp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
GB 92.123.142.129:443 www.bing.com tcp
GB 92.123.142.129:443 www.bing.com tcp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.142.161:443 th.bing.com tcp
GB 92.123.142.161:443 th.bing.com tcp
GB 92.123.142.161:443 th.bing.com tcp
GB 92.123.142.161:443 th.bing.com tcp
GB 92.123.142.161:443 th.bing.com tcp
GB 92.123.142.161:443 th.bing.com tcp
US 8.8.8.8:53 161.142.123.92.in-addr.arpa udp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
GB 92.123.142.129:443 th.bing.com tcp
GB 92.123.142.129:443 th.bing.com tcp
GB 92.123.142.161:443 th.bing.com tcp
GB 92.123.142.161:443 th.bing.com tcp
GB 92.123.142.161:443 th.bing.com tcp
GB 92.123.142.161:443 th.bing.com tcp
GB 92.123.142.161:443 th.bing.com tcp
GB 92.123.142.161:443 th.bing.com tcp
US 8.8.8.8:53 tse4.mm.bing.net udp
US 150.171.27.10:443 tse4.mm.bing.net tcp
US 150.171.27.10:443 tse4.mm.bing.net tcp
US 8.8.8.8:53 tse3.mm.bing.net udp
US 150.171.27.10:443 tse3.mm.bing.net tcp
US 150.171.27.10:443 tse3.mm.bing.net tcp
US 150.171.27.10:443 tse3.mm.bing.net tcp
US 150.171.27.10:443 tse3.mm.bing.net tcp
GB 172.217.169.14:443 www.youtube.com tcp
GB 172.217.169.14:443 www.youtube.com tcp
GB 172.217.169.14:443 www.youtube.com tcp
US 8.8.8.8:53 14.169.217.172.in-addr.arpa udp
US 150.171.27.10:443 tse3.mm.bing.net tcp
US 150.171.27.10:443 tse3.mm.bing.net tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 142.250.179.230:443 static.doubleclick.net tcp
GB 142.250.179.230:443 static.doubleclick.net tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 142.250.187.202:443 jnn-pa.googleapis.com tcp
GB 142.250.187.202:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 yt3.ggpht.com udp
GB 142.250.200.33:443 yt3.ggpht.com tcp
GB 142.250.200.33:443 yt3.ggpht.com tcp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
GB 172.217.169.14:443 www.youtube.com tcp
GB 172.217.169.14:443 www.youtube.com tcp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
US 8.8.8.8:53 rr5---sn-aigzrnsl.googlevideo.com udp
GB 74.125.168.234:443 rr5---sn-aigzrnsl.googlevideo.com tcp
GB 74.125.168.234:443 rr5---sn-aigzrnsl.googlevideo.com tcp
US 8.8.8.8:53 234.168.125.74.in-addr.arpa udp
US 8.8.8.8:53 54.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 tse2.mm.bing.net udp
US 150.171.28.10:443 tse2.mm.bing.net tcp
US 150.171.28.10:443 tse2.mm.bing.net tcp
US 8.8.8.8:53 watson.telemetry.microsoft.com udp
US 104.208.16.94:443 watson.telemetry.microsoft.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 216.58.204.86:443 i.ytimg.com tcp
GB 216.58.204.86:443 i.ytimg.com tcp
GB 216.58.204.86:443 i.ytimg.com tcp
US 8.8.8.8:53 86.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
GB 172.217.169.14:443 www.youtube.com tcp
GB 172.217.169.14:443 www.youtube.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 142.250.200.54:443 i.ytimg.com tcp
GB 74.125.168.234:443 rr5---sn-aigzrnsl.googlevideo.com tcp
GB 74.125.168.234:443 rr5---sn-aigzrnsl.googlevideo.com tcp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 watson.telemetry.microsoft.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 142.250.200.46:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 142.250.200.46:443 redirector.gvt1.com udp
US 8.8.8.8:53 r2---sn-aigzrnse.gvt1.com udp
US 8.8.8.8:53 r2.sn-aigzrnse.gvt1.com udp
GB 74.125.168.199:443 r2.sn-aigzrnse.gvt1.com tcp
GB 74.125.168.199:443 r2.sn-aigzrnse.gvt1.com tcp
GB 74.125.168.199:443 r2.sn-aigzrnse.gvt1.com udp
US 8.8.8.8:53 199.168.125.74.in-addr.arpa udp
US 20.189.173.20:443 watson.telemetry.microsoft.com tcp
US 8.8.8.8:53 r2.sn-aigzrnse.gvt1.com udp
US 8.8.8.8:53 20.173.189.20.in-addr.arpa udp
GB 216.58.204.86:443 i.ytimg.com tcp
GB 172.217.169.14:443 www.youtube.com tcp
GB 172.217.169.14:443 www.youtube.com tcp
US 8.8.8.8:53 ciscobinary.openh264.org udp
GB 88.221.134.155:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
GB 88.221.134.155:80 a19.dscg10.akamai.net tcp
US 8.8.8.8:53 api.mumuglobal.com udp
US 34.36.47.246:443 api.mumuglobal.com tcp
US 34.36.47.246:443 api.mumuglobal.com tcp
US 8.8.8.8:53 155.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 216.58.201.98:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 192.0.76.3:443 pixel.wp.com udp
US 192.0.76.3:443 pixel.wp.com tcp
US 8.8.8.8:53 a11.gdl.netease.com udp
US 8.8.8.8:53 a1806.dscd.akamai.net udp
GB 92.123.140.17:443 a1806.dscd.akamai.net tcp
US 8.8.8.8:53 a1806.dscd.akamai.net udp
US 34.36.47.246:443 api.mumuglobal.com tcp
US 34.36.47.246:443 api.mumuglobal.com tcp
US 8.8.8.8:53 dns.update.easebar.com udp
GB 2.22.98.8:443 dns.update.easebar.com tcp
US 8.8.8.8:53 mumu-global.fp.ps.easebar.com udp
GB 2.22.98.8:443 mumu-global.fp.ps.easebar.com tcp
GB 92.123.142.114:443 www.bing.com tcp
GB 92.123.142.114:443 www.bing.com tcp
GB 92.123.142.168:443 www.bing.com tcp
GB 92.123.142.168:443 www.bing.com tcp
GB 92.123.142.168:443 www.bing.com tcp
GB 92.123.142.168:443 www.bing.com tcp
GB 92.123.142.129:443 th.bing.com tcp
GB 92.123.142.129:443 th.bing.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
JP 34.146.213.177:443 timejs.game.easebar.com tcp
JP 34.146.213.177:443 timejs.game.easebar.com tcp
JP 35.221.121.192:443 bee.tc.easebar.com tcp
JP 35.221.121.192:443 bee.tc.easebar.com tcp
GB 2.22.98.8:443 mumu-global.fp.ps.easebar.com tcp
US 34.36.47.246:443 api.mumuglobal.com tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp

Files

memory/4728-16-0x0000021F73D20000-0x0000021F73D30000-memory.dmp

memory/4728-0-0x0000021F73C20000-0x0000021F73C30000-memory.dmp

memory/4728-35-0x0000021F710E0000-0x0000021F710E2000-memory.dmp

memory/2012-45-0x0000018936180000-0x0000018936280000-memory.dmp

memory/1612-57-0x000002775D900000-0x000002775DA00000-memory.dmp

memory/1612-56-0x000002775D900000-0x000002775DA00000-memory.dmp

memory/1612-71-0x000002776E5B0000-0x000002776E5B2000-memory.dmp

memory/1612-69-0x000002776E590000-0x000002776E592000-memory.dmp

memory/1612-67-0x000002776E570000-0x000002776E572000-memory.dmp

memory/1612-65-0x000002776E550000-0x000002776E552000-memory.dmp

memory/1612-63-0x000002776E530000-0x000002776E532000-memory.dmp

memory/1612-61-0x000002775DBE0000-0x000002775DBE2000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\XCFODRP5\edgecompatviewlist[1].xml

MD5 d4fc49dc14f63895d997fa4940f24378
SHA1 3efb1437a7c5e46034147cbbc8db017c69d02c31
SHA256 853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1
SHA512 cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a

memory/4728-90-0x0000021F7C0B0000-0x0000021F7C0B1000-memory.dmp

memory/4728-91-0x0000021F7C0C0000-0x0000021F7C0C1000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\P68QH4OW\suggestions[1].en-US

MD5 5a34cb996293fde2cb7a4ac89587393a
SHA1 3c96c993500690d1a77873cd62bc639b3a10653f
SHA256 c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
SHA512 e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\~DF1FBA3C9A17A5710C.TMP

MD5 ea279328b8b8cd48b74503408201396b
SHA1 9fb829a0f4f676304d4097735824d471ee661ee6
SHA256 11354c4313f7280b4da7b980ad55fbdb5a9114276652fc7bf3ea7808b4ef4252
SHA512 3a162af1b6beb634d429e6129eaefd515cf84071b584f0e775245d42f9efe8a32fdb3165a50d1f4715759e1a94ea24e0ba584adfb615903db8b4b21f52d160df

memory/212-129-0x0000029628700000-0x0000029628800000-memory.dmp

memory/212-144-0x0000029638A30000-0x0000029638A50000-memory.dmp

memory/212-147-0x0000029628700000-0x0000029628800000-memory.dmp

memory/212-154-0x0000029639620000-0x0000029639720000-memory.dmp

memory/212-162-0x0000029639BA0000-0x0000029639BC0000-memory.dmp

memory/212-161-0x0000029639F20000-0x000002963A020000-memory.dmp

memory/212-180-0x000002964A8E0000-0x000002964A9E0000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\1CAZM08L\favicon[1].ico

MD5 84cc977d0eb148166481b01d8418e375
SHA1 00e2461bcd67d7ba511db230415000aefbd30d2d
SHA256 bbf8da37d92138cc08ffeec8e3379c334988d5ae99f4415579999bfbbb57a66c
SHA512 f47a507077f9173fb07ec200c2677ba5f783d645be100f12efe71f701a74272a98e853c4fab63740d685853935d545730992d0004c9d2fe8e1965445cab509c3

memory/212-263-0x000002964B3C0000-0x000002964B3E0000-memory.dmp

memory/212-256-0x000002964B130000-0x000002964B150000-memory.dmp

memory/212-374-0x000002964B800000-0x000002964B820000-memory.dmp

memory/212-425-0x000002964B840000-0x000002964B860000-memory.dmp

memory/1612-441-0x000002775D900000-0x000002775DA00000-memory.dmp

memory/1612-591-0x000002775E2D0000-0x000002775E2F0000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\o7B3FK6ymEOn7sBfZSmifVTwxPk[1].css

MD5 77373397a17bd1987dfca2e68d022ecf
SHA1 1294758879506eff3a54aac8d2b59df17b831978
SHA256 a319af2e953e7afda681b85a62f629a5c37344af47d2fcd23ab45e1d99497f13
SHA512 a177f5c25182c62211891786a8f78b2a1caec078c512fc39600809c22b41477c1e8b7a3cf90c88bbbe6869ea5411dd1343cad9a23c6ce1502c439a6d1779ea1b

memory/1612-674-0x000002775F190000-0x000002775F192000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\P68QH4OW\favicon-trans-bg-blue-mg[1].ico

MD5 30967b1b52cb6df18a8af8fcc04f83c9
SHA1 aaf67cd84fcd64fb2d8974d7135d6f1e4fc03588
SHA256 439b6089e45ef1e0c37ef88764d5c99a3b2752609c4e2af3376480d7ffcfaf2e
SHA512 7cb3c09a81fbd301741e7cf5296c406baf1c76685d354c54457c87f6471867390a1aeed9f95701eb9361d7dfacce31afd1d240841037fc1de4a120c66c1b088c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\xvEz2IbMlyghPZ3oNAHr9N-xMOA.br[1].js

MD5 dc221228e109f89b8b10c48f2678fb46
SHA1 1bfc85cba5c424136941ac1dfd779a563b5beed4
SHA256 f4fb7234959f48c2b2ca73fd6c35d36eaf65d8c431d982a1ba208f5cdc766419
SHA512 46f49e5ac18436251778d1f50c027729a2442ed6541c3162d878720703e37797b6028d96eb1568c23ec5006fb022c8e05855e250d6a1a590f41e890866529cd2

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\fRSNKQanUHk53F1a1Bi8UA71Qt4.br[1].js

MD5 9085e17b6172d9fc7b7373762c3d6e74
SHA1 dab3ca26ec7a8426f034113afa2123edfaa32a76
SHA256 586d8f94486a8116af00c80a255cba96c5d994c5864e47deac5a7f1ae1e24b0d
SHA512 b27b776cb4947eef6d9e2a33b46e87796a6d4c427f4759c08cf5aa0ee410a5f12e89ca6ab9cddd86c8471037e3c505f43c8b7fc6d8417f97f9fe3c5c47216bc4

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\tlifxqsNyCzxIJnRwtQKuZToQQw[1].js

MD5 cfcd208495d565ef66e7dff9f98764da
SHA1 b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
SHA256 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
SHA512 31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\9MqrCXB0EVjVIRzDOArDGhu3yeM.br[1].js

MD5 56afa9b2c4ead188d1dd95650816419b
SHA1 c1e4d984c4f85b9c7fb60b66b039c541bf3d94f6
SHA256 e830aeb6bc4602a3d61e678b1c22a8c5e01b9fb9a66406051d56493cc3087b4b
SHA512 d97432e68afdaa2cfaeff497c2ff70208bd328713f169380d5afb5d5eecd29e183a79bec99664dbee13fd19fe21ebae7396315ac77a196bfb0ab855507f3dacf

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\th[1].png

MD5 63343141c64682bd3e0f711730475354
SHA1 a2a7298e8f58a74292885bae9a3f44c76c7aa945
SHA256 f90e661a7731c97e3478027d07afd8c86e461c5f379932e15efad17d0e96d402
SHA512 17f7f14b0c929164283d5fd7bc829d907b923bb12a7b9d6124a6aac64eb79aaa47163583acca91fc71047bb7bb707d649407801c8762d8942a44531da9559edf

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\lVV08F1da0WpM29E8OkhXe0yr9o.br[1].js

MD5 02f23d233e9c3ff79a227592a1ef39ed
SHA1 f4160ad9edeea3009d57373a83b6395409c67844
SHA256 10d583a958ddf9850d7a9d2d85fa2da4cf468e3d5b5f8ab82e3e47ee03366048
SHA512 64ec3227bedb820ae760226bc2b24325dc3eedafcdded9a813bfd2137b22337870164bd1fe6ba415f8c64d64fb14e651b027daa0fdc23ab514e549f222ef22bd

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\K3hC1_cQXGFr6cxRJVWYpzZJaAM.br[1].js

MD5 02b0b245d09dc56bbe4f1a9f1425ac35
SHA1 868259c7dc5175a9cc1e2ec835f3d9b4bd3f5673
SHA256 62991181637343332d7b105a605ab69d70d1256092355cfc4359bee7bdbfb9c6
SHA512 cbb43000a142807ff1bb3bfac715cef1240233117c728f357c824ce65b06be493df2306c7b03598817f09b02e9e36ec52314f88467679c5bef3ee1504a10c7e6

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\lLk8XmbdNzzlnPRzVzDhaF9yjqw.br[1].js

MD5 3ff8eecb7a6996c1056bbe9d4dde50b4
SHA1 fdc4d52301d187042d0a2f136ceef2c005dcbb8b
SHA256 01b479f35b53d8078baca650bdd8b926638d8daaa6eb4a9059e232dbd984f163
SHA512 49e68aa570729cc96ed0fd2f5f406d84869772df67958272625cba9d521ca508955567e12573d7c73d7e7727260d746b535c2ce6a3ace4952edf8fd85f3db0dd

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\Gyuq2bqitqDJM0BeAkbKXGlQXNw.br[1].js

MD5 a969230a51dba5ab5adf5877bcc28cfa
SHA1 7c4cdc6b86ca3b8a51ba585594ea1ab7b78b8265
SHA256 8e572950cbda0558f7b9563ce4f5017e06bc9c262cf487e33927a948f8d78f7f
SHA512 f45b08818a54c5fd54712c28eb2ac3417eea971c653049108e8809d078f6dd0560c873ceb09c8816ecd08112a007c13d850e2791f62c01d68518b3c3d0accceb

