Malware Analysis Report

2025-03-15 04:18

Sample ID 240825-hr918ssfpn
Target https://www.techspot.com/downloads/5235-minecraft.html
Tags
bootkit discovery evasion motw persistence phishing privilege_escalation spyware stealer trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://www.techspot.com/downloads/5235-minecraft.html was found to be: Likely malicious.

Malicious Activity Summary

bootkit discovery evasion motw persistence phishing privilege_escalation spyware stealer trojan

Downloads MZ/PE file

Executes dropped EXE

Loads dropped DLL

Event Triggered Execution: Component Object Model Hijacking

Reads user/profile data of web browsers

Checks computer location settings

Looks up external IP address via web service

Mark of the Web detected: This indicates that the page was originally saved or cloned.

Adds Run key to start application

Checks installed software on the system

Enumerates connected drives

Checks for any installed AV software in registry

Writes to the Master Boot Record (MBR)

Checks whether UAC is enabled

Checks system information in the registry

Drops file in System32 directory

Drops file in Program Files directory

Launches sc.exe

Drops file in Windows directory

Browser Information Discovery

System Location Discovery: System Language Discovery

Embeds OpenSSL

Enumerates physical storage devices

System Network Configuration Discovery: Internet Connection Discovery

Suspicious use of FindShellTrayWindow

Uses Volume Shadow Copy service COM API

Checks SCSI registry key(s)

Checks processor information in registry

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Modifies data under HKEY_USERS

Enumerates system info in registry

Modifies registry class

Modifies system certificate store

Runs net.exe

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Uses Task Scheduler COM API

NTFS ADS

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of AdjustPrivilegeToken

Suspicious use of SendNotifyMessage

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-25 06:59

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-25 06:59

Reported

2024-08-25 07:09

Platform

win10v2004-20240802-en

Max time kernel

591s

Max time network

592s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.techspot.com/downloads/5235-minecraft.html

Signatures

Downloads MZ/PE file

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Downloads\MinecraftInstaller.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Wavesor\Temp\GUMFBC2.tmp\SWUpdater.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Downloads\Wave Browser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Downloads\Setup.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\nsn4ACE.tmp\OWinstaller.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\Watchdog.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\download\SetupEngine.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\Downloads\MinecraftInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUMFBC2.tmp\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\Install\{7CFCF607-E98F-475F-A4B6-52146AAFAEFA}\WaveInstaller-v1.5.18.2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\download\SetupEngine.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\download\SetupEngine.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\download\SetupEngine.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\download\SetupEngine.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\download\SetupEngine.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\download\SetupEngine.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUMFBC2.tmp\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\AvRepair = "\"C:\\Program Files\\Avast Software\\Avast\\setup\\instup.exe\" /instop:repair /wait" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PCAppStore = "\"C:\\Users\\Admin\\PCAppStore\\PCAppStore.exe\" /init default" C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PcAppStoreUpdater = "\"C:\\Users\\Admin\\PCAppStore\\AutoUpdater.exe\" /i" C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Watchdog = "\"C:\\Users\\Admin\\PCAppStore\\Watchdog.exe\" /guid=ACD03E19-89E2-40D7-B0F4-25B8A05635EEX /rid=20240825070053.521240695453 /ver=fa.1091v" C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Wavesor SWUpdater = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.135.0\\SWUpdaterCore.exe\"" C:\Program Files (x86)\Wavesor\Temp\GUMFBC2.tmp\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PCAppStore = "\"C:\\Users\\Admin\\PCAppStore\\PCAppStore.exe\" /init default" C:\Users\Admin\AppData\Local\Temp\nszB877.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PcAppStoreUpdater = "\"C:\\Users\\Admin\\PCAppStore\\AutoUpdater.exe\" /i" C:\Users\Admin\AppData\Local\Temp\nszB877.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Watchdog = "\"C:\\Users\\Admin\\PCAppStore\\Watchdog.exe\" /guid=ACD03E19-89E2-40D7-B0F4-25B8A05635EEX /rid=20240825070710.48241071984 /ver=fa.1091v" C:\Users\Admin\AppData\Local\Temp\nszB877.tmp N/A

Checks for any installed AV software in registry

Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\UseRegistry = "1" C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key opened \REGISTRY\MACHINE\Software\Avira\Antivirus C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\LicenseFile C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key opened \Registry\MACHINE\SOFTWARE\Avast Software\Avast C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ReportFolder C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\burger_client C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\FwDataFolder C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\JournalFolder C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\Instup_IgnoredDownloadTypes C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\CrashGuardProcessWatcherExclusions C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ProgramFolder C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ChestFolder C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\avast! Antivirus C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ProgramFolder C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\TempFolder C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\CertificateFile C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\MovedFolder C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Windows\Temp\asw.ff478427afa03b36\avast_free_antivirus_setup_online_x64.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\CertificateFile C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\UseRegistry C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\DataFolder C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\CrashGuardProcessWatcherExclusions C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ReportFolder C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ShepherdDebug C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\burger_client C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\DataFolder C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\SetupLog = "C:\\ProgramData\\Avast Software\\Persistent Data\\Avast\\Logs\\Setup.log" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\settings C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ChestFolder C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\LogFolder C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key opened \Registry\MACHINE\SOFTWARE\Avast Software\Avast C:\Windows\Temp\asw.ff478427afa03b36\avast_free_antivirus_setup_online_x64.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\TempFolder C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\properties\UseRegistry C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\MovedFolder C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key opened \REGISTRY\MACHINE\Software\Avira\Antivirus C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\FwDataFolder C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\JournalFolder C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\Instup_IgnoredDownloadTypes C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\LicenseFile C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\ShepherdDebug C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast C:\Windows\Temp\asw.ff478427afa03b36\avast_free_antivirus_setup_online_x64.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\LogFolder C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast\SetupLog = "C:\\ProgramData\\Avast Software\\Persistent Data\\Avast\\Logs\\Setup.log" C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Wavesor\Temp\GUMFBC2.tmp\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
File opened (read-only) \??\J: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\System32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A ipapi.co N/A N/A
N/A ipapi.co N/A N/A

Mark of the Web detected: This indicates that the page was originally saved or cloned.

phishing motw
Description Indicator Process Target
N/A https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html N/A N/A

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.ff478427afa03b36\avast_free_antivirus_setup_online_x64.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
File opened for modification \??\PhysicalDrive0 C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\DriverStore\FileRepository\hdaudbus.inf_amd64_533c8d455025cc59\hdaudbus.PNF C:\Windows\System32\DxDiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_0d06b6638bdb4763\mshdc.PNF C:\Windows\System32\DxDiag.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\machine.inf_amd64_b748590104fe1c15\machine.PNF C:\Windows\System32\DxDiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\input.inf_amd64_adeb6424513f60a2\input.PNF C:\Windows\System32\DxDiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_amd64_1793a485b491b199\msmouse.PNF C:\Windows\System32\DxDiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF C:\Windows\System32\DxDiag.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF C:\Windows\System32\DxDiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_amd64_5938c699b80ebb8f\keyboard.PNF C:\Windows\System32\DxDiag.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\hdaudbus.inf_amd64_533c8d455025cc59\hdaudbus.PNF C:\Windows\System32\DxDiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\keyboard.inf_amd64_5938c699b80ebb8f\keyboard.PNF C:\Windows\System32\DxDiag.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\netrtl64.inf_amd64_8e9c2368fe308df2\netrtl64.PNF C:\Windows\System32\DxDiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_254cd5ae09de6b08\usbport.PNF C:\Windows\System32\DxDiag.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\msmouse.inf_amd64_1793a485b491b199\msmouse.PNF C:\Windows\System32\DxDiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netrtl64.inf_amd64_8e9c2368fe308df2\netrtl64.PNF C:\Windows\System32\DxDiag.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\mshdc.inf_amd64_0d06b6638bdb4763\mshdc.PNF C:\Windows\System32\DxDiag.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\machine.inf_amd64_b748590104fe1c15\machine.PNF C:\Windows\System32\DxDiag.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\usbport.inf_amd64_254cd5ae09de6b08\usbport.PNF C:\Windows\System32\DxDiag.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\input.inf_amd64_adeb6424513f60a2\input.PNF C:\Windows\System32\DxDiag.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\chrome_Unpacker_BeginUnzipping6964_884326912\LICENSE C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\jrog2-157d.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\servers.def.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24082500\asw9fb44205eb8f4e7e.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping6964_1360456532\manifest.fingerprint C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\vps_tools_64-1559.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\setup\prod-pgm.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\setup\servers.def C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping6964_884326912\_platform_specific\win_x64\widevinecdm.dll.sig C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24082500\aswac6ad5e3fa9d36d3.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMFBC2.tmp\psuser.dll C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping6964_1360456532\manifest.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping6964_34593562\safety_tips.pb C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\prod-pgm.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24082500\aswfe5fd0894d8a958b.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24082500\aswe6d61fc68bf6dc21.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMFBC2.tmp\swupdater.dll C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMFBC2.tmp\SWUpdaterCore.exe C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\ais_gen_gui_x64-8df.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\ais_gui_res-8b0.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMFBC2.tmp\swupdaterres_en.dll C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\avdump_x86_ais-a48.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\setup\part-prg_ais-180817ef.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24082500\asw72b7821a53f91845.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24082500\aswe7b81a4467aa9901.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\ais_cmp_cleanup_x64-848.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\vps_binaries-1559.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\config.def C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24082500\aswe6d61fc68bf6dc21.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24082500\asw52b4a271690b3391.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24082500\aswe7b81a4467aa9901.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24082500\asw38a59fde8eda0dcf.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\servers.def C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24082500\aswe23a145c14ee4d78.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24082500\asw72b7821a53f91845.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24082500\aswdad955df17fe7fe1.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24082500\aswdad955df17fe7fe1.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\ais_cmp_rescuedisk_x64-8df.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping6964_34593562\manifest.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\sbr_x64_ais-a48.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24082500\asw21b3ba398dda9a01.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\ais_cmp_bpc-7e7.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\offertool_x64_ais-a48.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\setup\config.ini C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24082500\aswb46d642e2ad0ff4a.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\ais_gen_core_x64-8df.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\part-jrog2-157d.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\defs\24082500\aswb76de2ca3cf855a8.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\vps_defs_common-1559.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24082500\asw294c760c65ada262.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24082500\asw38a59fde8eda0dcf.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMFBC2.tmp\SWUpdater.exe C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping6964_884326912\manifest.fingerprint C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\ais_cmp_idp_x64-92a.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping6964_34593562\_metadata\verified_contents.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\config.ini C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\defs\24082500\asw182b1914e7a3f821.tmp C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\ais_core-994.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\ais_gui_cef_x64-7e8.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\avdump_x64_ais-a48.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File created C:\Program Files\Avast Software\Avast\setup\part-setup_ais-180817ef.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\ais_gen_crt_x86-833.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
File opened for modification C:\Program Files\Avast Software\Avast\setup\ais_shl_mai_x64-8df.vpx C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\Installer\e5db652.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\{6A960B34-5197-49DE-AC60-1177DFE24976}\minecraft.ico C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5db652.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\SourceHash{6A960B34-5197-49DE-AC60-1177DFE24976} C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIBA1C.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5db654.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\inprogressinstallinfo.ipi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIBF00.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\{6A960B34-5197-49DE-AC60-1177DFE24976}\minecraft.ico C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIB846.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIBB94.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log C:\Windows\system32\msiexec.exe N/A

Launches sc.exe

Description Indicator Process Target
N/A N/A C:\Windows\system32\sc.exe N/A
N/A N/A C:\Windows\system32\sc.exe N/A

Browser Information Discovery

discovery

Embeds OpenSSL

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\MinecraftInstaller.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Setup (1).exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\syswow64\MsiExec.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\PCAppStore\download\SetupEngine.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\syswow64\MsiExec.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\Install\{7CFCF607-E98F-475F-A4B6-52146AAFAEFA}\WaveInstaller-v1.5.18.2.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Buff Achievement Tracker - Installer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Public\Documents\aswOfferTool.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Buff Achievement Tracker - Installer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Public\Documents\aswOfferTool.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Wavesor\Temp\GUMFBC2.tmp\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\syswow64\MsiExec.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\nszB877.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe N/A

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Windows\System32\DxDiag.exe N/A
Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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 C:\Windows\system32\vssvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Windows\System32\DxDiag.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Windows\System32\DxDiag.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs C:\Windows\System32\DxDiag.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\System32\DxDiag.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr C:\Windows\system32\vssvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 C:\Windows\system32\vssvc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID C:\Windows\System32\DxDiag.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\Temp\asw.ff478427afa03b36\avast_free_antivirus_setup_online_x64.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Windows\Temp\asw.ff478427afa03b36\avast_free_antivirus_setup_online_x64.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\Temp\asw.ff478427afa03b36\avast_free_antivirus_setup_online_x64.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133690428589155065" C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\26\52C64B7E C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27 C:\Windows\system32\msiexec.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\ = "IAppCommand" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Syncer = "45" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\WOW6432Node\Interface\{8129608C-48BD-42A6-9EBC-7B0933A5CFA3}\NumMethods\ = "12" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{3BE77C6E-0029-4F24-B677-32C9E15CD8F1}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\43B069A67915ED94CA061177FD2E9467 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "File downloaded: ais_core-994.vpx" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Main = "37" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: vps_tools_64" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: part-vps_windows-24082500.vpx" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{62A51DF2-CCB8-4DD9-9069-34B8461617FC}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\WOW6432Node\CLSID\{DB982438-E7B9-46E1-AF0F-CFD8947957E8}\InprocHandler32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{C0151E6C-8D24-485D-BEC8-B6C6C82E26E8}\NumMethods\ = "23" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\WOW6432Node\CLSID\{D12748C8-5013-45E2-9A24-2FB7C2EEFB7C}\ = "SWUpdater CredentialDialog" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\.htm\OpenWithProgids\WaveBrwsHTM.LMFDYGSWDT5N3K2BCGAHJQFRXE C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject\CurVer C:\Windows\System32\DxDiag.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Syncer = "88" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_UpdateSetup_Syncer = "1" C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{7DFF302B-EA41-49F8-97B1-9413CEF98C68}\NumMethods\ = "10" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\WOW6432Node\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\NumMethods\ = "16" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\WOW6432Node\Interface\{3BE77C6E-0029-4F24-B677-32C9E15CD8F1}\NumMethods\ = "4" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\WOW6432Node\Interface\{DDF98EF0-2728-4A8D-8B0F-32627DC56437}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\WaveBrwsHTM.LMFDYGSWDT5N3K2BCGAHJQFRXE\DefaultIcon\ = "C:\\Users\\Admin\\Wavesor Software\\WaveBrowser\\wavebrowser.exe,0" C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject.1 C:\Windows\System32\DxDiag.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Syncer = "76" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\WOW6432Node\Interface\{E44B162B-4287-40B0-8E7A-6E251D80B3DF} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\.webp\OpenWithProgids\WaveBrwsHTM.LMFDYGSWDT5N3K2BCGAHJQFRXE C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Syncer = "17" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Syncer = "28" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\NumMethods\ = "4" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\WOW6432Node\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\WOW6432Node\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6}\NumMethods\ = "11" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{2C53B9D4-A718-4972-B28E-2E7AF1055602}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{730EBDF4-7AD2-4516-BF1A-6C6F28C60CF9}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Syncer = "61" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\CLSID\{DB982438-E7B9-46E1-AF0F-CFD8947957E8} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\WOW6432Node\Interface\{DDF98EF0-2728-4A8D-8B0F-32627DC56437}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{50363C3E-2FB2-4EC0-A827-CD3314F526C5}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{2C53B9D4-A718-4972-B28E-2E7AF1055602} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\43B069A67915ED94CA061177FD2E9467\AdvertiseFlags = "388" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_UpdateSetup_Syncer = "47" C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_UpdateSetup_Syncer = "63" C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\CLSID C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{97518FC7-7CA2-4921-BC40-F4A07E221C1C}\NumMethods\ = "10" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\.html C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\.xht C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Syncer = "9" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: part-jrog2-157d.vpx" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\WOW6432Node\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\wavebrowser\URL Protocol C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Syncer = "23" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Installation_Syncer = "78" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AvastPersistentStorage\InstupProgress_Description = "Extracting file: instup_x64_ais" C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32\ThreadingModel = "Both" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\ = "ICredentialDialog" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\WOW6432Node\CLSID\{9E0CE9B5-C498-40A8-B7F2-B89AF1C56FFF}\VersionIndependentProgID C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 663241.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 220937.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 528134.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 642608.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 360841.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 234776.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Runs net.exe

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp N/A
N/A N/A C:\Users\Admin\PCAppStore\Watchdog.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\Watchdog.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\Watchdog.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\Watchdog.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Windows\System32\sdiagnhost.exe N/A
N/A N/A C:\Windows\System32\sdiagnhost.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe N/A
N/A N/A C:\Windows\Temp\asw.ff478427afa03b36\avast_free_antivirus_setup_online_x64.exe N/A
N/A N/A C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsn4ACE.tmp\OWinstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsn4ACE.tmp\OWinstaller.exe N/A
N/A N/A C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsn4ACE.tmp\OWinstaller.exe N/A
N/A N/A C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe N/A
N/A N/A C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\OWinstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\OWinstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\OWinstaller.exe N/A
N/A N/A C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe N/A
N/A N/A C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\sbr.exe N/A
N/A N/A C:\Windows\System32\DxDiag.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 100 wrote to memory of 4716 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 4716 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 2480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 4840 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 4840 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 100 wrote to memory of 32 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.techspot.com/downloads/5235-minecraft.html

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd09e646f8,0x7ffd09e64708,0x7ffd09e64718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2820 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5244 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5244 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4144 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5812 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6008 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6020 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5784 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7108 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7116 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7240 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7524 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5168 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8240 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8376 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8420 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8648 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7500 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8960 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9356 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9456 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9784 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9236 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7640 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6668 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7116 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9960 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10056 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8748 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=10364 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=11248 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2804 /prefetch:8

C:\Users\Admin\Downloads\Setup.exe

"C:\Users\Admin\Downloads\Setup.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://pcapp.store/installing.php?guid=ACD03E19-89E2-40D7-B0F4-25B8A05635EEX&winver=19041&version=fa.1091v&nocache=20240825070027.374&_fcid=1724569207016181

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xfc,0x128,0x7ffd09e646f8,0x7ffd09e64708,0x7ffd09e64718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=10476 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=10016 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7392 /prefetch:1

C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp

"C:\Users\Admin\AppData\Local\Temp\nsb53BB.tmp" /internal 1724569207016181 /force

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7796 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8544 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10300 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8656 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8972 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5608 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9060 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6336 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10348 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6148 /prefetch:8

C:\Users\Admin\PCAppStore\PcAppStore.exe

"C:\Users\Admin\PCAppStore\PcAppStore.exe" /init default

C:\Users\Admin\PCAppStore\Watchdog.exe

"C:\Users\Admin\PCAppStore\Watchdog.exe" /guid=ACD03E19-89E2-40D7-B0F4-25B8A05635EEX /rid=20240825070053.521240695453 /ver=fa.1091v

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

.\nwjs\NW_store.exe .\ui\.

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\pc_app_store\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" --annotation=plat=Win64 --annotation=prod=pc_app_store --annotation=ver=0.1.0 --initial-client-data=0x2ac,0x2b0,0x2b4,0x2a8,0x2b8,0x7ffcf554a960,0x7ffcf554a970,0x7ffcf554a980

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2096 --field-trial-handle=2100,i,1215791878139423374,13830421383139710306,262144 --variations-seed-version /prefetch:2

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --start-stack-profiler --mojo-platform-channel-handle=2104 --field-trial-handle=2100,i,1215791878139423374,13830421383139710306,262144 --variations-seed-version /prefetch:3

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=2236 --field-trial-handle=2100,i,1215791878139423374,13830421383139710306,262144 --variations-seed-version /prefetch:8

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --nwjs --extension-process --no-appcompat-clear --no-sandbox --file-url-path-alias="/gen=C:\Users\Admin\PCAppStore\nwjs\gen" --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3024 --field-trial-handle=2100,i,1215791878139423374,13830421383139710306,262144 --variations-seed-version /prefetch:2

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=4108 --field-trial-handle=2100,i,1215791878139423374,13830421383139710306,262144 --variations-seed-version /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Users\Admin\PCAppStore\download\SetupEngine.exe

"C:\Users\Admin\PCAppStore\download\SetupEngine.exe"

C:\Users\Admin\PCAppStore\PcAppStore.exe

"C:\Users\Admin\PCAppStore\PcAppStore.exe" /init default showM

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7068 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5544 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8848 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6156 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9484 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4640 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9044 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8280 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10996 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10176 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8724 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11200 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10364 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8828 /prefetch:1

C:\Users\Admin\PCAppStore\PcAppStore.exe

"C:\Users\Admin\PCAppStore\PcAppStore.exe" /init default showM

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=5060 --field-trial-handle=2100,i,1215791878139423374,13830421383139710306,262144 --variations-seed-version /prefetch:8

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=5100 --field-trial-handle=2100,i,1215791878139423374,13830421383139710306,262144 --variations-seed-version /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7528 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=8392 /prefetch:8

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=5092 --field-trial-handle=2100,i,1215791878139423374,13830421383139710306,262144 --variations-seed-version /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10200 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3064 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7140 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6280 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6928 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7600 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x3c0 0x33c

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7772 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6580 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8448 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=11072 /prefetch:8

C:\Users\Admin\Downloads\MinecraftInstaller.exe

"C:\Users\Admin\Downloads\MinecraftInstaller.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11096 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe

"C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe" scenarioMinecraft

C:\Windows\system32\msdt.exe

"C:\Windows\system32\msdt.exe" /id WindowsUpdateDiagnostic /skip TRUE

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7156 /prefetch:1

C:\Windows\System32\sdiagnhost.exe

C:\Windows\System32\sdiagnhost.exe -Embedding

C:\Windows\system32\wevtutil.exe

"C:\Windows\system32\wevtutil.exe" epl Microsoft-Windows-AppXDeploymentServer/Operational C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\Microsoft-Windows-AppXDeploymentServer_Operational.evtx /ow:true

C:\Windows\system32\wevtutil.exe

"C:\Windows\system32\wevtutil.exe" epl Microsoft-Windows-AppXDeployment/Operational C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\Microsoft-Windows-AppXDeployment_Operational.evtx /ow:true

C:\Windows\system32\wevtutil.exe

"C:\Windows\system32\wevtutil.exe" epl Microsoft-Windows-AppxPackaging/Operational C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\Microsoft-Windows-AppxPackaging_Operational.evtx /ow:true

C:\Windows\system32\wevtutil.exe

"C:\Windows\system32\wevtutil.exe" epl Microsoft-Windows-AppModel-Runtime/Admin C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\Microsoft-Windows-AppModel-Runtime_Admin.evtx /ow:true

C:\Windows\system32\wscollect.exe

"C:\Windows\system32\wscollect.exe" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\wscollect_gr.cab

C:\Windows\System32\reg.exe

C:\Windows\System32\reg.exe export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SIH" "C:\Users\Admin\AppData\Local\Temp\registry_SIH.txt" /y

C:\Windows\System32\reg.exe

C:\Windows\System32\reg.exe export "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters\DnsPolicyConfig" "C:\Users\Admin\AppData\Local\Temp\registry_DNSPolicy.txt" /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKLM\Software\Microsoft\GamingServices" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\HKLM_GRTS.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKCU\Software\Microsoft\GamingServices" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\HKCU_GRTS.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKCU\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\HKCU_AppModel.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\HKLM_AppModel.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\HKLM_Appx.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKCU\SOFTWARE\Classes\ActivatableClasses\Package" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\HKCU_Package.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\HKLM_WuPolicy.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKLM\SYSTEM\CurrentControlSet\Services\GamingServices" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\GS_Service.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKLM\SYSTEM\CurrentControlSet\Services\GamingServicesNet" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\GSNet_Service.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKLM\SYSTEM\CurrentControlSet\Services\GameFlt" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\GameFlt_Service.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKLM\SYSTEM\CurrentControlSet\Services\Xvdd" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\Xvdd_Service.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKLM\SYSTEM\CurrentControlSet\Services\XblAuthManager" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\XblAuthManager_Service.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKLM\SYSTEM\CurrentControlSet\Services\XblGameSave" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\XblGameSave_Service.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKLM\SYSTEM\CurrentControlSet\Services\GameInput Service" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\GameInput_Service.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKLM\SYSTEM\CurrentControlSet\Services\DoSvc" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\DoSvc_Service.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKLM\SYSTEM\CurrentControlSet\Services\InstallService" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\InstallService_Service.reg /y

C:\Windows\system32\reg.exe

"C:\Windows\system32\reg.exe" export "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\wuauserv_Service.reg /y

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=10532 /prefetch:8

C:\Users\Admin\Downloads\Wave Browser.exe

"C:\Users\Admin\Downloads\Wave Browser.exe"

C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe

"C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"

C:\Program Files (x86)\Wavesor\Temp\GUMFBC2.tmp\SWUpdater.exe

"C:\Program Files (x86)\Wavesor\Temp\GUMFBC2.tmp\SWUpdater.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /regserver

C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe" /user

C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe" /user

C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe" /user

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /handoff "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1" /installsource otherinstallcmd /sessionid "{37CE4305-BD6E-4DCA-9319-75BF27B54923}"

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding

C:\Windows\System32\sdiagnhost.exe

C:\Windows\System32\sdiagnhost.exe -Embedding

C:\Windows\system32\sfc.exe

"C:\Windows\system32\sfc.exe" /scanfile=C:\Windows\system32\Qmgr.dll

C:\Windows\system32\sc.exe

"C:\Windows\system32\sc.exe" sdshow bits

C:\Windows\system32\bitsadmin.exe

"C:\Windows\system32\bitsadmin.exe" /reset /allusers

C:\Windows\system32\net.exe

"C:\Windows\system32\net.exe" start bits

C:\Windows\system32\net1.exe

C:\Windows\system32\net1 start bits

C:\Users\Admin\Wavesor Software\SWUpdater\Install\{7CFCF607-E98F-475F-A4B6-52146AAFAEFA}\WaveInstaller-v1.5.18.2.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\Install\{7CFCF607-E98F-475F-A4B6-52146AAFAEFA}\WaveInstaller-v1.5.18.2.exe" /installerdata="C:\Users\Admin\AppData\Local\Temp\gui4945.tmp"

C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe

"C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\wavebrowser.packed.7z" --wid=0e9aa0z0 --installerdata="C:\Users\Admin\AppData\Local\Temp\gui4945.tmp"

C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe

C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.2 --initial-client-data=0x274,0x278,0x27c,0x250,0x280,0x7ff7cc4112d0,0x7ff7cc4112dc,0x7ff7cc4112e8

C:\Windows\system32\sfc.exe

"C:\Windows\system32\sfc.exe" /scanfile=C:\Windows\system32\Qmgr.dll

C:\Windows\system32\sc.exe

"C:\Windows\system32\sc.exe" sdshow bits

C:\Windows\system32\bitsadmin.exe

"C:\Windows\system32\bitsadmin.exe" /reset /allusers

C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe

"C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe" --verbose-logging --installerdata="C:\Users\Admin\AppData\Local\Temp\gui4945.tmp" --create-shortcuts=0 --install-level=0

C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe

C:\Users\Admin\AppData\Local\Temp\nsb4CE0.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.2 --initial-client-data=0x274,0x278,0x27c,0x250,0x280,0x7ff7cc4112d0,0x7ff7cc4112dc,0x7ff7cc4112e8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --install-type=1 --from-installer

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.2 --initial-client-data=0x11c,0x120,0x124,0x100,0x128,0x7ffceb8cccf0,0x7ffceb8cccfc,0x7ffceb8ccd08

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1928,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=1912 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --start-stack-profiler --field-trial-handle=1952,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2112 /prefetch:3

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2328,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2340 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=2976,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3420 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=2988,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3544 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3284,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3676 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4508,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4488 /prefetch:8

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-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-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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc291cmNlX3VybF9pbmRleD0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjY2MCIgZG93bmxvYWRfdGltZV9tcz0iMTE2MTEiIGRvd25sb2FkZWQ9IjEwNjgxMTA4MCIgdG90YWw9IjEwNjgxMTA4MCIgaW5zdGFsbF90aW1lX21zPSIxMzM3OCIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3648,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4616 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4520,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4696 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4724,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4832 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4584,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4740 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4720,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4944 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4560,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5060 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=4548,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5176 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4712,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5292 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=4748,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5408 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=4756,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5524 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --instant-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4704,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5640 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6336,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6244 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6468,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6484 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=6672,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6692 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6892,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6856 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6996,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6932 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3772,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3676 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6464,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6360 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4700,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6052 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7108,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6376 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7452,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7468 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7448,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7612 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5060,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6112 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7880,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5044 /prefetch:8

C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe

"C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe" scenarioMinecraft

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8016,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7876 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7900,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8000 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7844,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6108 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6020,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7620 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=7788,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7772 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7672,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8208 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8220,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5256 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7796,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5268 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7932,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4572 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7952,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7736 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7632,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7516 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7724,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4556 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7504,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6564 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7568,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3640 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7556,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8272 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7544,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8528 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8676,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8688 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7732,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7552 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8948,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8964 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9108,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9120 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9140,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9100 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9272,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9432 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9572,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9260 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9600,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9568 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9836,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9852 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9420,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10024 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10016,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9728 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9848,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9772 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=10328,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9720 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10464,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10468 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10604,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10624 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10784,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10364 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10764,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10608 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10772,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10768 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11388,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11396 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11392,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10776 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10780,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11208 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11816,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11828 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11200,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11968 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12112,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12120 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7700,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12264 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12116,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12420 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12560,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12260 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12588,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12720 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10000,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11256 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11336,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12564 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12868,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12992 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --field-trial-handle=13220,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10592 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --field-trial-handle=9960,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13132 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --field-trial-handle=9912,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13332 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --field-trial-handle=10544,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9868 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --field-trial-handle=6368,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6372 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --field-trial-handle=10692,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10704 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --field-trial-handle=6364,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6540 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --field-trial-handle=10628,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9800 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7352,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6616 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=7592,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8660 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=5260,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7376 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=6600,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7832 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=11144,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9780 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9308,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8224 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=8900,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8852 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8996,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10476 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7660,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8740 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9652,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7552 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11436,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11440 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=10220,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10268 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --field-trial-handle=9124,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10236 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9360,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13196 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9264,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11496 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7536,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7500 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5636,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11056 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5664,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7780 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8476,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11056 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4824,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10424 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --field-trial-handle=9288,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9696 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=6160,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5768 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --field-trial-handle=5764,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8412 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --field-trial-handle=8464,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7460 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --field-trial-handle=11444,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11172 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --field-trial-handle=8504,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12376 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --field-trial-handle=8828,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11452 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --field-trial-handle=9656,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8480 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --field-trial-handle=12136,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9468 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --field-trial-handle=9532,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12156 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --field-trial-handle=4600,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12200 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=10432,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8744 /prefetch:8

C:\Windows\System32\msiexec.exe

"C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\Downloads\MinecraftInstaller.msi"

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding 49503918A55C9CD3286885183B627A0D C

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --field-trial-handle=8440,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13116 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --field-trial-handle=12204,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11344 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=9316,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7380 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=8800,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11432 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5640,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11528 /prefetch:8

C:\Users\Admin\Downloads\Setup (1).exe

"C:\Users\Admin\Downloads\Setup (1).exe"

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --field-trial-handle=7344,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11340 /prefetch:2

C:\Windows\system32\srtasks.exe

C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://pcapp.store/installing.php?guid=ACD03E19-89E2-40D7-B0F4-25B8A05635EEX&winver=19041&version=fa.1091v&nocache=20240825070620.194&_fcid=1724569207016181

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffd09e646f8,0x7ffd09e64708,0x7ffd09e64718

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding 4F3319EEDFF01D63B3C0631AE687F88C

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding F5606A6D9F027E170D4BFB3235AECC50 E Global\MSI0000

C:\Users\Admin\AppData\Local\Temp\nszB877.tmp

"C:\Users\Admin\AppData\Local\Temp\nszB877.tmp" /internal 1724569207016181 /force

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6508,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11316 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9252 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8500 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7968 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1020,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6004 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8628 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7872 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3472 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3412 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11320 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6896 /prefetch:1

C:\Users\Admin\PCAppStore\PcAppStore.exe

"C:\Users\Admin\PCAppStore\PcAppStore.exe" /init default

C:\Users\Admin\PCAppStore\Watchdog.exe

"C:\Users\Admin\PCAppStore\Watchdog.exe" /guid=ACD03E19-89E2-40D7-B0F4-25B8A05635EEX /rid=20240825070710.48241071984 /ver=fa.1091v

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11468 /prefetch:1

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

.\nwjs\NW_store.exe .\ui\.

