Analysis Overview
Threat Level: Shows suspicious behavior
The file https://cheater.fun/fortnite_free_hacks_download/ was found to be: Shows suspicious behavior.
Malicious Activity Summary
Executes dropped EXE
Loads dropped DLL
Mark of the Web detected: This indicates that the page was originally saved or cloned.
Checks installed software on the system
Enumerates connected drives
Adds Run key to start application
Checks system information in the registry
Drops file in Windows directory
Subvert Trust Controls: Mark-of-the-Web Bypass
Browser Information Discovery
System Location Discovery: System Language Discovery
Enumerates physical storage devices
Enumerates system info in registry
Modifies data under HKEY_USERS
Suspicious use of SendNotifyMessage
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious behavior: EnumeratesProcesses
Suspicious use of AdjustPrivilegeToken
Suspicious use of SetWindowsHookEx
Suspicious use of WriteProcessMemory
Uses Task Scheduler COM API
Suspicious use of FindShellTrayWindow
Suspicious behavior: GetForegroundWindowSpam
NTFS ADS
Modifies registry class
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-08-24 15:51
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-08-24 15:51
Reported
2024-08-24 15:54
Platform
win11-20240802-en
Max time kernel
150s
Max time network
153s
Command Line
Signatures
Executes dropped EXE
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\Downloads\Setup.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\nsmC04C.tmp | N/A |
| N/A | N/A | C:\Users\Admin\PCAppStore\PcAppStore.exe | N/A |
| N/A | N/A | C:\Users\Admin\PCAppStore\Watchdog.exe | N/A |
| N/A | N/A | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
| N/A | N/A | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
| N/A | N/A | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
| N/A | N/A | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
| N/A | N/A | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
| N/A | N/A | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
| N/A | N/A | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
| N/A | N/A | C:\Users\Admin\PCAppStore\download\SetupEngine.exe | N/A |
| N/A | N/A | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
| N/A | N/A | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
| N/A | N/A | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
Loads dropped DLL
Adds Run key to start application
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000\Software\Microsoft\Windows\CurrentVersion\Run\PCAppStore = "\"C:\\Users\\Admin\\PCAppStore\\PCAppStore.exe\" /init default" | C:\Users\Admin\AppData\Local\Temp\nsmC04C.tmp | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000\Software\Microsoft\Windows\CurrentVersion\Run\PcAppStoreUpdater = "\"C:\\Users\\Admin\\PCAppStore\\AutoUpdater.exe\" /i" | C:\Users\Admin\AppData\Local\Temp\nsmC04C.tmp | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000\Software\Microsoft\Windows\CurrentVersion\Run\Watchdog = "\"C:\\Users\\Admin\\PCAppStore\\Watchdog.exe\" /guid=E1CB8DFE-5215-4859-82E0-AD3714D680B0X /rid=20240824155339.225240982718 /ver=fa.1091v" | C:\Users\Admin\AppData\Local\Temp\nsmC04C.tmp | N/A |
Checks installed software on the system
Enumerates connected drives
| Description | Indicator | Process | Target |
| File opened (read-only) | \??\F: | C:\Users\Admin\PCAppStore\PcAppStore.exe | N/A |
Mark of the Web detected: This indicates that the page was originally saved or cloned.
| Description | Indicator | Process | Target |
| N/A | https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html | N/A | N/A |
Checks system information in the registry
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
Drops file in Windows directory
| Description | Indicator | Process | Target |
| File opened for modification | C:\Windows\SystemTemp | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
Subvert Trust Controls: Mark-of-the-Web Bypass
| Description | Indicator | Process | Target |
| File opened for modification | C:\Users\Admin\Downloads\Setup.exe:Zone.Identifier | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| File opened for modification | C:\Users\Admin\Downloads\Setup (1).exe:Zone.Identifier | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| File opened for modification | C:\Users\Admin\Downloads\Setup (2).exe:Zone.Identifier | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Browser Information Discovery
Enumerates physical storage devices
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\Downloads\Setup.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\AppData\Local\Temp\nsmC04C.tmp | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\PCAppStore\download\SetupEngine.exe | N/A |
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
Modifies data under HKEY_USERS
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133689884373821122" | C:\Users\Admin\PCAppStore\nwjs\NW_store.exe | N/A |
Modifies registry class
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4272559161-3282441186-401869126-1000\{9BF340F2-F538-4C9C-AFA6-6F6CA144CA88} | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
NTFS ADS
| Description | Indicator | Process | Target |
| File opened for modification | C:\Users\Admin\Downloads\Unconfirmed 795269.crdownload:SmartScreen | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| File opened for modification | C:\Users\Admin\Downloads\Unconfirmed 753091.crdownload:SmartScreen | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| File opened for modification | C:\Users\Admin\Downloads\Setup.exe:Zone.Identifier | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| File opened for modification | C:\Users\Admin\Downloads\Setup (1).exe:Zone.Identifier | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| File opened for modification | C:\Users\Admin\Downloads\Unconfirmed 588670.crdownload:SmartScreen | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| File opened for modification | C:\Users\Admin\Downloads\Setup (2).exe:Zone.Identifier | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: GetForegroundWindowSpam
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\PCAppStore\PcAppStore.exe | N/A |
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of SetWindowsHookEx
Suspicious use of WriteProcessMemory
Uses Task Scheduler COM API
Processes
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://cheater.fun/fortnite_free_hacks_download/
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7fff136b3cb8,0x7fff136b3cc8,0x7fff136b3cd8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2024 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2672 /prefetch:8
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5776 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5220 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5284 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4684 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5564 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3516 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1296 /prefetch:8
C:\Users\Admin\Downloads\Setup.exe
"C:\Users\Admin\Downloads\Setup.exe"
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1236 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6384 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6360 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5384 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2696 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3524 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3948 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6616 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5592 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6756 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://pcapp.store/installing.php?guid=E1CB8DFE-5215-4859-82E0-AD3714D680B0X&winver=22000&version=fa.1091v&nocache=20240824155315.780&_fcid=1724514735330590
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7fff136b3cb8,0x7fff136b3cc8,0x7fff136b3cd8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6544 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6712 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=4672 /prefetch:8
C:\Users\Admin\AppData\Local\Temp\nsmC04C.tmp
"C:\Users\Admin\AppData\Local\Temp\nsmC04C.tmp" /internal 1724514735330590 /force
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7164 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6924 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7128 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7048 /prefetch:1
C:\Users\Admin\PCAppStore\PcAppStore.exe
"C:\Users\Admin\PCAppStore\PcAppStore.exe" /init default
C:\Users\Admin\PCAppStore\Watchdog.exe
"C:\Users\Admin\PCAppStore\Watchdog.exe" /guid=E1CB8DFE-5215-4859-82E0-AD3714D680B0X /rid=20240824155339.225240982718 /ver=fa.1091v
C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
.\nwjs\NW_store.exe .\ui\.
C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
