Malware Analysis Report

2025-01-19 04:42

Sample ID 240808-l7zrzswbmh
Target http://web.archive.org
Tags
bootkit microsoft defense_evasion discovery persistence phishing
score
6/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
6/10

Threat Level: Shows suspicious behavior

The file http://web.archive.org was found to be: Shows suspicious behavior.

Malicious Activity Summary

bootkit microsoft defense_evasion discovery persistence phishing

System Binary Proxy Execution: Verclsid

Legitimate hosting services abused for malware hosting/C2

Writes to the Master Boot Record (MBR)

Drops file in System32 directory

Detected potential entity reuse from brand microsoft.

System Location Discovery: System Language Discovery

System Network Configuration Discovery: Internet Connection Discovery

Browser Information Discovery

Suspicious use of SetWindowsHookEx

Suspicious use of SendNotifyMessage

Suspicious use of AdjustPrivilegeToken

Modifies Internet Explorer settings

Suspicious behavior: EnumeratesProcesses

Enumerates system info in registry

Modifies registry class

Checks SCSI registry key(s)

Modifies data under HKEY_USERS

Suspicious behavior: GetForegroundWindowSpam

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of FindShellTrayWindow

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-08 10:11

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-08 10:11

Reported

2024-08-08 10:34

Platform

win10v2004-20240802-en

Max time kernel

1089s

Max time network

1086s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://web.archive.org

Signatures

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

System Binary Proxy Execution: Verclsid

defense_evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\verclsid.exe N/A

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\Desktop\MEMZ.exe N/A

Detected potential entity reuse from brand microsoft.

phishing microsoft

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\WINDOWS\SYSTEM32\WINBIODATABASE\51F39552-1075-4199-B513-0C10EA185DB0.DAT C:\Windows\system32\svchost.exe N/A

Browser Information Discovery

discovery

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\MEMZ.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\notepad.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\calc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\explorer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\mmc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\SafeMEMZ.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\SafeMEMZ.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\MEMZ.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\MEMZ.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\SafeMEMZ.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\MEMZ.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\SafeMEMZ.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\MEMZ.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\MEMZ.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\MEMZ.exe N/A

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Windows\system32\SnippingTool.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 C:\Windows\system32\SettingSyncHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C C:\Windows\system32\wwahost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID C:\Windows\system32\SettingSyncHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 C:\Windows\system32\wwahost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000 C:\Windows\system32\SettingSyncHost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Windows\system32\SettingSyncHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 C:\Windows\system32\wwahost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 C:\Windows\system32\SettingSyncHost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID C:\Windows\system32\SettingSyncHost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID C:\Windows\system32\SettingSyncHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 C:\Windows\system32\SettingSyncHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 C:\Windows\system32\wwahost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName C:\Windows\system32\wwahost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 C:\Windows\system32\wwahost.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\SOFTWARE\Microsoft\Internet Explorer\GPU C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000\Software\Microsoft\Internet Explorer\GPU C:\Windows\system32\wwahost.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133675859434637013" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "C0C" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\SR\\en-US-N\\tn1033.bin" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "80A" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Discrete;Continuous" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%SystemDrive%\\Data\\SharedData\\Speech_OneCore\\Engines\\TTS\\de-DE" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "11.1" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Eva Mobile" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Nathalie Mobile - French (France)" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\TTS\\pt-BR\\MSTTSLocptBR.dat" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "{0B3398EA-00F1-418b-AA31-6F2F9BE5809B}" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "1033" C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy\PackageStateRoamingCollectionId C:\Windows\system32\SettingSyncHost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoft.accountscontrol_cw5n1h2txyewy\PackageStateRoamingCollectionId C:\Windows\system32\SettingSyncHost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Katja Cortana Mobile" C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoft.windows.narratorquickstart_8wekyb3d8bbwe\PackageStateRoamingCollectionId C:\Windows\system32\SettingSyncHost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\History\CacheLimit = "1" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "{14E74C62-DC97-43B0-8F2F-581496A65D60}" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\windows.cloudexperienceho = "0" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\live.com\Total = "0" C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\signup.live.com C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\TTS\\en-CA\\MSTTSLocenCA.dat" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\client-api.arkoselabs.com\ = "0" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "6;18;22" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Ana Mobile" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\TTS\\es-MX\\MSTTSLocesMX.dat" C:\Windows\system32\wwahost.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = 502024a7d642fefcc4bddd0392cf42788043eb9fe7eb33e5cac649775f49f4f0 C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\login.live.com\ = "0" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\Total\ = "0" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\iframe.arkoselabs.com\ = "0" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%SystemDrive%\\Data\\SharedData\\Speech_OneCore\\Engines\\TTS\\ja-JP" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\TTS\\zh-CN\\MSTTSLoczhCN.dat" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\SR\\en-US-N\\r1033sr.lxa" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "11.0.2013.1022" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\live.com\NumberOfSubdomains = "2" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Eva Mobile(Canada)" C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\Extensible Cache C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\Content C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\TTS\\en-GB\\MSTTSLocenGB.dat" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%SystemDrive%\\Data\\SharedData\\Speech_OneCore\\Engines\\TTS\\en-AU" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "40" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Speech Recognition Engine - en-US Embedded DNN v11.1" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\TTS\\it-it\\M1040ElsaV2" C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "HW" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "11.0.2014.1222" C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\login.live.com C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoft.com\Total = "40" C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "- 0001 ! 0002 & 0003 , 0004 . 0005 ? 0006 _ 0007 ^ 0008 1 0009 2 000a ~ 000b : 000c a 000d aw 000e ax 000f ay 0010 b 0011 d 0012 ch 0013 eh 0014 eu 0015 ey 0016 f 0017 g 0018 h 0019 ih 001a iy 001b jh 001c k 001d l 001e m 001f n 0020 ng 0021 oe 0022 oh 0023 ow 0024 oy 0025 p 0026 pf 0027 r 0028 s 0029 sh 002a t 002b ts 002c ue 002d uh 002e uw 002f uy 0030 v 0031 x 0032 y 0033 z 0034 zh 0035" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Japanese Phone Converter" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "411" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "11.1.2014.1222" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "410" C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoft.windows.apprep.chxapp_cw5n1h2txyewy\PackageStateRoamingCollectionId C:\Windows\system32\SettingSyncHost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\signup.live.com\ = "0" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\account.live.com\ = "124" C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoft.windows.capturepicker_cw5n1h2txyewy\PackageStateRoamingCollectionId C:\Windows\system32\SettingSyncHost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings C:\Windows\SysWOW64\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoft.windows.callingshellapp_cw5n1h2txyewy\PackageStateRoamingCollectionId C:\Windows\system32\SettingSyncHost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "40C" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "I 0069 Y 0079 IX 0268 YX 0289 UU 026F U 0075 IH 026A YH 028F UH 028A E 0065 EU 00F8 EX 0258 OX 0275 OU 0264 O 006F AX 0259 EH 025B OE 0153 ER 025C UR 025E AH 028C AO 0254 AE 00E6 AEX 0250 A 0061 AOE 0276 AA 0251 Q 0252 EI 006503610069 AU 00610361028A OI 025403610069 AI 006103610069 IYX 006903610259 UYX 007903610259 EHX 025B03610259 UWX 007503610259 OWX 006F03610259 AOX 025403610259 EN 00650303 AN 00610303 ON 006F0303 OEN 01530303 P 0070 B 0062 M 006D BB 0299 PH 0278 BH 03B2 MF 0271 F 0066 V 0076 VA 028B TH 03B8 DH 00F0 T 0074 D 0064 N 006E RR 0072 DX 027E S 0073 Z 007A LSH 026C LH 026E RA 0279 L 006C SH 0283 ZH 0292 TR 0288 DR 0256 NR 0273 DXR 027D SR 0282 ZR 0290 R 027B LR 026D CT 0063 JD 025F NJ 0272 C 00E7 CJ 029D J 006A LJ 028E W 0077 K 006B G 0067 NG 014B X 0078 GH 0263 GA 0270 GL 029F QT 0071 QD 0262 QN 0274 QQ 0280 QH 03C7 RH 0281 HH 0127 HG 0295 GT 0294 H 0068 WJ 0265 PF 007003610066 TS 007403610073 CH 007403610283 JH 006403610292 JJ 006A0361006A DZ 00640361007A CC 007403610255 JC 006403610291 TSR 007403610282 WH 028D ESH 029C EZH 02A2 ET 02A1 SC 0255 ZC 0291 LT 027A SHX 0267 HZ 0266 PCK 0298 TCK 01C0 NCK 0021 CCK 01C2 LCK 01C1 BIM 0253 DIM 0257 QIM 029B GIM 0260 JIM 0284 S1 02C8 S2 02CC . 002E _| 007C _|| 2016 lng 02D0 hlg 02D1 xsh 02D8 _^ 203F _! 0001 _& 0002 _, 0003 _s 0004 _. 2198 _? 2197 T5 030B T4 0301 T3 0304 T2 0300 T1 030F T- 2193 T+ 2191 vls 030A vcd 032C bvd 0324 cvd 0330 asp 02B0 mrd 0339 lrd 031C adv 031F ret 0331 cen 0308 mcn 033D syl 0329 nsy 032F rho 02DE lla 033C lab 02B7 pal 02B2 vel 02E0 phr 02E4 vph 0334 rai 031D low 031E atr 0318 rtr 0319 den 032A api 033A lam 033B nas 0303 nsr 207F lar 02E1 nar 031A ejc 02BC + 0361 bva 02B1 G2 0261 rte 0320 vsl 0325 NCK3 0297 NCK2 01C3 LCK2 0296 TCK2 0287 JC2 02A5 CC2 02A8 LG 026B DZ2 02A3 TS2 02A6 JH2 02A4 CH2 02A7 SHC 0286 rhz 02B4 QOM 02A0 xst 0306 T= 2192 ERR 025D AXR 025A ZHJ 0293" C:\Windows\system32\wwahost.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Windows\system32\SnippingTool.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Windows\system32\wwahost.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\wwahost.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\wwahost.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\svchost.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\system32\SettingSyncHost.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\SettingSyncHost.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\system32\SettingSyncHost.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\SettingSyncHost.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\system32\SettingSyncHost.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\SettingSyncHost.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\system32\svchost.exe N/A
Token: 33 N/A C:\Windows\system32\mmc.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\mmc.exe N/A
Token: 33 N/A C:\Windows\system32\mmc.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\mmc.exe N/A
Token: 33 N/A C:\Windows\system32\mmc.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\mmc.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Windows\system32\wwahost.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Windows\system32\SnippingTool.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Windows\SysWOW64\mmc.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Desktop\MEMZ.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2252 wrote to memory of 4848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 4948 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 2288 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 2288 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 1320 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 1320 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 1320 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 1320 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 1320 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 1320 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 1320 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 1320 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2252 wrote to memory of 1320 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://web.archive.org

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --field-trial-handle=3632,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --field-trial-handle=4684,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --field-trial-handle=5416,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=5492,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --field-trial-handle=5456,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --field-trial-handle=6072,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=21 --field-trial-handle=5360,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --field-trial-handle=5972,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --field-trial-handle=5884,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=6080,i,10369132178352108590,11047993562598554317,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=127.0.6533.89 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=127.0.2651.86 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f4,0x7fffa9a3d198,0x7fffa9a3d1a4,0x7fffa9a3d1b0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2240,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --field-trial-handle=1828,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --field-trial-handle=2216,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\elevation_service.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=4548,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=4548,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DisplayEnhancementService

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=5000,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=5008,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --field-trial-handle=5656,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --video-capture-use-gpu-memory-buffer --field-trial-handle=5696,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=6100,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=6164,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=6424,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=6560,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=6564,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=3100,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5868,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=6324,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=6848,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=6936,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5404,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --field-trial-handle=7012,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=7000,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6896 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=7152,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=5716,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=7336,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=7348 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --video-capture-use-gpu-memory-buffer --field-trial-handle=7708,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=7752,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=7780 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --video-capture-use-gpu-memory-buffer --field-trial-handle=7796,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=8312 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=8036,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=8572 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=8104,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=8600 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=8104,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=8600 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=7464,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=7440 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=8728,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=8748 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=7612,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=8792 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=7552,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=7848 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=8640,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=7488 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=7180,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=7944 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=5852,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=7512,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=7700 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=8764,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=7808 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=8068,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=8888,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=8892 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=3812,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=7972 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=8100,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=1424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=5772,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=7584,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=7952,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.FileUtilService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=7488,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=7600 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=5652,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=7876 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --field-trial-handle=5744,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=8828 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=7444,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=8724 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=7928,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=7924 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=8600,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=4304,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=7964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=6844,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=8968 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=7828,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=9072,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --video-capture-use-gpu-memory-buffer --field-trial-handle=9112,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=4200,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=4200,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=8964,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=9056 /prefetch:1

C:\Users\Admin\Desktop\SafeMEMZ.exe

"C:\Users\Admin\Desktop\SafeMEMZ.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=7700,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=4104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=7876,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=9372 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --field-trial-handle=7636,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=5628,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=6544,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=9008 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=5620,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=9252 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=9604,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=9644 /prefetch:8

C:\Users\Admin\Desktop\SafeMEMZ.exe

"C:\Users\Admin\Desktop\SafeMEMZ.exe"

C:\Users\Admin\Desktop\SafeMEMZ.exe

"C:\Users\Admin\Desktop\SafeMEMZ.exe"

C:\Users\Admin\Desktop\SafeMEMZ.exe

"C:\Users\Admin\Desktop\SafeMEMZ.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --field-trial-handle=9748,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=7436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --field-trial-handle=9832,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=9852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --field-trial-handle=10048,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=9972 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=9584,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=9388 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=9816,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10012 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --field-trial-handle=9944,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=9716 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --field-trial-handle=9704,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=9756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=7340,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10236 /prefetch:8

C:\Users\Admin\Desktop\MEMZ.exe

"C:\Users\Admin\Desktop\MEMZ.exe"

C:\Users\Admin\Desktop\MEMZ.exe

"C:\Users\Admin\Desktop\MEMZ.exe" /watchdog

C:\Users\Admin\Desktop\MEMZ.exe

"C:\Users\Admin\Desktop\MEMZ.exe" /watchdog

C:\Users\Admin\Desktop\MEMZ.exe

"C:\Users\Admin\Desktop\MEMZ.exe" /watchdog

C:\Users\Admin\Desktop\MEMZ.exe

"C:\Users\Admin\Desktop\MEMZ.exe" /watchdog

C:\Users\Admin\Desktop\MEMZ.exe

"C:\Users\Admin\Desktop\MEMZ.exe" /watchdog

C:\Users\Admin\Desktop\MEMZ.exe

"C:\Users\Admin\Desktop\MEMZ.exe" /main

C:\Windows\SysWOW64\notepad.exe

"C:\Windows\System32\notepad.exe" \note.txt

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --field-trial-handle=9708,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=9860 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --field-trial-handle=10440,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10276 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --field-trial-handle=9820,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10600 /prefetch:1

C:\Windows\system32\wwahost.exe

"C:\Windows\system32\wwahost.exe" -ServerName:App.wwa

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k UnistackSvcGroup

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://pcoptimizerpro.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --field-trial-handle=9760,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10328 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --field-trial-handle=10704,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --field-trial-handle=6696,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://answers.microsoft.com/en-us/protect/forum/protect_other-protect_scanning/memz-malwarevirus-trojan-completely-destroying/268bc1c2-39f4-42f8-90c2-597a673b6b45

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --field-trial-handle=9836,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=9388 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --field-trial-handle=10840,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10888 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --field-trial-handle=10940,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6768 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --field-trial-handle=11072,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10428 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --field-trial-handle=10768,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10408 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --field-trial-handle=10860,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --field-trial-handle=10864,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10572 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --field-trial-handle=9992,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=9916 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=minecraft+hax+download+no+virus

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --field-trial-handle=10752,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --field-trial-handle=6712,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=11180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=bonzi+buddy+download+free

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --field-trial-handle=6700,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=11200 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=10364,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=10900,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=11240 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=11156,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10628 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x150 0x53c

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=john+cena+midi+legit+not+converted

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=7532,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=9916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --field-trial-handle=11336,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=11352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+create+your+own+ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=7192,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=11320 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --field-trial-handle=11508,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=11528 /prefetch:1

C:\Windows\system32\SettingSyncHost.exe

C:\Windows\system32\SettingSyncHost.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=10396,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=11288 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --field-trial-handle=6808,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --video-capture-use-gpu-memory-buffer --field-trial-handle=11540,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=11500 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=12140,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=12124 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+create+your+own+ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --field-trial-handle=12452,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=12488 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --field-trial-handle=12660,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=12672 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --field-trial-handle=12060,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=11940 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --field-trial-handle=12260,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=11936 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --field-trial-handle=11572,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_tipping.mojom.EdgeTippingDataFetcher --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=12236,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=12180 /prefetch:8

C:\Windows\system32\verclsid.exe

"C:\Windows\system32\verclsid.exe" /S /C {72C984BA-0666-4D3F-A0DE-96BF43838E6E} /I {0CB6E812-BD37-4416-BFAE-E44A7C15B453} /X 0x1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --field-trial-handle=12340,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=12244 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --field-trial-handle=8956,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --field-trial-handle=12804,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=12856 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --field-trial-handle=12408,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=8564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --field-trial-handle=13104,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=13160 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --field-trial-handle=12628,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=8648 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --field-trial-handle=13340,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=13360 /prefetch:1

C:\Windows\system32\CredentialEnrollmentManager.exe

C:\Windows\system32\CredentialEnrollmentManager.exe

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --field-trial-handle=11640,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=13484 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --field-trial-handle=12676,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=13612 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --field-trial-handle=13796,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=13540 /prefetch:1

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k WbioSvcGroup -s WbioSrvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --field-trial-handle=13928,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=13960 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --field-trial-handle=11888,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=13756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --field-trial-handle=11352,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=13792 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --field-trial-handle=13888,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=11748 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --field-trial-handle=11440,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10652 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --field-trial-handle=10004,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=13492 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --field-trial-handle=11864,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --field-trial-handle=12992,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10444 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --field-trial-handle=2784,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=13492 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --field-trial-handle=11424,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=5736 /prefetch:1

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://pcoptimizerpro.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --field-trial-handle=13588,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=13996 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --field-trial-handle=13764,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=9652 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --field-trial-handle=11892,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=12312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=best+way+to+kill+yourself

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --field-trial-handle=14020,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=7620 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --field-trial-handle=11516,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=14096 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --field-trial-handle=14208,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=11432 /prefetch:1

C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe

"C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"

C:\Windows\splwow64.exe

C:\Windows\splwow64.exe 12288

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc

C:\Windows\system32\SnippingTool.exe

"C:\Windows\system32\SnippingTool.exe"

C:\Windows\SysWOW64\calc.exe

"C:\Windows\System32\calc.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Windows\SysWOW64\mmc.exe

"C:\Windows\System32\mmc.exe"