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\pc_app_store\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" --annotation=plat=Win64 --annotation=prod=pc_app_store --annotation=ver=0.1.0 --initial-client-data=0x2a0,0x2a4,0x2a8,0x29c,0x2ac,0x7ffcf549a960,0x7ffcf549a970,0x7ffcf549a980

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7476 /prefetch:1

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1924 --field-trial-handle=1936,i,9673347967512084073,11046279423823835402,262144 --variations-seed-version /prefetch:2

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --start-stack-profiler --mojo-platform-channel-handle=2148 --field-trial-handle=1936,i,9673347967512084073,11046279423823835402,262144 --variations-seed-version /prefetch:3

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=2240 --field-trial-handle=1936,i,9673347967512084073,11046279423823835402,262144 --variations-seed-version /prefetch:8

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --nwjs --extension-process --no-appcompat-clear --no-sandbox --file-url-path-alias="/gen=C:\Users\Admin\PCAppStore\nwjs\gen" --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3060 --field-trial-handle=1936,i,9673347967512084073,11046279423823835402,262144 --variations-seed-version /prefetch:2

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=4248 --field-trial-handle=1936,i,9673347967512084073,11046279423823835402,262144 --variations-seed-version /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11664 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7820 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6992,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12084 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2336 /prefetch:1

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=4868 --field-trial-handle=1936,i,9673347967512084073,11046279423823835402,262144 --variations-seed-version /prefetch:8

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=4732 --field-trial-handle=1936,i,9673347967512084073,11046279423823835402,262144 --variations-seed-version /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6832 /prefetch:8

C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe

"C:\Users\Admin\Downloads\avast_free_antivirus_setup_online.exe"

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --field-trial-handle=12076,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10408 /prefetch:2

C:\Windows\Temp\asw.ff478427afa03b36\avast_free_antivirus_setup_online_x64.exe

"C:\Windows\Temp\asw.ff478427afa03b36\avast_free_antivirus_setup_online_x64.exe" /cookie:mmm_sft_dlp_000_119_h:dlid_FAV-PPC /ga_clientid:11378a45-5ec0-43ac-8538-0b7c24f8f929 /edat_dir:C:\Windows\Temp\asw.ff478427afa03b36 /geo:GB

C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe

"C:\Windows\Temp\asw.cb357a2c39b5029f\instup.exe" /sfx:lite /sfxstorage:C:\Windows\Temp\asw.cb357a2c39b5029f /edition:1 /prod:ais /stub_context:ac0ade44-5005-4b35-b8a2-9b01d2cde7b9:9941352 /guid:ec681a36-794a-45dd-acf5-702aaa325a7d /ga_clientid:11378a45-5ec0-43ac-8538-0b7c24f8f929 /no_delayed_installation /cookie:mmm_sft_dlp_000_119_h:dlid_FAV-PPC /ga_clientid:11378a45-5ec0-43ac-8538-0b7c24f8f929 /edat_dir:C:\Windows\Temp\asw.ff478427afa03b36 /geo:GB

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10352 /prefetch:1

C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe

"C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\instup.exe" /sfx /sfxstorage:C:\Windows\Temp\asw.cb357a2c39b5029f /edition:1 /prod:ais /stub_context:ac0ade44-5005-4b35-b8a2-9b01d2cde7b9:9941352 /guid:ec681a36-794a-45dd-acf5-702aaa325a7d /ga_clientid:11378a45-5ec0-43ac-8538-0b7c24f8f929 /no_delayed_installation /cookie:mmm_sft_dlp_000_119_h:dlid_FAV-PPC /edat_dir:C:\Windows\Temp\asw.ff478427afa03b36 /geo:GB /online_installer

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=11588 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=11448 /prefetch:8

C:\Users\Admin\Downloads\Buff Achievement Tracker - Installer.exe

"C:\Users\Admin\Downloads\Buff Achievement Tracker - Installer.exe"

C:\Users\Admin\AppData\Local\Temp\nsn4ACE.tmp\OWinstaller.exe

"C:\Users\Admin\AppData\Local\Temp\nsn4ACE.tmp\OWinstaller.exe" Sel=1&Partner=3762&Extension=caboggillkkpgkiokbjmgldfkedbfnpkgadakcdl&Name=Buff%20Achievement%20Tracker&Thanks=https%3A%2F%2Fbuff.game%2Fthank-you-page%2F&UtmSource=bing&UtmMedium=cpc&UtmCampaign=BF_EN_UK_DSA_Prospecting_Auto_23_05_2024&UtmTerm=https%3A%2F%2Fwww.buff.game&UtmContent=exitpop90&Referer=www.buff.game&Browser=microsoftedge -partnerCustomizationLevel 0 --app-name="Buff" -exepath C:\Users\Admin\Downloads\Buff Achievement Tracker - Installer.exe

C:\Windows\System32\DxDiag.exe

"C:\Windows\System32\DxDiag.exe" /tC:\Users\Admin\AppData\Local\Overwolf\Temp\DxDiagOutput.txt

C:\Users\Admin\Downloads\Buff Achievement Tracker - Installer.exe

"C:\Users\Admin\Downloads\Buff Achievement Tracker - Installer.exe"

C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe

"C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe" -checkGToolbar -elevated

C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe

"C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe" /check_secure_browser

C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe

"C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe" -checkChrome -elevated

C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe

"C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe" -checkChromeReactivation -elevated -bc=AVFC

C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\OWinstaller.exe

"C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\OWinstaller.exe" Sel=1&Partner=3762&Extension=caboggillkkpgkiokbjmgldfkedbfnpkgadakcdl&Name=Buff%20Achievement%20Tracker&Thanks=https%3A%2F%2Fbuff.game%2Fthank-you-page%2F&UtmSource=bing&UtmMedium=cpc&UtmCampaign=BF_EN_UK_DSA_Prospecting_Auto_23_05_2024&UtmTerm=https%3A%2F%2Fwww.buff.game&UtmContent=exitpop90&Referer=www.buff.game&Browser=microsoftedge -partnerCustomizationLevel 0 --app-name="Buff" -exepath C:\Users\Admin\Downloads\Buff Achievement Tracker - Installer.exe

C:\Users\Public\Documents\aswOfferTool.exe

"C:\Users\Public\Documents\aswOfferTool.exe" -checkChromeReactivation -bc=AVFC

C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe

"C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe" -checkChromeReactivation -elevated -bc=AVFC

C:\Users\Public\Documents\aswOfferTool.exe

"C:\Users\Public\Documents\aswOfferTool.exe" -checkChromeReactivation -bc=AVFC

C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe

"C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\aswOfferTool.exe" -checkChrome -elevated

C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\sbr.exe

"C:\Windows\Temp\asw.cb357a2c39b5029f\New_180817ef\sbr.exe" 3400 "Avast Antivirus setup" "Avast Antivirus is being installed. Do not shut down your computer!"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5200 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12396,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12412 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --field-trial-handle=12072,i,5238624234050246231,8122350978379688639,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7524 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3596 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11532 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11376 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9260 /prefetch:1

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4800 --field-trial-handle=1936,i,9673347967512084073,11046279423823835402,262144 --variations-seed-version /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11280 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8900 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,9171735075221996085,17518834318894706651,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8176 /prefetch:1

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /c

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ua /installsource scheduler

C:\Program Files\Avast Software\Avast\SetupInf.exe

"C:\Program Files\Avast Software\Avast\SetupInf.exe" /uninstall /catalog:aswRdr2.cat