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\n21aGRCN5EKHB3qObygw029dyNU.br[1].js

MD5 cb027ba6eb6dd3f033c02183b9423995
SHA1 368e7121931587d29d988e1b8cb0fda785e5d18b
SHA256 04a007926a68bb33e36202eb27f53882af7fd009c1ec3ad7177fba380a5fb96f
SHA512 6a575205c83b1fc3bfac164828fbdb3a25ead355a6071b7d443c0f8ab5796fe2601c48946c2e4c9915e08ad14106b4a01d2fcd534d50ea51c4bc88879d8bec8d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\8CgcSSLayxEVUBf0swP_bQGMId8.br[1].js

MD5 a5363c37b617d36dfd6d25bfb89ca56b
SHA1 31682afce628850b8cb31faa8e9c4c5ec9ebb957
SHA256 8b4d85985e62c264c03c88b31e68dbabdcc9bd42f40032a43800902261ff373f
SHA512 e70f996b09e9fa94ba32f83b7aa348dc3a912146f21f9f7a7b5deea0f68cf81723ab4fedf1ba12b46aa4591758339f752a4eba11539beb16e0e34ad7ec946763

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\V_fBQ_iVmAgE_Ta_T-6BNXc0ZY4.br[1].js

MD5 f5712e664873fde8ee9044f693cd2db7
SHA1 2a30817f3b99e3be735f4f85bb66dd5edf6a89f4
SHA256 1562669ad323019cda49a6cf3bddece1672282e7275f9d963031b30ea845ffb2
SHA512 ca0eb961e52d37caa75f0f22012c045876a8b1a69db583fe3232ea6a7787a85beabc282f104c9fd236da9a500ba15fdf7bd83c1639bfd73ef8eb6a910b75290d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\9xGNA8UskvA9WHF58zbLOHZ5HvI.br[1].js

MD5 d6741608ba48e400a406aca7f3464765
SHA1 8961ca85ad82bb701436ffc64642833cfbaff303
SHA256 b1db1d8c0e5316d2c8a14e778b7220ac75adae5333a6d58ba7fd07f4e6eaa83c
SHA512 e85360dbbb0881792b86dcaf56789434152ed69e00a99202b880f19d551b8c78eeff38a5836024f5d61dbc36818a39a921957f13fbf592baafd06acb1aed244b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\_2I169N92jVtSc_VEsV0nma5sRY.br[1].js

MD5 3104955279e1bbbdb4ae5a0e077c5a74
SHA1 ba10a722fff1877c3379dee7b5f028d467ffd6cf
SHA256 a0a1cee602080757fbadb2d23ead2bbb8b0726b82fdb2ed654da4403f1e78ef1
SHA512 6937ed6194e4842ff5b4878b0d680e02caf3185baf65edc131260b56a87968b5d6c80f236c1de1a059d8158bc93b80b831fe679f38fc06dfb7c3413d1d5355aa

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\gKwIRAF4fg7noG1zyeUz8x3Jdhc.br[1].js

MD5 47442e8d5838baaa640a856f98e40dc6
SHA1 54c60cad77926723975b92d09fe79d7beff58d99
SHA256 15ed1579bccf1571a7d8b888226e9fe455aca5628684419d1a18f7cda68af89e
SHA512 87c849283248baf779faab7bde1077a39274da88bea3a6f8e1513cb8dcd24a8c465bf431aee9d655b4e4802e62564d020f0bb1271fb331074d2ec62fc8d08f63

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\9cuwOQ_qE7qTGKohzrf_gIjTlPI.br[1].js

MD5 fabb77c7ae3fd2271f5909155fb490e5
SHA1 cde0b1304b558b6de7503d559c92014644736f88
SHA256 e482bf4baaa167335f326b9b4f4b83e806cc21fb428b988a4932c806d918771c
SHA512 cabb38f7961ab11449a6e895657d39c947d422f0b3e1da976494c53203e0e91adfc514b6100e632939c4335c119165d2330512caa7d836a6c863087775edaa9f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\Gw7eETSwe7GHmKwW1lRqGPQJXRo.br[1].js

MD5 17cdab99027114dbcbd9d573c5b7a8a9
SHA1 42d65caae34eba7a051342b24972665e61fa6ae2
SHA256 5ff6b0f0620aa14559d5d869dbeb96febc4014051fa7d5df20223b10b35312de
SHA512 1fe83b7ec455840a8ddb4eedbbcd017f4b6183772a9643d40117a96d5fff70e8083e424d64deba209e0ef2e54368acd58e16e47a6810d6595e1d89d90bca149a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\psgXZvzYJMEW2ydikIk493Va1d4.br[1].js

MD5 f4da106e481b3e221792289864c2d02a
SHA1 d8ba5c1615a4a8ed8ee93c5c8e2ea0fb490a0994
SHA256 47cb84d180c1d6ba7578c379bdc396102043b31233544e25a5a6f738bb425ac9
SHA512 66518ee1b6c0df613074e500a393e973844529ca81437c4bafe6bf111cba4d697af4fe36b8d1b2aa9b25f3eb93cd76df63abfc3269ac7e9f87c5f28a3764008e

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\nt6a1ZR520utsLoZmSYgwxdOPgI[1].js

MD5 0c2672dc05a52fbfb8e3bc70271619c2
SHA1 9ede9ad59479db4badb0ba19992620c3174e3e02
SHA256 54722cf65ab74a85441a039480691610df079e6dd3316c452667efe4a94ffd39
SHA512 dd2b3e4438a9deaa6b306cbc0a50a035d9fe19c6180bc49d2a9d8cdbb2e25d9c6c8c5265c640ac362dc353169727f8c26503e11a8a061a2517a303f61d0ccd3c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\0aAptBQXnUUuRNzELv9VJq7s7Ec.br[1].js

MD5 2ac64bafee103f5b7c498dd0aacbe630
SHA1 ae11a7571b37eec90f4054342bfe7758c65f5b2e
SHA256 69e9e2f395e447052f352953d983f2b40655a28315a11d97f06b4f55e3588570
SHA512 3aa783e483319c9f71e434a1212befa5a1f25e74f70fee8eece4a0d476193c4e80643ebc8b51917fba3301acc7a780ad8940b08c181bc601257df2f90ceb44e5

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\5L3iD467J3iJWEPwIjxlK0MMDpY.br[1].js

MD5 2ef3074238b080b648e9a10429d67405
SHA1 15d57873ff98195c57e34fc778accc41c21172e7
SHA256 e90558eb19208ad73f0de1cd9839d0317594bf23da0514f51272bf27183f01da
SHA512 c1d7074a0ebf5968b468f98fc4c0c7829999e402dd91c617e679eeb46c873dc04096cbf9277e115fc42c97516a6c11a9f16afa571e00f0d826beb463e2d1f7b0

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\K_V1CARn2Q2lTs5njJKUvUkHyi4.br[1].js

MD5 6c2c6db3832d53062d303cdff5e2bd30
SHA1 b7a064a64ceae5c9009ef7d6d8f63b90d3933c9d
SHA256 06b77ee16a2cd34acd210b4f2b6e423762ea8874bb26ae5a37db9dd01a00ff70
SHA512 bc2d115b53035b700d727af9d7efaf32dd2a39a2344f3f5fa1a82586be849ec7803e8320661e66ab7dd2a17e64b7897e95bbd84502b91997fa46eba4e67e8c7d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\6mZmj1db42G_jniFgdT7MCvBgyA.br[1].js

MD5 2ab12bf4a9e00a1f96849ebb31e03d48
SHA1 7214619173c4ec069be1ff00dd61092fd2981af0
SHA256 f8b5acf4da28e0617f1c81093192d044bd5a6cc2a2e0c77677f859adcf3430ac
SHA512 7d5aae775be1e482eada1f453bea2c52a62c552fa94949e6a6081f322e679e916b1276bb59ff28cf7c86d21727bcc329ecb03e5d77ca93204e0cd2694faa72bd

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\mOy7YpeLJ3c40BBAFNUI6SmOUTY.br[1].js

MD5 16050baaf39976a33ac9f854d5efdb32
SHA1 94725020efa7d3ee8faed2b7dffc5a4106363b5e
SHA256 039e6b3df1d67341fb8e4a3815f0d1bb3292a2040334ceb9cfc4a8d6abf2fb55
SHA512 cf0d54f0368ffbc6908216fd2573df8f5fe4c34ac08e17301b8734b3fabc674672a7f456707f632f82f44b36812dad8a0cf81a51d5cea21ea7f0e18500298375

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\NfTD8Ovh04Y_Ni14YxqYB8R_2_Q.br[1].js

MD5 f1cf1909716ce3da53172898bb780024
SHA1 d8d34904e511b1c9aae1565ba10ccd045c940333
SHA256 9abac0cbfa6f89106b66cd4f698ead5ccbf615ecf8cd7e9e88567a7c33cfec01
SHA512 8b641e93405565b4a57c051edefc8e02d6c929ddd4c52f9bfbd19c57896aa40426bf5ed6760dbd479719561c4f0a25bfc4102f0f49d3d308035c9ca90b1d0fce

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\910ptS3pcIDQ7a5acMaHuQliuN0.br[1].js

MD5 8898a2f705976d9be01f35a493f9a98f
SHA1 bc69bec33a98575d55fefae8883c8bb636061007
SHA256 5f30270aa2dc8a094d790e1e4a62b17c7d76a20b449d9b69af797a55fada9108
SHA512 c8575df93fbd1f65a285d484257adfe12733e47a6524a18d5910d33562eefd1d9da7197d16c7a3cad3bc5ad89546ff0fefe90e5c96e7850ecec9708c90334349

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\ORmleDHRA4N-DMFYGCrBC5A5QsU.br[1].js

MD5 b56fac024831f5c0360522038b175ca4
SHA1 cf492c24489bec6316d882b6ee640d9ebda31bbc
SHA256 708dedb81d976dd2c4cd64440859e667f34272ce83354a8675581832b19999a6
SHA512 83b9be116b88434e6ed871b5d91b9f052feadea6fd04cf2576df1828271d89508740eed09dbb0a7e787734ce25f534129d007f5870d9ec3f8020ca3efeff39cb

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\3US3nNU_RgsSNFm9Bzw6xgeuOHk.br[1].js

MD5 d42baf2a964c88aaa1bb892e1b26d09c
SHA1 8ac849ca0c84500a824fcfd688b6f965b8accc4c
SHA256 e3a15dab8cc5adbd2cfa1a162bf06583da6fb7be3831323d819cd881bfb0672c
SHA512 634bb1c984c9d74876051937240295a5ed5dc6404379decafbc4df074aefda5246ec33be84d2b21e0099c7bdd406e9cae6ebdf0ff01ddec3806b89dc50810c12

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\1rUTIFRcUHTZUBaDs_0q8KvUlR0.br[1].js

MD5 c63e610f6bfb2687ee044cee7d3e16c7
SHA1 b78022432ac754cc41335341a8e07f2676bad789
SHA256 c150d5e192ece8d69ba8029d87ecbc66674013b8418264cc86f0abcb0da0a38b
SHA512 11029009d8d0885d16a4b546816cc0f22f51ffd035fdd87d58eaf432017947460a1a78a543c0eb3875af49342a240ea606aced23654bc190ba6a4b7101e13a3a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\IPjqENt_x1c56fZCsFxov2V2J84.br[1].js

MD5 9a4dafa34f902b78a300ccc2ab2aebf2
SHA1 5ed0d7565b595330bae9463ab5b9e2cdbfdb03c4
SHA256 ba98a6ebc3a03098ca54973213e26f0bf9d1e7e335cdfc262346fb491c3cad69
SHA512 1a8b4fce1c0e585bfcf8f11e0192fb04a80dbde7035a9c8fc426cd6383d6902bd77222331372ea33aa50d92b7cc7965656b11f480085af70267b3fd8355ebfd4

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\JigriHckblqcu1XwKpT4wumVS2k.br[1].js

MD5 602cb27ca7ee88bd54c98b10e44cd175
SHA1 485e4620f433c02678be98df706b9880dd26ab74
SHA256 f1c39ee3528b8f6bb887150c10152cd3bbf849c4b305da9be3d4a92614e2f3f8
SHA512 b27a3b7737ce984e6ad448f68b31074f8a98c6ca5d66f3165d1dec650097077da9c80ef3045758c591a1cf0dda74fa4ba8039426d312f50f082d2a0f8e7de21a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\yZjAz6-B4hIBhJ6D3nAyY_Ebn44.br[1].js

MD5 2df9793cf020a37c88178be84311427a
SHA1 29cfe86239722d4f4af07c494d676092896a8600
SHA256 a69d257eee41e843881d548d2e4ee5a0727b889ab22bffdaa8ed1074e802bcc6
SHA512 e9a35ec1e466feb3e273fb991a3282ba1c45fd0eacea956e9821914cc4261377684b062bde888ebf5767bbc055db191dc14e00af8037b5607449c06e5d2dd082

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\zlfm-hC70pZAs62UVTTl3KShKOE.br[1].js

MD5 8c8b189422c448709ea6bd43ee898afb
SHA1 a4d6a99231d951f37d951bd8356d9d17664bf447
SHA256 567506d6f20f55859e137fcbd98f9e1a678c0d51192ff186e16fd99d6d301cff
SHA512 6faa73d59082065426769a27081cbedcd22146ef948afdd9a86801f205b2dddc63e03ac5d555ef0af23ef05901ebffe7e8aadd82260ef505cb89d99e572fdf4a

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\UftfQbYuKvGGEUHPU3QGHYd90Z8.br[1].js

MD5 8d078e26c28e9c85885f8a362cb80db9
SHA1 f486b2745e4637d881422d38c7780c041618168a
SHA256 0bf9f3ad9cdbbc4d37c8b9e22dd06cc26eea12a27ef6c0f95db6cbe930177461
SHA512 b808a972cd44e6bda01ac1f8d904d5a281f33b9238b8caab03decb6adb6b494b19dd9bb35e3d1ea3ca914ff4957155f6d2cb5a9b3a00c2195f80f52804ffb244

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\Q1Z1cF6gZCkTBd0Gx8Q7LjbPAlQ.br[1].js

MD5 7a0dd3b8ac06a6b4a01953955606ed27
SHA1 af6453882542d8bd119a768c025af1c94bf7b3ca
SHA256 f1b3acd8757d2c9db87cb851eebf25909c0355483520475c2ed1f29bb36e062a
SHA512 e5cc3aa206c4a62e746ea9743ae92fd5efb4d46f12c9f51ba04eefffc58e04fc8b085eb0fbeca42290a8ecd3d8c07b40ad80f80db3cf3309d098022f948865c2

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\y1tiMssL1_ZRGIkBjxDYmR2kX8o.br[1].js

MD5 e3c4a4463b9c8d7dd23e2bc4a7605f2b
SHA1 d149907e36943abb1a4f1e1889a3e70e9348707b
SHA256 cfb7fa1c682c6eee2b763b37e002022463cd6435434a16f6335f33fb98f994a6
SHA512 3a4e38e4c631d8e845edbc01c986f73b0368f8049beea7a3e8a34bdd5864c34103a48b19749c11b5bcc71fdaa672ef6c42e305e1cc6b37abea934766f3deb068

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\eKvcHdnNwo1WcxoSioV4ztnfZk8.br[1].js

MD5 fb797698ef041dd693aee90fb9c13c7e
SHA1 394194f8dd058927314d41e065961b476084f724
SHA256 795e9290718eb62a1fb00646dc738f6a6b715b1171dd54a3d2defa013a74f3da
SHA512 e03c4ab727567be95b349b971e29cffb3890cfb1a1ddf997b34b9d69154294a00a5112f4ffca4df4e26bbf96afa75e5943e965edc8f8e21035ed2ef30b7688d8

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\ydDuUFvQrnTEDpvE14Ya7abrPGk.br[1].js

MD5 d807dbbb6ee3a78027dc7075e0b593ff
SHA1 27109cd41f6b1f2084c81b5d375ea811e51ac567
SHA256 0acdce370092c141b0c6617ed6e2163f04bb9b93d3213b62c2bc7a46fe0243c7
SHA512 e037dfc31d595b459660fe7d938eedb4f43d208d247174ee8d6fd0d125f211142cd73497e4601893cecb6f565b7e2e7815ce416d72bb95504d3f277e4e806d11