C:\Windows\system32\mmc.exe

"C:\Windows\system32\mmc.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --field-trial-handle=13852,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --field-trial-handle=3864,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=10288 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --field-trial-handle=14212,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=11432 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --field-trial-handle=11604,i,17494214353476718148,17426971540463310440,262144 --variations-seed-version --mojo-platform-channel-handle=13124 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 api.edgeoffer.microsoft.com udp
US 8.8.8.8:53 api.edgeoffer.microsoft.com udp
US 8.8.8.8:53 web.archive.org udp
US 8.8.8.8:53 web.archive.org udp
US 8.8.8.8:53 web.archive.org udp
IE 94.245.104.56:443 api.edgeoffer.microsoft.com tcp
US 207.241.237.3:80 web.archive.org tcp
US 207.241.237.3:80 web.archive.org tcp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 web.archive.org udp
US 8.8.8.8:53 web.archive.org udp
US 8.8.8.8:53 web.archive.org udp
US 207.241.237.3:443 web.archive.org tcp
US 13.107.6.158:443 business.bing.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 56.104.245.94.in-addr.arpa udp
US 8.8.8.8:53 167.57.26.184.in-addr.arpa udp
US 8.8.8.8:53 3.237.241.207.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
GB 184.25.193.234:443 www.microsoft.com tcp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 polyfill.archive.org udp
US 8.8.8.8:53 polyfill.archive.org udp
US 8.8.8.8:53 archive.org udp
US 8.8.8.8:53 archive.org udp
US 8.8.8.8:53 web-static.archive.org udp
US 8.8.8.8:53 web-static.archive.org udp
US 8.8.8.8:53 234.193.25.184.in-addr.arpa udp
US 8.8.8.8:53 71.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
GB 92.123.142.200:443 bzib.nelreports.net tcp
US 8.8.8.8:53 www.microsoft.com udp
GB 92.123.142.200:443 bzib.nelreports.net tcp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 polyfill.archive.org udp
US 8.8.8.8:53 polyfill.archive.org udp
US 8.8.8.8:53 archive.org udp
US 8.8.8.8:53 archive.org udp
US 8.8.8.8:53 web-static.archive.org udp
US 8.8.8.8:53 web-static.archive.org udp
US 207.241.239.241:443 polyfill.archive.org tcp
US 207.241.237.2:443 web-static.archive.org tcp
US 207.241.237.2:443 web-static.archive.org tcp
US 207.241.237.2:443 web-static.archive.org tcp
US 207.241.237.2:443 web-static.archive.org tcp
US 207.241.237.2:443 web-static.archive.org tcp
US 207.241.237.2:443 web-static.archive.org tcp
US 207.241.224.2:443 archive.org tcp
US 207.241.224.2:443 archive.org tcp
US 207.241.224.2:443 archive.org tcp
US 207.241.224.2:443 archive.org tcp
US 207.241.224.2:443 archive.org tcp
US 207.241.224.2:443 archive.org tcp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 2.237.241.207.in-addr.arpa udp
US 8.8.8.8:53 241.239.241.207.in-addr.arpa udp
US 8.8.8.8:53 2.224.241.207.in-addr.arpa udp
US 207.241.237.2:443 web-static.archive.org tcp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
GB 13.87.96.169:443 nav-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 200.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 169.96.87.13.in-addr.arpa udp
US 8.8.8.8:53 205.47.74.20.in-addr.arpa udp
US 8.8.8.8:53 edgestatic.azureedge.net udp
US 8.8.8.8:53 edgestatic.azureedge.net udp
US 8.8.8.8:53 c.s-microsoft.com udp
US 8.8.8.8:53 c.s-microsoft.com udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
GB 92.123.142.152:443 www.bing.com udp
US 207.241.224.2:443 archive.org tcp
US 8.8.8.8:53 athena.archive.org udp
US 8.8.8.8:53 athena.archive.org udp
US 207.241.225.195:443 athena.archive.org tcp
US 8.8.8.8:53 152.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 195.225.241.207.in-addr.arpa udp
US 8.8.8.8:53 183.59.114.20.in-addr.arpa udp
US 8.8.8.8:53 56.126.166.20.in-addr.arpa udp
US 8.8.8.8:53 86.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 192.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 19.229.111.52.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 81.144.22.2.in-addr.arpa udp
GB 92.123.142.152:443 www.bing.com tcp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 90.65.42.20.in-addr.arpa udp
US 8.8.8.8:53 edge-mobile-static.azureedge.net udp
US 8.8.8.8:53 edge-mobile-static.azureedge.net udp
GB 92.123.142.152:443 www.bing.com tcp
US 8.8.8.8:53 cxcs.microsoft.net udp
GB 23.62.195.195:443 cxcs.microsoft.net tcp
GB 92.123.142.187:443 www.bing.com tcp
US 8.8.8.8:53 187.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 195.195.62.23.in-addr.arpa udp
US 8.8.8.8:53 api.edgeoffer.microsoft.com udp
US 8.8.8.8:53 api.edgeoffer.microsoft.com udp
IE 94.245.104.56:443 api.edgeoffer.microsoft.com tcp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 13.107.6.158:443 business.bing.com tcp
GB 51.140.242.104:443 nav-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
GB 92.123.142.200:443 bzib.nelreports.net tcp
GB 92.123.142.152:443 www.bing.com udp
US 8.8.8.8:53 edge-consumer-static.azureedge.net udp
US 8.8.8.8:53 edge-consumer-static.azureedge.net udp
US 8.8.8.8:53 64.253.107.13.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 184.28.176.35:443 r.bing.com tcp
GB 184.28.176.35:443 r.bing.com tcp
GB 184.28.176.114:443 th.bing.com tcp
GB 184.28.176.114:443 th.bing.com tcp
US 8.8.8.8:53 35.176.28.184.in-addr.arpa udp
US 8.8.8.8:53 114.176.28.184.in-addr.arpa udp
GB 184.28.176.35:443 r.bing.com udp
GB 184.28.176.35:443 r.bing.com udp
GB 184.28.176.114:443 th.bing.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
IE 20.190.159.75:443 login.microsoftonline.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 services.bingapis.com udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 75.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
US 8.8.8.8:53 68.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.110.133:443 user-images.githubusercontent.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 185.199.110.133:443 user-images.githubusercontent.com tcp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 154.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 133.110.199.185.in-addr.arpa udp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 collector.github.com udp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 api.github.com udp
US 140.82.114.22:443 collector.github.com tcp
US 140.82.114.22:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 22.114.82.140.in-addr.arpa udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.110.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 dl-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 dl-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 app-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 app-edge.smartscreen.microsoft.com udp
GB 51.140.244.186:443 app-edge.smartscreen.microsoft.com tcp
GB 184.28.176.32:443 www.bing.com udp
US 8.8.8.8:53 32.176.28.184.in-addr.arpa udp
US 8.8.8.8:53 walker.com udp
US 8.8.8.8:53 walker.com udp
US 8.8.8.8:53 walker.com udp
US 8.8.8.8:53 walker.com udp
US 199.60.103.56:443 walker.com tcp
US 199.60.103.56:443 walker.com tcp
US 8.8.8.8:53 www.walker.com udp
US 8.8.8.8:53 www.walker.com udp
US 8.8.8.8:53 www.walker.com udp
US 8.8.8.8:53 56.103.60.199.in-addr.arpa udp
US 8.8.8.8:53 www.walker.com udp
US 8.8.8.8:53 www.walker.com udp
US 8.8.8.8:53 walker.com udp
US 8.8.8.8:53 walker.com udp
US 8.8.8.8:53 walker.com udp
US 8.8.8.8:53 walker.com udp
US 8.8.8.8:53 walker.com udp
US 199.60.103.156:443 walker.com tcp
US 8.8.8.8:53 aefd.nelreports.net udp
US 8.8.8.8:53 aefd.nelreports.net udp
US 8.8.8.8:53 walker.com udp
US 8.8.8.8:53 walker.com udp
US 8.8.8.8:53 walker.com udp
US 199.60.103.156:443 walker.com tcp
US 8.8.8.8:53 walker.com udp
US 8.8.8.8:53 aefd.nelreports.net udp
US 8.8.8.8:53 aefd.nelreports.net udp
US 8.8.8.8:53 www.walker.com udp
GB 173.222.211.41:443 aefd.nelreports.net tcp
GB 173.222.211.41:443 aefd.nelreports.net tcp
US 8.8.8.8:53 walker.com udp
US 8.8.8.8:53 www.walker.com udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 199.60.103.30:443 www.walker.com tcp
US 8.8.8.8:53 41.211.222.173.in-addr.arpa udp
US 8.8.8.8:53 www.walker.com udp
US 199.60.103.30:443 www.walker.com tcp
US 8.8.8.8:53 30.103.60.199.in-addr.arpa udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
GB 173.222.211.41:443 aefd.nelreports.net udp
US 199.60.103.30:443 www.walker.com udp
US 8.8.8.8:53 code.jquery.com udp
US 8.8.8.8:53 code.jquery.com udp
US 151.101.66.137:443 code.jquery.com tcp
US 8.8.8.8:53 s3-us-west-2.amazonaws.com udp
US 8.8.8.8:53 s3-us-west-2.amazonaws.com udp
US 8.8.8.8:53 use.typekit.net udp
US 8.8.8.8:53 use.typekit.net udp
US 52.218.218.64:443 s3-us-west-2.amazonaws.com tcp
US 8.8.8.8:53 cdn2.hubspot.net udp
US 8.8.8.8:53 cdn2.hubspot.net udp
US 52.218.218.64:443 s3-us-west-2.amazonaws.com tcp
US 8.8.8.8:53 137.66.101.151.in-addr.arpa udp
US 8.8.8.8:53 use.typekit.net udp
US 8.8.8.8:53 use.typekit.net udp
GB 23.59.171.16:443 use.typekit.net tcp
US 8.8.8.8:53 cdn2.hubspot.net udp
US 8.8.8.8:53 cdn2.hubspot.net udp
US 104.18.88.62:443 cdn2.hubspot.net udp
GB 23.59.171.16:443 use.typekit.net tcp
US 8.8.8.8:53 42.36.251.142.in-addr.arpa udp
US 8.8.8.8:53 64.218.218.52.in-addr.arpa udp
US 8.8.8.8:53 62.88.18.104.in-addr.arpa udp
US 104.18.88.62:443 cdn2.hubspot.net tcp
US 104.18.88.62:443 cdn2.hubspot.net tcp
US 8.8.8.8:53 js.hsforms.net udp
US 8.8.8.8:53 js.hsforms.net udp
US 8.8.8.8:53 fast.wistia.com udp
US 8.8.8.8:53 fast.wistia.com udp
US 8.8.8.8:53 156.103.60.199.in-addr.arpa udp
US 8.8.8.8:53 432255.fs1.hubspotusercontent-na1.net udp
US 8.8.8.8:53 432255.fs1.hubspotusercontent-na1.net udp
US 8.8.8.8:53 no-cache.hubspot.com udp
US 8.8.8.8:53 no-cache.hubspot.com udp
US 8.8.8.8:53 16.171.59.23.in-addr.arpa udp
US 8.8.8.8:53 static.hsappstatic.net udp
US 8.8.8.8:53 static.hsappstatic.net udp
US 151.101.194.132:443 fast.wistia.com tcp
US 151.101.194.132:443 fast.wistia.com tcp
US 104.17.175.91:443 static.hsappstatic.net tcp
US 104.16.118.116:443 no-cache.hubspot.com tcp
US 104.18.24.189:443 432255.fs1.hubspotusercontent-na1.net tcp
US 104.17.175.91:443 static.hsappstatic.net tcp
US 104.16.118.116:443 no-cache.hubspot.com tcp
US 8.8.8.8:53 p.typekit.net udp
US 8.8.8.8:53 p.typekit.net udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 connect.facebook.net udp
CH 157.240.17.15:443 connect.facebook.net tcp
CH 157.240.17.15:443 connect.facebook.net tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 162.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 132.194.101.151.in-addr.arpa udp
US 8.8.8.8:53 189.24.18.104.in-addr.arpa udp
US 8.8.8.8:53 168.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 91.175.17.104.in-addr.arpa udp
US 8.8.8.8:53 116.118.16.104.in-addr.arpa udp
US 8.8.8.8:53 15.17.240.157.in-addr.arpa udp
NL 142.251.39.98:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 js.hsforms.net udp
US 8.8.8.8:53 js.hsforms.net udp
US 8.8.8.8:53 p.typekit.net udp
GB 23.59.171.16:443 use.typekit.net tcp
GB 23.59.171.16:443 use.typekit.net tcp
US 8.8.8.8:53 98.39.251.142.in-addr.arpa udp
CH 157.240.17.15:443 connect.facebook.net udp
US 8.8.8.8:53 www.walker.com udp
US 8.8.8.8:53 www.walker.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 130.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 js.hsforms.net udp
US 8.8.8.8:53 p.typekit.net udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 131.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 pipedream.wistia.com udp
US 8.8.8.8:53 pipedream.wistia.com udp
US 3.165.148.24:443 pipedream.wistia.com tcp
US 199.60.103.156:443 walker.com tcp
US 8.8.8.8:53 24.148.165.3.in-addr.arpa udp
US 8.8.8.8:53 www.facebook.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
GB 23.59.171.26:443 p.typekit.net tcp
US 8.8.8.8:53 3.36.251.142.in-addr.arpa udp
US 8.8.8.8:53 26.171.59.23.in-addr.arpa udp
US 8.8.8.8:53 194.23.217.172.in-addr.arpa udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.google.co.uk udp
NL 172.217.168.195:443 www.google.co.uk udp
NL 172.217.168.195:443 www.google.co.uk tcp
NL 172.217.168.195:443 www.google.co.uk tcp
US 8.8.8.8:53 195.168.217.172.in-addr.arpa udp
CH 157.240.17.35:443 www.facebook.com tcp
CH 157.240.17.35:443 www.facebook.com tcp
US 8.8.8.8:53 js.hsforms.net udp
US 8.8.8.8:53 js.hsforms.net udp
US 104.18.141.119:443 js.hsforms.net tcp
US 8.8.8.8:53 119.141.18.104.in-addr.arpa udp
US 8.8.8.8:53 perf.hsforms.com udp
US 8.8.8.8:53 perf.hsforms.com udp
US 8.8.8.8:53 perf.hsforms.com udp
US 8.8.8.8:53 perf.hsforms.com udp
US 8.8.8.8:53 perf.hsforms.com udp
US 8.8.8.8:53 35.17.240.157.in-addr.arpa udp
US 104.19.175.188:443 perf.hsforms.com tcp
US 104.19.175.188:443 perf.hsforms.com tcp
US 8.8.8.8:53 188.175.19.104.in-addr.arpa udp
US 8.8.8.8:53 forms.hsforms.com udp
US 8.8.8.8:53 forms.hsforms.com udp
US 8.8.8.8:53 js.hs-banner.com udp
US 8.8.8.8:53 js.hs-banner.com udp
US 8.8.8.8:53 forms.hsforms.com udp
US 8.8.8.8:53 forms.hsforms.com udp
US 8.8.8.8:53 js.hs-analytics.net udp
US 8.8.8.8:53 js.hs-analytics.net udp
US 8.8.8.8:53 app.hubspot.com udp
US 8.8.8.8:53 app.hubspot.com udp
US 8.8.8.8:53 cta-service-cms2.hubspot.com udp
US 8.8.8.8:53 cta-service-cms2.hubspot.com udp
US 8.8.8.8:53 js.hs-banner.com udp
US 8.8.8.8:53 js.hs-banner.com udp
US 104.18.23.183:443 js.hs-banner.com tcp
US 8.8.8.8:53 js.hs-analytics.net udp
US 8.8.8.8:53 app.hubspot.com udp
US 8.8.8.8:53 app.hubspot.com udp
US 8.8.8.8:53 cta-service-cms2.hubspot.com udp
US 8.8.8.8:53 forms.hsforms.com udp
US 104.19.175.188:443 forms.hsforms.com tcp
US 8.8.8.8:53 js.hs-analytics.net udp
US 8.8.8.8:53 app.hubspot.com udp
US 8.8.8.8:53 cta-service-cms2.hubspot.com udp
US 8.8.8.8:53 183.23.18.104.in-addr.arpa udp
US 104.16.160.168:443 js.hs-analytics.net tcp
US 104.19.175.188:443 forms.hsforms.com udp
US 104.18.23.183:443 js.hs-banner.com tcp
US 8.8.8.8:53 forms-na1.hsforms.com udp
US 8.8.8.8:53 forms-na1.hsforms.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 forms-na1.hsforms.com udp
US 8.8.8.8:53 www.google.com udp
NL 142.250.179.196:443 www.google.com udp
US 104.19.175.188:443 forms-na1.hsforms.com udp
US 8.8.8.8:53 168.160.16.104.in-addr.arpa udp
US 8.8.8.8:53 196.179.250.142.in-addr.arpa udp
NL 142.250.179.196:443 www.google.com tcp
US 104.19.175.188:443 forms-na1.hsforms.com tcp
US 104.19.175.188:443 forms-na1.hsforms.com tcp
NL 142.250.179.196:443 www.google.com tcp
US 104.19.175.188:443 forms-na1.hsforms.com tcp
US 8.8.8.8:53 forms-na1.hubspot.com udp
US 8.8.8.8:53 forms-na1.hubspot.com udp
US 104.16.117.116:443 forms-na1.hubspot.com tcp
US 8.8.8.8:53 116.117.16.104.in-addr.arpa udp
US 104.17.175.91:443 static.hsappstatic.net tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 104.19.175.188:443 forms-na1.hsforms.com tcp
GB 20.26.156.215:443 github.com tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
GB 184.28.176.32:443 www.bing.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 dl-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 dl-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 collector.github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
GB 184.28.176.106:443 www.bing.com udp
GB 184.28.176.106:443 www.bing.com tcp
US 8.8.8.8:53 106.176.28.184.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 184.28.176.112:443 th.bing.com udp
GB 184.28.176.75:443 th.bing.com udp
GB 184.28.176.75:443 th.bing.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 112.176.28.184.in-addr.arpa udp
US 8.8.8.8:53 75.176.28.184.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 api.github.com udp
GB 184.28.176.59:443 www.bing.com udp
GB 184.28.176.59:443 www.bing.com tcp
US 8.8.8.8:53 59.176.28.184.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 184.28.176.59:443 www.bing.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 collector.github.com udp
US 140.82.113.21:443 collector.github.com tcp
US 8.8.8.8:53 21.113.82.140.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 185.199.108.133:443 objects.githubusercontent.com tcp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 dl-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 dl-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 app-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 app-edge.smartscreen.microsoft.com udp
GB 51.11.108.188:443 app-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 188.108.11.51.in-addr.arpa udp
GB 92.123.142.163:443 www.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.142.112:443 r.bing.com udp
GB 92.123.142.112:443 r.bing.com udp
GB 92.123.142.139:443 th.bing.com udp
US 8.8.8.8:53 112.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 139.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 bing.com udp
US 8.8.8.8:53 bing.com udp
US 13.107.21.200:443 bing.com tcp
US 8.8.8.8:53 200.21.107.13.in-addr.arpa udp
US 8.8.8.8:53 www.virustotal.com udp
US 8.8.8.8:53 www.virustotal.com udp
US 8.8.8.8:53 www.virustotal.com udp
US 74.125.34.46:443 www.virustotal.com tcp
US 74.125.34.46:443 www.virustotal.com tcp
US 8.8.8.8:53 www.recaptcha.net udp
US 8.8.8.8:53 46.34.125.74.in-addr.arpa udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 recaptcha.net udp
US 8.8.8.8:53 recaptcha.net udp
NL 142.250.179.163:443 recaptcha.net tcp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 recaptcha.net udp
US 8.8.8.8:53 recaptcha.net udp
US 8.8.8.8:53 recaptcha.net udp
US 8.8.8.8:53 www.virustotal.com udp
NL 142.250.179.163:443 recaptcha.net tcp
NL 142.250.179.163:443 recaptcha.net tcp
US 8.8.8.8:53 46.36.251.142.in-addr.arpa udp
US 8.8.8.8:53 163.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
NL 142.250.179.196:443 www.google.com udp
NL 142.250.179.163:443 recaptcha.net udp
US 74.125.34.46:443 www.virustotal.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 92.123.142.179:443 www.bing.com udp
US 8.8.8.8:53 179.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 github.githubassets.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 telem-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 telem-edge.smartscreen.microsoft.com udp
GB 172.165.69.228:443 telem-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 8.8.8.8:53 dl-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 dl-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 app-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 app-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 feedback.smartscreen.microsoft.com udp
US 8.8.8.8:53 feedback.smartscreen.microsoft.com udp
US 8.8.8.8:53 feedback.smartscreen.microsoft.com udp
US 23.96.1.109:443 feedback.smartscreen.microsoft.com tcp
US 23.96.1.109:443 feedback.smartscreen.microsoft.com tcp
US 8.8.8.8:53 109.1.96.23.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 securityintelligencecenter-eastus.azurewebsites.net udp
US 8.8.8.8:53 securityintelligencecenter-eastus.azurewebsites.net udp
US 8.8.8.8:53 assets.onestore.ms udp
US 8.8.8.8:53 assets.onestore.ms udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 8.8.8.8:53 mem.gfx.ms udp
US 8.8.8.8:53 mem.gfx.ms udp
GB 184.25.193.234:443 www.microsoft.com tcp
US 23.96.1.109:443 securityintelligencecenter-eastus.azurewebsites.net tcp
US 23.96.1.109:443 securityintelligencecenter-eastus.azurewebsites.net tcp
US 23.96.1.109:443 securityintelligencecenter-eastus.azurewebsites.net tcp
US 23.96.1.109:443 securityintelligencecenter-eastus.azurewebsites.net tcp
US 23.96.1.109:443 securityintelligencecenter-eastus.azurewebsites.net tcp
US 23.96.1.109:443 securityintelligencecenter-eastus.azurewebsites.net tcp
GB 2.22.100.132:443 assets.onestore.ms tcp
GB 2.22.100.132:443 assets.onestore.ms tcp
GB 2.22.100.132:443 assets.onestore.ms tcp
GB 184.25.193.234:443 www.microsoft.com tcp
US 8.8.8.8:53 js.monitor.azure.com udp
US 8.8.8.8:53 js.monitor.azure.com udp
GB 184.25.193.234:443 www.microsoft.com tcp
US 13.107.253.67:443 js.monitor.azure.com tcp
US 13.107.253.67:443 js.monitor.azure.com tcp
US 8.8.8.8:53 132.100.22.2.in-addr.arpa udp
US 8.8.8.8:53 67.253.107.13.in-addr.arpa udp
US 8.8.8.8:53 dc.services.visualstudio.com udp
US 8.8.8.8:53 dc.services.visualstudio.com udp
NL 20.50.88.238:443 dc.services.visualstudio.com tcp
US 8.8.8.8:53 238.88.50.20.in-addr.arpa udp
US 8.8.8.8:53 www.virustotal.com udp
US 8.8.8.8:53 www.virustotal.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 blogs.windows.com udp
US 8.8.8.8:53 blogs.windows.com udp
US 8.8.8.8:53 blogs.windows.com udp
US 141.193.213.21:443 blogs.windows.com tcp
US 141.193.213.21:443 blogs.windows.com udp
US 8.8.8.8:53 unpkg.com udp
US 8.8.8.8:53 unpkg.com udp
US 8.8.8.8:53 js.monitor.azure.com udp
US 8.8.8.8:53 js.monitor.azure.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
GB 184.25.193.234:443 www.microsoft.com tcp
GB 184.25.193.234:443 www.microsoft.com tcp
US 104.17.247.203:443 unpkg.com tcp
US 8.8.8.8:53 21.213.193.141.in-addr.arpa udp
US 8.8.8.8:53 9.211.222.173.in-addr.arpa udp
US 8.8.8.8:53 203.247.17.104.in-addr.arpa udp
GB 184.25.193.234:443 www.microsoft.com tcp
GB 92.123.142.123:443 www.bing.com udp
US 8.8.8.8:53 123.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 nav.smartscreen.microsoft.com udp
GB 51.140.244.186:443 nav.smartscreen.microsoft.com tcp
US 8.8.8.8:53 18.53.126.40.in-addr.arpa udp
US 8.8.8.8:53 data-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 signup.live.com udp
US 13.107.42.22:443 signup.live.com tcp
GB 13.87.96.169:443 data-edge.smartscreen.microsoft.com tcp
GB 13.87.96.169:443 data-edge.smartscreen.microsoft.com tcp
GB 13.87.96.169:443 data-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 acctcdn.msftauth.net udp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
US 8.8.8.8:53 22.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 fpt.live.com udp
US 8.8.8.8:53 175.21.199.152.in-addr.arpa udp
US 52.167.30.171:443 fpt.live.com tcp
US 8.8.8.8:53 fpt2.microsoft.com udp
US 8.8.8.8:53 171.30.167.52.in-addr.arpa udp
US 52.167.30.171:443 fpt2.microsoft.com tcp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 8.8.8.8:53 account.live.com udp
US 104.208.16.95:443 browser.events.data.microsoft.com tcp
US 13.107.42.22:443 account.live.com tcp
US 8.8.8.8:53 95.16.208.104.in-addr.arpa udp
US 8.8.8.8:53 pcoptimizerpro.com udp
US 8.8.8.8:53 pcoptimizerpro.com udp
US 8.8.8.8:53 pcoptimizerpro.com udp
US 8.8.8.8:53 pcoptimizerpro.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 50.63.8.124:80 pcoptimizerpro.com tcp
US 50.63.8.124:80 pcoptimizerpro.com tcp
US 8.8.8.8:53 pcoptimizerpro.com udp
US 8.8.8.8:53 pcoptimizerpro.com udp
US 50.63.8.124:443 pcoptimizerpro.com tcp
US 50.63.8.124:443 pcoptimizerpro.com tcp
US 8.8.8.8:53 pcoptimizerpro.com udp
US 50.63.8.124:80 pcoptimizerpro.com tcp
US 8.8.8.8:53 pcoptimizerpro.com udp
US 50.63.8.124:80 pcoptimizerpro.com tcp
US 50.63.8.124:80 pcoptimizerpro.com tcp
US 8.8.8.8:53 answers.microsoft.com udp
US 8.8.8.8:53 answers.microsoft.com udp
US 8.8.8.8:53 answers.microsoft.com udp
US 8.8.8.8:53 answers.microsoft.com udp
US 8.8.8.8:53 answers.microsoft.com udp
US 8.8.8.8:53 answers.microsoft.com udp
GB 104.103.252.222:443 answers.microsoft.com tcp
GB 104.103.252.222:80 answers.microsoft.com tcp
GB 104.103.252.222:80 answers.microsoft.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 222.252.103.104.in-addr.arpa udp
IE 20.190.159.0:443 login.microsoftonline.com tcp
US 8.8.8.8:53 aadcdn.msftauth.net udp
US 8.8.8.8:53 aadcdn.msftauth.net udp
US 8.8.8.8:53 aadcdn.msauth.net udp
US 8.8.8.8:53 aadcdn.msauth.net udp
US 152.199.21.175:443 aadcdn.msftauth.net tcp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 0.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 answers.microsoft.com udp
US 8.8.8.8:53 answers.microsoft.com udp
IE 20.190.159.0:443 login.microsoftonline.com tcp
US 152.199.21.175:443 aadcdn.msftauth.net tcp
US 8.8.8.8:53 answers.microsoft.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
GB 104.103.252.222:443 answers.microsoft.com tcp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 answers-afd.microsoft.com udp
US 8.8.8.8:53 answers-afd.microsoft.com udp
US 8.8.8.8:53 js.monitor.azure.com udp
US 8.8.8.8:53 js.monitor.azure.com udp
US 8.8.8.8:53 consentdeliveryfd.azurefd.net udp
US 8.8.8.8:53 consentdeliveryfd.azurefd.net udp
US 8.8.8.8:53 mem.gfx.ms udp
US 8.8.8.8:53 mem.gfx.ms udp
US 8.8.8.8:53 answersstaticfilecdnv2.azureedge.net udp
US 8.8.8.8:53 answersstaticfilecdnv2.azureedge.net udp
US 152.199.21.175:443 answersstaticfilecdnv2.azureedge.net tcp
US 152.199.21.175:443 answersstaticfilecdnv2.azureedge.net tcp
US 152.199.21.175:443 answersstaticfilecdnv2.azureedge.net tcp
US 152.199.21.175:443 answersstaticfilecdnv2.azureedge.net tcp
US 152.199.21.175:443 answersstaticfilecdnv2.azureedge.net tcp
US 152.199.21.175:443 answersstaticfilecdnv2.azureedge.net tcp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 answers.microsoft.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
IE 13.69.239.73:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 acctcdn.msauth.net udp
US 8.8.8.8:53 acctcdn.msauth.net udp
US 8.8.8.8:53 acctcdn.msftauth.net udp
US 8.8.8.8:53 acctcdn.msftauth.net udp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
US 8.8.8.8:53 lgincdnmsftuswe2.azureedge.net udp
US 8.8.8.8:53 lgincdnmsftuswe2.azureedge.net udp
US 8.8.8.8:53 lgincdnvzeuno.azureedge.net udp
US 8.8.8.8:53 lgincdnvzeuno.azureedge.net udp
US 8.8.8.8:53 logincdn.msftauth.net udp
US 8.8.8.8:53 logincdn.msftauth.net udp
US 8.8.8.8:53 acctcdnvzeuno.azureedge.net udp
US 8.8.8.8:53 acctcdnmsftuswe2.azureedge.net udp
US 8.8.8.8:53 acctcdnmsftuswe2.azureedge.net udp
IE 13.69.239.73:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 answers.microsoft.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 mem.gfx.ms udp
US 8.8.8.8:53 mem.gfx.ms udp
US 8.8.8.8:53 mem.gfx.ms udp
US 8.8.8.8:53 answers.microsoft.com udp
US 8.8.8.8:53 74.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 73.239.69.13.in-addr.arpa udp
GB 92.123.142.82:443 www.bing.com udp
US 8.8.8.8:53 82.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
NL 142.251.39.100:80 google.co.ck tcp
NL 142.251.39.100:80 google.co.ck tcp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
NL 142.251.39.100:443 google.co.ck tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
NL 142.250.179.196:443 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
NL 142.251.39.100:443 google.co.ck tcp
US 8.8.8.8:53 identity.nel.measure.office.net udp
GB 23.59.171.26:443 identity.nel.measure.office.net tcp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
NL 142.251.39.100:443 google.co.ck udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 iframe.arkoselabs.com udp
GB 18.165.160.49:443 iframe.arkoselabs.com tcp
US 8.8.8.8:53 client-api.arkoselabs.com udp
US 3.165.148.81:443 client-api.arkoselabs.com tcp
US 8.8.8.8:53 49.160.165.18.in-addr.arpa udp
US 8.8.8.8:53 44.143.84.52.in-addr.arpa udp
US 8.8.8.8:53 24.19.162.3.in-addr.arpa udp
US 8.8.8.8:53 81.148.165.3.in-addr.arpa udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
NL 142.251.39.100:443 google.co.ck udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
NL 142.250.179.196:443 www.google.com udp
US 8.8.8.8:53 www.google.com udp
NL 142.250.179.196:443 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 92.123.142.82:443 www.bing.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
NL 142.251.39.100:80 google.co.ck tcp
NL 142.251.39.100:80 google.co.ck tcp
US 8.8.8.8:53 google.co.ck udp
NL 142.251.39.100:443 google.co.ck tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 logincdn.msftauth.net udp
US 152.199.21.175:443 logincdn.msftauth.net tcp
US 8.8.8.8:53 windows.policies.live.net udp
IE 20.135.20.1:443 windows.policies.live.net tcp
US 8.8.8.8:53 1.20.135.20.in-addr.arpa udp
US 8.8.8.8:53 www.windowssearch.com udp
US 150.171.27.10:443 www.windowssearch.com tcp
US 8.8.8.8:53 substrate.office.com udp
GB 40.99.150.178:443 substrate.office.com tcp
US 8.8.8.8:53 10.27.171.150.in-addr.arpa udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 continuum.dds.microsoft.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
IE 20.82.217.86:443 continuum.dds.microsoft.com tcp
US 8.8.8.8:53 86.217.82.20.in-addr.arpa udp
US 8.8.8.8:53 graph.microsoft.com udp
US 8.8.8.8:53 graph.microsoft.com udp
GB 40.126.41.161:443 graph.microsoft.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 substrate.office.com udp
GB 52.98.207.2:443 outlook.live.com tcp
US 8.8.8.8:53 prod.rewardsplatform.microsoft.com udp
US 8.8.8.8:53 prod.rewardsplatform.microsoft.com udp
IE 52.236.29.249:443 prod.rewardsplatform.microsoft.com tcp
US 8.8.8.8:53 161.41.126.40.in-addr.arpa udp
US 8.8.8.8:53 2.207.98.52.in-addr.arpa udp
US 8.8.8.8:53 249.29.236.52.in-addr.arpa udp
US 8.8.8.8:53 storage.live.com udp
NL 13.104.158.183:443 storage.live.com tcp
US 8.8.8.8:53 134.32.126.40.in-addr.arpa udp
GB 92.123.142.89:443 www.bing.com udp
US 8.8.8.8:53 89.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.142.136:443 r.bing.com udp
GB 92.123.142.136:443 r.bing.com udp
GB 92.123.142.90:443 th.bing.com udp
US 8.8.8.8:53 136.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 90.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 edgetippingservice.webxtsvc.microsoft.com udp
US 8.8.8.8:53 edgetippingservice.webxtsvc.microsoft.com udp
US 104.43.208.106:443 edgetippingservice.webxtsvc.microsoft.com tcp
US 8.8.8.8:53 106.208.43.104.in-addr.arpa udp
US 8.8.8.8:53 services.bingapis.com udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 windows.microsoft.com udp
US 8.8.8.8:53 windows.microsoft.com udp
US 8.8.8.8:53 windows.microsoft.com udp
US 8.8.8.8:53 windows.microsoft.com udp
US 8.8.8.8:53 windows.microsoft.com udp
GB 23.214.129.109:80 windows.microsoft.com tcp
GB 23.214.129.109:80 windows.microsoft.com tcp
GB 23.214.129.109:443 windows.microsoft.com tcp
US 8.8.8.8:53 windows.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
GB 184.25.193.234:443 www.microsoft.com tcp
US 8.8.8.8:53 outlook.com udp
US 8.8.8.8:53 outlook.com udp
US 8.8.8.8:53 outlook.com udp
US 52.96.111.82:443 outlook.com tcp
US 8.8.8.8:53 www.outlook.com udp
US 8.8.8.8:53 www.outlook.com udp
US 8.8.8.8:53 www.outlook.com udp
GB 40.99.201.226:443 www.outlook.com tcp
US 8.8.8.8:53 109.129.214.23.in-addr.arpa udp
US 8.8.8.8:53 82.111.96.52.in-addr.arpa udp
US 8.8.8.8:53 outlook.live.com udp
US 8.8.8.8:53 outlook.live.com udp
US 8.8.8.8:53 outlook.live.com udp
GB 52.97.211.162:443 outlook.live.com tcp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 226.201.99.40.in-addr.arpa udp
US 8.8.8.8:53 162.211.97.52.in-addr.arpa udp
US 8.8.8.8:53 www.cloudflare.com udp
US 8.8.8.8:53 www.cloudflare.com udp
US 104.16.123.96:443 www.cloudflare.com udp
US 8.8.8.8:53 cdn-dynmedia-1.microsoft.com udp
US 8.8.8.8:53 cdn-dynmedia-1.microsoft.com udp
US 8.8.8.8:53 play.vidyard.com udp
US 8.8.8.8:53 play.vidyard.com udp
US 8.8.8.8:53 mem.gfx.ms udp
GB 92.123.143.145:443 cdn-dynmedia-1.microsoft.com tcp
GB 92.123.143.145:443 cdn-dynmedia-1.microsoft.com tcp
GB 92.123.143.145:443 cdn-dynmedia-1.microsoft.com tcp
US 151.101.193.181:443 play.vidyard.com tcp
US 8.8.8.8:53 fpt.microsoft.com udp
US 8.8.8.8:53 fpt.microsoft.com udp
US 8.8.8.8:53 fpt.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 52.167.30.171:443 fpt.microsoft.com tcp
US 8.8.8.8:53 96.123.16.104.in-addr.arpa udp
US 8.8.8.8:53 145.143.123.92.in-addr.arpa udp
US 8.8.8.8:53 181.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 assets.adobedtm.com udp
US 8.8.8.8:53 assets.adobedtm.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
GB 184.26.57.29:443 assets.adobedtm.com tcp
FR 20.190.177.146:443 login.microsoftonline.com tcp
US 8.8.8.8:53 29.57.26.184.in-addr.arpa udp
US 8.8.8.8:53 146.177.190.20.in-addr.arpa udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 13.89.179.10:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 fpt2.microsoft.com udp
US 8.8.8.8:53 fpt2.microsoft.com udp
US 8.8.8.8:53 fpt2.microsoft.com udp
US 8.8.8.8:53 fpt.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 52.167.30.171:443 fpt.microsoft.com tcp
US 8.8.8.8:53 fpt2.microsoft.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 fpt.microsoft.com udp
US 8.8.8.8:53 10.179.89.13.in-addr.arpa udp
US 8.8.8.8:53 82.177.190.20.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 acctcdn.msauth.net udp
US 8.8.8.8:53 acctcdn.msauth.net udp
US 8.8.8.8:53 acctcdn.msftauth.net udp
US 8.8.8.8:53 lgincdnmsftuswe2.azureedge.net udp
US 8.8.8.8:53 lgincdnmsftuswe2.azureedge.net udp
US 152.199.21.175:443 logincdn.msftauth.net tcp
US 8.8.8.8:53 logincdn.msftauth.net udp
US 8.8.8.8:53 logincdn.msftauth.net udp
US 8.8.8.8:53 acctcdnmsftuswe2.azureedge.net udp
US 8.8.8.8:53 acctcdnmsftuswe2.azureedge.net udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 mem.gfx.ms udp
US 8.8.8.8:53 mem.gfx.ms udp
US 8.8.8.8:53 mem.gfx.ms udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 mem.gfx.ms udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 outlook.com udp
US 8.8.8.8:53 outlook.com udp
US 8.8.8.8:53 www.outlook.com udp
US 8.8.8.8:53 www.outlook.com udp
US 8.8.8.8:53 outlook.live.com udp
US 52.96.228.130:443 outlook.com tcp
GB 40.100.174.18:443 www.outlook.com tcp
GB 52.97.241.162:443 outlook.live.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 aadcdn.msftauth.net udp
US 8.8.8.8:53 aadcdn.msauth.net udp
US 8.8.8.8:53 aadcdn.msauth.net udp
US 152.199.21.175:443 aadcdn.msftauth.net tcp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 18.174.100.40.in-addr.arpa udp
US 8.8.8.8:53 130.228.96.52.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 amcdn.msftauth.net udp
US 8.8.8.8:53 amcdn.msftauth.net udp
US 8.8.8.8:53 amcdn.msftauth.net udp
US 8.8.8.8:53 amcdn.msftauth.net udp
US 8.8.8.8:53 amcdn.msftauth.net udp
US 8.8.8.8:53 graph.microsoft.com udp
US 8.8.8.8:53 graph.microsoft.com udp
NL 40.126.32.160:443 graph.microsoft.com tcp
US 8.8.8.8:53 160.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 account.microsoft.com udp
US 8.8.8.8:53 account.microsoft.com udp
GB 184.25.193.87:443 account.microsoft.com tcp
US 8.8.8.8:53 account.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
GB 184.25.193.87:443 account.microsoft.com tcp
US 8.8.8.8:53 87.193.25.184.in-addr.arpa udp
US 8.8.8.8:53 privacynotice.account.microsoft.com udp
US 8.8.8.8:53 privacynotice.account.microsoft.com udp
US 8.8.8.8:53 privacynotice.account.microsoft.com udp
US 8.8.8.8:53 ucis.msdxcdn.microsoft.com udp
US 8.8.8.8:53 ucis.msdxcdn.microsoft.com udp
US 8.8.8.8:53 privacynotice.account.microsoft.com udp
US 8.8.8.8:53 account.microsoft.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
NL 20.190.160.17:443 login.microsoftonline.com tcp
US 8.8.8.8:53 account.microsoft.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 account.microsoft.com udp
US 8.8.8.8:53 account.microsoft.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 account.microsoft.com udp
US 8.8.8.8:53 account.microsoft.com udp
US 8.8.8.8:53 account.microsoft.com udp
GB 184.25.193.87:443 account.microsoft.com tcp
GB 184.25.193.87:443 account.microsoft.com tcp
GB 184.25.193.87:443 account.microsoft.com tcp
GB 184.25.193.87:443 account.microsoft.com tcp
US 8.8.8.8:53 content.lifecycle.office.net udp
US 8.8.8.8:53 content.lifecycle.office.net udp
US 8.8.8.8:53 res-1.cdn.office.net udp
US 8.8.8.8:53 res-1.cdn.office.net udp
GB 184.25.204.49:443 res-1.cdn.office.net tcp
US 8.8.8.8:53 account.microsoft.com udp
US 8.8.8.8:53 49.204.25.184.in-addr.arpa udp
US 8.8.8.8:53 admin.microsoft.com udp
US 8.8.8.8:53 admin.microsoft.com udp
GB 184.25.204.49:443 res-1.cdn.office.net udp
US 13.107.6.156:443 admin.microsoft.com tcp
US 8.8.8.8:53 identity.nel.measure.office.net udp
US 8.8.8.8:53 identity.nel.measure.office.net udp
US 8.8.8.8:53 telem-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 telem-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
GB 172.165.69.228:443 telem-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 assets.account.microsoft.com udp
US 8.8.8.8:53 assets.account.microsoft.com udp
US 8.8.8.8:53 fpt.microsoft.com udp
US 8.8.8.8:53 res.cdn.office.net udp
US 8.8.8.8:53 res.cdn.office.net udp
US 8.8.8.8:53 www.clarity.ms udp
US 8.8.8.8:53 www.clarity.ms udp
FR 95.100.200.195:443 res.cdn.office.net tcp
FR 95.100.200.195:443 res.cdn.office.net tcp
US 8.8.8.8:53 ecs.office.com udp
US 8.8.8.8:53 ecs.office.com udp
US 52.113.194.132:443 ecs.office.com tcp
US 8.8.8.8:53 156.6.107.13.in-addr.arpa udp
US 8.8.8.8:53 195.200.100.95.in-addr.arpa udp
US 8.8.8.8:53 gsa.view.api.account.microsoft.com udp
US 8.8.8.8:53 gsa.view.api.account.microsoft.com udp
US 8.8.8.8:53 az15297.vo.msecnd.net udp
US 8.8.8.8:53 az15297.vo.msecnd.net udp
US 152.199.19.161:443 az15297.vo.msecnd.net tcp
US 8.8.8.8:53 132.194.113.52.in-addr.arpa udp
US 8.8.8.8:53 amcdn.msftauth.net udp
US 8.8.8.8:53 amcdn.msftauth.net udp
US 13.107.253.67:443 amcdn.msftauth.net tcp
US 8.8.8.8:53 storage.live.com udp
US 8.8.8.8:53 storage.live.com udp
US 8.8.8.8:53 h.clarity.ms udp
US 8.8.8.8:53 h.clarity.ms udp
IE 13.104.208.165:443 storage.live.com tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 161.19.199.152.in-addr.arpa udp
US 8.8.8.8:53 165.208.104.13.in-addr.arpa udp
US 8.8.8.8:53 151.64.8.51.in-addr.arpa udp
US 8.8.8.8:53 c.clarity.ms udp
US 8.8.8.8:53 c.clarity.ms udp
IE 13.74.129.1:443 c.clarity.ms tcp
US 8.8.8.8:53 c.bing.com udp
US 8.8.8.8:53 c.bing.com udp
US 204.79.197.237:443 c.bing.com tcp
US 8.8.8.8:53 1.129.74.13.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 nleditor.osi.office.net udp
US 8.8.8.8:53 nleditor.osi.office.net udp
US 8.8.8.8:53 nleditor.osi.office.net udp
US 8.8.8.8:53 nleditor.osi.office.net udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
NL 52.111.243.41:443 nleditor.osi.office.net tcp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 softonic.com udp
US 199.232.209.91:80 softonic.com tcp
US 199.232.209.91:80 softonic.com tcp
US 8.8.8.8:53 41.243.111.52.in-addr.arpa udp
US 199.232.209.91:443 softonic.com tcp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 91.209.232.199.in-addr.arpa udp
US 8.8.8.8:53 www.softonic.com udp
US 8.8.8.8:53 www.softonic.com udp
US 151.101.193.91:443 www.softonic.com tcp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 en.softonic.com udp
US 199.232.209.91:443 softonic.com udp
US 8.8.8.8:53 91.193.101.151.in-addr.arpa udp
US 51.8.64.151:443 h.clarity.ms tcp
US 151.101.193.91:443 en.softonic.com udp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 www.softonic.com udp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 en.softonic.com udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 assets.sftcdn.net udp
US 151.101.193.91:443 www.softonic.com tcp
US 151.101.193.91:443 www.softonic.com tcp
US 151.101.193.91:443 www.softonic.com tcp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 images.sftcdn.net udp
GB 18.165.160.104:443 sdk.privacy-center.org tcp
US 151.101.193.91:443 images.sftcdn.net tcp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 151.101.193.91:443 images.sftcdn.net udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 151.101.193.91:443 images.sftcdn.net udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 104.160.165.18.in-addr.arpa udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 articles-img.sftcdn.net udp
US 8.8.8.8:53 articles-img.sftcdn.net udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
GB 18.165.160.104:443 sdk.privacy-center.org udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 151.101.193.91:443 articles-img.sftcdn.net udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 notix.io udp
US 8.8.8.8:53 notix.io udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
NL 139.45.197.227:443 notix.io tcp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 227.197.45.139.in-addr.arpa udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
GB 92.123.142.176:443 www.bing.com udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 176.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
DE 51.116.246.104:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 104.246.116.51.in-addr.arpa udp
US 8.8.8.8:53 petrol.office.microsoft.com udp
US 8.8.8.8:53 petrol.office.microsoft.com udp
US 50.63.8.124:80 pcoptimizerpro.com tcp
US 8.8.8.8:53 pcoptimizerpro.com udp
US 50.63.8.124:80 pcoptimizerpro.com tcp
US 50.63.8.124:80 pcoptimizerpro.com tcp
US 8.8.8.8:53 account.microsoft.com udp
US 8.8.8.8:53 account.microsoft.com udp
US 8.8.8.8:53 identity.nel.measure.office.net udp
US 8.8.8.8:53 identity.nel.measure.office.net udp
US 8.8.8.8:53 res-1.cdn.office.net udp
US 8.8.8.8:53 res-1.cdn.office.net udp
GB 184.25.204.50:443 res-1.cdn.office.net udp
US 8.8.8.8:53 50.204.25.184.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft365.com udp
US 8.8.8.8:53 www.microsoft365.com udp
US 8.8.8.8:53 www.microsoft365.com udp
US 13.107.6.156:443 www.microsoft365.com tcp
US 13.107.6.156:443 www.microsoft365.com tcp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 www.microsoft365.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
IE 20.190.159.71:443 login.microsoftonline.com tcp
US 8.8.8.8:53 res.cdn.office.net udp
US 8.8.8.8:53 res.cdn.office.net udp
US 8.8.8.8:53 res-1.cdn.office.net udp
US 8.8.8.8:53 71.159.190.20.in-addr.arpa udp
GB 184.25.204.25:443 res.cdn.office.net tcp
GB 184.25.204.25:443 res.cdn.office.net tcp
GB 184.25.204.25:443 res.cdn.office.net tcp
GB 184.25.204.25:443 res.cdn.office.net tcp
GB 184.25.204.25:443 res.cdn.office.net tcp
GB 184.25.204.34:443 res-1.cdn.office.net tcp
US 8.8.8.8:53 portal.office.com udp
US 8.8.8.8:53 outlook.office.com udp
US 8.8.8.8:53 outlook.office.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 odc.officeapps.live.com udp
US 8.8.8.8:53 odc.officeapps.live.com udp
US 8.8.8.8:53 substrate.office.com udp
US 8.8.8.8:53 graph.microsoft.com udp
US 8.8.8.8:53 ocws.officeapps.live.com udp
US 8.8.8.8:53 appsforoffice.microsoft.com udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 shell.cdn.office.net udp
US 8.8.8.8:53 shell.cdn.office.net udp
US 8.8.8.8:53 34.204.25.184.in-addr.arpa udp
US 8.8.8.8:53 25.204.25.184.in-addr.arpa udp
GB 184.25.204.25:443 res.cdn.office.net udp
IE 20.190.159.71:443 login.microsoftonline.com tcp
US 8.8.8.8:53 h.clarity.ms udp
US 8.8.8.8:53 h.clarity.ms udp
US 8.8.8.8:53 admin.microsoft.com udp
US 8.8.8.8:53 admin.microsoft.com udp
GB 40.100.175.146:443 substrate.office.com tcp
GB 40.100.175.146:443 substrate.office.com udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
NL 142.250.179.196:443 www.google.com udp
US 8.8.8.8:53 google.co.ck udp
NL 142.251.39.100:80 google.co.ck tcp
NL 142.251.39.100:443 google.co.ck udp
NL 142.251.39.100:80 google.co.ck tcp
NL 142.251.39.100:443 google.co.ck tcp
GB 40.126.41.162:443 graph.microsoft.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 146.175.100.40.in-addr.arpa udp
US 8.8.8.8:53 162.41.126.40.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 184.25.204.34:443 res-1.cdn.office.net udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 8.8.8.8:53 content.lifecycle.office.net udp
US 8.8.8.8:53 content.lifecycle.office.net udp
US 20.189.173.4:443 browser.events.data.microsoft.com tcp
US 20.189.173.4:443 browser.events.data.microsoft.com tcp
US 20.189.173.4:443 browser.events.data.microsoft.com tcp
US 20.189.173.4:443 browser.events.data.microsoft.com tcp
US 20.189.173.4:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 4.173.189.20.in-addr.arpa udp
US 20.189.173.4:443 browser.events.data.microsoft.com tcp
US 20.189.173.4:443 browser.events.data.microsoft.com tcp
US 20.189.173.4:443 browser.events.data.microsoft.com tcp
GB 184.25.204.34:443 res-1.cdn.office.net udp
US 8.8.8.8:53 ecs.office.com udp
US 8.8.8.8:53 ecs.office.com udp
US 52.113.194.132:443 ecs.office.com tcp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
GB 92.123.142.91:443 www.bing.com tcp
US 8.8.8.8:53 www.microsoft365.com udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 admin.microsoft.com udp
US 8.8.8.8:53 admin.microsoft.com udp
US 13.107.6.156:443 admin.microsoft.com tcp
US 8.8.8.8:53 query.prod.cms.rt.microsoft.com udp
US 8.8.8.8:53 query.prod.cms.rt.microsoft.com udp
GB 92.123.142.155:443 www.bing.com tcp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
GB 104.103.243.56:443 query.prod.cms.rt.microsoft.com tcp
US 8.8.8.8:53 91.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 69.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
GB 104.103.243.56:443 query.prod.cms.rt.microsoft.com tcp
GB 104.103.243.56:443 query.prod.cms.rt.microsoft.com tcp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 155.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 56.243.103.104.in-addr.arpa udp
US 8.8.8.8:53 storage.live.com udp
US 8.8.8.8:53 storage.live.com udp
US 20.189.173.4:443 browser.events.data.microsoft.com tcp
IE 13.104.208.162:443 storage.live.com tcp
US 8.8.8.8:53 amcdn.msftauth.net udp
US 8.8.8.8:53 amcdn.msftauth.net udp
US 20.189.173.4:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 nleditor.osi.office.net udp
US 8.8.8.8:53 nleditor.osi.office.net udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 nleditor.osi.office.net udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
IE 52.111.236.35:443 nleditor.osi.office.net tcp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 13.107.6.156:443 admin.microsoft.com tcp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 js.monitor.azure.com udp
US 8.8.8.8:53 35.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 8.8.8.8:53 turing-writingassistance.edge.msiserver.lan udp
US 52.113.194.132:443 ecs.office.com tcp
US 8.8.8.8:53 browser.pipe.aria.microsoft.com udp
US 8.8.8.8:53 browser.pipe.aria.microsoft.com udp
US 20.42.65.84:443 browser.pipe.aria.microsoft.com tcp
US 8.8.8.8:53 84.65.42.20.in-addr.arpa udp
US 51.8.64.151:443 h.clarity.ms tcp
GB 92.123.142.176:443 www.bing.com udp
US 8.8.8.8:53 m365cdn.nel.measure.office.net udp
US 8.8.8.8:53 m365cdn.nel.measure.office.net udp
NL 95.101.21.43:443 m365cdn.nel.measure.office.net tcp
US 8.8.8.8:53 43.21.101.95.in-addr.arpa udp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 account.microsoft.com udp
US 8.8.8.8:53 account.microsoft.com udp
GB 184.25.193.87:443 account.microsoft.com tcp
GB 184.25.193.87:443 account.microsoft.com tcp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 20.42.65.84:443 browser.pipe.aria.microsoft.com tcp
US 52.168.117.175:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 175.117.168.52.in-addr.arpa udp
US 8.8.8.8:53 h.clarity.ms udp
US 8.8.8.8:53 h.clarity.ms udp
US 51.8.64.151:443 h.clarity.ms tcp
GB 92.123.142.154:443 www.bing.com udp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
NL 142.251.39.100:80 google.co.ck tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
NL 142.251.39.100:80 google.co.ck tcp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
US 8.8.8.8:53 google.co.ck udp
NL 142.251.39.100:443 google.co.ck tcp
NL 142.250.179.196:443 www.google.com udp
NL 142.251.39.100:443 google.co.ck udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
NL 95.101.21.43:443 m365cdn.nel.measure.office.net tcp
US 8.8.8.8:53 m365cdn.nel.measure.office.net udp
NL 142.251.39.100:80 google.co.ck tcp
US 8.8.8.8:53 google.co.ck udp
NL 142.251.39.100:80 google.co.ck tcp
NL 142.251.39.100:443 google.co.ck tcp
US 8.8.8.8:53 google.co.ck udp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 c81a403a3aeaea8761a56cb797c6d7da
SHA1 e530451e0a5aaf416dd441b6899e9d3a7b06196e
SHA256 6a8774d3cfd73222ea9fc0ef703251ad14de9d33545ae66b5989e84e01f4648a
SHA512 6bb26a500fd4c9fe588df9d793959adc0c593575ce1f78736febc9bb97339af5631e90f220bbd5543e5ece0cd4eff8aa404ed19b0eea470d997fbe8e9a3d06f8