C:\Users\Admin\PCAppStore\nwjs\NW_store.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" /prefetch:4 --monitor-self --monitor-self-argument=--type=crashpad-handler "--monitor-self-argument=--user-data-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" --monitor-self-argument=/prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\pc_app_store\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" --annotation=plat=Win64 --annotation=prod=pc_app_store --annotation=ver=0.1.0 --initial-client-data=0x26c,0x270,0x274,0x268,0x278,0x7fff028aa960,0x7fff028aa970,0x7fff028aa980
C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
C:\Users\Admin\PCAppStore\nwjs\NW_store.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" /prefetch:4 --no-periodic-tasks --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\pc_app_store\User Data\Crashpad" --annotation=plat=Win64 --annotation=prod=pc_app_store --annotation=ver=0.1.0 --initial-client-data=0x158,0x15c,0x160,0x134,0x164,0x7ff6a8a78a60,0x7ff6a8a78a70,0x7ff6a8a78a80
C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1792 --field-trial-handle=1796,i,11711258167946372492,5100720022684500199,262144 --variations-seed-version /prefetch:2
C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --start-stack-profiler --mojo-platform-channel-handle=2060 --field-trial-handle=1796,i,11711258167946372492,5100720022684500199,262144 --variations-seed-version /prefetch:3
C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=2240 --field-trial-handle=1796,i,11711258167946372492,5100720022684500199,262144 --variations-seed-version /prefetch:8
C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --nwjs --extension-process --no-appcompat-clear --no-sandbox --file-url-path-alias="/gen=C:\Users\Admin\PCAppStore\nwjs\gen" --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2544 --field-trial-handle=1796,i,11711258167946372492,5100720022684500199,262144 --variations-seed-version /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7452 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7796 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6240 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5100 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8364 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8600 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8564 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8576 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8812 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9084 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9212 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9496 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9628 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=9108 /prefetch:2
C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
C:\Users\Admin\PCAppStore\download\SetupEngine.exe
"C:\Users\Admin\PCAppStore\download\SetupEngine.exe"
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8524 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9984 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7696 /prefetch:1
C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=4624 --field-trial-handle=1796,i,11711258167946372492,5100720022684500199,262144 --variations-seed-version /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8988 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9608 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8996 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7676 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8356 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7368 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7900 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8388 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3884 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7876 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10428 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8744 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8740 /prefetch:1
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7984 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8584 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9168 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10736 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9816 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10652 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8388 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9488 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7872 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8468 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10092 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8700 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8576 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7888 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9504 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7948 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8900 /prefetch:1
C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=4616 --field-trial-handle=1796,i,11711258167946372492,5100720022684500199,262144 --variations-seed-version /prefetch:8
C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=4484 --field-trial-handle=1796,i,11711258167946372492,5100720022684500199,262144 --variations-seed-version /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://pcapp.store/account/login?guid=E1CB8DFE-5215-4859-82E0-AD3714D680B0X
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7fff136b3cb8,0x7fff136b3cc8,0x7fff136b3cd8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,1088040832503080107,321625655029712618,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8956 /prefetch:1
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | cheater.fun | udp |
| US | 104.26.15.166:443 | cheater.fun | tcp |
| US | 104.26.15.166:443 | cheater.fun | tcp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 104.18.40.68:443 | kit.fontawesome.com | tcp |
| US | 104.21.26.223:443 | ka-f.fontawesome.com | tcp |
| US | 104.21.26.223:443 | ka-f.fontawesome.com | tcp |
| US | 104.21.26.223:443 | ka-f.fontawesome.com | tcp |
| US | 104.21.26.223:443 | ka-f.fontawesome.com | tcp |
| US | 8.8.8.8:53 | 234.75.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 200.20.217.172.in-addr.arpa | udp |
| US | 216.239.34.36:443 | region1.analytics.google.com | tcp |
| FR | 142.250.178.129:443 | tpc.googlesyndication.com | tcp |
| FR | 142.250.178.129:443 | tpc.googlesyndication.com | tcp |
| FR | 216.58.214.162:443 | ep1.adtrafficquality.google | tcp |
| FR | 142.250.179.97:443 | ep2.adtrafficquality.google | tcp |
| FR | 142.250.178.129:443 | tpc.googlesyndication.com | udp |
| N/A | 224.0.0.251:5353 | udp | |
| US | 216.239.34.36:443 | region1.analytics.google.com | udp |
| FR | 216.58.214.162:443 | ep1.adtrafficquality.google | udp |
| US | 161.35.127.181:443 | veryfast.io | tcp |
| US | 161.35.127.181:443 | veryfast.io | tcp |
| FR | 172.217.20.162:443 | adclick.g.doubleclick.net | tcp |
| GB | 84.17.50.9:443 | repository.pcapp.store | tcp |
| US | 207.246.91.177:443 | pcapp.store | tcp |
| US | 104.18.40.68:443 | kit.fontawesome.com | tcp |
| US | 104.21.26.223:443 | ka-f.fontawesome.com | tcp |
| FR | 172.217.18.194:443 | googleads.g.doubleclick.net | tcp |
| FR | 172.217.18.194:443 | googleads.g.doubleclick.net | udp |
| FR | 142.250.178.129:443 | tpc.googlesyndication.com | udp |
| US | 207.246.91.177:443 | pcapp.store | tcp |
| US | 64.176.203.93:443 | pcapp.store | tcp |
| US | 64.176.203.93:443 | pcapp.store | tcp |
| GB | 84.17.50.8:443 | delivery.pcapp.store | tcp |
| GB | 84.17.50.9:443 | repository.pcapp.store | tcp |
| FR | 142.250.75.238:443 | google.com | tcp |
| FR | 142.250.75.238:443 | google.com | tcp |
| US | 216.239.32.36:443 | region1.analytics.google.com | tcp |
| FR | 142.250.201.163:443 | www.google.co.uk | tcp |
| FR | 142.250.201.163:443 | www.google.co.uk | tcp |
| BE | 74.125.71.157:443 | stats.g.doubleclick.net | tcp |
| FR | 142.250.201.163:443 | www.google.co.uk | tcp |
| FR | 142.250.201.163:443 | www.google.co.uk | tcp |
| FR | 142.250.179.68:443 | www.google.com | tcp |
| FR | 142.250.179.68:443 | www.google.com | tcp |
| FR | 142.250.179.68:443 | www.google.com | tcp |
| FR | 142.250.201.163:443 | www.google.co.uk | tcp |
| US | 8.8.8.8:53 | 157.71.125.74.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 68.179.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 13.227.111.52.in-addr.arpa | udp |
| US | 216.239.32.36:443 | region1.analytics.google.com | udp |
| GB | 2.17.209.146:443 | r.bing.com | tcp |
| US | 207.246.91.177:443 | pcapp.store | tcp |
| GB | 2.17.209.146:443 | r.bing.com | tcp |
| GB | 2.17.209.146:443 | r.bing.com | tcp |
| GB | 2.17.209.146:443 | r.bing.com | tcp |
| GB | 2.17.209.146:443 | r.bing.com | tcp |
| US | 13.107.21.200:443 | bing.com | tcp |
| GB | 173.222.211.41:443 | aefd.nelreports.net | tcp |
| IE | 20.190.159.73:443 | login.microsoftonline.com | tcp |
| US | 151.101.193.91:443 | require-script-executor.en.softonic.com | tcp |
| US | 151.101.193.91:443 | require-script-executor.en.softonic.com | tcp |
| US | 151.101.193.91:443 | require-script-executor.en.softonic.com | udp |