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\ID-70CBAEOXh6Nwxga-CxgpUq4k.br[1].js

MD5 fd88c51edb7fcfe4f8d0aa2763cebe4a
SHA1 18891af14c4c483baa6cb35c985c6debab2d9c8a
SHA256 51f58a23f7723b6cbd51b994cb784fbc2a4ab58442adaeda6c778f648073b699
SHA512 ffe417fa00113273fe7ac1b1bd83c98a3a9dc12d41c77b60c52cc5ffd461d9ca2020c2444ac43771d737c70c58eca40786a5c5762b60f30da523f709684510df

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\uiannz55FdT0j3p9jGwegfI5aIY.br[1].js

MD5 45345f7e8380393ca0c539ae4cfe32bd
SHA1 292d5f4b184b3ff7178489c01249f37f5ca395a7
SHA256 3a40a1ff034448d68d92a75ababa09ba5f2b71d130f5f6bdf160dcf8851529a9
SHA512 2bfd00bf303ad5a1e8413b5ee6a162167605511fefb8df61a8f40f80382f5520df690a53b1058365f1d81562b2668376886d0f829517a642fcd87412801fe987

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\AsdMf7D6KLdP5SQOeuSIZtV8-sA.br[1].js

MD5 43b58b6b14b60581457ef8a405721626
SHA1 fa9da729b92847cc05ad81625b5667f299b75c08
SHA256 cef3b449403a4725a3866768f730e13f1bddec067cc67f306f023de2815a2789
SHA512 4c22ec83b8a81e0716c4ea9c643cfb4c4f9256447a114b7b0e05c0b38bc073f4a0538e2a385e963b3e2634ef34f66050ac2c36801772a345670409be8fd2e829

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\8w26ODmd1hk4C30WJtfkdBYFSfE.br[1].js

MD5 072d0f8c7fdb7655402fb9c592d66e18
SHA1 2e013e24ef2443215c6b184e9dfe180b7e562848
SHA256 4cd4cc3d07bbacdecb7331bf78fc5353b4b2664b6c81c1c0237136123d8e704a
SHA512 44cecee114212d2901dd13f9200771c708ef6e89b9bdcb75edf898a1e39833aafa4c7f8ebfc2f613d46eeea35222a1dfee3671a1b42679a94beaec099164f009

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\g2mFaePdYzQOubI8JEItbebrED8.gz[1].css

MD5 6d94f94bfb17721a8da8b53731eb0601
SHA1 ae540db8d146e17cfc3d09d46b31bd16b3308a6d
SHA256 21829c74fce2c9bbbb3099a7a487de71465ed712410c32bc6c69884db07a90dd
SHA512 bf33fb4858b56f888108bcd5c2691613b68715e260e59c1e37a050a709be04a8e0eaf5509667183a0d51f1201e58c02df4f744a0772242ee5b61595c44c072e7

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\_ykiGO1K5rjAQeICdJheT3jfLeY.gz[1].css

MD5 7a903a859615d137e561051c006435c2
SHA1 7c2cbeb8b0e83e80954b14360b4c6e425550bc54
SHA256 281d6234fd292800c2a5dbd14e524c9cee0d4438188b0b7d873abf41515a7666
SHA512 aa47efab7ec689b838d1e5adfe26e035e8b93f2b806f1954214447cb2065fa5906f81a70b4c656b3ce1490d8ac2009c7e7b0f96491d6d4559c41fb25d08fe35c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\Yb-MiHwFpZo4XYbuuNLKCnyhd1M.gz[1].css

MD5 aca7b62ef304e4e17941914622bf3a91
SHA1 0d66f41d9084a43dd339dfa584d0c44fc3c438e3
SHA256 a4579184b85367432ce944bc8652024345ba631b3e16bcf6330a9be1c45c1591
SHA512 7bf21542a5b092d32ed1bee229447baecdb9c2e9bdc4ec7f6cd7101f84ce67039e2142ac6413b9a231a77a427e8959b99edbd2445c293af54c0135c7c303c344

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\tPLNa5UcMaQEzzg0acZfPM45N6I.gz[1].css

MD5 9baa6773c6549250a3393e62c56eb395
SHA1 5bb4eead8609cd30b9b96b23ec4fd0082ae64c1d
SHA256 dadf403df8cfe888e59e6a051aee3783a2bf0bcc60dc1d09a7797daaee726ca2
SHA512 cf12319cf07897864828d9c950df4a98a0628d828a7fee75f1235fc5d3a57c90a40b5ded2743af2e62b1d13d3f6be0d302ada054e7c0d7164b8ba12054909b8d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\ToT8vvHOgjOfr5263Ll1i5zgqiU.gz[1].js

MD5 e97c30e7f16154e0cfec3e59f020196e
SHA1 28b004ab54a1b6022ab2ba0e45bbf03b31496d7f
SHA256 565970320f21690d9cfc10f7f827e9928ef8ae3b25e9f1551cbaa6c77deb47b0
SHA512 5bd0a58c77f1760b21e1a0f8056567e98a94c00f5ec0cd2eda550ea7568201bf32744db6dcc12946d31d286faf05f93aed7320dccb36bf396288db1ed15dd9fe

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\2IeqNnpxuobNf8w1fP2Oy2HEFfk.gz[1].js

MD5 22bbef96386de58676450eea893229ba
SHA1 dd79dcd726dc1f674bfdd6cca1774b41894ee834
SHA256 a27ce87030a23782d13d27cb296137bb2c79cdfee2fd225778da7362865eb214
SHA512 587d5b5e46b235cdcdf41e1f9258c1733baee40b8a22a18602a5c88cba1a14edf1f6596c0ab3c09f09b58f40709ac8cf7e1bb33b57293aa88eaf62d0ab13fbf4

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\43BJuM7qM_8Wd1WfIZM2_oK9zrw.gz[1].js

MD5 b743465bb18a1be636f4cbbbbd2c8080
SHA1 7327bb36105925bd51b62f0297afd0f579a0203d
SHA256 fee47f1645bc40fbc0f98e05e8a53c4211f8081629ffda2f785107c1f3f05235
SHA512 5592def225e34995f2f4e781f02cc2b489c66a7698d2feff9ac9a71f09e5284b6bbdb065e1df9c06adfb1f467d5627fbd06e647abf4e6ab70cf34501232126ad

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\NdbqOgqyfe4VC0s-T2QtV8xD5Uw.br[1].css

MD5 3c77fa3d379a82aaed87ad074d25ec0f
SHA1 448f89c6e09e6fa72f988b25ac110d1e509a9e0a
SHA256 61ac75a5e6779385d6c7102cfb786a1438ca966bb7484361fee3136358da5e2f
SHA512 52aa2068eead08bfebdf154a4a77250a956b38ce099d1fddd8310a28f2aaf8ee1eb7979c813e63ef8ef9f6314c8fbbc407d492f240907c083b1330e102f579c5

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\CSVzDkEGwHFa1078SFflQgrsIog.br[1].js

MD5 e57d2d699a715849bc5afadb65bc4ac7
SHA1 b7fdbd4c6a3e739b2fddfd2c5093197ce639733f
SHA256 a4c88fc96de0d0898b6007a258daa1ef2e6ec8e71d54ef450d4b0c2f7162fe51
SHA512 9b05a69cb275f786bf6b4fef5675cb229ba4fa4e82cf76ef6c8fdf7bdbc49fb313ee3b63c691fd660971b96ef9a40b636dc63c176762cd839456de4583613964

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\Ao8XOvaaQxlXxHEA_r06zFgCMTc.gz[1].js

MD5 1219dc0fc961884c63e3746a49d110d3
SHA1 394c2fc179a2701bb15efab41a3fa052258603f9
SHA256 58ab30f993e014d3ee0e952c74811a8b34b13db0ac41a97e94606c507bb0f798
SHA512 6403ff66b8a5fd0ea11d27ec5c379eceeb9ad66762ffa773ceb0521eadb85828f99b8ed8223683e4e164180bd5e984f000335f3337d532cfe21e9aa5eed5c57e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10D

MD5 d6b5f213844cedbbb957a9e33f33dbff
SHA1 d56f5249163cac05a428cb67d226458f0c17f462
SHA256 97861b221fdb2ab5dab4f885c569f6a7baca581daf87d7eaa4d011b785065e87
SHA512 eb20e185779d82e53f9e7d037e99b67365cbed9de035baed68e180c479c3339a40839caa5d26f12916c17207d72da18bbc8637c54d9cc8909265545b98585753

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10D

MD5 ab50105fd451ec56bf5d404a105903e5
SHA1 abcb7de6ca9055bd8e724c0db8f03f72971d6cd2
SHA256 c4f6e04fe2a5d09c635b53d5f91fe9f39eb8c8d71905bf0aaf6216e77863efb3
SHA512 02418bdccb2f7a1189fd87ee6a3716ad334f5ec05ca0e531c7a1f0f01d405a499b83916b1383c89acf8e903d301b6f532e18fb9a14768e00a9aa57a3a1ebc190

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\O573WCN1\favicon[1].ico

MD5 da597791be3b6e732f0bc8b20e38ee62
SHA1 1125c45d285c360542027d7554a5c442288974de
SHA256 5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07
SHA512 d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\AstroExecutor[1].htm

MD5 42ef689b997535f82b80482d084c0fcd
SHA1 418cc6bf59cbe05144a43761669c31f14a5ce236
SHA256 aacccbd61f23395695660a2e940cb88f68d6c9d5979c07c880de70c7f3c0a96b
SHA512 19e2fc29ce8c90ec514597b883dc1a8ba38285c128c36f8c6ec9b686369a1abc25cbf9d7f92f48a38de0e730446f6139dc13caf1730ab994b3ec654a95bdbcb6

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

MD5 d8b392e4aea67c2a9731dc4893c41d30
SHA1 e93637241a44ca71d43b6787c22fb496b1b46774
SHA256 b66cc25a7c61ce176cbe5f41713b084db2e38d949bbac80178329352cec19181
SHA512 1ca2c563036a7784e996f46ece5a98641fd41594a3eaa89b0d9c7c8801a8338d1c153d0cf7fa406a229ab7140c523246e67326da132f937a453636a378221d94

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\A66A8DB907BADC9D16AD67B2FBFFDD5C

MD5 346fe4522465b04bb750eede353c807d
SHA1 f30fc342a54340fd1e35eeea0a9f470e1ccdafab
SHA256 ed99ac34df6ef948119a7c8278eb8ace0fd908d5fcc42f9242e134a2bfaa7d10
SHA512 eb0ff115980f5926c0eb864f6d2e075183a775eb36906018cbbbfdd95d33ed73818efdaaa5b6515b9d89afcd16571fd5fc43353dee1e59d32733b0b3d03dcbcb

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\A66A8DB907BADC9D16AD67B2FBFFDD5C

MD5 4ec59ac8f3b2ae95168c9cabd3147151
SHA1 de7d5e63c988b9c27f17a6dd8b3e2d6a1208fe2d
SHA256 165a9f3c3e0d665141953f05ec60ff6959e6b15cc50d9cb2746a26937181543b
SHA512 832e5712fa43c890d03ca4c437b11b23bd74d7c383ee095e2bc9380845f592a468fb5cd1eef7d637ae7d34a0b9bc3c11bef84e78d5c42e7ac78ca05aec026599

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

MD5 fcd451d100451b87ac42092de358782e
SHA1 f701b9bc3fff61891b31ff0c826f33c874831384
SHA256 116d2c6230b40ac3a295209a862f90abb051b458d16f0a5cbab293935c6e2585
SHA512 1fd1ea3cd1d740d1ac9a25cd48dedb6bea007c89702de2799357a784680f60f649114367d9cbbb1f001e8a9edfa5c9301b00b30be5c63202fd330839be600062

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

MD5 b5ab17d4f916b16f107429fbd0724c93
SHA1 39b2c6bd172c89440129f35b481538eb6e7dd54f
SHA256 cd67b64ae69f04d81477ae47f5fa7156d56a698721cd4d3e5e0ade91734084e5
SHA512 788dd105a5bb65532e3dd64f8091481dd7e9e6d37ff897fc1ececfd23e41cbd1065b79d583713cd035fef81ee677f22cef7aa969641826b1c222ea983481f9aa

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

MD5 b5515da3eb198e1da77fe08e05c21d37
SHA1 01179bbd38f9a182c5111d13aa013c714442466e
SHA256 37fd749b8d1888d7b569927ad01d32fdcdcdbaf02118ba16d72e98b3127fcc19
SHA512 5dfe6589e6f2234cfd263fe795d66e342bf48171ed63f4d2176266e1085c40c181bce741ffc336eb78f6822c33ff44640a40f8405a28aa27ba5daba4bee44667

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\dark-6b1e37da2254[1].css

MD5 96ba1deb375c1c66bb092fa0a1765be1
SHA1 03f188ec52d09882b8403ed57d7aa73a224ddd62
SHA256 d6bc29d6a4e33c7f4da1d4b8060cce6dedf384d7334b71661c277e985ef8c156
SHA512 6b1e37da22544d5626c6f78691a8d8f723c49c95a782f5195f4b00b0e1b9d4408402c25d5915e097ef31273c3c8d06d81d1ba1bb08e12677941b8b1f24d92848

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\primer-primitives-8500c2c7ce5f[1].css

MD5 e9c08b9ba681ad6606bd18f264e73ef6
SHA1 04d1e96739d82e07587f10bd2d953c8e70b93d9d
SHA256 b08c9718118f5b814e632ac3dc0d8e009e5dc2913df183f0ed322e6817e997df
SHA512 8500c2c7ce5fdad5fa01aa92156964108335c704a127ce290d201395009914c814ac6e08a467e45d1ca0fc75b2269b7f09a6d437939d91c9513c659a80cf472e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\light-efd2f2257c96[1].css

MD5 b8473fdb0f4749de99341662aec850f2
SHA1 f593c957a26528558217837aead34cf718d27443
SHA256 8aabc55d211fc93acb563c9cf30732577212a998196f73b067f9795c8d1ef72b
SHA512 efd2f2257c96c12eba6da741c677030ac63c34a925846080ec606e5a974706726479bd5babea6dd0ac7e8e421704263787986fb07a9c384994cf403bf8bc3dee

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\global-9e9ac94b9f81[1].css

MD5 7a76a5e48751eb053f5f8057d2e25c93
SHA1 a25ef7761e64e711c814a9e4ed0789608a730247
SHA256 5e34d6147313eae17e7b7a64c1b17b54e602d41a7d9272e2bc86486ce79ded4c
SHA512 9e9ac94b9f81ece4a8d84b8f543fdeb7fd5fd67372c3a8cebe4984b7a977af9462d0c1d58fcc417b3cf2c1320ec45f4ec6fb806d52e1247e066ab86c7fe0c47e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\code-9fa8d759d6f1[1].css

MD5 c9804a16de013087d2baa1718fec5ea5
SHA1 672290a6d0941b6a682e81de1b81f0419db8752d
SHA256 610710f9967b159c483ce3e70ac03bbeba7870b130c66b9f829cd65270384ae7
SHA512 9fa8d759d6f1651549c51f4e1cf8d246d2e2153c223042bc01f22aedabea44e86a1ee0911f1b9823ea4b0dca13b68d96e64bb2899f2be3749f43439a38a9bfb4

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_smoothscroll-polyfill_di-75db2e-adf929d695f3[1].js

MD5 39c9822240af7e9d31ad72836ae90bf4
SHA1 809afb6b10419a3429466a2635da80761b91106d
SHA256 a9cf8d3f90605df1ede183ce15eb836e9211fbb0014b0c5ea282942fe96866b0
SHA512 adf929d695f38240a78c0dfac2b5a59a1bd8d78aa1f3b122daa8b3eff311ba441f29d11574934d7bce7aa25bc04b15807f53f9e47aeed1ed865cfe26d3a9ac92

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\environment-bcaf5ff1a8f7[1].js

MD5 9fd9c45896ee2ca1ea5c306a8a0d1c58
SHA1 9113ec322802ac10f6874167e2e100a2b80fc93c
SHA256 43db7372eb07401197193ce723ddc6c30a579f5900b75bff41e71a53bb2ff9bf
SHA512 bcaf5ff1a8f71b465358bf7621d2f0d5d0df9fe9d2426195968b74cd9acf011a332dd76eca662c9a71108993375549be7665da88ce76e4236207d60967831339