\??\pipe\crashpad_2252_VJYKLCMVCIJRPBGL

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

MD5 1c1b73a4249384e71dc612a1d90a1b3a
SHA1 d52f4c3ceda5df1fa2c3de4b2b77316f5f7a71e5
SHA256 6f02b0d5c271792b08242ec7be6864c1579458c0b0d825a70155b8a9b2dc2b9d
SHA512 ccd7c2dc4f221ab302030bf5123f7e76ba37f957d5114c8b04e5a86f6a5724ea86aecbb88490db85501d9f47ab62d6fbf0ad6803bc286c8984a1ebdaed80b5ad

C:\Users\Admin\Desktop\BlockUnregister.ods

MD5 163734c3e2bb1217c9a5bc870bf50425
SHA1 4223bb8d7e3448c672e29575a6074b1e941e6d79
SHA256 cf4a70c9331858c12891f953d114f43dd011d779ee49ca8d4bddc8814eee9026
SHA512 3499fc93e11f9a9d424e5b55d59c49fc8908dbadd2f3bc53df8fbd65f45c1b8afe127ebbe123a1f07a219db77a8e1cef41aaf4eaccb5742bdbbbcd6b439a2fc0

C:\Users\Admin\Desktop\ClearJoin.vdw

MD5 8cbfff8ee4cba62df9c68aa69bc74bdc
SHA1 9bb9ed2efecd4307dfefc54ec7b2a38176f6f0d5
SHA256 a1a09d7495b187cb32b84890b6c2bc7a6fb2549fa253ab94994c60f3a19ac3c7
SHA512 90ad5326f448f4c5958262e9eec5652f0f2f3755e049a7a1cd0b484e853d9567a62d020e6d095a9da8ae8e1d98635b21efee10412ce5394960d5552ebd78dc1b

C:\Users\Admin\Desktop\CheckpointRemove.mht

MD5 236b8c239ef0002ce680e6045c3125ec
SHA1 1e3f8318dfd7e15178f8755cf097c5cf54308eb5
SHA256 0ca96894c04a4172ef3ae491f2f26f80b41e804a97b6a0ab8537a1ff094fd8c6
SHA512 662d868ba95796d875963a3835e9482eaa80fc13387fd6b739b19956a3a90ce24ccbdad997fbd83622cb6d99b84725ce84ab55973a9d63adff6f8aeadf89bcde

C:\Users\Admin\Desktop\EditRead.3gpp

MD5 a9de1a1420b14266be2c956e63f1737d
SHA1 4016483b5068b1a3f7d02c454523e567e6273335
SHA256 5be13bd6942474a0a66f00a6dba420783d4f641583490d17038ccba343021350
SHA512 112e3dbbeae35a103a403a941cf24475783f1c78663b9021e421b512f33348006ed41c091af4617b78d395556e2db3074740b7b13f7e86b2c13009e237e2a5ef

C:\Users\Admin\Desktop\RemoveFormat.vsx

MD5 5cd2fb991bd72481a7996c9acae96dc6
SHA1 0ff8d4dfd4cda038c385fdf86ff062573e12fa69
SHA256 664e4dfb453464507091d87aee4f1743a865e7486f1d9217bedc6ff02146de48
SHA512 f104eab9e4c2fc8db8716f214ac9d7ab9f24fd9ca148aa0be31974b91f0fdbfa056066269a27e794b07a1e39e2cffbd455289505e56b36ed226ebecd2dd36984

C:\Users\Admin\Desktop\UnpublishExit.eps

MD5 ba6b75f5749c9d768303f36a7d450530
SHA1 7d63ad1b1569ee790683d3007a30de0c0bccc889
SHA256 eb75ac10a7decc5a8e6f9e0c5b3ea828ef8606a7086c3b2a9de7542651518e0d
SHA512 59d41c4f01e40f6791cf3e0f02f9c6aa0744ea3d66c35b227eade7cc5e1ede217ba6a0eb49c10cb21a217f2544edc9d23234056bef3050416dec89603da7d4c9

C:\Users\Admin\Desktop\SendSuspend.docx

MD5 a3bd4a9ed45a771773fe837a8a587b40
SHA1 bf9495af22d34a1ef16474378e6e70062175368d
SHA256 00b5228ddd6e38bb3f7abac9eba077be140544ceef219bbbc3434ace84c3776c
SHA512 73523e51c8524e9a96b45721dbd5df3c4d7a11061092e2193c461d08267a7a7137cffbbcd1bb5a48a73658c1734828b66c2434f3798310b1a65ba86dd94e73db