| US | 13.107.5.80:443 | services.bingapis.com | tcp |
| FR | 142.250.179.68:443 | www.google.com | udp |
| US | 151.101.193.91:443 | require-script-executor.en.softonic.com | tcp |
| US | 151.101.193.91:443 | require-script-executor.en.softonic.com | tcp |
| US | 151.101.193.91:443 | require-script-executor.en.softonic.com | tcp |
| US | 151.101.193.91:443 | require-script-executor.en.softonic.com | tcp |
| US | 151.101.193.91:443 | require-script-executor.en.softonic.com | tcp |
| US | 151.101.193.91:443 | require-script-executor.en.softonic.com | tcp |
| US | 151.101.193.91:443 | require-script-executor.en.softonic.com | tcp |
| US | 199.232.213.91:443 | softonic.com | tcp |
| US | 199.232.213.91:443 | softonic.com | tcp |
| US | 150.171.27.10:443 | bat.bing.com | tcp |
| GB | 13.224.222.64:443 | sdk.privacy-center.org | tcp |
| GB | 13.224.223.9:443 | c.amazon-adsystem.com | tcp |
| US | 13.107.246.64:443 | www.clarity.ms | tcp |
| FR | 216.58.215.34:443 | securepubads.g.doubleclick.net | tcp |
| FR | 216.58.215.34:443 | securepubads.g.doubleclick.net | tcp |
| GB | 13.224.222.64:443 | sdk.privacy-center.org | tcp |
| US | 151.101.193.91:443 | require-script-executor.en.softonic.com | udp |
| FR | 216.58.214.174:443 | syndicatedsearch.goog | tcp |
| FR | 216.58.215.34:443 | securepubads.g.doubleclick.net | udp |
| GB | 18.172.148.233:443 | www.datadoghq-browser-agent.com | tcp |
| GB | 13.224.223.9:443 | c.amazon-adsystem.com | tcp |
| US | 104.22.75.216:443 | btloader.com | tcp |
| US | 51.8.64.151:443 | h.clarity.ms | tcp |
| GB | 18.244.114.119:443 | d74queuslupub.cloudfront.net | tcp |
| US | 207.246.91.177:443 | pcapp.store | tcp |
| FR | 142.250.179.123:443 | storage.googleapis.com | tcp |
| GB | 108.156.39.27:443 | config.aps.amazon-adsystem.com | tcp |
| US | 52.0.220.230:443 | prod.us-east-1.cxm-bcn.publisher-services.amazon.dev | tcp |
| US | 104.26.2.70:443 | ad-delivery.net | tcp |
| US | 104.26.2.70:443 | ad-delivery.net | tcp |
| US | 104.22.52.86:443 | cdn.id5-sync.com | tcp |
| US | 130.211.23.194:443 | api.btloader.com | tcp |
| US | 130.211.23.194:443 | api.btloader.com | tcp |
| US | 172.67.74.232:443 | cdn.btmessage.com | tcp |
| US | 104.26.2.70:443 | ad-delivery.net | tcp |
| US | 151.101.193.91:443 | require-script-executor.en.softonic.com | udp |
| NL | 139.45.197.253:443 | notix.io | tcp |
| IE | 13.74.129.1:443 | c.clarity.ms | tcp |
| US | 8.8.8.8:53 | 230.220.0.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 166.214.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 145.178.204.143.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 194.23.211.130.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 232.74.67.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 113.216.138.108.in-addr.arpa | udp |
| US | 13.107.21.237:443 | c.bing.com | tcp |
| GB | 108.138.233.67:443 | api.privacy-center.org | tcp |
| US | 8.8.8.8:53 | pcapp.store | udp |
| US | 8.8.8.8:53 | pcapp.store | udp |
| US | 104.248.126.225:443 | pcapp.store | tcp |
| FR | 216.58.214.174:443 | syndicatedsearch.goog | udp |
| FR | 142.250.179.65:443 | 0cc6f9e1437b175138c832182a5fd870.safeframe.googlesyndication.com | tcp |
| GB | 18.245.220.173:443 | aax.amazon-adsystem.com | tcp |
| DE | 178.63.241.79:443 | shb.richaudience.com | tcp |
| DE | 178.63.241.79:443 | shb.richaudience.com | tcp |
| DE | 178.63.241.79:443 | shb.richaudience.com | tcp |
| DE | 162.19.138.120:443 | lb.eu-1-id5-sync.com | tcp |
| DE | 162.19.138.120:443 | lb.eu-1-id5-sync.com | tcp |
| US | 8.8.8.8:53 | cdn.jsdelivr.net | udp |
| US | 34.120.63.153:443 | prebid.media.net | tcp |
| US | 8.8.8.8:53 | tags.crwdcntrl.net | udp |
| FR | 142.250.201.162:443 | partner.googleadservices.com | tcp |
| FR | 185.255.84.150:443 | hb-api.omnitagjs.com | tcp |
| IE | 34.254.148.172:443 | ad.360yield.com | tcp |
| GB | 18.245.143.100:443 | tags.crwdcntrl.net | tcp |
| DE | 162.19.138.117:443 | lb.eu-1-id5-sync.com | tcp |
| DE | 37.252.171.21:443 | ib.adnxs.com | tcp |
| IE | 54.195.242.20:443 | ap.lijit.com | tcp |
| NL | 188.166.203.175:443 | brightcombid.marphezis.com | tcp |
| US | 104.18.36.155:443 | htlb.casalemedia.com | tcp |
| IE | 54.220.6.201:443 | id.crwdcntrl.net | tcp |
| NL | 185.64.189.112:443 | hbopenbid.pubmatic.com | tcp |
| US | 151.101.193.229:443 | cdn.jsdelivr.net | tcp |
| FR | 216.58.214.162:443 | ep1.adtrafficquality.google | udp |
| NL | 178.250.1.3:443 | static.criteo.net | tcp |
| US | 172.64.152.89:443 | cdn-ima.33across.com | tcp |
| NL | 178.250.1.3:443 | static.criteo.net | tcp |
| US | 172.64.152.89:443 | cdn-ima.33across.com | tcp |
| GB | 92.123.143.201:80 | apps.identrust.com | tcp |
| FR | 142.250.201.163:443 | www.google.co.uk | udp |
| BE | 74.125.71.157:443 | stats.g.doubleclick.net | udp |
| FR | 142.250.179.97:443 | ep2.adtrafficquality.google | udp |
| FR | 142.250.179.68:443 | www.google.com | udp |
| US | 34.120.63.153:443 | prebid.media.net | udp |
| US | 8.8.8.8:53 | 201.6.220.54.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 20.242.195.54.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 175.203.166.188.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.148.254.34.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 112.189.64.185.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 155.36.18.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 229.193.101.151.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 100.143.245.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 162.201.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 120.138.19.162.in-addr.arpa | udp |
| FR | 216.58.213.78:443 | ampcid.google.com | tcp |
| FR | 142.250.178.129:443 | tpc.googlesyndication.com | udp |
| IE | 52.95.122.74:443 | aax-eu.amazon-adsystem.com | tcp |
| US | 35.244.193.51:443 | lexicon.33across.com | tcp |
| US | 207.246.91.177:80 | pcapp.store | tcp |
| US | 8.8.8.8:53 | www.google.com | udp |
| US | 8.8.8.8:53 | www.google.com | udp |
| FR | 142.250.179.68:443 | www.google.com | udp |
| FR | 185.255.84.152:443 | visitor.omnitagjs.com | tcp |
| GB | 184.25.192.27:443 | contextual.media.net | tcp |
| US | 207.246.91.177:443 | pcapp.store | tcp |
| US | 104.18.38.76:443 | js-sec.indexww.com | tcp |
| DE | 162.55.233.28:443 | sync.richaudience.com | tcp |
| GB | 184.26.56.245:443 | ads.pubmatic.com | tcp |
| US | 207.246.91.177:443 | pcapp.store | tcp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 207.246.91.177:443 | pcapp.store | tcp |
| US | 151.101.1.108:443 | acdn.adnxs.com | tcp |
| DE | 162.55.233.28:443 | sync.richaudience.com | tcp |
| US | 151.101.1.108:443 | acdn.adnxs.com | tcp |
| US | 8.8.4.4:443 | dns.google | tcp |
| US | 8.8.8.8:443 | dns.google | tcp |
| US | 8.8.4.4:443 | dns.google | udp |
| US | 8.8.8.8:53 | sync.1rx.io | udp |
| US | 8.8.8.8:53 | match.prod.bidr.io | udp |
| US | 8.8.8.8:53 | match.adsrvr.org | udp |
| US | 8.8.8.8:53 | sync.srv.stackadapt.com | udp |
| US | 8.8.8.8:53 | image8.pubmatic.com | udp |
| US | 207.246.91.177:443 | pcapp.store | tcp |
| US | 207.246.91.177:443 | pcapp.store | tcp |
| GB | 84.17.50.9:443 | repository.pcapp.store | tcp |
| GB | 84.17.50.9:443 | repository.pcapp.store | tcp |
| GB | 84.17.50.9:443 | repository.pcapp.store | tcp |
| GB | 84.17.50.9:443 | repository.pcapp.store | tcp |
| GB | 84.17.50.9:443 | repository.pcapp.store | tcp |
| GB | 84.17.50.9:443 | repository.pcapp.store | tcp |
| IE | 52.208.228.214:443 | match.prod.bidr.io | tcp |
| NL | 198.47.127.18:443 | image8.pubmatic.com | tcp |
| GB | 2.20.12.106:443 | player.aniview.com | tcp |
| NL | 46.228.174.117:443 | sync.1rx.io | tcp |
| NL | 81.17.55.123:443 | ssbsync.smartadserver.com | tcp |
| US | 54.161.148.55:443 | sync.srv.stackadapt.com | tcp |
| US | 52.223.40.198:443 | match.adsrvr.org | tcp |
| NL | 178.250.1.9:443 | dis.criteo.com | tcp |
| US | 54.87.195.130:443 | api-2-0.spot.im | tcp |
| US | 3.209.126.202:443 | cs-server-s2s.yellowblue.io | tcp |
| US | 67.202.105.23:443 | ssc-cms.33across.com | tcp |
| DE | 51.38.120.206:443 | onetag-sys.com | tcp |
| US | 3.209.126.202:443 | cs-server-s2s.yellowblue.io | tcp |
| US | 67.202.105.23:443 | ssc-cms.33across.com | tcp |
| DE | 51.38.120.206:443 | onetag-sys.com | tcp |
| GB | 2.20.12.106:443 | player.aniview.com | tcp |
| NL | 81.17.55.123:443 | ssbsync.smartadserver.com | tcp |
| NL | 178.250.1.9:443 | dis.criteo.com | tcp |
| NL | 46.228.174.117:443 | sync.1rx.io | tcp |
| US | 54.87.195.130:443 | api-2-0.spot.im | tcp |
| US | 52.223.40.198:443 | match.adsrvr.org | tcp |
| IE | 52.208.228.214:443 | match.prod.bidr.io | tcp |
| NL | 198.47.127.18:443 | image8.pubmatic.com | tcp |
| US | 54.161.148.55:443 | sync.srv.stackadapt.com | tcp |
| NL | 35.214.149.91:443 | x.bidswitch.net | tcp |
| DE | 37.252.171.21:443 | secure.adnxs.com | tcp |
| GB | 89.187.167.39:443 | repository.pcapp.store | tcp |
| US | 172.111.38.54:443 | tracker.open-adsyield.com | tcp |
| US | 172.111.38.54:443 | tracker.open-adsyield.com | tcp |
| GB | 89.187.167.39:443 | repository.pcapp.store | tcp |