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\vendors-node_modules_dompurify_dist_purify_js-89a69c248502[1].js

MD5 36f04458790e19bb99bd77a1cdc16295
SHA1 8f25cd75135fec8c088728f53d39dcc21d375fdf
SHA256 cfac43b55a6b86258b9d3495eff18f26f598313a14cf76a3dbb1e3e7fd341f00
SHA512 89a69c2485029e3393d81637b2eeac776d0765835e6ffcdddb1394f4421c5236b5cfee873568736d8a233b6c9bafe6ea828d2b718133aae8f0d22f220165fb9e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\wp-runtime-233f7e129770[1].js

MD5 bdd10cb65804260702abe1d145e2942a
SHA1 14ba7844d4f895ef5d2e28569e317a641967e167
SHA256 867d874e24231d48e6079a63e2d39d618c1ee0cda6a72e457a1472081d5e8fb2
SHA512 233f7e1297702fdfa45de21a63029bb15c56d95411cd612675e246fd5bb1b60cbd2d22cfef200c38c62c82927d3eea752d7c6fdfcb6dc4de256f37c0851560e6

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\repository-a7f555d78ff9[1].css

MD5 ba196d4c1e022d5cab19e2235db82d92
SHA1 67dd8cc44c4162482ae7d7670a25a65326e037ff
SHA256 52440dfb28add980cbe1a0281f173b8c557bd64feb90406c2d057e98340bc46d
SHA512 a7f555d78ff9b024e16e85c155bad21d385ba1cafc68ef058baaa1e350aa4e56790991818e6e8fd93875e9bda66bef77e3289349bfb34c00c93ff945afa00251

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\github-a1c8541470fb[1].css

MD5 65a95ca8fcc17d52eb361fdf0d77f57e
SHA1 b93e7bfe0ff5baac21c6d453326fb784a52f1702
SHA256 79a4c33d657d19b374d28a76b3063bfe2a168589fbfc3aa99b07e9fcdfeb1d4d
SHA512 a1c8541470fb6173268575cc8980b529c397f515446a8b83546e9ee86bf594effba83e6f61aaed7c1f573ec24914606bd4af3b2b19f26ec5c9dc7f0cd911db21

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\primer-38e58d71ea15[1].css

MD5 69a61dc716e08413491c664cd61c2a93
SHA1 9d73d2222720623c57b11eaa90e296b743cb3058
SHA256 5be84dff60d0b63e2cc4d21ba3742d1d22457187fac848569c15300b1eb412c6
SHA512 38e58d71ea150bb7d19051dd0d47c3342c4b608f20111e501c1e572e234f9584828bf87dd9ea7c25fc4a30b58a08f77780163b54cd7d34de2665657533405075

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-c9086a4fb62b[1].js

MD5 19e28fe2dcffe5582e6352b53d0b22ce
SHA1 1e656d3443915c4e4bc9782f4366b4eebcf45720
SHA256 345e3daa928a64bc11b3778cfb36228d0025c260defa0b78e4c0ebe66c419737
SHA512 c9086a4fb62b90cd43e0a47621528a23582de79c4bdb1b2eac386f8e331c5ac891aa69975fdfb487a4cf508852c1c3ebc2df24e00ffca5443fb6e22f3b3ee99c

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_github_selector-observer_dist_index_esm_js-f690fd9ae3d5[1].js

MD5 e131f8c9b77918aeb94fd82199a423d6
SHA1 71eaae086cd44a8904f39d27fb5387bb957976f0
SHA256 01f9a0ec0bb24312ae0395b6aa238f8d910dc35c08ef5a25a1e9cd8feac83c32
SHA512 f690fd9ae3d5a240e479fea97ac82940f136f3f2e0262cac840345f2b956123117ca94424dc354d90d13f1c0169c24b19526505bb2fad70c8c364899474a9495

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-d8f40351c6bb[1].js

MD5 407ff92ca4fd65e29f7ce09eddb58338
SHA1 64058be928d79d4c05949580a282fe22c9cf6156
SHA256 43a3eac5881a4d9b2ef070517c54c072cc7e6d25a35f2d47164837fae6865a57
SHA512 d8f40351c6bbf635d03a4d268caeb9a7f85692e0b672d394b7a270d13b34c8d8d5eb7a8f8e12ceb7359a1a457df5cec3316c8533c5474ee7d00317d5a6aea418

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_clipboard-copy-element_-782ca5-54763cd55b96[1].js

MD5 80708c39dbd42e80616bc4a61b51c1bb
SHA1 a87eb08671b07a1c2689a6caca2486727af9ae3e
SHA256 10e085fffc04da9cbf0a46c8a6e120d34947c4ed859f05e26cb0abaae312e094
SHA512 54763cd55b96117e15652c12e9ca5e8ec71e58eabbd9537a7e6c833ec124199eae23091ef59275513f2cacf055e9ae69d7683474fc31f81ef823578118c462ba

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-2355048ff048[1].js

MD5 c6175500bbb3bf8dc98aa0d4229caab6
SHA1 59fa80835b3a054500c80573c5403dbe3b6c72dc
SHA256 936cc4f56aef6760208636c671f028f76a6a896b1a113df7f64b4fe10ac9cbfc
SHA512 2355048ff0483d1b53126ffa8506d15da3baf9cac2570b99cf6c1d019b4702231500ec72485e529b4ab8250631e664d080818ec91cf9339770528948489f92a8

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-af795d-6b8acebb2278[1].js

MD5 80e14683f48a20d0dfd6ec5e2a5f9061
SHA1 6bdc4222ff5868b5299fb0bc76308113d1219e6a
SHA256 d6e059540c8e0d2c5ce758814b414ffeececa003523b3f24fc3dc973afc0107e
SHA512 6b8acebb2278d1cb6289f583fb8479f2a77150360b995475317e88c8b698077c47f4cf0a62fc256009a973735c04cd86df29248067749c8b75b287d3576f8a94

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_details-d-ed9a97-841122a1e9d4[1].js

MD5 d50f30bd48bf15a39fb0de84d338b063
SHA1 c974701a469b2ae91195cc57a42c3157c0210646
SHA256 21c5e70f201ea5ebcaff6f1244e6a7fbfca84d1878cd41d4400696bbbe09af5a
SHA512 841122a1e9d49b8484e68dc82869b7835e54a9d632909ec4f0c386ba843d2eaf20416c75c19c4a250a8cf22de8ef43f1fff6d77d29630132266c6f533c487e2f

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_github_text-expander-element_dist_index_js-cd48220d74d5[1].js

MD5 69f387b852329683c3f4856ccb905f60
SHA1 a58ffa40abbb4c6f5ef0545c1ffb932c21d73cc1
SHA256 d9cdb2e9f9c648237f22c43f8f12e85d8944c75ab325352059c3e53516635167
SHA512 cd48220d74d52b956312b2c59ec764d2d559e73c51789f9d649e108925f79ae3c910744161904b2840894bfcff64507971d5a19f921e5190a710bda4eceb63e2

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_github_relative-time-element_dist_index_js-f9b958f5f2df[1].js

MD5 46afaaf3a6253f2ce9568db9e301ec8a
SHA1 b365c36e165567048bad614c98baa22bef4b9b91
SHA256 7ef807f7b9fe45ec17faa06e235c7adac46227f7589b91653fe4e0ae3a7a0ff4
SHA512 f9b958f5f2df5e85cfb021de43dac548c271eab2ddfa4463c213d7bf311b7ea3b7b93b7231de9834db884bbe53b012b3a1dde85eef9c6daaf46609aeb446fdb4

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_stack-68835d-a18220f1db8d[1].js

MD5 0cb967b7b9603edacb27a261ba59bb63
SHA1 ff39f99d51916d3bea1fd5ae853abf93ffe35b2b
SHA256 f4ceffa8ba23288e7d15bdde1bb227559443380c041d0febf6bcd525946bec41
SHA512 a18220f1db8d086f2cae618e9196599eff46935aa7bcbc601276acf10bfa09b700b37122aa00d227e61c1b1257b7304ec064221d8926c330789b2ad3ca0f2824

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_lit-html_lit-html_js-ce7225a304c5[1].js

MD5 b4de96241178473d9f682dea5a92e41b
SHA1 e274c147c9bcb636b3bf4f9df1acfbada27d8a90
SHA256 c823056c4e37d95cdee809f535000bb37b9c8d956ab0410c98a6f4a8fab4f47f
SHA512 ce7225a304c5935fa3fdab2e736d9738651ed0fa6f4503bb65deaee022bc03c3033170d53adc2c1a77c88904ea14a9603519b87990f04e47885209a53c893056

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_hydro-analytics-client_-7901e7-4b84c23ea573[1].js

MD5 5567c8f1746f2e828c361e84220d1305
SHA1 3c038f36ab737689caf12cdc832df1beb7ad782a
SHA256 8fcfc110252d25244107b3cce12be4181bd2b76abfbf58e3392465ffb093003d
SHA512 4b84c23ea57301420ede79e954cf867d2b8f95ed75d568621028f58304b6fa7987d24e5cd829988426a5fdea611b853cc67e94644f4b23e530725c266c6b74d5

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\element-registry-d3ba3606e12c[1].js

MD5 d08198a29f3092a5033090b4a723e0a9
SHA1 12c01f223e1122b61aa2a61ce4cf0506d4e66ddd
SHA256 6e76b14131be4b4f81eed409c11d93065ad41906c00032b00ea0ef0c7a62196b
SHA512 d3ba3606e12c142b68b561f4dbf45858eabce1844db8bef5ee78b64b97ee6b2bafd858cebb27feeb30913d84d79541f0a11dde1c00c2cb7925fb6cd55df804ff

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-6cf3320416b8[1].js

MD5 fbbd4bcc22313de76bcd2b3e4bb12e0b
SHA1 1422fbb0c4a416eb66e429d2cf797ed29a70dca5
SHA256 8060d4de1a065854c98adcc50f292dcab8f424a9edbdd4aabb7409cc4c6eab99
SHA512 6cf3320416b89fca281c439927ac3d76da74f9463345a891c4904c8e50b476e21d11ed06aa2316ce770c36f18337aa4e2619bd3fd28a4cc8454d649110060726

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\app_assets_modules_github_sticky-scroll-into-view_ts-78ce1c8782f5[1].js

MD5 866d194e4ef2729fbcf6d986a8b03799
SHA1 f954b2f1ada60f8972a82e8e90ee9041513a7234
SHA256 a14516867431a8663d4354d10e0d0142dbb6952645b074862a1b713c41c33678
SHA512 78ce1c8782f5645f221780938981a5d1b723be32d6867ce910c50054218f9c860019ea6d3c58995bdc92ea3b2814d94b7860da5452abd1f429a71da9779f770a

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_primer_react_lib-esm_Box_Box_js-55a9038b54f0[1].js

MD5 c660c2ee0360a1d18bebeb12641857ee
SHA1 6fa2bc02090373854b6bcaa15096f517018c375a
SHA256 0aef521ca83330f959d3fce2efef9175fdeb618c55c79ebda619d1a8a87987e2
SHA512 55a9038b54f031de7844ce356e22d2e2a145f4b2f7c0453439586079be60cedafc3eb4f45219ffe9ce2beae21e1a67f12523db049f948e7ce777aef7cdd2b788

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\app_assets_modules_github_repositories_get-repo-element_ts-48feb572f2be[1].js

MD5 4d8ea72e0bee39532bbc8780d5d51271
SHA1 c142e254a2b6755271e8fc22bdfa0151d01999bd
SHA256 e9fe744775bc0e876431918e73c379af3268773ed32d8f3c294a9b1ec06759d9
SHA512 48feb572f2be35b84f30a58463430bae483b4cc8a24c76f3e425d5e642b3b30d0d82b0c8690cc0d652f539424b9d58c199c0655836885ecc074afecfa07c375c

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_onfocus_ts-app_ass-421cec-c712b754a62f[1].js

MD5 bdc0abec4f488d32ab6515bd1016b4e0
SHA1 0060a7c3ad2f7a752654c0856a80f77ff572191e
SHA256 65fdf77665405da8ed46f1dbe1f95fdd49832e69049cd6449ceffd235023a5ab
SHA512 c712b754a62f23f513c700b540781d4dfa6fbf82fa5778fb6253efe80ed6525a76ad088b9a891e73b73a16b0f3240b8f80983951fa5008e716a66e981f413f58

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_color-convert_index_js-0e07cc183eed[1].js

MD5 b36809a997ce5e5ad8b0b4f661ce60d1
SHA1 fff11cfd01b744a770de926e13dde8f546e565e7
SHA256 687890a8b37083fcbd85fe5fcd960a6d80378b01a5f86287f207bb7c807b5ee8
SHA512 0e07cc183eed2b6d1302e51254f6b4f204a920873dadd83581483d52bf9a2e6537ebbb0417eb04567411dac64232653a0d046abf2c31c4809bc72fc6603b0749

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_primer_react_lib-esm_Button_Button_js-e151c17189c8[1].js

MD5 d1b6c4d10b97500009f14c00cf8a0be0
SHA1 ea5b8b06e1f430c486878804af0d9ab5fd27152a
SHA256 280e90e10922fca82f776c10e40f9d692fda0474723fbbb9aaff77ac42cd5908
SHA512 e151c17189c816b447272668e70a272452a27e67a86cb890e8ec50237cffda8db22eb43c2e668f9d7c14953c12eeb8edafd6d5610f6fbb7d9bb417563e3fa50d

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-ffca9cf46775[1].js

MD5 a4fc81ffee4da6704a3cab4386917a48
SHA1 2f1b15888f3987e6c4c43eb0087402da29f6197d
SHA256 50d8979e13f1d0b3e2b887ff7f251796bd481493d647e456ed7ffe14c822de89
SHA512 ffca9cf4677540790208c03fb19503ce29214d2ea3cf60303de8b0b90d34282271a905ea8df439ee125802fcebc58c625d53f7f2d6654733f34b57638ef64086

C:\Windows\INF\netsstpa.PNF

MD5 01e21456e8000bab92907eec3b3aeea9
SHA1 39b34fe438352f7b095e24c89968fca48b8ce11c
SHA256 35ad0403fdef3fce3ef5cd311c72fef2a95a317297a53c02735cda4bd6e0c74f
SHA512 9d5153450e8fe3f51f20472bae4a2ab2fed43fad61a89b04a70325559f6ffed935dd72212671cc6cfc0288458d359bc71567f0d9af8e5770d696adc5bdadd7ec

C:\Windows\INF\netrasa.PNF

MD5 80648b43d233468718d717d10187b68d
SHA1 a1736e8f0e408ce705722ce097d1adb24ebffc45
SHA256 8ab9a39457507e405ade5ef9d723e0f89bc46d8d8b33d354b00d95847f098380
SHA512 eec0ac7e7abcf87b3f0f4522b0dd95c658327afb866ceecff3c9ff0812a521201d729dd71d43f3ac46536f8435d4a49ac157b6282077c7c1940a6668f3b3aea9

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_49536AB5156BDD74EFF881D01C36A419

MD5 4836a584d3a19564d035fd8ed2c9f5d7
SHA1 9ecc786f86df9bb38a5be9c33c7256cc4206e557
SHA256 6cc24480c8a5e43782ee709f301c9911acae81d3161068425d7eb812450cc6f3
SHA512 a76b037a5d529cac78956156d9e1fda6f26ada8e8a093ee51ded89b66c90dba7969f309c60c140fa91574b98bf64e78bc1d3e48459dfce87e0ef95585317a17a

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_49536AB5156BDD74EFF881D01C36A419

MD5 f7ac510da5360bd4503a45751234ae2d
SHA1 1a85d2846bf7a06e6fa1c1af42c1cef7abfcc310
SHA256 78453995b675b48c7411b3b58acd68d3994ff93b954080c8af48f79f9d2eb34e
SHA512 59b978c8ac06d34b357f5e50c556cc742cd34c462a4c88e04ef335038bedc455d31098c405b4af9f8ce1ac595613f30ef067b1ba5e8a51654f1b243b08ae679a