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 www.techspot.com udp
US 104.22.79.92:443 www.techspot.com tcp
US 104.22.79.92:443 www.techspot.com tcp
US 8.8.8.8:53 cmp.quantcast.com udp
GB 143.204.68.101:443 cmp.quantcast.com tcp
US 8.8.8.8:53 6093eccf-6734-4877-ac8b-83d6d0e27b46.edge.permutive.app udp
US 8.8.8.8:53 freyr.futurecdn.net udp
US 8.8.8.8:53 cmp.inmobi.com udp
US 8.8.8.8:53 bordeaux.futurecdn.net udp
US 8.8.8.8:53 92.79.22.104.in-addr.arpa udp
US 8.8.8.8:53 81.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 101.68.204.143.in-addr.arpa udp
US 104.18.35.13:443 6093eccf-6734-4877-ac8b-83d6d0e27b46.edge.permutive.app tcp
US 8.8.8.8:53 unpkg.com udp
GB 18.245.253.55:443 freyr.futurecdn.net tcp
GB 18.245.143.91:443 bordeaux.futurecdn.net tcp
GB 18.244.114.118:443 cmp.inmobi.com tcp
US 104.17.245.203:443 unpkg.com tcp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 static.chartbeat.com udp
US 8.8.8.8:53 img.youtube.com udp
US 104.18.35.13:443 6093eccf-6734-4877-ac8b-83d6d0e27b46.edge.permutive.app tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
FR 142.250.75.226:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 eventsproxy.gargantuan.futureplc.com udp
US 8.8.8.8:53 sommelier.futurehybrid.tech udp
IE 54.170.204.126:443 eventsproxy.gargantuan.futureplc.com tcp
US 8.8.8.8:53 ads.servebom.com udp
US 8.8.8.8:53 55.253.245.18.in-addr.arpa udp
US 8.8.8.8:53 91.143.245.18.in-addr.arpa udp
US 8.8.8.8:53 118.114.244.18.in-addr.arpa udp
US 8.8.8.8:53 203.245.17.104.in-addr.arpa udp
US 8.8.8.8:53 66.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 68.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 13.35.18.104.in-addr.arpa udp
US 8.8.8.8:53 43.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 226.75.250.142.in-addr.arpa udp
US 8.8.8.8:53 api.permutive.com udp
US 34.107.254.252:443 api.permutive.com tcp
IE 54.170.204.126:443 eventsproxy.gargantuan.futureplc.com tcp
US 8.8.8.8:53 api.cmp.inmobi.com udp
DE 3.125.91.136:443 api.cmp.inmobi.com tcp
DE 3.125.91.136:443 api.cmp.inmobi.com tcp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
GB 18.244.161.205:443 static.chartbeat.com tcp
FR 172.217.18.206:443 img.youtube.com tcp
US 8.8.8.8:53 ping.chartbeat.net udp
US 54.80.21.73:443 ping.chartbeat.net tcp
IE 54.155.133.203:443 sommelier.futurehybrid.tech tcp
GB 108.138.233.22:443 ads.servebom.com tcp
US 8.8.8.8:53 252.254.107.34.in-addr.arpa udp
US 8.8.8.8:53 136.91.125.3.in-addr.arpa udp
US 8.8.8.8:53 73.80.16.104.in-addr.arpa udp
US 8.8.8.8:53 205.161.244.18.in-addr.arpa udp
US 8.8.8.8:53 206.18.217.172.in-addr.arpa udp
US 8.8.8.8:53 200.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 234.75.250.142.in-addr.arpa udp
US 8.8.8.8:53 73.21.80.54.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 216.239.32.36:443 region1.analytics.google.com tcp
GB 74.125.71.154:443 stats.g.doubleclick.net tcp
FR 142.250.201.163:443 www.google.co.uk tcp
US 8.8.8.8:53 131.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 22.233.138.108.in-addr.arpa udp
US 8.8.8.8:53 174.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 203.133.155.54.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 126.204.170.54.in-addr.arpa udp
US 8.8.8.8:53 154.71.125.74.in-addr.arpa udp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 8.8.8.8:53 163.201.250.142.in-addr.arpa udp
US 150.171.27.10:443 g.bing.com tcp
US 8.8.8.8:53 10.27.171.150.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 prod.euid.eu udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 cdn.adsafeprotected.com udp
US 8.8.8.8:53 ats-wrapper.privacymanager.io udp
US 8.8.8.8:53 cdn.pbxai.com udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
US 8.8.8.8:53 6093eccf-6734-4877-ac8b-83d6d0e27b46.prmutv.co udp
GB 3.11.19.58:443 prod.euid.eu tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 104.18.23.145:443 cadmus.script.ac tcp
FR 142.250.201.162:443 ep1.adtrafficquality.google tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net tcp
GB 18.154.84.109:443 ats-wrapper.privacymanager.io tcp
US 35.241.9.51:443 6093eccf-6734-4877-ac8b-83d6d0e27b46.prmutv.co tcp
GB 54.192.139.162:443 c.amazon-adsystem.com tcp
GB 18.172.153.15:443 cdn.adsafeprotected.com tcp
GB 143.244.38.136:443 cdn.pbxai.com tcp
NL 185.89.211.84:443 ib.adnxs.com tcp
US 8.8.8.8:53 apps.identrust.com udp
US 34.107.254.252:443 api.permutive.com udp
US 8.8.8.8:53 cdn.permutive.com udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
GB 92.123.143.201:80 apps.identrust.com tcp
US 104.17.118.17:443 cdn.permutive.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 142.250.179.97:443 ep2.adtrafficquality.google tcp
US 104.17.118.17:443 cdn.permutive.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
GB 108.156.39.35:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
GB 108.156.39.35:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 image6.pubmatic.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 www.google.com udp
NL 198.47.127.19:443 image6.pubmatic.com tcp
FR 142.250.179.68:443 www.google.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
FR 142.250.75.226:443 googleads.g.doubleclick.net udp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 58.19.11.3.in-addr.arpa udp
US 8.8.8.8:53 145.23.18.104.in-addr.arpa udp
US 8.8.8.8:53 109.84.154.18.in-addr.arpa udp
US 8.8.8.8:53 51.9.241.35.in-addr.arpa udp
US 8.8.8.8:53 136.38.244.143.in-addr.arpa udp
US 8.8.8.8:53 162.139.192.54.in-addr.arpa udp
US 8.8.8.8:53 15.153.172.18.in-addr.arpa udp
US 8.8.8.8:53 34.215.58.216.in-addr.arpa udp
US 8.8.8.8:53 162.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 84.211.89.185.in-addr.arpa udp
US 8.8.8.8:53 97.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 17.118.17.104.in-addr.arpa udp
US 8.8.8.8:53 35.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 19.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 129.178.250.142.in-addr.arpa udp
FR 142.250.179.68:443 www.google.com tcp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 142.250.179.68:443 www.google.com tcp
GB 18.245.143.100:443 tags.crwdcntrl.net tcp
US 172.67.38.106:443 cdn.id5-sync.com tcp
US 8.8.8.8:53 68.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 163.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 100.143.245.18.in-addr.arpa udp
US 8.8.8.8:53 106.38.67.172.in-addr.arpa udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
IE 54.75.251.201:443 bcp.crwdcntrl.net tcp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 226.74.250.142.in-addr.arpa udp
US 8.8.8.8:53 201.251.75.54.in-addr.arpa udp
US 8.8.8.8:53 83.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 120.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 i.clean.gg udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 34.95.69.49:443 i.clean.gg tcp
US 8.8.8.8:53 pixel.advertising.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 g2.gumgum.com udp
DE 3.75.62.37:443 ups.analytics.yahoo.com tcp
DE 3.75.62.37:443 ups.analytics.yahoo.com tcp
US 8.8.8.8:53 x.bidswitch.net udp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
GB 2.18.108.192:443 ads.pubmatic.com tcp
IE 52.210.249.45:443 g2.gumgum.com tcp
GB 23.214.129.249:443 secure-assets.rubiconproject.com tcp
US 8.8.8.8:53 match.sharethrough.com udp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
GB 2.18.108.192:443 ads.pubmatic.com tcp
GB 23.214.129.249:443 secure-assets.rubiconproject.com tcp
DE 3.75.62.37:443 ups.analytics.yahoo.com tcp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
NL 185.89.211.84:443 ib.adnxs.com tcp
DE 18.184.119.72:443 match.sharethrough.com tcp
US 34.95.69.49:443 i.clean.gg udp
US 3.212.19.99:443 cs-server-s2s.yellowblue.io tcp
US 8.8.8.8:53 sync.go.sonobi.com udp
US 8.8.8.8:53 us-u.openx.net udp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 purch-sync.go.sonobi.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 ssc-cms.33across.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
GB 95.100.245.251:443 eus.rubiconproject.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 67.202.105.22:443 ssc-cms.33across.com tcp
US 34.98.64.218:443 us-u.openx.net tcp
IE 63.35.100.114:443 ap.lijit.com tcp
US 69.166.1.67:443 purch-sync.go.sonobi.com tcp
US 69.166.1.66:443 purch-sync.go.sonobi.com tcp
US 8.8.8.8:53 pixel.servebom.com udp
US 8.8.8.8:53 c1.adform.net udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 tg.socdm.com udp
US 8.8.8.8:53 creativecdn.com udp
JP 124.146.153.167:443 tg.socdm.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 34.98.64.218:443 us-u.openx.net udp
NL 185.184.8.90:443 creativecdn.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 match.deepintent.com udp
US 8.8.8.8:53 sync.ipredictive.com udp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 52.223.40.198:443 match.adsrvr.org tcp
DK 37.157.6.237:443 c1.adform.net tcp
GB 18.245.253.96:443 pixel.servebom.com tcp
GB 18.245.253.96:443 pixel.servebom.com tcp
GB 18.245.253.96:443 pixel.servebom.com tcp
GB 18.245.253.96:443 pixel.servebom.com tcp
DK 37.157.6.237:443 c1.adform.net tcp
JP 124.146.153.167:443 tg.socdm.com tcp
NL 89.149.192.244:443 ssbsync.smartadserver.com tcp
US 8.18.47.7:443 match.deepintent.com tcp
US 64.202.112.127:443 b1sync.zemanta.com tcp
US 52.73.22.15:443 sync.ipredictive.com tcp
US 8.8.8.8:53 gum.aidemsrv.com udp
US 8.8.8.8:53 eu-west-1-cs-rtb.openwebmp.com udp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 dis.criteo.com udp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 52.223.40.198:443 match.adsrvr.org tcp
US 8.8.8.8:53 201.143.123.92.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 37.62.75.3.in-addr.arpa udp
US 8.8.8.8:53 49.69.95.34.in-addr.arpa udp
US 8.8.8.8:53 192.108.18.2.in-addr.arpa udp
US 8.8.8.8:53 249.129.214.23.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 45.249.210.52.in-addr.arpa udp
US 8.8.8.8:53 72.119.184.18.in-addr.arpa udp
US 8.8.8.8:53 152.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 99.19.212.3.in-addr.arpa udp
IE 54.74.69.237:443 pr-bh.ybp.yahoo.com tcp
US 8.8.8.8:53 usersync.gumgum.com udp
IE 54.74.69.237:443 pr-bh.ybp.yahoo.com tcp
US 52.73.22.15:443 sync.ipredictive.com tcp
US 8.18.47.7:443 match.deepintent.com tcp
US 64.202.112.127:443 b1sync.zemanta.com tcp
DE 51.75.86.98:443 onetag-sys.com tcp
US 3.222.152.35:443 api-2-0.spot.im tcp
DE 51.75.86.98:443 onetag-sys.com tcp
US 3.222.152.35:443 api-2-0.spot.im tcp
GB 13.224.222.128:443 eu-west-1-cs-rtb.openwebmp.com tcp
IE 52.212.66.79:443 match.prod.bidr.io tcp
US 104.17.43.93:443 gum.aidemsrv.com tcp
US 8.8.8.8:53 player.aniview.com udp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
IE 34.247.205.196:443 usersync.gumgum.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
DE 162.55.236.224:443 sync.richaudience.com tcp
IE 34.247.205.196:443 usersync.gumgum.com tcp
GB 95.100.245.251:443 eus.rubiconproject.com tcp
US 67.202.105.22:443 ssc-cms.33across.com tcp
NL 89.149.192.244:443 ssbsync.smartadserver.com tcp
DE 162.55.236.224:443 sync.richaudience.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
GB 92.123.140.19:443 player.aniview.com tcp
GB 18.245.189.34:443 aax.amazon-adsystem.com tcp
GB 18.245.189.34:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 pixel.adsafeprotected.com udp
IE 54.247.62.190:443 pixel.adsafeprotected.com tcp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 bidder.criteo.com udp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
GB 18.245.253.96:443 pixel.servebom.com tcp
US 8.8.8.8:53 ads.yieldmo.com udp
GB 18.245.253.96:443 pixel.servebom.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
NL 147.75.85.97:443 prebid.a-mo.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
IE 52.16.171.36:443 ads.yieldmo.com tcp
US 8.8.8.8:53 251.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 114.100.35.63.in-addr.arpa udp
US 8.8.8.8:53 67.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 66.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 22.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 198.40.223.52.in-addr.arpa udp
US 8.8.8.8:53 96.253.245.18.in-addr.arpa udp
US 8.8.8.8:53 237.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 167.153.146.124.in-addr.arpa udp
US 8.8.8.8:53 244.192.149.89.in-addr.arpa udp
US 8.8.8.8:53 237.69.74.54.in-addr.arpa udp
US 8.8.8.8:53 98.86.75.51.in-addr.arpa udp
US 8.8.8.8:53 127.112.202.64.in-addr.arpa udp
US 8.8.8.8:53 7.47.18.8.in-addr.arpa udp
US 8.8.8.8:53 15.22.73.52.in-addr.arpa udp
US 8.8.8.8:53 35.152.222.3.in-addr.arpa udp
US 8.8.8.8:53 128.222.224.13.in-addr.arpa udp
US 8.8.8.8:53 93.43.17.104.in-addr.arpa udp
US 8.8.8.8:53 79.66.212.52.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 196.205.247.34.in-addr.arpa udp
US 8.8.8.8:53 19.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 34.189.245.18.in-addr.arpa udp
US 8.8.8.8:53 190.62.247.54.in-addr.arpa udp
GB 95.100.245.251:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 image8.pubmatic.com udp
US 64.202.112.127:443 b1sync.zemanta.com tcp
IE 52.16.171.36:443 ads.yieldmo.com tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 64.202.112.127:443 b1sync.zemanta.com tcp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 54.205.147.202:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 tracker.open-adsyield.com udp
US 172.111.38.86:443 tracker.open-adsyield.com tcp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 8.8.8.8:53 cacerts.rapidssl.com udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
IE 52.95.126.138:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 token.rubiconproject.com udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 97.85.75.147.in-addr.arpa udp
US 8.8.8.8:53 8.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 176.168.78.3.in-addr.arpa udp
US 8.8.8.8:53 139.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 36.171.16.52.in-addr.arpa udp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 202.147.205.54.in-addr.arpa udp
US 8.8.8.8:53 86.38.111.172.in-addr.arpa udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 224.236.55.162.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 138.126.95.52.in-addr.arpa udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
US 8.8.8.8:53 sync.adotmob.com udp
US 216.239.32.36:443 region1.analytics.google.com udp
NL 89.149.193.88:443 rtb-csync.smartadserver.com tcp
FR 45.137.176.88:443 sync.adotmob.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
US 8.8.8.8:53 sync.aniview.com udp
NL 89.149.193.88:443 rtb-csync.smartadserver.com tcp
US 172.240.45.78:443 sync.aniview.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
US 8.8.8.8:53 sync.mathtag.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 t.adx.opera.com udp
DE 51.75.86.98:443 onetag-sys.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 spl.zeotap.com udp
US 74.121.140.211:443 sync.mathtag.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 154.57.158.116:443 ads.stickyadstv.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
US 80.77.87.162:443 cs.admanmedia.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 104.22.51.98:443 spl.zeotap.com tcp
FR 178.32.210.231:443 ssbsync-global.smartadserver.com tcp
US 8.8.8.8:53 jadserve.postrelease.com udp
IE 52.49.168.145:443 jadserve.postrelease.com tcp
US 8.8.8.8:53 bttrack.com udp
US 192.132.33.67:443 bttrack.com tcp
US 8.8.8.8:53 id.rlcdn.com udp
US 35.244.174.68:443 id.rlcdn.com tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 c5dee9ea3ebc070e859e97b4d3d041f4.safeframe.googlesyndication.com udp
US 8.8.8.8:53 1x1.a-mo.net udp
US 8.8.8.8:53 api.pbxai.com udp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 192.132.33.67:443 bttrack.com tcp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 88.199.214.35.in-addr.arpa udp
US 8.8.8.8:53 88.176.137.45.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 116.158.57.154.in-addr.arpa udp
US 8.8.8.8:53 78.45.240.172.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 98.51.22.104.in-addr.arpa udp
US 8.8.8.8:53 231.210.32.178.in-addr.arpa udp
US 8.8.8.8:53 88.193.149.89.in-addr.arpa udp
US 8.8.8.8:53 211.140.121.74.in-addr.arpa udp
US 8.8.8.8:53 145.168.49.52.in-addr.arpa udp
US 8.8.8.8:53 162.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 67.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 rtb.gumgum.com udp
IE 54.228.77.6:443 rtb.gumgum.com tcp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 6.77.228.54.in-addr.arpa udp
US 3.218.78.156:443 api.pbxai.com tcp
US 3.218.78.156:443 api.pbxai.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
DE 52.28.212.4:443 1x1.a-mo.net tcp
DE 52.28.212.4:443 1x1.a-mo.net tcp
FR 142.250.179.65:443 c5dee9ea3ebc070e859e97b4d3d041f4.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 gum.criteo.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 check.analytics.rlcdn.com udp
GB 18.164.68.6:443 check.analytics.rlcdn.com tcp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 4.212.28.52.in-addr.arpa udp
US 8.8.8.8:53 131.151.46.52.in-addr.arpa udp
US 8.8.8.8:53 65.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 156.78.218.3.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 s0.2mdn.net udp
IE 54.170.204.126:443 eventsproxy.gargantuan.futureplc.com tcp
FR 142.250.178.134:443 s0.2mdn.net tcp
FR 142.250.179.98:443 googleads4.g.doubleclick.net tcp
US 8.8.8.8:53 cdn.ampproject.org udp
US 8.8.8.8:53 sync.a-mo.net udp
FR 216.58.214.161:443 cdn.ampproject.org tcp
US 8.8.8.8:53 js-sec.indexww.com udp
NL 145.40.97.77:443 sync.a-mo.net tcp
US 8.8.8.8:53 acdn.adnxs.com udp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 172.64.149.180:443 js-sec.indexww.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 172.64.149.180:443 js-sec.indexww.com tcp
US 8.8.8.8:53 134.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 6.68.164.18.in-addr.arpa udp
US 8.8.8.8:53 98.179.250.142.in-addr.arpa udp
US 151.101.1.108:443 acdn.adnxs.com tcp
US 8.8.8.8:53 api.rlcdn.com udp
US 34.120.133.55:443 api.rlcdn.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
FR 142.250.179.98:443 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 veryfast.io udp
US 64.227.17.224:443 veryfast.io tcp
US 64.227.17.224:443 veryfast.io tcp
US 8.8.8.8:53 161.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 77.97.40.145.in-addr.arpa udp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 180.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 108.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 55.133.120.34.in-addr.arpa udp
US 8.8.8.8:53 224.17.227.64.in-addr.arpa udp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 assets.a-mo.net udp
US 104.19.159.19:443 assets.a-mo.net tcp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
NL 185.235.87.202:443 ag.gbc.criteo.com tcp
NL 178.250.1.11:443 dnacdn.net tcp
FR 185.235.86.115:443 gem.gbc.criteo.com tcp
US 8.8.8.8:53 id.a-mx.com udp
NL 79.127.227.46:443 id.a-mx.com tcp
US 8.8.8.8:53 id.rtb.mx udp
US 8.8.8.8:53 prebid.adnxs.com udp
US 8.8.8.8:53 ow.pubmatic.com udp
NL 79.127.227.46:443 id.rtb.mx tcp
NL 185.89.208.11:443 prebid.adnxs.com tcp
NL 185.64.189.116:443 ow.pubmatic.com tcp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 19.159.19.104.in-addr.arpa udp
US 8.8.8.8:53 115.86.235.185.in-addr.arpa udp
US 8.8.8.8:53 46.227.127.79.in-addr.arpa udp
US 8.8.8.8:53 11.208.89.185.in-addr.arpa udp
US 8.8.8.8:53 202.87.235.185.in-addr.arpa udp
US 8.8.8.8:53 116.189.64.185.in-addr.arpa udp
US 8.8.8.8:53 repcdn.pcapp.store udp
GB 84.17.50.9:443 repcdn.pcapp.store tcp
US 52.73.22.15:443 sync.ipredictive.com tcp
US 8.8.8.8:53 9.50.17.84.in-addr.arpa udp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 157.123.68.40.in-addr.arpa udp
US 8.8.8.8:53 147.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 pcapp.store udp
US 64.176.203.93:443 pcapp.store tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
US 8.8.8.8:53 93.203.176.64.in-addr.arpa udp
US 8.8.8.8:53 pcapp.store udp
US 64.176.203.93:443 pcapp.store tcp
US 64.176.203.93:443 pcapp.store tcp
US 8.8.8.8:53 delivery.pcapp.store udp
GB 89.187.167.39:443 delivery.pcapp.store tcp
US 8.8.8.8:53 repository.pcapp.store udp
GB 84.17.50.8:443 repository.pcapp.store tcp
GB 74.125.71.154:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
FR 142.250.75.238:443 google.com tcp
FR 142.250.75.238:443 google.com tcp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 168.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 8.50.17.84.in-addr.arpa udp
US 8.8.8.8:53 238.75.250.142.in-addr.arpa udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 www.facebook.com udp
DE 157.240.27.35:443 www.facebook.com tcp
US 8.8.8.8:53 static.xx.fbcdn.net udp
DE 157.240.27.27:443 static.xx.fbcdn.net tcp
DE 157.240.27.27:443 static.xx.fbcdn.net tcp
DE 157.240.27.27:443 static.xx.fbcdn.net tcp
DE 157.240.27.27:443 static.xx.fbcdn.net tcp
DE 157.240.27.27:443 static.xx.fbcdn.net tcp
DE 157.240.27.27:443 static.xx.fbcdn.net tcp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 35.27.240.157.in-addr.arpa udp
US 8.8.8.8:53 27.27.240.157.in-addr.arpa udp
FR 142.250.201.162:443 ep1.adtrafficquality.google udp
US 34.95.69.49:443 i.clean.gg udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
IE 54.247.62.190:443 pixel.adsafeprotected.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 8.8.8.8:53 ssp-sync.criteo.com udp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 64.176.203.93:443 pcapp.store tcp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 27837d9e6a8e91d97602a06391014c86.safeframe.googlesyndication.com udp
NL 185.235.87.202:443 ag.gbc.criteo.com tcp
FR 185.235.86.115:443 gem.gbc.criteo.com tcp
US 8.8.8.8:53 7.1.250.178.in-addr.arpa udp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
NL 79.127.227.46:443 id.rtb.mx tcp
NL 79.127.227.46:443 id.rtb.mx tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 79.127.227.46:443 id.rtb.mx tcp
US 104.17.245.203:443 unpkg.com tcp
US 8.8.8.8:53 launcher.mojang.com udp
US 13.107.246.64:443 launcher.mojang.com tcp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 73.144.22.2.in-addr.arpa udp
US 64.176.203.93:443 pcapp.store tcp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 d74queuslupub.cloudfront.net udp
GB 18.244.114.119:443 d74queuslupub.cloudfront.net tcp
US 64.176.203.93:443 pcapp.store tcp
US 8.8.8.8:53 119.114.244.18.in-addr.arpa udp
US 8.8.8.8:53 12.178.204.143.in-addr.arpa udp
US 8.8.8.8:53 113.216.138.108.in-addr.arpa udp
US 8.8.8.8:53 pcapp.store udp
US 8.8.8.8:53 pcapp.store udp
US 167.99.235.203:443 pcapp.store tcp
US 8.8.8.8:53 203.235.99.167.in-addr.arpa udp
US 64.176.203.93:80 pcapp.store tcp
US 64.176.203.93:443 pcapp.store tcp
US 64.176.203.93:443 pcapp.store tcp
US 64.176.203.93:443 pcapp.store tcp
US 64.176.203.93:443 pcapp.store tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
FR 142.250.179.68:443 www.google.com udp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 185.89.211.84:443 secure.adnxs.com tcp
US 8.8.8.8:53 repository.pcapp.store udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
GB 84.17.50.8:443 repository.pcapp.store tcp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google udp
GB 84.17.50.8:443 repository.pcapp.store tcp
US 8.8.8.8:53 veryfast.io udp
GB 84.17.50.8:443 repository.pcapp.store tcp
US 64.227.17.224:80 veryfast.io tcp
US 8.8.8.8:53 ev.pcapp.store udp
US 64.227.17.224:443 veryfast.io tcp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 147.182.211.77:443 ev.pcapp.store tcp
FR 142.250.201.163:443 www.google.co.uk udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 repcdn.veryfast.io udp
US 8.8.8.8:53 77.211.182.147.in-addr.arpa udp
GB 84.17.50.8:443 repcdn.veryfast.io tcp
US 64.227.17.224:443 veryfast.io tcp
US 64.176.203.93:443 pcapp.store tcp
US 8.8.8.8:53 evcs-ocsp.ws.symantec.com udp
DE 152.199.19.74:80 evcs-ocsp.ws.symantec.com tcp
US 8.8.8.8:53 evcs-crl.ws.symantec.com udp
SE 192.229.221.95:80 evcs-crl.ws.symantec.com tcp
US 8.8.8.8:53 74.19.199.152.in-addr.arpa udp
US 8.8.8.8:53 bordeaux.futurecdn.net udp
US 8.8.8.8:53 cmp.quantcast.com udp
GB 143.204.68.55:443 cmp.quantcast.com tcp
US 8.8.8.8:53 widgets.jobbio.com udp
GB 108.138.217.97:443 widgets.jobbio.com tcp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 8.8.8.8:53 55.68.204.143.in-addr.arpa udp
US 8.8.8.8:53 97.217.138.108.in-addr.arpa udp
US 8.8.8.8:53 widget-api.jobbio.com udp
IE 54.247.69.169:443 widget-api.jobbio.com tcp
US 34.95.69.49:443 i.clean.gg udp
US 8.8.8.8:53 d2q79iu7y748jz.cloudfront.net udp
GB 18.245.206.183:443 d1avm1cbyhi830.cloudfront.net tcp
GB 18.245.206.183:443 d1avm1cbyhi830.cloudfront.net tcp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
GB 18.244.179.45:443 d2q79iu7y748jz.cloudfront.net tcp
US 8.8.8.8:53 169.69.247.54.in-addr.arpa udp
NL 185.235.87.202:443 ag.gbc.criteo.com tcp
FR 185.235.86.115:443 gem.gbc.criteo.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 185.89.211.84:443 secure.adnxs.com tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
US 8.8.8.8:53 7d79146270f788fbfacde1521085815b.safeframe.googlesyndication.com udp
FR 142.250.201.162:443 ep1.adtrafficquality.google udp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 183.206.245.18.in-addr.arpa udp
US 8.8.8.8:53 45.179.244.18.in-addr.arpa udp
US 8.8.8.8:53 api.pbxai.com udp
US 3.218.78.156:443 api.pbxai.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 fw.adsafeprotected.com udp
IE 52.49.220.58:443 fw.adsafeprotected.com tcp
FR 142.250.178.134:443 s0.2mdn.net udp
IE 52.49.220.58:443 fw.adsafeprotected.com tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 151.101.65.229:443 cdn.jsdelivr.net tcp
FR 142.250.179.98:443 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 static.adsafeprotected.com udp
GB 18.245.253.3:443 static.adsafeprotected.com tcp
US 8.8.8.8:53 dt.adsafeprotected.com udp
GB 18.245.253.3:443 static.adsafeprotected.com tcp
US 18.207.21.213:443 dt.adsafeprotected.com tcp
US 18.207.21.213:443 dt.adsafeprotected.com tcp
US 18.207.21.213:443 dt.adsafeprotected.com tcp
US 8.8.8.8:53 a679.casalemedia.com udp
CA 85.91.47.50:443 a679.casalemedia.com tcp
GB 18.245.253.3:443 static.adsafeprotected.com tcp
US 18.207.21.213:443 dt.adsafeprotected.com tcp
US 18.207.21.213:443 dt.adsafeprotected.com tcp
US 8.8.8.8:53 58.220.49.52.in-addr.arpa udp
US 8.8.8.8:53 229.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 213.21.207.18.in-addr.arpa udp
US 8.8.8.8:53 50.47.91.85.in-addr.arpa udp
FR 142.250.179.65:443 7d79146270f788fbfacde1521085815b.safeframe.googlesyndication.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 ads.yieldmo.com udp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 52.223.40.198:443 match.adsrvr.org tcp
US 8.8.8.8:53 3.253.245.18.in-addr.arpa udp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 64.176.203.93:443 pcapp.store tcp
US 8.8.8.8:53 21.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 ade.googlesyndication.com udp
FR 172.217.20.194:443 ade.googlesyndication.com tcp
US 147.182.211.77:443 ev.pcapp.store tcp
US 8.8.8.8:53 194.20.217.172.in-addr.arpa udp
US 8.8.4.4:443 dns.google udp
FR 142.250.179.68:443 www.google.com udp
FR 172.217.20.194:443 ade.googlesyndication.com udp
US 18.207.21.213:443 dt.adsafeprotected.com tcp
FR 142.250.178.138:443 udp
US 8.8.8.8:53 pixel.adsafeprotected.com udp
US 147.182.211.77:443 ev.pcapp.store tcp
US 8.8.8.8:53 138.178.250.142.in-addr.arpa udp
IE 34.243.4.150:443 pixel.adsafeprotected.com tcp
IE 34.243.4.150:443 pixel.adsafeprotected.com tcp
NL 145.40.97.77:443 prebid.a-mo.net tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 185.89.211.84:443 secure.adnxs.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
IE 18.200.89.214:443 ads.yieldmo.com tcp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
US 8.8.8.8:53 150.4.243.34.in-addr.arpa udp
US 8.8.8.8:53 214.89.200.18.in-addr.arpa udp
NL 145.40.97.77:443 prebid.a-mo.net tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 api.pbxai.com udp
US 54.85.55.108:443 api.pbxai.com tcp
US 8.8.8.8:53 region1.analytics.google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
US 216.239.32.36:443 region1.analytics.google.com udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 ajax.googleapis.com udp
FR 142.250.178.134:443 s0.2mdn.net udp
FR 142.250.179.74:443 ajax.googleapis.com tcp
US 8.8.8.8:53 108.55.85.54.in-addr.arpa udp
US 8.8.8.8:53 74.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 8.8.8.8:53 eventsproxy.gargantuan.futureplc.com udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
IE 34.241.152.136:443 eventsproxy.gargantuan.futureplc.com tcp
US 8.8.8.8:53 136.152.241.34.in-addr.arpa udp
US 34.107.254.252:443 api.permutive.com udp
NL 185.89.211.84:443 secure.adnxs.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
US 147.182.211.77:443 ev.pcapp.store tcp
FR 142.250.179.68:443 www.google.com udp
GB 92.123.142.97:443 www.bing.com tcp
US 8.8.8.8:53 97.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
FR 142.250.201.163:443 www.google.co.uk udp
GB 92.123.142.136:443 th.bing.com tcp
GB 92.123.142.105:443 r.bing.com tcp
GB 92.123.142.105:443 r.bing.com tcp
GB 92.123.142.136:443 th.bing.com tcp
US 8.8.8.8:53 bing.com udp
US 204.79.197.200:443 bing.com tcp
US 8.8.8.8:53 136.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 105.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
NL 40.126.32.138:443 login.microsoftonline.com tcp
US 8.8.8.8:53 138.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
US 8.8.8.8:53 22.160.190.20.in-addr.arpa udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 89.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 am5.com udp
US 172.67.72.8:443 am5.com tcp
US 172.67.72.8:443 am5.com tcp
US 8.8.8.8:53 imgcdn.abcalphagame.com udp
US 104.26.11.127:443 imgcdn.abcalphagame.com tcp
FR 142.250.75.226:443 googleads.g.doubleclick.net udp
US 104.26.11.127:443 imgcdn.abcalphagame.com tcp
US 104.26.11.127:443 imgcdn.abcalphagame.com tcp
US 104.26.11.127:443 imgcdn.abcalphagame.com tcp
US 104.26.11.127:443 imgcdn.abcalphagame.com tcp
US 104.26.11.127:443 imgcdn.abcalphagame.com tcp
GB 74.125.71.154:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
FR 172.217.20.206:443 fundingchoicesmessages.google.com tcp
FR 172.217.20.206:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 127.11.26.104.in-addr.arpa udp
US 8.8.8.8:53 206.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
FR 142.250.178.129:443 lh3.googleusercontent.com tcp
FR 142.250.201.162:443 ep1.adtrafficquality.google udp
FR 142.250.179.97:443 ep2.adtrafficquality.google udp
US 8.8.8.8:53 www.google.com udp
FR 142.250.179.68:443 www.google.com udp
US 147.182.211.77:443 ev.pcapp.store tcp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 install.convertwithwave.com udp
US 34.233.157.70:443 install.convertwithwave.com tcp
US 34.233.157.70:443 install.convertwithwave.com tcp
US 8.8.8.8:53 use.typekit.net udp
US 8.8.8.8:53 api.wavebrowser.co udp
GB 2.16.170.51:443 p.typekit.net tcp
US 54.88.179.62:443 api.wavebrowser.co tcp
GB 2.16.170.115:443 use.typekit.net tcp
GB 2.16.170.115:443 use.typekit.net tcp
GB 2.16.170.115:443 use.typekit.net tcp
US 8.8.8.8:53 115.170.16.2.in-addr.arpa udp
US 8.8.8.8:53 51.170.16.2.in-addr.arpa udp
US 8.8.8.8:53 62.179.88.54.in-addr.arpa udp
US 8.8.8.8:53 70.157.233.34.in-addr.arpa udp
US 8.8.8.8:53 app.posthog.com udp
US 54.88.179.62:443 api.wavebrowser.co tcp
US 8.8.8.8:53 app.termly.io udp
US 104.22.59.181:443 app.posthog.com tcp
US 104.22.59.181:443 app.posthog.com tcp
US 8.8.8.8:53 api.wavebrowserbase.com udp
US 104.18.31.234:443 app.termly.io tcp
US 52.20.219.47:443 api.wavebrowserbase.com tcp
US 54.88.179.62:443 api.wavebrowserbase.com tcp
US 104.18.31.234:443 app.termly.io tcp
US 8.8.8.8:53 region1.google-analytics.com udp
GB 2.16.170.115:443 use.typekit.net tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 api.mywavehome.net udp
US 8.8.8.8:53 181.59.22.104.in-addr.arpa udp
US 8.8.8.8:53 234.31.18.104.in-addr.arpa udp
US 8.8.8.8:53 47.219.20.52.in-addr.arpa udp
US 3.217.56.134:443 api.mywavehome.net tcp
US 8.8.8.8:53 134.56.217.3.in-addr.arpa udp
US 216.239.32.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 www.buff.game udp
US 172.67.169.50:443 www.buff.game tcp
US 172.67.169.50:443 www.buff.game tcp
US 8.8.8.8:53 50.169.67.172.in-addr.arpa udp
US 8.8.8.8:53 d1rozh26tys225.cloudfront.net udp
GB 99.86.249.197:443 d1rozh26tys225.cloudfront.net tcp
GB 99.86.249.197:443 d1rozh26tys225.cloudfront.net tcp
US 8.8.8.8:53 197.249.86.99.in-addr.arpa udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 widget.trustpilot.com udp
US 8.8.8.8:53 files.splithub.io udp
GB 54.192.137.49:443 widget.trustpilot.com tcp
US 104.21.47.148:443 files.splithub.io tcp
US 52.20.219.47:443 api.mywavehome.net tcp
US 8.8.8.8:53 wav-installers.s3.amazonaws.com udp
US 54.231.172.225:443 wav-installers.s3.amazonaws.com tcp
US 8.8.8.8:53 148.47.21.104.in-addr.arpa udp
US 8.8.8.8:53 225.172.231.54.in-addr.arpa udp
US 8.8.8.8:53 49.137.192.54.in-addr.arpa udp
US 8.8.8.8:53 splithub-proxy.fly.dev udp
US 66.241.124.51:443 splithub-proxy.fly.dev tcp
US 8.8.8.8:53 51.124.241.66.in-addr.arpa udp
US 8.8.8.8:53 cdn.ywxi.net udp
GB 13.224.245.81:443 cdn.ywxi.net tcp
US 8.8.8.8:53 ipapi.co udp
US 104.26.9.44:443 ipapi.co tcp
US 8.8.8.8:53 s3-us-west-2.amazonaws.com udp
US 52.218.153.80:443 s3-us-west-2.amazonaws.com tcp
US 52.218.153.80:443 s3-us-west-2.amazonaws.com tcp
US 52.218.153.80:443 s3-us-west-2.amazonaws.com tcp
US 8.8.8.8:53 cdn.taboola.com udp
US 8.8.8.8:53 44.9.26.104.in-addr.arpa udp
US 8.8.8.8:53 81.245.224.13.in-addr.arpa udp
US 8.8.8.8:53 bat.bing.com udp
US 150.171.28.10:443 bat.bing.com tcp
US 8.8.8.8:53 www.redditstatic.com udp
US 151.101.65.140:443 www.redditstatic.com tcp
US 8.8.8.8:53 140.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 80.153.218.52.in-addr.arpa udp
US 151.101.65.140:443 www.redditstatic.com tcp
US 8.8.8.8:53 pixel-config.reddit.com udp
US 8.8.8.8:53 amplify.outbrain.com udp
GB 2.18.109.60:443 amplify.outbrain.com tcp
US 151.101.1.140:443 pixel-config.reddit.com tcp
US 151.101.65.140:443 pixel-config.reddit.com tcp
US 8.8.8.8:53 746983613.fls.doubleclick.net udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 www.clarity.ms udp
US 13.107.246.64:443 www.clarity.ms tcp
US 8.8.8.8:53 60.109.18.2.in-addr.arpa udp
US 8.8.8.8:53 140.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 www.buffgames.net udp
US 172.67.223.103:443 www.buffgames.net tcp
US 8.8.8.8:53 tr.outbrain.com udp
US 8.8.8.8:53 s.yimg.com udp
DE 157.240.27.27:443 connect.facebook.net tcp
US 50.31.142.63:443 tr.outbrain.com tcp
GB 87.248.114.12:443 s.yimg.com tcp
FR 142.250.201.166:443 746983613.fls.doubleclick.net tcp
US 8.8.8.8:53 cdn.entail-insights.com udp
US 172.67.172.104:443 cdn.entail-insights.com tcp
FR 142.250.201.166:443 746983613.fls.doubleclick.net udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
DE 157.240.27.27:443 connect.facebook.net tcp
US 151.101.65.44:443 cdn.taboola.com tcp
US 8.8.8.8:53 static.ads-twitter.com udp
GB 151.101.188.157:443 static.ads-twitter.com tcp
US 8.8.8.8:53 103.223.67.172.in-addr.arpa udp
US 8.8.8.8:53 166.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 12.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 44.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 63.142.31.50.in-addr.arpa udp
US 8.8.8.8:53 104.172.67.172.in-addr.arpa udp
GB 151.101.188.157:443 static.ads-twitter.com tcp
FR 142.250.75.226:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 www.trustedsite.com udp
US 54.148.188.183:443 www.trustedsite.com tcp
US 8.8.8.8:53 alb.reddit.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
US 54.148.188.183:443 www.trustedsite.com tcp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 157.188.101.151.in-addr.arpa udp
US 8.8.8.8:53 183.188.148.54.in-addr.arpa udp
US 147.182.211.77:443 ev.pcapp.store tcp
US 8.8.8.8:53 b7b52.playfabapi.com udp
US 20.120.128.232:443 b7b52.playfabapi.com tcp
US 64.176.203.93:443 pcapp.store tcp
US 8.8.8.8:53 232.128.120.20.in-addr.arpa udp
FR 142.250.201.163:443 www.google.co.uk udp
US 8.8.8.8:53 wave.outbrain.com udp
GB 2.18.109.60:443 wave.outbrain.com tcp
US 8.8.8.8:53 trc.taboola.com udp
US 8.8.8.8:53 www.youtube.com udp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 sp.analytics.yahoo.com udp
IE 34.252.40.201:443 sp.analytics.yahoo.com tcp
FR 142.250.179.78:443 www.youtube.com udp
US 8.8.8.8:53 www.facebook.com udp
DE 157.240.27.35:443 www.facebook.com tcp
US 8.8.8.8:53 201.40.252.34.in-addr.arpa udp
US 8.8.8.8:53 78.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 i.ytimg.com udp
FR 172.217.18.214:443 i.ytimg.com tcp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
FR 142.250.179.106:443 jnn-pa.googleapis.com tcp
FR 142.250.179.106:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 play.google.com udp
FR 142.250.75.238:443 play.google.com udp
US 8.8.8.8:53 214.18.217.172.in-addr.arpa udp
US 8.8.8.8:53 106.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 166.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 t.entail-insights.com udp
US 172.67.172.104:443 t.entail-insights.com tcp
US 8.8.8.8:53 c.clarity.ms udp
US 8.8.8.8:53 yt3.ggpht.com udp
US 172.67.172.104:443 t.entail-insights.com tcp
FR 142.250.179.97:443 yt3.ggpht.com tcp
US 8.8.8.8:53 h.clarity.ms udp
US 51.8.64.151:443 h.clarity.ms tcp
IE 13.74.129.1:443 c.clarity.ms tcp
US 8.8.8.8:53 151.64.8.51.in-addr.arpa udp
IE 13.74.129.1:443 c.clarity.ms tcp
US 8.8.8.8:53 c.bing.com udp
US 13.107.21.237:443 c.bing.com tcp
US 8.8.8.8:53 1.129.74.13.in-addr.arpa udp
US 8.8.8.8:53 86.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 237.21.107.13.in-addr.arpa udp
US 8.8.8.8:53 241.154.82.20.in-addr.arpa udp
US 8.8.8.8:53 14.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 aefd.nelreports.net udp
US 8.8.8.8:53 w3-reporting-nel.reddit.com udp
GB 173.222.211.40:443 aefd.nelreports.net tcp
US 8.8.8.8:53 40.211.222.173.in-addr.arpa udp
GB 173.222.211.40:443 aefd.nelreports.net udp
US 8.8.8.8:53 api.wavebrowserbase.com udp
US 3.208.133.88:443 api.wavebrowserbase.com tcp
US 8.8.8.8:53 112.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 88.133.208.3.in-addr.arpa udp
US 8.8.8.8:53 swupdater.com udp
US 18.210.144.237:443 swupdater.com tcp
US 18.210.144.237:443 swupdater.com tcp
US 8.8.8.8:53 237.144.210.18.in-addr.arpa udp
US 8.8.8.8:53 156.33.209.4.in-addr.arpa udp
US 8.8.8.8:53 cdn.swupdater.com udp
GB 143.204.68.96:443 cdn.swupdater.com tcp
US 8.8.8.8:53 96.68.204.143.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
GB 143.204.68.96:443 cdn.swupdater.com tcp
FR 142.250.75.238:443 play.google.com udp
GB 143.204.68.96:443 cdn.swupdater.com tcp
US 8.8.8.8:53 dct.wavebrowser.co udp
US 3.217.56.134:443 dct.wavebrowser.co tcp
US 8.8.8.8:53 ocsp.r2m02.amazontrust.com udp
GB 143.204.67.183:80 ocsp.r2m02.amazontrust.com tcp
US 8.8.8.8:53 183.67.204.143.in-addr.arpa udp
US 8.8.8.8:53 dct.convertwithwave.com udp
US 54.88.179.62:443 dct.convertwithwave.com tcp
GB 143.204.67.183:80 ocsp.r2m02.amazontrust.com tcp
US 54.88.179.62:443 dct.convertwithwave.com tcp
US 8.8.8.8:53 api.wavebrowserbase.com udp
US 44.207.181.148:443 api.wavebrowserbase.com tcp
US 8.8.8.8:53 s2.googleusercontent.com udp
US 8.8.8.8:53 s2.googleusercontent.com udp
FR 142.250.178.129:443 s2.googleusercontent.com tcp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 accounts.google.com udp
IE 74.125.193.84:443 accounts.google.com tcp
US 8.8.8.8:53 api.mywavehome.net udp
US 8.8.8.8:53 api.mywavehome.net udp
US 8.8.8.8:53 api.wavebrowser.net udp
US 8.8.8.8:53 api.wavebrowser.net udp
US 8.8.8.8:53 t1.gstatic.com udp
US 8.8.8.8:53 t1.gstatic.com udp
US 3.217.56.134:443 api.wavebrowser.net tcp
US 18.206.134.55:443 api.wavebrowser.net tcp
FR 172.217.20.196:443 t1.gstatic.com tcp
US 8.8.8.8:53 148.181.207.44.in-addr.arpa udp
US 8.8.8.8:53 84.193.125.74.in-addr.arpa udp
US 8.8.8.8:53 196.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 55.134.206.18.in-addr.arpa udp
US 18.210.144.237:443 swupdater.com tcp
US 8.8.8.8:53 dct.convertwithwave.com udp
US 8.8.8.8:53 dct.convertwithwave.com udp
US 8.8.8.8:53 seed.wavebrowser.co udp
US 8.8.8.8:53 seed.wavebrowser.co udp
GB 18.239.236.123:443 seed.wavebrowser.co tcp
US 54.88.179.62:443 dct.convertwithwave.com tcp
US 54.88.179.62:443 dct.convertwithwave.com tcp
US 54.88.179.62:443 dct.convertwithwave.com tcp
US 54.88.179.62:443 dct.convertwithwave.com tcp
US 54.88.179.62:443 dct.convertwithwave.com tcp
US 54.88.179.62:443 dct.convertwithwave.com tcp
US 8.8.8.8:53 ntp2.mywavehome.net udp
US 8.8.8.8:53 ntp2.mywavehome.net udp
GB 18.244.114.69:443 ntp2.mywavehome.net tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.179.68:443 www.google.com tcp
FR 142.250.179.68:443 www.google.com tcp
US 8.8.8.8:53 t3.gstatic.com udp
US 8.8.8.8:53 t3.gstatic.com udp
US 8.8.8.8:53 t2.gstatic.com udp
US 8.8.8.8:53 t2.gstatic.com udp
FR 142.250.179.68:443 t3.gstatic.com tcp
FR 172.217.20.196:443 t2.gstatic.com tcp
US 8.8.8.8:53 js.recurly.com udp
GB 18.244.114.69:443 ntp2.mywavehome.net udp
US 34.98.107.242:443 js.recurly.com tcp
US 34.98.107.242:443 js.recurly.com tcp
US 8.8.8.8:53 widgets.outbrain.com udp
US 8.8.8.8:53 widgets.outbrain.com udp
US 8.8.8.8:53 cdn.taboola.com udp
GB 2.18.109.60:443 widgets.outbrain.com tcp
US 151.101.129.44:443 cdn.taboola.com tcp
US 8.8.8.8:53 123.236.239.18.in-addr.arpa udp
US 8.8.8.8:53 69.114.244.18.in-addr.arpa udp
US 8.8.8.8:53 242.107.98.34.in-addr.arpa udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 beacon.taboola.com udp
US 8.8.8.8:53 beacon.taboola.com udp
US 8.8.8.8:53 api.recurly.com udp
US 8.8.8.8:53 tcheck.outbrainimg.com udp
US 8.8.8.8:53 tcheck.outbrainimg.com udp
US 8.8.8.8:53 widget-pixels.outbrain.com udp
US 8.8.8.8:53 widget-pixels.outbrain.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 34.98.107.242:443 api.recurly.com tcp
GB 95.100.245.166:443 tcheck.outbrainimg.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 widgets.outbrain.com udp
US 8.8.8.8:53 widgets.outbrain.com udp
GB 2.18.109.60:443 widgets.outbrain.com tcp
US 8.8.8.8:53 log.outbrainimg.com udp
US 8.8.8.8:53 log.outbrainimg.com udp
US 64.74.236.31:443 log.outbrainimg.com tcp
US 8.8.8.8:53 44.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 166.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 api.wavebrowserbase.com udp
US 8.8.8.8:53 api.wavebrowserbase.com udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
FR 142.250.178.138:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 api.mywavehome.net udp
US 8.8.8.8:53 api.mywavehome.net udp
US 44.207.181.148:443 api.mywavehome.net tcp
US 8.8.8.8:53 31.236.74.64.in-addr.arpa udp
US 8.8.8.8:53 api.wavebrowserbase.com udp
US 8.8.8.8:53 api.wavebrowserbase.com udp
US 44.207.181.148:443 api.wavebrowserbase.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
FR 172.217.18.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.google.co.uk udp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
US 8.8.8.8:443 dns.google udp
IE 212.82.100.137:443 tcp
US 8.8.8.8:53 194.18.217.172.in-addr.arpa udp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
FR 142.250.201.163:443 www.google.co.uk udp
US 8.8.8.8:53 install.convertwithwave.com udp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 3.227.59.9:443 install.convertwithwave.com tcp
US 8.8.4.4:443 dns.google udp
US 54.224.156.134:443 tcp
US 8.8.8.8:53 137.100.82.212.in-addr.arpa udp
US 8.8.8.8:53 162.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 9.59.227.3.in-addr.arpa udp
US 44.207.181.148:443 api.wavebrowserbase.com tcp
US 8.8.8.8:53 134.156.224.54.in-addr.arpa udp
GB 18.245.218.64:443 tcp
US 151.101.129.44:443 beacon.taboola.com tcp
GB 143.204.176.3:443 tcp
US 8.8.8.8:53 64.218.245.18.in-addr.arpa udp
US 8.8.8.8:53 3.176.204.143.in-addr.arpa udp
FR 172.217.20.202:443 content-autofill.googleapis.com tcp
US 44.207.181.148:443 api.wavebrowserbase.com tcp
US 3.221.76.47:443 tcp
US 8.8.8.8:53 202.20.217.172.in-addr.arpa udp
FR 172.217.20.206:443 www.youtube.com tcp
FR 172.217.20.206:443 www.youtube.com udp
DE 157.240.27.18:443 udp
US 8.8.8.8:53 47.76.221.3.in-addr.arpa udp
US 8.8.8.8:53 18.27.240.157.in-addr.arpa udp
US 8.8.8.8:53 89.16.208.104.in-addr.arpa udp
DE 157.240.27.27:443 connect.facebook.net udp
US 52.4.157.254:443 tcp
US 52.4.157.254:443 tcp
US 52.4.157.254:443 tcp
US 52.4.157.254:443 tcp
DE 157.240.27.27:443 connect.facebook.net udp
US 3.212.223.245:443 tcp
US 104.22.59.181:443 app.posthog.com tcp
US 8.8.4.4:443 dns.google udp
DE 157.240.27.35:443 www.facebook.com tcp
DE 157.240.27.35:443 www.facebook.com tcp
DE 157.240.27.35:443 www.facebook.com tcp
DE 157.240.27.35:443 www.facebook.com tcp
DE 157.240.27.35:443 www.facebook.com tcp
FR 142.250.201.170:443 content-autofill.googleapis.com udp
DE 157.240.27.27:443 connect.facebook.net udp
US 8.8.8.8:53 254.157.4.52.in-addr.arpa udp
US 8.8.8.8:53 245.223.212.3.in-addr.arpa udp
US 8.8.8.8:53 170.201.250.142.in-addr.arpa udp
IE 212.82.100.137:443 tcp
US 8.8.8.8:53 h.clarity.ms udp
US 51.8.64.151:443 h.clarity.ms tcp
IE 54.77.210.34:443 tcp
IE 52.213.49.25:443 tcp
IE 52.213.49.25:443 tcp
GB 87.248.114.12:443 s.yimg.com tcp
GB 87.248.114.12:443 s.yimg.com tcp
GB 87.248.114.12:443 s.yimg.com tcp
GB 87.248.114.12:443 s.yimg.com tcp
US 8.8.8.8:53 34.210.77.54.in-addr.arpa udp
US 8.8.8.8:53 25.49.213.52.in-addr.arpa udp
IE 188.125.72.139:443 tcp
IE 188.125.72.139:443 tcp
IE 188.125.72.139:443 tcp
IE 188.125.72.139:443 tcp
IE 188.125.72.139:443 tcp
IE 188.125.72.139:443 tcp
US 8.8.8.8:53 139.72.125.188.in-addr.arpa udp
US 44.207.181.148:443 api.wavebrowserbase.com tcp
IE 212.82.100.137:443 tcp
US 150.171.27.10:443 bat.bing.com tcp
US 150.171.27.10:443 bat.bing.com tcp
US 150.171.27.10:443 bat.bing.com tcp
US 13.107.21.200:443 bing.com tcp
FR 216.58.214.74:443 tcp
US 8.8.8.8:53 trc.taboola.com udp
US 151.101.193.44:443 trc.taboola.com tcp
US 8.8.8.8:53 200.21.107.13.in-addr.arpa udp
US 8.8.8.8:53 74.214.58.216.in-addr.arpa udp
IE 212.82.100.137:443 tcp
US 13.107.21.237:443 c.bing.com tcp
US 151.101.193.44:443 trc.taboola.com tcp
US 8.8.8.8:53 44.193.101.151.in-addr.arpa udp
US 45.33.26.104:443 tcp
IE 212.82.100.137:443 tcp
US 45.33.26.104:443 tcp
US 45.33.26.104:443 tcp
IE 188.125.72.139:443 tcp
US 74.117.183.142:443 tcp
FR 216.58.213.66:443 udp
FR 142.250.178.130:443 udp
US 8.8.8.8:53 142.183.117.74.in-addr.arpa udp
US 8.8.8.8:53 66.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 130.178.250.142.in-addr.arpa udp
FR 172.217.20.206:443 www.youtube.com tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
BE 74.125.71.157:443 stats.g.doubleclick.net tcp
FR 142.250.201.163:443 www.google.co.uk tcp
FR 172.217.20.206:443 www.youtube.com udp
FR 172.217.20.206:443 www.youtube.com udp
FR 142.250.178.129:443 s2.googleusercontent.com tcp
US 8.8.8.8:53 ping.chartbeat.net udp
US 52.73.156.54:443 ping.chartbeat.net tcp
US 8.8.8.8:53 157.71.125.74.in-addr.arpa udp
US 8.8.8.8:53 54.156.73.52.in-addr.arpa udp
FR 172.217.20.194:443 ade.googlesyndication.com udp
US 45.33.26.104:443 tcp
US 44.207.181.148:443 api.wavebrowserbase.com tcp
FR 142.250.178.129:443 s2.googleusercontent.com tcp
FR 142.250.178.129:443 s2.googleusercontent.com tcp
FR 142.250.178.129:443 s2.googleusercontent.com tcp
FR 142.250.178.129:443 s2.googleusercontent.com tcp
FR 142.250.179.68:443 www.google.com udp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
FR 216.58.213.66:443 udp
FR 216.58.213.66:443 udp
US 216.239.34.36:443 region1.analytics.google.com udp
IN 142.250.183.67:443 tcp
IN 142.250.183.67:443 tcp
US 8.8.8.8:53 67.183.250.142.in-addr.arpa udp
US 74.117.183.142:443 tcp
GB 89.187.167.38:443 repcdn.veryfast.io tcp
GB 89.187.167.38:443 repcdn.veryfast.io tcp
GB 89.187.167.38:443 repcdn.veryfast.io tcp
GB 89.187.167.38:443 repcdn.veryfast.io tcp
US 8.8.8.8:53 38.167.187.89.in-addr.arpa udp
US 44.207.181.148:443 api.wavebrowserbase.com tcp
FR 142.250.178.129:443 s2.googleusercontent.com udp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
NL 35.204.74.118:443 tcp
NL 185.184.8.90:443 creativecdn.com tcp
IE 34.248.137.99:443 match.prod.bidr.io tcp
NL 178.250.1.9:443 dis.criteo.com tcp
FR 172.217.20.162:443 tcp
FR 172.217.20.162:443 udp
NL 185.184.8.90:443 creativecdn.com tcp
US 8.8.8.8:53 99.137.248.34.in-addr.arpa udp
US 8.8.8.8:53 118.74.204.35.in-addr.arpa udp
US 8.8.8.8:53 162.20.217.172.in-addr.arpa udp
US 45.33.26.104:443 tcp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
FR 142.250.179.97:443 yt3.ggpht.com tcp
US 13.107.246.64:443 www.clarity.ms tcp
GB 18.244.114.119:443 d74queuslupub.cloudfront.net tcp
US 151.101.193.44:443 trc.taboola.com tcp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:443 dns.google tcp
FR 142.250.75.238:443 play.google.com tcp
US 8.8.4.4:443 dns.google udp
FR 142.250.179.67:443 tcp
US 8.8.8.8:53 67.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 123.35.104.34.in-addr.arpa udp
FR 172.217.20.194:443 ade.googlesyndication.com udp
US 161.35.127.181:443 veryfast.io tcp
US 161.35.127.181:443 veryfast.io tcp
IN 142.250.183.67:443 udp
IN 142.250.183.67:443 tcp
US 8.8.8.8:53 181.127.35.161.in-addr.arpa udp
GB 84.17.50.8:443 repcdn.veryfast.io tcp
FR 142.250.75.238:443 play.google.com udp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
US 64.176.203.93:443 pcapp.store tcp
US 18.206.134.55:443 api.wavebrowserbase.com tcp
FR 142.250.178.133:443 tcp
GB 87.248.114.11:443 s.yimg.com tcp
US 8.8.8.8:53 133.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 11.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 h.clarity.ms udp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 57.110.18.2.in-addr.arpa udp
US 8.8.8.8:53 pcapp.store udp
US 45.32.1.23:443 pcapp.store tcp
US 8.8.8.8:53 delivery.pcapp.store udp
US 8.8.8.8:53 23.1.32.45.in-addr.arpa udp
GB 84.17.50.9:443 delivery.pcapp.store tcp
US 8.8.8.8:53 www.google.co.uk udp
FR 142.250.179.68:443 www.google.com udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 google.com udp
FR 142.250.75.238:443 google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
FR 142.250.75.238:443 google.com tcp
US 8.8.8.8:53 trc.taboola.com udp
US 151.101.193.44:443 trc.taboola.com tcp
GB 88.221.135.33:443 www.bing.com tcp
GB 88.221.135.33:443 www.bing.com tcp
GB 88.221.135.33:443 www.bing.com tcp
US 8.8.8.8:53 33.135.221.88.in-addr.arpa udp
US 64.176.203.93:443 pcapp.store tcp
US 64.176.203.93:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
GB 88.221.135.33:443 www.bing.com tcp
US 45.32.1.23:443 pcapp.store tcp
GB 88.221.135.33:443 www.bing.com tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 88.221.135.27:443 th.bing.com tcp
GB 88.221.135.27:443 th.bing.com tcp
GB 88.221.135.33:443 th.bing.com tcp
GB 88.221.135.33:443 th.bing.com tcp
US 8.8.8.8:53 27.135.221.88.in-addr.arpa udp
FR 142.250.179.67:443 udp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.8.8:53 167.154.64.172.in-addr.arpa udp
US 64.176.203.93:443 pcapp.store tcp
US 151.101.193.44:443 trc.taboola.com tcp
US 8.8.8.8:53 en.softonic.com udp
US 151.101.1.91:443 en.softonic.com tcp
US 151.101.1.91:443 en.softonic.com tcp
US 151.101.1.91:443 en.softonic.com tcp
US 151.101.1.91:443 en.softonic.com udp
US 8.8.8.8:53 images.sftcdn.net udp
US 8.8.8.8:53 sc.sftcdn.net udp
US 8.8.8.8:53 softonic.com udp
US 151.101.193.91:443 sc.sftcdn.net tcp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
US 199.232.209.91:443 softonic.com tcp
US 199.232.209.91:443 softonic.com tcp
US 151.101.193.91:443 sc.sftcdn.net tcp
US 151.101.193.91:443 sc.sftcdn.net tcp
US 8.8.8.8:53 www.clarity.ms udp
GB 54.192.139.162:443 c.amazon-adsystem.com tcp
GB 13.224.222.64:443 sdk.privacy-center.org tcp
US 13.107.246.64:443 www.clarity.ms tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 151.101.1.91:443 sc.sftcdn.net udp
US 8.8.8.8:53 91.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 91.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 91.209.232.199.in-addr.arpa udp
US 8.8.8.8:53 64.222.224.13.in-addr.arpa udp
GB 13.224.222.64:443 sdk.privacy-center.org tcp
US 8.8.8.8:53 www.datadoghq-browser-agent.com udp
GB 54.192.139.162:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 btloader.com udp
GB 18.172.148.233:443 www.datadoghq-browser-agent.com tcp
US 104.22.75.216:443 btloader.com tcp
GB 54.192.139.162:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 233.148.172.18.in-addr.arpa udp
US 8.8.8.8:53 216.75.22.104.in-addr.arpa udp
US 8.8.8.8:53 ad-delivery.net udp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 51.8.64.151:443 h.clarity.ms tcp
GB 108.156.39.27:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 104.22.53.86:443 cdn.id5-sync.com tcp
US 8.8.8.8:53 cdn.btmessage.com udp
US 45.32.1.23:443 pcapp.store tcp
US 130.211.23.194:443 api.btloader.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 104.26.6.141:443 cdn.btmessage.com tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 8.8.8.8:53 api.btmessage.com udp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 27.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 86.53.22.104.in-addr.arpa udp
US 45.32.1.23:443 pcapp.store tcp
NL 139.45.197.227:443 notix.io tcp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 141.6.26.104.in-addr.arpa udp
US 8.8.8.8:53 227.197.45.139.in-addr.arpa udp
US 8.8.8.8:53 api.privacy-center.org udp
GB 108.138.233.27:443 api.privacy-center.org tcp
US 8.8.8.8:53 c4626f236e5c1e7868c9d97cbcede980.safeframe.googlesyndication.com udp
US 8.8.8.8:53 wct.softonic.com udp
FR 142.250.179.65:443 c4626f236e5c1e7868c9d97cbcede980.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 shb.richaudience.com udp
US 104.26.2.63:443 wct.softonic.com tcp
GB 18.154.87.148:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 ap.lijit.com udp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 brightcombid.marphezis.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
NL 188.166.203.175:443 brightcombid.marphezis.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
IE 54.75.251.201:443 id.crwdcntrl.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
IE 52.17.251.242:443 ad.360yield.com tcp
US 104.18.36.155:443 htlb.casalemedia.com tcp
US 34.120.63.153:443 prebid.media.net tcp
NL 185.89.210.244:443 ib.adnxs.com tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 cdn-ima.33across.com udp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
DE 162.19.138.118:443 lb.eu-1-id5-sync.com tcp
IE 52.212.196.153:443 ap.lijit.com tcp
US 104.18.35.167:443 cdn-ima.33across.com tcp
FR 142.250.178.130:443 ep1.adtrafficquality.google udp
DE 141.95.33.120:443 lb.eu-1-id5-sync.com tcp
GB 18.245.143.100:443 tags.crwdcntrl.net tcp
US 151.101.129.229:443 cdn.jsdelivr.net udp
US 8.8.8.8:53 27.233.138.108.in-addr.arpa udp
US 8.8.8.8:53 63.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 148.87.154.18.in-addr.arpa udp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 155.36.18.104.in-addr.arpa udp
US 8.8.8.8:53 175.203.166.188.in-addr.arpa udp
US 8.8.8.8:53 244.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 242.251.17.52.in-addr.arpa udp
US 8.8.8.8:53 151.84.255.185.in-addr.arpa udp
US 216.239.34.36:443 region1.analytics.google.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 151.101.193.91:443 sc.sftcdn.net udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
FR 142.250.201.163:443 www.google.co.uk udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
US 8.8.8.8:53 ampcid.google.com udp
BE 74.125.71.157:443 stats.g.doubleclick.net udp
FR 142.250.179.97:443 ep2.adtrafficquality.google udp
NL 185.235.87.202:443 ag.gbc.criteo.com tcp
FR 185.235.86.115:443 gem.gbc.criteo.com tcp
US 104.26.2.63:443 wct.softonic.com tcp
FR 216.58.213.78:443 ampcid.google.com tcp
US 8.8.8.8:53 lexicon.33across.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 35.244.193.51:443 lexicon.33across.com tcp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 push-sdk.com udp
DE 178.63.248.56:443 push-sdk.com tcp
FR 142.250.178.129:443 s2.googleusercontent.com udp
US 8.8.8.8:53 153.196.212.52.in-addr.arpa udp
US 8.8.8.8:53 79.241.63.178.in-addr.arpa udp
US 8.8.8.8:53 118.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 229.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 167.35.18.104.in-addr.arpa udp
US 8.8.8.8:53 120.33.95.141.in-addr.arpa udp
US 8.8.8.8:53 78.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 51.193.244.35.in-addr.arpa udp
US 8.8.8.8:53 56.248.63.178.in-addr.arpa udp
US 8.8.8.8:53 uidsync.net udp
DE 178.63.248.56:443 uidsync.net tcp
US 34.120.63.153:443 prebid.media.net udp
DE 178.63.248.56:443 uidsync.net tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 67.220.226.232:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 232.226.220.67.in-addr.arpa udp
US 8.8.8.8:53 cdn.ampproject.org udp
FR 216.58.214.161:443 cdn.ampproject.org udp
FR 142.250.178.129:443 s2.googleusercontent.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
GB 2.18.108.192:443 ads.pubmatic.com tcp
DE 162.55.233.28:443 sync.richaudience.com tcp
US 151.101.65.108:443 acdn.adnxs.com tcp
GB 95.100.244.20:443 contextual.media.net tcp
US 172.64.149.180:443 js-sec.indexww.com tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
GB 2.18.108.192:443 ads.pubmatic.com tcp
DE 162.55.233.28:443 sync.richaudience.com tcp
US 151.101.65.108:443 acdn.adnxs.com tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 player.aniview.com udp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
DE 51.89.9.253:443 onetag-sys.com tcp
US 67.202.105.21:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 sync.1rx.io udp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 89.149.192.76:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 api-2-0.spot.im udp
US 52.223.40.198:443 match.adsrvr.org tcp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 3.212.19.99:443 cs-server-s2s.yellowblue.io tcp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 jadserve.postrelease.com udp
US 8.8.8.8:53 ce.lijit.com udp
GB 92.123.143.216:443 player.aniview.com udp
IE 52.208.228.214:443 match.prod.bidr.io tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
IE 52.49.168.145:443 jadserve.postrelease.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 34.254.135.1:443 ce.lijit.com tcp
US 54.161.148.55:443 sync.srv.stackadapt.com tcp
US 192.132.33.67:443 bttrack.com tcp
US 172.111.38.54:443 tracker.open-adsyield.com tcp
US 52.2.98.215:443 api-2-0.spot.im tcp
US 8.8.8.8:53 20.244.100.95.in-addr.arpa udp
US 8.8.8.8:53 108.65.101.151.in-addr.arpa udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 216.143.123.92.in-addr.arpa udp
US 8.8.8.8:53 253.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 76.192.149.89.in-addr.arpa udp
US 8.8.8.8:53 21.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 214.228.208.52.in-addr.arpa udp
US 8.8.8.8:53 1.135.254.34.in-addr.arpa udp
US 8.8.8.8:53 54.38.111.172.in-addr.arpa udp
US 8.8.8.8:53 55.148.161.54.in-addr.arpa udp
US 8.8.8.8:53 215.98.2.52.in-addr.arpa udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 spl.zeotap.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
NL 35.214.199.88:443 rtb.mfadsrvr.com udp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 104.22.51.98:443 spl.zeotap.com tcp
FR 142.250.75.226:443 cm.g.doubleclick.net udp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
FR 142.250.75.226:443 cm.g.doubleclick.net tcp
US 8.8.8.8:53 cdn.indexww.com udp
DE 51.89.9.253:443 onetag-sys.com udp
US 45.32.1.23:443 pcapp.store tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 match.sharethrough.com udp
NL 178.250.1.9:443 dis.criteo.com tcp
US 8.8.8.8:53 sync-tm.everesttech.net udp
US 8.8.8.8:53 bh.contextweb.com udp
DE 18.184.119.72:443 match.sharethrough.com tcp
US 151.101.194.49:443 sync-tm.everesttech.net tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
FR 164.132.25.185:443 rtb-csync.smartadserver.com tcp
FR 164.132.25.185:443 rtb-csync.smartadserver.com tcp
DE 178.63.248.56:443 uidsync.net tcp
US 151.101.194.49:443 sync-tm.everesttech.net tcp
US 64.176.203.93:443 pcapp.store tcp
GB 20.90.153.243:443 client.wns.windows.com tcp
US 8.8.8.8:53 185.25.132.164.in-addr.arpa udp
US 8.8.8.8:53 49.194.101.151.in-addr.arpa udp
US 51.8.64.151:443 h.clarity.ms tcp
DE 178.63.248.56:443 uidsync.net tcp
US 8.8.8.8:53 243.153.90.20.in-addr.arpa udp
US 8.8.8.8:53 adclick.g.doubleclick.net udp
US 8.8.8.8:53 d74queuslupub.cloudfront.net udp
US 64.176.203.93:443 pcapp.store tcp
US 8.8.8.8:53 www.avast.com udp
GB 18.244.114.83:443 d74queuslupub.cloudfront.net tcp
GB 104.96.173.181:443 www.avast.com tcp
US 8.8.8.8:53 cdn.cookielaw.org udp
GB 104.103.251.197:443 static3.avast.com tcp
GB 104.103.251.197:443 static3.avast.com tcp
GB 104.103.251.197:443 static3.avast.com tcp
GB 104.103.251.197:443 static3.avast.com tcp
GB 104.103.251.197:443 static3.avast.com tcp
GB 104.103.251.197:443 static3.avast.com tcp
US 104.18.86.42:443 cdn.cookielaw.org tcp
US 104.18.86.42:443 cdn.cookielaw.org tcp
US 104.18.86.42:443 cdn.cookielaw.org tcp
US 8.8.8.8:53 83.114.244.18.in-addr.arpa udp
US 8.8.8.8:53 181.173.96.104.in-addr.arpa udp
US 8.8.8.8:53 197.251.103.104.in-addr.arpa udp
US 8.8.8.8:53 42.86.18.104.in-addr.arpa udp
GB 104.103.251.197:443 static3.avast.com tcp
US 8.8.8.8:53 s.go-mpulse.net udp
US 8.8.8.8:53 assets.adobedtm.com udp
US 8.8.8.8:53 geolocation.onetrust.com udp
GB 2.18.108.226:443 assets.adobedtm.com tcp
GB 95.100.244.132:443 s.go-mpulse.net tcp
US 172.64.155.119:443 geolocation.onetrust.com tcp
US 8.8.8.8:53 mstatic.avast.com udp
GB 104.103.251.197:443 static3.avast.com tcp
GB 104.103.251.197:443 static3.avast.com tcp
NL 20.50.2.44:443 mstatic.avast.com tcp
US 8.8.8.8:53 dpm.demdex.net udp
US 8.8.8.8:53 www.nortonlifelock.com udp
US 8.8.8.8:53 c.go-mpulse.net udp
IE 63.34.48.44:443 dpm.demdex.net tcp
GB 104.96.172.121:443 www.nortonlifelock.com tcp
GB 2.18.108.132:443 c.go-mpulse.net tcp
US 8.8.8.8:53 symantec.demdex.net udp
US 8.8.8.8:53 cm.everesttech.net udp
IE 52.212.226.55:443 cm.everesttech.net tcp
US 8.8.8.8:53 132.244.100.95.in-addr.arpa udp
US 8.8.8.8:53 226.108.18.2.in-addr.arpa udp
US 8.8.8.8:53 119.155.64.172.in-addr.arpa udp
US 8.8.8.8:53 121.172.96.104.in-addr.arpa udp
US 8.8.8.8:53 44.2.50.20.in-addr.arpa udp
US 8.8.8.8:53 132.108.18.2.in-addr.arpa udp
US 8.8.8.8:53 znb3hblkjhhpwrz9k-gendigital.siteintercept.qualtrics.com udp
US 8.8.8.8:53 yjxa2rtimcw3kzwk3apq-f-6dc699f10-clientnsv4-s.akamaihd.net udp
IE 66.235.152.225:443 oms.avast.com tcp
US 104.17.208.240:443 znb3hblkjhhpwrz9k-gendigital.siteintercept.qualtrics.com tcp
US 8.8.8.8:53 siteintercept.qualtrics.com udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 8.8.8.8:53 02179910.akstat.io udp
US 8.8.8.8:53 225.152.235.66.in-addr.arpa udp
US 8.8.8.8:53 240.208.17.104.in-addr.arpa udp
US 8.8.8.8:53 pcapp.store udp
US 8.8.8.8:53 pcapp.store udp
US 45.32.1.23:443 pcapp.store tcp
US 8.8.8.8:53 bat.bing.com udp
US 150.171.28.10:443 bat.bing.com tcp
US 8.8.8.8:53 analytics.ff.avast.com udp
US 8.8.8.8:53 privacyportal-de.onetrust.com udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 s.yimg.com udp
US 8.8.8.8:53 static.hotjar.com udp
US 8.8.8.8:53 www.upsellit.com udp
US 34.117.223.223:443 analytics.ff.avast.com tcp
GB 13.224.245.61:443 static.hotjar.com tcp
DE 157.240.27.27:443 connect.facebook.net tcp
US 104.18.32.137:443 privacyportal-de.onetrust.com tcp
US 34.117.39.58:443 www.upsellit.com tcp
GB 87.248.114.12:443 s.yimg.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 4711400.fls.doubleclick.net udp
FR 142.250.201.166:443 4711400.fls.doubleclick.net tcp
US 8.8.8.8:53 script.hotjar.com udp
FR 142.250.201.166:443 4711400.fls.doubleclick.net udp
US 8.8.8.8:53 223.223.117.34.in-addr.arpa udp
US 8.8.8.8:53 137.32.18.104.in-addr.arpa udp
US 8.8.8.8:53 61.245.224.13.in-addr.arpa udp
US 8.8.8.8:53 58.39.117.34.in-addr.arpa udp
GB 18.245.253.48:443 script.hotjar.com tcp
FR 142.250.179.78:443 www.youtube.com udp
DE 157.240.27.35:443 www.facebook.com tcp
US 34.117.223.223:443 analytics.ff.avast.com udp
US 8.8.8.8:53 48.253.245.18.in-addr.arpa udp
US 8.8.8.8:53 bits.avcdn.net udp
GB 23.208.241.36:443 bits.avcdn.net tcp
US 8.8.8.8:53 36.241.208.23.in-addr.arpa udp
US 64.176.203.93:80 pcapp.store tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
FR 142.250.179.68:443 www.google.com udp
US 64.176.203.93:443 pcapp.store tcp
US 64.176.203.93:443 pcapp.store tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 64.176.203.93:443 pcapp.store tcp
US 8.8.8.8:443 dns.google udp
US 147.182.211.77:443 ev.pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 8.8.8.8:53 h.clarity.ms udp
US 51.8.64.151:443 h.clarity.ms tcp
FR 216.58.214.74:443 udp
FR 216.58.214.74:443 tcp
US 151.101.193.44:443 trc.taboola.com tcp
US 64.176.203.93:443 pcapp.store tcp
US 8.8.4.4:443 dns.google udp
FR 142.250.179.67:443 udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 ip-info.ff.avast.com udp
FR 172.217.20.174:80 www.google-analytics.com tcp
US 34.117.223.223:80 v7event.stats.avast.com tcp
US 34.149.149.62:443 ip-info.ff.avast.com tcp
US 8.8.8.8:53 s-iavast.avcdn.net udp
GB 95.100.245.14:443 s-iavast.avcdn.net tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:53 14.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 62.149.149.34.in-addr.arpa udp
FR 142.250.178.133:443 tcp
US 18.206.134.55:443 api.wavebrowserbase.com tcp
FR 142.250.178.133:443 tcp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.178.133:443 tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 mail.yahoo.com udp
US 8.8.8.8:53 mail.yahoo.com udp
QA 34.18.10.222:443 tcp
GB 87.248.114.11:443 mail.yahoo.com tcp
US 8.8.8.8:53 35.215.58.216.in-addr.arpa udp
US 8.8.8.8:53 analytics.avcdn.net udp
FR 172.217.20.174:80 www.google-analytics.com tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 222.10.18.34.in-addr.arpa udp
US 8.8.8.8:53 shepherd.ff.avast.com udp
US 8.8.8.8:53 shepherd.ff.avast.com udp
US 8.8.8.8:53 shepherd.ff.avast.com udp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
FR 172.217.20.170:443 content-autofill.googleapis.com udp
FR 142.250.179.99:443 tcp
US 147.182.211.77:443 ev.pcapp.store tcp
US 8.8.8.8:53 28.176.160.34.in-addr.arpa udp
BR 35.215.235.162:443 tcp
US 8.8.8.8:53 99.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 170.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 f3461309.iavs9x.u.avast.com udp
US 8.8.8.8:53 f3461309.iavs9x.u.avast.com udp
US 8.8.8.8:53 g1928587.iavs9x.u.avast.com udp
US 8.8.8.8:53 l7814800.iavs9x.u.avast.com udp
US 8.8.8.8:53 n2833777.iavs9x.u.avast.com udp
US 8.8.8.8:53 r3802239.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 f3461309.iavs9x.u.avast.com udp
US 8.8.8.8:53 f3461309.iavs9x.u.avast.com udp
US 8.8.8.8:53 g1928587.iavs9x.u.avast.com udp
US 8.8.8.8:53 l7814800.iavs9x.u.avast.com udp
US 8.8.8.8:53 n2833777.iavs9x.u.avast.com udp
US 8.8.8.8:53 r3802239.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 162.235.215.35.in-addr.arpa udp
US 8.8.4.4:53 n2833777.iavs9x.u.avast.com udp
US 8.8.4.4:53 l7814800.iavs9x.u.avast.com udp
US 8.8.4.4:53 r3802239.iavs9x.u.avast.com udp
US 8.8.8.8:53 t.co udp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 analytics.twitter.com udp
PL 93.184.221.165:443 t.co tcp
GB 92.123.140.34:80 r3802239.iavs9x.u.avast.com tcp
FR 142.250.201.182:443 i.ytimg.com udp
US 104.244.42.67:443 analytics.twitter.com tcp
GB 92.123.140.34:80 r3802239.iavs9x.u.avast.com tcp
GB 92.123.140.34:80 r3802239.iavs9x.u.avast.com tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 182.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 165.221.184.93.in-addr.arpa udp
US 8.8.8.8:53 34.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 67.42.244.104.in-addr.arpa udp
GB 92.123.140.34:80 r3802239.iavs9x.u.avast.com tcp
US 8.8.8.8:53 trc-events.taboola.com udp
NL 141.226.228.48:443 trc-events.taboola.com tcp
GB 92.123.140.34:80 r3802239.iavs9x.u.avast.com tcp
US 8.8.8.8:53 48.228.226.141.in-addr.arpa udp
GB 92.123.140.34:80 r3802239.iavs9x.u.avast.com tcp
DE 157.240.27.35:443 www.facebook.com tcp
US 172.67.172.104:443 t.entail-insights.com tcp
US 8.8.8.8:53 www.google.com udp
US 216.239.34.36:443 region1.analytics.google.com udp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
FR 142.250.201.163:443 www.google.co.uk udp
FR 142.250.179.78:443 www.youtube.com udp
US 8.8.8.8:53 www.buff.game udp
US 8.8.8.8:53 download.overwolf.com udp
GB 13.224.245.117:443 download.overwolf.com tcp
GB 13.224.245.117:443 download.overwolf.com tcp
US 8.8.8.8:53 trc.taboola.com udp
US 151.101.129.44:443 trc.taboola.com tcp
GB 92.123.140.34:80 r3802239.iavs9x.u.avast.com tcp
US 8.8.8.8:53 117.245.224.13.in-addr.arpa udp
GB 92.123.140.34:80 r3802239.iavs9x.u.avast.com tcp
US 8.8.8.8:53 ping.chartbeat.net udp
US 23.23.131.10:443 ping.chartbeat.net tcp
US 172.67.169.50:443 www.buff.game tcp
US 8.8.8.8:53 10.131.23.23.in-addr.arpa udp
GB 92.123.140.34:80 r3802239.iavs9x.u.avast.com tcp
GB 92.123.140.34:80 r3802239.iavs9x.u.avast.com tcp
US 51.8.64.151:443 h.clarity.ms tcp
GB 88.221.135.27:443 th.bing.com tcp
US 8.8.8.8:53 l2983942.iavs9x.u.avast.com udp
US 8.8.8.8:53 l2983942.iavs9x.u.avast.com udp
US 8.8.8.8:53 l7814800.iavs9x.u.avast.com udp
US 8.8.8.8:53 p1043812.iavs9x.u.avast.com udp
US 8.8.8.8:53 p9854759.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 t1024579.iavs9x.u.avast.com udp
US 8.8.8.8:53 l2983942.iavs9x.u.avast.com udp
US 8.8.8.8:53 l2983942.iavs9x.u.avast.com udp
US 8.8.8.8:53 l7814800.iavs9x.u.avast.com udp
US 8.8.8.8:53 p1043812.iavs9x.u.avast.com udp
US 8.8.8.8:53 p9854759.iavs9x.u.avast.com udp
US 8.8.8.8:53 s-iavs9x.avcdn.net udp
US 8.8.8.8:53 t1024579.iavs9x.u.avast.com udp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
US 8.8.8.8:53 g1928587.vps18.u.avcdn.net udp
US 8.8.8.8:53 g1928587.vps18.u.avcdn.net udp
US 8.8.8.8:53 n2833777.vps18.u.avcdn.net udp
US 8.8.8.8:53 p1043812.vps18.u.avcdn.net udp
US 8.8.8.8:53 r3802239.vps18.u.avcdn.net udp
US 8.8.8.8:53 s-vps18.avcdn.net udp
US 8.8.8.8:53 g1928587.vps18.u.avcdn.net udp
US 8.8.8.8:53 g1928587.vps18.u.avcdn.net udp
US 8.8.8.8:53 n2833777.vps18.u.avcdn.net udp
US 8.8.8.8:53 p1043812.vps18.u.avcdn.net udp
US 8.8.8.8:53 r3802239.vps18.u.avcdn.net udp
US 8.8.8.8:53 r9319236.vps18.u.avcdn.net udp
US 8.8.8.8:53 s-vps18.avcdn.net udp
GB 92.123.140.48:80 r3802239.vps18.u.avcdn.net tcp
GB 92.123.140.48:80 r3802239.vps18.u.avcdn.net tcp
GB 92.123.140.48:80 r3802239.vps18.u.avcdn.net tcp
US 8.8.8.8:53 shepherd.ff.avast.com udp
US 34.160.176.28:443 shepherd.ff.avast.com tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 95.100.244.132:443 02179910.akstat.io tcp
US 216.239.32.36:443 region1.analytics.google.com udp
GB 88.221.135.27:443 th.bing.com tcp
GB 88.221.135.27:443 th.bing.com tcp
GB 95.101.143.201:443 th.bing.com tcp
GB 95.101.143.201:443 th.bing.com tcp
US 150.171.28.10:443 bat.bing.com tcp
US 8.8.8.8:53 48.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 201.143.101.95.in-addr.arpa udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.4.4:53 v7event.stats.avast.com udp
US 8.8.8.8:53 analyticsnew.overwolf.com udp
GB 18.245.143.30:80 analyticsnew.overwolf.com tcp
US 8.8.4.4:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 51.8.64.151:443 h.clarity.ms tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 30.143.245.18.in-addr.arpa udp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
FR 172.217.20.174:80 www.google-analytics.com tcp
US 8.8.4.4:53 v7event.stats.avast.com udp
GB 18.245.143.30:443 analyticsnew.overwolf.com tcp
US 8.8.4.4:53 v7event.stats.avast.com udp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 8.8.8.8:53 analytics.avcdn.net udp
US 34.117.223.223:443 analytics.avcdn.net tcp
GB 18.245.143.30:80 analyticsnew.overwolf.com tcp
GB 88.221.135.27:443 th.bing.com tcp
US 8.8.8.8:53 ssl.google-analytics.com udp
FR 142.250.201.168:443 ssl.google-analytics.com tcp
US 8.8.8.8:53 ipm.avcdn.net udp
US 34.111.24.1:443 ipm.avcdn.net tcp
US 8.8.8.8:53 168.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 1.24.111.34.in-addr.arpa udp
FR 172.217.20.174:80 www.google-analytics.com tcp
GB 18.245.143.30:443 analyticsnew.overwolf.com tcp
US 34.117.223.223:443 analytics.avcdn.net tcp
US 8.8.8.8:53 v7event.stats.avast.com udp
US 34.117.223.223:443 v7event.stats.avast.com tcp
GB 92.123.140.48:80 r3802239.vps18.u.avcdn.net tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
GB 88.221.135.27:443 th.bing.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
US 51.8.64.151:443 h.clarity.ms tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
US 8.8.8.8:443 dns.google udp
FR 142.250.179.68:443 www.google.com udp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
GB 88.221.135.27:443 th.bing.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
US 8.8.8.8:53 sub.got-to-be.net udp
DE 23.88.8.123:443 sub.got-to-be.net tcp
DE 23.88.8.123:443 sub.got-to-be.net tcp
US 8.8.8.8:53 123.8.88.23.in-addr.arpa udp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
US 147.182.211.77:443 ev.pcapp.store tcp
GB 173.222.211.41:443 aefd.nelreports.net udp
US 8.8.8.8:53 41.211.222.173.in-addr.arpa udp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
US 151.101.129.44:443 trc.taboola.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
GB 88.221.135.27:443 th.bing.com tcp
GB 88.221.135.27:443 th.bing.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
GB 88.221.135.27:443 th.bing.com tcp
GB 88.221.135.27:443 th.bing.com tcp
GB 95.101.143.201:443 th.bing.com tcp
GB 95.101.143.201:443 th.bing.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
US 8.8.8.8:53 h.clarity.ms udp
US 51.8.64.151:443 h.clarity.ms tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
FR 142.250.179.67:443 udp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
GB 88.221.135.27:443 th.bing.com tcp
GB 88.221.135.27:443 th.bing.com tcp
US 147.182.211.77:443 ev.pcapp.store tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
GB 88.221.135.27:443 th.bing.com tcp
GB 88.221.135.27:443 th.bing.com tcp
GB 95.101.143.201:443 th.bing.com tcp
GB 95.101.143.201:443 th.bing.com tcp
US 8.8.8.8:53 rewards.bing.com udp
US 13.107.21.237:443 rewards.bing.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
US 8.8.8.8:443 dns.google udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
FR 142.250.178.133:443 tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
CA 34.0.38.213:443 tcp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
GB 87.248.114.11:443 mail.yahoo.com tcp
FR 172.217.20.202:443 content-autofill.googleapis.com tcp
FR 142.250.179.99:443 udp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
US 8.8.8.8:53 213.38.0.34.in-addr.arpa udp
US 172.64.154.167:443 www2.bing.com tcp
GB 95.101.143.201:443 th.bing.com tcp
GB 88.221.135.27:443 th.bing.com tcp
GB 92.123.140.34:80 t1024579.iavs9x.u.avast.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.8.8:53 www.antivirussoftwareguide.com udp
US 68.183.21.156:443 www.antivirussoftwareguide.com tcp
US 68.183.21.156:443 www.antivirussoftwareguide.com tcp
GB 92.123.140.48:80 r3802239.vps18.u.avcdn.net tcp
US 8.8.8.8:53 156.21.183.68.in-addr.arpa udp
GB 92.123.140.48:80 r3802239.vps18.u.avcdn.net tcp
US 68.183.21.156:443 www.antivirussoftwareguide.com tcp
US 68.183.21.156:443 www.antivirussoftwareguide.com tcp
US 68.183.21.156:443 www.antivirussoftwareguide.com tcp
US 68.183.21.156:443 www.antivirussoftwareguide.com tcp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
FR 142.250.179.78:443 www.youtube.com udp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
FR 142.250.179.68:443 www.google.com tcp
FR 142.250.201.163:443 www.google.co.uk tcp
GB 92.123.140.48:80 r3802239.vps18.u.avcdn.net tcp
US 8.8.8.8:53 trc.taboola.com udp
US 151.101.129.44:443 trc.taboola.com tcp
US 151.101.129.44:443 trc.taboola.com tcp
GB 88.221.135.33:443 www.bing.com tcp
GB 88.221.135.33:443 www.bing.com tcp
US 8.8.8.8:53 th.bing.com udp
GB 88.221.135.27:443 th.bing.com tcp
GB 88.221.135.27:443 th.bing.com tcp
GB 95.101.143.219:443 th.bing.com tcp
GB 95.101.143.219:443 th.bing.com tcp
US 8.8.8.8:53 219.143.101.95.in-addr.arpa udp
US 51.8.64.151:443 h.clarity.ms tcp
GB 92.123.140.48:80 r3802239.vps18.u.avcdn.net tcp
GB 88.221.135.33:443 th.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 aefd.nelreports.net udp
GB 173.222.211.40:443 aefd.nelreports.net udp
GB 173.222.211.40:443 aefd.nelreports.net tcp
GB 88.221.135.33:443 th.bing.com tcp
GB 88.221.135.33:443 th.bing.com tcp
US 151.101.129.44:443 trc.taboola.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 847d47008dbea51cb1732d54861ba9c9
SHA1 f2099242027dccb88d6f05760b57f7c89d926c0d
SHA256 10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1
SHA512 bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f