| US | 8.8.8.8:53 | 91.149.214.35.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 23.105.202.67.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 39.167.187.89.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 54.38.111.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 117.174.228.46.in-addr.arpa | udp |
| IE | 34.253.170.144:443 | jadserve.postrelease.com | tcp |
| IE | 34.253.170.144:443 | jadserve.postrelease.com | tcp |
| US | 161.35.127.181:80 | veryfast.io | tcp |
| US | 147.182.211.77:443 | ev.pcapp.store | tcp |
| US | 161.35.127.181:443 | veryfast.io | tcp |
| GB | 104.86.110.99:443 | tcp | |
| SE | 192.229.221.95:80 | evcs-crl.ws.symantec.com | tcp |
| GB | 89.187.167.39:443 | repository.pcapp.store | tcp |
| US | 199.232.213.91:443 | softonic.com | udp |
| US | 172.67.74.232:443 | cdn.btmessage.com | tcp |
| FR | 216.58.215.34:443 | securepubads.g.doubleclick.net | udp |
| ES | 157.240.5.10:443 | connect.facebook.net | tcp |
| FR | 172.217.20.202:443 | tcp | |
| SE | 192.229.221.95:80 | evcs-crl.ws.symantec.com | tcp |
| GB | 157.240.221.35:443 | www.facebook.com | tcp |
| GB | 157.240.221.35:443 | www.facebook.com | tcp |
| US | 130.211.23.194:443 | api.btloader.com | udp |
| US | 161.35.127.181:443 | veryfast.io | tcp |
| SE | 192.229.221.95:80 | evcs-crl.ws.symantec.com | tcp |
| DE | 162.19.138.120:443 | lb.eu-1-id5-sync.com | tcp |
| DE | 162.19.138.117:443 | lb.eu-1-id5-sync.com | tcp |
| DE | 152.199.19.74:80 | evcs-ocsp.ws.symantec.com | tcp |
| SE | 192.229.221.95:80 | evcs-crl.ws.symantec.com | tcp |
| US | 64.176.203.93:443 | pcapp.store | tcp |
| NL | 139.45.197.253:443 | notix.io | tcp |
| DE | 162.55.233.28:443 | sync.richaudience.com | tcp |
| NL | 46.228.174.117:443 | sync.1rx.io | tcp |
| DE | 51.38.120.206:443 | onetag-sys.com | udp |
| IE | 52.208.228.214:443 | match.prod.bidr.io | tcp |
| US | 54.161.148.55:443 | sync.srv.stackadapt.com | tcp |
| US | 35.244.174.68:443 | id.rlcdn.com | tcp |
| US | 192.132.33.69:443 | bttrack.com | tcp |
| GB | 184.26.188.27:443 | hblg.media.net | tcp |
| NL | 46.228.174.117:443 | sync.1rx.io | tcp |
| US | 172.240.45.78:443 | sync.aniview.com | tcp |
| US | 151.101.2.49:443 | sync-tm.everesttech.net | tcp |
| FR | 5.135.209.104:443 | rtb-csync.smartadserver.com | tcp |
| FR | 5.135.209.104:443 | rtb-csync.smartadserver.com | tcp |
| US | 172.240.45.78:443 | sync.aniview.com | tcp |
| US | 151.101.2.49:443 | sync-tm.everesttech.net | tcp |
| US | 8.8.8.8:53 | spl.zeotap.com | udp |
| US | 8.8.8.8:53 | cm.g.doubleclick.net | udp |
| US | 216.200.232.249:443 | sync.mathtag.com | tcp |
| NL | 82.145.213.8:443 | t.adx.opera.com | tcp |
| US | 80.77.87.162:443 | cs.admanmedia.com | tcp |
| NL | 69.173.156.149:443 | pixel.rubiconproject.com | tcp |
| NL | 69.173.156.149:443 | pixel.rubiconproject.com | tcp |
| US | 104.22.51.98:443 | spl.zeotap.com | tcp |
| FR | 154.54.250.80:443 | ads.stickyadstv.com | tcp |
| FR | 142.250.179.66:443 | cm.g.doubleclick.net | tcp |
| NL | 35.214.199.88:443 | rtb.mfadsrvr.com | tcp |
| FR | 142.250.179.66:443 | cm.g.doubleclick.net | udp |
| FR | 154.54.250.80:443 | ads.stickyadstv.com | tcp |
| US | 80.77.87.162:443 | cs.admanmedia.com | tcp |
| GB | 2.22.101.110:443 | secure-assets.rubiconproject.com | tcp |
| US | 34.36.216.150:443 | pixel-sync.sitescout.com | tcp |
| NL | 35.214.149.91:443 | x.bidswitch.net | tcp |
| US | 34.36.216.150:443 | pixel-sync.sitescout.com | udp |
| GB | 184.25.193.73:443 | eus.rubiconproject.com | tcp |
| NL | 69.173.156.149:443 | pixel.rubiconproject.com | tcp |
| US | 8.8.8.8:53 | 110.101.22.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 150.216.36.34.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 73.193.25.184.in-addr.arpa | udp |
| US | 52.46.128.147:443 | s.amazon-adsystem.com | tcp |
| US | 52.46.128.147:443 | s.amazon-adsystem.com | tcp |
| GB | 2.17.209.146:443 | r.bing.com | tcp |
| GB | 2.17.209.146:443 | r.bing.com | tcp |
| GB | 2.17.209.146:443 | r.bing.com | tcp |
| GB | 2.17.209.146:443 | r.bing.com | tcp |
| GB | 2.17.209.146:443 | r.bing.com | tcp |
| GB | 2.17.209.146:443 | r.bing.com | tcp |
| SE | 192.229.221.95:80 | cacerts.rapidssl.com | tcp |
| US | 104.18.33.89:443 | www2.bing.com | tcp |
| US | 104.18.33.89:443 | www2.bing.com | tcp |
| US | 104.18.33.89:443 | www2.bing.com | tcp |
| US | 104.18.33.89:443 | www2.bing.com | tcp |
| GB | 128.116.119.4:443 | voice.roblox.com | tcp |
| US | 51.8.64.151:443 | h.clarity.ms | tcp |
| GB | 2.16.170.58:443 | css.rbxcdn.com | tcp |
| GB | 2.16.170.58:443 | css.rbxcdn.com | tcp |
| GB | 2.16.170.58:443 | css.rbxcdn.com | tcp |
| GB | 2.16.170.58:443 | css.rbxcdn.com | tcp |
| GB | 2.16.170.58:443 | css.rbxcdn.com | tcp |
| GB | 2.16.170.58:443 | css.rbxcdn.com | tcp |
| GB | 2.16.170.120:443 | apis.rbxcdn.com | tcp |
| GB | 2.16.170.120:443 | apis.rbxcdn.com | tcp |
| GB | 92.123.140.48:443 | js.rbxcdn.com | tcp |
| GB | 92.123.140.48:443 | js.rbxcdn.com | tcp |
| GB | 92.123.140.48:443 | js.rbxcdn.com | tcp |
| GB | 92.123.140.48:443 | js.rbxcdn.com | tcp |
| GB | 92.123.140.48:443 | js.rbxcdn.com | tcp |
| GB | 92.123.140.48:443 | js.rbxcdn.com | tcp |
| GB | 2.16.170.58:443 | css.rbxcdn.com | tcp |
| GB | 2.16.170.42:443 | images.rbxcdn.com | tcp |
| GB | 2.16.170.42:443 | images.rbxcdn.com | tcp |
| GB | 2.16.170.42:443 | images.rbxcdn.com | tcp |
| GB | 2.16.170.42:443 | images.rbxcdn.com | tcp |
| GB | 128.116.119.4:443 | voice.roblox.com | tcp |
| DE | 162.19.138.120:443 | lb.eu-1-id5-sync.com | tcp |
| GB | 128.116.119.4:443 | voice.roblox.com | tcp |
| GB | 18.245.143.68:443 | js.adscale.de | tcp |
| DE | 162.19.138.117:443 | lb.eu-1-id5-sync.com | tcp |
| GB | 128.116.119.3:443 | lhr2-128-116-119-3.roblox.com | tcp |
| DE | 52.57.54.158:443 | ih.adscale.de | tcp |
| US | 104.26.2.63:443 | wct.softonic.com | tcp |
| US | 104.26.2.63:443 | wct.softonic.com | tcp |
| GB | 2.16.170.114:443 | apis.rbxcdn.com | tcp |
| GB | 128.116.119.8:443 | lms.roblox.com | tcp |
| US | 8.8.8.8:53 | c0ak.rbxcdn.com | udp |
| US | 8.8.8.8:53 | tr.rbxcdn.com | udp |
| GB | 128.116.119.3:443 | lhr2-128-116-119-3.roblox.com | tcp |
| US | 151.101.1.194:443 | roblox-poc.global.ssl.fastly.net | tcp |
| GB | 2.16.170.49:443 | c0ak.rbxcdn.com | tcp |
| GB | 18.239.236.94:443 | c0.rbxcdn.com | tcp |
| HK | 18.163.23.88:443 | aws-ap-east-1c-lms.rbx.com | tcp |
| US | 52.9.66.139:443 | aws-us-west-1c-lms.rbx.com | tcp |
| US | 100.28.174.12:443 | aws-us-east-1a-lms.rbx.com | tcp |
| IN | 128.116.104.4:443 | bom1-128-116-104-4.roblox.com | tcp |
| GB | 128.116.119.3:443 | lhr2-128-116-119-3.roblox.com | tcp |
| SG | 128.116.97.3:443 | sin2-128-116-97-3.roblox.com | tcp |
| GB | 2.20.12.77:443 | tr.rbxcdn.com | tcp |
| GB | 2.20.12.77:443 | tr.rbxcdn.com | tcp |
| GB | 2.20.12.77:443 | tr.rbxcdn.com | tcp |
| GB | 2.20.12.77:443 | tr.rbxcdn.com | tcp |
| GB | 2.20.12.77:443 | tr.rbxcdn.com | tcp |
| GB | 2.20.12.77:443 | tr.rbxcdn.com | tcp |
| SG | 128.116.97.3:443 | sin2-128-116-97-3.roblox.com | tcp |
| HK | 18.163.23.88:443 | aws-ap-east-1c-lms.rbx.com | tcp |
| US | 35.244.193.51:443 | lexicon.33across.com | udp |
| DE | 23.88.8.125:443 | uidsync.net | tcp |
| DE | 157.90.33.72:443 | uidsync.net | tcp |
| GB | 128.116.119.8:443 | lms.roblox.com | tcp |
| DE | 157.90.33.72:443 | uidsync.net | tcp |
| NL | 139.45.197.253:443 | notix.io | tcp |
| NL | 81.17.55.123:443 | ssbsync.smartadserver.com | tcp |
| NL | 46.228.174.117:443 | sync.1rx.io | tcp |
| US | 67.202.105.23:443 | ssc-cms.33across.com | tcp |
| NL | 178.250.1.9:443 | dis.criteo.com | tcp |
| IE | 52.208.228.214:443 | match.prod.bidr.io | tcp |
| US | 54.161.148.55:443 | sync.srv.stackadapt.com | tcp |
| US | 35.244.174.68:443 | id.rlcdn.com | udp |
| NL | 35.214.199.88:443 | rtb.mfadsrvr.com | udp |
| FR | 5.135.209.104:443 | rtb-csync.smartadserver.com | tcp |
| FR | 5.135.209.104:443 | rtb-csync.smartadserver.com | tcp |
| US | 64.176.203.93:443 | pcapp.store | tcp |
| US | 172.67.15.14:443 | embed.tawk.to | tcp |
| US | 104.22.44.142:443 | embed.tawk.to | tcp |
| US | 104.22.44.142:443 | embed.tawk.to | tcp |
| US | 151.101.193.229:443 | cdn.jsdelivr.net | udp |
Files
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | 5578283903c07cc737a43625e2cbb093 |
| SHA1 | f438ad2bef7125e928fcde43082a20457f5df159 |
| SHA256 | 7268c7d8375d50096fd5f773a0685ac724c6c2aece7dc273c7eb96b28e2935b2 |
| SHA512 | 3b29531c0bcc70bfc0b1af147fe64ce0a7c4d3cbadd2dbc58d8937a8291daae320206deb0eb2046c3ffad27e01af5aceca4708539389da102bff4680afaa1601 |
\??\pipe\LOCAL\crashpad_764_YJCTGSMAVHANPAMU
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | 0487ced0fdfd8d7a8e717211fcd7d709 |
| SHA1 | 598605311b8ef24b0a2ba2ccfedeecabe7fec901 |
| SHA256 | 76693c580fd4aadce2419a1b80795bb4ff78d70c1fd4330e777e04159023f571 |
| SHA512 | 16e1c6e9373b6d5155310f64bb71979601852f18ee3081385c17ffb943ab078ce27cd665fb8d6f3bcc6b98c8325b33403571449fad044e22aa50a3bf52366993 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 45df513f6f1f0b82859763d489a6dd1f |
| SHA1 | d617c71224a9de63ec79adf4f787267c58cd1af7 |
| SHA256 | adc86642263953e98a793d2c66cf2975ccfc9b26a25ce985138c6a737070f8bf |