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\pCjAnNfKRza-LKbFI9VevrRjIwc.gz[1].js

MD5 22720d009b7a928af6b6f0a9a765a588
SHA1 6b23f5332585ecb1e5986c70c2717cd540ced735
SHA256 9f0fa7d003ecd211bebb45d69143294a522936c9446b3c0c359cfa2369374c4b
SHA512 3f80f974c9aef814f760d1ca43af03bfdbe2e5d7ce036c0c007a754bb957d48009d0e000e3879a9d9bab72bece9771871c776ead6bbbc1ae62147ab9b11807a6

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\XaaYzVzlIKSK0sjPeW8zosuyjPk.gz[1].js

MD5 ffdc7892743e65d4e1747d695ab8fa3a
SHA1 02c6c4d62ba6806b28f1c69462e55e631ae13970
SHA256 e7f80dfe7b61e64faef1f7408f32ed0194ae648931d406fa987ec50c7326eb2d
SHA512 d85141d067a79df5b680fcc0d2a49e913847fed449315c238f08b2b92847cc5549798428b4921483604898dd44a75a3595e08e14ae132c4ac72f72caf731422d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\JQnl6vYjDfQKoNHtPvvVI1Vp_-E.gz[1].js

MD5 4bd9efcb4aafe3b855d455fd01d22463
SHA1 6be51274703da67c1becaa6d0196bc8c93050815
SHA256 851dba4ff4d8c05904831a927424bde15a8d037313ced005820f4b2222ee1d03
SHA512 56f563a5d16d3e55852140e5eb5006f610fc3c0e1e3567a8549ba16625e4dc1a30bd51c2bb4888ff83361921fcfd8f63f0b8b1b8cfe32933cb263e7b684e4b60

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\6LohI2cpN0iIbSZNkT2e_TO1JTI.gz[1].js

MD5 2166c09ea15ba88e843d4e84df2c48a3
SHA1 cbff10ff66823d5ef13309a7913c600eeaeba187
SHA256 02f6e697a3aab3be32f5fb28488862bf9ed344b4d60ccdf85cd1e244ff285c62
SHA512 5ad51b625e96afb5e3452df6214b1bc63676e46490bfc15efb3fe00c27adc35d4336a85d00f9d37a840e3d98b61fd90ded6c5a18452f03033be9ac4c05ad24b0

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\B6jGHby7hXuEC7enS8xiNSUwqXw[2].png

MD5 3722f42b4f456ceb0a1555a413eb2d83
SHA1 07a8c61dbcbb857b840bb7a74bcc62352530a97c
SHA256 ec8d527d0173ac87e5fed6cf300bc9e8afcffb55ba137ebcfc2df83e1633d8f5
SHA512 71631d67bf706042ec6a8df526b21ccfdb777873746f3015552304812c57666aecebd1b928b4591edf87d904d9628f3675e75844f661c2c0c1a629bc9221bac7

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\KDN7DRKV1Zb2p93Gy2Unq-Vzsx4.gz[1].js

MD5 f5dfb6428494da3c1f195528588587cb
SHA1 7575a1f3dc367b2332d837a46d1dd2748b225c38
SHA256 f45968b3999174976d6fbea229f627f0bda56fd84f8b1924c01da624bfea01e3
SHA512 bb677ee6f22dfe28ca9ebc94a6ea7b5bdfb95288ba246c85c135f083c3af765964dbe5f3a028dca6e8a6396e967f24c2734442432abf00e690f34bc8106dfe9d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\Dl9_sbUgq2dp_BO1VdtYjG4TM3Q.gz[1].js

MD5 406a697598fc9a6270eee9c11feddbea
SHA1 0e858d976ebd0c2888d2b5be4649acd5a3363727
SHA256 75b19314c008131b00957adbfef7776d76af3781746505b72c08d8848f057d36
SHA512 4a25daeea1d4c0b27b26a70d5d99efdb728a432c2bfa0be70a90686165b34d3086f11b35bf6446a3158f83bd36b0f12decab862ab9784228b4582844ca94eb71

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A

MD5 c19de00f3e511be3e749d20ae38c26bf
SHA1 595de622a2dc9429897ce22cb84b570cc25f0794
SHA256 3e1709ba67f224d85dabc4555b20b1ff96233ae58bef32d93419de93f4c19b89
SHA512 dbef57403487244a9d98ab74cc4008bc1cf869ecc3047eedc0613c593e42f6af791d6489b17c33b3d73de215a17627847750cec3d8da47628ab855cccd20c2d2

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A

MD5 7583beafd20025fe73c4e0ff03bfb9e2
SHA1 e63cf2e73b840ddae45cb0d3aa5a105330656a4b
SHA256 e87f4ed22adf983acd0799cd896899c90c306b061b9239a73f887f40a411d365
SHA512 c3a5921be168e0968546747480b33348df48e8d6ddd433c3c08c49d504df422722aa660cac0bc1101dafbe5d3df67987008fe9cdd991622e0866176338bd9b55

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\I_X4iL4YNLvZcqQoK4h7Zv2Rspc.gz[1].js

MD5 a329d68c29b855079673cd57fdeb17d5
SHA1 6e60280fa765a583a2bdf359ad3d3d8289963f25
SHA256 c8c9892bd8650d840fe82c698c2b49f3ef711b95fecf617c23bf33eeb310b0ff
SHA512 ac67fe7cbd8844179e7eb6df0643e30694dd41e87c90215b9be37046c95cae10e020cd176ea3a4f3ea0620b7e3f574d0ee2a770299b122b6cf65e767b457cac5

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\tfIOV7sZFNtTU99jAjgnRcflz_A.gz[1].js

MD5 fc3708a7ac43ace3d3406c2e5f7f1116
SHA1 cbd3116ecd59fd4a44f8b3cd958cbff724989a29
SHA256 37d9b83c929f1a8d94c4f29000cbfdfa72c4bc61c3950df02523252928591c29
SHA512 12122417b29aed27eebf3bb36e740c86567daef7060b5e8d64d11c83a5045e6eca5f3b1bc5a6d6b1a8e3eb23f8c34d48b63fcb41e43143e6b146fb2d51cdbd58

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\L4DRqeT__ThpoWCN679qYPN_ZoA.gz[1].js

MD5 142a83c5800451a9731a262400de2419
SHA1 1e5f6598f7f6b43a6f4e1b2a900ce1676e0c024d
SHA256 7d49a33d66c98ab838f9a15d2ff49bbac72c1588d979644fc174116d0afcb852
SHA512 b1d7fa83b4bc787409c088f7cba58acaa031fe3239a7bc139b6d4839ad6c66156e44cdf6f545d7b6b9309b3ebbfa0b17d9f307884f679cb6d2ae11c6935eea2f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\r0x2XEl1NsVFJGEHeag_hynVsKU.gz[1].js

MD5 f8867659eec16d15e723c56aeb7c34d5
SHA1 fbfb3436e5ba3b1653aa2216c717db403d9a0b8a
SHA256 c33b076ea6748367e9898c67afea2f0042988e544142d42bf324cbb62fd89d70
SHA512 808bb92c1ed4ce68711ffeb5836ce93cd4daa66d17c3ffa60cc317ae32dea841eb00e7b2b19fa3957ab7f1fd6c88f6cd5c45bf1c7ac67c30e5acac0acd8b851c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\VXn7vnSx9zTUSf2RIl_Wja69HvQ.gz[1].js

MD5 487d9ac02e3cf57172045869ac3f97a2
SHA1 47c9870beb200a74d274fdf9e98aa2efcd54efbd
SHA256 a97799ff4c48323ad3314a13e6a20a69145d0f8257fdae6882551d6fb6610ea6
SHA512 f13633d84fe8133da9d1823ce418cf42717cbe79176c9c11f4a7dd66905ba1aef571b968bd29d7c7ca91d802b4b36aefdb0c5d715e480215754c5d164eac27cd

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\KASFljhSVGF6fUtKPITJAA0wFfg.gz[1].js

MD5 60c8196199a6c715bc20652c09f64e7a
SHA1 fd861e01ba063850704195b35e44db2562ae815e
SHA256 708df52a72db22b1a287439cb9aa3ef2037bb67c8246835e36e673f70695a390
SHA512 7f16a9c7f5e6df6d78fa1d08818580dbcc4c7453db9d095794c730bb0f67e14070369e610b90225acf6961fda6471c7f497d59da0a7fef2f95e8bcc180b63a0d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\NW2MXXTC\www.youtube[1].xml

MD5 c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA1 35e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256 b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA512 6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\NW2MXXTC\www.youtube[1].xml

MD5 0a8f6c02f4d2fb0e4ffd2a48a12db97e
SHA1 9e4c92e3941638476a9069d0a00bc6ff4a9220c7
SHA256 921022c28237fbb770c6b161cd25417ec1de91e1b3d3efc2bbf987e2012f33f2
SHA512 b6b750ac9561d9a87fee1998e2cb3545d38b15492407e209ed2ece697e78d6b5ff470da737eb214ecb4be6e1939ba2414d23b61018677e6620b5bd4a972913b9

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

MD5 c7432dcc88ae601045145fd2f6c8e0b8
SHA1 3a828c57b5f6cdee86a05177a272ecb5a5f94375
SHA256 b0a0fb45f699737819c3ee7848a78903c9e77342b428cb316c432612bc83ddac
SHA512 e8985ef4096bfc9289d954ac2122210969bae51dd11549b33da792d2534763e162c272ca78df94ed1fba820298edabb1958ea4950dd12420ba9de7eaa867bdb4

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\DDE8B1B7E253A9758EC380BD648952AF_68D058512F3515153DEB95A1F4E72552

MD5 117df1712ab32c17ac208e45bfb1ff11
SHA1 cd51a72693807e159486cb43f97064468c500459
SHA256 a75fa66165465209b54d07f61fa6aae2d7adf0e6ac5a31509505a3813e57c0f8
SHA512 453e40ab63c3e7387d34213a993848c2b4c89623475b8447f54209bc65808729fe7c6b0388e494a4b688a68f4867305944b7d5795f30bf956016afe0ec8c2e4d

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\DDE8B1B7E253A9758EC380BD648952AF_68D058512F3515153DEB95A1F4E72552

MD5 989484872e0a6c8f539607895a95c157
SHA1 a775a239f76db2dd8baadb80db4af5aa5d910cb4
SHA256 cb681db2ff75856a71ec5be5a7c26e7a7cdc098d6ab0f222842d473db10c0c77
SHA512 de6e1bde82f52e00fe51d10890f263a74ae3ac2bad81ac6341c359ed0d2cd222a7f80733990f5c0af85035206ea8f0f1ea3cf5b20d72ad6986b4062eeb60f5cd

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

MD5 e935bc5762068caf3e24a2683b1b8a88
SHA1 82b70eb774c0756837fe8d7acbfeec05ecbf5463
SHA256 a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d
SHA512 bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

MD5 22e776975158da29d184c1145c104aee
SHA1 b65145ebe33f1c8887a95837f52011715f2ad610
SHA256 6124e0b76dc0a9e515160104b7669d2a40fe554b7844088aca0e4fdca1c726e8
SHA512 a87cb60f864ed17547d0d69649e8e3187dbb31fdc2ea4a9153b9761ef46557ed4424f80d0efc94b352e2447702bddb0e70dfe4d9bba3d4304bc47297c91663c0

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

MD5 fe63d1c4d49fefb0c03ff97979719fb6
SHA1 b194beb2562b45de60cd0a500ad5af01bd2889e5
SHA256 fd9c6f55954903ed2da44b4befe83b8a82e1203a98ddf5ca9d32383e3ee445a3
SHA512 b428bfc91533fc75a8bca5408e978390a1476e3401854c1ab5b64ea0894e2f7fac450a2100d965e9d382ed24922fc5eca68a48a9069fd4edea4f7e360bb47d19

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\www-player[1].css

MD5 5e3e46a47dd5c466759e75037e2afc93
SHA1 b5cd6705696ad9093a1d0525a448d093f73ccae6
SHA256 80847ee5ecbcf465f62717f5e0423da22592be75747b91ac1f43149b070f314d
SHA512 fa2e4781ee19650b270d7deccb9606dca33261f9eed68a25de93403212fb54d4d104f97f9628cd1a2a648cd2fdb43f4baaa17dc374670277af3d2ac3b0c1fea5

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\DDE8B1B7E253A9758EC380BD648952AF_4FE99CA8B2B48146026AB576A9AEFDDA

MD5 bc569e51f25ca62d64288e20fa991f56
SHA1 af4857910485fbe424359ab2581a6b5d2e214016
SHA256 1969cf020c37b73f390df95f986f62b89c2a033d0f9681e14a914c3029a527d2
SHA512 1f153a0911e7301f46520cbe99c119332eabe6b31142764fba8873d292e11b3273f9d1f269cdb3368caf0b737466952d52cc626440bf8778458724d5be6289a3

C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\DDE8B1B7E253A9758EC380BD648952AF_4FE99CA8B2B48146026AB576A9AEFDDA

MD5 988c356805eafa8b12b017aeac977b30
SHA1 ab6155852ed07dbdc6e28fe395833c7cde0c5224
SHA256 17710d3cb130ecebd90c5048cf10711bdebbe2b7ffaf7100cf40cbeeecef9d14
SHA512 1c55b2366423dd277b80ce29c877fb28cc48c551a1cd39dfb4a4c303fa27a7100db48c380e8fcded6182a3075780e1b4568d607a2e59a7ea1b536a23d7f03646

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\NW2MXXTC\www.youtube[1].xml

MD5 176ab604e71c112cc52d999c508d68b1
SHA1 4ffa4a5b555100138c147270254bc32e754b4d31
SHA256 c18f539573a4e12cbb4a052d860858b8afe302c988a5d0d18784e8e419865baf
SHA512 5e3e014c3cf4885a444e2d082bd93d87f5d74a3e2cf7c22105988bc999fabb8135463d60dac02496442f0c497f04da6dcc4c223f357193298dcb667987b7f520

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\NW2MXXTC\www.youtube[1].xml

MD5 98e8d361aa2ef0a7e10d248aa6f07fe5
SHA1 66f209ca04018069a72f1ba21258629430a7b89f
SHA256 bb0a97c1c87093f7dd2f1b9de4c4ab4da7147a71a6daf2a432499acd456290a9
SHA512 9611b11365d6934fd007c12f0fd43fe86a3599b0af8d92b18cdf5a1c1161c0831398485cf92619751d753e0f5d7ea8a02b2e76c771e23f679eb22b0b621d70c5

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\LogFiles\edb.log

MD5 0f41f284df52906c1c04995b4adb3052
SHA1 90856665ac3871ac9306468e2f95f873673791d6
SHA256 c1aa4c561f148366f583e17c81f68c91f36c7f65a8e450be3317b3cfcdaf8a40
SHA512 89a77ddae2c0ad134152f97f07a2b70d6764cae96135cd3022f43516f547eabcb58939643ff14bbdc79b64e9ecd7aae4892b39147d576e8b6f280bb0d0cf7fc2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\datareporting\glean\pending_pings\6615976c-0c74-4d56-a481-aaddf163506c

MD5 c4e91a61fa45e85f92a3fa171b2cc99d
SHA1 c1e66aa671768d98249ee7c8bd4f407d7c72352a
SHA256 d09351736b15adf1e4f67fa22e42151a8817f1d02cc11f48040f33265c7f4133
SHA512 7d3873794454e30d2fc008970db4c403a7421c1511992950191ff6640629594f811e9a9ccb65f778c58b19df95341439e75bc3526fdddf84139186faa8a3ac4a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\datareporting\glean\db\data.safe.bin

MD5 3fea03b3e73780b3161cbd3d9759a195
SHA1 a207b87ad334fd4952da8c33acdb33de3ec0ab3c
SHA256 4b3ad8b43f095f242d55af99e1391b0ccdb9f95b83f15f2ae2d2c0d3a494c316
SHA512 b71f168586445e859b466c6c71c306eac904ec497751ce56cb826e0c947b893e5ac128f6c1f7be98f5329d23c42cbb1a62c535316f4e7531210d95d5113b3a59