\??\pipe\LOCAL\crashpad_100_DRFIKBSVXHNJMLMZ

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 f9664c896e19205022c094d725f820b6
SHA1 f8f1baf648df755ba64b412d512446baf88c0184
SHA256 7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e
SHA512 3fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f305eb6c15e2d222f3333a4b0088705c
SHA1 f81bb466a7c0293333629c0f7ef60e8b86df0ba3
SHA256 90e51118378110968809f6fa94969cf9716f35ee7076f15483a476ce27c69e9f
SHA512 32ab174303f526d07ef8fdfbb27c30d34095831807632358132991f5c6395b44dd8c52f60e8dffa94d2e5db69c8d5b0ac85a94110ef3a853e84578c08ada4512

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

MD5 0ac7c84e0023ddbcc3b1d18b9e1ac79d
SHA1 b78a7ad72b6763dc3e30814b14c4470abfcb2fe3
SHA256 16feff667de891bcbd3c819c2bfaefd96cb2a70a766fab01a86a2b2f37922f80
SHA512 de8e1b1644298cb7818e1af67c2d67bb8160ce3aea74ca6bb0bcc21243115d22391d71b76918a7cf54b9be271154fe18bba9ccd2b4db79e528439201f984294a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

MD5 24db812f8be67f494769384eb573dfa6
SHA1 b9730f5f731de6bde14e198e12c671774bcc7334
SHA256 dee88f718e8dd4fcd2d0154cb5e592244676321b6d887dd560368f5ea25c1fa4
SHA512 311130c2a4c91c93764b0e0ce3511e9868a5537d8619f8710b0aaf100f85328cd24c5921a89c41ce09e983c91a6518e457c7f66b713cae541f931f0146590ffa

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

MD5 55540a230bdab55187a841cfe1aa1545
SHA1 363e4734f757bdeb89868efe94907774a327695e
SHA256 d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
SHA512 c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 84c017636853b1b8c20e5802bc858969
SHA1 4ccb56f87a3d4025f0c20e8cc1adcb63c48a624a
SHA256 a75250c6d86c7e9e406d023e3720e3c2461d73aaeb2e64b5a0447d8455f2bc6e
SHA512 708bd040e5e6d015b43aa44c4c19235f864dcd86383562ecd37bb6579cf4720fa15bd4a72709b20a0c68d76f3a4425fe5fcdd50a06580cbd13783c984d721369

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 cb939ba4b36e0e7be9fe0ae5f010bc89
SHA1 e0a11bfc8dc243f14c0ee35debcbfdf06d30f605
SHA256 63e504671928907a2c6fa89e0cda7036138bff02e0c1bba619c5cc41778b6432
SHA512 fff3f42202d8dc4165d69c3f3dcb1d0c04ee5a985623efa8f8eb26b460d853c7a07283a4940d47780bcc0e9ddc86a38ea4a06b7b8e9bba2f5b3abcc8f31bd831

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5800a7.TMP

MD5 443f8751b70483edeac7ce77c5a6f9d8
SHA1 8c7f1eab5bda215328130f533f8a269dbf079e14
SHA256 100120070f3e73b97f1183c65a8a3a03f223bbad78cec4ac6ca61fcb2b078172
SHA512 5212a708ad718e920188a6fea1d42d43a32070ce76a6bde935395e5bab1f24b801a17f8fffab907458e81ee8dd6886e8a50315404bf00172a0a4b95a45161750

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\22cd9281-15ec-46ad-8f3f-1f5b2f30c36c.tmp

MD5 498e18d5690b309dbe931c27bacf4b20
SHA1 8f643ac4233643e88f56265ab91b831033cf4039
SHA256 08c19fae3ba18a233f24d316c65afc6fa31122a0ff6cc5f277c57e767e14b2e4
SHA512 6177405414bf918a007933ab31b106269813ab4c48bca8906d35c0ad5ae590d8df6215e758db44f95abf59d2713b12e77b24b9c7352e3d54a227aab460189646

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 363264fa9011eec617874bbf3766524b
SHA1 40c5b6395410bf760e83fc5d2fc3dbe04e7a57f9
SHA256 e0e3291cc533ff5ff14d65245e33060723c568fa12088cd414b076940d6892ff
SHA512 d17119ce67d792e7a505537ac0139d75cdff265e34652d371969ebc1141a39b73a0151caf0694d5b1fc11afbdad8b23ccb46ee39349a7ca8f7c73e790f9e3ca3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6d0ab78572a6e30d1026c920643a1537
SHA1 cdb7e1efe31ba6687a510a64ab9b094416780340
SHA256 5061a14011517c98a6ad817d219d3de21e0a8166f176c9588dd16ac22445ff68
SHA512 a3c57491865a96072dd67e600334fc7cfe19eb66737a8e0eb214d7fa523bb08ef322a39ec9db98696a50b646cb143742aa4506467959a5a7d47a95bdaf84758a

C:\Users\Admin\Downloads\Setup.exe

MD5 2d2873582cb314b2ac549e6c52c12168
SHA1 8dcb917eb95267c98b37f6db044ad2fd0f6fe97a
SHA256 e870cb0d55b21766caef3049909d5b7b4b5229e215d9a01d16db117922aa25fa
SHA512 3a3dc440d9b70b480ba7d68533932baa06a41763ab4fcec998d1f5eb0f1c70991cbef05c86c2882b85271b6ae1316cae7b1b67bece79ba5311fdc30393e586fe

C:\Users\Admin\AppData\Local\Temp\nsn4060.tmp\System.dll

MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

C:\Users\Admin\AppData\Local\Temp\nsn4060.tmp\nsJSON.dll

MD5 f4d89d9a2a3e2f164aea3e93864905c9
SHA1 4d4e05ee5e4e77a0631a3dd064c171ba2e227d4a
SHA256 64b3efdf3de54e338d4db96b549a7bdb7237bb88a82a0a63aef570327a78a6fb
SHA512 dbda3fe7ca22c23d2d0f2a5d9d415a96112e2965081582c7a42c139a55c5d861a27f0bd919504de4f82c59cf7d1b97f95ed5a55e87d574635afdb7eb2d8cadf2

C:\Users\Admin\AppData\Local\Temp\nsn4060.tmp\nsDialogs.dll

MD5 6c3f8c94d0727894d706940a8a980543
SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355

C:\Users\Admin\AppData\Local\Temp\nsn4060.tmp\inetc.dll

MD5 a35cdc9cf1d17216c0ab8c5282488ead
SHA1 ed8e8091a924343ad8791d85e2733c14839f0d36
SHA256 a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df
SHA512 0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 34c120b6b66cc94cd23473d353d4a04c
SHA1 7f40b67c45e2866fb4aef0f47bdf9695e0360df4
SHA256 c19f96de08436f9752bfb5d83dfcd4b6e918278095affe5a674bafee7d37ed3a
SHA512 b15badd6e91a48358f081840d93d4c51b9163e977f400b5aaeda7ee0cac7ff24702a1e0e813aa8c04c5cb4435b700945dda418752764d823ed294e91145eca2a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\773CFF2C7835D48C4E76FE153DBA9F81_15174A80589B8DAF9768E9131F4845C0

MD5 cfc7bd74a9bec57e63a202311d255d9a
SHA1 321f0d69e00be34cd348beaef71dab04baf6a64a
SHA256 92ab7989a08b9dad85eed803ba34cfaa2a1b625034599909096050ee2c59a86b
SHA512 4da6577f32303338bdde64c07e313e673987ce34c3efb47b3adfdd5b880cc8e0ed673fd20e0d663bcb07a59f931643e2457c8fbc7aa12444e2d4557a02da289f

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_C39E9DBC666D19C07EEE7CD1E11AF8BE

MD5 00207ff9915a2a238654aa1798b406a5
SHA1 c796a49855f7977100848728f54ee31f91777093
SHA256 d370e3df2de8856bf624f16bb0fa38f6819da962b81015625e5bdf7d41e10d01
SHA512 8e9ab4a664b63d5f59de4b1de8a91cf7b1614d848a1350baec9ebe913b519ab911c91e5a60d3bfd07aad271a243566412e0f4349793c8fe826e4c96c8daa144b

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_C39E9DBC666D19C07EEE7CD1E11AF8BE

MD5 44d5e76ec3747176c4c203e5ab0f429c
SHA1 3a7b910ab9816097154cbd9e5d716ca74db70f48
SHA256 44c96338ceec1a39bcc66acf20b3a64c3db9afb3dc0738b31b47bfb142786f57
SHA512 53f7286e764e31ea2619e1f5ad4f618379080dc9872bfbe0be44f9d491c0ab12486b3417d6d6e72609f4a212925c5907c18130a963ef7630f9a360138caf285d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 be09cc782fbab1c0d55dc6329fd0fdca
SHA1 640d9c639cbe1efc77ef91449dca92889396ff8c
SHA256 123d6df0d977487378daac3e336f31076e295d17473a573c3ae389a0bacbdf4e
SHA512 23348f79e3f83618f72186e5c5f98f7ab68bf5ed37daf6f87d44cc9e0685902bc439458e1e1a6faa49aa9962f625176e93da42ed138b91cd93a8b4fd872ac888

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 51a2d1b5116e249abb74d876cdb68915
SHA1 6baf293834a0b222c3deb5d72500a66ff53a3e93
SHA256 1f4cfa0779a35dfc6a738e6ff5927d9d2e782ae7139a1da974a4d1ee61728d75
SHA512 20acd5b290bc99ea289eae6ff1ce87ff27075b24b648e71df71171c048ff602e84c799158c4d794efd14631d66d2b7b4d7704b65ed128dbd227fe604f5989863