| SHA512 | a533a41ea8e7e452cc5d5d782431eaef37308eeca74005e12308a837f4c16a8d5b00ab59ac6fb114c076a1a08b8fdb4b926bebfe1dfd3b5aae3e8285978f8297 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 206702161f94c5cd39fadd03f4014d98 |
| SHA1 | bd8bfc144fb5326d21bd1531523d9fb50e1b600a |
| SHA256 | 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167 |
| SHA512 | 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 46295cac801e5d4857d09837238a6394 |
| SHA1 | 44e0fa1b517dbf802b18faf0785eeea6ac51594b |
| SHA256 | 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443 |
| SHA512 | 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a
| MD5 | 8266eb9d769b0040c61f9107b9233d0d |
| SHA1 | 7d84098b0f5a6b1fb73333838e071558086938da |
| SHA256 | 389603813af8808ae7ec8ca4f2bc326b15e4c2ad5d86eeabfb271ac4d170b923 |
| SHA512 | 82854e09e38363bf682d1426cd72d2efe770a58531f8b006c80c32718229cd9699c6db6ae4afe0a5ba64504a08b16568e53ec8fdf2702b5abc41ef7711f011b0 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 122daa3471bf4dedeba1f1f4e496670b |
| SHA1 | 95c4ba4f4d9617045c5564febdbb93654aad4f9e |
| SHA256 | 7d3ebfcc966b02a6146ba7c1c0a6adccbe612f183d876abe8675eae4dde3b522 |
| SHA512 | daea24c3eae268af635e9b313c28aefe0712cdbb068f5f6ab1c53335ef437ee880b1cb515c65ceafd289e204a17b399977a8bf1b38bfcb77420629c035da3830 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 6069895613f766e7a34209f9a5186fe7 |
| SHA1 | 09b5b5ca6f59be371fdb05a52153290e33d6bf65 |
| SHA256 | 324efef33c484adecc639e445542e17daa19f08efc13eead671a81d460638e52 |
| SHA512 | 832336a25a031fba2b91e5d744188ece7baf44b9ffa188b82a8c65b1cae641e91421d6a9ec991c61d91a5a4b6e6d236d8c186adb50b150839dbe75361830a662 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024
| MD5 | 8eff0b8045fd1959e117f85654ae7770 |
| SHA1 | 227fee13ceb7c410b5c0bb8000258b6643cb6255 |
| SHA256 | 89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571 |
| SHA512 | 2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b0084a98da4ca477_0
| MD5 | b5c3ff43b938392e3af9bc77be0d90fb |
| SHA1 | cf7ca5764608174fc8b953a382cb08fc9ae7d2ad |
| SHA256 | 2125da4419d9758bb71ee3415b08dc0ed0538b78e8c37cce10863aaeaed71251 |
| SHA512 | 542a4ee61a6153cf875ab3fcd741d839b5d70855b15148c4df7091e385f3cc177c244d7056bf42b1966894d931bd44d5fa414e461d9f3aa31d1b5e6ffe26def8 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 298897cad70d9241e58c77f5833bc8f3 |
| SHA1 | 9f2fc98543e14ef7dc136283226546feb90afe6f |
| SHA256 | efad8db65dde39f84fc753ec2fb728095f3f8e8cf5c64108c6a01c6a9356b576 |
| SHA512 | 34830cf6a30c5c0d3d176cddaebd0e6824d5e482d88ca20bdb8643c33ed0583d2bf711bf40ea02a4fa7b825deb39a746aafb79e30fc91cb039a71447b59d8b2b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5be51d.TMP
| MD5 | d1347cf050d00491b79670a908c674d6 |
| SHA1 | e4fc0d7091de4f3c24bade7a321365108faf8be0 |
| SHA256 | f47bcd51e7566769922b7b2610d2386713c3faf145669c7135bf60201ba92488 |
| SHA512 | 91686d1a27ed922e64f96c07543478c073a569307e48e73d5892b3fd389e96803be704c0790e446b268e235e4d5bbf87660bdf00d202834946a1985b2eb262d6 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 3a5e26a4b2ea8a1bb5697b0766542357 |
| SHA1 | 47bad29b16b1f7d020ec20c914642114009b5af4 |
| SHA256 | 703c66fdbe408379b066fd0b6506ab2a5af6170ac1f1518cc6d0b69875275f0e |
| SHA512 | 6c8e628f486cdb141ef9dbe00d9343250f1829b7b2b973e5657e13d6b695cfb559780922ae45ecc451b2d494f1a3ff8cec63f5cc52c250a8e4f181edec5c9783 |
C:\Users\Admin\Downloads\Unconfirmed 753091.crdownload
| MD5 | efc4f179300eedce5976063b5157633c |
| SHA1 | 34be6b054f5a74771ac79e39c5b9bfde0a5470e3 |
| SHA256 | b5cc9aecff55bb22ef25cd2a0b3cb865a748e333ecd19de8647c30c966077d5d |
| SHA512 | 19f89630482bf6752c92af3b0d4120cadcd989d28bec3485aeb7491eb022d2b5f810824bc981accb948d2221d03d3eeabd99ce9315fe20338ea3ba0af60ac1f0 |
C:\Users\Admin\Downloads\Setup.exe:Zone.Identifier
| MD5 | 3a3684cb99a02867a99272ce59bd40ef |
| SHA1 | 15ac670e5f6d3dd377a914e62d4dc82e91451d93 |
| SHA256 | c2d285b9336761752b9456a13e5bd0cf2f505f0bd7ee79228afe275f21002718 |
| SHA512 | b4513a005be7b8ec34f69bf9a10b16bfd9f64ae9c56f8e3b1250e5edde2d26e120d3a47e633bd27650ad428e616b676c445b742d2edea98a1cc99dd1b6603cd7 |
C:\Users\Admin\AppData\Local\Temp\nsf16DC.tmp\System.dll
| MD5 | cff85c549d536f651d4fb8387f1976f2 |
| SHA1 | d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e |
| SHA256 | 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8 |
| SHA512 | 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88 |
C:\Users\Admin\AppData\Local\Temp\nsf16DC.tmp\nsJSON.dll
| MD5 | f4d89d9a2a3e2f164aea3e93864905c9 |
| SHA1 | 4d4e05ee5e4e77a0631a3dd064c171ba2e227d4a |
| SHA256 | 64b3efdf3de54e338d4db96b549a7bdb7237bb88a82a0a63aef570327a78a6fb |
| SHA512 | dbda3fe7ca22c23d2d0f2a5d9d415a96112e2965081582c7a42c139a55c5d861a27f0bd919504de4f82c59cf7d1b97f95ed5a55e87d574635afdb7eb2d8cadf2 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002
| MD5 | 7680465c99b9bbd9eb5e3055a95ff481 |
| SHA1 | 4f035af69ca6076226746c23e900846846dce364 |
| SHA256 | b53b1d67494e1a4c85056d2bbd233fb9241dd02d88261f72aacf17584f0731e1 |
| SHA512 | 3c78423f29234a1bc867a73f3c8ddb792869fdb388537867a8d78e68d545386c6cd92891f05221194113ddbc822532184d0763ec329db396c7d41c4f59d447d6 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001
| MD5 | 7c2224075fd41741e27aab8e01cc338a |
| SHA1 | 61ab9ba861743b87f8af0c55e977aa1c653f8d73 |
| SHA256 | efaecafb3b690ff5bddf38ffb089a715f083e311ae55761697fcd3ba69b5a141 |
| SHA512 | d6dbda96d49ff4b36d6906dcf001e7ffbbd953e06a347abd5d3db8784feda2d134b875f7612611061628ba175656fcb6da378e8bd06764a287add3e64e33ce82 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f
| MD5 | 710d159481e61019474ac0270378861c |
| SHA1 | 1f59547352e0eb1dbb44f4561649b144aedf16a1 |
| SHA256 | 6dd030ed514c6b89a9e67f0ede8a905ade70dbda413ed3007a21c82445aca4f1 |
| SHA512 | 1c45c3cb7345c0ff598edc79350bff8d63dd25b53352d37770d04d9cb95ae459014d495b9b8a48b9af3b615ec93ee6605a83800aa819fc08da82cc8dc3c4da42 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015
| MD5 | 6b23b30029858fd45010075dea9b0d35 |
| SHA1 | 9ef46244b4327fac08b7dbebd39b7e26dcff8a1d |
| SHA256 | 4d3979cbb742dc748f4152d80cb9f983775ecee8560e02d9a273e62f8de2df5a |
| SHA512 | c1b0a6119451bdc6922bf51ecb6420c7cb3ca84dd576efe8ff350ec389b01f5231f83282f2b5a69121d7b4faf4e832e487eb075ba7733e79239674b962d914b0 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011
| MD5 | 9255307b089522c262bdff13d2e70342 |
| SHA1 | a476a0e4e7be70ce4895505a6c210afb887285fc |
| SHA256 | 97fa4b6aca07207b2e8f4aa155888e29f5d4f080b248cd440349d3b99a6fdc83 |
| SHA512 | bd606b619a5d916594acfeda246ed43f82b5292c86d3f53bb4ac862f88db1eaa7f069308328e5c1d26d824670e200179fe7d5bd45f0e354afdff10886f3fdc8b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a
| MD5 | 115c2d84727b41da5e9b4394887a8c40 |
| SHA1 | 44f495a7f32620e51acca2e78f7e0615cb305781 |
| SHA256 | ae0e442895406e9922237108496c2cd60f4947649a826463e2da9860b5c25dd6 |
| SHA512 | 00402945111722b041f317b082b7103bcc470c2112d86847eac44674053fc0642c5df72015dcb57c65c4ffabb7b03ece7e5f889190f09a45cef1f3e35f830f45 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
| MD5 | 2b175f9be1bc413666c2cb94b7b82aa6 |
| SHA1 | 296e059cc0330c35c1a6bea8192c835894a63178 |
| SHA256 | 0d7de85a8632a76524cf886ae28005a4e8b1c8f06cb19b30e0f51375a27cc0e9 |
| SHA512 | 101552f23d0f961e17ca887724da8011f5dab7a1324ebb775e5d6c1e41718f4f2d6bec317aa9986fc8b28d8064adb0cde9fce827029da55762ed0558acae5606 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
| MD5 | 8b65f9bfb670e0eeb31f4da1b3631a27 |
| SHA1 | 7d0943b7f2404bc2a9ef23debd3039c448fa9c1c |
| SHA256 | ee6470fdf857cd1b4e83bd518af879c23eabb4f166705cb7798bf89383d8184c |
| SHA512 | 61cebaa685b6e869cd40a44e3179fe73058047c548f999d3962eff8a0ceb718cded549d51795b5d3b293b8945194cf7e3fb58a84c475de00a949aa067e14fbdf |
C:\Users\Admin\AppData\Local\Temp\nsf16DC.tmp\nsDialogs.dll
| MD5 | 6c3f8c94d0727894d706940a8a980543 |
| SHA1 | 0d1bcad901be377f38d579aafc0c41c0ef8dcefd |
| SHA256 | 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2 |
| SHA512 | 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355 |
C:\Users\Admin\AppData\Local\Temp\nsf16DC.tmp\inetc.dll
| MD5 | a35cdc9cf1d17216c0ab8c5282488ead |
| SHA1 | ed8e8091a924343ad8791d85e2733c14839f0d36 |
| SHA256 | a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df |
| SHA512 | 0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010
| MD5 | 2f7fff23646a4f0623fb959e86878703 |
| SHA1 | 2feda6840517cd2701e601cc78bd10c1511208aa |
| SHA256 | affa1540650726f2589cceefbb977def4637ed3b7c8089e087ccc81042d6406d |
| SHA512 | 9a50e278d4af33d6af1bfbce649224e8b8a5f304a606a993925a897d0c6a1bc6fcf85c853b347ef78a3d56bcd176cdac7cb7486d0bef8eeadaf428745dbc28bf |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014
| MD5 | 76cf3ff0dbd23dd4504e2089f0df4acb |
| SHA1 | bd2958cf51cc0a7b5c11a0b5c84101f35c2799a0 |
| SHA256 | 340e6d7f301471e307e50c2ed43fe45debc8ebbf24febef17b24f0b06f8883f2 |
| SHA512 | c957943b64f990e24838268e3f1a6e6b4a583aeac6b83588fc01d269a096a888fa4dc2e16e96d23c3a84d7eb0f498c5fba55aacd966d0dce7c5a50449431a49a |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013
| MD5 | 4599d5f7abae601c045d89a85b737d51 |
| SHA1 | d22943e016cd80d7d75a317a59f82e4cf9152049 |