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 7f868e557b098795d645df9ea302427f
SHA1 001f3306144559b4049a8ab139b4139f51e59c0e
SHA256 b228e23ecfb7965e3badefcbb031de0b4bb887634bccb34a826ac8ac89124ac5
SHA512 56fd8aa514cc25db5a2c9191d665eaffe90182cc5e4f15317e0cfbc9adf7336d9ad937d20384b0504f784e5939b76b4c4b0020cb06e4a472c650355cc6c4c89a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\prefs-1.js

MD5 fa90507fe9eedc8ef5e0d1065a9e828d
SHA1 f824e0738cafe1991d665e325dec62c85ba3b303
SHA256 737fb2dafd2c04a7f8f08b65bdafc47308e80af1f6f8bf40ebe51c942ed5cf51
SHA512 f90f6bd476e3c009782646896dfea03efe2301fb971e62b3cc0f77d61f275c58d216eab23002141aac248305faf47a3715b5950be335af1879ae1494790b759f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 3355260693492838124d98d3d29bf04f
SHA1 16833be61d03b0781f00d834354389a092450fdf
SHA256 f10c4920280efa3c24de18b53f39766a294823cd6821dc9265de276ae0dd7f05
SHA512 d559e9c1e69e8995856620ee1288a956b5df3861a9e15468f621ebef91532f248936a1538d512c101fa29abc1550dc4076ea6b47d3c773b7f583affdb5157938

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\9357B92D7A82DC731CBB46EBC4F197AB314C7C11

MD5 993d576aebac13a9b241f06217fc04ca
SHA1 a2b3a13abb4b6dda09d2a03686517368a39b2107
SHA256 5d23b1d7914e589f75eafe9a8b3925149234ddadceb19492bb2c999844f0a7a7
SHA512 20794d85898fb627c397e7ca6a50a3f4ea8d948e4c9ec7afcffcc304510183fefc95c7da78c636f390c0f3bc74d507a4c96ff23a0b89db6ad9e1f5b64e3b590e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\9FC8C85689D31525EACE26158B83B464F43A027B

MD5 ce8534bd96750060761c2df0adbc6c46
SHA1 2e61b642c08f9a7a36f5ab23991e7024536b5ea6
SHA256 fa8373e9bcc89d8bc36517b2baac48ed9c85bcbe580adfbc5bc087ed593620fb
SHA512 bdb52c1fbd7b6e5ecf39a72fa832a03494a14211b3a8fba3f5c45b22b2213ddc15d827ecf554d6e73452b7bbfb0c317746981e060b49644af58472d7d2aff87b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 caf4369af3cf9564c621cec3ce9c1f94
SHA1 5843858727b521fa5fd77c338d3b53228edcbc56
SHA256 293aea5778fafe64dc529a6508a232360d8383f090a7a177815ae656b80be60b
SHA512 650cd74be9e31a993384a13452aa5f45e916e72542f320925253f63e71af85b43d19fc419cf83143d27f75fe7e28cfc8c140576ea8b6d3aa6f40e360ae0cfc6f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 5193b08cc6b1cd25ac185aeef580bb30
SHA1 4195d868f36dfdca7b97a6b7943afe76abcdccb7
SHA256 2a88f1653f70c19376eb437f91c9999ca73da84df5988ef3f19cc7ea6c117242
SHA512 0ce702266f93318a63241614d0351be3cd734511552a82e3766bea9f2f55152c9298de8a3bf1e8c04a29886e9183f8f970a4ecfac6fa067ba65ada1d3363d6f3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\8009AA7615959742DB0E2C888BACB228D61FBA60

MD5 5851ef1549c7c968b08aef210a132073
SHA1 a33e975086ce9d64c712f0252b90f0c70bdbcde2
SHA256 9a6dd7451a92e6b1f535c9ffb81a839ce6d04767916ca53fd51bc61cbfaa28a6
SHA512 7411b3b6f227f0612a4e6f7cb8ee8664b7b0808e7890af1a24c1c572f3e2e779e388a6f47f26a3950c2d8e106a2bfd126f4b1bf95952192e586d9accdd05bf6c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 8054c0c21e102c09a79f078621bda7c7
SHA1 9f7d9f18b90248d98cffff51bb9c2d981688b5d8
SHA256 ca479d8909182fd3014c477c9c9df392d2646bfe5fe3c80d7d662c31ac69aa48
SHA512 e1df805265c847e8e77725343f2901410301ae88bd0a0d9c65f7b2be2768d79ce9f2303e223494f24f696390beffe8a3efecbe78b8c0d7261d497bc83504178a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\7345

MD5 5bf4617ab0a5f1117606329c513155a7
SHA1 165ba121bf0f0016f7dba62784d4a2836a0ed487
SHA256 23fba4b52bac206efcc9a31b469a075658fb65f94e265279738d5c33122fb324
SHA512 465e94a2dc719169f37242e08ea7504cbb34e17580695b7b90b8a7c1e4c64c817c61a39be3a0a3e4972e188d3e69879a354e1a48353cb2b33b4eb2a1918a1063

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 c0dd9079f3fc9d76ba701073249d0e49
SHA1 3cc7fceb14c8653611ed4aaf1eb800368cb02b06
SHA256 58d97d8a5b528bb517a2829b1f0a1c2e0f9e564c4c87f70b1ee003c466de9378
SHA512 b7f6cff8c79f8dda9bcf968678c7b7ce632bf95ffca1eb0e1a0c643ff02e92c2d4b0e3029f12f5043b4909f6057be5a9c38b9cf02565d640282aff6800ad46b7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 bd424105220f11d4201594e9fdc68326
SHA1 e6e9fc1dccf7dcb454e0cb83cf78c5e413d2055f
SHA256 20fc076442eec16eb5a5c9e83ed12370d1993b51084f38b42875ccdf5ca8e9e4
SHA512 43b297e899fc67c9ff05a2bc0752b3eb58cc4ba0cc0db1a14547c00c3e423c07f89e4b8b71730aaad78cdaaeca9857c8bf10abda02885672b6264fdbbd9b8a16

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\B60EB5FC56428678601A185D15E503D3B1E6A837

MD5 40dfb053c71f3850d8029711c2606903
SHA1 9cf5f825a10e1ee9ef96b0152eb5f66085d35764
SHA256 325949b421b8b31134c40412754cc29bc1a84101cfafd23fc19dc1316ca246e1
SHA512 c406e95eb09cc56e2d64e17001b774f6abc6b1bdf666f8581ecda210588807c9c2a66d683e6b585edeae97673cd9f376bf437c70fc60c512b71c209af05f6f31

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\27944

MD5 fb5bf85dedceaa8f7eb186b144fcf139
SHA1 1b21fa085901cee7e31f5d300619471a27d47590
SHA256 32ff2f2883a67280e0d4de262b74f06da36feea3f3e46e578da86fbb30f21d3a
SHA512 d49d6b0e21b262392fdd99495e9317676c0290cfd3132a12b34cce91715574cdd1bf376691295152dfc207976e08c2705a9710ebaead205d08fa77bc51cd8b81

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\A752BE816C32A166B4212612D41570FEFDA0B4E8

MD5 212f1d31aee2e29c9e1add40564c40b8
SHA1 d8c2737c36eb45df12f4482c158b3a520d560d82
SHA256 81501eaca43c17d3482924c0f501612b8573c605c80334d1f74b1c507ad6a38b
SHA512 de04094d667c4ef5f736a226273637b190a60fdb6ac36743cf87dc829891fb8375f537fc098aa6980a77367581423f4fb4577a6ce8f80f5250e3c1e428ed003b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\18418

MD5 937b23923ee970b034d26d9f11d8784e
SHA1 1977f03aa4ac90b699fb0a2bd6299fafb326c627
SHA256 202ffec6d1076b3a96c2dc1516a3973b65beb11023d0365c87a25aabeb875d95
SHA512 ce63937fd48890b40ab2a17d5d51e982924677b5ead84ca0d1b3537f5c30bd16b29173ea8cc92a85880bf46b608577530d4e3dcc8f3c3af7335885e5a29d1f24

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\32424

MD5 ee2b7710e4c37ef355c686d7b7b6912f
SHA1 75ca7a3761adc1c5ccddb02ac75fd7eb5f62347e
SHA256 f015aeb3c1e3210ac8ac919ebcb4a11a7d9bc5df87398a930b59eb7992e68f49
SHA512 cbb9738e941de0a3970df5cf74da290d23a76b77b06b31a9a8c5f9cff9f405f4a9eac9201b0d45fe66ab8fee27837849813146a4f1bacac8713a817cf83af634

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 46fcb2a732000a8e79da63fe24843957
SHA1 a3407488d7fa872402bd07110076b7dba2985cbd
SHA256 43bd1ed949463729ae31e327b6c5e5a67ef29bbe5e72d0e381258da15e3a71c4
SHA512 7700e0a2838160553580dc792190d2192e8c74bd78e4d229255c98533c3938489d28e4e5d143929e695f6a5e3c8cf21b9607eecea6463ee90bbeff4bb542b85a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\3962776D61445D8FB3B2B8978EAB03DF31CEA09D

MD5 32b659e5bb6ca7df62b27b3ee6f20c57
SHA1 a31829798f50ec6d220e72b949f2a04d40bd11aa
SHA256 3e0252bd79d7e5597c0a48dec2cf40bd8b0c855178f61256a27e93b14480e3d7
SHA512 2b65c19690aa2e62dd48d774c3277002d0601a4809169d95c0afcdae3d58912d746d45d094f2b788a5176423bd02a9e7e7dd12d53ab402db69d9809689e462f5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\15209

MD5 43febcbd37cba079b52407bf2438a275
SHA1 70a19290d0ffc01edd11aaeebcd6fd93ad14dd38
SHA256 18523b0dc1728579020ba92c31999f16acefc22a12af7637ddf49c642cc04766
SHA512 56e202533ef80ca48cb3882a10fa63fabcd64f3bc7b3419cd3dc8c589b47681072523d2661e6e0785b2b1e04bc5613269dccd7204e617f3cf2c05230dc733e7f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\2C64315F78E9DF440ED62F964AA2589E3C4AC58D

MD5 8a4dc1d9c53262edb691b85f6c670ab4
SHA1 d0ccfd33ebe66cb3be391745ceb414d9e0121937
SHA256 5efb99cda12ac77df2b473741e62636edb6bfe34d62d03a5fa7b9feb5006994a
SHA512 bd12dd9aaafdb781adc04fdb684eda428cfd4155519fba076ae57ab94e8960a2ca36f26fbd7fdf64cf478e2721fe1df49485af5f9d0d58350376b908d25b029b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\186615237682912A0334C9E050B495615C00F623

MD5 efff0e17eaa45d7570b066074e4f0462
SHA1 0dd709bee5761196be977415e441404049733baf
SHA256 7728b9ac14e2edbfe4422aaccec9d207bc4e632d025e55da2dc5cc339e5b5e68
SHA512 5859494f7a2b43276496433021a198a2734e80dc671a4f75a129d0a20776c0e827ef7442115df66630cd3dbb0f84d8920950ef777602a874eebe9786c8b1c91f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\945A38A03074BF89648DF42D09A06C169B9525BF

MD5 37db142795bce5bfc808836897dd70fd
SHA1 f54153b4a7e27ac31576626cb767385801cf2b70
SHA256 3545d96d7dda9a8ca9ec3d2addca9899ea6a2e45d4f78afedd008b1b12838ee0
SHA512 ea42fc34d5b6c9211e777276c8b92bd42807600b172be15ca72c4aa24cdb6b87c4039028826aebdca185702b20c69636314d306e40d1d113042922686b2bfbe1

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\A60D01B2A023AE21208D69A4EA05D5FFAB5214D6

MD5 aea4e7da65e9b99eff23e57aa6d892ed
SHA1 87e420588ac2a53c17a8ea39bcea99fbf3faccb6
SHA256 46c3616e1ec7c961d82eaee26382ea2c3bb94f9bb9a464e22ee6d4246af2c9bf
SHA512 66edc527a312e377e12a021316d1f3a4fb3aea051f79b9962188a16543f6fe825b78154a0ca15e4987ab9e6ec7af851d2f95931d32e4fc7e35998f0a77669b95

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\3F8BE3A6BE6676B2956289905916E6675B5D981B

MD5 d69e1d982df0d72414ac72319c6d19f0
SHA1 19b492a973ceae773a8679f70dca399cd5eadaf7
SHA256 5b60542634116c1b8ace54f6a14321fa0f1d480ea0ecffe0e6b6d0be491efb1e
SHA512 272b48ee9c963cec21f02f2e0cad42eee402c6dd57c54fe5f3e87cede1a9dcb8a63d6dadeac135d7b5b59bc5d9c001ead8764277241004d520b5fcd86cc5476e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\C55B1E7C621EA69CE1A33C9B74E6C8CE58DDB92B

MD5 ea1a22d0e27ef023a0e8d8170b870c23
SHA1 7f42e58c33bcb7b6715c939aa9176ea692c3f611
SHA256 f216767342ab5084c88f3926b124d28f60ad7479a3c03c702af5c715c4e349a9
SHA512 6ff45704e22da232f5cd6510f584c4e120f33f85c52d7dc4a98f5a527eaf510e1ed3aacf315649a577bdfd1571c77c99bff7a9ad16202d6b0acfff02287baf28

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\21349

MD5 6c590382b263d388bf776a56762b0e73
SHA1 0422a903ba83d6c7d530ad1dd8b3f1834e1568f8
SHA256 8b659910c98ea8f3a6cdd3c2240658a7e3b572c58b3854f723068324e67f519e
SHA512 ef2c4deb98d6fc3d3040bc98abf63c5eef45d53564a9045411364d18e7c72705ae8c5e7685fd2568fe667b35088bdf7c174aa8fa8709b3f1b821c77911b508ef

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\873DF8734F52425FF5AFF828F2C80C897666CE6F

MD5 215fd6fc304a807dcd2ab00bd28eaaff
SHA1 0d236ac27083ae3f3889a0a567b321f8153f824b
SHA256 122aa23532727ff43f2011907f3fe9bbdc649ac357167dd4d5750128f238a01d
SHA512 d0fcc24bb4d9a36c72d6a45e9f4b18b982cf59863e8df6dc441a4b7b38ac6afcc16c75552099fec62556af27ea6d6fc7196422b2bf6f75457daea9d629a349bf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 bd1f044c4cf81db8df2dbcbcf7116169
SHA1 6b3e0d22adf5532f7e21b879c3a7ce8427dbc949
SHA256 3a3650a2d166780e7f13fadebd63bb72608e9cfd348975f4297ed44af3bc5bbc
SHA512 f88e13e74495062703e8b53b7358aa58dd289ca4d4bbd6ea137e927b6b60c77d5b5d1940a41df068ede810319d2275a82a64df44cd1d61fb5ee1cfcbdbfc62e6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\9DAF89332A6C63C39DC416D1176E864CF3565988

MD5 831a0937a13c2b2b6997728b8a84b6e5
SHA1 4694ecff5adc29e01896f3ff3bd22cb408f7666f
SHA256 002d9f0dd49643446bb824ad3c2d5e0d2332599284d99dff99ded311f4bbad34
SHA512 b6b3d0084ae4ba1e760e56e082e47962650d6f57f6c13ddcba95e32eb2285dca04d8d53727d592d504cbf6cd5c6ec4d7a57e3c48115850f53b00a18dbcfb323e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\22336

MD5 76d2a0e97a8a584dbd57aa1a44311774
SHA1 1bdcf52948b3e32b96d0e6da709d61bec5319cd0
SHA256 dcab0d071cc93877ce7a82988b4ceb25a65b396d9d3643308fd870aa8205d126
SHA512 71dcf18af3474d7ef69b990150e85c8a16c20fe410d54e99621fbcecc3ae29cb754be111fe128384a03af82e0286a5ae1bdc748e2d0071fc30b770c3f465237b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\12438

MD5 190e5ff9db740389316356b19e1d155b
SHA1 11ccf52c0769dc1a04f6f8427a561ed1e49aeafb
SHA256 3690e2233fc0c172d73f1b5f2a9cece34ad3795690cac27b7d800915c117245c
SHA512 5bfef6a8980c650684dda222114bdf1040e1bf1bf79ef354355947b817b3ec336b84e7e78c57fc9b0522f200f2ad71b1a50a99611d56a9da12ef03a93a32a400