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

MD5 53a41cc7b3e2b78eaf31e9c97248ce93
SHA1 1c53b112f6e5a1b3fc9ef83e3ed26cd1c7f5e359
SHA256 e6b6e97e0382c44d1348f508e57ac7a52c01ece17a41b1128ea2c9428926129d
SHA512 be513b11da46a51873a46cbe92ebad18a16a3a9a8b9dc86e847efa712a72b802685e7df92d4d690e8b6b4e781ac3f7f29986e926753efbb4da33a6fd6038ac5c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 0008f5ba8d1412e4cba21afb77856bc6
SHA1 555fcb6e24056193507b629d6b19dddb15776cca
SHA256 bb2d9e597911644cb20ae34b132b28b28f4d35debc3a0ea4e3785939baff3e5e
SHA512 9929777e45fa5640dc80fb6e6b3e99c99debf4ee070a6beb96c18e39d83edca728a88d60685445290ba78c6481fcce5551f7bdcb1991a0d9797673b44b31777b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

MD5 e4cc1ece2f2425b10ae2ccc212c1dafc
SHA1 92609e6d0093693110baa23758382889bcb30da6
SHA256 92e9415d8bc8529e2a3f335258ef7ff159cce2965ce3b2b7c15f73720efee809
SHA512 2848dee3a6da891b7044518bc97aeafd340705cebe846350b9a7f314b52450f1eb977b8b492638965ce4674ebaa341e4f832438199c3cad2fb0a0793ef83a619

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f15a895fbdce1b5bebd22182a334d6c8
SHA1 8df873431659b77aeb5263b7b0980a09bbab28bf
SHA256 ef65285f46434ed3650877eb0b154bd84318f9c10f6293fbc1becf306c3a39ce
SHA512 0b3738ad8665f02abbc757186894f0258385b249328525db1f578e81dd818460db14005b31264c1d0a7d68df593350ccbc20cc9e40a187b3067af2ab6bc9f994

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002c

MD5 a1afe33ce7442502a96deee597945384
SHA1 fe34cd78635f5617cf238de6dc746058d6f88899
SHA256 f7eeb570c60aff1435db1daf3767c0672634269789870ef91c69b2b90a47edaa
SHA512 f8bca21c3fd79d63c8265f5dfcba95419eac697b42efb600e7c33d15dc5d9c3e0d0d360da39e14004facaea4cff4dcfc00d7437979283ce0a2b06916b69b8c80

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 92bb1a35b74c73a3a962804c882cfeda
SHA1 821708121bc98f94180c1798a05ff94317226a01
SHA256 9860b0eb3d6f2bb3397a29e3977dc3016bcbc63c7fb3f381dec75c43c8edc94d
SHA512 cf7edffc81a6876c9acccdb692057c34195fcb3e5adbde00d41f18d082b5c713092cf1165b18821062de32994e87c98911d8a0046b68b3111b6388312ec35bb8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

MD5 6fb26b39d8dcf2f09ef8aebb8a5ffe23
SHA1 578cac24c947a6d24bc05a6aa305756dd70e9ac3
SHA256 774379647c0a6db04a0c2662be757a730c20f13b4c03fe0b12d43c0f09e7a059
SHA512 c40f4771c10add1b20efb81ee3b61fc5ede4701587f29a1c2cdde8b6faabd1c76d769bf8b99aa19082012f95d99ba448a472463fb9056acd2e43542e14e605cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 10d3b351b2388c509ce62d81185e7511
SHA1 34aa26be42a3a2cff2709e3c877809ca5bef9a5f
SHA256 ab89581cc2c397917afe7cbf6627330577c965608469f67998dfeaac5d80e7d5
SHA512 313c92196ddb0702a71658870e0131009a923708605b984895945c7f2b23f65363865a7e634285e58d97be71f20ecac4bdc946c4ef687fcc19e7d7d4f0e45613

C:\Users\Admin\PCAppStore\nwjs\locales\bg.pak.info

MD5 82d7ab0ff6c34db264fd6778818f42b1
SHA1 eb508bd01721ba67f7daad55ba8e7acdb0a096eb
SHA256 e84331e84cd61d8bdacc574d5186fb259c00467513aa3f2090406330f68a45db
SHA512 176458b03cc2b2d3711965cd277531e002ae55d284b6c9178d2353e268f882430235468e5a1e9e45c8427864d109cf30a024a993b4763a75fa2744f6e0a6ae2a

C:\Users\Admin\AppData\Local\Temp\nsd7F01.tmp\Math.dll

MD5 85428cf1f140e5023f4c9d179b704702
SHA1 1b51213ddbaedfffb7e7f098f172f1d4e5c9efba
SHA256 8d9a23dd2004b68c0d2e64e6c6ad330d0c648bffe2b9f619a1e9760ef978207a
SHA512 dfe7f9f3030485caf30ec631424120030c3985df778993342a371bf1724fa84aa885b4e466c6f6b356d99cc24e564b9c702c7bcdd33052172e0794c2fdecce59

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 f6b70560e09c76eeb1fe3427cf74e1cc
SHA1 2b4e61bccca1f0c7421e7967b7c8101a9a46e68d
SHA256 1f46a1d7b67ed19ff740ee43308ab3402a0fc96edbfc9cb682cd8e737a763829
SHA512 c920f00074fe30b9f072a5892e1244f199f503f051f5b2b918e83e7824e81a5030360a5026abd30461fa2b586403c9ec5263e25fe42fdfcf3afc3c13668d6a6e

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Extension Rules\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\pc_app_store\User Data\GraphiteDawnCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\pc_app_store\User Data\GraphiteDawnCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Sync Data\LevelDB\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Crashpad\metadata

MD5 b3215c166422958342bc2d032621cf9f
SHA1 e78367c81787b4004f0a33046a82d16683a00c4f
SHA256 109e444044404598eb930c42dc1ac761aeaf502080fe1e6feca125f1c9ba68a0
SHA512 75f2317d72ffa9b568feb2eedc9707fc2daa11a6852b354e7dbaa11e785c1affa9cf1f00e60f3a6cc15f099dca8b04df122d12e4fd40aa6ab1050ba9979f5e41

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Crashpad\reports\8a836b15-50f4-4933-860d-9f5d2a5e3c99.dmp

MD5 aae5192c11aaea7fc07be2634e9817d3
SHA1 bf2911debbdaaf1e599934039d64945af6e2c261
SHA256 ba1632dc3c252dae646dbe09103ce9c2040490d32b7628d2b02cec9e6d4a103b
SHA512 d83e0d962c1dba561ab80a02dd4c710e802eaab2a21a075effc630b620549f9f664025300934254ada97450945f08baf9cb98be87b96c1d351a3ba72c00a1779

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\c4f99936-9957-4d8f-a5fb-950579ea28bb.tmp

MD5 728fe78292f104659fea5fc90570cc75
SHA1 11b623f76f31ec773b79cdb74869acb08c4052cb
SHA256 d98e226bea7a9c56bfdfab3c484a8e6a0fb173519c43216d3a1115415b166d20
SHA512 91e81b91b29d613fdde24b010b1724be74f3bae1d2fb4faa2c015178248ed6a0405e2b222f4a557a6b895663c159f0bf0dc6d64d21259299e36f53d95d7067aa

C:\Users\Admin\AppData\Local\pc_app_store\User Data\GraphiteDawnCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 cd7d9a22ca5b94c404ddbe553033e898
SHA1 b3a20a56e681a389cac44a6c62d8158e7c8ef5b6
SHA256 2f0f5497a0adf7c4bf32c4eea67eb3c405edfb8ab45b0f9d522297ea71634999
SHA512 b26a2e2f45bd7b870cc52f57e8f4238dd430497be944c23d94b6c5e20195fe454bcf0be9a55013132d529511758b7593fc75ad343f37420f8a168d373b965eaa

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Web Applications\_nwjs_pcapp.store\pc_app_store.ico.md5

MD5 03e9f614a008075733c76883156b568b
SHA1 5f9cb1b06928487c4b836e9dedc688e8a9650b0b
SHA256 b1a6a6fb45ad1e13054c40dc7c09e3098ee830bcf1ebaec27f640ae4c64b8416
SHA512 7e6969c8908a6bf57bd2cb4457a7c78360468383acee589278e49829617e2f3b872dd8213e57a2ed8f512d444c67a2e619deabdc1394d1c39c7759ed3c744f94

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Cache\Cache_Data\f_00000b

MD5 8e433c0592f77beb6dc527d7b90be120
SHA1 d7402416753ae1bb4cbd4b10d33a0c10517838bd
SHA256 f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af
SHA512 5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002b

MD5 6b04ab52540bdc8a646d6e42255a6c4b
SHA1 4cdfc59b5b62dafa3b20d23a165716b5218aa646
SHA256 33353d2328ea91f6abf5fb5c5f3899853dcc724a993b9086cab92d880da99f4d
SHA512 4f3b417c77c65936486388b618a7c047c84fb2e2dd8a470f7fe4ffec1ad6699d02fa9c1bbd551414eef0f2e6747a9ee59ca87198b20f9f4a9a01394ae69fa730

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a

MD5 c03ff64e7985603de96e7f84ec7dd438
SHA1 dfc067c6cb07b81281561fdfe995aca09c18d0e9
SHA256 0db8e9f0a185bd5dd2ec4259db0a0e89363afa953069f5238a0537671de6f526
SHA512 bb0fd94c5a8944a99f792f336bb8a840f23f6f0f1cb9661b156511a9984f0bb6c96baf05b7c1cf0efb83f43a224ecea52740432e3cfc85e0799428765eefb692

C:\Users\Admin\PCAppStore\download\SetupEngine.exe

MD5 3af0c31420d331d34320212a95f4015a
SHA1 334ee9d0574fcc1e6ea93b6573600a1202eb7577
SHA256 f504f1cda90e467dcd93c10585895a074f3cbdff2b278fa49cf487b32a51f811
SHA512 6345ce334e6ed06e24a2bb561650a9fc28b2dfd0aee424e680b4d57fa6a7c7d14ca6b10a1ff03ec041f81257c1aaab27e3bb41be1e662efd9774e5b711cc98b6

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Local State

MD5 f62d14065420735506c9ce73874bc24c
SHA1 b152c40269e422eeb0c883be444574bf5eff3aaa
SHA256 6ced6ed469cf5bfa070dd67506bb6f3ed9b7aca21364a191d63628c7252be6ff
SHA512 d82c926172807899085a76cc7d47f57caa7c8152402151c7239a7139fcdb2853f4820d43d92c493779cf60d0dfbfc6c1e320f3a01658a13de5ff5d2d7ede3c2a

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Local State~RFe58e5c7.TMP

MD5 158f166276573c1ac468fc6c37d39ae1
SHA1 b51d2689ef7171e86bfaf46da24bc35974051d56
SHA256 0fa75995a72c2ef671e52b268693070e33dc0e778b38ff0bf16c631c5178dc3c
SHA512 b5e719710e0aa2e5c536153f5f35f7371ea454d01dfe6c88becc5e761d1efacb31c6cbaecb27ae68f3bb1562e42a3e197f59a341b15d220525a0d491c6991f58

C:\Users\Admin\AppData\Local\Temp\nsfDE46.tmp\modern-wizard.bmp

MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63

C:\Users\Admin\AppData\Local\Temp\nsfDE46.tmp\Banner.dll

MD5 a1b9bdee9fc87d11676605bd79037646
SHA1 8d6879f63048eb93b9657d0b78f534869d1fff64
SHA256 39e3108e0a4ccfb9fe4d8caf4fb40baa39bdd797f3a4c1fa886086226e00f465
SHA512 cd65d18eca885807c7c810286cebef75555d13889a4847bb30dc1a08d8948893899cc411728097641a8c07a8dcc59e1c1efa0e860e93dada871d5b7acc61b1e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 b2d734116dcf0bba8d9e7563a5be6211
SHA1 f5b382ecdcc4e175361b3204e55758ea4b6b7824
SHA256 1f617168f2de503fb9dfef9879a6e8cf6c3342fb0f5f6a5c295ac7662888c9fd
SHA512 59a6b72d2ededa9783a084cb7b09fa8bcaae98180adaba8a03bfa8415d2a6660559012d2d353f666335e8c75d2730209f9e2dae9ac788e857caf8c18b8cafd49

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

MD5 a0fb8886494209adb67e0f6d671cc9e9
SHA1 5080e9deb47622ca437997f9d453bc92a68aaa89
SHA256 729fe7fb830a87f6fc0c3be028d6e7d8d494783efa80edb149c92edcfee17b41
SHA512 3ceb833965c45a28cf01d87111e7adfb96b7736ce3648b858eee68b4392566a24b4c649e62952fb7db2a0e90769f93b7951cb844e66af3c40320795d3a13f6bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dd9dbdfcbc2e8937c5b5383f2738c795
SHA1 5c898904ef87569428d1acf73356e54bd56c2487
SHA256 fb4ff4c36babe66668f29e856d79c47c3728fe19519376ecd59bebc52e4229fa
SHA512 b7646968b8a38beb00002c019c3624dc8058bf75c432691c260b3aef06f74293822f062721100215a26e4aa316a6fb833c96297249f0e5e4a8b3d249d083cea0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

MD5 65d3f83d879428f73e751d9a36db6db1
SHA1 a19668aecd92ffeaec17643ae7d6140ad763351c
SHA256 8e802d53da4fd798ca61b4aefc77e20767bd4696e15312b0ac7229679292560c
SHA512 e2550db4a106da242ccfa4dd8346364d0223a6034d38232dd3b867c79e18620da631fb4ad0c90c42ba3e69c17b9256df8ed05646feccbaae2fbcdb9129884ae8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

MD5 d8018e996c1418a8d01d2fd2d9d04ff0
SHA1 46692d2781c3fa42ae43f016e976ffb61814df1f
SHA256 6820d305503b35640d7f069bfd321d8dd4854a771152e6d4acf9fd8d06dd02de
SHA512 0f8b769a41b16a794171476324930c423d8b46964eaf175c749ed321beabc4def651152d5ee6df7a133c1b9908f8f43a5f2e715aa179eae1aa2d4c8184698045

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

MD5 77c8f7314cd266caea132abeede63ee5
SHA1 3dc91a45313e5b9ecda9580de5431786ad41133f
SHA256 b8b52158d24a58f531461402383b8399d9edb9d54b560ad0f77237e1b601e40b
SHA512 3feaec267b1db85b14670b7c72bf7385fcfc3d1d801bae7b0fdeddc57fee7b1c09e611c0cc183273f67cf3bec75759f477915d16b513e4b9b0ea19c9a0205154

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

MD5 1830a6a172012beda3e65d60d1741166
SHA1 aa214fcdc31f7c48deeff542dc31161e94b16022
SHA256 55ddfa2e6ab478f47d75e7484a385c3f86713356a7714cfc3282dcc950f0170e
SHA512 55caa159b6e2d52fa431b762f779c534abbdd472c0bcdb69960660c86c92369aebc529862b9cea92ea04326b6b9f15b9025812d2ffc93b4abf0e996a42e3855c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

MD5 a9d67bd6b9b8e128b2d7b202077ba370
SHA1 70ea81035e7c58d71853416ccc0dfe00a57f5e56
SHA256 14b2d591d4312b7cb3d3999076361284b6a6459c7d2349d6ed96ac9a651548e0
SHA512 3056fff409e04bc0a48eff0d00b7c5fdf20d2d83abe27c3c77a45a46561006edbb8cba52f75f826820370fed66ecab9358913217ac934d7adc82ae8ccdc68abb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022

MD5 a11f02549430ee773cea7223429f5b44
SHA1 7c3a9b4ba645dc63a80df790565d3426f2db7cbb
SHA256 94bddaf5165a3ce597a27b91f6b6ffb97870f424205af98f7c07f2a4f327b45d
SHA512 3c932c5c666e2e59da7b3b44ebd61d88352979aa412ad07b3678098e5e2e02fcdedfe5c8cdd7d715c1fa3f568739282210efd691014e9163730b1cb91a1fc5e3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

MD5 4195c7879fe684e64b36975395cc9432
SHA1 0ec4b740a2cc69fa5a56b78103025441dd64b1b5
SHA256 1411d082241d09be2b938b6250f2c2472cac76fdc28f829e2f1bcff1e56d3f20
SHA512 a5a5551f76d3c04da8d27a9c94aefd8d12bee72518b55895899b8cd81890fb9716e8904a1ba419fcab3fd3fe7b55c3379ec0d270e75d9e8373b32e685dc0c4be

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

MD5 d44b00eaf066eb7050989509fd4e36c7
SHA1 f9c5a6144aefdc63afdadfdfba432a7f2921aa72
SHA256 81d81f58eace71c343daf95f8a2756fa914556bcad33ca241c127c4ae68c215f
SHA512 99f9f4b102f6eb4c6ff8868fc598c536397d247de9764a67548739662ae302ea79cc2f730d63b8ff40c8c285b2c9783bba96e37c72d9922623fae83219d6694d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5b37f3fd-3a98-44d8-ac2e-35c73e09886e.tmp

MD5 aae3cc56890e1b630af7ff18dc68178e
SHA1 7536409bcc1724fd4ded6d3b9da6045b6647ef08
SHA256 f72656d3c89c353e5bb6819efa0cc29214084ad58b1e4f3aca0588dbab78c9c6
SHA512 b5b060eadc0165cde490c9373b1dfc30fb15cf9080832516ff0743eae174a88b8fe897e49ecb51226dc000bd5b86b8987845ff5ea01f0a20ee7d6b480d9ea0ae

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 b49ffc13c355d84bb15d0e385eb66f00
SHA1 c8b306b228933cf88ee07e700e67c3dd73bbe27c
SHA256 071bc10bd1f1ef69f39cd47d676b989995d206cd281482ac94fcc4ab9c863b17
SHA512 90efc51b1b0e8c192d415e24e1d07fdbd1c4e340c6a544126e3d7e3cf85569cb92b294ce2517b67596f1e9db10b4ad81e40d3f5bdf33b38ae0506a52f2b763dd

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences~RFe590d45.TMP

MD5 9b05ed6a5534f58f6d7107859158037b
SHA1 523cc3a3fcee916dd215385ecb0f89d4e863ed89
SHA256 ed41340eeb5643e1ef0f8ca6c5cee816d7456cb57043a02b6725fb5a40841142
SHA512 2aef8f967287f6d677084058fa5a59878383e304c130d84014fd5032c26af375cdf2766889f49d72dfb7a728c81db2f0a49b0f1bb4c4abc79e14d2690c2c9bd5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029

MD5 9c6b5ce6b3452e98573e6409c34dd73c
SHA1 de607fadef62e36945a409a838eb8fc36d819b42
SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 49d850cd5fe26f87dfbba25134945c63
SHA1 2d9c1e1cbab9373c3c9f8fd8da3eadc79a9d5ead
SHA256 a4081ab224344b5b9c8f88e5ff7299f210d68756ff5cbbdcffb4552c71a570b4
SHA512 6abd93c8eefb80d7b54f261b4d0a42b7409e4fdf5174dc7ed49ec504d319e258cc4286fd41664a7570d9685d6df614dbcd528bba5463e29f327082b618e2f5c9

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591ca6.TMP

MD5 3b6da9728e1e2d103992a84bf82e394f
SHA1 f7b70940376c02ad1c47c6d5ce0d7909e7611f38
SHA256 8bbe6246b02968fd1c87be6a57978ea10d044b1495a4e3a554633c9521ed8bce
SHA512 5862dc11baa073b5517005a6dadebfcdec56b8512d5dec9b30bc798ff26a3ff9274086d8e787580b747c65433f2642c01405f4ddde3e8eab1893781e8229d3f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6c30c9019118aabccacf5b7721dc95eb
SHA1 ec7930f3821c1b161837318a2b9b789eecea7ad0
SHA256 af73f0df3362cc9e805a2c7ec6a0c6c72fdf773368d3d532715545df889005aa
SHA512 30323601188127532797a664843aa005392c46f7070c07b0f804f6157f14e078d60866cbeb93670912ece6d17c6663f3413d52b698de72df1693a86bbb38aaa2

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 82549fa256c528ae745a8aa218b34cea
SHA1 884319c28bf5307017fd48248c126524bb76c3b5
SHA256 6ef5195f20aa3915aa2ffd2409b4d559062d52f63c76b68113ffb36279834350
SHA512 70d4fed5cc1765f9e187568f950e1600e71087febeee29ccc619a842210aa9b04f00205cb9f4c2cd6ba061faa0ac7d827265ec60a1a7da70e9683913d641bc2f

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 faa863ae9f205f06084d1655603f15d0
SHA1 07d6bed0d5024b866b40c326fe829ffd627391d0
SHA256 c2229207aa242d50457466dec03a59a7ecd9ad5dee99b04783834352efac813e
SHA512 371faedc700a521f9cb810dbe6bda4da553bed449e6430613804af5ece29a7db779fb060f3096639cc653219741bb85278d6f876ac179d43dd97e474e188e9ed

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity~RFe593965.TMP

MD5 c9080cce06f03130ddd3c22067f454dd
SHA1 b6284fcfc735f0981f7e46e43fb9784df68c0fb0
SHA256 8bb719dc6ad8584fc95a0f2bd2e7d525c996e7d3ec2289a37cb75045c67a1b71
SHA512 75646703af30ad1e4b5fa004132f0c721f8cf5264fd09fd280404297236197bbccd26ebe216438c14216d4721f6e3d8b3477a1d5c5022a13fd997ce2d2bc5d32

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\1c82ea50-cf1c-4645-9a9c-23be4c0c439a.tmp

MD5 ff0bd6d0c833c7a2fe7e028d23b1d4dc
SHA1 7882d2d2eff1fae68a20a30d27c40dfe03a52ce1
SHA256 f65d4b92c0870e56ff99f12e8a7968b76e63de094c2e18c21e1fadbaa7ca524f
SHA512 d0b1693c860642afec5163934d27c73944b5e297c67c6c9bc75f7a1766b6ebddd9a4819de40ef03ebc8cb693b10526403f951d0e35c82e717b7de80a016d464c

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 3e23457f0a76fb77a6feea00670ab539
SHA1 b69bd0ad7ec8009bef8bdf613983f3cb05e5690e
SHA256 18eb78233dc7133f20834a9c99d5e71d6da25e5b31647c5c16127d03b9eab46a
SHA512 37b28f8a5402b3b42d37dc86bcc3860e88936f6e1253080c04c39cb16e4f038053759797c0703c1aaa23c401901b15a833a4c9df00ca15e9550c18471656a65d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 b63db63e309570529c0ad44a54e66e5a
SHA1 1157ec6b325476eb043ccf3849308ac235287974
SHA256 a142bd9152cfe4d9b51b5f24cf2486db68848bedc30901691d0040fd80f35ee3
SHA512 aae9fe48537bd35f28894278edbdf1ad440dca5b2028d7f56d463328f57d530a5c79d3137101067834c621289f5393de9e49de7912d0c788b972ac865a9c3b99

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d990cb7448af7bce0c6fa20a0e0a480e
SHA1 83f32a86b99b1a28dd91267de7dc00a8cfe7eba3
SHA256 4d8ead9c05efc624072596f17b5410afb5bbd4eb9e26dbaa30dab0091dad601f
SHA512 e3a0105ec210be692dbd2c9a99d0cd4a3d5f861ab4265c10f1a60c1582395e6e81a5b965c0465373b9c1aa2d4cdaccc5bae3cee71e443f2603b45fe2bc15df67

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 98b46dacd5f2f91076afc791c40f2b2a
SHA1 8c7cfa8a6bd3175248c3e654fd24ece0bc704187
SHA256 9b33b5039d7b16533d7a34b364642614a4ae292b36fbb21990b6b89f2da0db30
SHA512 099c4ef1f3fd251eba88a2da8d49989f41b05c9d3d3c5867c802817a3fdceea0dcc4e2d6ea7529f7b5a7fd273479294e43c101d16fc015258eccea82bcc7e600

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\57a24803-c0a1-43cc-a1c7-73f4e4552ba0.tmp

MD5 afc6e6ca912d912d7dc999a802ca7ffb
SHA1 d5477b5f5254a71da2156cf10eb224a6b304d1e5
SHA256 35f5fba90041f374c9bb4b3c7532e6ae70bf078bdf5b13cd8ab43f6462c2de13
SHA512 dcb3e82fdf576fe100e1faa20579d75f7432e656b1256f5d8a33c71db1392e0f2e1cdceb7d2ca2e5e742d4a265ce93ddfb618cff4ddcbdbd2e8233b1f32b2a34

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 30a9a3de11502a9b3c1ae41ace3abbb7
SHA1 10d593e0e0e07d54f8feffd39bf42e4ca96d4a7b
SHA256 b3bf7c28a9d24b355db237c8a98903a896a4dfc83eb2577991cc5eccc3fa62f8
SHA512 cffa071ad390a6b93235a13bd2164a4c16804a3f2c00618c14277425b9c94209508c72e729b8fe98659326e512fe24bb7f49976a527d77131a386fb2837c130f

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 a5f71525b2b53795c768249414f21b59
SHA1 369f1fd2292660e2c7bf415a6728f5860b30dcab
SHA256 9709faae4f90b75e654e150375ef69eee88d377e5d2eb5a10852047ede4d311e
SHA512 39daeb8fd29bfac0aafdaeaa65240c409fd1634928d3c4c74fa3dc306e06f5a2c41941b076081af6e7f13e79c5599ba17522025636c7624447d8de99d98bec34

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 d9741681cfe2ff9cef5def90ca41a020
SHA1 7e3493a6ded43fc236dddd36bceaa826e8d893f7
SHA256 a049d91cac80a30ffba0f04322b5ca7f97a89e8585c38f33af5bad5f64ed263a
SHA512 db5e558c395a7a8358aef7978ecfe0d0346a980c263a61c2414d7f56f67760e0ab9e340ed751685ea9211376b1ae64f112cae329bcb3b658defd0f08bcc2bc08

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

MD5 edbbb26d8221cf1689f9ea7c66edea88
SHA1 9cddf470ccb20af1bea1cea2fde632e84d36b0d5
SHA256 5b40d2575c85f2574d6b7780b615b46ecc11b2bfd3e31489149224c552ef6ffd
SHA512 5e17ac4cf0de1dd8081135feb597cf925e524e6544da9a1791a55e2eae1de231804bce9fbefea6f9ddd1496f78a1f16b343cb3d9617618bdee5f33c6e5c9e033

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State~RFe5a00cc.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 24d185b18ca5c02b6dd41cae04d3ee55
SHA1 f842c8ce5dd371237950990d9df101cf1ce7b03c
SHA256 0b6d762c0e3954162e0d23af32624fd561eb2ac84e8c43f8e88b4333808ad712
SHA512 6e54fbb76810feaff96a1bd04cfba326c11a32d5c1963bbf9bd6ff821a74aeca70334e0689e7c6c810e5fdda14c01dc067370f35bd403f46b81630042f5f7240

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 c3f7499d8e22c6f8e3bbc96e541d06d0
SHA1 65646a84ca34164b0bf0399c7445c08ef80e7d28
SHA256 b218663f2097167526c410021a375548a9cf1863faef7fa1367f105de9ff1cc7
SHA512 9b0b531653eb3290f0acbac36374d1f93643de76758ab3ecb461b55c99005bb4bb12f490f5985fef29be430ef2df4fc71169fc7877d0db1c081f81d4d698c671

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000053

MD5 9708e5224c10eb91f435950128a72070
SHA1 cc66f87dad487f1db80dc78942a7016d26725ae9
SHA256 834c60d1648bb2b2c84ab278eb0690ffdbd6f9dfa393d561eb38aa026dbdef8d
SHA512 8a7a126e028f6def7f03d4fc69831c2bccabebc48b7d97b816eb263a817934b8db1beb9baf1763ec7421640ef594e0a7fb65ef21cbfdadd90c3c88332f4022c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d0c71056e9e3544f_0

MD5 1c960755a3a297602da8630df2558bb5
SHA1 69c67e6e3100a97358a72a7ee4f17f4c3f3cbe0f
SHA256 8b97083fc47f8b86fe026e3bc8acf3d036785769e582354ce914db003876b7a4
SHA512 f58ac8cc66e3e37dcf9e45fbe6b964009edd8b0c8673bd635ba34cc0920880a422a35b89e49ee39c19bfd5b7735b6716c24b8d4441f849d50ef52bb2bd19bdd1

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 9e2914fd45c3ed46be81df0866a67d09
SHA1 b2bbfa2629b9164f564682cff93864d74bb08d3d
SHA256 f49143e4e247fcf36c6a53559879e4a9c70a80de2e58e44d6d3579e8f4fee6bd
SHA512 ddf313d3445b1bf0039748f4d3f4305e30eb6e1b433ce906b7fbfb1be32488751d86153fa16063ce1d232146bc8cb895fddbc971bb079504f6b022e9fd6ab89e

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 3d39b781001d611a4cb6ed058a4e1932
SHA1 139c6844a6dd01ac5479b05dec09ed2dcb7144db
SHA256 e423cda1fefcd1e0ec67ee6749812d5933107db24e0077f5e929e11c5f6cde0c
SHA512 c51d7f6e15322db535af1df61a6fd1ebca6d33fb0059db327432a37dd4d18035b0383700949348ef395e96f465e416ef0d3cd0f08dd9c318aa1003844a73042c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fee3dac4b56be21037c0383b63458ce7
SHA1 a4b0832bda932ed255cbf1cff3ea84ef861625dc
SHA256 e1c8d0f7d7ce558378dae82f1a0c30bad621c9e945203c19ac839ead128645d7
SHA512 c340ca81c774f87cf083e1307ba3b343989b6412a10a821d3eba904a24c09df2c341d805cb9e389a171ffa0a68aed62feb98e308f9bd31a9c608052d42bb280a

C:\Users\Admin\Downloads\Unconfirmed 360841.crdownload

MD5 4f02ac057355b5dc73ea28aecd2d56b4
SHA1 32591cb75779a3e308a44e75a76f821e7dee11e0
SHA256 83a5f942b2a15eab4826ef1709ec6a7f9637a7ec0fce16585776848797307fa4
SHA512 9eb08f85559df6af9192bec8904097d4e43a832ba9e9cc1c7be1a366af8d103c3a6db3886f00927ae5eb62055fbc770c7b5a3d2a122a0b460b51136083015368

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c88b0dfc5304fe39503b59f37133f0df
SHA1 7f48593675c4521728ddda5d1fdc586e9c6f9982
SHA256 604f7bfe5443b2f8dfa4ab2d9927faa812ea782fa8bd24e88fe51e31d700eb9a
SHA512 d167db8de757b8bcaef8acc9a5e08c551f691b884eebd36e4b0e8c7108a1ddfcc7002b35ac0dc11ac9f5c1c0280f195d01018762fc16dc9268bb5a0e454d4ebb

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 d89efdb16622a3cbd494309f76db5341
SHA1 62689eac7473983620fd779906e176cb6ab11446
SHA256 00c5c64c17a6f839baea8b9136fcdaf97a2a6315d4215526b7d5efc5d044804a
SHA512 69ae7600132e391b630005d49dc43f42937d6cd588cb8021a3a4b7c6e7546c716d8fd30f5515ef427b0189299905ffe7ccf6fa927b82f706e480263aefad0932

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 9b9b609f3cca375f0ea21780fc05b8b5
SHA1 c180c6cbc947f5eeac6a94898fe37f98d0559c53
SHA256 96171adb8e8c6e1f965063824aefc7f8c5030d6ef2e59ce476b7bd84b85ea3df
SHA512 ec62344a5c88a8e57d6d01b8870b53e7f123c9b44f94c0aa834619168c0383893beef655868b048d4aff51e4cafce7aa7206f28eacdda47567c0f07535f88c22

memory/2900-2028-0x0000013FC5A70000-0x0000013FC5A71000-memory.dmp

memory/2900-2029-0x0000013FC5A70000-0x0000013FC5A71000-memory.dmp

memory/2900-2027-0x0000013FC5A70000-0x0000013FC5A71000-memory.dmp

memory/2900-2039-0x0000013FC5A70000-0x0000013FC5A71000-memory.dmp

memory/2900-2038-0x0000013FC5A70000-0x0000013FC5A71000-memory.dmp

memory/2900-2037-0x0000013FC5A70000-0x0000013FC5A71000-memory.dmp

memory/2900-2036-0x0000013FC5A70000-0x0000013FC5A71000-memory.dmp

memory/2900-2035-0x0000013FC5A70000-0x0000013FC5A71000-memory.dmp

memory/2900-2034-0x0000013FC5A70000-0x0000013FC5A71000-memory.dmp

memory/2900-2033-0x0000013FC5A70000-0x0000013FC5A71000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9603164f7e7d8e4facd01b12f978bcca
SHA1 a4d12b900a5006eac893813a8ef18002d41bf41b
SHA256 fa9cd96b19f9e8fc0fad51ba5106bc78555dd8b2d5a9846f1c1a28f9cef38822
SHA512 821348bdad1100bcaa1706f97d011d24ec494ff108d1e895e187965b12b14af4f1a2f09e1aebdd12c08bc0355a1b391d8032af22d696b72068e6ba7335288216

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 ab9bf2d4eb2200ee95b6a835bfc5169b
SHA1 d05de6505138f38e24c5eb6a3770010b2b90d7a8
SHA256 5a782187237c1f21447401b637018911110509a50d316327bad0cbe667c800a8
SHA512 ae9c79bbca73d6e23e1be4965038cb3dc3fc6332216859f837608bc010f721be1763efebe0f664de00af91675bb0ac6adb810d3eab21f2b5878e2e40ed26aa09

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 119b0bc3655bd35dcaacf400ad3e55b0
SHA1 8a327dd64fa7607019111933b99c2ab26d0990dc
SHA256 da156fb617992ad11b1b6ae34eae24064f59b90c7f1a2fee961f2b7f7a743f3c
SHA512 a0d97bb9bd89563807d7518a54b4765eceb907894c9959035635f1f0320eedf6fdb3bd961bc859d7784d8600afe114dba5e902cdf440f5b3e8d2ccc826650c43

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 7f2f00c67a6e61cbdcaa18e0e1bf9d45
SHA1 358757b3c4436d2e831f8e627c53ceff35171568
SHA256 1f93543b660ce5e4dfe79045f5fada7dd7163f5dc8949b8766a018ddbcecab11
SHA512 335b4a19fcdc05403a0a5ba3d631f377360ada9b271ddb03536640f1cb4af5b0580d9275b3c17b8c3991396881269bc9295be8fbcdfa64add1803f06e060f0c2

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 df6357296fdcb0fb1a40481608761f64
SHA1 2814d7bf27790ec5f1e0c26d2d65f8599d776380
SHA256 c0419eb6f0da3ca326fa8e79f54fc57506e3a17093fe806a98dfd50021ce7fb0
SHA512 58f3eec9ebb942535075678dddbcb0984140c3151062bedf50ba5ee6e63a2853805d575a4f329368344f5dacce504cef6430cd85ed865c8eb3864f919c8532d1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0fce0ace11e23f98498eb841c95adbc9
SHA1 c013eaf0c7b80d780f0e86cd24c8eeea8bf65dfc
SHA256 cb55ff28ed01a7a098cd9b28a83fca64ba42a5d17286c572ed57c9ee8411d354
SHA512 cfec1f9d60b3ba0ade39aa64d5d83f37ec2b4c0f1274d6cf33981e57902ceb24aea55122e5a607514dfd04f8f8d2a091f682bb3c2ac76d05e80d6c92ace5bd69