| SHA256 | 97808cf1efc1c8a6d1cf8f7a6afe77c1aa3c923886b0c895f30ba4e383872745 |
| SHA512 | 101ddd209f8bfa140d17ba04490be5f38499b7564d31196808bea4fd33b0f6a5e171c4643968140820bd4f5c4b8c9952b1227a269a23128f9f0bcbb0509783a5 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019
| MD5 | e6755954ba7c00bf2f66438da5a74582 |
| SHA1 | bcf6b53f9c019192ef02ac44b7b406b15fd4855e |
| SHA256 | 63430565badba8428d2fa35e66735fa35c8992000d3234fbd4ca2878fc786a62 |
| SHA512 | c7bc0b459cb7582f44791b319ebd2e3ecab18e4bcc8c4f2d620fa9618bc5d5c204cc9d9716c0aebad18fdce061e4a5b8bc36fc66630c63addff7fd3eb3dc47d8 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | c038169130f1c361143681a2c6fb586c |
| SHA1 | 29b7c10778c8df868a2faca8a98f3fe2643d3711 |
| SHA256 | f5517a132398a649e8393a6feee0cd5028133ff1f5d3c1d9d1f4221f8e318485 |
| SHA512 | 549797ff02de1f83501e2f39a390baf1f1e02eb974e938773b3b746b5e7da2233c846c4c6bce008954124ac3c2db708a4543043b479f75f89567fa1bc6bfed01 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 74fe1a896b557ab6930c819ae9268e27 |
| SHA1 | 509c7f6e112537e9c9a1fa751e317325160b2eb1 |
| SHA256 | caae962ef2cc82cf7120be08294973ef4f80c28c4e0e20330d6adae184d9d1ef |
| SHA512 | eb9144c4487c24357d09e301a9fbdb51dcd70b185a874acc52f6acfaa33b100046d3c3662bbd57c2a84a30dc7c453c0afef620ccd7f9708feb9fe0cd40ce97b2 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 21cb40e08957ba4bb96036e29a63bc18 |
| SHA1 | 83a54190277e7ef93dc15245e9cb3cf0adb92cf7 |
| SHA256 | ff2906d177bfd3b2261ba7d935d0e7f03f694d931d08eb0549c2208b24bbb8c5 |
| SHA512 | 1b1979dd479c0ff2a2e7af9cbe31ffde66e7925b2a290322311044dadf12b218e463ddaa4189c0fd641aa7385263bda72c90ad0d484d256b40e0eac3cc8f5969 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | 061c67d02ac2c6ad967dabb9f674f610 |
| SHA1 | 410df372a9231491b84a6b87d929fb2a2a3fa850 |
| SHA256 | d912b25db32d302f7ed4163b4f8d23428d579050be0622c3425f49913531b5ed |
| SHA512 | 5300c6b95b8b2ab4fc3aab7b91779e7de1a1c76337b1c19117ae13202bfbc7a1174bd36842f09057ba3e596ad5da62aad49fffac23ae745714eb11f66b9677f4 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028
| MD5 | 94ec5055df1155dc2280e6c9c5fcc3fa |
| SHA1 | 86c21fd684361fefbfeec5453b0c51c5f9038499 |
| SHA256 | 76282147e8651d506824d1337383f1e27feee375949bfacd7008d667312d89a8 |
| SHA512 | 14d907859abdf87c3a35adec37dc1935123241234dd930ed085488f62692e0be23295b81b6cc34de435654aefd1af52cf42cdbaadec0168306596e4e93693a2e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e
| MD5 | 29bda76a4dbe9716fcf12e3ecddbc452 |
| SHA1 | 9e50cc6860664bc60ecca0f1702ada29a7ebfe6b |
| SHA256 | d0b0679c8c39a39db8aa001d00a980332bfca1ba7903406984fc988b7d20615f |
| SHA512 | f1c5bb1731ff30197ce83743b6b46f1546b62d108a50ed80e784b670a59aaab139c5cfa9cf85b7e358e4a4e5933e323ea8d8052e191b4968f89033d9128e8290 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
| MD5 | 04f4c51c1b1ae4347d3ef9e63dd650f8 |
| SHA1 | 87e0f582937e3aa332e9fe12b9bb0b8b45bfc418 |
| SHA256 | 590d1c3dd1db6db4deb55d98a95fd11ed040d8ca1775f406558b66441b50e6ec |
| SHA512 | 9c271842736e0cfb9198bcc29003fe93b319984fa65ccc571fc5bbfbbc7165fe89effc76f9a2fa4d052bc44633badc2dc8bc73bb3b68022a4d1c626e386c23e0 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007
| MD5 | c83e4437a53d7f849f9d32df3d6b68f3 |
| SHA1 | fabea5ad92ed3e2431659b02e7624df30d0c6bbc |
| SHA256 | d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb |
| SHA512 | c2ca1630f7229dd2dec37e0722f769dd94fd115eefa8eeba40f9bb09e4fdab7cc7d15f3deea23f50911feae22bae96341a5baca20b59c7982caf7a91a51e152f |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e
| MD5 | 214f75e42aa5cfca07257cbf8c64e83c |
| SHA1 | ba4bbe71d4ab266bc145305217cdf86a7777137f |
| SHA256 | a6760631fecfe59ed152aeb2c51fdcb515ac00cd4755449016b5b34813735d00 |
| SHA512 | e8d896c8c3509941fbce96e2847838a520b3bc8d94348b1121840a1a2a45328be939238423a03cdfb7823cf128eec3190de8b4c1924553d603ef02fa856217e0 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d
| MD5 | 6471b0f9e3a8354d6ca79f46f361887d |
| SHA1 | 5e463c9f52e2c61ce8cd9c1b82abf00ed66a259c |
| SHA256 | a82cf4c922189b14c3f7ebe5a2d8b6cea17ed594a92457095eb679a43ec1c738 |
| SHA512 | db2783931f2ec58b0c55490872cc2b494847e27ec5555820dedac97beca1336efd868768a31e1dcb42ee931cfe5b236b3c85bd619cbc181f9dd03efa96999bfc |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017
| MD5 | e4cc1ece2f2425b10ae2ccc212c1dafc |
| SHA1 | 92609e6d0093693110baa23758382889bcb30da6 |
| SHA256 | 92e9415d8bc8529e2a3f335258ef7ff159cce2965ce3b2b7c15f73720efee809 |
| SHA512 | 2848dee3a6da891b7044518bc97aeafd340705cebe846350b9a7f314b52450f1eb977b8b492638965ce4674ebaa341e4f832438199c3cad2fb0a0793ef83a619 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | fe527a76430ca349fbcb7e62105d5405 |
| SHA1 | 0af8e38bfc5d20f74174eefba071008a2c77dafb |
| SHA256 | 6e7f4916c459a6f4db5d666557ca9fb677631c197991f4c3265e8a17dba2f7f2 |
| SHA512 | 59f852a8963980ea0adb17c8cc78b97edf46c68e1d90ba80e33022fab4124ea7d718971cfdb3f91e6d9fdf25bddb796f1f6cf09b504f25be3e25eb996aded50a |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 66f518a03e02d0af1e2f439de293b344 |
| SHA1 | 2a1ba491c5ca53d7e0b3f9c334a56faa427fa14f |
| SHA256 | 0e2e2078c6abb871224cf26b74e5a85384f11fde3ed709e149c76d3bfe95afc7 |
| SHA512 | 989770f8ce3c36f6ecb913d37e5de59013f12eab23d92e8b2e9008f68b1a9541b80c60f541d0f440c77172bd7ab9df8702dbabe99141a0864e77c6b4f0370cb6 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 492b3c1c2de968366fcee67cc87832af |
| SHA1 | 889774259fb641bcf584f8110cd4a9db247b01d6 |
| SHA256 | fedf5d8c0b4bea7d073005b0323a720bdf86e2845f8350919755a27a6fc29035 |
| SHA512 | ba8139d212abe37a1c6c9940c1068e5bf6e3d47aa3d072577407ce922cb62106315727a701a6bf77fe1224c703acc6fc096fa228abb42c90cfb2612e10f0c0b1 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_C39E9DBC666D19C07EEE7CD1E11AF8BE
| MD5 | 1db1080e4d5ce3a2303791a83ad3ec3d |
| SHA1 | fdd1d76b59571b0b2002d9bd1401a3c649a7f475 |
| SHA256 | ea058727f61bc31295685639281e0b63259e050611dc47569c1ba76398095674 |
| SHA512 | 609faa42210df1bc4348064bb90fc0e6a6e1e3b9ca1a23305ea89fcd88eebb96d2858cff820a13fdb986e91212836198ed3f1267695ab2b9cb9d333841bb4c61 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\773CFF2C7835D48C4E76FE153DBA9F81_15174A80589B8DAF9768E9131F4845C0
| MD5 | 7bc688f34e4785e32e5eeb1aefb40216 |
| SHA1 | 6abc0ca6fadbb746f592ab2891ee58705b4f1e8b |
| SHA256 | b445e3bb4ea75af28a5133ddf1d51fc94d3a500ed5da5f9b08544241a8d23e85 |
| SHA512 | 1fc99d31ff674f2f00ba15c92ba135d0371aad0595f07dd5ae0b46de6c335636070c96995287b1d472f3fa3dc238108dbe469bf7a0a5c1e450c0206e33debd71 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\773CFF2C7835D48C4E76FE153DBA9F81_15174A80589B8DAF9768E9131F4845C0
| MD5 | bd96b5a04362779bfb368a640fafdfd1 |
| SHA1 | f35a4a9166faaf795d0d77529db0817641160601 |
| SHA256 | 9299db46361e75c3570c41a54064bf1d12b3e414e2a1ea00c48166182816d6aa |
| SHA512 | 9a660ff04d00786622f850454423cecac54841edb92e6913e8169602c8532ff4acf7d961a22e0ff08e86c70cc78ef6ac98f8a5c50355bb151d6a5602d6d59d72 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_C39E9DBC666D19C07EEE7CD1E11AF8BE
| MD5 | 981d43bc6a2e2e82ac7bd67997480122 |
| SHA1 | 565299469aa5bc2ad825f721a33e462db901825a |
| SHA256 | be98e84173bc0da4af3ae60b878dfffe5fcd08c286fd790c8e9f31ffac45febb |
| SHA512 | 8af245fb1272688874b6f6b8c59b989dd807b22328b41cd187fb922c2b2321d5443bbda6d95e25e38319bd11a26488b895063f5702738437810bf7cbfbaffb74 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000032
| MD5 | 8e433c0592f77beb6dc527d7b90be120 |
| SHA1 | d7402416753ae1bb4cbd4b10d33a0c10517838bd |
| SHA256 | f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af |
| SHA512 | 5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 74086b8ee3fa37129fd3b32fd43f045a |
| SHA1 | 2ba801ea93b89968ee2ba9e3a12a4f7bb87e42c4 |
| SHA256 | c365951c900773bf57fb83fe0421f955ea44942451f921c32aa2bf888fe05c57 |
| SHA512 | df8fefe5e164cec7295a2db0ff9dcb7fc0530236864c302d477ec155022140a557119fcf6aa573f748d9c02ea02dd1f85758d8b5a1005fd24d7e81f88dafe09e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | f54d82503f1fb9d5bf1e6a9af61e81bb |
| SHA1 | 2c1a7ad24039fedb6b902e7704feb0febc0eadfa |
| SHA256 | c5ed214662d96df38eced401e4b7ed5853c26e9e330ed80bafd5036d6c8d1de0 |
| SHA512 | 11fd09decfa3150bfa04ea124762b104e9ce72dc4c45e5ce215b47b6902ff9ad639715428608a8a9e5d8ee46c6be320559e5bec8d85f69f503fbf84617a312db |
C:\Users\Admin\PCAppStore\nwjs\locales\bg.pak.info
| MD5 | 82d7ab0ff6c34db264fd6778818f42b1 |
| SHA1 | eb508bd01721ba67f7daad55ba8e7acdb0a096eb |
| SHA256 | e84331e84cd61d8bdacc574d5186fb259c00467513aa3f2090406330f68a45db |
| SHA512 | 176458b03cc2b2d3711965cd277531e002ae55d284b6c9178d2353e268f882430235468e5a1e9e45c8427864d109cf30a024a993b4763a75fa2744f6e0a6ae2a |
C:\Users\Admin\AppData\Local\Temp\nsiEA3A.tmp\Math.dll
| MD5 | 85428cf1f140e5023f4c9d179b704702 |
| SHA1 | 1b51213ddbaedfffb7e7f098f172f1d4e5c9efba |
| SHA256 | 8d9a23dd2004b68c0d2e64e6c6ad330d0c648bffe2b9f619a1e9760ef978207a |
| SHA512 | dfe7f9f3030485caf30ec631424120030c3985df778993342a371bf1724fa84aa885b4e466c6f6b356d99cc24e564b9c702c7bcdd33052172e0794c2fdecce59 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751
| MD5 | 822467b728b7a66b081c91795373789a |