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\1531

MD5 8d2e5f74e891c67b23565eaec9b8e47d
SHA1 c31c5e7a72bb20dfa580e70f781e489222a29d5a
SHA256 f1c98bd76e7fedc887a5c0231453952a3750eca02776f9e5197d53f2fd9d9f03
SHA512 ee6666404350eab14088da72644eca774192a3e517fe6e3d2019514da1129f8c7a7ae8162d269c0a5838bb11703debf1c031b8a08c6edc9b3ced252a47d6c426

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\2340

MD5 f7d4a07e6113fd21602ecc09d623ab81
SHA1 f13d70e2e3ec7202a19369dd19434c1a51158ae6
SHA256 d4f2f0d189e51115e2602ee5ffb15440ecb0f251aa57924f237214eeaff0d6f7
SHA512 b7423f4e61e0e6aef2b7db776071999f78f84bce8bd0a0cb4c63eb1802a0902d7601463c046f456624f8f2fd18775a9f2ca7664d7769c56b791b2bd32f862760

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\1D0706E86DFEC47A15B47FE842469B026F08A2E2

MD5 a451158c752aa3fd28e0298b5db8da01
SHA1 a5b20cff1d02f4abc604b6eab0811ef26d0f9a40
SHA256 6e2ce0b6cd716a351e94d75e70f33e924e6677cb7f73a80451666629744625c2
SHA512 07a94d57c902735340709d4b9d3e10e2e175665c82d1a2d19ff33bcfc94e6b4eea5277440c919cf8f95b8fec92c8aeccdd71cca47bff4c6b2d2a1c969fa148df

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\21743

MD5 108aed67fc6871ce68053c2ef6994639
SHA1 64686895221bd11d2ccab1b8b8c5d7baed93c6e0
SHA256 83898ddbc035ddf1ac75b0b046dfc38262da7f23524c0ac9eba663bdd0c97053
SHA512 1126ab21eb24772b6a5f5836b44e687ca3a941fd21380d5cf5af3dca11c7991b80867d42da92099f02b5bec748b37e7f72b936c22e87a00af590bb6692ac5044

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 a442930878617b310fa70eae6182b1fa
SHA1 f0062e020d325c187fcec612513ca1332580722d
SHA256 a7591d130fb00311411e01544f4ad073653924fe6813c3ef8ac22bc0df9b332f
SHA512 ef6742c9c2c0f9eb7dc7ed1d8abc5235c7f4da8544d72a0daaf6c447f7603b072fc451917a0b3b8f2cbc127249f71f3153e6a0046fff43aa1c1440e5a8489140

C:\Users\Admin\Downloads\MuMuInstaller_3.dafx8S9m.1.6.0_yx-gl-codex_all_1709777287.exe.part

MD5 67628f85e6e6eaf875a98f5aeeb2fb12
SHA1 c581e042518d4e91fba02ee89b3c4c91b5086b6f
SHA256 f9070f06ee271bc43d6b44e510a0e7f1cd1cc586a3a1cc4898536933c4f50610
SHA512 456e1b933260a09bf0789aa8471335d757c9ba7075cfbe1c8672841aa4ab420f6131080837a12809522eecdc5c3b1bdb89edf6df26e9580919297520a6c8941d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\F28FB554482BBEA453FBF95D4C00CC96F421D22C

MD5 6961a4047089087648a261edf87964f3
SHA1 9e8af7cb5445ae0a82053fbc2f926de1ae16fb72
SHA256 9b3bab02ec4010fdbc210afc01d230e4377c47dce3d458bd88b185b3929425cb
SHA512 228186072c72595b761515a721f854b63e227490c3bf940526706f2a111ddbcd2783685785829fbb3cc7826e8b21cbd909def5453a949bc2a49785669dff4cbf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore-backups\recovery.jsonlz4

MD5 6318ac932b45f1fcd414ac21cb3cfc30
SHA1 f9972962de5599380cc818a230b6eb693c414600
SHA256 1cb871c705920fad6b5ec7a6e636a5b99e63336c33eb205c2f7b970bc03a6700
SHA512 b6167569d448f7d66604a025400ae3193d5e4a2ae43b5f9bc35b35a23d84b0373eb38df80253a393a368bdc2e4f441540b383d40aee69d1d09f16937920df1e4

C:\Users\Admin\AppData\Local\Temp\nsc17BD.tmp\System.dll

MD5 283555de06751c261b66243bbb1558da
SHA1 4532ed4e255ad0163494a02081b45e893ad666f9
SHA256 b6298637fea88a44e4de3f6b7fe254fb73857c08f1dcd8bd1af6f9eb5e6e7e3c
SHA512 469dbb4b7cc0d4f59d903415fbb7ea6417323f0daa2aeb2945a9744668f3d9fa95eb34a9d64a647835b563c74c3484c6d4b823a75119599aa5f975dbe471d3ab

C:\Users\Admin\AppData\Local\Temp\nsc17BD.tmp\LogEx.dll

MD5 6eba32325d2db645c958c551f0aa2e31
SHA1 b116cc9ff0369af681ebf805a1a3befedd9ab868
SHA256 cf7b45a69a13551db95dcdefc8bfdd4128e1c1db67198347b43469b69c36b844
SHA512 6c48038341bb16ce50b01c99f8ebfc919adfce61008d9718c06d55e92e54625ed2ab6ac850592e847bca61d7d57809dd531afeea4f0fb0c8310cfe1710f37927

C:\Users\Admin\AppData\Local\Temp\nskF793.tmp\UAC.dll

MD5 b7e1d609915cf0b3f9dfee488a92fc91
SHA1 d9c873b39e3cac648742568378fe788b2cae6e84
SHA256 fa3bb333f615689691ff98527dc3341e3b8ffee4bf97c6128820bf0d303930e7
SHA512 ae4a00659f522996600bd0754b2f2706e297939ea616ada66e590409c6c2f28ed7ed39b67a078ae72e9b472a97291c7f3da42339051ef1a3d1941b0368b2e775

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\KPZUHITI\www.mumuplayer[1].xml

MD5 9707e6c51f45534d9ec8b71557ba962a
SHA1 5b72ed5f4d55ee7084f7595ccbec09d4f098dce5
SHA256 2f374b880e91e86e315c81ad99ac64d34ca05e5ca1370899703c57096f792231
SHA512 232ae3c3933ad6794c33c81855ed96d34699bab5e00820b58987d77a4f2cbf8a42c8c82de50bb17fbf5b9a75c9454225353a9c9bd13928f5f8b0349b363cb763

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 02d03d19abc91b0cc0d5e4c4978d22bb
SHA1 f4cea74d14e8d0bba84db6a468bc1073381ee01e
SHA256 4c05d348a3b29ba321a925bdc0ffc877a72e96b9ad89d53fe8936f3c8de10162
SHA512 5e98471063be4daf61201ebb217c7d2ff109b0e6ac99b2b0c9b0d56c152b72f2368f0dbb9f5ceddbb1d79490f092b044d7add081a4d6c62e95a7357d9c6e40a0

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\39UGO0BJ\jquery(mixNIE).1.11[2].js

MD5 5171d583522248759f751dd0fdd105ae
SHA1 5faa4300705e39c8524dc3d7967426fb10501032
SHA256 6f968ba9264a3eb291c5a46dd70aeb0d4beade6aeaf74f4be04613afb3f73716
SHA512 83a9877ce92ebf5fbe54063708738d5a65128f759c30f9cb8ebd25edff9268c241b366f0b3ebf7a18d324e85ca3c66dcca991084c8d0afe776e6f5a9975eefc6

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\ImageStore\s99yv24\imagestore.dat

MD5 6c29dfd280e44075720177c21094ccbc
SHA1 a26d9e70d708575757a6976370501bf155dccb5c
SHA256 d7a7875e757b03cec8ea6953aa0823f1f5ca5082e5014183ed035ee26132f4ae
SHA512 2af0bce19ba99e4e50b270c0f328ff3fe27bbd8b3087e4a763a63e9cbafa147fa1c6d55f08c2e076b8123a642875a3f941b2f6abdab2e0e151d9e678fd272cda

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\QWSBERRO\favicon[1].ico

MD5 53c5b0915eb05e822297b5dd2303f325
SHA1 6cb270c424667d4b71217de653219ccf612296d9
SHA256 f8f82f184438ce64c19d13211974f06db3ab2712d32301e2441029a1135cc2ad
SHA512 ed0755acd392965121be075364c2907a1cebaea55ddaed98dce0a710b5decfc3151cf3db2fe1cd666df253d07509cc66e6bf9c268e42df901d043b56ea70ee2b

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cache\1I9QFRV1\IEOneBox_V2[1].appcache

MD5 8edf2d8c9fb030663e241f39e9a36cd9
SHA1 5efea19d8d564a77d6cd9e497a67940cfd92cb87
SHA256 a911bb1f1ab2a874d7f8ae710bfa34bd2e035f32ad957eecf3964fe450153fd2
SHA512 e7803d7cb2b3abb5152b2c41ae9f80dcf29ebbf2411564bedf44198b2eb093dec98ae2630b72c62f81e32d1eddb8c2b029d17a3b3e8907a924369172162f4451

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\warmup[1].gif

MD5 325472601571f31e1bf00674c368d335
SHA1 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
SHA256 b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
SHA512 717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\0OZDE4SA.cookie

MD5 3727c8fb1a4c92f6e93971ee837ca2fd
SHA1 8eab1f90a562756ecfcc2325fe312c4d6db3079d
SHA256 20761559f334511f0730a778f941935032e4d0ecd301accdede802b442c820f0
SHA512 6214105736414f3efaea78bee3029a8a2291e76bc03a65d8b9edab0820f9e6b7593636fce72cc043bf6bd0507983fc066369acf9628cfaab78acaf0808432f64

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\U6Z844AY\templateArtifacts[1].js

MD5 ae81ab7069097a055829fb9919258138
SHA1 7dc529f16fb595bbbfc5937adfe1d0a5cf563f8a
SHA256 5a630b41e7c3d34392bcb150a5731b6261bc6314d71d5db8407a646af15bf8af
SHA512 923f0e92ed682f638eca768065630ad26195f03cfd54ba235531c50d587321e45d0e0000e811f943557ba08d9c8a21a3f4b430433370c28c456acd6b094c63de

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\stl[1].js

MD5 c333ce91e5b853700cf63adc562a2a6f
SHA1 0850017037d460d50549ea18352e253d5713111b
SHA256 e36034567c40d81c8a54bd78ddd496a2f4046f0f22da9f0d1734a335787e836e
SHA512 e7f1f035160b817ef6209ef7fd4ccfdb433b938b0a2a20fde0e7fc97bfabce063a1cc1a5d5053cdd192baa77586f8a67f9bc7caed75f04d3099cc90c6cdc2149

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\main-customer-accounts-site[1].js

MD5 5295fc679eea80780246f38a98df4119
SHA1 ab671b1376ae82788886e2e18c4fdb7b7ac6fcc7
SHA256 c1cd4e7693f8c40d13259e8ac271cd0b6870875ca6c69b78d50aede9eeb63b67
SHA512 875bbdbaa20dedc45dd6658886df4b2e04eba47489a2382f809c3f4ee96817b8a1a99863b812e983bc89aa435e3fa72ac4f0be0e979241a168b1d2d7b0097cd5

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\1CAZM08L\favicon[2].ico

MD5 4d27526198ac873ccec96935198e0fb9
SHA1 b98d8b73ad6a0f7477c3397561b4aab37bf262aa
SHA256 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4
SHA512 1ee4b73f4da9c2b237cd0b820ffad8e192d9125ce7d75d8a45a8b9642ce5fe85736646caf12d246a77364c576751c47919997d066587f17575442a9b9f7cc97f

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\JLHHI76H.htm

MD5 766dbb625778de1832c2c51c4591e0a4
SHA1 9c26b283e6465165402c9040da3a7fb53f742e43
SHA256 d85679b84b7e490e02a959d9d949645bd9e10897eba87c84a49e687d5a943b26
SHA512 1e89a82ff9ae3d3ae4e4a79946c4ea9f6b933fba4e4efa6d4e1123712b22bed2ebfd891ae9cdd83f98d46bf5876276e87acf427400f171d5949998745c1b8258

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\User\Default\DOMStore\38W0ZDYP\www.bing[1].xml

MD5 3d9d5ed5df30c0c168bff41e1e0c77bb
SHA1 60698d490128facb6a5709637627a42faf65b380
SHA256 d8899ccb08ddef3d3d5b84332ef96408f9be2213a27fe78d58d0ef0778d4d8b7
SHA512 1ddfa9cbea2e12c444ddf1f8301af90f501af4827c3129e86b51a6eee5ace6d656b40cb555c00a5bf423caa1aa06ffa50192a453f9016378a5e01c321e6bca50

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\th9YC36DC9.png

MD5 5496597e20e98afd6b2f08771b2628e8
SHA1 3f85c598274fb3046bac85717ec4104d771fb3ce
SHA256 068ca3be3290c3a3fe8fd025f6248fda0a70c0442a035c0d3cd355bbe7b673d3
SHA512 7cde5dca42e2da879d36c01761ad9b033a1f0a1f04354f4a85d1223e46971cf2a0594ec4e798cae23b9369221fe7a6fa49cf541077ca5548a1d834b5f2a502f7

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\sbi[3].htm

MD5 3c4f3bd6973ec9cbdae4545f2eddcede
SHA1 6f59a9d99c1fc8feaefdfec16ff8f0107b9fe551
SHA256 2666d85098b731d81bae91084d833a36ab63a1e8bd8286da5f9d8bb4aba9db9e
SHA512 9a460681f44c940db0e67b9ea6ae89020ad275596bcafbcb8529d725c3b3f585ec9f722e429757200aacfeb811cf5f5abda22424c044ad794d94a67a7e89aab3

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\B35VG61G\iframe_api[1].js

MD5 4259b2c6faba972a9235f08c2e5aadf2
SHA1 9787fb8f20aeea3fbb6b92cf05b9f51a55f5f1cc
SHA256 c9f299073433d2af5662ec49a4d73a9c6c8bfe760c60b3db2f863788950d6511
SHA512 d980d426226592d8055069550ae83be70e182272e78e1eb73a119f33019e1e9e53831c170cf0ca0e1f448ec845271bab304b54dbab4cf583132d20d4a585954d

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\NW2MXXTC\www.youtube[1].xml

MD5 0b56da86d2b387b8a06230e23542e2ee
SHA1 7cdf9d26435bc513dae7019dea687b76324526f7
SHA256 8f16b5b09d51e9def8bd54a11b51b0f852b6e79400c609fc2859eff2004fe46f
SHA512 e0e1aa6dd702d1df4255a6af41c695173f698688bd6376d5c98725a58e5b330e10c221a98223354638de5dd6b486db0dd5c15cfa1ccdbcb0a91d1a711159037c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\NW2MXXTC\www.youtube[1].xml

MD5 c08c40f3f23e9824b45f010d9b36faaa
SHA1 d41fc398605ab659e7bc6940844fba86e491cfe6
SHA256 b6800ee72de47bdaa7317be04215c6779a94c90e7f2265836f9b586391d4544f
SHA512 d89e99e8b2723ab1f27923535538a85744b0eae7e637888bfbce1bc018354b35d587572b7fac6927c2ce85b0fb104240d1ae257e4b699ba08d74ba0f35fe00d7

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\NW2MXXTC\www.youtube[1].xml

MD5 1b6795051240f9543cdfe73009bc6222
SHA1 453599cd44621898f6fa5ae60e737a8ab8354ebd
SHA256 c9d3e4c834d3bfca20f84f9d073f5777809e3db13c82168cce7e9d2321c2a428
SHA512 10a20fb6caf4cc3a58b7abf39c2dbbd7870e0150754d62742210121d1bd8ac43d070256bb966a1c8d03f7c0bfc184c4943e1274eae3d3cf4854e557c72468c98

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\NW2MXXTC\www.youtube[1].xml

MD5 7a5d34b71ddadb0cd4a4f55aca925667
SHA1 03f458e6fe9c7fa86542980eebd33f2eb03bd817
SHA256 360fec46c290bd94c6b0ff0e4e84ac393ba293e54b8b693ab8e6598734c8a51b
SHA512 6ab0ee1da9948ba2a74841721bf30602dcc907e05869635fa79fae8b0c8fa1171017dd73e6ab33f18be88fa180ed117f490be10735ee9a2d449d4e77a1d2aef9