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f3bc74eb1086ca87651c5f52628fc4fe
SHA1 5875618d6a015107f65699ad6afe802a472d1e49
SHA256 6f9497b720009f243794afa0c11b9cf5815a6db40cf76649dbdabb1f91e70f15
SHA512 df7c3d8bdbc314e4e1ad3c643c7b8753b80d3154c57f197e675314734f3ca52b40f30a90d387ef750defc2d35fd1962596991e125776265dcc375d94e064eb88

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 077ef5cb24de93c3808c7445878a3e35
SHA1 773a75b773518da1634f8d81ac08006d85d0d30a
SHA256 4bdef502e4789e05ae65f7e7c01b672e0ab5fc9352ce8ffb0005ab0fb0e66486
SHA512 13f02204ed6111efe0b947ca06f93868d488add1fdd37b78c198e3d0b2f4a30ec74be73799907e826e0d4489badbe0dbcf69b9980c991447aa7f66533f397360

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000079

MD5 1aca735014a6bb648f468ee476680d5b
SHA1 6d28e3ae6e42784769199948211e3aa0806fa62c
SHA256 e563f60814c73c0f4261067bd14c15f2c7f72ed2906670ed4076ebe0d6e9244a
SHA512 808aa9af5a3164f31466af4bac25c8a8c3f19910579cf176033359500c8e26f0a96cdc68ccf8808b65937dc87c121238c1c1b0be296d4306d5d197a1e4c38e86

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007a

MD5 9255307b089522c262bdff13d2e70342
SHA1 a476a0e4e7be70ce4895505a6c210afb887285fc
SHA256 97fa4b6aca07207b2e8f4aa155888e29f5d4f080b248cd440349d3b99a6fdc83
SHA512 bd606b619a5d916594acfeda246ed43f82b5292c86d3f53bb4ac862f88db1eaa7f069308328e5c1d26d824670e200179fe7d5bd45f0e354afdff10886f3fdc8b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0225e607a25797b8ab987055d8e1be33
SHA1 358dd51bafbd34d05f4de142fb70962c363f1794
SHA256 31647be0dea451125d309a7f93e5a6ca3d8b7728563c6d3bae9a1a66333eea94
SHA512 9e6373a8e5d4bcbcd92ab1ec5fe7beb92e77e005414c36247b4cea7bc82afeeb201ad2ddce5d19a9217de691de1c4fb84a6f5c3fccb209af2fe4144363fdccb6

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 49a2dbd1438ca6e6a9815c47487ed925
SHA1 bdf02cc1ee1d31abbe096c4c968e764abeb8078a
SHA256 59e4e89004d3808e17d6df2153b73d7e719d176adee19cb33444c8b4c2aed7a3
SHA512 018bdb3536dd7a622a67482884ffbfc70cce5963e512395a9fed1d4797e3192dcda2a4c522fa61697c664e3bed9fed6dd43c7f30ff76ec4b5b1c9a65ddff9bb9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c3465dbf370f92585936c9394ee4b7f6
SHA1 c9efc1b74ad834c10a18f6963a8f0004ad026598
SHA256 20c906cbd0af4ed8e1ac2c8b9fb933cbb458245ebf87677c00cee2876dd8335a
SHA512 3b89dfce574ce59cadedb76f427e9b9387c36c29c459f4807c1fc92f60ae706136a14ac873d6bfb593c8ca5dd53b2ab4fdac2d52ee3c81162115b9dcc64feb1f

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

MD5 0a6e03271927d179892f09851e01f16f
SHA1 8a1a662caf55eb91501ec83d32a68dc80d93471e
SHA256 eadf60aa2e3437d03f868e531c4da671eda2230c55a947a7575eac0a18bb3e64
SHA512 fc37638c917a6d5d21403a5741ba3ee8992b2a36ccbb226f34fdab4b0b7b1a00dcc699bdf955f54794c21462059d8890f26017e67c5485bde49acce5de26d8d6

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 9d394a42d18f4add74a6ecdb87df4196
SHA1 9c13ed9b8285869c66e0b738d516a4fcc1f6fe94
SHA256 2a9bfdeaeb048f95b2d815211eecb1570bb8767e93e9615bc5d2f52804a68d7b
SHA512 61d4dade7940e9612b2b5b5a76133b2ba20c0e3e7ebbbedbf4bf9c99e44f1bd03ae5688997647696d01f81040f1a25bd155997917c4142ffc680246579c97aa1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 41ab8d1a57ae3aeb806741edf2c1de6b
SHA1 e6644da0e82b6f781c6947da8f98dfbe2ccdab81
SHA256 cd6625f5d96dd07ff4fdced6f1a2de14d86d1820eadbf0009eb1e71bd79cdcfd
SHA512 a03b31a29d834cf5bd7f2f2a6de89739dd96f955b09cede433fa00a8e28e63cb21ba165458120da6c86d30f847a5fcea4e04d54dc30ca9adb66e3eb1d377eb37

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 1f4867f6401a80a3d02465343b0cedac
SHA1 7f74f4aa0bbaa78273ceb1d77476085e1aaf54dc
SHA256 86974722ef79804f025af232448112f6e2f03720e6201d70161ef558c5de0173
SHA512 c90d1a1a4d20852473fdc9c609b5cc64fd7e463031b354cbec54665a7f515c40b1b1ae0238cad261c734f17984ffa7275e8f54ed52ba25b21c411ce6def5431c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0d0a83e78bf1b2889931f997e9ad6a0e
SHA1 f0aa41a00ba4ec9fbc31bb80e9b006ca9e105afc
SHA256 e294d789be913548d2982722169fe6a2621f3a373e9daa4173d537c95898882e
SHA512 d075126ac0de5048c454a584737c21af19749b37593ce80a75438513359a5fef86c1fb0b60153019232ff76589e29c6e1afa5725f9a526d2b33c05899795f0a8

memory/2748-2805-0x0000000000810000-0x0000000002866000-memory.dmp

memory/2748-2806-0x00000000076D0000-0x0000000007892000-memory.dmp

memory/2748-2808-0x0000000008360000-0x0000000008368000-memory.dmp

C:\Users\Admin\Downloads\Unconfirmed 663241.crdownload

MD5 c9db6b5c84be13a43ad23cc204e4bc52
SHA1 94bd6634303205715fd04f8aa10d75158390e4d9
SHA256 77200156d4773175d341aad11ab23bd52445065cd95060348da17d083dc27688
SHA512 9273493c5e5ea24b2f5ee219fdf849546e85b3f5cc24c970f1ab6fdcfe961d96ca6fd41c96f9d915892ab24ce7ff409f0f5a6569b0225e95d36afba51615f8d6

memory/2748-2814-0x000000000AFA0000-0x000000000AFA8000-memory.dmp

memory/2748-2816-0x000000000B050000-0x000000000B05E000-memory.dmp

memory/2748-2815-0x000000000B560000-0x000000000B598000-memory.dmp

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 7ad9c46a7f88a1884f133f9cc9bd86fb
SHA1 fb1e391771e2f2d312dd7feb9fe429f075d87006
SHA256 32f672e18a3ab954a8ed00a99e80c9c23a4e1ea70fc2889ad2e8d52fc69a18c6
SHA512 1418b04b034ade3541340bdc41a07b28a99c64312ea27f7cc670cc0123788bbe8680f7c3f625240a58788bb0f41ca77047ee73c300ea36996243a00c35d34c5d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6cbc674865f27f74a05f17b929ed3349
SHA1 2c107044ccd775167764a95b6bc8eea1973d6042
SHA256 f424fc2ed8eea008dcea857b3dc278db6da673496f18df6d08691831d5c2215f
SHA512 db6278787339808ddbafed85464545a149f61d2aae61cb5b2a16aa77dfa411fcc960618ef037c1300202febcc2cdb02079cf59b1e5eae607c106eebb9051a952

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 423e1e5803493cbd2da0814d1b290099
SHA1 9439aafebde89b5d5661febadaa4a172bd8d925b
SHA256 9a923941304d59c717a99fc810666a4a8b8e528f7999e8716c03e467b13f1b75
SHA512 aab7d29c919481296a8e5f077999a97d2da012852e16e3f3c698111e3fc1c078a359b4b840e6d124560c1f20ffab6a86938224e95db1138e6b5b345802cf46cb

memory/2748-2889-0x0000000007E00000-0x0000000007E0A000-memory.dmp

memory/2748-2890-0x000000000B4F0000-0x000000000B516000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe

MD5 8a4e72a29c08ae2cd13bc8ec414b8fc6
SHA1 26f8d73bc6f5ace5cec6e3652fc6410a71298498
SHA256 6513546697c3c9deb50d8dbb0cc9aa0be55487538ed482ec16b6264579de1539
SHA512 77eba566c65de1327bcacadb1483f538b4e5da67c3607398d745173ade25e987f59524a5ecf065dd5f95e26654cbb5a48dc80fae995d5d2dd63c63b2cd98fb98

C:\Windows\Temp\SDIAG_e62a2e05-8721-4194-8a26-09276d7942c1\en-US\DiagPackage.dll.mui

MD5 84d58b706a4a16e582a140f72110b7f5
SHA1 bb7a3f254dde61f948417eabdc5a0883d102d873
SHA256 4b012aeaa40324691c6af926d5bb27409232fe8c484fd295d64925fc36f31060
SHA512 9f520c9d00586d9fb8a87b904d75616ca18b6dc3badd1db71ee85236a6bba459d56eee6ba29ae8cd2139fda8e5df961b232ad87a17fb4dbe61dd4422d804c508

C:\Windows\Temp\SDIAG_e62a2e05-8721-4194-8a26-09276d7942c1\DiagPackage.dll

MD5 458bc0d439cb0d955120ae319c6ed91b
SHA1 b8899daffcbf912462d7e089d126d664c1a40216
SHA256 9454ec899ff78ff14c4c5137ba23d99dfaba079c629afd790640d0f07724201c
SHA512 fda4a2641db70fabc10d73dc28dc13f3b85140a382e032fa7a46abd5eb72e076f96794ccbc0f344a0cc88222fe27ee527a3587eed286e3e3db338824950369c0

C:\Windows\Temp\SDIAG_ad888c8d-6893-4465-9b5d-5edeab2e0c2e\DiagPackage.dll

MD5 fc7504df42668c2918657d1b9a3102c9
SHA1 5f9a70a31678e2e8b9a10849ea8657702d0cb53d
SHA256 159c4d4621f4ce1f4da14246401d85a00b40c0090fd0b2640446a896127ac646
SHA512 c844f9e5ba72eddc6aca73e09214bf8372ee5676124077983b78b10b9830a5e5eabd9c9fff2650858836f995ea79b1f0502609a428797b838ac7cda3f627c0da

C:\Windows\Temp\SDIAG_ad888c8d-6893-4465-9b5d-5edeab2e0c2e\en-US\DiagPackage.dll.mui

MD5 2ad9d1abe41ad048186f196b58fd8e9a
SHA1 d9c66f6ef89ad126ef2bbb36e0bcf6fc8a0e34af
SHA256 9b9acb69e01f79160d368cdcd8a4dc81f18da6398f920b6f663938171f5f718c
SHA512 4c4e1e5bbe173dfd37c65fff64a029883b2f719a360a9f5ee0772b304a518839605528b97b1ac0319b79a6d7f284767ad6c04b3b769559e2b14600c467947d61

C:\Windows\Temp\SDIAG_837c1b70-96e0-43bc-b9a5-4028aa5deaf0\en-US\DiagPackage.dll.mui

MD5 44c4385447d4fa46b407fc47c8a467d0
SHA1 41e4e0e83b74943f5c41648f263b832419c05256
SHA256 8be175e8fbdae0dade54830fece6c6980d1345dbeb4a06c07f7efdb1152743f4
SHA512 191cd534e85323a4cd9649a1fc372312ed4a600f6252dffc4435793650f9dd40d0c0e615ba5eb9aa437a58af334146aac7c0ba08e0a1bf24ec4837a40f966005

C:\Windows\Temp\SDIAG_837c1b70-96e0-43bc-b9a5-4028aa5deaf0\DiagPackage.dll

MD5 580dc3658fa3fe42c41c99c52a9ce6b0
SHA1 3c4be12c6e3679a6c2267f88363bbd0e6e00cac5
SHA256 5b7aa413e4a64679c550c77e6599a1c940ee947cbdf77d310e142a07a237aad2
SHA512 68c52cd7b762b8f5d2f546092ed9c4316924fa04bd3ab748ab99541a8b4e7d9aec70acf5c9594d1457ad3a2f207d0c189ec58421d4352ddbc7eae453324d13f2

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 493f9f3189d0ed76c1b8fed03bf6cf81
SHA1 7eeadb8d666e32cf2c668249933da6b76f59cca9
SHA256 be3748c753115ea8ec58980d0b2b68fd0301c39841735d2db6617e98b0e43649
SHA512 7e4a80f22b10e1496e09a997672cf1f43bfc9995b4b44e2dd614a420c78ef57945b7ed69380315e03c522ccac92c5cd150cab4c713393711ab74f1193b937074

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 267b735b5f66bca9dcda70c48b8b665a
SHA1 7feca35f9501e4467d20dc927698bb3921632220
SHA256 98770865b2cc043d402e79b5f90491e0dd13f74a362da0b80e4837be0a24dbdc
SHA512 0ca6cdc7486ff991e06a9fda4aabbf4b69b1107ed210eb5e817535baa0955ff93048960d8724c3d7456bb68bf938515887bec56a3884a05fd8b6ba76a63478f5

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ndtyevyz.qkn.ps1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

memory/7416-3418-0x000001E5BCCA0000-0x000001E5BCCC2000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\REGDD6C.tmp

MD5 6c34d4160ada462da772456f46a45c8e
SHA1 e178c6727b2c8de2f620a54c6ff6cfc9f15bf3ac
SHA256 bb619fc3796fd5590e57a1dbb5ab6d0ec49789cfb2e93c74eb3cea4201d2cf76
SHA512 311f576401bf4b3aa04a6e44d7d27dddaacab2f1e1f58efab91329bcf1cffb560b079cdab0cabb9aefdd12c327ade2ee768b61e26a27f70ea5ad9ade5ff2bb29

C:\Users\Admin\AppData\Local\Temp\REGDD8B.tmp

MD5 edcaaed49057b04d804ef38622dcfeca
SHA1 200458ae3a380983860136acca9b18d62c5bac76
SHA256 b9532ca922a984f207d3a82499308fa038e1d78169b534b8d7fc116aefe5a05e
SHA512 052065767b3bf96cf1314dd8c42940ace0d256eb7f536de0b642f5816dc0b5e6db3ce9a10450e9564b7c932e9261a9d78ca7929a4537646cbf7d5ee8c363b5fb

C:\Users\Admin\AppData\Local\Temp\REGDE56.tmp

MD5 cef48447d373b9e3453a19f6fab0fa8e
SHA1 a11d07a011576a020ef356dc387a1c442f500da6
SHA256 402f15b3e1ba580c1c1e4eafe2c3e5230fe8ce7a96f889593ae0b1de0df3fa77
SHA512 4485bda0449d57ce811967e51428823c525cafbbe429edd67952de8281d7d65f9c87ae4fb9efae3b37969608cb034c1ab330309703e093b30d474562908f85c3

C:\Users\Admin\AppData\Local\Temp\REGDE85.tmp

MD5 052fb24b0b7f8a99eb07191cace947fc
SHA1 0d0b214bd6881566ce449bfcf7b97d82f6c08e4f
SHA256 bdcf0047035968b330d7b28fd2de8170261515b9b7bed2cb73d81c06bc279e60
SHA512 c910b24ccdffc0e1b1933a056a21c1dcd7def1c6936323617d1aac84dbdf2452968b39ac671540e6b67376148ab116b9a3cb9e2e4090235c9b88966f71b64d24

C:\Users\Admin\AppData\Local\Temp\REGDF12.tmp

MD5 417f5b72f716848076a4023e894d7498
SHA1 61c2c787e96c5422bea197051a56d5571cd6b190
SHA256 24c1e816e49de4c43594d2f9a663dab7b686aa62118fdf806bb296652a454abf
SHA512 06349974a1f92eaaee1d940137488957e0f5f4dd8d7aa4df30074ac5f69528d6730fb02d751328a6aa34f5db0d8543622ce9c4e30aa4b369b76e8a661ff62ea2

C:\Users\Admin\AppData\Local\Temp\REGE1C1.tmp

MD5 856475edcecf039c776cf406c0e29daf
SHA1 9d2e92f8aa993899a6d14a32c69e25399a17443d
SHA256 4494c489671f1db09a66f8dccc19e9656589ac3f2631a827f4cc937eb64a458a
SHA512 616bfd69ab0942e51632cb0bc8a769318dfdf95d7e6c6121fbc7c74829aea0aeebdbe7ccb444589dc4f36928809d0ca100c19c7117a22bdc4882c62c3835c565

C:\Users\Admin\AppData\Local\Temp\REGE24E.tmp

MD5 e8439c4e8015208e2f4282657e423ecd
SHA1 d7c5a264eefde22b2640dd349a4c5bdd49e2bd9c
SHA256 5ea92e4430ae7476d77839bc8af9a62a27882f51594972bf858abedd77ee94f8
SHA512 2b4b87406438c9086030ab1f70f381b002bb82c8b03e7b2c3b519c3eed6a8d650d1c974816c1415c51eee84ce681f312569624bb91bc276bbbcea5b6165d2305

C:\Users\Admin\AppData\Local\Temp\REGE27D.tmp

MD5 5b20f739acefbfc6237c04f216466883
SHA1 738af05cf8a177e14726ae4c4affc6d9b94da6a1
SHA256 f787f543d052d4000d007bdcd71bb6b7024293f2ad2d543b02b4121b1da3ebf8
SHA512 c82cf736af02ffe5e76b88d802e7800787826bbe5cbc59b64b4f77f9ff1168f9ed43a9c68e3a9d13407e38f16822755660d359b42ae339d0d2bac754f192651f

C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\XblAuthManager_Service.reg

MD5 f90a03d152e8202c3eb57c6e6eb710a8
SHA1 cab5b11304ebbb9a1ca9c191fbc737082bcb49b9
SHA256 89eb956a0ac5a7ebd558eaaebe485c87c40c47baf1954b272b26b0b8724a6352
SHA512 2e3e8c359ee1b97e5a01aff6192fd39236f14cd75812fb9ec2488e938c52db294c859062d89b84f6593d3c492d310fe6b514df235b52dec189e7b62e02bd86fb

C:\Users\Admin\AppData\Local\Temp\REGE3A6.tmp

MD5 cca36a379e81a944c607e4f4d544c565
SHA1 d09aef7d6cf0bd140f121a85ae2b92307119db89
SHA256 8975303228de2bf10d7a55bfbd591bce14e4a124910265eefbeb58229347268c
SHA512 8a851c8054c694dcf0b942550de764915f0c860277f910fa0fa6d66962f7e6c7a7c8498a0abd55e51e6725fb585820a957c079351883429242e4c0abf7f79158

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 2164334d0ca236e66facd4b75eba2508
SHA1 126632c30fd9b51de69b871eb5b7b0ddf9f53c32
SHA256 6ab8f251a0a4ffac8f181578ad37fbc628fd819125d137e5360ace9ef1d8ce9f
SHA512 a130706d30ae18b46a22eee2b6933a4a0643f5a7dcea11ccb222c703d21392b5d093cd6f51c741b16db0abb3d38061dce063234a180f6c26b27d4efeaacbabae

C:\Users\Admin\AppData\Local\Temp\DiagOutputDir\GamingRepair\WerLogs\DoSvc_Service.reg

MD5 9a6b92b10fa585333d0291ac3d87537f
SHA1 9536e72a6f059ff86deaefac6676305fdb23530b
SHA256 713b38ef078f28703e15256cb30ccdf5e496256f9b0e92768d0a63be39c3e825
SHA512 28605010c1a45e8d08e1b4ab82a697694ed977213902707a03f6da0570b37cfdba00002e29ad072273d3353e18200d763e2f05cc504c36fec53778288ad5691a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 255bdc23ef644065b45c08739ab55dd3
SHA1 711e7f9e1fb3264fe0b7f461f82c31ab0ea3b294
SHA256 171b500e435f2682f02651f960c3d0b39108ef8e5af903875a672a7c7e5b88f5
SHA512 403e126866360c94c167963eb7e66f95a8dfef1b79b9a4294ee8684d6691d7377947f18bb5b55269a6a5db3938dad671079169bd6177330754c81f1f2dc0a2de

C:\Users\Admin\AppData\Local\Temp\REGE461.tmp

MD5 79d558a3f5a649a98ac348ed8a0bf6dc
SHA1 5cc1a6a3339b3104af499a8d44fc426d54021e85
SHA256 23237d250e185d524d26dbdc6ce16adffa9a0b65af35fefac3bf0d01004d5bd5
SHA512 6ff24db910fd94551806670d922c31802e4f49dc68e1fc31d33cae1269822c6324563672804f0eb8fccaf2191281d860f74f243b0effcb844ebb3ec8044f85d0

C:\Users\Admin\AppData\Local\Temp\REGE4AF.tmp

MD5 b0223e1939178bf83ef084f4d98d27fa
SHA1 5d1b1aaa0e159fb6ab3370c473f38c7910b28663
SHA256 beb092700ad0e8e12c2d46c23b5f56c78fccdf25291f92fbf9f56f205f59f10d
SHA512 707d24203e0adeaa521d62f3e7b4bf4b73f17849294a7f33e8dc89d563c942a7cebc08bbd1d55d9ca3d46be835983e9310386c2339cea930a50ee862f97f01d1

memory/336-3585-0x00000000008D0000-0x0000000000A0E000-memory.dmp

C:\Users\Admin\AppData\Local\MinecraftInstaller\deviceId.txt

MD5 e99b1067e74883a6f0501df327562245
SHA1 2c5ff307d408758655a457e0ab41c51bd6eb600c
SHA256 d3e63e7ca23a170fc1f84883461ed87ad201007926136450aab32a177fa96ecc
SHA512 f9d74bd6e7c17da6ddfd783cc1077c65a224aba249edb72c6a06280406e233de1aac234bf7356acfebe4b9e6115dc531b8b73a8a988cc2689d2eb921645fc151

memory/336-3587-0x000000001B8D0000-0x000000001B8D8000-memory.dmp

memory/336-3589-0x000000001ED70000-0x000000001ED7E000-memory.dmp

memory/336-3588-0x000000001EDA0000-0x000000001EDD8000-memory.dmp

memory/336-3590-0x0000000020510000-0x0000000020A38000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe

MD5 d083a07a3dca2d0ea5ddb0e959fb8ff4
SHA1 86f3f43729db553d45b728b1409b73d3de5a5915
SHA256 05e1c6babb787f24d8a60f8ded2c216c9bc2956970d75073a71139fe168a122f
SHA512 d16259a1fcb29def140e9e1768b99d973b434c97bf7b09bd0d223143a622ee720d2531a84dd4edf082300fb5f4f00812e418c0131b196375821e612bf34f7aac

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

MD5 b282ce9b81f606d1c6cbda554dcd4efa
SHA1 7554ca07096a2e410f2cd3c98beb7b7e6be27f3a
SHA256 1893941e9dd1ca1296e7f575a9442fa1cc53dfeaf2d1bc94d01608ba9e7e31bb
SHA512 9e71f3cb4ea67831dbee5bb4cbb2dbd9f8ff8ffd1158fe2fcac41c89169a9aa3236c8d163f7d4e9df5e2b70ba2be20fe3af97bef70be40f45dd11acb5b4bc184

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 94d843dd5191ff028fab1752d90101d2
SHA1 faf97a8fb86c327ce0d8fe83c6a7efd43eaee3fb
SHA256 1e8a1a6af4c8209b765defe42d531f35e5b3fde1207a1652757fe3ad4ce05748
SHA512 263358d1827b892befb4a7b321eaba6249d0cac70a79d9ab0243bcbb3fc6a1316ff76b515841fcd20e27c30bfbb7cf69fa207255b17763420665608baed2e31e

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 4fdb295b4f5e1e341fb524c66430a634
SHA1 126f6360321fb315f720e9a037ecf29905d7bee2
SHA256 bb05ca607f5a56d120278e95f3b3880924d41868e918b6d165be43e73f006dbc
SHA512 799965e98eb44e626551e809625439b3a1d2a0632e9dac7467cf6de3ef6b422cb19f95f95e54ada7d671c74e751116e6d965aed05158a5e5d79834da046ad5f0

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 f129e1ea290489d4d8979c41b101bf26
SHA1 abef20b09366feff32d052f1062eb7053b974cfe
SHA256 2aea5270b7a3b8496069fc6bfd22a0ee5dd27204aea1c0c16ce1abd93eb34f86
SHA512 4a608aa66adcf48a659c085022762e167ad6a6e2812af6216b80fe0f9bceadf46048a5435046a59b77ab7df9f408c3387dffc066967d230f7f60fab8da9e75d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6fccf21aba0ce81f2b28ec78cfb14d18
SHA1 9aaef32eaa784814165c8dfc776b9f4718e5615a
SHA256 53443f6a7aaffdda395d353318275ad7dcfe8662dbb99fe5ba6e76ed8206f5da
SHA512 1abae328cc93685434b341c278f64224528ef556896ebd43c1b651bbf7b19455ba3834078734325e96f3d303bb16f45dccf7fef659f0afdafc2859801e7c2eed

C:\Users\Admin\AppData\Local\ElevatedDiagnostics\2560293460\2024082507.000\ResultReport.xml

MD5 ca32abda33d495eefd32f86482fcdd2b
SHA1 29e857affa012a83e1ef997f8cd44546f3e7dead
SHA256 93446fb8c9b1592ccd36bfa96a946d9d45dc4d4a9b784995f74110f33b78f83c
SHA512 0c43f8639c915281bcc5915e825386a47eae32ab4afb379dfe6dc3070f8d3a08d2664ee6708d8f6d1b9244d3a98353dd2e18aac12c7f4c42f1cbe840d304e09a

C:\Users\Admin\AppData\Local\ElevatedDiagnostics\2560293460\2024082507.000\WindowsUpdateDiagnostic.debugreport.xml

MD5 13111cc114bcf8fbeb5cc3f97af5ee7d
SHA1 a94c6bd6ee1c5f825e6bfd25aaa07f07cfe9d651
SHA256 546a786b50ca6cd1ce2b4b364a4c06e8b483ff0368d476e2dedbeaea7fa4af36
SHA512 b143155a2c6013991d17f50b6060ebc077687334b19a3f616f60d51db4c1b1c945257bbde404d1820b5091a16ba1cd3c234b881df0c31dbce1fde4823d84c4ff

C:\Users\Admin\AppData\Local\ElevatedDiagnostics\2560293460\2024082507.000\results.xsl

MD5 310e1da2344ba6ca96666fb639840ea9
SHA1 e8694edf9ee68782aa1de05470b884cc1a0e1ded
SHA256 67401342192babc27e62d4c1e0940409cc3f2bd28f77399e71d245eae8d3f63c
SHA512 62ab361ffea1f0b6ff1cc76c74b8e20c2499d72f3eb0c010d47dba7e6d723f9948dba3397ea26241a1a995cffce2a68cd0aaa1bb8d917dd8f4c8f3729fa6d244

C:\Users\Admin\AppData\Local\ElevatedDiagnostics\2560293460\2024082507.000\ResultReport.xml

MD5 c75e4583f73da80dbbce12f55981663e
SHA1 2019e48a2b989d6a149abab3b37bea11fdc67d26
SHA256 927aed3c1936f022068308a4b362bec95b2f2699a829f6056005688aeda1389b
SHA512 c26d77fa6612a1818069c77d414faa4c7196532af973966735fd32ffebb3b69a069a89915e3c62aa3c68f1d302ad087699fd54a3caf414c9cfabca25c931028f

C:\Users\Admin\AppData\Local\ElevatedDiagnostics\2560293460\2024082507.000\BITSDiagnostic.debugreport.xml

MD5 d6f1234776989afd53ec61fdc39a44e5
SHA1 6bff58af7ac47538daa2cc257c96cfb7f005dc6c
SHA256 96cb5afce5bf00a50fd37f85de0fc0403baeaeedaba5d089777a7fa3192d15f9
SHA512 73b061d2188d9a22cf09a184d3ba34554559d68df0520c98b3f936aa4a405c983e1e07db70bb987d358615d8455a3746379ee90e749ef58106ac410514a92842

C:\Users\Admin\AppData\Local\ElevatedDiagnostics\2560293460\2024082507.000\NetworkDiagnostics.debugreport.xml

MD5 d7fc251a17caf18385dfe9837da353c0
SHA1 bb0d7cbbc85d6a60df90c5813e8774b6299040d6
SHA256 2e3db43921ee2d932ae64e768afa16e8732f467629c86c2962f2bd218194ec83
SHA512 065cb72bca97ace9897a661ed04a2eb445ad854748dd0cd63ece36db3606fbbf1b60e4ae28086b50f399083da9c59f2b66c2b3e94334b00ed0fb588f8ac2b78b

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WaveBrowser.lnk

MD5 06fe0adc762412ae75fb66e8a0ffaaab
SHA1 f81fbef45ec03b22c9563405f8c4f1a5883958cb
SHA256 285f3f0e40dbca263e273f171b72fb0749b3c920fcac3e6e86c9c764d48f4856
SHA512 e38b6260eedb40ef1499136e358c5dbbe523b1cc028be5fa371e4157a4d0dfdafb80928869450ed8cad3e33222870be7362d730adc1c1c435c0d05e5690b4d15

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 5fc6ec2d82c322d8997f0db8677c0591
SHA1 821f820b5ef86b2bc3a332d3bfe3d23e0d207297
SHA256 2e4ed22dff41d52e33b57eee844395f1da76fbebceaca8a09bbe2827a5ecbf4a
SHA512 60157e59ba9e0b5eeef763961f7c10d2b30b75bf335d8c4b69f128d0179ab00c3952924ea8636a7c22e85aec7ee261c901fc77ae2706d6a2f4024bd81d855d4a

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\b6d99a36-b175-4d81-b0dd-bc18b694cc08.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GrShaderCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\d683f954-00f3-460d-ae41-9ed712bf56d0.tmp

MD5 f3d32d9918947cd0ee98a95e6782ea0c
SHA1 7d352e9a4799b5a180e11eaae4a7ef1a6ae51d2a
SHA256 33845d8a8dfe591b8eed4b27f2c47dc856b11d86c6bfec08074662c559ed4d01
SHA512 e4818c7e56b2a7f28610f14f738fe92018528517182e5cfa2e17750796bbdecdc2bca3af71afaad2e27a19a17e487fc321e8e20c286268dfb7a126135817804d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

memory/8720-4016-0x00007FFD17A00000-0x00007FFD17A01000-memory.dmp

memory/8720-4015-0x00007FFD185F0000-0x00007FFD185F1000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\scoped_dir8244_689449615\Sync Data\LevelDB\LOG.old

MD5 1fa9f75b37226b507503b20fe3e25a99
SHA1 97f25b5bebe800a6d199f5ccc74dc2abd6d21cde
SHA256 55ce61d9b59d99b18317b9e89b8224c349e28cf8f663bbe55515d8054a979a8d
SHA512 5310c99b84e0a9b5b82374327d814ae591363c74aa9291437e37453326aeb7bef4ad6b9658d70cf19dcee5e459cfc44fb98072f43b01bdbad2f894c003463a7b

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

memory/8540-4090-0x000002B7A9260000-0x000002B7A9290000-memory.dmp

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad\settings.dat

MD5 e6369657c220963dc86dd1d6058b41bb
SHA1 6b7c37ac72d14b4a2a913e449d60563fce8dd8d6
SHA256 9f6bf9ed97c3cbd05aa6d7ec836a38d10e296e459a74ce1cf9c7c521e0811d58
SHA512 11eca64296a0006431223a2914523f38461cda3c7613eb761a7972469b029d8aea59b497cc784b261687400028964a817dbe3e21d4041639a9cd56b7838d3ffd

memory/8676-4200-0x00000250019A0000-0x00000250019D0000-memory.dmp

memory/6768-4201-0x000001A9ACF90000-0x000001A9ACFC0000-memory.dmp

memory/5712-4323-0x0000016536350000-0x0000016536380000-memory.dmp

memory/9092-4324-0x000001AD13550000-0x000001AD13580000-memory.dmp

memory/2428-4325-0x00000292351C0000-0x00000292351F0000-memory.dmp

memory/9136-4327-0x000002B035D50000-0x000002B035D80000-memory.dmp

memory/5900-4328-0x000001364E160000-0x000001364E190000-memory.dmp

memory/8580-4326-0x000002794A910000-0x000002794A940000-memory.dmp

memory/8996-4329-0x00000277CD360000-0x00000277CD390000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\67e87819-80d0-44f9-98e0-91329f4b7ec7.tmp

MD5 7361d437f5f0152896832358e4941350
SHA1 918b3e9825ceb47f873267918877de97de71be8c
SHA256 11c5652a64869d8146a56f83f7b431d72c40a8dee538b78291408347a8f504d3
SHA512 45435876b782ef718a10edb14263d16a56e60d8da8843c164baa59713717ab1ef96bf10cffbb206da24b0ebf186f0228dde3804c6b9c586848dccdcd9ba6cfc0

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6964_2010442623\CRX_INSTALL\assets\messages-86fb7e29.js

MD5 6d62c5de88a2381b5627e0d2df7b9a30
SHA1 08c76dfb73e09780b0b3f98e5da414494904417e
SHA256 068f97ff81dc092e4d201f575a2d330a0f5830e847edc6e0e80f8a97684ba75f
SHA512 a193d284bc5c017353e8ce1a51f2449e2e58f0f35fbfbe8173f812bfaa91840f2cdede70897c64d271601f8836ef4f694dc099c2271c18b448b9892e5043e291

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6964_2010442623\CRX_INSTALL\assets\index.ts-ae5ba517.js

MD5 50bcf1fd951bbe65d3e9ceda508d29aa
SHA1 5812417e49b521dfc2623434dad97380b6c5d1a6
SHA256 861428d94816c77a78e1ba0ab7e0c460c0716d3725b9988e96eec719ed9c73a1
SHA512 12dd93b2a22fe1646b060ea5912e56b987ceaced3f836e46b1b6b3296c8f76d2927dbb25b6c76fef9e084fca0d2afd01a33e92319bb916fe8f03b3c461be5234

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6964_2010442623\CRX_INSTALL\assets\index.ts-68082f05.js

MD5 4b1999e443b36d6b3fbd8b0655fbd9c4
SHA1 9ce799c09220d286590d98f025b2b1e254d1a4f6
SHA256 ce01cce8b0b3614b1655f40f28c7a39f9532ca9e94c3fad05021940ff8b9a0ca
SHA512 7d260afb87d8bd2e8d104d49094fd681a3c6f39fe455be0d2445901c2e0d224a1a2416bfe3f0c4e3417760ad4d530be26abea2f9c07f80fe047b847efed91a77