C:\Users\Admin\Desktop\RevokeDeny.docx

MD5 f0b951e0e0de0dc80bef0acb73fb711e
SHA1 8361011f2083ced6df9b9e7787769acc62911310
SHA256 cb4bfbaf417680a8cede4de79390e023290bb60527162e6930322de113823b5e
SHA512 516a99ccfefef695dcb584bfec29bd63ce0ad3aa18613933f213a02908856bb25277e50594aca4024af2b5d84c38a2a17db3c7d60ba7ae7f661dec1aa1368973

C:\Users\Admin\Desktop\StopDebug.xlsx

MD5 4f7545d151ef000d704bcda63265b40a
SHA1 9b8d6175fc13d79ebb57e8bdd939174cb3f827db
SHA256 e2ed9032883f53a66623530055f42f46a7f4883903e0c58007eac108c3b988ec
SHA512 921a25cd077924491daa74ad57d6902ea19932b19392826c46ef9bdf08f896342f4b1ab162e222c91af3d59bbd77a598446f2d22f4254b3b214d1a0be98cf772

C:\Users\Admin\Desktop\WriteLock.TS

MD5 89a9c022ac8d54a8c321993d0788be05
SHA1 f90ab8d3e84d0a991a05239d3afcd20838864f73
SHA256 63fa86f5f3f9cf7b32b51b6e2b7f8aeaebf3090277bc645816c3f365588ba54e
SHA512 cdc08fa481be7f4a35e36307e569a4e097085a40dde83b787558b904ef56aa8f82f1bf35e629f4ebe87d562bdc31efbedc11a8fef9a269fa32588a6d609b9ffe

C:\Users\Admin\Desktop\UnprotectPop.emf

MD5 bd767edbb8ffbfd5edf2794b8241fc43
SHA1 ff92cd4d9fbdab5027a3bc341ec22639087b6710
SHA256 00a0f1d84b2551e3ab702e2e2ef247ed77ef2cc8e0318fc2b87ec8c5c1e512fd
SHA512 07a95fa587f5bc84e5e3b0c8a55d9ca8fa13b281757ecf2118d9b953e6202d217daa49ccfd07f33259a291da70d86202978df1a03e545ba8cb1960d7720e38ab

C:\Users\Admin\Desktop\SyncClear.shtml

MD5 155b6b305b5a83db9c0c5ef44a172efe
SHA1 cfc081577598ff379bc1f82e78cb62eb423b8627
SHA256 8e6f7d35cbf70f90202acef6935b3b6281afc513064be2898d69e31234cc08c9
SHA512 0f8058c0335a8198a47c724a835e8a031190dca04ad322991bac21562d0a79ee695f8f02c3a795f6a307082185be470f2b509e808fde62331acaa5bf69f17216

C:\Users\Admin\Desktop\SubmitStep.lnk

MD5 9e24b32fa39d2d277514ca6da9dcfedf
SHA1 8ef5256d945c72ac30f32b2294803554b1f5f3ca
SHA256 8193b56d712d00bae5420dfaea1d40d1b092a2a39f903d0fc4f7847e785366c0
SHA512 edc8b50d61e9875e54f5adfba882ca463c8a2d8e454523efa87a69995318f1b3d88e414f0f053d7eb711dc38cb2a27ef0f898a0bd41d03b27e740900bfc8cee4

C:\Users\Admin\Desktop\SetCopy.vb

MD5 77dd55370f82e6069e5ddc72e84401d0
SHA1 22c5328a05fc1f4266f706ec60eb3b1d6ce22055
SHA256 0b4187b383b821a3731472eb691e79991321a4280aeb18782c4b4e542721b819
SHA512 4638cec1cda8eaf9ad6c728301f5682899fdc9dbbf9488f0ef54a122c230937f59ae9811a9d6371f139a1708e14b48e9ab5998123ca97bb79f4a49d26953e584

C:\Users\Admin\Desktop\SendStart.ex_

MD5 dfd436db38ad801e69b0b5f3aa0d6040
SHA1 bae65b6ffb0ac575eb822fc712f1a98b68f7e4c5
SHA256 1a8d8b68cc32d34b7bf18a62e95febad3ce40bbefa032fddc54773c99a565fe2
SHA512 51e64fa3680898847ba25d63369063e5bb1bcd72fcc87bbd3d95e657d2b65a6f8bb2a506367284422f0df672a397525563b4f5070c778f00cd75185b0d536e3b

C:\Users\Admin\Desktop\ProtectShow.mhtml

MD5 b0227fd99f09e7a1ec02113dde574e16
SHA1 0c82bcf3794a1df72784c599a1bc23755cadbf3d
SHA256 0dea585e1cc8b67d6ed776e1c66aaba727b15923dae07cdb4d2cca3ff3588d91
SHA512 35877b07b85d11cfa4e337890b49ba8c93898f23eb798d1ceb18af89a0a570b1501b5eb2a9e4919c90c46259e8b9f23e92332355c1f6681c7decc08cedbf18d9

C:\Users\Admin\Desktop\LimitOpen.wav

MD5 e34e363d3ea410e40250db5aafebb2a2
SHA1 5fef497d918c42b77e9e47720160e4605275a6d0
SHA256 624c02e24e4ff4e00c45d143c0452870ce2ccf73a98d938474dcc9701cf05cb4
SHA512 8cdad2b8b77ee5f191f0c920387900b40599db0f6081fe701c0734b747a9941a36d7db5fa12e5ab4133fde4ced671267f429349831e87f5c9e15901562c4da0e

C:\Users\Admin\Desktop\ImportCopy.vbe

MD5 7143f68910f234dac76f69aff448fc5a
SHA1 3d5592561a094eb0bd27e763797ed37783384fe9
SHA256 e15715ca29075f6e8794337ac70898ec070f47a75c1064ef29a0db69bfc6613a
SHA512 ec1c4855fb7f67122d6159acb847a74305a800149efb3a8f6a475be2bab416efaf0898801c5267e4b46142e6b794a326f09307dc0c27b7d71a832ae7e5c60764

C:\Users\Admin\Desktop\GrantSelect.raw

MD5 17ba5ba350ff5b4064b15a6e5d4debc2
SHA1 3d5356965dfb5ac672ed0d002b3bf83fe7c03758
SHA256 06e5e29e83b7aead7ef71c81d13a97aa76e051aea263b3deeb3b2a51a66b412a
SHA512 e0c2ab48491bfcbe10d192cc6d6b2caa6b7c462c7a4c4e36043e5a2d3d994cf9053e8fb0399cf9b71dce8b3c63337633a25f77aa693df726750a5f019e78d877

C:\Users\Admin\Desktop\GetInvoke.3gp2

MD5 fd301d92de1f149c1dfd5e81b5dcf815
SHA1 130f0bed35e45c8e63de784cb156015d5b2eb447
SHA256 86887c4877b30e4905419335fa8969031d5bae5b12878c24668db90026891b2b
SHA512 4f853eda4cc4af4a6cefca6cbec29c7bce64a5f849ae02e51277ee542c13f460438e92fe0b200645b2acea83d57d05c695f0f927f57872dacc7681bac5b5e993

C:\Users\Admin\Desktop\DismountSubmit.ttf

MD5 07b44f71b93645f385d23788e9cb1058
SHA1 577128e70a7c39a49841ca834587e8a414a6949a
SHA256 6275abe187c0cc0d26ffbb343a4314cf30e860ed8239a803cc4a4a5a1e18b492
SHA512 40ad988c326c262517807e5064220cf18428476fde5cf66ecbd5e757887b53585f057960c918cbfc2c3c412009f71aba398394ab7127225addce5c35c27ec300

C:\Users\Admin\Desktop\ConvertToRedo.MTS

MD5 ccd3447063438d1f5e5ba374073c1f1b
SHA1 71ddb209e781fb2cd01e9fa50ecb73c6e4f9009a
SHA256 eaa2ce356ea69c85861e4ec75529ce008b7ed5e57c72a68d40ab55b7830947e9
SHA512 a5fff57e7da66bbae5bf024e385ea562bb544e9500884aaa87e706a89ebb84722350a276559532f4c98eb43d32de6f88fa9fca00f3b54e6b72e4abc34b9debf8

C:\Users\Admin\Desktop\CompareDebug.nfo

MD5 3dc1ee5e8fce6b56502d832434cd7086
SHA1 d7924c63fda53e8e88d5df9a6c980dae0685ce7f
SHA256 dff1740700e34a87c6baba9090854a04e304d30b8713641ed44dd1704d69aa66
SHA512 1c5949c4ad91b55dd98a4ba2c499b18320d98bd5d6c56aaa8c594d3d9c16479e8631d951c8aeb8b1d818b361dfafae003d8757b6f2272f0253ebc9c0fce80355

C:\Users\Admin\Desktop\CloseCompare.aif

MD5 106c8827dc7c11598b0db4d3e07c9248
SHA1 c0ff585fe1b053a4ecc7d797b0a3e75e52a3928a
SHA256 cf9d0daa653f41d4eae8e9328b3669139756c2ef25c95b586ae37767cb3a4719
SHA512 52b212b4c3a9d4969ea7e6c9734cf898776c0ec8222ce81f75115aa691b5c3c95314aefda406fb0136aec764d0bcbf679e48b21c7eaff1c9349fab2792320548

C:\Users\Admin\Desktop\Microsoft Edge.lnk

MD5 07a8091418f2fc299499e3c1115e0455
SHA1 9dad9fc5cf4946359c8f0c89134cd40ad1b7896e
SHA256 23b679f9549ca03158626dfcbaa1872b986d470553190c2883b57726974237b2
SHA512 52e819ce933758ba383906a3512a04d67547379e2ad174bf1db3a0b425eadd324d4c2487452f7a70e9fdfcaff150a8717718411dd57533587b5f8cc2c2deec8e

C:\Users\Public\Desktop\Acrobat Reader DC.lnk

MD5 090481b070a51870de9a6232e4552341
SHA1 3b26a831df310e5717d24aabbeefa9335105924b
SHA256 af42ddfa45cc63c4ae89eb833728452bcbe97c5a6fa76f1d75a160b7ecfa6e04
SHA512 9ab50126417e12fd195019b6ba75d3783141847a34712d9444cfcfbbc7e1ae1eff31871421e988342b73fe21f1404bd37ca4e53815ebb9213f931aaa78adb90d

C:\Users\Public\Desktop\VLC media player.lnk

MD5 7ee66f82fe477434726f35a9b55b3d62
SHA1 55ec3a5373a25922aa789dac0ab938865071d2e4
SHA256 e9e47641c0be9a5fe87e37522a32d9a710228074a44d992cd4fd890f90d862f4
SHA512 8baf2c90da058f3d5591cdeca94fdac65de386ce6fe0a62d48319f341b25bf21132fe7d9938c8aa87e2285861991f9ee05af79259e1bd80a8afaaf74b22af483

C:\Users\Public\Desktop\Firefox.lnk

MD5 133d4ad33bcbd6f1db500a37e7ce2b6e
SHA1 c70d302a1372268f2e8c5d581dc4d2a2f4a6239f
SHA256 f8ae9f7cdca0d02a9038f32575fff82be43598cb311b77b5c69f60a07a33759e
SHA512 d8366c2780742b78f53d06564382aff3b480430129584da8e140b32afc90d05ff4374800a145d4e030339efe6fbc3089c672692504d6492c961eae0c5e1e62e7

C:\Users\Public\Desktop\Google Chrome.lnk

MD5 806059e65eb17da6fc1ba3fbad795fd9
SHA1 aea69b4004e65c16d366574ea618cc7102946e10
SHA256 707844dc7b14174174ea0b9a6a99db817052b5120b8462eb665bb462333ec9f2
SHA512 f95d30631f9c88b4f19a61aa77872150bb77d8160ec38e2e3afd0b62a39cfd69a5384b807364d269a28f9205634bc9e7501685d34e8339d05834977c39638600

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ec063f1c7c958ebc83ad69e174186ec2
SHA1 5d76ca0a63aabf8d46294b3b3c867b8350d5df91
SHA256 b4b88da1958f2544c77afed3a5aeafa524b0d555a96eb53ea3ae644e987500ed
SHA512 540330dcc96d3d86d6bc3c887fe122c0eb298526fab2e32cf4298fc427af060a4b233db3cab680d002a3d5ca4b28688cd158e9fc5859917a6cde38b6b42be5a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 e5781146c669d150b642fba5f67b8c2b
SHA1 75d863db074847c2ab00f657f820be112b20d224
SHA256 60cdfe3c27f35cb2146b2f53acf7028d0a388ef6f6494bc6da645f376d410b0a
SHA512 93a1e19ceb9c62a893d34a9e36a661be8738fa32b0cd89b741ea12eda2ae97bcfa07e7423656e8edf75b0535e6ad24074b94890441d8baadf8d7f615101e5ddf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 55074a04380a06dc44fd86478621c8f1
SHA1 7b94d2392e7c70a42fbd5277361c312bdc7838f3
SHA256 aee0be5fdb11539a95c9a6e7f2c19337bf720aa35b89aea8e38a70c0a4955bc8
SHA512 d608642fdf42075f76675edf2034fff475e6d1542b63fce095ef36dd51df6c23156b3839baa90eecc49722dc22c8311a89a829403a16093c0c8a6913997a6c2f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 b8722a177b117634edd7d560c07ab651
SHA1 131eb4df0c9d3ce205adbf5fe8f851c67de31a4e
SHA256 e4fbbbd5779b42237e7261eee14fa7920f8a7f6a2c4ddfa90634653aa4d508b0
SHA512 08f806b65c4b5315689294747b880620b8323df558e5646fa8b4a1254e23dab7fe702da358775fe3691710e79811fe4aa410f96a66f78539bb4766d273cdbc36

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b0d2f06a7ec579c5809add58239e97bc
SHA1 056c406876f2ce83a20e968b0005f8b198cf46e6
SHA256 a5f94985f9a6adf282ed43fdfe755cc86acc112f5302f3cba77cb40a96a1fc18
SHA512 dff172ea4dc62d16b19da59afea1613938aa7b4bbd2636a33ba410f958168a8440eab0a20bf5241e60639ab7cc9cbf085cebb9cdc52df4901d2e5e9046339a14

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 405795fe0fb8000334b86bdde9f99c9a
SHA1 3ac6332cd1d5827cb26290cfce7b3b7596aea93a
SHA256 8aec4d7134ba7ee133177e710e5e905cbdd37d34d3daa9a3964b3e3539928f2a
SHA512 9a1a15e771d760fffd8156d17bd6974a8cf5b9484f4d1546f8ea414c1bfd2b2e343d33948e0cd465e78302e449e1c1aacff3783064ae5f77b87c50e7dd23bf94

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 59473eb603f9f2f3f7a864d072243487
SHA1 b1765aaa8e949d283a118d52f65bf1f14f026ed4
SHA256 3b40410112ebe7acf9921ab05905389a96cc7aff367dd3aca1002e6dedbed8c5
SHA512 5b28040ec9ec36ff0b33e99824fe4ea3a477ec9b3a6158fda760bd61c4ce3eef7d6f33244a35225eb076a1a23281b9c564a994ebf11e39d35a96d1a2fbcaf245

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

MD5 338d0ec1c524bc6e9daadf6b658d6ce2
SHA1 0e26ec39b99886756f7f54bb8e0e288e456f152a
SHA256 63543a9e7560e16400c633a7571287c011876ec127ec751b795768306fec13d5
SHA512 c29c69be016bb66fa98cd82f8d60de1690a15c6ac0191995df97fac6f60a2deca075454e2824a96a39029d60ba0a8107c8481453b6c1231d35f1d9cfae5bf143

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 6fcd39420b5a54c999479086ac17e8b4
SHA1 653894d929a5f6b47e141e8a26ff49dd31d22ea8
SHA256 08ef897c5ee3cd796f3decee54dd5cc2bec964a27f9350453210419259164c72
SHA512 bff8704e79f1b3b35e08ac0b3bcd0d2ff2453476399590334cf10bb8dfd5997406aba3989cd3d8305d337fec69339f4b5dc0a94bc625bf50e318daa0ddaaff3f

C:\Users\Admin\Downloads\Unconfirmed 642760.crdownload

MD5 93ceffafe7bb69ec3f9b4a90908ece46
SHA1 14c85fa8930f8bfbe1f9102a10f4b03d24a16d02
SHA256 b87b48dcbf779b06c6ca6491cd31328cf840578d29a6327b7a44f9043ce1eb07
SHA512 c1cb5f15e2487f42d57ae0fa340e29c677fe24b44c945615ef617d77c2737ce4227d5a571547714973d263ed0a69c8893b6c51e89409261cdbedff612339d144

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 eaee32d7c0ece0628099a8f602681df8
SHA1 0f2b53f72ae5b5a81a9414db088b371a2cf7a7c2
SHA256 49c76f156a4cd3ae69f147116a972a41dd139360b2e44af1fc5eab4e2444f61a
SHA512 219ac7e1608699f25f51d762bdf88ffd0cca9ae46542aca33c0f6e95cd55ed2b3b502788f57ee46142b51d64502d1421d317f128c1f4696cde27d1a252d6124a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 53742cb940bc5058b512189091aa6ec7
SHA1 29c08ba4d17ca0cfe821eb80f2cc2eec6a1b0286
SHA256 50d9aba07b014624fef59deb942cb5035a5708dc5e003f108ab9066c227e275d
SHA512 280830bd1eb170241278bfcbc00140a9412b1e774ee2b003df3d1f168b6b25a8d11c851e5f4fb2ba97dc338da12ca9deedf7d5a43f9255c6797e3fbd4c33c063

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 1961c5adfaf28cbe5e492f9dd27d34d2
SHA1 336e222ebf634c51d1ce976126c59cd90c8df30a
SHA256 84a828eebd086208e0506f0aed643267e0533d9c79450494d6ae4d760b98132f
SHA512 3e38b23ba27de50846930be9102665a284497970c26266a1e786f28651c0593cd37eec2a8df435850442add5353282da7650404bf98ac541741acdeb3839198b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ba15eedb896b194b3745f299b9b37388
SHA1 f73cc624e34ef6994b9bfe7b32b10886cde4012c
SHA256 ba911146844c9b3492782c5f689bd1fe5e514fcc81d30904d4b3ad22fda3062b
SHA512 95ee6720221002a17b54085034a11f37e3f7039682ff44e886668e9ca9d570fca485d5ba84f7a5d0977d06fe9d021fde926deddcbf62d3c5ed6269865d2969fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 77f88337b4a87258f88f6b9b343921b4
SHA1 743468e83a53a2f632ab416cfe5af48a8bc9a88c
SHA256 877151a16bdad2f9f535e0672d95222f9a08a952970d25d05af3f6d390a75010
SHA512 45a08a4544cfb7dee35bc4c7dd9fd095073f24010076ab55dd7516d37744796a7f70ee91647ce3d2acf340850c454dc68f23b4458aba9838f0155b30725509f1

C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

MD5 b0bc642513c8ee7aeb92c620fadf0e7c
SHA1 38dceaf088f9bb9a453d918f24384fb6ab90f9fd
SHA256 9bebf8037f1fa9006b6842172b784284b891d9b4958575ca7728cbfa62d7e59f
SHA512 77b6134c504386a49e0c997bdf5a17d03a22291d2c1f3ab4b0aace758fd39c5f5ba1e749020fbabe0950c7fff8a7e442cb3d3fa52e4e347a06025e72fdc42cd7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache

MD5 b6f7a6b03164d4bf8e3531a5cf721d30
SHA1 a2134120d4712c7c629cdceef9de6d6e48ca13fa
SHA256 3d6f3f8f1456d7ce78dd9dfa8187318b38e731a658e513f561ee178766e74d39
SHA512 4b473f45a5d45d420483ea1d9e93047794884f26781bbfe5370a554d260e80ad462e7eeb74d16025774935c3a80cbb2fd1293941ee3d7b64045b791b365f2b63

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ebe6d406e6a07369f1e7577249a1f923
SHA1 22431d21d01780a7d807aaf0236724235f4a7ea7
SHA256 70baba6be6b94d3e005e74825022bf3517b1d5eeb92c3039039568ef16023684
SHA512 0c16867bc45a401cf5b85060bd0e57df8c675e8c0efdf9b5d03ed9140e297ab8ffe682237a5cfa04c61a5278659c98592ffa8197a5ff52ef6476b485fe018ed6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 b88242739cb5b7fdb70d33d6e6f4d80f
SHA1 bb16f4cf233b59003e6ef3b23b038e638ed2d77b
SHA256 0956a09b2025002cece1c7af95ba960548b0e23994671712a8cf79791c386f40
SHA512 17c104d4394734e5baea1de205872dec80bb1136538a164f94429330c2887eb650f6f9f67ba2d31e799a4e5839caae546cabf1a7f6901aaa00f8cd51b88449dd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 0d2091a84a9d85003538790c4bd49678
SHA1 fd211719825b61690ab62eba4b3b1f90ebd07a91
SHA256 7b41bdc79ea21cdc0c7f2634810f6ca6fed1661cea16d68e0a39d48337abadc5
SHA512 e57f7c013fcd0c329589b7bd82077a60734ae1e2821d0f0042335d0b2a175ab02e4457116680f087a5a5fb4794d74773d0714bd376cd110926bad8ca96e36573

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 39a1ab500762628f6e6bfdf75ba685b2
SHA1 9e7f7d4d5331d2e278ca728f49b63e70f3237c8c
SHA256 6afb04097603bd4507dd8d122e8972a21fd35f216db34624ddfe5f25421a71af
SHA512 69391c35bd03b55d672fd4a50940594b948db309480c5ce2cbd0021ea8797a92671b21feb7a982820e92fc67a266f2208d9a94656ef6e1dab9fce799ed2ca790

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 34ed993cfc3a47f40132d14881a4545c
SHA1 ac9bd76d5cbb2c4367aba3b7479a999543bebe4d
SHA256 aecf4f010524d1e14d1a9987f35cbf677ee3e45a41262a313b0cbe4edf7d4a62
SHA512 3a64ef7af16fdeb9212665a1088409e821c1a335ac00118557a0216082c08b8a2f20343c7298e70b82c7cf183cc7c8be30057f953af6849fd40557f15ea4ab71

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4108f179fff4f70fe2e04d18ccd44bcc
SHA1 2f4badf8a53972b0731d35cef4775008c0c3e1dc
SHA256 6798fe260abba15f36d14dff4272ffda0f75bb3802b57844fd09d5e10b33fc13
SHA512 45af2282386af2aefb6ce238f1c5f5bff0fe61036649445047d2ac92a724ea512061ad8565cd8ca8cb76e21fc847e9049c863191c055c79d114ec670f1218df7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 4709f99d3978bacb1dc9b20d157f04a9
SHA1 a4aa58ac492716962466425d7adeae270f17f6f7
SHA256 1a082d2d3641acc8d6afae64064d6db303a9bf07a67b78172b8c2fb6f35d1a19
SHA512 5c0211abbab4f6c21bd62b7115fdfd18b97adf474b52096fd495d9bb3465a05ac0583884c9467d10e288b3642171dab839b03f679d130fde5f4027e2b3c7f2c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 2edf652e4500581a40083ea3d4bd5695
SHA1 8227594b4f59af2fd87268cdb16883230fefdb8d
SHA256 ccae704958421b87080defb57563f9cd16f53b41583056fb8a748f1ab206afe5
SHA512 3eef0224edad650355bbd6e5763ca09ce8dd2ae1d458d2b9d7a1379ddf4c4518e5c44fabe6556405f2a560defd991f0a01a0b600f856238fd7e6aec2b96aaed8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 5110d2e8b88491529f8a64b569ec9a03
SHA1 a7f60302583622b81e3f01a7ab6063f0c5e5073a
SHA256 57ebaeb5c4290963ec691a2d82f4c70129b3be1ce703b3cdbe8ebc396fb4feb6
SHA512 1256cecda26777e3211a79cde6d870d6dfbe57b774eedd23300428d86033384a1e06d716002a5a61d6241c1dcbd49aa5c6019614033e675373c4bd52942196a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 f3dfd5e222a9a05e762f29a4ac0819c1
SHA1 2cf1bea0831496b23f10b7f52e5e50f4a87b9c62
SHA256 bc961e20162e7a3cb639f8124d38b094e9e306361321317829f1e3b1964e347e
SHA512 990fa17fbe17660ffed9ac3cd33f8d213f58692a5dce6aa6d8d147b94e957262c595b5027001648890f4c0c9a45284453bfadb931b494d768a932d6dbf17356e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 4ed2180e1cb794320ba82f598dd0744d
SHA1 68f17158e58cfc3ec8068bc9417bb78a130a2548
SHA256 50ede2a07c24ae390dada6e9fb80f91bfaca0c8253853e10bfec236dfdfa21f3
SHA512 577180af4e07bd0735f2d11906021e5f0f28e6d09b1a8a1762dd84ce5b6c5190a236838180f4258efe37bbe3dfdde2618ff2ebf7aba601c1017fce4379a7e809

C:\Users\Admin\Downloads\Unconfirmed 618955.crdownload

MD5 50188823168525455c273c07d8457b87
SHA1 0d549631690ea297c25b2a4e133cacb8a87b97c6
SHA256 32856e998ff1a8b89e30c9658721595d403ff0eece70dc803a36d1939e429f8d
SHA512 b1a58ebcc48142fa4f79c600ea70921f883f2f23185a3a60059cb2238ed1a06049e701ccdab6e4ea0662d2d98a73f477f791aa1eec1e046b74dc1ce0a9680f70