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\NW2MXXTC\www.youtube[1].xml

MD5 37d04a76ef2273e609b7202c1319f129
SHA1 28fe48d4278d679c219bf4f955ac49fe6100a2a5
SHA256 c4743173ee57ddb0cceca7744c45ee8f18104a3a11398dc7f2ac1f0fb70120d7
SHA512 1810bf805b89a4cc812c44d34c99c7b6c6b8656a28115bf00f96c07004297182b90e3a540faadaf926b34ff54f68d75dc4cf2fcfba2b646a8344521cc4600ffb

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\NW2MXXTC\www.youtube[1].xml

MD5 8e46951933da0ab162ade51d9130f37b
SHA1 6ebc46f9e7642278f453d9a1f31ae4b6f8b0c5b1
SHA256 2fafcb1b8590da28be07fc45ed9adb93aa8b8f8f8bb9702fd6fec83dc4fd2193
SHA512 7f6b39ab98f95111295c9513bd88a8f94ed24f2af2080bf1c102ac0307ef4f08d904a64c810909381d21cee0f4ec6eea4d309a3576eaf9cecfeceda0cbb693ad

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\prefs-1.js

MD5 7e82419f857165f5c4859105ddc93248
SHA1 56b06315a267457491f50eca9c2152ffc5254dbe
SHA256 e19fc197fe684daf76c9788d7396dc35b177a8c2c7ec59410bb8cf8dccb8120f
SHA512 b4ed34a2e6486be57eb4eba893698661f26e5374f57a265052c85b1de4368e651a5772d5532ad0265269434f09b28fa3d4c80b5cfe9958d175a97e8c9989bc2f

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 85430baed3398695717b0263807cf97c
SHA1 fffbee923cea216f50fce5d54219a188a5100f41
SHA256 a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA512 06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-gmpopenh264\1.8.1.1\gmpopenh264.dll

MD5 fe3355639648c417e8307c6d051e3e37
SHA1 f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512 8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-gmpopenh264\1.8.1.1\gmpopenh264.info

MD5 3d33cdc0b3d281e67dd52e14435dd04f
SHA1 4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512 a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

C:\Users\Admin\AppData\Local\Temp\nemux-downloader-538639a4-c058-400b-98d1-59fb8048769f.log

MD5 24c18bece64dccaabf2d45b44ab30678
SHA1 255fefaf8398392d9b684e9c1cc2ad70317f354a
SHA256 55d931d0a8d08cfeb1677fdd7c9bcdf28e67b1ba7f286918890b3e2f552251ed
SHA512 c8dfedbc39a72f3d697cbf63b2bbee11511c980421762e578b9044f49055e9fa02ae0b4b9e941f54c07aa66ab96054d44e78da867440cc8beefa55bc5be98f3b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\3689

MD5 6e2ab303da78d2b2133f06668574fd20
SHA1 6f29f771c9ef1cbfe5fa0928d3126eaa7f24aabf
SHA256 78de1c6e273c25735780ea48e73fb30559c377203d91aeb75f8352ad58b749c3
SHA512 37eef8f2693d33294c60d052e6432bed7b33fdadcc4212eae466356ea0873aea3ea2a5e885cd3e927d073734b4edc10887d4bd2e74b5c062ac602be7ccd6927f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\29813

MD5 39d5f027f74f0dae8f73d99be6dee4c1
SHA1 4dc85ad73f404509b099bdcb0b5962c23e845c15
SHA256 1b0f1d8a82ecafe0f9bc357a064d83c9fec335dc6c4f0b6e3a7722eb119a6374
SHA512 cd443dec14c313d13c47d1ed8da916eb99cf8729fc1ae9e00d34fe942147491d3e5231000922d8ee527f14790da0f93a276f9871cb1acd62eb2d3c7b5e8e75f7

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\6842

MD5 6489489fe4158a12e35e77c1f3394bb3
SHA1 a22caa7e03e68c48dc8ceff9ea52ea7e6dce4667
SHA256 6e2470725a97a9d2f6b458f96304eaf4e9fe8466fc9f58bf4ef6a257b2a526d5
SHA512 f640d5600feef85e8780ee0d2968d72446d70414256ad6a0a49eb4bc40140564ed82458ac9f6ad8c6965865c6ad192893a76f3b2a4532d2d4a0443957e6c26db

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\20701

MD5 df9c64f23bbca2ba8cc209a525c21b3f
SHA1 281098ce33e0b0230114cb563db653f0b31d4a2b
SHA256 63b367cb682aa5643042bd0e329d41537556e892dace9739abb278f034202269
SHA512 97dab419dd211313977afd8feed730f4818a20a52f0e4b364a1afa08a096f24e463f57d096db11bc4a970d84d347237f143a0ea79f043cdd01fd9c0c57387894

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\17436

MD5 b01db6579d22e041fc41e95c08e45b24
SHA1 829f553965f01947dc7ee8514591c72fbf9186fc
SHA256 1db8fda8fbf42c689f239479bddb3e655e81475ead32dead4530ff4dc5a790f9
SHA512 ff967714dba85f82c8d5a2a39e3fc7dd99b1eddb36c8fef953123d11a089e1e87b3329f3bc36251975e0a4a56468f466128bb0feec6f5e15e127532b23cd29dc

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\14170

MD5 4a88011eb134bfc1eaa87091e996a8df
SHA1 782da9f5ec124bd71ada60a5721ddae0a6f8430d
SHA256 db87008a02a8378770b08f37bd6ad67fe58d187b50febcc8384fad936de82fea
SHA512 de988377b04171e113774e905ee718eb5f77aaa9dbc65dcfff3d07c73aba7c4cb3efd62ea62d855da787c15f8167ea8f9dae404f87d907c366954b910e7ca5e9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\12386

MD5 892a8c4836f6f5d1bce5e456e702f654
SHA1 96cfd862bbfb132c4ad174c94003ec7fc821cf6a
SHA256 eda2a497cde19496a1bb69b33046731bf2aadce68b763d618afb7c43d04f1d73
SHA512 a5123654e09dd00fc4b0ca11c088ee7301c19baefa7f7e9c6850f7c3d9536d4ce87b1f3166443c9add7715e7c022f8be69da8206ae6c63371dce5e713ba8fb05

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\doomed\18055

MD5 07ae1fead7b3fb6a6914096c71d16613
SHA1 316a48d06674acec43002379c3d94b460b72b99a
SHA256 b7b93c79ec45626fdbe81767b14f447980962a07e45709716bff0a32780dd68b
SHA512 f0054c93227aff68b960d4cb382f7f2f2958796bd26fceb01a1d2a9d3dbad4d27cb282691c5a6265886f087357885a378a3dba77a74bec3dcf1931636992bec2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\cache2\entries\C86A82162AD32C5CC3A8496ECD773F35A0E1150A

MD5 45d117ce93d14e6e4950c64297495506
SHA1 2b96d12d1a07757b3958024c39d9ca517aec60ea
SHA256 b86ad2511f9f1f23a96f8baf5bd7d972c720aa0bd93fccded7d810d81af4d58e
SHA512 766b769edb95d302422d29a59170b855658729b1cb84fef68960d5dd88a118e538d1558fbce932501764e2c3be472fd6a2abba04d26f737a758e80e56a5667f7

C:\Users\Admin\Downloads\MuMuInstaller_3.1.6.0_yx-gl-codex_all_1709777287(1).exe:Zone.Identifier

MD5 d5a1f45a3c6bb530a7012203dda4058c
SHA1 df36c1e8718394c3b3bab7cc6bdb36927bde2d8c
SHA256 9aa5a20fed6d115c552e3c1103938ef61909a4d454aad0644799d321910ceb85
SHA512 220bd88808cc2b43ec793d758456b267ecc387bfe9445a703184b9de0c85f4dfb6383562c4e98619bdcaf395515483693e4b18a2e7b0c2b29e67163ec48ac206

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\WinRing0x64.inf

MD5 0f6d3047d1b670058d71c411707ef16e
SHA1 7e51d69b5f109ea6902232212fad28deb46f59ef
SHA256 3fded2f4457b0beb415b841b40f6ede5ed527dd537e53e2f70f2fb4a6e24ebfd
SHA512 6a749b4921f527c5af51ade76bfcef2446341b3e66de0d93deb95d26d31dfc357d392f6abdf877b756a7c0529112eba343a3c9926eba767b649d654e6d164280

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\WinRing0.inf

MD5 f069f20871cb316bfb73c276393d1648
SHA1 44851e9f466f58dca883931b18687bfc4921551b
SHA256 07942017e8caaa1065867aecc561577199e53142545cb6fb41239ae4c607d46b
SHA512 72e60561daf384f7ba4003140d72f45ebec82d12c14bd00f4008f92be35a839666f3b24084ff842a0a023d3a595b70dd801f45b8695830bd800cf6862ba05fd1

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\nemu-downloader.exe

MD5 b311535e3673c225b4095f77ca7ea4f5
SHA1 4206e1cbe58428fdbc9b319b8919373646807583
SHA256 7662f1e4e1b4a52cce2fb8c57ffdd4ec8654f3bd1a830814845e75fdcd3f1735
SHA512 57d9d6e592a6cdc3a8ffd514ad21729de15fcdd8b4fd321ce013c9541e08ad6cf3a11bf1479464b5b0fff771552c19ccad2720239779fcd25290c436a287b6c2

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\winring0x64.cat

MD5 e7cee7f541c057f490d486927d659122
SHA1 420888e25a44629c0b53450cc3a3ea9398b373c8
SHA256 317d01d9956f052d929fdbac258f1a2dc5163d3432fc488023a1f4d332ae3d45
SHA512 582cdb32a0e322e945a3ed6a144d21a3606d37e88fac73edc4129e4ee3dea66e5a9ebd8c803e07e59fa00cfc6d6f174a1cc8a947f167a100d4065a10c4615121

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\winring0.cat

MD5 5691a9b76c5b0bd1dd83687f5f0e87a1
SHA1 aa79bf0cc8dcc8c6abc6b85793655060f9cbf223
SHA256 784e031565c67f1d29640c62f0cc205d5b56c1f78be894252cce06474b64a618
SHA512 09cf42743b5d0304179838eadf195821f2f8183d6b8b175642f0b871386c3e2af0e5e59cfaf3f235c16583689b8ed06fc9703e29a6cf234398aaed04c7a9ff62

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\msvcp140.dll

MD5 ff877a5dffd764197250bd4ba28496b1
SHA1 187b8e183fc3331dd4ba139333886ad1fbf333a7
SHA256 83f935454ae8e450b6f042509ecf28cceff95edb2495c63a782b9d45c2eaf1c0
SHA512 b9245353f8a8bce6f443345daf50e135aa9d84bcce4dc5fd9279216b99bc6a1fa409292e110132ad815f303f36006610d6907e9fc778e94977beb2332481d03d

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\msvcp_win.dll

MD5 f9e704b67eccd77a18965e9cfa128461
SHA1 45c0154c0128d356fa96f23689d945ce4122d975
SHA256 f7ac4ceb149eae5184b957d90ebedd9bc916cd1ba3053548b637b4e32a7f8a07
SHA512 90934ac19549ede7dbb96b763d59ba9ca2a0a4c540ec37b6b23c1827f2efb75a05b8e45162ac74df600f414262ed8962026f500bc302998f67c64595b91f0a42

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\WinRing0x64.sys

MD5 1c57d067b9fc5e9ef9aeb14223481243
SHA1 4ee59164d3259667d3cade58f4c93b4dddf5a92b
SHA256 d5bca2ca464a6cc91344bd85e812a7bac6e7c67038c4929a29e0bc60c7eabe4d
SHA512 a8de7ab7f67cbe2bf25fd772c24344031322dfab77d07fd835109530450683c158f37955982e875a3acbbfaea2e72c0ba5a52d85f3e1e58984ec63c96f6c0ccd

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\WinRing0.sys

MD5 a73ee34a7a50be60e77cc277a96d7ba8
SHA1 b3a8e39cd99feb817ce799cce193a2fbb12cbec6
SHA256 4448beff8366e42e3393e8c7f8261aee0b0340356c31aa3b97de07452ae01888
SHA512 668806257d29f73315b26540f0453bd673901c25fb3f16cba942c2dcf2006be8777573efbd831fce2bc7f0111b44b31a06c812ed9b1f59d5be0eb0c3c5c9eff2

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\msvcrt.dll

MD5 0daa0d9dc786f95c8dc2ccc0221b2863
SHA1 e75752978edc470752de9627a498794393c3b8eb
SHA256 279a03acc810c1fe613be283eb24762f0451da9a6142ed3dc996a1d10fe2f692
SHA512 e59c10166e522e05349ac7cf634dcd8e406495897d8816530b3d2002c796a71f60e4eba670c095216cdbbd251bf47638bf779e51dc068e471aa2d70004ce6449

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\MuMuDownloader.exe

MD5 2f3d77b4f587f956e9987598b0a218eb
SHA1 c067432f3282438b367a10f6b0bc0466319e34e9
SHA256 2f980c56d81f42ba47dc871a04406976dc490ded522131ce9a2e35c40ca8616e
SHA512 a63afc6d708e3b974f147a2d27d90689d8743acd53d60ad0f81a3ab54dfa851d73bcb869d1e476035abc5e234479812730285c0826a2c3da62f39715e315f221

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\baseboard

MD5 90166040529ed2b690cb70419cdf166e
SHA1 1d82aa7c4acfe1d6cd4bc7dbf43dd835e8d0bd12
SHA256 19592abcb417213c5dbfb6b632652cbc154084c3233cbd3b157f6f2e592b115c
SHA512 0bdbd109eaa9f746bfe883c2d90cf713a5e7b2fc69a6c804714c7f4e71e4368eada5dccadd01a171702d9e5a37e6c50aa1a065ce5caa8ae1b3743a9a0adfec76

C:\Users\Admin\AppData\Local\Temp\7z2A28DFF0\baseboard

MD5 6cecdec5f6264ce5767629522f39a74f
SHA1 279a8fe86baf641a10f225d0d547e76dff25bd44
SHA256 bd9312f83d4ee53c511272411d411698f7deb9f4d74debc7729407b349ba658f
SHA512 ab667cdd2808cd48181ecf4034b36df874a822ea1ddfe5b7ed00e509529a319c099b8f7634cbd7ed3e4090069b33e2c7db725fc0da36a5c32bece8363695fc93

C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\NW2MXXTC\www.youtube[1].xml

MD5 69d51b86041b9bd6c5345e978219ce91
SHA1 4f644f9e32bb08d19fd9ae99e99907bb4b2cefed
SHA256 392a15369e9d2ee0813636d1ccc3c8c6c2519f3f813b7cbc14e23265e8a7dcd8
SHA512 65020a61cf5bbae457c7f4171a2c033ec99c7e8d6a020bb0cd828b0c7599d8bf97f5bc9092291660052ddf5beb7e071db6b5a3ffb55626dcbee913968108145a

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 a01c5ecd6108350ae23d2cddf0e77c17
SHA1 c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256 345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512 b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

MD5 49ddb419d96dceb9069018535fb2e2fc
SHA1 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

MD5 8be33af717bb1b67fbd61c3f4b807e9e
SHA1 7cf17656d174d951957ff36810e874a134dd49e0
SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA512 6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

MD5 33bf7b0439480effb9fb212efce87b13
SHA1 cee50f2745edc6dc291887b6075ca64d716f495a
SHA256 8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512 d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

MD5 688bed3676d2104e7f17ae1cd2c59404
SHA1 952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

MD5 937326fead5fd401f6cca9118bd9ade9
SHA1 4526a57d4ae14ed29b37632c72aef3c408189d91
SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512 b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 18f314864e61ee0dc148f041620aeccf
SHA1 8da09dfc2e80496de6ff2fa660df89526ccbc04f
SHA256 c96b8c8a50056ab7e90230dc65d8df1a896fd3840010e24ddd8445e13b2ffca0
SHA512 9fb8c9ee0885733d1ec128a8f0fbbfc22e8aa2cdb052ff46488fe594555187af5529f227c7b22613ac3e504dfa6afa1c377da81d0dc57343d6c48eed41fe90f2