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6964_2010442623\CRX_INSTALL\src\assets\icons\icon-48.png

MD5 2184400582c25500a74577359a1f7e7b
SHA1 e69eecf84f7d2d98bf236edbcfc143fa42d01bc3
SHA256 c6c3593c7d0af5c9a7f2e26b98ef2629e392c5da87df80653d94ebe412d5c9c0
SHA512 24858ebec11fc0bb586eb2d6f555f5e798ec9708ad89b0a94957a1537dc150a584b70865d7fed53d3f122789812d390eb6af6b68ff4cd93296b2b0e5a21b103f

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6964_2010442623\CRX_INSTALL\src\assets\icons\icon-32.png

MD5 9caefef512720012470700a11b0bd456
SHA1 bfc11bafa996fbbce1566a569a79d5d72b08f1e5
SHA256 82c0a843e1df5cc10a8c6beabee8416281aa89c73798d7bb6a2cf4a237a24ae0
SHA512 3bb42b23babd54cb902e595b84a398ad5b2c9bd2e4bd4951a8b0cdfdbf91f6d0e04bb1fa944c54d673babdbcf0400c1947d0e12fba8057c3f69ab1e61b89aea1

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6964_2010442623\CRX_INSTALL\src\assets\icons\icon-16.png

MD5 46c4711e8452178b9c2471f9c59c2667
SHA1 e020f7ba4a787f840d204525e8eeb21d0c21e2be
SHA256 4e1aed06fc4105c64aabe9580069d0cdeec3464a693241e7c02771e1beda860f
SHA512 42f2161205f28003aff9ea4a8bb33a0a0ebbdbb9bb5e9446efbca4f000a4315b2bf7184d79254c148da40597cc15bf8f22a02a3da78cf5c9026ae35e4bd695bd

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6964_2010442623\CRX_INSTALL\src\assets\icons\icon-128.png

MD5 af719a0c95789b088fe4b9f82dd5ee98
SHA1 cca49d2a728cd456b450cfcc20f91acf781c3105
SHA256 5b861963c613fca1dc4aac9a416e43b2165b05a4277478f74b7f6562a378ff5f
SHA512 4a6f77684b3bc459897ab2709754849868bac64f4e099c1e74970339c944738278454d6c043ee8a2a0337e9891e7e7126bfc41e6fb0f5fac544b978ae36f5082

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6964_2010442623\CRX_INSTALL\src\assets\images\adblocker-bg-1.png

MD5 404ead15b3040c2a16cada6a18088aab
SHA1 57d6d1b3d601532d1825c738ee51d0971f137af8
SHA256 bd474396ecae2864798b9b33062afe3b599dc834db30b6a2f4cff0d0cbb9f9b8
SHA512 12173b41f487987aceac82c13f63b1318107c48d6803dc1f89053245c1c08d092761399ab397da44f0ccca5d9ee3c79ab98081cbdb25a78ab5b97f0b52a4f784

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6964_2010442623\CRX_INSTALL\service-worker-loader.js

MD5 34679a8029e867292c60d4a37a5c597e
SHA1 994e855eec5b6ded3e365ce828f8646c6b6f7ee3
SHA256 a04c0b004f15f9058d16dee395025cf6f054fa33751242707fac789d4536d814
SHA512 03734f81215043de34aa60a7d685114542d8cedb3be763d5292feb164fdb8b521f89d1641235da2d82a64da5278a30598cb7fb8fa3d9a87d026b572fc9f17482

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6964_2010442623\CRX_INSTALL\manifest.json

MD5 cfd55d89aedcb24f5dc14662daea26de
SHA1 0eccccf18b2da8a23a34f983641c7c28f2ef5864
SHA256 b027e1e1bf93d33f4aaf3d61f7a5a6b34a48134be16f1defef2dc5349e2e8800
SHA512 9cbadad89a57705a74a0d96055437a394ebca0752adbc1d1c56f8f8878f0594b65bf7c8826cbb8a48fafc2ff976152a79ed1b82776c83c3f54b0e5de11d3fbe3

C:\Users\Admin\AppData\Local\Temp\scoped_dir6964_1892993024\CRX_INSTALL\assets\index.ts-loader-12fff2f5.js

MD5 3db80d2844748cb8365541c6c260ae47
SHA1 f26ea3d817c75932e73fb361eb87c34d2b74c731
SHA256 12fff2f5f6d8ec89484ecb1b6337f693745c56c4b4f1d2b81774c532d21f9450
SHA512 0b9266ed937bb441f76dff6757861a24c963f95cdeaae304f396edc093e088824021f92471f60b68f4bf135896dfb4dac9105e295572d2cdf85d629ea9c5b67e

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 341ce0811668675c062dfa557e7235b6
SHA1 2cc0c235827cdc282be9f9a203753e39ac423a6a
SHA256 adbbca6538158133e1df0b7305cb4b69676544980a65bff45c90a4d56ab695bf
SHA512 03aca68a5d8d0ebd8a5982eb057c1b5fb3aee474494e09c1df2c51a8249ef4fd64aba818db4b7a654d46be59791e51884c4fbe006c62cb7deeabf2775014444d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State

MD5 e70ff4f1653c937ff13651b26377c294
SHA1 e7cf02709d2a363d6a9e58c375123165b7df4e31
SHA256 5341ece2c7a6d2dfee2bfc6e3ccacb135b122f37e1be8dce907ec4599455a0cb
SHA512 37bdb7ea23271c494a0fffed20527e04b053f4a9b412c17490c6fbee6b279509d0fb963ab9e0abcc192495c55cecca288d576345ee182a4540612b8a03fd047a

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State~RFe5ca2a0.TMP

MD5 b44ee707312bb064eb1ad9aa5ee74910
SHA1 cea0e931a42e9d6631a97deecf5bf08a24ec52d1
SHA256 685e903c9a6f7c09cce1a7b9fa93fffc05b3b226b79e73111909e9daeab04f96
SHA512 616e2bac7afefdbcb7fbdb5e53f9dd54166b9b83aa03a9def9a02ca88bd909107359cba0cf877c8b3a7e69b791a5ca1755ef427b162ee66843d981a2544d8350

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 19c544640f0c8130a14ccbb6c4c3d6be
SHA1 145ef7eb7e10eb5467a93305ffc93621ff0b03f0
SHA256 919fb8ae150ab2bcbfa81c8ad2b0e9b8c0b3e5c21f04d7f9f423b2632c1503fb
SHA512 7670c53dd9410afdda0b358a116652fb939529159bed81c215f096eb1cff2dfc2f511e8de9f8e4fb33771311b848211c645c3450bcb9624dc0ad21f3d97605f4

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences~RFe5ca32d.TMP

MD5 f5ea6075a7c62523bebea0be7e9cfc1f
SHA1 14fa763e6c0194c86c2bc520860f6c410b50632f
SHA256 6afeec55c4343c73f67f1a58fd911198ff4aa407332075a3d574259dffa80947
SHA512 4e0b1719be16c39758321e5b5226d41d66584a85800ad3872d00524322330bb0eb794feb4a8b497aa68ca88a31c275ee89c0be13ac158afd9daa36ecaf68a22d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\preferences_schema.json

MD5 a192304f63ef26c80086f835cc4b7ada
SHA1 6963e90e752209132b728a938844c4c64dc94d43
SHA256 4f72309f9378f04b3f1cb8f46b031ff513ac63e5056d96272f2bdc6d39dcddf9
SHA512 be619909cd0c3465966a4018847310c1493bfdecad6f07bb28293f3dcea73dc377f5d52cca040d626368e17828eae28384fe51d20c4a71925c5f31eea8e18561

C:\Users\Admin\AppData\Local\Temp\scoped_dir6964_1579501973\CRX_INSTALL\_locales\en\messages.json

MD5 bf28ef9468e4e1cbc5f3e055adfa69e5
SHA1 d5cff2ec3851f3fff649d688919f9f4f8511420e
SHA256 0e86dc475bac19122a3134a18cf8af26b83831df3346bcf5093739ca2891b4b3
SHA512 7b37e27f56b8ef1aeec6f25bbe7336ad0bec837af4390e47932adc67c9ed873c6b7cb5d643b39d0b6f383d79c7ee0ab8aa39e70f894ce8f2b90a884d1325c3f5

C:\Users\Admin\AppData\Local\Temp\998015b6-9ebd-47b8-b555-a979a9e52fa9.tmp

MD5 04398d23bf4733785de3a5ca05ad80c5
SHA1 72b193836a47aa3f0b7182de92a6a3f6f862131e
SHA256 a89ea036242d4e3345ad54ea9bcdb5c73ee5b78fa320996398bab4ae46cb578e
SHA512 1e7ba8e738c16af9267e7f9da427c23f2159214839d6e59bff66228375e9c7aea0f86c1ebd352cae248fd8508f762c1e81dd680e27cf7c1b5bd8084ab383148a

C:\Users\Admin\AppData\Local\Temp\scoped_dir6964_2043639108\CRX_INSTALL\css\fb.css

MD5 c862cbbc1b82064465f98482ef73948b
SHA1 0e49a12b9d1fd903e0c44cfe9c9db0ae7a5b50fc
SHA256 988dfba4289e28ef42d0ce93bae58926ae7a9528de7bdf97898d1c2cd2f2016c
SHA512 12befd2966f25464dd21377d89b5d3c9b8fd9abaa8f257fe88bd1d80759fc5375439e6160f99dff7ec7a61135d9616992b611b63d1a6e094fe2eb29e23420559

C:\Users\Admin\AppData\Local\Temp\scoped_dir6964_2043639108\CRX_INSTALL\js\cs\fb.js

MD5 35a10dd7924dc7a4205fb3807812896b
SHA1 53583f9a14b35a9529614f7cb8c2f26a3a2a31a4
SHA256 43cdb582f3881db7584ba1cab29ca88c74bf51819033ea88a02b0614e398ee8d
SHA512 a7220a4c8cf583c334d78c108b7da9402a79eb2c57c428c5f740f8b2c6c19ac1c761da8d57074f2b9cfb063da84410f6558a8b61f978d536d9ac48428448a681

C:\Users\Admin\AppData\Local\Temp\scoped_dir6964_2043639108\CRX_INSTALL\js\cs\lp.js

MD5 b6ddadfa381c9d9297812d2dca3d92bc
SHA1 9f83febb785d4c87730164f7cf020d036e0e11f2
SHA256 6b2d97ac7dff812bbb826852feb506a4a300b7876fd6985e6b8a16ad710efe89
SHA512 d89a308fc1b9b6ba055e88ac91a830169547c8aea734a773762767fe4c6a76033a8d3f20b8e82c094239d25c8e2f17e4c9b1bcd083d294db368aa28f2cfe85f4

C:\Users\Admin\AppData\Local\Temp\scoped_dir6964_2043639108\CRX_INSTALL\js\cs\native.js

MD5 8307716154566dd5d4b7f87f7e536824
SHA1 5b746f1c97a036b190d4cf1db76760902ae1ed87
SHA256 a7e44db42aa52a276edb6a2dea7dae1a8d1f683ae67d0179b5930271e3138d12
SHA512 8dcd2e9dea6c147a4c9578b42fd1613a55e790d3a6ddf98809f123cb06270784b0c0e3ae27bf2957e6066fd8bd831cc09777270e2bb8f6f7c144721f95e3c5fe

C:\Users\Admin\AppData\Local\Temp\scoped_dir6964_2043639108\CRX_INSTALL\js\cs\yt.js

MD5 8e84151e901f61a135d941979efd8ff9
SHA1 52841c4272dc039438ce59943489367d1f2e4482
SHA256 738e199707a5027486e17e9bfbd50a1dd295d2d6d5c48ccac17fecaec91b70a1
SHA512 c2e2c027d3655bd549ec59d75cbe307c8e6b66838c72949b965ce2c7ac3c730ffb873a948cc055f6727964cf048d403262e8262c6c6559410ae682e2963c013e

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_dnpmpbbfdefapbnfffohgcejpogkbjbp_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.0.8_0\images\x48\icon.png

MD5 fd727c2aaa8b364faab1828aae2250fc
SHA1 bca5b2548b009ccd0b2f79c09fd628fb3119231e
SHA256 1a32dcbadab7c91a690879b5425f6815c07dda1aadb6f6a7942b9e895cdecd0f
SHA512 7d21b3133beea16a8713ab8a87ac7b84d8b2a312e4f017a9988e970f7281b9c41dec3f909d5483bba387e5ede366e80c210da93a78ed72b108f65934eef07c15

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.0.8_0\images\x48\icon_a.png

MD5 c05285aad074c0872dd78908176b1052
SHA1 b8a5926d153dfbc503a38a749baf9099903c289f
SHA256 9a4a7e0c2969562d5d1299f80317d4560265b4a843cf17491c7d36fa74a91cc1
SHA512 6006b22ff83d0afdc346179a4c2dbbf927efcc62fcf9105fb45efd768bdba62af5839c3efb21e2555e0090639ab2dca76397d294b51db0dca768def53ce00a1a

C:\Users\Admin\AppData\Local\Temp\731f693f-4b10-4880-bc24-d5d6f93f257a.tmp

MD5 7a3bc6142be9b7c9664464759974c08b
SHA1 7055fe5cf3e31a24687c3fcbc06394eaf097c6ae
SHA256 446839b455f486943d42e46c8230b6b00d59943de94449fc418ee626aba4dbef
SHA512 c881916068cfbd73425e1a6662d1049f02b8f1ed34b8546a9555d43b2b05ac3507e94f996435123a7694a2f2ddc4ef9f97d839b9a9584ae3ebca37f1b45d63cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 2e96b56ce864702a132e139a70784229
SHA1 910abf8c7bb2f36ae030d46fb0519aa94f0ef025
SHA256 525caf9037346edbbb438fff464fc9c79c8193d6f6a6e834fac0889cf9cdd13c
SHA512 04037e94ec95004fb869efee29c91c598f809dbd36db42214aff8a83eb89ff13ed3ebd4e8b542e7d76a530956bd7650e47b6f745cd2d76e033a4450c5d42e73a

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 b4449492829e38f0cde2bcef588736b7
SHA1 113ec1e247fdb2bf5e42de137d2ba8150d5a7cd5
SHA256 0418e2c5954fc06c63cc1bc8729a574e5f678a74c2903f78ae15239afa07bee3
SHA512 301c02d1a97680ef708355aab126e136af014dd395305ae95de4beadda873025beeb8dab2b79fb28ccce631f7fdf2b045be5de31b5e368fd3fbbd7ba56ca1493

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 85e997a27025d3b0fde3978925610cd2
SHA1 1181c9ae44fa2ffd7fab7da1a1b5f1ee2ddff345
SHA256 55bc11ee4a62ca78029b8f901e677a34438766b905a273687d2b0daf8bfea084
SHA512 cc41a918fff57902f7ff950e6b4f8f1cfa33322bae4c213960c8516612ec85f435a7ea4f0bda964c28d425a3dd58e8389076aabefa9161950f7061d9f3ceb910

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\1429b6c0-3150-404c-95a4-00ba8f9f77b5.tmp

MD5 0837bca944a3520d27a7ffb92073aadb
SHA1 b5ec54c657a0b275c2fe4164313b363ef587bb16
SHA256 21453c144844e35c792b359ee4610bb4fb40a8e53fc4c2fea6cf696052b332f0
SHA512 6550b5f90d3c3acd3db28678ed75c634721a0f4fc20ac7acd9230414bf9effc5f1cea6edf36bd0c411e9aab3eebaa5880c7501d78ef02e8bda92959234e35368

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 aa61e27e7610f84e3651698983fa6fb1
SHA1 4152fc94c503c629f22297b00a630dac77872b55
SHA256 fd06c26b4e186115e52048f65ac4583761f362dd1561e4d1df2a5b5d970ed33b
SHA512 239b7f347b2ff895829f66aa27c8645d2899dc2a858db82e13f682e3b08226cfb6000c8792cd8b811ef8cbb88960d51246cd04ec220eccdaa371cda94f0961a0

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity~RFe5ccd0c.TMP

MD5 95dc3e79c90c850f7820d932db1518e4
SHA1 d5357b3c7d36abcd5c5b387f92bbc3720d35fc24
SHA256 b9ea7118f75e73d787c3b26b693219e02775232266a27992ac23f12fab09a206
SHA512 aa37d3fd2ccf57138512f2183974a143ed1161ae66787b0d9b3f9869e64d8a29106a05a9862b9ab7f4824bcf07a953aa3a49b1d4afebf223a092b9eef611d580

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 cfa7869d46ec92f5182f0ef924b5fcea
SHA1 edc876ffb16e6d50b4c39c430cc1bb4bd1a7e001
SHA256 8fb9ea0c978712cf3517f53ef6f1ce0db49a751b5356951517bd10833c2e46cb
SHA512 d3f992a39db15cc002f09057facf8650f1f2591d3030d719bc77a1e9764b8c5f67d526ca67af3b3081ba24d87f7843b45dfa32c3e87633402cb2aad6d8581f11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a7a87f67550b7685a36698db01b802c2
SHA1 6c5b7f6e81843736b5a573d49d1f0a74c0f068ad
SHA256 5ab81e9a9b87f54e9ace469d14173d0275f8b22ee55a22c3b569fb03c0817a5c
SHA512 2156aabc87b192d016805560ecfebe166e4ef26d72a0c0f8275ac0644a012a1c55da851ef4585e64caac917cf07f2eef95adfaa362d88d1c586d6fd47701a58d

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 2cfce50cebd5a1b170d1c1c7481efa73
SHA1 e5529c9d7e5173cd20c1d4c43d0ad882f798e5b0
SHA256 e8cb0093559adec391afdaf386ab6b624e7d96eab215721cf306731bd15702c3
SHA512 30b6b17bc149ee0dfc6812d107adb4bd650f2513ade5dc2dd39e10b9d223ec6b1a243aaa91ad8de83b1723feaaa95b54a3630dfb514c2897438bf66657743a06

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 b5ae6d0640a63c2649e2679f319d58b6
SHA1 e65893d36d8293ef485c7da75e86242c82d56f5c
SHA256 a5d43266cabecb1b932645dfb3396fa9baae10f93becdd5c48a2764322ea77de
SHA512 5b16b0ffb6aac5e833302301ab7918b6dc493f6096dacf75f893297a9526bc7faca65c93ab162a5cb390213c31747748cf6307df8908fe3941ef944489fa6590

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 5af6118e5098a21e28f17cde14b3e909
SHA1 ce6ba512767e946904f4a0861136e666f9905c4a
SHA256 17cc148fb7f9b9bc4f5cc88a503c0361505a54c3e214cbc7cf1918ef036985d9
SHA512 e9005ef9f2793961e1b3d0039f43a4f8ce7ff9320d1a814f7bbbc373fe4129cc49f9df3774e6ed91f0f0b382a3a0f71dd12870dddcbadaac76c5950a877c899c

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5d02c2.TMP

MD5 43ee0a8d690be51702e066a5bd5d1626
SHA1 03c7f87e2a67c01c445de4b624ad4adba4c9c7c6
SHA256 7445ea5013a0afdd1a2cede259873e7687f4f516aa179078c1ab78f0ce017918
SHA512 c90459ddd4353687dca5cb635a94721a54359026f2154089d196324c3d3805edaa2060de8630d9a37994fc3971ded4d3a69e2d9ac7d9fc503ff7fa06fc337d44

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 e004cd761f25de15c56df6001744b83f
SHA1 fc866be4cc5a6348bbc8849f3cd711eac5177ed6
SHA256 1e953956adc26e6e6cd80e61fe3af6b4300c38c6009a33f96a70afe6db67f135
SHA512 df7725946c5b5aa584aabd27b9a301cbe324a0fae9bafdbd7c84e9dc2ad5e027f45929e9e91f067b751132c9dce4f4f2b5f578955b8761759f6de1c7f58b238f

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

MD5 de825e91840abc87f604cd255ff2ee0b
SHA1 fd6c7dae4bcbd98d512ee8100f8adb8bc05709db
SHA256 dc9ff74905718535317742da2016f2cf8aad29ac7ad08ae740673aab44c29913
SHA512 3a7ed6f31eb442a4ee119204c7380784bf89bc9dde7c1ecf57958532d86ab495057816808137768a02e6a9177528162566a43a7302b7399eeb2167db45cc789f

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 d21745ab13834adc10ea048306a66f2a
SHA1 0631b0da298e1124fe6c9dd8bb97a61bea02011d
SHA256 471530e3e84ab881ae792877f868f5bc403ac6b79e490a68ef374f30bda24441
SHA512 8b82f478f67c8f126052b0f686be60558c35a1aec02eb0b04a3e99245db95d6a27cad3354e451bad8cca9c1cb7d6bc8d0bd2873cfebc34ee8cf4e6a5c7cadc54

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 a3431f5c8970c3f61d3e9cb4ed794762
SHA1 12be9ff6529a8a24e0b4c70f412e295c7886d858
SHA256 2108d8db8497c1c1eb0307cab825bfbb65d29b8be31402b0fe64520b7e39bb87
SHA512 ef33c2adc376c23074fc3551b9921c94b1e796854b2ebcf4bc0e2b667d15233d954a18d574015a8149550519ab88da0030e08b061013e6ba1353fe341968be33

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 db1fa50484c916c58cf222c6a1d22ed6
SHA1 04c0ab2102c98d94bfe5854dba7f49b52b0879b9
SHA256 1c18b879d68cd67b112ae35d42b6f759cb02d707b3b4fc8097f0b2358dc0ef54
SHA512 0d8212d5e3c70b18109d06d43c635b672e212b1d57348e2acbd2bdeb269685c9af430404bfc4ee68e27027f94eabb5df51f6d332ddb30b69a1d7bd37d4a2fed6

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 b4aebe8b2cc2839c532dd853b2236e17
SHA1 4f09f308685249dd93e5ed9e0bec3b656cf17438
SHA256 67c5c261419e50237a23a906f34a0c0e5e818b547caf5b588bf03503c0abb72b
SHA512 723da56ddde4e301fd7b805c1fcb56bdfa37315376cf1ad77ec535a31fda6aa2fab4306178b7b2b666915a43edf825091edb2483dd3135fb0d44c5a2ba732af6

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\KDOTUZKP\p[1].gif

MD5 d89746888da2d9510b64a9f031eaecd5
SHA1 d5fceb6532643d0d84ffe09c40c481ecdf59e15a
SHA256 ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
SHA512 d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 ffd4ed9d0a137b3e8a22d1be9fdd6cf7
SHA1 42ff9013d7b4d7bf6031fa3d0ae5e3874ddc755d
SHA256 9b13853925db6d9ca38aa4311fcbfbdd68cbb0c5014b73e619eaa71ea3cb0481
SHA512 cd19cfc8036a5e8a2a6f243a569c82ffdfe4f43be8afdac0f49414e8e07a23fa8d24efab2b3bdae4693a7038cfd4014293c6212755f1598bd4a9944ce54e744d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00004f

MD5 02d7f8e22149e154487f2fdddfcec8c5
SHA1 390019b5f2c24f14dd398ab4ba8bef0183a923af
SHA256 d9618862a64da8a5c86f2c9cde65b48ab92ff8bbc14d5f3c7946539a44e2db17
SHA512 140d1b9c320e29eca7e9ad2ed0c75004d2421f612a6cafb593d168856fa918ed7bc607ddcebc042a3a26a3e819785d9cea4ef1a298ad1f13dd4181c5b5b3e2cb

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\DownloadMetadata

MD5 dcf84136a5f880d3aa2aeecdf8bf71dd
SHA1 341b3d5306c8328c9cc9a6ba315e3d77354f9d2b
SHA256 747ca095804930f04de75f3c296e51ce09284816ed4dae2e5363be9afc011b1e
SHA512 a66c461d49a2e2b040d2ae3a8d79ee3b8f06eabb6b31aa875e42cbf0d02d194af45d31c25f7e2de7701228a7f1e24860e6d6bd13e7fb80933b3deae0f3ed8d4a

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\DownloadMetadata~RFe5d5ecc.TMP

MD5 1acef7ab8672e525107a36d264f0c8a4
SHA1 a13ef0a45dd48753daff66b9152a0e144ef8813b
SHA256 3e43972ab28429d2dc740a32363af842d4e19f2265cc143c14831cde00d38aa3
SHA512 ce8ef24a61eca1a4038c9686879053792bd4b5dcc8c4253c998f5905398eb944b13b2b77222fda654e550c4e58818a31a4084654f4b13368c28bebd95d0e8cff

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 468528814a9911c06d88ac81c3a476d1
SHA1 366d988d2f947af05fb331661ea6b27b708e4f39
SHA256 40242448997a4c0f0c13d1b94b8ccb0b76d4d6fccfe022868d3fc155fee8d1aa
SHA512 f8ec13eb39f75c42320d2ef2c9f1373077336dbc1c13313706610acd8374bb194e16cb07c1c5b2e0d6823eca77c86e0a1f2c5ac2f1cab8781a7544aab03f7ccb

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 b966f60a61ef846b1066263f9586626f
SHA1 b12e9da06228b155c6002210ec3101636b00d537
SHA256 e350bef205342cc2d6a1e4196088fbca69cbab5b70d27eb78e1aa21602e7f176
SHA512 472a83bd245593e91b3e7ce81a3c658ce0a8666612c9c0fe2a2caf8c6b8ff41a28377ef7d3ef17885b4d9f3928bad84d36f3c5893129267f8d8dd0ad5ccf626f

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.0.6_0\dist\contentScripts\style.css

MD5 a2de90a2190cef036f2c6df8ab8f00e4
SHA1 d2c76852071c134e386b54d0163640233e8b854a
SHA256 8bb83055b42d5b706abb9b10afa55c189f2e451acc976c78430c3d91f555c817
SHA512 761d49c55530694df775138dd078c5b7ac91ad2ff561d00df824bb70ec7d63b6e886ff75e195eac6277c535511618bc2c034e2db7693329886b4b87696f7dce3

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 ee075e739a4b795a699ab2bafde40c89
SHA1 ce254684f1d274519f1d275539f9846d31a948e7
SHA256 59edfec6cfbd416b28c3b76a08c4dd25e7c2aa4c46b8833ee403992db5ee7c6f
SHA512 c3dc703b69b889f30eea057a56bc2018cf2db471e1cfef50c45346a75c621197524d02d29c0f061d505553bf8a720467523b4260be518219340e3fecf1d45027

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\DownloadMetadata

MD5 97786be2e76bf1937eefdddb33656192
SHA1 8a1cbaf976ce930812c7367c6ad70984b8dd997a
SHA256 b8fd298aecec18cccdac659c00880a04b59b92e5599252fc0c3aa0c5d01ae947
SHA512 54a46311d72061804e95c44e5fac18d9744200ecf08ed4fd0e29083d66189482395d7ae3f26aebe852e50f97b0619905535141a2761ded4d67ff044e83d8e4d6

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State

MD5 2af7afa7d3fc38f4acf1d184854987d0
SHA1 5979bd705ea8a09d0d7675a4bf17493b62c290c8
SHA256 3ca1b44a7f62aab41f2207ca8dd28139648344c55fdc7c04dd2c64f75a86739b
SHA512 56012799c530d79efa3b20da7a08a4cd45cb2629c267800ad2878bde7828f4621b0390f1b8a8d4985a3a7e6ae528c6d7bb05fc80ad94efdbc604484f643c0983

C:\Users\Admin\AppData\Local\Temp\nsv959C.tmp\image.gif

MD5 1636218c14c357455b5c872982e2a047
SHA1 21fbd1308af7ad25352667583a8dc340b0847dbc
SHA256 9b8b6285bf65f086e08701eee04e57f2586e973a49c5a38660c9c6502a807045
SHA512 837fa6bcbe69a3728f5cb4c25c35c1d13e84b11232fc5279a91f21341892ad0e36003d86962c8ab1a056d3beeb2652c754d51d6ec7eee0e0ebfe19cd93fb5cb0

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\DownloadMetadata

MD5 3d3da533358b0f3b8b8aff1ad929056f
SHA1 b77088ab08c7cacd4a505b7590fb7ae7480fa7cf
SHA256 93f407372dabbd04f91af38bfdf872a6f0be7f2195165f405aa68ef338ba7e6f
SHA512 d8de691ef73e82c5dc660319277295bde337d184d5671c0afb968d1ed09f8c1726700a87e0c213235fbb4e36cc03c6208efb4327446b3286b19e5601c9ef6fa5

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 f902c2277687d643288e9e4f47dadaf8
SHA1 9bdba24394ec131230ca40b288dcf47062f9a69f
SHA256 be81761c92483a7be59c4b0f2e41f93e66be0f8bbcf4b13682211f1189016a3f
SHA512 811e1debcc22da38c94cf05500ee87d82c104ac446610f9a707794d4769ef88f6e10b9023781a02a80e9145418b7e588be070389a424139bcc53791bc5357ff3

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 6d06259b2f60913e14fbc19028ae15cc
SHA1 bbfa7d402132c72f13d5eb0ad0b813abfbfbc787
SHA256 577944928ea9ec876784e1c805fa528f7ca2d19808ecaf5d1a8d8e0d33ca4277
SHA512 b0afc2c8f73c9631bc9609ccacb1b13c30da100165e5c21c4cb732246c9265f196209d7a5f66a521885f2d3cc2d2eac44fe00e8267bd769a206ff49efd05a6bf

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 a6ee18710ea400e619e249cfd94a77e1
SHA1 f4f3f472a8802e2daa72b344c8f9b686e1212d48
SHA256 fbe4b171942a1b76b886ae4990f75eed05f8dbc37b3b91101ed205f8fd4c8a24
SHA512 ff3e61a8f99bce30ac93260bb3cb8240695e2d656898c4a6ad69c9540efbe2fcae580983732e0d1b175e90f6a665d9787fb24a82395f491e0788660d6f7b1017

C:\Windows\Installer\MSIBF00.tmp

MD5 785ee78478d43f00870e91fa96b94646
SHA1 97e3f06230bb97333db9574e56a187c2b5dfce50
SHA256 b8665993cd5f7224e35c122a5c1965f8c4f2b4d9d41f75160b515e66f9affc53
SHA512 d34cd716d1925c2286a0d75a4e31d8a3deaaf381322cbd1931d3e26a51addd1d37f6c72f6511f6e7058c8ad1f016f4fa26e9594b02bb7bbba874c1b2406ac3ed

C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe

MD5 11a4bcd0c92d0d973847450bbe46c6bb
SHA1 f1229f3027424d650a0de2d6999626585539b2de
SHA256 6cbf77ad3d9c53860a353c9580c49ac81e6d26c93394347371454df6cf3f2ab6
SHA512 e33ad661735437db39e1aafa2d6c167e96582e240e4fa4a5ecac829e5a693e471b16be6d911a7937628f0c210a71473800c081ea5c061fc0c7fa98662554d17a

C:\Config.Msi\e5db653.rbs

MD5 a93848590afc40a2193f4178e1fa5bfd
SHA1 54f8ce089050542b771c80ea85721714cd3bca56
SHA256 300dfb745b1a31f5899bd12a78488787f2a565e4e1df58354b88fa96b364f9ef
SHA512 01af004b32c4c7d4667f0b4e2e4172bb0d9dea1de9c538f5888a59933b26b9fb4754c05735e6707f155270fd61330940d7f0f24fd15178d89a379474f7a46d84

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 0d627edf80963f1af2cba0cf429e3520
SHA1 d69f63782c812e240e1ab99b210a2a6b9a6283f8
SHA256 afd68323e007727ed41f309f3b0d90a422cf4bd59acd9ff9bcfd7a1b511889d3
SHA512 237def60c807a42c50d36bda18b307932212252838b60a5a735165beefa19fc3f56d5f001ba5c67d85eef2c05303281e4d03836c07ef500a4ca8d4db9161e954

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5dd709.TMP

MD5 e12d05e65f4f83c17515f163d9429420
SHA1 853affa250de3763ee8b61055346279d8e3c9c5b
SHA256 226258ea1d02f76702acb331c83f3a8a817006b36d471b9c765f3e6fd415d3d6
SHA512 ef9687331e55897cddc9f3122b341e11bfc958b1def9bf37e6ddfc714834cb7ddb212fa3ee6192770a9de824c60f78137c54d3d50db17e289b57d58755f08aeb

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 76fed252508fd0c2525d8db6ad0db64a
SHA1 1bafbe6ec1017d75544f2ed5b38fc4b7fa54c89e
SHA256 01119f7899ba0fbf1e5d9fcaf3be60155e0a5237ba6b6b4a974f6f15dd81295e
SHA512 99e5a4d507c41ea513262a9da5bf53ca28399e98d6bb96f105a9d8f0673aa4bfd6cf6cfb3d1274a7139ab0d436f907d70a1e59076acc260f93152d42fa4dfe50

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4b91854d8b0469566ce039bf67f8098b
SHA1 e81d0f50d396b8bcbf2bb979743306349436d336
SHA256 cab781815b9ddd84422b8dd5e1ca49e042a5c9f42e57671dc005e5ab460314fe
SHA512 7f8023cdeb11ac1174baeaf34a05942c83aedb81028f28b627b24785f2e36ea87549e180de14f9c72ce2c08562a445fe53bc1a2f6312da160c2f8f9d7630e098

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c15cd83af1c50298a1410685e0cab8ce
SHA1 e505259eade556b0ea414b8db13a2ff85ba8354d
SHA256 9ee89d2e0e66f701bc0cb0eb58d5ea1ea652f50baf6a0374f0a8dd8db5fc4a2f
SHA512 9299e231c9a2d407782c81642481c6bc039aa1804f3872e3287f1afc751a6339e8583551721e9895917d4dd27d4836b1b52699449c424462793c6212c6fa6be5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f97c7f83f33a1c84dc852e0bc69aaea9
SHA1 ecaedcb236a3d8649d27e9bd42800c10f1ee3958
SHA256 341742af735e3466fe4bbde1c127f1c0f5ea1d944cbff4f50a29705dbdea9349
SHA512 95063cc896129c4f512915646048cb2bd628b0953deb3fb36220d47fa638ae25423ebc423c456ddffacdf168ca04c6334a3fa1b730194167cf8dfec5a0669e16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005d

MD5 60f8cd04587a51e31b51d1570d6f889a
SHA1 88574c41d0ab81721b275252464da5c7927a4835
SHA256 27cb4390e32a97375dd4987ae000406933bceba5199f17893711e782333b81cb
SHA512 84c12448ac55dd819749fef9be9919111a3df4bc51e66d2fa9f7376c11c101ed1349cb36aa119aa873cdd6c0c91027e201fbe23c2c83b89bc900a4d9077bcc52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005e

MD5 76a3f1e9a452564e0f8dce6c0ee111e8
SHA1 11c3d925cbc1a52d53584fd8606f8f713aa59114
SHA256 381396157ed5e8021dd8e660142b35eb71a63aecd33062a1103ce9c709c7632c
SHA512 a1156a907649d6f2c3f7256405d9d5c62a626b8d4cd717fa2f29d2fbe91092a2b3fdd0716f8f31e59708fe12274bc2dea6c9ae6a413ea290e70ddf921fe7f274