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 b5bbe8fdc97f5ea733cdb74b217b1775
SHA1 d217945c38407b742af6ebf403de4dab451f99bc
SHA256 1ea02550c73cd32dbd597f32ac78a2f7a7dcef21d4c2e64c927df9cb46350175
SHA512 389afbf5c67e544fddee556a8cab31a170127f62fd60fad90261df85d47da3e821b48c2ca9ca9643528b9f9072b5d23c8815d6a02bacfed8588ebfaef0ccd9ac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 65ac2030bd1a13ed7fb9b695926ed71c
SHA1 93bfbfcf37fdc1a7f646fd7e97dae45d50774a89
SHA256 13a731b7d7735e4dafcafe77084d785b4d8496171d80ad358e3cc830a8c52706
SHA512 2975f9ddbfcf80a3f21f956d560436f46a0445f0526f34c3cbc75adfdb3f60f1d4ed938f27fa8c5e127086c5ffaf370581496b1c8d1c03f69f35ef2bbc57d065

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 b17ea564115ed41b079e22a81db6d6e2
SHA1 6ee0278372f6f33f9e40d7bef15bc12ab9c7c71b
SHA256 9fbbb6a30b99481bc37e4c20ada0f61816e3755383ffb54319967acedbf6ef37
SHA512 cb084b04b159a1f1a13a674bc7ff25090bc92dfb2f4ad7415cca83a55de8095132540ac94f216e44665c8d2b32753cb6188b64745b71aff60d59baf1edfeb870

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 7e6b5c7aedc4c96d89df4220a6a45739
SHA1 237ab91bbf43c4f6d7158092aa549956522a4b61
SHA256 cdb47c5c4b753cf14ed99aa60e6f4eeaf590c6653037970c84c7ee1755de6260
SHA512 d5988087a0ed47cdacaebc4c4a704b444e044cc8f4a8909c4852f499722e03fa180ef0a868d4282d4bbde90a3e312741d003ee7c2b8c21075fc5124064da5d73

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1628d3cf462071b47d76aaf92fde3b75
SHA1 7cade77dc4b19b46c8de6f4ad8850d90dc58cfcf
SHA256 9ffa514ad9553e0d2cdcd1b86926e3ce73a8b0f6ed7729de110888b280fb2bd3
SHA512 d92430479ff786b1d5f8c53b4ec71434faa1b884dbe25754e2e9ede6393c667546335d061ad56357faddb7b2642a7a474cfc20ba26ecf5ca28cfbf50ecfe30d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 a81db0fb8bdae1f979d18a6cfd9c6797
SHA1 70346ca837cbefd71b5f8c0e8abaf79231c27209
SHA256 e4d655506c1fd4f2c954cdec6064527d5e0b4b63ad96d8a835639cfc3abadec0
SHA512 6e1c899c631f44a501a552622915a9400ee75099b16dc5838d048bf66c885639832ba813ba014879f952723062667a5384f8e773302fdb376f8575fde2661196

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 d3f38e141c7b1417a45d25cd8f8defcf
SHA1 cc6cdb5740f72518c0038a43e1b5ba0c8a987975
SHA256 5bd5734ce2d2c93a9c8417dc2678241b3d571fe46d25d17b850d2edaf567be2e
SHA512 22a931ea8eb03ab8bd6aaf8dcd265568b972b40c96b4a8d1fce777367a4536febfd461be3682390298872d13ae4a93d2e7911d77f4e45872b9ad6064ff03c360

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00002c

MD5 c3c0eb5e044497577bec91b5970f6d30
SHA1 d833f81cf21f68d43ba64a6c28892945adc317a6
SHA256 eb48be34490ec9c4f9402b882166cd82cd317b51b2a49aae75cdf9ee035035eb
SHA512 83d3545a4ed9eed2d25f98c4c9f100ae0ac5e4bc8828dccadee38553b7633bb63222132df8ec09d32eb37d960accb76e7aab5719fc08cc0a4ef07b053f30cf38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00002d

MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00002e

MD5 00d4cc262b70dd3d386111ff78fb0812
SHA1 628d4dcee1e82d04ab3969c29e256cef10101407
SHA256 956916ddd6bb5ebde0f5df3605a524d1624ea335cdc6bd5bf26681d3a5ac5239
SHA512 12f3cf77c4ee58eb00b08ced394d35e35237da4bc9ca62b1408c6dca4350068aa94d3a0e98132aa0e6cbcbdb7dee9c2b9c5399ba7c4780442200ad37a4c2b1a6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00002b

MD5 1d9097f6fd8365c7ed19f621246587eb
SHA1 937676f80fd908adc63adb3deb7d0bf4b64ad30e
SHA256 a9dc0d556e1592de2aeef8eed47d099481cfb7f37ea3bf1736df764704f39ddf
SHA512 251bf8a2baf71cde89873b26ee77fe89586daf2a2a913bd8383b1b4eca391fdd28aea6396de3fdff029c6d188bf9bb5f169954e5445da2933664e70acd79f4e3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00002f

MD5 710d7637cc7e21b62fd3efe6aba1fd27
SHA1 8645d6b137064c7b38e10c736724e17787db6cf3
SHA256 c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b
SHA512 19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000030

MD5 b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1 386ba241790252df01a6a028b3238de2f995a559
SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000031

MD5 027a77a637cb439865b2008d68867e99
SHA1 ba448ff5be0d69dbe0889237693371f4f0a2425e
SHA256 6f0e8c5ae26abbae3efc6ca213cacaaebd19bf2c7ed88495289a8f40428803dd
SHA512 66f8fbdd68de925148228fe1368d78aa8efa5695a2b4f70ab21a0a4eb2e6e9f0f54ed57708bd9200c2bbe431b9d09e5ca08c3f29a4347aeb65b090790652b5c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 53220dfa885ab63dcd692e9e8f718336
SHA1 e9419783a536967a9fc4de9645c3cf90c7cd77a4
SHA256 b84801cf37796e5bbf93d225879d2ac41d1ce19d730093c1409cd18c9d16e008
SHA512 ca29633d687af6a50c7cb3010613214f308f61330bf436c4d4fdf0c4b2605ba81bc290f0cfef04c63ee303b59d39a0f13e507b184da7f980cdc2270cb36494d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003f

MD5 2e23d6e099f830cf0b14356b3c3443ce
SHA1 027db4ff48118566db039d6b5f574a8ac73002bc
SHA256 7238196a5bf79e1b83cacb9ed4a82bf40b32cd789c30ef790e4eac0bbf438885
SHA512 165b1de091bfe0dd9deff0f8a3968268113d95edc9fd7a8081b525e0910f4442cfb3b4f5ac58ecfa41991d9dcabe5aa8b69f7f1c77e202cd17dd774931662717

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003e

MD5 c4b8e9bc1769a58f5265bbe40f7785ef
SHA1 07ff14df16d4b882361e1a0be6c2f10711ddce50
SHA256 2786986a3139e9722e667f81b4902609a4cf458e1c16206cd11feceee0254192
SHA512 a39157460b523ee2b9e1eacccf7aed99ff002767a8f87287c1c4662b6711b97f7d4955df64a86a882417fe71e598719e3934e14f787c1e6b3348c8a4c813e3ad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000042

MD5 f5b631335f170065edf1b148e10b34d4
SHA1 ca34f82af577fec763ed38f0436d20f1cf766f62
SHA256 99be964ed51ca453ccfaa264a1ea9490da11e32b53765919172b6d3749a9f846
SHA512 c66791cbdc7c0d12e7295eb26eb583b26e03692c8986ab7d5dac0e6a561b8b68a8a9e33814121efc700ff6b472aa4f685162b0c75439b144f12286c9e28c7cc7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000040

MD5 109a8cceba33695698297e575e56bfad
SHA1 2b8c6dce1ccd21a6eea2dd9aef2a8a6bde389053
SHA256 dd82d9ac034f0a06524fc1d5ef884c29a7e4d586a1e7db66e339dc54fac3636d
SHA512 6d51ed30c45560838df921212370a0044640a8e3c0433922106225cb6fec8cc115ac6191c753da13def21c4e0db4deb5782fb7a75ada822ced1db7c7d13beaf3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000043

MD5 cfff8fc00d16fc868cf319409948c243
SHA1 b7e2e2a6656c77a19d9819a7d782a981d9e16d44
SHA256 51266cbe2741a46507d1bb758669d6de3c2246f650829774f7433bc734688a5a
SHA512 9d127abfdf3850998fd0d2fb6bd106b5a40506398eb9c5474933ff5309cdc18c07052592281dbe1f15ea9d6cb245d08ff09873b374777d71bbbc6e0594bde39b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000041

MD5 919d13ecf08e3da7e9f337e7b60d6dec
SHA1 3d9bd4aa100f69cf46ad175259edd6ce9864830c
SHA256 9d4575044d2efd5e90503beda65571b5158a3f32d999191ac1f82d1a5ee62ad0
SHA512 98d8236ed1c44826b4489b9fb7b76c62502a032547374446c53dcf2eee2f5fe3548c6587fce66df9d075294bc2ab6be97c3cb21457bc899451ebd3b476715985

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003d

MD5 a6d2a865e9f16ea305950181afef4fcf
SHA1 082145d33593f3a47d29c552276c88cf51beae8e
SHA256 2e5d94863281987de0afa1cfd58c86fde38fd3677c695268585161bc2d0448a2
SHA512 6aa871d6b2b0d1af0bda0297d164e2d685bc53f09983e5a4e1205f4eb972a2017323c99c3cc627c3fb01381b66816e570f61d013d3775cddad285ac1b604cdc9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000046

MD5 a336ad7a2818eb9c1d9b7d0f4cc7d456
SHA1 d5280cb38af2010e0860b7884a23de0484d18f62
SHA256 83bdfb7d266fd8436312f6145c1707ddf0fb060825527acfe364c5db859887a3
SHA512 fa69455b3bfc162ab86a12332fe13322dfd8749be456779c93a6ab93e1d628e246a31a0a55cdba0c45adb3085acd62ba0a094b2115529d70cb9f693f3b1da327

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003c

MD5 a2ade5db01e80467e87b512193e46838
SHA1 40b35ee60d5d0388a097f53a1d39261e4e94616d
SHA256 154a7cfc19fb8827601d1f8eda3788b74e2018c96779884b13da73f6b1853a15
SHA512 1c728558e68ed5c0a7d19d8f264ad3e3c83b173b3e3cd5f53f5f3b216ed243a16944dbe6b2159cfe40ee4a3813ca95a834f162073a296b72bbdedc15546be8f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003b

MD5 da4c2d9295fbab7844d4f29079dbb8d5
SHA1 2e214261c9f3394badf103af57a2b9bd6f89a68c
SHA256 b2f523dc352a436652fdfa66e899f589653015929b1add2da64eeb9650a7febd
SHA512 83a66de2c3593c960f5e7567f8c315f983245334f63bda67c7490570753bce7e865a1f752d15a5b6f795fb4cc4aa2a122ce6bcfb86bf3e116f00df7a558a92c7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000045

MD5 bd96190c3723c6828cc6601ee39d46d4
SHA1 8ec0068e12d9f113b01d6077cf634f19079cbf53
SHA256 ed8fd1c5a4f0e11544b694ca505105c2a8fb4b643b41bae87b2b4f1ba14f8d1f
SHA512 7c649fdad52f9fe2bf76af6249b3d7de40ccdde73618c5b929fb16fe32e51873f7a73734e64b54e918a31d42d6430128c8801787e4ff5ee89fd9265ba9875dbd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

MD5 84de0d0d9b3a42595faf62b0a6b6ee91
SHA1 0c3b9f00779a349ab3213d5c2f8c24247354f18e
SHA256 d8fb9e565d30eda19615910ca4b91ed259198db627b92fb5259549266e0ed624
SHA512 dcb57cf3c07fbbd4830f0d58f74da28f8c8634d55cee5438bdc7d5db9e883f9077eb64e7c2ec379215f8500265c96d750bccda75644138e75ed33547643fe39a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 445e4604d29cc67c6bd254718b98f12f
SHA1 1096ece34b9843312a467b05448185b2c0a8d887
SHA256 3f4c6f10604c6246c3bc96cd6450e935d079874b0e3b78d781c1cbedca4dcd82
SHA512 4f6422cc03bded409d7012363be6c143b1755f43ed0f00e1a577cc3cd7c7f9366928cc4f0614e7debc7c925f58bd22ce5e8212e2e68fda802bd08ad4d338748c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 a253a70d303ddd532ff62f52c3e9838b
SHA1 7244e15390d1b91a8623d327615ad776bdd734fd
SHA256 0124167d8f5e66f9c544040d18ea050b78006f980fecb1302358c0bdbfd0a434
SHA512 06d4b88cb26c7c65381c4782546b43270a06ca78fe9646dcc19272e62d7125bb44491241e92ac7c044ac44108741711b4b582fd696a13863b68573711df068a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9f10029567fe5057707d49297dd233fb
SHA1 681fa7e0abec34c9b6fce48c7155f812bf72225a
SHA256 7c2d10cce87609b6abd60d003d195b01bf714853b261fa0e26b81f9171f66fcf
SHA512 1cffd1bc7e33810c517563c5f194c035c60b7ab5cd3c1629961695ab2f6706fb4d3d8025aa07f1fd4d43acb0792359c5c1e19b7cf4396530b9e40ff7a8b15527

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 c0d1d38e5d5a3534d84b2ff823fa4923
SHA1 809813975099fca95e321987d4d04a608d665c7f
SHA256 40f8dd1d59cdd890ea0097962212587aeb2b9e2c9ce63d969297db546bf51ff1
SHA512 a7be073284dc601a1382ea58bab01a7806914b25117ef5213c6c31d07c36f6ba7fe0ed9c92dd98c08d5bbc3ca4fd7559ae94d6fc146d92a826def01b5a8af108

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 345e222e2b7ac3980acd7846a275db29
SHA1 228d8316a2d953380751c0ab89c2650d5bb02953
SHA256 235408d29210e329c95ec66c91ff077f55bd806963a534256aa8e29b3bf02ec0
SHA512 5ff354b9c3bfbe542ecc3997cbd4dcb0f32d063d7478135229dbc16855e9f2e3f3a468a8f12dd10d1e4a0d5e42b57ad35e5a6cb50ede4c479ec267df89c52406

C:\Users\Admin\Downloads\Unconfirmed 559207.crdownload

MD5 cffe1f958643d6120ca4b41ffc8c88cb
SHA1 6f65c3011fc96dc987411be51992ce40d411c890
SHA256 e6aebf723ca843c4c97532256851fd7bc6daf9d9acbcf5fff2b2135616f1e434
SHA512 2694ea6582521849d13a1dff07b9c30d5fe29ec21031bea0f683be582f7e949c7f0065445e7943c930c7906bc13267961b85b067c39f7ed12a9f87f3de922cc6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 2f72140db16ac14847821ed24fdc95c5
SHA1 73d96b8c7d1ecdbda7bbec1c2b1e75f14ea34ce4
SHA256 b6e2facbdf93d0f4b77ef91189823542d0a0ba5decac3ddbeb55f370afe0f273
SHA512 aa3031d94ca1f1eb50ec8bd3ce2d91485c1788f66de70835a32d10580e39bd1664e916b0f0cb0aceed236a874c2d148668c7bc7c2c71093b72f95335b1c18990

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 3c1cc235e31cfd25d2d60fc16229e1e9
SHA1 87729c8c96ecd619af5cb3337cfd0794b0d87728
SHA256 0a0abe45f1ba268f36d42d36eeea3b2da23ae724c2f3a8edc1cadbe16999a1f5
SHA512 8c4a4bba59211c6f84761af8d52adc4c441e5f0ac1abab267d28a2c9192822b80ca82d4aac7ac4d26ad1c6c256350c8195296b5a7222116fa64b77da2efa000b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f44b7fa05b6b14d4070e58e958ab478c
SHA1 708fa818999d9d5e3903eb64033944f7250592b8
SHA256 d3b629cd1589704c8fd38da7f574378553b1ad43cb51a89d79dba238f3907c19
SHA512 a06296317531e8f527ec54a1e6a3b83f25ed2a822da6461bfa35cde45d8afb7a6d986ccac6645e93d171d143789dd87ea69eef1872021042394d25c8a6739c6e

memory/2064-1926-0x0000000000210000-0x000000000021C000-memory.dmp

memory/2064-1927-0x00000000050F0000-0x0000000005694000-memory.dmp

memory/2064-1928-0x0000000004BE0000-0x0000000004C72000-memory.dmp

memory/2064-1929-0x0000000004C90000-0x0000000004C9A000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 43e2be8c241386cdca583c2d87017833
SHA1 31337b075c01b974b04eb721ecff11e1cd63afd5
SHA256 93567956d080e918a6ecff4434b0b239ace2ed962373853407c8197e13d5a773
SHA512 d4003918c0dd3ecca8f26cc247b8d036e7cd3cf77400b4e14f995985e240da6744e9abe334bb554662ffe8af0c491440ad191569202fd246b6eb70c28b2c3f18

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 77d9eb42945a488b966011526143c9d8
SHA1 5080831ae051ac56fd5c446952717b6ef42d4869
SHA256 b2bc9ae979e3cd0179cbacf75be529d70881beb381da07cd0c38bdac538700a0
SHA512 bdac3ceb96e48ac6729005cc69dcaff4d29a5439a513c98b086f5da8046028b5941eb702ccb60c694ce3fcbd9771243fc42bf1677f62dec4cc4c81a517c5ba42

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000034

MD5 cf604c923aae437f0acb62820b25d0fd
SHA1 84db753fe8494a397246ccd18b3bb47a6830bc98
SHA256 e2b4325bb9a706cbfba8f39cca5bde9dae935cbb1d6c8a562c62e740f2208ab4
SHA512 754219b05f2d81d11f0b54e5c7dd687bd82aa59a357a3074bca60fefd3a88102577db8ae60a11eb25cc9538af1da39d25fa6f38997bdc8184924d0c5920e89c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000033

MD5 209af4da7e0c3b2a6471a968ba1fc992
SHA1 2240c2da3eba4f30b0c3ef2205ce7848ecff9e3f
SHA256 ecc145203f1c562cae7b733a807e9333c51d75726905a3af898154f3cefc9403
SHA512 09201e377e80a3d03616ff394d836c85712f39b65a3138924d62a1f3ede3eac192f1345761c012b0045393c501d48b5a774aeda7ab5d687e1d7971440dc1fc35

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000036

MD5 09ac9c9a95dde9d928585489b55a7a53
SHA1 a0930234469184cebbc08e399bc4d7ad9003b2a0
SHA256 a2b2e70072c91efc39fce757a94ccb51cb7de56c2e2accc7501947ef0509a612
SHA512 0b6d68f9b28439a56bd0fdbd391f8107023117e985a7087dee483e7dcb998897db2e7ec4cdbd551f6546ec648c2c1b8a4345562f9640bcad14fbedaf2730551a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000037

MD5 3051c1e179d84292d3f84a1a0a112c80
SHA1 c11a63236373abfe574f2935a0e7024688b71ccb
SHA256 992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3
SHA512 df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000038

MD5 68f0a51fa86985999964ee43de12cdd5
SHA1 bbfc7666be00c560b7394fa0b82b864237a99d8c
SHA256 f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f
SHA512 3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084

MD5 48d2860dd3168b6f06a4f27c6791bcaa
SHA1 f5f803efed91cd45a36c3d6acdffaaf0e863bf8c
SHA256 04d7bf7a6586ef00516bdb3f7b96c65e0b9c6b940f4b145121ed00f6116bbb77
SHA512 172da615b5b97a0c17f80ddd8d7406e278cd26afd1eb45a052cde0cb55b92febe49773b1e02cf9e9adca2f34abbaa6d7b83eaad4e08c828ef4bf26f23b95584e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

MD5 4211102393232aba3f95e19343708a9d
SHA1 d0af42275ca1d0199527e8b6733a0f11e4d69b22
SHA256 a4e96940565280aab4ddc099ae51a796a8c351c453243fc368980ff0dd1c5bc8
SHA512 fa99fd4642f1e074f8f195b7b4d939a55698d0da797539f2d4875e213367ed3b93fdbf6e34e855a7fa75c1b057c2a0858f2574feb3f8f6b2085ef37c3aa98739

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0a81704d8754871836d5b281b88ff1f2
SHA1 98b5785e7a0a68f6c11a7e7e85fbd3c255d103b0
SHA256 927596dccabf4d47663df50536e60939d84ae07177ac3d83aa1b04afbfa5f7fd
SHA512 695cd062e0c34c6e1e5077ce40faab0930399ec21655e8399f0a6670630d48e0837cfb4c4ce7bde46d92d7ae37ba8311bdcb5169b954a823484860bf1ad97246

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 6ce497453d578ea21c674e80ae2a16ac
SHA1 505001a3ababd6c2d56781749ff5efaec9a48cca
SHA256 7d50a75cbb811662523c1730ef82a00adaf20fb6e2fdfa3c1703a49f78ea7a28
SHA512 c9553c46605cb454dc5cf7e92e25e0ad8adf29523913089911bb93209365dd8076f030f451765c7d805403184dba893b7a13b0c303f204755981eb2581fdba19

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 b30bf626d1330dd367978257b0995df1
SHA1 e22ec2717006646c64bab2162ef5dd20bd655eb5
SHA256 297692807b569ef965965780a4834cffb2a188a97648e979f10d897d2be14f87
SHA512 8f18fe70fbda5f14e3bbdfb9d367f921a8ec3d7c279ef259d1d2f359bf94d3a709a0ab1fd5cd0beff5d133f789e0a1074a03a54079d630421a8d4eda475820bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe6164a5.TMP

MD5 e5a726415e1f0a61c24cd68c2395d560
SHA1 00d63585755da80a26e748842e3ee544e0b78726
SHA256 0ddeca5e25ae15572316d64fbeb7437483aad35a49e9a96ef6d8d3c62825bf19
SHA512 74503d913a98671b51e12ebeb088c67710bdb1bc24ed68eb9daeb532969da41826afee8ff3f433b19391f4cb45d7f6720def7e637408bb97aadbd2e492448ee3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 13ff6372ceef1873ef7b93d464d647dc
SHA1 eb4a6e447d10891926d4ba290cf4f8402bbf700b
SHA256 56b9438208b5007d84a264c581ef4a0a1affea1828e523e2661d48f41314cc3c
SHA512 4631a4dcc575e078255fa6463413f05f4ec6032e548db102a8255eb0c02ec0d9fa36d40fe5c58a2774805b09ac9d27b3a3051527223c90855c27b538e7003852

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 08064cee9f6dff24384f67f03b624a17
SHA1 bfd8681ead1466c11e7c6fa4651b6ebe699dc14d
SHA256 a4c2de1a3361568b9b94bf42a49b04341178db1bdc41d3269aa3e48cbf651e0d
SHA512 7fceffe69a4c2e9586c04b27f688b23c7f92dc5cde2ce4301ebb49ee8de8ded44021b93423281cfa9d4a0b62d96d01105069269bc4bacd17d7cfdcf98c77d962

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 c81a2a3299057036fd88b83dad3d712d
SHA1 dd7e269a98ef9e311cac45263e9c779c8b2cf93d
SHA256 9f9aee58756602940fa5c3895832cb6d102c1ecab62b3bbf26f2061921f92d3b
SHA512 225a4cc1b74d17d54f9b06bf0bb0f4ce77580216435b16ffcdbc3d3953004252c7c223aa2211fcc4e8c8332b47d88fdda2ec540aec162ea079fe2b44f774c60a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\94b6594413ce6562_0

MD5 e88e0f424ccdb85151321f7d161a9b59
SHA1 4dcfeb0f985c3214b40db5ed0ca0de46ee5de9d1
SHA256 aafa30c052f6651d009214fd3b1993e2828d53a20c85b1bfb9a2d1f920b2aa7b
SHA512 3db1a3a241c03ee9ee6f005030bbde3911e65eeaa206ab6202725c3b0ef0cca65334999fbdde50518ade4fe6828d0bad290d0b4d7ef6afe53d11f28d59f54acc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f383fb74978cd2a3_0

MD5 12d659ef9531c41aa4161a0c89058c82
SHA1 20f48f267d37d408e95936d3b1cfce885aa80bb7
SHA256 a60a036fa084c7120a709c83fdeb4975d9abe5fcd1d0518fb216e7f3957655f5
SHA512 a5306f05944603bb9ba59f5635529c9cf31c120d8fc3d0d1389b72967020ba57315100862d60a1fd13878c492c5d3945cfeefd38275569e71a91dc62907c1ffd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\59f486f4314f8103_0

MD5 3c559c1aaef65087ca16be53e08c2f9a
SHA1 d7fed9b2366737491694d95ef774127f65455fdf
SHA256 af8c29c3ca096cd16d7b13706d0044018243332793de5ebd6d387fa46c8cba89
SHA512 2e23d77e20e5ec364ce9ebbdadef1a5c6848e3b084be7fd4269d6d69a15579c102a6a4246c133ce93e0ced8189f66fdb1c6d060290ba37639d69e277ca1b7b98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ec520f5230eed29c_0

MD5 634d5050cf4dd930884544317202da31
SHA1 d71e4ef394d368085cdf58a4eff9b9de50dcf3fb
SHA256 1eccdd55d2ec15a462815c194d613f664773a7e74c8e741758580a7a9f6b9b3e
SHA512 5093717d4edf2daa094780f0bf1a3312218b6cd4249b62e97aafe739db308d3fe5ba186d1ddf4e38e0bf15db0aae0cba3624b4e08f870bd54c04e18c2ab514a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b590fd7c030c5374_0

MD5 1dfb35229fe96c7224b742d5a4cc0651
SHA1 d8890099e59503958cda2417cf3cd752dbc3a885
SHA256 1d45eba934e9d07c2ee284feddc3852dcc5e12c7e4f09e03020caa232444af37
SHA512 f1466b6beb032738fdd0c257de035c3c1fae7b40e4ec22419fad7427218651624c9853ed884a8df7a28c94b70bf1addb2ef1660602dc514e413804eb9199bec3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9f1220d60438aea8_0

MD5 b503cdd021fbddaa8afaa9803272e9db
SHA1 7ba8a258915a58ff53ead81f4023548834a19304
SHA256 1a0dba40e55b1c2a5413fe923c3b84be02b8b61faa08f16500e66f62882cceb1
SHA512 f3236c623f55058640cb14dc19571fa505cd290b1a3e96f97c62c9313d3f70184b6d48c0fd6106c487b9fd425624cdd9db456b820aabcb8d99eb08d493526895