| SHA1 | d8f2f02e1eef62485a9feffd59ce837511749865 |
| SHA256 | af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9 |
| SHA512 | bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751
| MD5 | edc6cb1b18de969207f98ef593d37f68 |
| SHA1 | bb1aacc8591bae03dcd6db7c91a9307d8b0808f5 |
| SHA256 | fcc3589b978be342720c9336cc277f10be1ac364e49dbc3ad6aea89e4026b120 |
| SHA512 | 7ebffb16637c6c55f37452fa519ab240c402de2e3a4fd430aa74afdeb81d68d24768564fae7154faab1dc822314f95cbded2420bedec698de6acc5ec9564551f |
C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Sync Data\LevelDB\MANIFEST-000001
| MD5 | 5af87dfd673ba2115e2fcf5cfdb727ab |
| SHA1 | d5b5bbf396dc291274584ef71f444f420b6056f1 |
| SHA256 | f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4 |
| SHA512 | de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b |
C:\Users\Admin\AppData\Local\pc_app_store\User Data\GraphiteDawnCache\data_3
| MD5 | 41876349cb12d6db992f1309f22df3f0 |
| SHA1 | 5cf26b3420fc0302cd0a71e8d029739b8765be27 |
| SHA256 | e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c |
| SHA512 | e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e |
C:\Users\Admin\AppData\Local\pc_app_store\User Data\GraphiteDawnCache\data_2
| MD5 | 0962291d6d367570bee5454721c17e11 |
| SHA1 | 59d10a893ef321a706a9255176761366115bedcb |
| SHA256 | ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7 |
| SHA512 | f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed |
C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\426a41e3-cc2d-4232-b593-bfa3d9fae4a2.tmp
| MD5 | 728fe78292f104659fea5fc90570cc75 |
| SHA1 | 11b623f76f31ec773b79cdb74869acb08c4052cb |
| SHA256 | d98e226bea7a9c56bfdfab3c484a8e6a0fb173519c43216d3a1115415b166d20 |
| SHA512 | 91e81b91b29d613fdde24b010b1724be74f3bae1d2fb4faa2c015178248ed6a0405e2b222f4a557a6b895663c159f0bf0dc6d64d21259299e36f53d95d7067aa |
C:\Users\Admin\AppData\Local\pc_app_store\User Data\GraphiteDawnCache\data_1
| MD5 | d0d388f3865d0523e451d6ba0be34cc4 |
| SHA1 | 8571c6a52aacc2747c048e3419e5657b74612995 |
| SHA256 | 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b |
| SHA512 | 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17 |
C:\Users\Admin\AppData\Local\pc_app_store\User Data\GraphiteDawnCache\data_0
| MD5 | cf89d16bb9107c631daabf0c0ee58efb |
| SHA1 | 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b |
| SHA256 | d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e |
| SHA512 | 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000061
| MD5 | 9708e5224c10eb91f435950128a72070 |
| SHA1 | cc66f87dad487f1db80dc78942a7016d26725ae9 |
| SHA256 | 834c60d1648bb2b2c84ab278eb0690ffdbd6f9dfa393d561eb38aa026dbdef8d |
| SHA512 | 8a7a126e028f6def7f03d4fc69831c2bccabebc48b7d97b816eb263a817934b8db1beb9baf1763ec7421640ef594e0a7fb65ef21cbfdadd90c3c88332f4022c5 |
C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Web Applications\_nwjs_pcapp.store\pc_app_store.ico.md5
| MD5 | 03e9f614a008075733c76883156b568b |
| SHA1 | 5f9cb1b06928487c4b836e9dedc688e8a9650b0b |
| SHA256 | b1a6a6fb45ad1e13054c40dc7c09e3098ee830bcf1ebaec27f640ae4c64b8416 |
| SHA512 | 7e6969c8908a6bf57bd2cb4457a7c78360468383acee589278e49829617e2f3b872dd8213e57a2ed8f512d444c67a2e619deabdc1394d1c39c7759ed3c744f94 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cd395aa419a5eeaf_0
| MD5 | ecb5eb9d37a5e27bdf3f1a56c61333c4 |
| SHA1 | 736b7c3f59c8e05ba25c88d973a98bdc53abfe98 |
| SHA256 | ec0ee7212d2b927c2e49638f019f3063c9c02f4fcb2e4d4f4187f9a966e17542 |
| SHA512 | 714b868bf506a9c47703a2e3453c800dfb35d285dfad73e88bcd492e1d9bd949d4cfedc78d190b1255e424dfbceb279d64cd63bab81d51483146242265b9656c |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 7ca68fa73ca468ed12a470f1a609d6b1 |
| SHA1 | 85c099a7a20e6e4a00dce0971dcd28daa6d85e32 |
| SHA256 | a60f07465728031415182004a277624ba298b458cc9a2315e8b6f38248e66198 |
| SHA512 | 3d1f7edd620edaa86bf58ce6f2480407aee4e41fcabb8c0ad8ba1a9ccc58ee6fbb8b5d9e9e95ac8f03f58fd0b0848c5ca3d6271fb742c9f382b45c5df293b656 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 314e2758b6bc720fae1aebe3dab63e3e |
| SHA1 | b163d5fe38108446bb155fdd97639dfdc3086bdf |
| SHA256 | efec3e4cc7994a9dc8a33132dca11fb4243d704cca30cb8c6a0e552343329699 |
| SHA512 | 6df058b3b5ff45f6ed8e4d1cfa932e333d9ff3a44506f99017a86d92b6cead83a5b23b33cecf704adcea0afaaf7a9529c987d3ea4569e14b6edac92f6a7022ce |
C:\Users\Admin\PCAppStore\download\SetupEngine.exe
| MD5 | 836a21bedb824a49b27341108c16cff2 |
| SHA1 | c4fceb238fa23c8e6c684eb7a97c15c8de46f855 |
| SHA256 | b1fd7f24a386a2038bd2928c18f21aaeb2d6e7763e9cf58a19121398db67c52b |
| SHA512 | 6d90c2391fa918049c52a624206e0cf96a1586bd4494f37e7b0b61b5ba8a4cb6fe5eabd4490d509c79f6018904576368fd86da1bd557b51b6e4f3ff4fccf1afc |
C:\Users\Admin\AppData\Local\pc_app_store\User Data\5b0d0f47-567f-4956-af3e-8bb482bd43f2.tmp
| MD5 | e324e0b3486293c452c6008e123eec09 |
| SHA1 | d0679b6157980645214bc4f8bb59a57286dc77f3 |
| SHA256 | ab9d57c374ecbe974cbe558588bbd25cd38582e55ae14256d22d5770f898b15f |
| SHA512 | 19bc0ccfd209507ae062d57edeaf5f35fa7586e44844344b977a596eb6056eec3744d27db8db3d16739d0da93e54897e6865ee3fd00590df8fc578ce4df71ace |
C:\Users\Admin\AppData\Local\pc_app_store\User Data\Local State~RFe5d472d.TMP
| MD5 | 419e025777f2a008cc264a6db8d50e48 |
| SHA1 | 9acf7b919d3804d55afc6a2b30d1cee9793dd371 |
| SHA256 | 0fc39168fc31a2b3d2cc4e2025c0483c1b96cfd17cb3f971e58e0ef66b5e1484 |
| SHA512 | b6838b1b983d63e1609217b7aa826136298fbb66e56adcf33bbc8ddb46bd9182942735a08329e98fc17270f27a0a8f418e2b3c634149ad3e7d6f00b1c7c61eb1 |
C:\Users\Admin\AppData\Local\Temp\nsp45A8.tmp\modern-wizard.bmp
| MD5 | cbe40fd2b1ec96daedc65da172d90022 |
| SHA1 | 366c216220aa4329dff6c485fd0e9b0f4f0a7944 |
| SHA256 | 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2 |
| SHA512 | 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | e561f8599746f3e58c4128efed47b12f |
| SHA1 | bb955997172fb6711f52bed9a360706f3953f887 |
| SHA256 | 8741651ed3953c0272fe782ebe4ce58fed2dbb548db471f8a9985ff1330205e8 |
| SHA512 | 528bd47a806df5e00d7f03203b4396b3d8b0ee2f2e93fff19fd429df75faabbabd906fcdfda86ccbaaf5fdb784c300530e17c79d995ce6f6efb5562a8026f0bb |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | d06132eee545e92f6b980aaa57a0b42e |
| SHA1 | a3347755a0cbace28f00324345feb97c1c4eb7a9 |
| SHA256 | 13ba0e616b703343911faf5b49ef8daffe02fbf227abb1ad36133cb6b3da26e6 |
| SHA512 | 3a8ea9caef8f1a8fb7bc7f6bd5f732ebd63a5aa62335c3ce733b37c95de950541918d00e0d4fbe52c390d06be525186af448f66f143c41bd9c4f5014ec4d52c8 |
C:\Users\Admin\AppData\Local\Temp\nsp45A8.tmp\Banner.dll
| MD5 | a1b9bdee9fc87d11676605bd79037646 |
| SHA1 | 8d6879f63048eb93b9657d0b78f534869d1fff64 |
| SHA256 | 39e3108e0a4ccfb9fe4d8caf4fb40baa39bdd797f3a4c1fa886086226e00f465 |
| SHA512 | cd65d18eca885807c7c810286cebef75555d13889a4847bb30dc1a08d8948893899cc411728097641a8c07a8dcc59e1c1efa0e860e93dada871d5b7acc61b1e5 |
C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences~RFe5d713b.TMP
| MD5 | 1c6e4954ddac810a33b11b3ce2198df6 |
| SHA1 | c8070f22379fae8b60f2ace353c21c7d21d746c6 |
| SHA256 | 24e175c92ca802763cbef1597726a2027762b9d02eb7693fde9344bdae39afdf |
| SHA512 | 989cc78bc87d78fa2781f0fa19c1d36fb6d953401da97717363cab8ab5e432a9ea2112f596be96862a8e80229f1f017f920fba6b4d7ae35ca42e2f363a87d969 |
C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences
| MD5 | ec9fabcd76c5bb63589519cc2bd07c3b |
| SHA1 | 64b2b93f7cddd63403953af677b7131060e8dd50 |
| SHA256 | 193ea81df4d4ea3163bc6278662e8e5d8fdeedde72899be9f595b54e33924975 |
| SHA512 | 93e7c03c474961fbf67e53b3658de84e3160f3e88dfc52ae0db92124ac39317e4044b0bd2d55bc7f4262673137ce9a1e5a5d67cc72e9c3c6fe409dabd7480d61 |
C:\Users\Admin\AppData\Local\pc_app_store\User Data\Local State
| MD5 | b2fff90c53f2f3738364eebb9b5bde7c |
| SHA1 | 44ec4a3f275d2701e089df69e0e21f2b4d60f078 |
| SHA256 | f7f5ca94049007001686137278b65bce21d2db2b1d2751a378ca1105702e91b0 |
| SHA512 | fc1c5a5b4ebc14f70ee6d810436b4d8d98346b5b25e56f393a8c13318b68e9209d4693debf4d595b3961214d7f883025d2f7f511d1d8a34450bf81280f8ae467 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004a
| MD5 | 78280e0728c2021056c93954af683365 |
| SHA1 | f422d6f6682d904f7905b1cd7308f9f59062db44 |
| SHA256 | d5424e6657f959e1c026b7c119249cffedeff2e272912dfd6d0e0f7e04bcbd81 |
| SHA512 | aa64da37e187cac342d5c5cdd33d76d2bdf1bfd8cc49257ce1a4c0877a527aedab28ecfa0eaefc5c7f803bf3f51d94544bf8662430be50d2101c32c5d11f4b93 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043
| MD5 | 67e30bbc30fa4e58ef6c33781b4e835c |
| SHA1 | 18125beb2b3f1a747f39ed999ff0edd5a52980ee |
| SHA256 | 1572e2beb45d2de9d63a7e7fe03c307d175b2b232bad2e763623dceb747729ba |
| SHA512 | 271d4a65d25b0a5d2ff2fe8f3925fc165d9b4345893abfd919061d78ffc5ffe8890ded35e41274ad8b860f06264b027cfea6030ec9411a4e03bc6d7cb4d4d228 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000044
| MD5 | b44ae10069bcc3f69241236bf77cf12a |
| SHA1 | 84460f394a5de239b92735cfa2295fa91317c071 |
| SHA256 | 13a04a3904e9c14f5e191f247ebc229d2af511e3a036b79ce3ea5ba0bac3c84d |
| SHA512 | 61588590e2a1022bb8eb4830f8785ecdf9d2a3ae17007f2cf0460f1f46fc08ec579c682c08ff19c45d0caf0099ad520a110e2e1fd783fac4715b1af3b8ebffe0 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004c