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\efe7600a785cf1d0_0

MD5 7d08570a6e37951a4b0259e0617838e9
SHA1 19ea46751db5cd174852d05383765c26a35101ce
SHA256 a8a86c491182a355ddbd0ec9552c00c4df9bd9ad8c8ccef118dc9d78549f73f3
SHA512 abc8f13acdb6ed8f6b5d0544ff8c171fa2df7fa05e354ba79605c97cc2726a2af9296c2022c6616fe43f9d55c4fbd5e73d9a706215acf2dc427b432733ba864f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ba7773c5b11c73d9_0

MD5 1b8356b6088aca03225635b021870c42
SHA1 80b1773a16fb08994054310b5af7fbaeb27d9ede
SHA256 702cf307beb95b20864a2bd6d2d0e1c0c2387b304f2e30f4bcb03cf3abc04fae
SHA512 c9396ea3492a60ee29b9288ed6a5356b1a519dbcb2e217032ef23c3efb9d2b21f0c38e11e8116e982d5cf9f2a74befe15dea016289dbd9f5b3fb62e55501ba51

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\37ca16582bfd954b_0

MD5 e3684ebdf9748856aa7e4008b433f047
SHA1 339e975efe1423050e14b7c5e1d0b666d317bf21
SHA256 7d8cd178fbe928c50865afb447d76ca277bb7a0ecfcf690c09a4f23b7f7e49d9
SHA512 d5e42016425d79c719249d8c0ad2639610334682e2056d75e986e96c52b82c11267518540fc88180367ba5e7203781a9e3a0ab2d34f1ae480d7298edc7c697cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bd7d45d8a26ccec3_0

MD5 8b9bd36408923d3a664e3eb82c24e32a
SHA1 683e635b211e6c0628a4573a25445b61b34c4ff0
SHA256 9d2c78c8360793ad114233427f37f6cfe49c655663094715c9c8a31692c50aea
SHA512 15a04b6f605ee5e6521f93009619274193cce07ac4612367441fc732e3fc55c5d40a07dc1ce8449e01b0537af81782335ff6fb19fac54671754eee6232126cd6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5c1ddd193765639d_0

MD5 fd405dbd5691b68f7e15f337b6af76ef
SHA1 a508abdf261d6ddab0b65842ff6c2c534af1d5b5
SHA256 732068d4eb85d9f6a468f04fd36dcd61e6bc43e30f9eea292f6220bedbce6996
SHA512 de042f7de4a7ce48e5e15bc6ba03bfe5343e3fd77bb60257c11ac40cc8441aef61270475194eba6016f47b49528004473ab50b81ae87ed268cab2eeb980b6b76

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dde72989c18d5841_0

MD5 a3d3ad5ca433043c50c86cf8118e10fd
SHA1 8e408cffd98f793ca2fb710b2c0365f2e7a944ec
SHA256 0f5fb4b4d6db630a74b0d7272779e9a9e8c898850d8a98b06f9f42f61fa265f4
SHA512 57b72b76d1a84b8fa088dec32635104b263b7d9e240ca4b43782fd43a4e93a8baad8ea06c1cc16f6597af5ef1e7e53458ca50764242bcf57d45964f4b16ca39d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d90b09a7853a97df_0

MD5 53abe10e19c538321a3d35986150c094
SHA1 49b37df67489f7ab4e65e7f280ad8718c6fe7d3d
SHA256 eb599cbb6f3030cdbdd16fb950f67c2c7ff75783cbc8eb2e36984d4fe02b4a5f
SHA512 debbc7e45f063eb62f8bf83c84b8a7d201e6aa918f9360b79106cc5c7bc0b5aab7adf1916db5abfed9238ccffd8b455ae7e97547c9831a33dce3998405cacc22

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\771b322297b90244_0

MD5 34aa918dd740adf1be14da6f2d4323a8
SHA1 41b1b461b5968e2ea7da0497217f598a441cb2ea
SHA256 8462f3b858b8c8dd4598eaddb441c8fde992160a3955e9915ffbb4050bdc73f9
SHA512 ecc19710e74929a735e5f3f39bcd5647b5a56864a0133740b8bb3434151fd17e6dd4e3a7b6e72a3ef71bb891be18cb4fa8b2712f918c2a224dd72c186974907b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5bd9fe3124c5c1db_0

MD5 51efa55301231c9d7f680d6f6f07e09f
SHA1 c7066fcac096ea2c0b9b4c21fbb5eaf253aeb717
SHA256 6a0b94fc7a917eea25bb1c20f3bd389b6a709fae014c291b4abd078d294b00f0
SHA512 99e32a3de751a9ff012835bc4446389c444ac1d1d8c515501f4ebc9ff7e8880874c1f143ebcddd37689aa7900a30941a224bfad2bca353aab33abc338493acb8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fad43496817469ba_0

MD5 cfe9d3eb5dfd6ab23ad8ae1336b7f0f7
SHA1 305adb65cacf23c3086e5e791d4f727000e0ee92
SHA256 934c4d2ed7ae97cad3d9a2baa8dc06804a5691bd6695b9163efdf147e7f8a3e1
SHA512 d42007f308a2ad180741f2d07bb88b1c3bac090640a0fe9c9ffd2ad9b7a3479225f3adc9350e6c626d8a50df403176679b4b008601876d26b73d98b4765103e6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c5788ede2b3b2bbc_0

MD5 e855ea8dcf6aabbe93a877204bcb083e
SHA1 77c1ecd344cc63e6e41fd814df9126b809784604
SHA256 11cf0a16e47c9c2a99e33f9204a9197505160584dfae89d634d36dd2a27f0323
SHA512 2231f710148247fa2da9edf8a064d7c53d9d67400ca77355ee7187591a9575de6b2f3e1fbb0c25d625225634467031aebc6bcc208e84320264571abe66489459

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\69e2fe0a78cb50ac_0

MD5 46ca0d0880dc56148776ebdfde55d6fc
SHA1 53c12b768a339dde376976d8aa37f848a3b9d4aa
SHA256 b34174e9a6e82a89e135e380b5e82c048b8db555ae2a2e383dfbaa4f73c37b86
SHA512 06bc0aa121506b790d869361f624644c95d61dc9229fc54614533de80bc4539419d7c4d5a8ae8d4b9835522d2c1d735b25e9fb591f85710562dd316c53f78e2a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8bf9a0dbc145b9e6_0

MD5 7e4a72fe051c0a1cca80814921c54ddc
SHA1 ab9baf9d804524998a7c5283f187dad27046e9b1
SHA256 a241bbd81ce6223f349fe8cf98d759eed647268b855890e8d3456e6a0666b48a
SHA512 83333715ba78cdbe0d9d76f947d2bd6345b054b91a2cefa543154339bdc7a43f740f32f4a5cda7d537834cceacd8bcba9b7f4b30986948643a06acac5b0c265c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1b10c5824122b84d_0

MD5 d151081adc5db76d20baf50b490b346e
SHA1 a816157f7cbd9d0540d84c938964696b2a96c7bd
SHA256 1fb9092111b6833243d27c1dbc0d40967b35c644489b2a434ed669548a73f9cc
SHA512 f286dd05ae5022fbf4dc058e436fd196125f8a34bfe025a4d7052c18c6a6e24546a8efb9923fb458775471a65f83d8b14b54fe11b6b79933d7465f2496a72376

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ae6938c53190427e_0

MD5 892485d9ac5a6dbd69f634faa2d90a57
SHA1 0556a92727422cb8f05e1f6bae84b226c7da7706
SHA256 d025a1a7abee961b0262c15cede71f8314bb8bfc46014128768872e5d7f2f387
SHA512 55e0d6d2a3980277a20bf0ceed50fe6751a8bf2e526422588ef81a6d0102cefef148683029bffff5e18b180c9da1dda5c2ebaa34af33c9908b2ec56e23944ecd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a8f80380629fb5be_0

MD5 a3dc18ad71f2bf93625c3e1bb61137f6
SHA1 9b07422643d3fd2f8fc0e0c6d2e4d502bec1fe5d
SHA256 99d3b0110527a7bf252dd2f9bdd135ed3eb59656c789e679e076a7c023a4835f
SHA512 5130cf663ff0afe15e66cc264ef769d115c80e3fc8b34321c9c6d065579cc3176956af3802d8f0bf485fba0d2e7aa4067e3363f236fb9f1cb17a81f1d854084a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f27b37247deb0d3b_0

MD5 074155b1d7d5a26b83cf57b10a67954a
SHA1 ef11d5e78fe4eb24babdabbfc8fcfa32da334da1
SHA256 5c4406b3861599472a7bc5c361ac0f22477eab51467a7df1142e6a9018d4f5c7
SHA512 b7e5bf99db515c8ec19d0200fcea08e80911b55840c6e5d3da53af1a37676b31bcd0f7672147595c9cff496a9a97ddf943065708217a0fc992d109d41d374cd7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\369eb01682225f64_0

MD5 9cd12cdea7a182f2aca2bb99da551a4f
SHA1 2f555743fb48def2e874b5a8c5cc7451d7977b56
SHA256 b070e9d55c480f114c5a48d90f8916ee49f47c6e1b66ffa06651d2b1a895af0b
SHA512 89d1f1da1c525376affc16acb9fd0b056624a6d760d4881b58b396eae81cab2731f10655cbc34db8c6988b05f00c3a75a0ddf55fc83f1fee994a051adf02fdbb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a02df7c313f59d27_0

MD5 4f56d6e60627b27e892240b14cdd6ce5
SHA1 22fdca2c86311b0f2a735abe5d1809608872f450
SHA256 1ea2b3fa9e0c033a88366a3afca13b96e5dc900f779a5dbf6a109e2f24ebf064
SHA512 707aaeebb444e7e91e6436ee79c36bc005ebbd01b8bc740ba0973541cb839ce27ab840bf0b71a797b703db24b4b483d0dbd82c116a821cca0ca2822dc314b49c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dd8e97b58d81706c_0

MD5 27e66c5f4922d83973b7c389747bab80
SHA1 7780b9746ee2e68734b99a51727e5256afdfcd62
SHA256 5dbcb3957ad76c364b63a1c189ae1897622b2302cbc45fc2003dfa4eb324343d
SHA512 73058f45992ba9d1dd5afbdcfaaa8b48a17c7a220be88a73e714f62ae1d5c6a1571dc42dee63dec9e6b07de04a7363e0c9a17fd7214a4e1f99dfaa5f14fb8436

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8648952d5ff5512a_0

MD5 fb2c1f0d1c10b7e2e53fcba8abe7232a
SHA1 5879f1d539b21b27c95521cf4d045f14b23acff8
SHA256 e6677d4ad22e53b9107c1c396a03efbbb7d974e257e5a9f717a02fd2d4050218
SHA512 f813a18c833771d0c65596205f12b0d76860d27b56bc0229a44d8b6a4b5e851624e007726dea8423c3fda7fea4735d7c68175b99ee6c890e6623eddef154c622

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\65029c17e720c1c5_0

MD5 a07802c1ef202c6b8d0e805c7a07222e
SHA1 1668e97f5ff80df9b80d79f527c5c8e80e468b99
SHA256 32789edb5318d6740842e1b672a3827a852ecd7d4a990be9a57543b0f5b7f555
SHA512 e4cd6c8d3b55b30638579df5db2a4c74147400f81d1cd81eace8da5bf6b71767a91094540126710c4a3f5924bb5e976ea18838df6e8b8cc4dd0745fde770f5da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2df2c057a5731c19_0

MD5 1980f474fa4e197ec8669a8a9ef6b678
SHA1 081723c7270f6a9052cc3c332685b2b60fd5d858
SHA256 60d2f6bc4a23782d9fb04409d53fdc2480239017423e93e4cb526bf1c8377be2
SHA512 64ec31fe3b45f52f5c5326bdb263b61482448eaa50885c0e086a9d1c324b4ef36b499074eabcd469ced083dce3eafd3a2f55eb50400dda1bf4e8fcd5e36a75e8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3b3136dbc32e5c73_0

MD5 ec44cf31b248fcc431ae0e87c9cdc113
SHA1 3d9e6660a5bd6ed9c61ac759c801242c059caa66
SHA256 279dca8ad885bda4aea882954082bcfb4ca067e2c28ed55ef22fe0828fefd332
SHA512 561cf2c993f8bc1e2e8f42e9bf672d11a18f8f34e8d969ec241b89b82e3478900fb099e2436ee2f4a80630e4a8c744e554985485b7d6ea79732058329596d04b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4a9cda1121219915_0

MD5 bcc67d0557f90eada293478f49accc6b
SHA1 132e0cd416adb8ba8dc88d02f5f19a794490c7d8
SHA256 6ba9c81aab42fb39b8aac66b5174e5796330c626aa5e898916937a3ff961eedf
SHA512 c994ae860ff670405c6b4323d3706ad9e523be0d8ba194bcdf24f8983b0c95054172591ae23cf28b083360bd3c020a8177bc0d7d7e437b8f2a3a94cf7bab242b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\90f61163682f5561_0

MD5 5370a02c272deabe6a5d8a3e141f3c16
SHA1 7839ef9839e3bd30177274bdaedfb03dc5202b21
SHA256 909f257946332141802ac20699059835c41aac0e44155ef635ca06332d3f48ae
SHA512 f6f99199f8631a9f5f6b6b24637fda47d47a48ee0ad7776472b02afeaf2f4ca4af3572c3e4369d2a861f00aba94413828472a8d538177c1597cf5c43339ab1bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\794b4df9888a1693_0

MD5 c196968bd88a9f47c0a3d1bb36831c2a
SHA1 0b869f9996d6cdc62a5ad844c90eabb338813999
SHA256 cb0c0ed95e80df21e1f4e82a4a2a9ffd1fa44de8fb131555d82c8cbec6cb67ce
SHA512 90d180376fd3613628299fd65127e3abdd0346f2b669ac297c50aef224d730ee6074bd4f8077c9b7cc50ce01f4192b02f3747d0c2a910e9641fb21a9dfbedb0e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\57fea5bbba039920_0

MD5 3b0799cecc46efe6788940da93632086
SHA1 484ea2b4abcae9b7c8347da8b85aa5213ed77216
SHA256 dfe69aaadc75613129a3f7794227395cd6f4ba623855cae80df5ab989d6175c4
SHA512 d1e57bf51f5305ed41b406643bcbb73387b0d72c0a76cc90e562ef0e7a315975325d149568df20a33a170e7201c8e1e83bc0d475188fdd24c649f15579ecdacd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a7e7921c6642f313_0

MD5 9322e7b6e323e564f4ba43ae5dd37fe8
SHA1 fd542da6fe9f3214ad9ede8d9a997be7ef55d804
SHA256 40afc0f42c51af753e3edb5923d9f0796263cd6da22e6f08f20d9221b8a0e4d0
SHA512 a3061925daaa476d2baed97029cc7645962e131bfd042dde26af513c2fd74f72bc0dd7ec738fac86b374e6a1223730a3ba91129779e3fc306d4f74e471bd06e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3fce2772ba8b623b_0

MD5 fbc94de6eaa0c005851ef3be131d8faa
SHA1 f54415b05c362706af490be8f7303fcd5b702702
SHA256 bb12c622196d82a33a816971755667ec4b91fff13478f79f9954c9b394e341f8
SHA512 818b5caba6a06e2ea4ed4a4722b6af12aa9bb942247ab3ae1517cd31c277cf0d6dd18ee0271097b2a29b0c96d07cd85e333fc2f80da4e0f1eed6d29ae8b6be19

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9e9585b606ccbcd4_0

MD5 c14c78a87f6750288fa4ab3fc580b5da
SHA1 cb2a80999497d161d0c4b023e0dd06c415143008
SHA256 239580695e88643a34198952a044a1cd9a77fde85beee877e4743f7423e25ca9
SHA512 ce92488b7be15fa39b1e0a87ca718316ade036f768c5b3b67e45f14c7451eec9d3eb095ce53d1b34d57f169c94c08a128c3235d2084d2c32a02a1a135c0042fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3c0976e826452b12_0

MD5 7373dcdf4d74d04e7cdde1b3269a0369
SHA1 238a0032bcf997afb9c37262c7a3ce2b6ac2fbbd
SHA256 d03b432fce5c1692ccb4c751e9249304eb5be96ad850e6730b2b0510ea75c752
SHA512 eefdebb39eb0a4bc5ac961c86fe114473c10c5aa664ff2d5394355f23ba696bb15450cb3f8752e3c651be4e348d0fbd550e0674388812c97bd1217e281264101

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0f80fe84a0b3023a_0

MD5 38c56162be0123a583c109d795e34158
SHA1 2eea22c6ba36fe8a0d03a7bc4161e3b489d7b579
SHA256 fb2198d72da32ea3f26063a3a08c9f9baeafff8162af3e96ad2c15911031d814
SHA512 dd2830cc67823b522cd7a266e803dfc246757875945fee0d3fa83561d2b5f22128cc663f0a9d72a691a5f19c6f674211c89dd61b97a61558879a215264344fec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\223785267ad804f5_0

MD5 c6e5fd10539a5d9f385422aa27eb1981
SHA1 99fe022d209dc498e93abcd01969f81fbeec5c3d
SHA256 902335efefa5b013f4fa84bf2ae40a421d90dd92f0e921d2d59b7d9562650455
SHA512 0d7691b1e40e68d97917ffeb16dad7ae1579a185ff32714d9e381a0595be6149fd5e9cdecd43d92d6204fd2f384a3d5d53df354a0d87b265b58b693cb6b20920

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bf3dde9e4182dd73_0

MD5 84e76ceb6eb5f649e9cc6551c00c5bb5
SHA1 4cb846cd60f7bf2517550ea28d4bfb601b7df82d
SHA256 a9c514abe5f0bb9a04e20f09caec0b563c10a5dd0b238dfc1647ccbea279ba33
SHA512 db1fecaf2acadfb68e1f865136591d8e67e0228b94dffebccf3d3d74daeb1fbaa443d6aae28fa5633d1ba01f9b9b86368ca694f95c8c50851e208c128dfd3761

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\39f1b8ad3a7dfa7b_0

MD5 d1033a385a057c518972beb209603a5b
SHA1 2be8d1c3dd61f1607f9154bc0fa34ac20728e9af
SHA256 5e17099c192a865bc1d236a982f3c30a85d501fe8d9a6a9342fd7d8bfb7be066
SHA512 e82e854852f9fb8bd15c0f6e256a45b54f71282e7d231a3ae12a23ba8af5d344a1b84c25b182fa88274c54c0b4922b1ea2b6aaa74202557de294ffd88abd7d65

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1e54725c590c3137_0

MD5 3203a247be26f93ac209d0ed22657472
SHA1 3fe9f3e44b30e85a67db9dd0d2bcf9851fc4dc58
SHA256 0c8276eb18b2400b6bd45cd609253413c836c4ac930758d5cac241dc4b0cba10
SHA512 94e524fff3bb897b3cf409a2eeebadb4eebb4208e6baa505007d41f2a358f4701096987bdb7e096fcc177fc3f2d47fb51c1210a43ff6697b15d6593baec7b6fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47f1ad57edb8b6bf_0

MD5 0ade101d251bfd2159e4df1067e5f5b7
SHA1 6b7483c09be618bb4ea19e3f4cfe4c0951db4814
SHA256 f1c894b043b466369ad4cec520ae389eef56bab463521480d80c1d7f0397f413
SHA512 b88bf2a62d17f20eb587acbc109e0fed1a360e8501a2c5051e623b18f10a5f187b5d1c0156aae77dfa85a28b629affa2f07d6995522d13dda923a69377e68a61

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5b044bcecece9bfb_0

MD5 ade9f4d03bbf45d33a691e4ce87570bf
SHA1 5ee9ef8dc61ad278ddf4e874279eca0bcf63e8a1
SHA256 d6c4709b3aea51ee0742cde5014951cecee46d5e34a1a568bd9d9579d438eba0
SHA512 ac7ab2b67eebe053cfe1e4062a6b54b12a821aa2dcb1508639114ab11f56fc129c39fe541a99f0caf0a3920258ee39dfa859f48beb921883eb757bc0945c57d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\202ee61178b3d1b4_0

MD5 9819ff1e25a30d1ec7cbbdbf504abeb2
SHA1 59c2bc2bfa3f0eb356aac1435fe84b160aa648e8
SHA256 0d46c71d8bb39c2f2b67d1d0344ce75ba0cce764d2c1ed92c01f1bda305fa50b
SHA512 42809725096a375d28888cde8cfbfe307cda0aee17c4b280f57dbb95d63c4994bebe07bb65e2fb11f230a8a31f02ed7211235985a7789d2e804d3a1e18741081

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\08367b3179c4da90_0

MD5 9ecb56cf3c41673ae891d69a94917821
SHA1 40b45fc0a675acc315f3c000886ff2a94e320e18
SHA256 d10effddbbeaee3e1ed3c93fb6040ff8dd5838976601b4d6ec69254905ec9bf8
SHA512 54cb7e75e18d20789ff37b7e3981244a9b20284298c2cbc41f37e7d87030b337b2af6800cfd669a93ca562262fd0b75af91ede4096c5ce5e31d14855d13914a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7fe85d7249e8dc55_0

MD5 65c33201448899b5d3f74a294c53c75b
SHA1 cb3171da01a28a5a8e2521b2124775f341af503f
SHA256 7e00836c89a5fbade810dfc5e492eb460e71c31cf6b5e14f917d0d136ec33d20
SHA512 6a22c4df02f1fba4308b42e6abc0699ef40db0a8b62c05bbae52e11d3bea13e47cf39253d2bef612872d84acdbb66473bd32faa95e5f662727fd163bfa001e63

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\20dac1bd8ef32ebe_0

MD5 311cc7b5709c48528c358a8c1aea815e
SHA1 25aebbc3ea7badc4ec747ea0f8c441789ac2d056
SHA256 29ac5c646b08a81f17f35f9ace78db5d712ba5dc3ba98e12019b2fc0bd004320
SHA512 0780d478016814afcb55dc38c37710df550afc5680a42e4b272e634fb65b4a14a870f4b2e719ec5e6aca86980c015709770f57921f57e8003db07cc1e8290a61

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ba872977e7eafed0_0

MD5 b3a5ee8f2bcd546f426ca19d41af10b0
SHA1 a4dbf6675971a7e7c9028d24e152b8fca1a5d353
SHA256 5f929d8d42b4714857334a00307ae50eeaa6af917edbe462ef256a82f8ea9dee
SHA512 db0d561c0515074c0ce4a4e9913fd76b7c21586cc8e575a68d13d5861d43b5831e7a521b8ea70c9df1e20ec95be3971cc0533e4c09a83f58d4132f104f682d33

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\951674a2601a33d9_0

MD5 8a1eb1faa240e721c8021b3c2dc461dc
SHA1 f0f2bcf7a8f87ee0be884c751359d952d0cab59a
SHA256 8854f96e60a2148030bb2df64fbfb74ae536eb94f91e7b54b6cbefb87a49937c
SHA512 abae0ded195a68da1b5d0bf93062f0d9fe254f8c50911720924e0cb23f8a931452ed7d290b719e43886198d0613d58f61e1814cda9b9a690df37e3e3463cfbac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\552e9cab9e32a74c_0

MD5 c5728074d2e9ccf62507ec78d291a3eb
SHA1 6e67f80bbd183f0379eed6ced73ab3765322e312
SHA256 3911711001f82c32af5ce43312321e79dc4b1b0a797a0eb73fc529fc4df32b16
SHA512 4891dba9b2f742dab1c38301766a183e45fcee165c31e8f85d93d07848258de90d6864bbb578e799a29dda0923db0c612acf6b77fc6714bdb4a2c5425259a4b2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cf4436542c566b96_0

MD5 d22ea7b4bf2331e4bf9b89bbf949f1c4
SHA1 9a41f344cdcd0182e544b979d021f1261d19d536
SHA256 d47cdfaff0ed65d5ad4be4fee9456a47244d655a7e6d614406dec0b149eca8f8
SHA512 beec517f1357ddb4888946642f988d50289c072a14c4ffd320e55f7658f9a31de9dbcca06eb765d7d81c8e028079c0d34f6cbdc3ac77a25e3054e1f0ee3dc812

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1f09fbf9f0dca9c4_0

MD5 5fde5bf2ca3f8d6690b17590c2a862c1
SHA1 cf0b0a8ce54518a5fd3ea144b4edb5a61b769369
SHA256 ec92c9723f67f465304a15fdce023c152bbbf4ab2f3ec206b25609051a7d84e2
SHA512 a135ca0e3723b210eb747cabffca9ea66c985b00c5493be4520c0632a21831d7812f59b0958c365bf4ec5962959068eb7c17d6ee362573d8fdf28b6f0be3baa7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b8bc7619156886ec_0

MD5 ee34c711ece18980bcb0bd0b92b61422
SHA1 5eb3ac1071e31be961500b36d85bfca740b1f2dd
SHA256 76e95db9793bc5cdc5ef71640312e4edbf98d43423aa325e1eb23cff12936a7e
SHA512 a658f8782c77e29948f72c485ebad9f4cdb084eacf252e5b6c21f8bf6f79258d0ca96eecd2f4749fae4aed24febbcef56248abc290a4f8a3b087a85d538f98f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3eec4953a2edc0a4_0

MD5 0c390a5efc3be4303f8334797a27dced
SHA1 c43f13700250afcf7d79775e312936fde8b52cb8
SHA256 3513a487fcb47abdd14c8955246662aa586d506b895d889f0cbba1fb547fa095
SHA512 2070edc1f345d48a6d377761342767af8eec0de72f807d82b5b7a9e0ecd838ad448188674ce20b4c868e0b8d1602509957f9e08cf6d803cb910197f06611e43b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\626b5afd94a26bdc_0