| MD5 | 4ba86a857f7f8f6cdbba7ec4142795e0 |
| SHA1 | d0aa9ec6fab3987d917bf506c2680880f8d195f0 |
| SHA256 | f51b70163eda0b588c9c21ab3339cc81ad8d07917b69dfd0e3b5769d4c726026 |
| SHA512 | 6c6daa54055f147f735aa100ca99df97d63087fe87e53eaca17ff37b404307b5810626914c37a8e643a4f9574d50d8fcfd308b4dea96162d0badc8803ef03d66 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000042
| MD5 | 78e43d694d760b88cd0cfec30c4e82dd |
| SHA1 | 9cfaa48a5866ffa0ec4a046ac1d48668c7339531 |
| SHA256 | 7549167d22d7b96648d665170d972d63749b27fae282dbcc569c4827d1b021df |
| SHA512 | d5dcd5cafd2ec7620ff99f5e2e0b2c21511dc76053165b4a01f99cee51d7aa22dc47a68d04dc0dc0bcdae302946770cd27300ac0af62d002d9a331e328ce23c5 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000045
| MD5 | 7651b1187bb58ac4c7be625337b35e5b |
| SHA1 | 307d969ef4137a66fe2793737dc1c546587c7f43 |
| SHA256 | 0632850d01a46bc2f8c223155a4bf6c398b33596bb711e098440623f118c3968 |
| SHA512 | a81d2f768af155bdc642941404e7ddf95a2cea33c9374acb5fe32f6f5266e337fbef32f904551f61fcc9f9ab5a1c6a5ad130ab85b38bc2258e2f82c0ca1e9c7a |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000046
| MD5 | fbff909073e3ae3f4b4e739acc933cd4 |
| SHA1 | 30b0f7aba8b6148846bb5db4b1df10ff2f558e8c |
| SHA256 | 798be14c1370c87d937c1087b2f162f79c50cadcb2d8b5eab76611f325cf0a8e |
| SHA512 | e44d34914ced8c3b4ee78fa39f7d95bd38c5532471009191ba90f8faebe0f51991f295b33a60e82bc97225ebfc87fa10d1481a29bf1a77f7f5037c03b451e1b5 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000052
| MD5 | 131427faf783a8337d39211a26beb7a2 |
| SHA1 | 7d3c256574351272f30734d9fa08cc1e63173c9d |
| SHA256 | 5c15d15abb46e6862d494ffe987623f874ab21a457b152d557cd11de41644b55 |
| SHA512 | d6c992fab918ccba2fd7212f5a55f530358f3221c51ddcf405c513040f09808f7f07d0ab89ce5690083fee56c4c38184096fa1a9691b4c628be6f2494820deb3 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000051
| MD5 | 7dd17c7f6f9f3288cf44dba950e14015 |
| SHA1 | 03f866cf3a59d57a9d0f98619ac38d52cc415c01 |
| SHA256 | fed74a9f2350b474d674e06422b402221d7d4c30b20ea28a55f2aeb644b15314 |
| SHA512 | b584cf0648ef2cd23e07d4d479860ba6bad31ee719a9eb4c47cd883848f554c7bf29ff7596646fe483d39b05147d2052536444a4c97131e4914ee2e3276bfa11 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000050
| MD5 | b787bd69348e38aad5a2c0f0c899e1d7 |
| SHA1 | bb99c84d3929a939f79ca1caa9a4922ea9367b8b |
| SHA256 | e3957b9ca5ebaa433f3516423ceb881b6828c757a613ff8889f01836adfc33c6 |
| SHA512 | d5e26f83e0778a086109794defc26a3f23bcd86427c37e26d7de565d061649d5a7a8cf22c0b7e9120210b78f87fe003bc45a352a2914537776e2a5f2e7f46c8d |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004e
| MD5 | 85f2ca6bf1f4e718f98c77e2955b16d0 |
| SHA1 | 7a9a36f78320087b636309664519ed1831d3a8c7 |
| SHA256 | fa17a5b6f4d0632f2a5cd8e5b52f8e5d93808b87ff4e8e028627eaf1381604c6 |
| SHA512 | 5211edb2c4d544957f81a4c669baec9ecb111f83d7b2e3e1cfee3cd2be542cdb380a37edf60e91c024f337145385a9ef2d09d6c89280296b54c64d7920302f05 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000053
| MD5 | 3859fdcc9dfc8ee238149b68a1cb2f98 |
| SHA1 | 4c78ac8554c35cdd4ec8a0318bde9bba8b670b67 |
| SHA256 | 9a2ec9b64eee6bfdf104fe6b873c26c8ae22b90c9ef77ce61217030f16d81d31 |
| SHA512 | dc15c3e84175327f6e99ac1130927b0cd1f194e4759553151bb54b6f7b3256f35a690f8650a3d0806a34f3b4855b6936c3373180b9f9c838dac8c7fbfe6e681f |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004f
| MD5 | 65d3f83d879428f73e751d9a36db6db1 |
| SHA1 | a19668aecd92ffeaec17643ae7d6140ad763351c |
| SHA256 | 8e802d53da4fd798ca61b4aefc77e20767bd4696e15312b0ac7229679292560c |
| SHA512 | e2550db4a106da242ccfa4dd8346364d0223a6034d38232dd3b867c79e18620da631fb4ad0c90c42ba3e69c17b9256df8ed05646feccbaae2fbcdb9129884ae8 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004d
| MD5 | 97a3bed6457d042c94c28ed74ec2d887 |
| SHA1 | 02ce7a6171fb1261fde13a8c7cbb58992e9d5299 |
| SHA256 | ae56cf83207570afbb8a6ab7cbc4128b37f859cb6f55661e69e97a3314c02f67 |
| SHA512 | 6c8cf955ec73ad9d97bbb36c7ce723bfa58c9aef849aa775ee64ce15afa70afb40e8cd45989dadec420d2e8edda9ec0f05cc76a0602df0b6c4e5d45de0f4ce7a |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000055
| MD5 | 1a926de57b10dd95ae4bc02cd27e413f |
| SHA1 | 89e1673b0bca03c1d450a64a9b50493b0dbf97d3 |
| SHA256 | e120372a7baadbfc71e3c219f66fa6822752232e066bc11c8014d2d343ac9572 |
| SHA512 | 785b5a18e7f6efbf7d241d14e1891719cb3d13d3739f67efa9b27cdcf73d33e3eb2648ef2b61932cd482ac324fc3de01f1a5e37060d35e7547093b72e521b485 |
C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 35f148ecefcca59c782d5cd63c304d2a |
| SHA1 | 40abd1aeda5b1b6be77f29d36bc6a17a2470ea52 |
| SHA256 | 8b9566167f070946cb1e0e676518a168966f1fdad83ffbcc29398060b23416b5 |
| SHA512 | f40ba953ceda8b314c6064a15e9833e37c9555a97fe08c20be91d4e7ff1d126855ff9c2fac633bea9f31f0c85d28866815289bbffb67f421c137ea4137a92fa6 |
C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5d7f16.TMP
| MD5 | fb120191802de9dd0cdebcc08bd47056 |
| SHA1 | 521efd5ef7a168762e0e10f8d2c15a20adb9e322 |
| SHA256 | 998ecdbc1b199fa139ec98ff4e5911708ec9d6be20c3f07a4a8232df9536f45c |
| SHA512 | 3e813390f52e236666a5f99a0b45cd6040b790fcdc4cb49e6b2c6e9a97fb0ace1b800a9d838d28758c74cea1e11ee45435785764be18004c00f89cc12376e076 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000056
| MD5 | 7222d69fbca9d2c3b5b35d34a9265297 |
| SHA1 | c3c833645b8945d6deb3da20b314fee12e959de6 |
| SHA256 | 61c29b97732c7b66793b3e9e64dae71a59310629cc56d39a1c37c8d6723a6965 |
| SHA512 | 3a40756ee68e77531217a3d01dd6004297a6bba366eac42b6fd51c2ce969e8afb72651b9819f2447d99db88f0367a2e0b4788971d8fd60b6281393c80ebfafdb |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000057
| MD5 | 79cf44db94eb465700d65a45a527b379 |
| SHA1 | a9ea6a3d2b3a3a61bf80caa643b077dc7fc10787 |
| SHA256 | 78996e6ffff1656b85b4b50393b4a9f1133550694f87e66f9c2b937bc7dd2c4e |
| SHA512 | 7a2edf730c401e21b69b86528489adf587f4b830ceba0af2834bc7c69937e754c0a3e18ee9a174910391846a94394fc87bf927fb101fe899275bf072c804a519 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | ac974ae2ace6f71e26dd557efa8db999 |
| SHA1 | 8f0520043aa7672c73c818008086cfbf5f15d02e |
| SHA256 | 460a778fecfa38fd6763e80a5613ea0cd81ddc979bf0cb2ed1b9123aa8f0539a |
| SHA512 | 2915bd4d0d2cfaaafc68c109704a2f3cd776b7127dbdc3e833f6a8086087415a390a9df2b448cf52ed0c73e2d8eae92f6c7304ab56ba3766c1af41e781fd7268 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b3
| MD5 | 588ee33c26fe83cb97ca65e3c66b2e87 |
| SHA1 | 842429b803132c3e7827af42fe4dc7a66e736b37 |
| SHA256 | bbc4044fe46acd7ab69d8a4e3db46e7e3ca713b05fa8ecb096ebe9e133bba760 |
| SHA512 | 6f7500b12fc7a9f57c00711af2bc8a7c62973f9a8e37012b88a0726d06063add02077420bc280e7163302d5f3a005ac8796aee97042c40954144d84c26adbd04 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 812fd6ca22dacd2e709dc0aed227f233 |
| SHA1 | d4683b6603ceb8c213e86299de5f7ad044b41376 |
| SHA256 | 89c681bb82fbe77e5df9e49a590552dff4f0970c3e1c9fadd16131563dd4722d |
| SHA512 | 3375937713b91afda6a0c5c0c847ef257b6c7ca0e7880158dcc0c19df20bc2b89421c55c422c5398a8c545b9f7ed87944f356ec4d6cc5cb46687206adca30b1d |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005f
| MD5 | 2257803a7e34c3abd90ec6d41fd76a5a |
| SHA1 | f7a32e6635d8513f74bd225f55d867ea56ae4803 |
| SHA256 | af23860fb3a448f2cc6107680078402555a345eb45bc5efb750f541fe5d7c174 |
| SHA512 | e9f4dc90d0829885f08879e868aa62041150b500f62682fc108da258eee26ad9509dcbf6e8a55f2d0bdba7aa9118dd149a70a7d851820d4ea683db7808c48540 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000074
| MD5 | 9c6b5ce6b3452e98573e6409c34dd73c |
| SHA1 | de607fadef62e36945a409a838eb8fc36d819b42 |
| SHA256 | cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc |
| SHA512 | 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7 |
C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences
| MD5 | 988e7421f730ffacb8a707a26b9bc758 |
| SHA1 | 7c2c73cce7cf902653e98d0710746b4c2e1458ff |
| SHA256 | 0a4525db1d103ff6b62e605f336ed2d37ad20b7be9cd823f7ea7f476a0d702e3 |
| SHA512 | 9e4878e1bd043a2bcfd85a9786df4913b4a3a1b8f044584cea403ba41ad3b50389f04a43d2e3ff9299c7eb6b889bf3fa3480e4251cf0d676074d6f54e7951745 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | 25724d9bfba9e3f92c1f440c0653efe8 |
| SHA1 | db8303816e53c47639ecf9350fb007b045d942c5 |
| SHA256 | a742df673618d15766a8381b828a890ee4c2022739801ef8fae2212ca1ab689b |
| SHA512 | 34333b6e2d19c4bc5dddb8ba2e925a3e9266065ffe554274d14d37ea264f5f9293a6b7d9fa9e3cbd3d7993d5e57c05b7fd898abd872c6d923b6035824efb6f1c |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | a76d0972d6eb0853c007a9692cf3e6f4 |
| SHA1 | 0d6de821fcee247d850e9bc550208a5f9575624b |
| SHA256 | 328cfe3e7c36145a143b4526ac3ffb3fb827958dab8a1ad8226d6ef9b941c288 |
| SHA512 | ec017a04599246e721d85a3aea02386c31e93496edbf66c0db7607a4950efc08f77021e2e76728e08732a04f4ac60f045c2ab205fcf8e73f4e7051d72b096af4 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 46307c8421194f67334ae0fcc2547a88 |
| SHA1 | 8aef73ec86c6d105ca5e03c3c8511255e4b6a1ab |
| SHA256 | 1a5cc137fd313a1813f527262ba372867aaa13250287553d1ecfa0b0b0ba3419 |
| SHA512 | 3753813a88edb1a907ddea7b7c1eee1bbc3a89c49de6fe957d10c487d11b7b9d0d408eb710979a6fb4404f34b8d5eebdde9fdce605a5e00b6cea6e3d25442339 |