MD5 892d8233ee40d60dd5206724e41231d0
SHA1 67d09a63b6d3c4e1a3123893c3be65465c100e09
SHA256 2c7f1bf607e5412fe5cf32741812866eab43e700d6dd1fcb070061320f1ff6b4
SHA512 a02080698cc8440e234e6f4421b7ac0b0504db848b9e7bce7a17b63383138f716bc85af9b89a6d1e45332236375c44de651e7b4ab6a517f0367c7874547fc914

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\89c00ef3bbb713fa_0

MD5 f4419be1bd939415314a5444c7d8feb0
SHA1 af57183106bda7d9f04c6c966ae51196fc85b5df
SHA256 163df49a77f370e23d6f0d988d92f1779f55afbee2d81058edc77e651ae13105
SHA512 d916dc7350ff4c3abf7b7551a073265b08751ffccf52c1c9eb1b95e3b20f808cd412290f4878e1bec805f13eccf18fbde0d15703cc69031875c5461311646e74

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6b335498d880125e_0

MD5 566177682be344b84681d2765f5e4144
SHA1 d9e254115592c969e66a7c25f7a4d9c14d28fe68
SHA256 273cb87f6a83e229a987ee96a7b3a2fdb9b1230e344fd30b90c31253a7309ff1
SHA512 84c4d487abd4d46c079e09096f8622e0ce548c07926f35bc1507a5427f151273226f83c9b3c5782edcb45f537c755fee11d8d60c3fd7dd570ef13670fc98d257

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0aff8554a08780d8_0

MD5 3da7113878eac6e00a5e14d5499e8c77
SHA1 63efe62fa3d4776b43b2d6a22125a5aabc0e77d2
SHA256 d44fff8c0eba1c0a21d9f27e2a25636d08a8879badd0e59d2d2192d457817162
SHA512 9d2d3df2a82b478e3f41f7766b8baab9b1579930c873d3427f154adb3628dd8670dbe5de99341272ee7bc062be4d61905689998755e60085bd497e3fce28c149

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5df19512b232e76d_0

MD5 954ae720670d325c843af442166561c8
SHA1 b909479c4eab6d557f6941911a2ee2ff978974ca
SHA256 d73d0e8c74c87ebac92d382e712e37224a6cd60316c289c744c7611d6636a9b5
SHA512 27e749d623f195baf70081a7f3c0ccbbc9c79bbf4b7073f67ce77c9f734f1cdf352492fa1f1a9815091dc9ee5524eb6c1ea98c6a18bfa20db21b86d707198f07

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f98a9b53209646ee_0

MD5 cfb8ffd06f8700c035dd97eefaa7bce8
SHA1 a4b023112c08343055c5ee248652785e7706b868
SHA256 f23bb4e0e48feeec5cfd8301c52c452aed5e3d8521bbe53ebb5ad3948209f920
SHA512 32ffe31515e655082939e006e12a6a6bb4b156f39035296eac3ea899bc39cf2cf6b1c534fa0c55b5ac335ece0dbc919af9309a985bb2b6c1bcc997cf198dcf95

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6870cbb9284d54e2_0

MD5 4ebb6bd2a943b531f18965e253ae2247
SHA1 328ee5d459c2d390f3e49c467f00b054a4515fa4
SHA256 4c4cd7180a37d6ef4729e3a2ec3f76a4da6c6df2890b9cf70c036848f33b1742
SHA512 09500aa64a0fd9a6e5b05bdd2d8cd2ea133ff574db72e55d2d5136bc29b72eddbb9fa4417cb75f4a540a42e0bccd372b227a44c9f43ec1fb12452a28909485a3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b3af26fdb0a014ec_0

MD5 fe5c1f9b2d3d146db52d222fc4f396d9
SHA1 2ecda2fab947e81099c5941ab4aa7e5467b9de11
SHA256 793eab7171654f92716f1a5ccd93c5b26cddacf71f3043b5969b95c7ba492607
SHA512 e40abf145d05fb31aae0e9ae1d82b40ed786d5777fdabbab3606b790ecb0ce4cd440489ab884a264cdeae6cb8922cd2d4a4850d739d50db2bc0e17c77ce8a38e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45ef484a783af53f_0

MD5 d55169496416ce363141a254c3f41b74
SHA1 3517a7c0f045edf2b586d3f45533319c03181a15
SHA256 a03996bad7769ba5dd713d5cf700f4e5ff36df522270a2c67e352129af16a392
SHA512 89eb7034c18e4ae61a4ad4b884df5b682b4aae0eb9c83b026df4432b2ff5f0153efe89740f2dcea82134e4bd99037a04ecba16a1f25ae1199fe2e4f28f9f10cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c2c3466a716ded51_0

MD5 e30028195619d48c8a49cfacf0ec919e
SHA1 a4604ac2cf314ac51db911d37219f8b5f576edcd
SHA256 e00935d5978d137650d141770adad65d281e5dd4a2ef1353f61e29082b338aac
SHA512 be49437291590c2b74a0ef7a27270815762ea4483f835d263d47cd3c6429e81961569a0af6f2289f7231cab9acdcf50ef61a317ba12d6547ce4b130a3197ed61

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a3beb452e1663a8d_0

MD5 edfe6b75d21df69abeb66ab145c002f6
SHA1 83e19c6bf29a98ee32335b32cb183d31ba7bbe77
SHA256 ea63bac97645306818f8aebf49577ca64a4cba0c89d184fee15b0b2c5f132514
SHA512 b5df1e0583d97cdacdb3f149828c9d14a356e9b83d4c6a77c0b1c652a169716ee20a6f8cdf1dd611ffbed5ca09085b62a13eb3022b4dd42cca975b827f118773

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1b656fe85bc43465_0

MD5 af74a1f3fc6f0da8d53f2735ce71bb37
SHA1 6567a4fe667a21bcd50f8ee1a94f515a70c5d1d6
SHA256 19168ad38b9d6d10e001e1852e587accf0097b1df103a30b3b2af2d2a531edcc
SHA512 eb91ec5e242b5f164b1abf64d0835e60b18f917344737ac3d5de44124cc069ed462b2ee5c9274a825ad5ff08e9e6777954b135cbb5fa5b7058eb79a20302df74

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\df9da550ea6d3003_0

MD5 cb5c18114d62950ca3ff71dd19b41edc
SHA1 ec86f2b4e2381e7dc8fce096db8f1ad33a2df86d
SHA256 77c63b8db9fb267ee252370127c44c2f21c05b09babc97997171e8ef2ec5389f
SHA512 77b2c51758ee871005b11fe4a24911fc48143529abf3bbf3a3f5b86d131cce3bfd3f3f99c7ec34daa35fac2b91e8f7c1777a3d3157d5ecdf36d24511cf363603

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2f5c3269069b69c_0

MD5 8c2f358829b981c5a0763bf11dd9755a
SHA1 e89be9d95b456b7d7ac0e5f71d9247e74f96e2e8
SHA256 c6f36e07f866b5f3365c90583dc5488b121b51cc3029b7dd5e2c777d09315b9b
SHA512 981217e8ae784662b2512c0170086b3612b4215cf2d8d1e056d60b6c73a622cc9ac41d2268ca0d9e4dced1d5dc29af136951d9146376570f5700fd80924e917d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6b08cd0430bfd81b_0

MD5 5db82ce586eea56c5d6c65fd3225cd1b
SHA1 76eb1407fbd47545594249099afa7cd39f5939cc
SHA256 38b9eeca54d89d0f91d62a267fb5c5589f734189587538031f859a7330500330
SHA512 3814751cd40f0ab339f375d9307a28221a53267f16d565225a019efbabe02f44f97fca2e396fd646d151cfe007529111c3fd418649a12be5885c99af37a6a210

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dfa37c3bce11c64f_0

MD5 610152b3bca2e2f14606285702116c22
SHA1 27c1d4917768980d1f46cdef3959d434bf401491
SHA256 6485830e1234bb36ac005f33f76abd9aaa726da4ed05b3d37e5711977a574f1a
SHA512 e0997e29cf6aa56f688d75a70df9f2d35ebc567b572a0d7bb57c26baf433611f7f2a179cd10960d00358d26cc63aa250789cafb1890c26c99cdd70a6f687c6b6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\56858010a7af1199_0

MD5 189657a03c9893abef42efa4a883f4f3
SHA1 4b745cc945e71cc03561d7084d42aff354c39661
SHA256 fe4851159944d80942ed9f36317f6d31e779a2bc9b5c90a2de52426e793562e0
SHA512 174ca963b5c4c3f8646b485acc2903a4e4d10b82127726b873fd03cefb5bb7f68ec55fb3b4d77b24c5d0505ada54bc95ffb17660bf5b28f99ab17ec3895d7bca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7ed64f25e796160_0

MD5 ed6252ac4ffd73e94b1088ecfaa6864d
SHA1 7801618d8614bae81cb00ddd4d4016794167c484
SHA256 59930e3f3528c95c2d2d7b7db1ff13c617e27ed05b09234f8d4c1bdcaac1a585
SHA512 6deb500d26efa73e84c7647f2fa2aa24865220cf511600cc22be53e8504a4130b6a36abc0479e64200ef61ad0ec6a12263469ca5ac3547fb5fe42e1808edf72f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000044

MD5 55e0ebecb6d423a47e4e0d832a733732
SHA1 ce2cdcd394ecf9f78c5349a08f141a866f65f99c
SHA256 db06e2f9d5c1a5382600507dfde3292760e6bfb4fb5541a41a1eb96e98f1f06c
SHA512 b5e4eef1c5406cda0f257ca11cf767227b07e49d9357d54f5c8a184b32705627f8d5f7f4fffa70f7773d799f6e94bccde463f5084acff29e019158ce34581f8a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000048

MD5 0b8b626b0da15a1d11db3eb79631c670
SHA1 3bdbe67ee6f9d7411c752944d04434f54d8a763d
SHA256 c053796888f18f64bad69169a8fe3ca84e94bbf5912670c810c15d706291c832
SHA512 487045207ba381cd635e5358cefaa1c82f172372a08a1387552cc8b93937684684d3139b6ac49e035bd967a0506408cbe43fa62f108819c84441a94197503d41

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 327d1c4f1ddb2df69ef668766904f3b7
SHA1 5bbcc68d0f1e6ad374d5442d9ddab819099c4930
SHA256 068550f74327e0b8c4d235fbff7766d8fa57008523f927072e5520e18a8e7aaa
SHA512 754f9eb47c55da07cc0ae98e37b7888bdb53c77568a06628a108070ef135b524620540d19edf9da113a5452e4938535c750d6e17f9653a1d4d2b8019fcd61592

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 ea50738535b7b3034d2b92f569d73d02
SHA1 fef8f69a98b295025563cbf73ea27d5808bb872b
SHA256 c80617474f9dbd0c2d964a00b17c0d687acfba12ef9b16dc17e5f0e80f146f93
SHA512 adede1b0d75def0c32b0227ea85fd03814ee74ff72e34a8771a0a0dbc5e5d7d4eb25fff84280ace4bea3db3d6fac7788a1316ef9e3eff2278aff27635968f629

C:\Users\Admin\Downloads\MEMZ.exe

MD5 1d5ad9c8d3fee874d0feb8bfac220a11
SHA1 ca6d3f7e6c784155f664a9179ca64e4034df9595
SHA256 3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff
SHA512 c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 93a36de56eb76d80631842f4217bc77e
SHA1 9d0ac25ec95f7c3d7f80f107756269fbd685bff7
SHA256 09fffc3d3544b86ed2f1c8210eb1cf4343191731621c71246bf52ff753e76ef7
SHA512 eceb1e208d2c4ebd922b2182a728d14f6977d5b3ee95737e76be4c77438346bc4813b7f234cf8f8ae0763677a9f4d5cfa2dbadc72fe561704e6887d1806da28e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 02c26ca3db99ebcc2c6d2b3201be4839
SHA1 3cf7d916cbea284e894d48e2f0a2ab6db032899a
SHA256 35820387b9d52c35540437c4b1abd491ba96e72245e3034569b7ed05727922a8
SHA512 09223630276f25b19c83bbabaec26b1975a40ca9ed3e3695e5be71f2e307d285a4d6598dc2a7d920fde2090dd52620c6a42c76f9b060bd9f358367f1b7a31416

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 c87e1b96c737a99f5b97f37086c6a84e
SHA1 f6b581f317e8f225b308aaa0dbb170ffd93568ea
SHA256 0b117b6d9e49bf79ce475b08202ecefbc6934456f6d5b97e68da849d3bae618f
SHA512 65bd7af0ead1ffab037d398f936837af214603e2498dfed2b7cb82e1f0b393cfd84f23e9220f101e25a1ca932ebb94cb79a3544141171815c02d97e4c461ce8e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 400ed3c227a2683822d1eaa64772486e
SHA1 0c4f159d9c2e53626ac80df728a21a4de75a7d54
SHA256 4960da94a4902eb75dd9659324c6b4b7674ea31110ca44cf106b0335d8f12426
SHA512 b4edc4b0cd138bf970455cae23345506e90972c7cf0bec54ba7593b478b8911c417b0ad66d83012fb5620648f4f94a3cb8354be7c4bdf43701c46eaeb4b832e6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c0828362a17727eb6a1da8886efbd220
SHA1 d7566c421c36033c80997c02fc01b9d613052a8e
SHA256 4a1acfaae28b579ddf4c5c0e3c51fe4ec636fb4cc9901680f5f6aeef99137e01
SHA512 c546e6dbd85df85b89aa78f5f7352d068085621e3048ca432ded64cdf13d30aa52394dedff9ebfd53524b2866246aa560752a523b0f015c3ee16bcbb741587da

memory/2876-3062-0x000001C574920000-0x000001C574940000-memory.dmp

memory/7008-3100-0x0000020459E40000-0x0000020459E50000-memory.dmp

memory/7008-3116-0x0000020459F40000-0x0000020459F50000-memory.dmp

memory/7008-3132-0x0000020462520000-0x0000020462521000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 ed4d753265aa5e28deb123c22c07809b
SHA1 95030c13c640877095f76e738872509743972e0f
SHA256 7bb31579dd16c17f2204d7e45063b1ab2c021c7d20e57d1358a43721d1db746c
SHA512 ec0fa293abef3e04423b2888abeb60127a439f6dda7a1ba425219cc6d0caf22dab678014f04a2a5e251bab5d70bd171041f11b66f69c1ce12ddd60a212fd0892

memory/7008-3142-0x0000020462550000-0x0000020462551000-memory.dmp

memory/7008-3143-0x0000020462550000-0x0000020462551000-memory.dmp

memory/7008-3144-0x0000020462550000-0x0000020462551000-memory.dmp

memory/7008-3145-0x0000020462550000-0x0000020462551000-memory.dmp

memory/7008-3146-0x0000020462550000-0x0000020462551000-memory.dmp

memory/7008-3147-0x0000020462550000-0x0000020462551000-memory.dmp

memory/7008-3148-0x0000020462550000-0x0000020462551000-memory.dmp

memory/7008-3149-0x0000020462550000-0x0000020462551000-memory.dmp

memory/7008-3150-0x0000020462550000-0x0000020462551000-memory.dmp

memory/7008-3151-0x0000020462550000-0x0000020462551000-memory.dmp

memory/7008-3155-0x0000020462170000-0x0000020462171000-memory.dmp

memory/7008-3156-0x0000020462160000-0x0000020462161000-memory.dmp

memory/7008-3158-0x0000020462170000-0x0000020462171000-memory.dmp

memory/7008-3164-0x00000204620A0000-0x00000204620A1000-memory.dmp

memory/7008-3161-0x0000020462160000-0x0000020462161000-memory.dmp

memory/7008-3178-0x00000204622B0000-0x00000204622B1000-memory.dmp

memory/7008-3176-0x00000204622A0000-0x00000204622A1000-memory.dmp

memory/7008-3179-0x00000204622B0000-0x00000204622B1000-memory.dmp

memory/7008-3180-0x00000204623C0000-0x00000204623C1000-memory.dmp

memory/2876-3214-0x000001C579980000-0x000001C579A80000-memory.dmp

memory/2876-3205-0x000001C578100000-0x000001C578200000-memory.dmp

memory/2876-3286-0x000001C579840000-0x000001C579860000-memory.dmp

memory/2876-3269-0x000001C5785C0000-0x000001C5786C0000-memory.dmp

memory/2876-3215-0x000001C579980000-0x000001C579A80000-memory.dmp

memory/2876-3302-0x000001C57A680000-0x000001C57A780000-memory.dmp

memory/2876-3315-0x000001C57B540000-0x000001C57B640000-memory.dmp

memory/2876-3406-0x000001C5785C0000-0x000001C5786C0000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\8YBQZX7R\fpt.live[1].xml

MD5 c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA1 35e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256 b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA512 6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

memory/2876-3521-0x000001C57AAC0000-0x000001C57ABC0000-memory.dmp

memory/2876-3516-0x000001C57AAC0000-0x000001C57ABC0000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 3392ebb6207852baecc96a256d53893e
SHA1 c62a9b527c730dcbb5d0c15bf4b19e57255ea558
SHA256 00a318414805a42e0b8f1ecd09089a1f29c8909114f481f30530babab3c379dd
SHA512 f7f6a20627636932d7635aa3cc68186abc33c337128fa43fb3be2079f35ed95e3465f67f590a02a40120badbcba86585b11e5f1bcfe7e121c9d7d2412e64c7a3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 458d11c020efc6e482ed0a93ed0b6114
SHA1 9f8eac23fa6e471475f97d851c7552f33422f3e8
SHA256 b18ce2bf8d24a068139f42551ac0a5f1519caf3e63e55256b07426db97e1b304
SHA512 9684ca82baad98866cce4c8d08e75555977b7c351f19f4368e382801dd7d8a2f947324826a7e25b000526072dc919b66492373f7e0e6763128f3b56e7a984222

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 49bffd44559a24e9ba1ba8ac0f6f5098
SHA1 6cdd28cc5a5e73f53baa7a8f63651eafcbd910cb
SHA256 526ccf37939b410b49e22534eb34e9e2487b46bf3c47f5590e1242a405d41beb
SHA512 f664e89524c79ec80e2ff14f67d010d4b009c5c547230ace528de7f9ebfb29ae69ab20d33a2ff607f0213f3be42395c3f4124addc049e616a7cb358dd845e98c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba

MD5 9196e81f8ed7f223d765423c1f9bc8a7
SHA1 88f9d5c2a6908cf36b8daae803578ca9e1fd2929
SHA256 a4e2bcf7ef3c6c614c2142d3c1fd44caac4eafa86a1779ac31cba164e2d89cbe
SHA512 e7d23866fcac017762d2e2f18597124e9147f458d30038f78ba9f3a2bcbe479fe4792573894370ce2d6f93a00401231d9f01955fde351ff982a82ba87a8241f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099

MD5 d0263dc03be4c393a90bda733c57d6db
SHA1 8a032b6deab53a33234c735133b48518f8643b92
SHA256 22b4df5c33045b645cafa45b04685f4752e471a2e933bff5bf14324d87deee12
SHA512 9511bef269ae0797addf4cd6f2fec4ad0c4a4e06b3e5bf6138c7678a203022ac4818c7d446d154594504c947da3061030e82472d2708149c0709b1a070fdd0e3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd

MD5 5009982b60a0f93eac4c1728e5ca17e2
SHA1 c0f932d333b91a4b971a52ce88bc96320745064f
SHA256 2ffc0ec332938cbce14008ab246c3d918800189aece932e92bedd8adb8332fe8
SHA512 401dd0a45c177130628787b92a17642783d27b1a977833af4110d81cbf2572a159a371beb473baa07ad38ac8297551aadadd2ebb80401a73acd580fdc03964aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3df0048e20250ffac64a3b545562b985
SHA1 b0b5b2377cb53cc347c9670f177266802439f546
SHA256 939baf391399aa8dc0d21718819f0d01bcb269a146e8fc42fc28c2874ddb9105
SHA512 a703e6cc6bb9ea8b6a5307358432539333a3828a667b6ff9c7daa792ef89f28669a9f83f3f4cff9ccab595c8fa5a0579d1088360724718d53d25be9b6db49bb1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 c177880e88ec85003742e273b0b2f24f
SHA1 484e85c5134ef1133b3a9ed70375d713ee13e333
SHA256 efd32c8dcee51dee666d0ee6341be371aaa31cd1c3667d9bf16b1ffa9b64b60c
SHA512 3cbc82887d79ac2ac88498b66e5251666312d90b82632ddacbe2eec9545f4b34b67b42bc5bf0d8537fb1569400165f1c184fa61840b1ccfa47667ee230a71eda

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old

MD5 50768687778f2c0632460b303ad69fc7
SHA1 7372b3374fca28a2c49be942c170dfa0e02831c9
SHA256 15b9bc59be50843b659dbf42c330ca7ae839b653b40e4b509e5632aaa2b50c7f
SHA512 cd318dbd75f8a3e3fb1f385c5f4ae1b6d5124d6e27444f70bed7bfdf7040788e247d405b553ad07dabfeff3c5991fae5b3c9d798e219010e22726ccc63b7e394

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f1a8439322a7bf6020093a1045bd6c29
SHA1 222b8f4f9fd09871e0003fd9f9b77b1417211c3f
SHA256 5ce11243a8c2461972b8d9a2d21c5d9712aae4aca7f095538dcedb178725f946
SHA512 c74b44d4c86dde48f95f7517c6df53da0d7dc4cc20a86e9ea654d9384da5e85d559f67efd38b12bd015a6e00e085e7cf22959c643c5ead8dfbae6025bfb032a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 396168098daec247ef5de09494d2f982
SHA1 f32a75c7c3c8611e8e2e79753f8a86b951028fcc
SHA256 06bfbc347c8d6bd1cbb21c807a94811ea8c090d1fb78753a7fb7bb0bfabd8623
SHA512 f34ae4dd6654b4f348da247850ac2cc70af9e9a60baffa6aae82ebb7be36073b12f2664631488fafa41242ce65e6a244f930d15a56b07da4474f79d8a9a92393

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9839f813295a0e5619155f9098c5e06a
SHA1 d7e0af0d76731b2bcdf81a469509c0e181325adc
SHA256 056da864cd28e4a8b254898e8289a0780a75c9c6e44ce48c929884136029ea0d
SHA512 fc6fa9fd375010bd0032fb938bf4e981093fd3738bc85ecb42423b010699b5a8f96a1f9df6d81fea720e87f509904cd0d4ac8889742eaae2c722aba2ce3962c1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb

MD5 c594a826934b9505d591d0f7a7df80b7
SHA1 c04b8637e686f71f3fc46a29a86346ba9b04ae18
SHA256 e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610
SHA512 04a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1a30a957daff95f010f7d3ae5c9d4030
SHA1 230942e9a470cc6ee11c3367f6ec5e56ee6c1e16
SHA256 09fe933d5e744f878a6931e1cb3f73f0bff267d79b993e3b19c2f43c93806e41
SHA512 b8270313dd8427b3fa4350cf6dedad68a7222232fb1cb0da39432c235c512a33f703d9da63cfe8e9cd96775314c3ac4db2cb114f3fa4fcec2deb468451271dd6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 bd63a477f3a4bbf4f64fb370b2ee0257
SHA1 28d9f49a9905403bec9856e124c0642d43f4c6dd
SHA256 3e65189ba88916e9add8008b457df4ad2421496bc196f5c492d7d006f392af88
SHA512 ac958b255a0e296f585620cc2214b5d7835d5c6b9d15b11fe9853566308973d47fb2bd8bb903e7c76b6555f1bfdfe7b9f12435f877f70ecd3aba986372396f3a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9851d2de7b2fba8bfd2a2b5ab4ba1c0a
SHA1 718d26e868790927b44277b1116ce53c516fe247
SHA256 274d4905b1e2eb95f465d68a208bfe81d72bfe977ffa13aef59a2f84786fe4f1
SHA512 43ec69f7839ff0d8e94b35f4fbf21c7142a12652f499cbdf4254aa47cea6a28f0cd8b9f6281f28faa47d8b57d8d68ae66d138ccc5ecbc8f5c6d415b4c1112304

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\975bc4a25b5db011_0

MD5 1bb8bbd5ddbaddf47ab763e8198e8641
SHA1 fd20232367f243344d84e7e23b812191821455fa
SHA256 8d09aff42dc38a92d73d9a4d2f3401d441cb6b65406bd39ea5884842dd745d92
SHA512 0eb7e1d55a2a298a529bfe0f6281bb135b793f0f8c955330813520d6e77971d083c33eed1496a0a3848febbaa3ac78ae0fe4b25b2f83883f53388e1a3f97983e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2d1a60d94cb115fb_0

MD5 3bcc926d1ee6593507da63deca94764e
SHA1 b8583e758fa46e012bbb98fa92d0a82fdf769412
SHA256 8fa24ec5623516b79b659f908240d76578abe0cb333e3f8769356fac8e61b2ff
SHA512 0cbfc02c7588ab2164fd0b044a15af839d26c85436b1621a98c872f4299d62bc999e763627f03c450d5be78f385f16011f89a8f195e7c2827da9f3b702f7052d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 0ba28d51f75c899470ae0faf03db081f
SHA1 27b90bba25a2214552a9bc0c84ef361b1d1c068c
SHA256 de5c166f75a2df7cf95115b67d8fa27006f69229d08ff76ff46e5bb8f10f4cd8
SHA512 aab6e79b3aff62def0f05fff9aa6c6bdf36950c03d798770ee567ac4f3409d6f829d42fdd9cd05a111a0675b29d7d44e5b830d0719e1aa6ec78ba5095762d90a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 b74e17b4f20862a1a55431fd4512c5f8
SHA1 c777d1f68697a95c77d2b72aad9d541e844b1216
SHA256 ea021dce9e2dd84168d1ca217b9828c5cacbff6dcc4bd3345975007282e02491
SHA512 803af4699034f05178c72a953a64d673ba1ff7540e69dfb2b5ddeacbff0e31d8374ff95be5f0b85b115f34cef42386be492f0d0eaa1d1346656ad86b238b2865

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b63c3187ebad1fc9b9772b2314d8e14c
SHA1 86930bb989e4340f9649a50aa6616dc153498410
SHA256 c342f24d33679873bf4383ae652b4c9ed05b5e858d54a979cf24b7ce1145cca7
SHA512 108f62175302e7914a56c8f8e77f2fa8789ae1c46a80fbfcc0b738ae8b7aee137d4f6ad322165c746116afd472f75acdc13e573011d90f76fed0099d54523135

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 05299a32db6e5ee4f57c90c665963a47
SHA1 835b6d09910287624524d88971c0c32e0641a002
SHA256 b03cdcc41705c15f5703585b89367be0bfb78f2ed8f220c3c734c48b4df80482
SHA512 3a60bef6e4689dd9012f74728d48d7fcfc9a282ed05b42eceb9c262fd671eff9b01dd60ea4f4270e805dccc86134917e2701b6f4a3b5b606b6d0df67fd8edea8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

MD5 5fe7436e3e6996fa3c86f8c94bf23084
SHA1 c5436d95fa875a5fe500d4f2b46441e336bd607a
SHA256 fa23e42cafc28435fb18d33f5a7ed843c593ab2a977f88989b8b4a8c61d4c93a
SHA512 569fd7bcf4a513b2a28973ecc19f1deee3ce17398d3193f2598617bb95a0333083c09796cbb3e931a3b5f278522dcebd91ea5860734b51791c0070177919e0e6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

MD5 164a788f50529fc93a6077e50675c617
SHA1 c53f6cd0531fd98d6abbd2a9e5fbb4319b221f48
SHA256 b305e470fb9f8b69a8cd53b5a8ffb88538c9f6a9c7c2c194a226e8f6c9b53c17
SHA512 ec7d173b55283f3e59a468a0037921dc4e1bf3fab1c693330b9d8e5826273c917b374c4b802f3234bbb5e5e210d55e52351426867e0eb8c9f6fba1a053cb05d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9e691bf6a4a47532f95ba230bc584595
SHA1 5da28601ac14c97dcabff551f57a34df967c1b6f
SHA256 e30106cfa29b4aa8c3b344070e0c7afef46f90d9125d5421049eb33088d0f4bf
SHA512 a8733f142449bde2be6d0c8014562b315305e9727b8e0232fca501cb237203cdf60cc5c4c7bc1a769a312d44f9f771e6306a04baeb38575924afa69690073f00

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\trusted_vault.pb

MD5 fc87c04a53f33581fbd595fdb40caf77
SHA1 d4209f58bc6bf83f58442cc1dd3e107ca50c5606
SHA256 4f6ab25586bd50efdda1abee624a769e93bec6c9d02cd5d6cd73908e18ef57a3
SHA512 84282389f9cd6da9ec991abca825bbdebc920c4ab7f67363f6223deadc3445b2607d8367f54962a3d20db5c3b9322e4d840d29ab2b13d7a322efe904b36eab60

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\trusted_vault.pb~RFe65312e.TMP

MD5 3433ccf3e03fc35b634cd0627833b0ad
SHA1 789a43382e88905d6eb739ada3a8ba8c479ede02
SHA256 f7d5893372edaa08377cb270a99842a9c758b447b7b57c52a7b1158c0c202e6d
SHA512 21a29f0ef89fec310701dcad191ea4ab670edc0fc161496f7542f707b5b9ce619eb8b709a52073052b0f705d657e03a45be7560c80909e92ae7d5939ce688e9c

C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\04350e385f699323d87d961acb8d3b8165440dda.tbres

MD5 2c3e5ee7cf74f085fe0899965b730472
SHA1 5bd3978d3ce8f51c8ca1387b0087dbec5d2bed61
SHA256 2a0d2d5fb1752bd59d7553807eeece6400aab9be62769dcf46593a36888bcf08
SHA512 2480131455d366521dff279eb51810929ee5788f853d6c00df1c8735c79485eea0d406cc4152e3202a52d73602b0a652c55bd5b309f1d7fd8ea3e502b0d3a195

C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\ba645e1f7664a7c3b077a53ba00f131819fe2190.tbres

MD5 9a9254a2be96c2288834dd9ec3b0350d
SHA1 e59177a9c96aaaf1694097eca9263de09f3438eb
SHA256 1ad17fbf702318d827dab771fc44cab4e3f1be5bdd372d2328e12c0f77b89cc0
SHA512 638dd87b843761030ae20f712301290c72b633d8f0bbb2c4f5b83031c3d6b4f4141f02d307e207c41304e729326e1849e30aa70ffcbe038cc076dc1be145b296

C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\240f3f9f72d7d784c104529b4b7bde196f9c62c0.tbres

MD5 227ead828eafca44e5b3dea06ed29f84
SHA1 40d9ceea414bb33e8a7228198e7479617d0d913e
SHA256 ac2d640e841dbcf20f9da172a89e23233d4553708cb0209c42074e14051c7e34
SHA512 663e50de58ecfa93540510b180133fc57aed0b26fe02bca655f3e35b364829c6198f78099392bd5f739086b064f5d7c5734ad2fa50315d1940705d110cfdd208

C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\fe5ba1863d71aa3fe6c45fb0c74e5c5cb9dcdd32.tbres

MD5 5feee4437856f558ea9520c47eb2c93f
SHA1 27c01f4358b6b1c35f61fed7c3d9ac1779183f73
SHA256 459ceeb56a1d22a667a5b6f7d4c429d614cbbcb9767cb3fd82da0d6b34dd1a74
SHA512 ca1853483e6f7aadcc013133584f2a4ca7cd04651d06461cc6e5089c888f1b02b61bfd7463a25260a795b0616a9ca17e6e9c900dc8efde6b00ac87cdf6292450

C:\Users\Admin\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\edb.log

MD5 557d805ba1bd521c44c3f2c1c6c6f5b9
SHA1 ffd3f2de6cf7621a02a3e0019cafc0a415510a25
SHA256 e7ab9ea3ab6f80b21670bef1acb9913a259cd328c65aeee1c2d840e48d079972
SHA512 2126742fc778796d8c806bb451df07a3a2bddb8cb9633d426f062adcc8e124babd90ece82030d614221105ecef6c65dd51b6dbe08856dcb463df2467246def52

C:\Users\Admin\AppData\Local\Microsoft\Windows\SettingSync\metastore\edb.log

MD5 c63cf59ec444d7df0b3c9a9c4dd2bd2a
SHA1 6657874f0f48a5216db1502cb58a355716d9db1d
SHA256 ece05e4a7a1451d40055dbad1386de600e4058435ac133bc93869c9f1413fc74
SHA512 631bf499d072168d8cee5dc66d04b6c5116e745b05ded669fc34381cd8856c6899627bcc31809d88e4c7d5d8c223ca868e2a9c44337a531365082c9180a47b3c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 7f53e48906d0976181e74b0f67b7f9b8
SHA1 ddb3cb2854e2ed18dd84f76c6d058c6eeb366e34
SHA256 b386ef937efca41ff249b2f3dd8d7612be690c2fccecd9c676f605edaefabc6b
SHA512 ac0eb3d1ec45a35f84a358e04b112250c232ab10fd649e391400b6d28ad23f0378a40f77c49a887e402583f6175c4bf88012b1ea751445548754725bf58ec071

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 b7d79520e342ec10554fb94a1ce132d8
SHA1 9b60b64feb46ae30451f69d244294a5027b34146
SHA256 1aa62c89c2f3e0f9c685dde8d587ddb08301beb4723a20e6440c095c9c5fac5d
SHA512 df48fa33cd25879675176c96266abcdc25a68640fe34745b6ae009e97d4d1f6cdf19e62c93d82fad6a2bac9e57aa952f05be4e9fa1e9888a847a947a16fdc80e

C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

MD5 a2d5c41311177bf18a795638cc4e2777
SHA1 40625aa169f3bceb6b96060b8a0634bf8cf5eac1
SHA256 63b9d5b599c016878ea7fa9de88fd0a6e89b09210475f4869b0d8e5a71946c23
SHA512 e5c5cacd31a05a67449ea44fd403f4585960ff3a45104bc1044d2cac2acdc1a3e309241092a327df4f186367cde75355c7622d213925efbbd813cdb22fdc7ec0

C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

MD5 ef6d9816dbb86d4440065f8e3eded725
SHA1 5efcf1df5b828b3f0b7370054bc32e1a6466ae19
SHA256 dc60734beccff11f8eed561c041c3fc698f58637571fc9ac2756b34d016915cd
SHA512 12b470d020679294a08747a099f5184c7d013eefbe8f975d5d18f53bc806f3370924f17798e6426abc1ae81608ef9e9f1b72c72356e15d44e8339720e7787efe

C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

MD5 861844a1e60337f63283dd46f927efe7
SHA1 58d8936597bc3f4486ad80a30009c5e7d0afec82
SHA256 40343f8b1fb6d58b69502eb2c7bb660484f6e8c2b9bb188576465debb6067227
SHA512 7feb5b6bc8d9b465da384b5865c3a2d20c3079ebb44891da4915dab637ad3ef3ad35f7a489d9b5fd1c634ffa2b448e19c957c639ddf94e9d610dd6272162dc6c

C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

MD5 da41080686a8df7fb44814e91a878d49
SHA1 ef083e6f0d4890d7d3b46b39d806d729a0f12a73
SHA256 d4386b1d5537f49ab45972ea22f10f297fb679ebdb3df747d11cc8ab80519c3f
SHA512 5c5011e525a1edc30165b9d2967313cbaa796132f2fe174b95199323df9e6c5d3d3cd0e4aa3abe45a380dfe6ae4a1bc91acfe6725d3fb53076f53cfccd3e0595

C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

MD5 432120f4fb25232b6a804a36da4f5328
SHA1 abe8acc3bd56676bb12c9a517bc2acf677d2e20e
SHA256 82584c4c81325063402746a148c5a60398423210c0e996a8a1750b451730822a
SHA512 1395efcd87eb0eebeab39dcda29e29cf9d50e044f29a7542194fbbe7a11b28b57b00f8024cfe61823d6b82edfaad128612e888ac78522e9a48e116fa3d71e9b5

C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

MD5 d800de61671096f53881be7195518f25
SHA1 4f02a593cf5e9f843251f92f3758c74c1677e099
SHA256 9cc9664c9e569e24c9acd9808828dbc810266799cbd7c6668fea7e2df9cd966a
SHA512 6498919a01b1f5c1c54aa3e6744b6463288d4679de87de15a1f34c741c069ab96c09b42eb5a3d907130454615142a34876b07f15bb8fd46cf0390cdca300fa2f

C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

MD5 87cdde7e016c140b9faacf3dbfcfbe7c
SHA1 647905d16fea1c9e2c1f0f9c047e52205a2be735
SHA256 54e7d056eea8c99dbec6228544cc2f2bf7a3db1fe40460f1d6a58a049b61a4cd
SHA512 c39c5644e97831c0e4c68353a9a4009fee2145c9b1d58be37795c7342bbf83c4de33e3196b03877b33e488ae81520d706770b4a78f5a7d599f70fdee194b85a4

C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

MD5 6c4a686c043d90677c4988d55b73d0f1
SHA1 75ac335190ce47f87c94a9c6972a9fcbdd32d975
SHA256 615e33a4de645b7622a355ee4078225943a63360e83efedfe29e7dbac879fdc7
SHA512 9e7d7f0fe9f5bda4d5db2827fdbd771d0916129bad47984f5e9ec6786dd8882428dd96fb8db653ce552717d2b308f84eed5f3b4eda2916b27955a02bc8f90731

C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

MD5 bc4e041341b22ae54df9b749f2078870
SHA1 670467df1b3397bbcfe0cb898823e1ba1d0a8125
SHA256 78fcba77eafef1c4bdc5630848d95f46893217181176ee7b5e0cd1e56f370e25
SHA512 1ad7d9505e5006dd488fa0f54e0016ef1570e9c639542372bdcbb5b5ef8c39e7054fde64bfe097c3d8932847c4bf0f80f1c47f0a2e83254b139e6268eb946883

C:\Users\Admin\AppData\Local\Temp\TP_778D.tmp

MD5 9d55cbb4139d6c73d3a5d62f40b6bc72
SHA1 04d499517b456f9af6487c6ee1cbde5e950e221f
SHA256 d49496437271e439daae5012544631baf161f206e65decc1a7beb9d375a2c7ac
SHA512 7b55308df3a614a0ab69c17f0f963d858c0d7ee7e0422e8333ebb73ddfc4b301451be9683e44b5f23a9892c6f0a6ae2c0cac0ed777fc8f9fad14ba90f6be5eeb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a

MD5 b786554392ab690a37b2fc6c5af02b05
SHA1 e7347fa27240868174f080d1c5ab177feca6bd84
SHA256 ebe47cc89c62447316148809bda9095bd07bd5392a99ab4b8ac8b9f6764cda51
SHA512 b71cdb76464a775fca909cabd0a7435c34de3ee4e19c40f5bebba6415295f0be2f82532a2ecda043c787ea4e8c23fd4e582a4d4322923fdf603a56e3fcb8b567

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f324d18558118e09b5c0b07f746145c9
SHA1 2df287e52a9e9f8f4c515ae4c146d0702a5112e0
SHA256 36dfe6b4bfa22f2468560016bfab57c289087442fc07c4e58c37db021754b397
SHA512 4ea94593c240b6a641fae2f37d3a672209508c986e9c2a05ff09e6fce0059379209b073f60756144a659fae5d792bcf38ed0f11f2ae6b8e353e95e840b3b9b17

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

MD5 49a9b4908d434007e3d0a900335b8a07
SHA1 b0a8142bb5f3a5671c1a48b4f20e3827c45aab7b
SHA256 6e6870526238b9f902366572a1cf12d3739e13a2fea1954c7aeadbccd8ccd63f
SHA512 f7b01e5a355f89392cce74b6314d6fe093caaeef3a26336e91c5213967e8262ef6abd85232042a6d6e890389cc1118f70c306a9a18701575a71623dafbf7048d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache_

MD5 de07da56e2044a53f85fadb178a00cea
SHA1 0fee5b7591edb829810c53185a17ebc5723c8a5b
SHA256 9ee1ebb4b0fa050e9abb1a2a234be20c3d1a86a9d125b401e8b0d25f2e84bda0
SHA512 90b590b89e6901d3beb645bf943af1d59df4479fa5a7472dd8169e2e74b12a5226f2570f0506cdb1880e3d8716e537c0652274d5a2c41821bb1f0f92d3f2fd12

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 c6e49d7dd33aacda412d75bab2ec08f9
SHA1 480007fd1b6f1787eca0bb4d8b5ea4a912f89a6e
SHA256 c944c6eec004583efec7d4646bcd61b3446f9713f8c8e8ceeb52060bc66b66fd
SHA512 c74af7bf8e9fad139905da784932f57d23ce76172e1b32e15619c70c321c4ae4f9c3382f13b8344c3fb8aaad25ea730dd73b34d4ba0453df629412bf723ce99c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 ee72cebbb9b246fac48a2a4bcdd951ba
SHA1 ff5fee26e2fe5417e18fbcb079dee1d7ddeb6e9c
SHA256 3e8d59940fd99d5b42a8ecb15b324c71a6e52701aa03219870a93d49b8e2b7ed
SHA512 43478b62af5afbd1315f5aa64cfc3d639e3264750cf3601a0fc6df36669df939a90954c5841498330d583e51d8615d191357fbbba3cfe176da088fa2fb9a4d8a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\794be9c79cbc46c7_0

MD5 8a8195707bacde47835faca1b111b978
SHA1 481f286545e53aaf29857f7edc56968ee4a5b4f8
SHA256 add0d9859bb2004e01311765206b9b105ac0ec248f2f7e87f666cd965427ea9a
SHA512 737d6d157741a4d17154cb370654d73801381464f447e4db8c87caf453438fecf03cbed3f455423f6b8889894ad233c0352d7af77d44229347fcd2d8be44936a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 927ae457740bcfbb4a0379cc866cec33
SHA1 a393ab9ad1b242c5e2de052b3dc59c11f9235912
SHA256 2cec4eafc9f69a52d2fda313c29b0689c04229434885735cda6a3bb46ebd1cbe
SHA512 57f3a66cc2ead92e52763ab1f49595b83672477f64a7ab266f3fe1d7a8873af96e60ed5ea58155c45c178fce3457f8a7005b86af92fc03e709f25d92c84fe259

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 8409ac57159d74d5738dc4a7ab870d09
SHA1 11b7967da298ad8ab5c52499eb865e67133da858
SHA256 84bead90c0e05ca151caff98690db15dad014f07f5e414d6860653e348b95d6a
SHA512 9c3fcdcb42f000dcb36ca40a6c66c5497989d06142532a77ea59eaca1744ad9e27703ba0e0e79dddd908520170064cad1944c197fdd271b2dc1335ec24b22efb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

MD5 6a53ce39d6b7b84baefa752c49492bb4
SHA1 563561bb32a77ecd11eeef89f039de00e8cafbea
SHA256 ddc1a99c8a6803cc3db68f66c64fa5442f6e75bad565485a6650744a214b2358
SHA512 052f9450aec5c38f517965d0aac0da85049e7400181448b20979a5e6835b201a016b86d897545b3b5cbdd6ae404d1075abc1eb3afa032fb85825a58144967f44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5dd141b91c8f2d51b811cd7fb532e0db
SHA1 1eff2c14b32280728c29c346b2a013521ee50e89
SHA256 d32523949a1f1480c3af905c805e4f73cc6dbf9101ba8d763d363a5ab2df5ecd
SHA512 22d60f8b69d08c25c68827a75021ba01e31cc22f3937665495b6ff60a50c77893173d01e01d16126e4c9ee20fc29ec515f5e2ce58f0790438505158f8b49e4ad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 ab565f192050910eb06b56983f5feae1
SHA1 ddf565f37b1beeebae666aafdd9f5dd2c289b6ce
SHA256 75198ba317f6361012156edf5ca70c46d4ae4bb0ed5a91fadbf5d3502b25de7f
SHA512 cbb799603563025ebca2073f0d684a8e64790f4195fd5745d48757d03fa4cfe69bde026a3c020676cf147276a3a59692e1d4d931e5e49c24907c85ae047ae945

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00012b

MD5 7dd1f6bdce237453342e89e26e403e0c
SHA1 344c8c25b3abe690f170120fab94833ce457552d
SHA256 65bff8774861cc3a8d60abbef5a7b5ae13b3ca9b11c217bcb7da9d63a2c8bafa
SHA512 96943909523456329ab70b81e0358608254b5c3e1264e2df704b2fa741b34bf3d54325a1e75372b1e54ee115f90ba1815c9a34785c90d3aa842edf2e010bfd55

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 0ec17620ad3cc37fdb703d3386baf4f8
SHA1 34287b7329b297a1bb0d1ec22cbf080130fb2eb5
SHA256 6f17865b0776630c23945271e6512fe26ef1433bf63689e0c03a0b989715aa90
SHA512 ef1074a1d3e4fed0d3c9de6b4e37c2282e57089753c688a26a2f786b012ef7af3a7465526e044b8f8af544982a4ec2e48c01b282f0d750bce778e8dd80a13dac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 104bb22c4b88de51ea5654084fe77dff
SHA1 34e11f1eaaffb8cfd924577586833e70999c0d2e
SHA256 22d3303ea342225f240f52cff0dbc28dd54f57eecd78b5e3806b81707972ee39
SHA512 fa6eaa3ec396e4a8fee973c90938ab558767fa94dd95ad119b7711c51842811e8c0c7d1729019783eb27b79792311e6b1fdbb44c4d8486bcc72eda85e345f042

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 a0ce48f036d8a92e05ce8fe4f92e49e3
SHA1 6d5ed55b51a7a4c5977a99cd491ed2808312dd1b
SHA256 c4b06946fdcf93d556421db68a946ca46169c1cf30c25877dac820f626ae3c35
SHA512 6c790535bd32acde7f9a8750048aed328be6a113d61d6878ee20150dff511df7cfdce424ff5d31c88df017021f9fca9f29be91c986482e0cd0b64fc30e452d3b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 56fcb81d5c91d5cfeb04bb292841b43e
SHA1 b0bb596c534e2793484fb74efccae35742a4b276
SHA256 6e28d4bc46be25e5828e6589d1b4ea92900a40f838b80abc7f07c35c54e0d6e3
SHA512 89fed0695838ef9a249e1af99365d83500ca96d988a99a8440845a93e814cc73f3ab56970bf4448074613d0f3174a15485b14f0173daba625210e253c0f82138

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.microsoft365.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\738184b4bb16e32c_0

MD5 5437f5601da735b724f5b4898e7fad1b
SHA1 4e0a74f06c4b4f6d6079ce4f13ab863dc5c28e17
SHA256 febb5c8e4d14b40b3cb610a1e335a34fa00eb904069307a068dfa73e05cb9711
SHA512 7858f76de15e8ce0169d1227ef3fa49f347be668f087efebb174731ce2526af15d577b6697921f783fe4828c26a20aa29fef766c31f4cd82ae875184d6cc1a15

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2fdc0a40e64c8786_0

MD5 cb4603db16f211d618b24c5f70a1bbcb
SHA1 a0dec307cecf8d0f7611d85ea69f37a73a2fe9bc
SHA256 2cfd65df0a8774c344c0e7c3f2ed9e83821c4a419c75ea5f6a43a8bd0fd93f0f
SHA512 2f2ee803c31ee05ef271c45bdc3487f6dd8ca9ead579f47263a0113a928013e2e51ac9511e8f93b768553bcaf7c80b2a9d8ddf9656599776aa8595c68ec30993

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a0c43b31dfb24280_0

MD5 f55b0f3b93191c66a2bcd289a49a82a2
SHA1 4e85d5d01d3f9ac92b61d00c6408e227d4739a46
SHA256 9709c6911ff53dabf62d59983d90652e901ef563969858f3e321fd1d5b6279fd
SHA512 9ad2476f9bb2ff716318fdae3a586c93228d7f469a44080ebd54b6128e115364756dfa19b6124cf0ffda215c899a4ed0536e7e2ae8ab8b4779d7a0318916dd8c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 857e298e97c3db5f09c60b10276f9ed2
SHA1 c2080a0718be85d50e0e4109868070653abbb455
SHA256 3d5584cbde75404d5fd7a713889e477d23bf957741681419b9e38100dc9cf672
SHA512 13ba1add05d8cdaa7ceafa66ea3b901d117b6123ed915aa18616d3e9b3e5880d377d320def6fc7cae151391d30f9680b172a92a3982237ad271b78f1fa6865c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 fc12e1ab6289b0c9c25b2be2698d1c0c
SHA1 8f2a71ccebb7c32b835efcc1d0a85fb00134269d
SHA256 f01bb97cc902ed48be6e241d4a30d27ed1ef37a2ad7ac446cbf8c155e7fd7b72
SHA512 ac3c8ca5871cccf20d3fa9db6b371a3a90cf79fc6436c6829b326a1f8009e47270fcbd001e750b8c4af5b1c79440c816a7c9a41a57ba97a1ff9ccf86fa34cd18

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 65c98de703b18a3ef122e3feb3e4a215
SHA1 4f918fd30a9fa960b552ef0cce5fd948e99fd0ec
SHA256 20d5d64dd8cf0eaab03b46a069c8120cc6163372b52e4b55b5588961fdd76a5d
SHA512 8b0f5bd51297fda166f1c597411735137a49b54c0427afa6ddaa4f18a84f90d9b3aef88dd8a1816f55b84d75d7d474be45cd8b9581b6840037198cad6a78720e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 75a5a4181f55e23cea5bf1e17783988b
SHA1 9bf4693c6c466bd05d4c5309503ac6b87ad2aad2
SHA256 d5c18f981be981da5dacbb726aa17535e2576e7065de55f1564f3ff4dd4f4b71
SHA512 af86604de8456aea3645b3df66eb03cb175f76aa951502472a780abf6ab2c39d44a7d524de919daed2400a848762bf9d2342c4cb085704e5b42418249a769e3c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 e7f7b9a69e96d3831affc8c37f53854a
SHA1 9b83595c6ace204310932faf43f30acfd79d8229
SHA256 997bd3f5be7c7dc51fd0c65d52ee232fd8ab173703627b0bdb1aee9ef6054fcd
SHA512 41b45274a6bf61acff11032b82983597b1e72ac55607303a7e663a90884dfc54a944b72cba4074e23db51007337983639800b39828879ef521352d5e94067d12

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

MD5 374f114aa9f63f819e2d034a939633f1
SHA1 245c9c21a880db2f717dbd05f082b280483cbead
SHA256 20a27052ab904bd55ca87cd5b5e5a44a64498cd4ec966893133c659412b6ceb1
SHA512 2bfbeaa88a0507e046058da3b759a5355956402dce873663f8fb106aa87f7ccdb0325e3e4e0dca58d5e9b21b4cbad3e2c5697d8ac116532bf5b8ad33bff06f6b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 89132bc5fc6c307316cbe53766663065
SHA1 0f740be2f1766b640098733dac1ab213fdd76cd3
SHA256 72c0e197c599f87bda0546151cb434d4b5ed7e81f5f8e7df839641230e45064a
SHA512 c8133487eed60c41fa0bff5fd6857f826750699f5062ce8c8cd54d392321689b045dd073a924a0569a8146e01f44309ea8d7654e82979e69271e1270588b9e98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 168c728cd9e3649eea76ef1922022882
SHA1 130a3498b1a70cff44cdf8c3d5a92731e642d51b
SHA256 d9584ce699351665355b0c2493557545703387ce5c01c7af585966d2e3a1d6bf
SHA512 025726cf2946f64024d026a19b46ad704ed073f5ecc330b133de6d333e02f73f7834e32bd8def0849509233a379ef987f3c359a26b158d0b17bbe5773cee51f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5c6056da17a1a8848b7d6165bd22cf46
SHA1 dd63b373d7a155a9b2c8074e6d9fdd1b18407b6b
SHA256 2397a9265a5c3456143ff864f5ab57cd221fe68ea56384908306fb002770a6cb
SHA512 5c55992e76dedd2a2dadc0ce004e4abb48031983108167beb90d78dceb525997e9670ac579a7538139d4c7038df9d84e203466b7a03fc0b30252d74fce3726b1