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005c

MD5 ed124bdf39bbd5902bd2529a0a4114ea
SHA1 b7dd9d364099ccd4e09fd45f4180d38df6590524
SHA256 48232550940208c572ebe487aa64ddee26e304ba3e310407e1fc31a5c9deed44
SHA512 c4d180292afa484ef9556d15db1d3850416a85ad581f6f4d5eb66654991fa90f414029b4ce13ed142271a585b46b3e53701735ee3e0f45a78b67baa9122ba532

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005b

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005f

MD5 710d7637cc7e21b62fd3efe6aba1fd27
SHA1 8645d6b137064c7b38e10c736724e17787db6cf3
SHA256 c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b
SHA512 19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000060

MD5 74e33b4b54f4d1f3da06ab47c5936a13
SHA1 6e5976d593b6ee3dca3c4dbbb90071b76e1cd85c
SHA256 535fc48679c38decd459ad656bdd6914e539754265244d0cc7b1da6bddf3e287
SHA512 79218e8ee50484af968480ff9b211815c97c3f3035414e685aa5d15d9b4152682d87b66202339f212bf3b463a074bf7a4431107b50303f28e2eb4b17843991c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000061

MD5 038c1f469deb6932520d09a340856ebc
SHA1 8b361a8c0489b69e9ef4e132e36f20c161c5ec1e
SHA256 5fafae77cfdc093baea4dd31485ced7dc4ab8e734311b3c2aaac1dc2ed95f451
SHA512 fc3123f11323a9f18f5e1bb31c61fa229e0de8b6d07bb01b220605cfd9ba499ed63e76be0b7146e096412cc94486bdba0ee102982b38b258958c6327fc6bb6c8

C:\Program Files\chrome_Unpacker_BeginUnzipping6964_884326912\manifest.json

MD5 2648d437c53db54b3ebd00e64852687e
SHA1 66cfe157f4c8e17bfda15325abfef40ec6d49608
SHA256 68a3d7cb10f3001f40bc583b7fff0183895a61d3bd1b7a1c34e602df6f0f8806
SHA512 86d5c3129bec156b17b8ebd5dec5a6258e10cb426b84dd3e4af85c9c2cd7ebf4faea01fd10dd906a18ea1042394c3f41a835eae2d83dc8146dfe4b6d71147828

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2b2d42a497cdaaad01a9f5dad1dc5cbf
SHA1 76d2912d755cf5377d478068b11e3d9b3827febc
SHA256 e4fa9562ce9932a271d03488ceec8e0eecb5eb618ce322f2dee3929d03957901
SHA512 0595c30cd8c07280320fbb6e410a77e596a2ecb859a0288bbae16c80a4788a96a73ce0ed3be554f28d8b5c3d29b9f36901860018aa6c8b0f0d7ab92280ff18c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cd395aa419a5eeaf_0

MD5 e404085375f23ff283a6b22bd3e4d4ac
SHA1 836c373aea5ee9135e7781d7cabfa2e534560c54
SHA256 a3aa3abc5d11b3e7563efe162b4d9f414d2887575f5f3da00e4a781259260687
SHA512 f221991e0374a08cb123e349fb12732704b9d0b5334d985d08e95157e9af13357587c9933bb8ad3fd5dffee7e467914d45f851966e248826c0376a973915d661

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a6bd000e8d945b975f0704d1b39b5eed
SHA1 b543934b5d141a6dd62af8580ad6bdbd7ce1821b
SHA256 d2864bbb9b169b75a88529f6138d48624616c60dec7e797f5de01b2ac510b1a8
SHA512 907c941b80b0cafb5fb356090865fda44c60e09405d98ffd843a095bc03d0e5fe977b8b980604ece37d1818d5377e0f367b5cac5c2502c745fc7bf667fb90955

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 14c1cb0a70490e3f5215682a76d652fd
SHA1 3d780dbf2b71def702d877b17a475ff78553dcff
SHA256 bb99856a670d29543a9db6231a394cdc783eba628946e8c2b7d683023edf55c7
SHA512 9ff91d6395ef4e04004c183e362b685d665e62c72fbd980a543d84b462c4f98627f24227455df2246ed9f288d06f3763582fb770e5eb52351081ce1b22ff068a

C:\Users\Admin\PCAppStore\PcAppStore.exe

MD5 81775dda4a9fa0137da54abea5e5e83f
SHA1 8138fd9579d99cf3016b55f8833808445132018d
SHA256 8626d1edfa3f2753fb71aedf23f8f1895c9063391a9a1278b2ca05795cc9d232
SHA512 b99b40142367e8e9932a50a564441f06174eca4696c9b22d3ed93e83b2a0fcb334ad11b1a8476de9f967aec78a17df5efc9996bae4a8bb3a72dfc3cc74a57233

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e434562467621c51f433120d8e64f1c5
SHA1 cfc984d5de55263b12c4a1e2895da86b7f5f905f
SHA256 23ceb0985cd79f4d05e99b3b23c0516648626cc96789859349229be1de61b67e
SHA512 d0fb819fe8b8ed21c9c730beb226695eacd313e29c02a7567f5769ac56c38a44cd8f3c020ca597a63ddb5cddc5852a4e304c48c6cd165e43fe4ba331feb5ea74

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 df99124bf786453d243bb54505e2c44d
SHA1 ead73382c26862cc514cae3c919aaffe1b4f1132
SHA256 fa3743c4503d5e86c574c234fa300eef02623e8bda14b78c08d6d49fb9e080bf
SHA512 ab780901bf5bffe3521cc62f0cf8a2703008640876fec941edc4b965902f35313a29548c41d80e64ef4205bcf3838c13d9a84518b3bd18df80840db883c51615

C:\Users\Admin\Downloads\Unconfirmed 220937.crdownload

MD5 9c5cbad342b1c6ff74ee22937b4ac2e2
SHA1 e55f152d554b105f2709fd42413f9588d15bbbb2
SHA256 375c7c966c18e78bbbb5826aab8b26f9f0db017f9b8ef3b450e64f608ac84050
SHA512 11a1f7bf3275c15172f3f8c0c9814d087bf95a2aeb59273d1d79edc7aadd87a58962fbcef73e7f3ad5081f54b2ae634ac6e7b2d0c76458bd7a3c8ca3dd2f03c5

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Local State

MD5 3fd0b50d6a5ead38c78a73dc3a5e3354
SHA1 c36df5e1334bbf9cd0c031ff9531c17db127ac7a
SHA256 3ec0e7d8ddec8571a678c1d8e0f21177cf1052f9252fe27f96f2d1e8e4e8d7ee
SHA512 c4ac90e28f0ce12b8143f27a52556160f57bfa3e7a02ee03cf3ee5a23ecb59466ab6a899a8d91d7dab0c16b9881f4b1fb5bf67019c5f091a236c1f1d25d8be41

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 77331bc9eb91e495538e08b0c8e6c156
SHA1 f477cf08707839c4c87f7b76b7d871ce5a2cc5ac
SHA256 1be1ea200c7040ad678902db4d1367b06a620588304975d72a93f20e91894e5a
SHA512 7a4d3992d78e390f472d643dea06943d3639f15322544d737cb66938e028ab6dd64fc86452d60128beef65ff3a6e703c2596910c7071f130e9465ef0c2d1e101

C:\Users\Admin\Downloads\Unconfirmed 220937.crdownload:SmartScreen

MD5 4047530ecbc0170039e76fe1657bdb01
SHA1 32db7d5e662ebccdd1d71de285f907e3a1c68ac5
SHA256 82254025d1b98d60044d3aeb7c56eed7c61c07c3e30534d6e05dab9d6c326750
SHA512 8f002af3f4ed2b3dfb4ed8273318d160152da50ee4842c9f5d9915f50a3e643952494699c4258e6af993dc6e1695d0dc3db6d23f4d93c26b0bc6a20f4b4f336e

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Secure Preferences

MD5 879783a8e535b198c6d2c905da58a03a
SHA1 032eabcb5d37df099cd49cc10f076cdd762d2029
SHA256 8a720660e3767aa1d6062775310f7e53363bcf5d5c4b96801a63e4fc4879c62b
SHA512 7155d9a6084c3c7e6e5e90d2e93ad6ecf666ba0e9b5dcae89e9eea572066b151dca42b878efe28e696f2efc2c63d09e2a3085ddead09a6f1537002569c1708d7

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 c00042e5978f74d95b1cec28cc814506
SHA1 bef68707898d223eadc6a12c048227fbc491f0c1
SHA256 23cb50aa3f1132d90f10c8acae89737e6f340982bdb568f3d948fe062f21ab13
SHA512 58f73d0b6807224fba60fbb61c644f9ee1e114b793f2adb93a49ba589b6291f21f81332d79cb10fef6b2617d865c248410c2ba8e77458aed861ff4d1fbc73d3b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 4cb8b7d3e2f64b1e404af9fe6b6d1b29
SHA1 eed47b1df7c179ffb929266b343b19395eb57e4d
SHA256 17ad1919de2f5a651609971dea4e91fc1d9f7cb949ff182c45962d4a502ccaa0
SHA512 2b36eee92f26074ec3b0ab4f10e62bbd2bf46e408fea52d74f384f71d53b4ee3203c60f66264825652e83abcc5355da620f8799aedd57e92e3d739aca3e8ecb2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5ec012.TMP

MD5 2053736500c478ca978309277388fdef
SHA1 3b2fde10c4e93de85b83d00a85fc83b78fbb8e4a
SHA256 52979755f23bd6abfd315afb10736f50413cec6f91bcc867f95fe382e12c89d9
SHA512 2312f1247d271a435bc25f16de4c7cab3d2cf1763082f69f5e5d53d9050f0576feb021cefacbf61416507d31bdfbbcca38a65c31e8b104547ebfb28e6d7d7c07

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d9737645-5805-434a-9d79-98a8f5f82885.tmp

MD5 27d54b1cb669c43ce19caa7b876022b2
SHA1 34396f8c72348f862a51b1c6a31c19e4e60f7ea1
SHA256 723011ee2ebac94aba488f125d5e63331b21680301df714108fe24998e6b6584
SHA512 2acb432ebe2a64208cd1a742ce6774f464bbdd4b54ff2b5a15f60432b5ad70d46f68bbecbf9612956e03e112c78f8d204af318a740580f8d3c96189c804d2fe8

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 a92644301cde7ac2e0f681f012ca82fc
SHA1 ceeae91e5f1eb9cef5635773c4fdab2f698d7181
SHA256 677528a6f3f17f521de83ae26f43dd00d15534f269dd776e5de2c265d62a976d
SHA512 b84c1f537a1efeb4633fe30c73834a15ac7ba37e1612337cdf281363e6540f8472c58041d3424fb8c16dae7601a25f7a1b90d17f6d72c44ce6f33de46258fdae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9a7d1df471b2dbef18869af6114f9ca1
SHA1 127ca19959f863d4d168e596c889193e53dce9fa
SHA256 45f7fb3972380739479daf7714a456fa39768950601edefb61eef1ae14083f41
SHA512 296b3dd329512ec4d56190724157d48454800773ee35fd8755892090e64571484da6059dec6febe82a05ed702f097c9d2118ff2740266d4c62e401f421055ff0

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 22f4f0da759f2e26f9ce89f1a8780319
SHA1 3e9d9db3e095a8a5913ab6297024488a33541591
SHA256 20b6bd9afaad872c2e3ae698f340746126d6ca73e6af566f3c701104d6042d7e
SHA512 d6b60b449cd321f275fb804fd2a67ec78f02902d5edaac96dd9979dde412d06c21c28a4cfd60526919b9d733e1ec2c0ed303c6f6976e181b10691e80c009f2e3

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 ce07e5469093a4017be8930d818094fa
SHA1 4afbf8a30da826024bbf276552294c49f940f4e6
SHA256 98a1440b2f548d0d85ab3cdc70b8ca91c3259de1043110c21155b266786a8707
SHA512 4eda630ff861f22cdf7eeb9eb64e23963b6127bc4fa6f9683ce89e563dbcd4a5efcb8e1fc04ddc1c9e8278c83d4f2c33bd19629ec224d475aeb2d358dc309d00

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 aad51bc40dc0199d7ff21f4ba295b52a
SHA1 989839e82e03239746b4c9225802714d5a9d2b4e
SHA256 c21e83c2b2705acb6fcf25821debe302abcc286f42c45b69313c2ab29ead9534
SHA512 4009df887c5b89dead127fdb856f808f44734124d55e3a644f09e5293f589adcb74b04b748eb1b883c3cef29f798e65c0d9921a93d6129b469fff3f4b1b43186

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG.old

MD5 7abd85e46571b2dff151d9b2ba7957f2
SHA1 fe2e5db2e64bffcd4227a2dba82d14ea718a5a34
SHA256 6c3ff92b2240d1ed1ef447a16d67f36583ae6b5f43fbd8acdb7b97fab6eec059
SHA512 9a2050c3e1e7ef4eedfe43fc1e10b362d99ac15a032037430874dfd6982aa5ae42217f0deba8d23e4578a22030a161338e52dad22efca2960d4fd5df22a0ab41

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG

MD5 b351b43acc6751618fec55a5a16df46c
SHA1 faf388fbdcb83cd00f937a9e90e936fd9a027af6
SHA256 2c4ec993a8ebe46163c15bbdf29306ddee306c3b7e3dd7d90c8218f43d6ea5eb
SHA512 c9c9da33fc9a8922a1a1f485d497b8f3fcc592683fb65f707ac80d3ddaa37024cd70fd2d8ff31438f577aab62f4057f03273f56b01b0243dc5d037cef245f3ac

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\000003.log

MD5 240b21c96e4768d0423b793047111df7
SHA1 dd5e9ccdbcb01f81e894d1ea7a96ea4798f065c6
SHA256 4ad0530e93e122a65c927d4f023b55317e8c433c337e47347a1686126dd109a8
SHA512 467a645d1b51575e1f51066c114286ddc2c6e4fcd0de00aba557f14a4072389ac1d8d4738c652022b29c02c0ed21c023c7a60a4cb4b2b0e53beb1c2547339312

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 3e32984bd70a18944c874e999fbef4bb
SHA1 229b984b8f2cc567f5824c4881db47b1355b4de9
SHA256 ff5f963706891a963afac2b798faa7b50eedc59b0b6e3861b7f2414af518553a
SHA512 edc73da7043798cae593ed622a63241a8fda0ecd8c5c3bb738df02c58912e7c6cac9e1d71306831bf4a4dd2df89634eaa57db424f3f819de809a5563118245f7

C:\Windows\Temp\asw.cb357a2c39b5029f\servers.def

MD5 a2c488fb7d3c5db6f578fb1736d49741
SHA1 622d7554f8380fe469e59e31f165697e578031f2
SHA256 9e4ceb50486625cc529947ee4868e79f289ef06937ad343ad49ed8e086292ccc
SHA512 2e23f30e95e29e79c639c2b587ec7cc189a0ff2ac9d138f6552b87f4a5f3e872baec9b0716a38c95ea39aefd19643aa9da4b87b96a4d389b5205cff702cc34b5

C:\Windows\Temp\asw.cb357a2c39b5029f\aswcd7758e8796d857c.ini

MD5 b6f401b9e368db1d5df5dd28a2ca471c
SHA1 8f90c862fc08d647c532d2fd5987dff85c9b3741
SHA256 adc49df166b9de1e23a380085f4bcc19de617c35c70633a5a5dddd88162e5c6a
SHA512 2468dee0d4aebc36143600021fabfc8dec9f4f936d758e1869c8095690dd6dde083722c97ea32ea52b97c5b804f19d39235d4725d5ee9fe38769e02653e2402d

C:\Windows\Temp\asw.cb357a2c39b5029f\config.def

MD5 beb042c70eff9ec22235fecb99b2da67
SHA1 2bdda2bd6f9a943bcec38e283d53964bbb0525ba
SHA256 f533deacce66704f6f4fb9946713c88c9b73b29473d1ad9e351040dd1d6d4272
SHA512 e17944e3cef9511fa248d1a78e93048d6fdfad7a2bbac65d6e7377214f46a492e09bf45599a7d19d600fbd3e49060d51057b6baa2e13b2755dead2fec0614582

C:\Windows\Temp\asw.cb357a2c39b5029f\config.ini

MD5 089e6d1fb4532f18aba3b98cbb392866
SHA1 a43284b2f0d654d4e3f3973c63983e9c847c741f
SHA256 429c0d89c4cb0d5a12b1e35a5f088cf53258fee7940f776b51e5dc4effe79cb6
SHA512 a9e88625b0fe5b0ef0c6e7b0625d7055d62f714888a731ff9accdfb76179f7012f731368aa11120a3573d9447fdcb19e3d0fdb430f4cb12f13e7c476578d1dac

C:\Windows\Temp\asw.cb357a2c39b5029f\servers.def.vpx

MD5 471cee2ad3a83091a8d7a1e9d731c038
SHA1 d69ca6d220d0de5650cd0d2f85c721946e1b44c0
SHA256 b5316c662a915427271db3e5f274a08e7486fcbd14d288d61a75153c04e48648
SHA512 2921c6119bec13bf5de8f684503119258799fe24576d438524ebd2603e87818437c7211ff9bd356c9995deba03025ff02b656bed1dda91e55b1d06188a86e23a

C:\Windows\Temp\asw.cb357a2c39b5029f\prod-pgm.vpx

MD5 28261c70b4ba0225da4726ad7ec13266
SHA1 23b0c2cce16066b7820cf769bcff052bb03604ab
SHA256 384d3f757cfd167db8815880bddb79d6fed849cd0412c38c9ca998b742f3300b
SHA512 b066fe542795ef6dd6cf9d59fb2e776ad2daaf99c7da23646898688e5c5207be8502f17463b90912c6aefff3ab91b4e1df515d7b97325b59bd797764a5a5d735

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 466107292bd5db977cfe409e84980ad8
SHA1 29d1750d8be5fb5cd4eea03ac3037f98dd03006d
SHA256 f13e228132e5a1a7f98663a890f15747af5010ee229a4bb180ef4461de8a3bb4
SHA512 591540596002678707e289f581b336a4656a15b407f584ca3d57e9166902ed9b06cadf3811ac07589b49ce3d1cf87194a6a3a2e632360e694609ca8f86fed4e6

C:\Windows\Temp\asw.cb357a2c39b5029f\instcont_x64_ais-a48.vpx

MD5 feafc9c134138295adc37b97608e7da8
SHA1 d8ef74f9ee5196f3526b03551939ef0d4739713f
SHA256 84ad7d9cb28a7d35642169f8d748e5da8e4a0b98dd432c6308bb7366363baabf
SHA512 02f4c36ddb0c4e2445dfc51b49f75b0213c45262f5995d76d97d6bbbaf535398d802afe197ae2fa227de7195d361d1fa8a5b07ab83251a95fe712a3781005f4f

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 1614e70de37b531bc129fa59f7c8e2d1
SHA1 ceae933ab1c27e471a2ef8a34ba45547a553880b
SHA256 f27d1894b15e044b2bf33c293af8aeae315491cb4af2672b4ed35142340f0399
SHA512 2fc8379a2bcd351926b6f7b65a8a7c4c85a41b37dd7dae8e4a9ccf9d4028fefb267fb3a3485b0343d047d310b1505696b97688df07b93300394775e843d0708b

C:\Windows\Temp\asw.cb357a2c39b5029f\avbugreport_x64_ais-a48.vpx

MD5 a9eca00cd4015ba86f9f6c9a5dfb8326
SHA1 9a6faa7fdb0e88716e7d9ea8dce5ab3dbb135076
SHA256 d269ad4f899ca2cdb86185931311f3c01b6e8a8e513421ef6b9d869f5c04b74c
SHA512 16af5e8de4100ab1ea8dbcb04f1e5b7733b7fbd43514a3f9f840592ac1afad62d4619b923a76b1f6dbed7ec772b3513d8f632a6fb925461e4ad4c37e4f2722a9

C:\Windows\Temp\asw.cb357a2c39b5029f\avdump_x64_ais-a48.vpx

MD5 0945efa037059e768efab61aaf8d4673
SHA1 1ee6537acfadaec963d0fc8b22cbe3a6a33b8668
SHA256 03237fd13426593547d7461f7be9a5bcd96217cce980229ea009a5bd98ee65f1
SHA512 382b75380e376c32afc635a08b48a11cc63297781088296833d278526ab3e65fc37d25c4f9e91ece57ad025baf97e43d9e1afa4af354ebae34d43d5643c0b133

C:\Windows\Temp\asw.cb357a2c39b5029f\instup_x64_ais-a48.vpx

MD5 013420fdda6ec8a1de8997dfc51c463c
SHA1 f13f902db8ffb2bd91984b090530313f01391297
SHA256 b272662591c334f08b274c88102001fda20824f8b81cdffbf4f9079085fbee96
SHA512 ab0ed3001071edab997671b2929b067bcbab67fa58aca9b56284fd9ae16cd881a2a8e517d20c8a5f592bbec6c0d64d0a7074a59ff829672da13cc34fa17d4791

C:\Windows\Temp\asw.cb357a2c39b5029f\sbr_x64_ais-a48.vpx

MD5 e0773e83692a4c7b1d634e28250994f7
SHA1 bbaeb069aaa3935618e5f28da6f3f165996b0286
SHA256 d93fded96c702fc4dc8c7482e5e5ffa6caee97e31187b890d610b039017ede55
SHA512 096b165e254a213e009a4bb661343ff31871626e3092b665960488da8ceeb6e80fdf89d7bf85dd9ac59f89ad15199683b23e53fca2861b60301007ada4af5676

C:\Windows\Temp\asw.cb357a2c39b5029f\setgui_x64_ais-a48.vpx

MD5 fca65f25b34e4152300b34bc0535ef2c
SHA1 bdc1b00ade7fcb4baeb804ed49a27ff05b384d96
SHA256 ef97667682dc5b718235de3a8e5cd66d568a95c9a2d14897385077176c7bd7a9
SHA512 41119ff13c0d5d097141fcb6e14b8965c50756e0ed2f6ad5e718b1d1d45b4a6acff57ff11b32607f285395d1e295b3a96792e11634be43ef00e97dcad074829c

C:\Windows\Temp\asw.cb357a2c39b5029f\offertool_x64_ais-a48.vpx

MD5 cfaa7925eae8f368df6b54cdc827f276
SHA1 95f30e25fbc21804a2cc69477da1d2c23d3e0604
SHA256 586bc918318439dfdacfc9fadb2c05201a0d5f78bdfa4026b1bd63186190df14
SHA512 f79f367e99c856d4e18f3162c2ab12c7321863f63e1162b2939c82282d32a9ed90d23e79b54f9bc4962c1516c94e76b34bea89a0104a9291d72d514738edcd0f

C:\Windows\Temp\asw.cb357a2c39b5029f\uat64.dll

MD5 1eac709f7fe0e42741e40dd6570fc1cc
SHA1 5b153e03f643741c2fce6e00fa02ea2104f69c43
SHA256 bbe8a947d5d034816f135a205972a9c16235405042c749ff9ea691a62c8f888c
SHA512 0ac678e2ec443f24d3808501fc5042a1ec6a305ac0d08b47f58b38e31d664036e79866baca876d64f7b42d9d3f7e74a344eac5ae93cd2e826ce60f2f69e5061d

C:\Windows\Temp\asw.cb357a2c39b5029f\prod-vps.vpx

MD5 de1e918958eea49080a55290e029e247
SHA1 dc3dc40c484cae183cf0bd29ba2b7ec74da4da21
SHA256 8091c19eb6929601b44d9d55c485e167b91ebf96116813a636c92276803e8f49
SHA512 e7f310e8f8a22c632b6d75b150a4d31f4d6f768df7b16217685cff37da8310747f06128be887999376e343a8b5d6efb5e3afa0eef68f8bbb3a979e75436c4d84

C:\Windows\Temp\asw.cb357a2c39b5029f\part-jrog2-157d.vpx

MD5 592bc44fb4e3fe5eab8229b761ae6275
SHA1 7cf9b924426d6d21e6397afa9c28e72784d773bb
SHA256 cd93e864cb90c39b1756d3cd3d62e7a554897708e0e6790dda91650c97f62e61
SHA512 bdb33f7ad03ddb046c55da2f0557c0d52fea798828eb07aeaeffb49f4f209b31b91800397a9f7ab400908d2e11e6af27cc4d583bc05df93ec995fa5f191cee56

C:\Windows\Temp\asw.cb357a2c39b5029f\part-vps_windows-24082500.vpx

MD5 d5a74bc7d3834ec303b691c35c8842d7
SHA1 08f7a91ee73c772f040f34e58f8ff68f33d1d686
SHA256 5f2ada806c768aa14c06713a2c279352a048eba96d7b422cea1214801d4c9fa0
SHA512 ea8cc86e206cc9ce58b0651926d6e6cbe7b8e81fad4d0b2f4189fc210fe56058457c86ef734d089d63e7a58ca5d4fd1605569497d56c88c9424673cedfc4155e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 c804edf03fb771cb41b8918e197e5b0a
SHA1 4a5773da59d93d71061dbb0ba7d6d42a01a8358d
SHA256 512357f77a07cbab5564d509f53e83e58ca20364ba1a76d2fc4e7c717b8bcd81
SHA512 9308d1e9d8f7cfae533a1ede525daa89de58769cf7da6a567047aa3b7d071af6676bd4a0e826aebe512a19b745fb108f6eeef37c8616d294b3eb7555ba0fb4cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005a

MD5 0d2283b0df70bc0217118f5c6d1fd836
SHA1 0aaa2e0daa0f0671fbf7817e222fcd777be523d0
SHA256 fb02c03e84b9a15ea357644f15643bc90eb9c6ef6532e1c82ecd052df34c2abb
SHA512 16071fce7468cc47fd7a57dc6913cbf41e142fd16b3f145dc30b13fb4a84a05fa3211d3b435ace7378c76682a1afc49e45d180eb88f6d32b0deaa2266196b2f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 293b5e50227b1636d5fa62003fe68583
SHA1 ab13c86afcd0e416a4a6c0733266e09abb24e471
SHA256 0ae6f1b4059fb91bcc1e7e0f54e20c2601f480e83a2a29c9a058feb1e570b30d
SHA512 d92ea59f2be8c8fc9a90d16972c543881067ce1e08b477b9fba4c29623c547425080a296cf0761992828c43fe38d08634d8a589255e862d9537e0e9d6973dddb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e8a9b16e98e9948fa09eeb0a62899389
SHA1 aa698655bbe1635abbeb599f9c4d8d23cb661545
SHA256 4e07ed5c325229fd836497678bf7d7f398ffb387dc906377ef6622f23df6258b
SHA512 97fd4aa0a241136af787f64496d67fdd933ba3bbddaf28ec902eb0292c7c950eac2e3bb1174f9cd4c9d907fa85890553f580af98e35b219d8a0e258e1ff3fc94

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000064

MD5 b07f576446fc2d6b9923828d656cadff
SHA1 35b2a39b66c3de60e7ec273bdf5e71a7c1f4b103
SHA256 d261915939a3b9c6e9b877d3a71a3783ed5504d3492ef3f64e0cb508fee59496
SHA512 7358cbb9ddd472a97240bd43e9cc4f659ff0f24bf7c2b39c608f8d4832da001a95e21764160c8c66efd107c55ff1666a48ecc1ad4a0d72f995c0301325e1b1df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000063

MD5 209af4da7e0c3b2a6471a968ba1fc992
SHA1 2240c2da3eba4f30b0c3ef2205ce7848ecff9e3f
SHA256 ecc145203f1c562cae7b733a807e9333c51d75726905a3af898154f3cefc9403
SHA512 09201e377e80a3d03616ff394d836c85712f39b65a3138924d62a1f3ede3eac192f1345761c012b0045393c501d48b5a774aeda7ab5d687e1d7971440dc1fc35

C:\Windows\Temp\asw.cb357a2c39b5029f\asw0fb1387c26a56d5f.ini

MD5 4be89e0bc098c61e97f8545ca0d1a8fe
SHA1 9580aecbea16c0047926e56ab6bc13d34151f16b
SHA256 8bbd5d86118430a590f3f83987e5e0e2b890b1dc384adc4faa3a30e710a9f166
SHA512 615739a1d138eddc982901a62d91cb5aaeef161d5d0108ebe2bd63f1daa95736d00a15f07fbb1987e70da5d987eeff24fc4cf6a9564b7d6d49b2fcaa17f58caa

C:\Windows\Temp\asw.cb357a2c39b5029f\config.def

MD5 05ab8adee71d081432c1f8e2d010fa46
SHA1 148c332282fac76d90f828afb881daec9165bef0
SHA256 89f8e891a8324f5748ebdd84c69e055ab65a96094a482f1c6b6255456e8236bc
SHA512 69a84bbc5a35bd8bda48a3201c6377a578ae923f186efbecf2b0c837107aef9eea5a585f8fb57068c90b3d3125860b3b452eb2949b4a5afa508faa848b0bc9d3

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 ec11267917576e545225cea8a1e235e8
SHA1 1777dea850fd2b0d3de007ceb7f6aa871b20ea8e
SHA256 0ef75804ced6e16ff2d26939b15ab2a9cd4bebf321ba0ffffdfd1438b9eb7c38
SHA512 402f63ad71246b710d1824923f6ebf4e1860e2c906d3630b144cad5b501c152304848290b58e348c47f3251add443726915956f7deb5443146f06466cbbcba13

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000067

MD5 f930621607e050dff86f94bbf4806b73
SHA1 d06bdf16d5794550b78713955629c465b6970676
SHA256 fe97ff9a43f7f196dcd9088da3818e6f80ecdc2ad8937a5bd4a52c8b3979a09e
SHA512 df4c634c95cbc63c44c0f884817333fdb3965d225fbcf008d134a12ea99d05965b043c4f74bbe57f8356fd7f698fde30fe34638387ffcb8ca1226fe7c8b00cb7

C:\Users\Admin\Downloads\Buff Achievement Tracker - Installer.exe

MD5 a870815137dc74be291441b10784f315
SHA1 804d8f889c794b4c9fe3189a09e561b6dcfa5696
SHA256 ee2e982db654be8325d049b595c883b0f4a7e6dde12cd0d3ecdaf60390fd61d4
SHA512 6e50b7573244fb7208350beb5c8c8a1a2d85c643f3e8154b9985ea7577e3daf95e4a710b493d5c25833ac25ec79c4a7fc3eb4d564cbddbf08141c045a5374e23

C:\Users\Admin\AppData\Local\Temp\nsn4ACE.tmp\uac.dll

MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

C:\Users\Admin\AppData\Local\Temp\nsn4ACE.tmp\INetC.dll

MD5 640bff73a5f8e37b202d911e4749b2e9
SHA1 9588dd7561ab7de3bca392b084bec91f3521c879
SHA256 c1e568e25ec111184deb1b87cfda4bfec529b1abeab39b66539d998012f33502
SHA512 39c6c358e2b480c8cbebcc1da683924c8092fb2947f2da4a8df1b0dc1fdda61003d91d12232a436ec88ff4e0995b7f6ee8c6efbdca935eaa984001f7a72fea0a

memory/11260-9267-0x00000185955B0000-0x00000185955FC000-memory.dmp

memory/11260-9268-0x00000185AFAA0000-0x00000185AFB44000-memory.dmp

memory/11260-9269-0x0000018597170000-0x0000018597184000-memory.dmp

memory/11260-9270-0x00000185AF9E0000-0x00000185AFA26000-memory.dmp

memory/11260-9271-0x00000185AFA60000-0x00000185AFA78000-memory.dmp

memory/11260-9279-0x00000185AFFB0000-0x00000185B0060000-memory.dmp

C:\Users\Admin\AppData\Local\Overwolf\Settings\SettingsPageBasic.xml

MD5 26b513c1d313195cb4057fdc39890148
SHA1 053b9cdc0b3ca410a921f13369ced1eb37cd16f3
SHA256 20269f221d6d70e4b857e9fa2e92c5f5d04b6f9132aaea6a6387e51acf9b7073
SHA512 777bcd2197c794a532d4a22ad3e3aef94b1a8bc20a2f7108b2134d7748b8f7e01546f34d3ae0974005deb68bace19e9c04d04abdafc8dbcbf91719b4088930dd

C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\UserInfo.dll

MD5 9301577ff4d229347fe33259b43ef3b2
SHA1 5e39eb4f99920005a4b2303c8089d77f589c133d
SHA256 090c4bc8dc534e97b3877bd5115eb58b3e181495f29f231479f540bab5c01edc
SHA512 77dc7a1dedaeb1fb2ccefaba0a526b8d40ea64b9b37af53c056b9428159b67d552e5e3861cbffc2149ec646fdfe9ce94f4fdca51703f79c93e5f45c085e52c79

C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\System.dll

MD5 7399323923e3946fe9140132ac388132
SHA1 728257d06c452449b1241769b459f091aabcffc5
SHA256 5a1c20a3e2e2eb182976977669f2c5d9f3104477e98f74d69d2434e79b92fdc3
SHA512 d6f28ba761351f374ae007c780be27758aea7b9f998e2a88a542eede459d18700adffe71abcb52b8a8c00695efb7ccc280175b5eeb57ca9a645542edfabb64f1

C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\DotNetZip.dll

MD5 190e712f2e3b065ba3d5f63cb9b7725e
SHA1 75c1c8dd93c7c8a4b3719bb77c6e1d1a1620ae12
SHA256 6c512d9943a225d686b26fc832589e4c8bef7c4dd0a8bdfd557d5d27fe5bba0f
SHA512 2b4898d2d6982917612d04442807bd58c37739b2e4b302c94f41e03e685e24b9183b12de2057b3b303483698ad95e3a37795e6eb6d2d3b71e332b59deeca7d02

C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\CommandLine.dll

MD5 0923bd44af739d27507a8a158c24099e
SHA1 1c9887a3a63592f774b7078a65ad5c032e6bb911
SHA256 d6b2d3b752b0eadbd86bcb25580c7f9ac591b74a9492e30307724c3d55b480b7
SHA512 4bcc19e126ade059841aef7ef13ec168f913dc961b0ed061c90dea3bfdd5b9ba8cb3f07ba740af55a857aca1520b458bb2743e909b31707ad2689e0b23b74cdb

C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\utils.dll

MD5 aad3f2ecc74ddf65e84dcb62cf6a77cd
SHA1 1e153e0f4d7258cae75847dba32d0321864cf089
SHA256 1cc004fcce92824fa27565b31299b532733c976671ac6cf5dbd1e0465c0e47e8
SHA512 8e44b86c92c890d303448e25f091f1864946126343ee4665440de0dbeed1c89ff05e4f3f47d530781aa4db4a0d805b41899b57706b8eddfc95cfa64c073c26e2

C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\log4net.dll

MD5 f15c8a9e2876568b3910189b2d493706
SHA1 32634db97e7c1705286cb1ac5ce20bc4e0ec17af
SHA256 ae9c8073c3357c490f5d1c64101362918357c568f6b9380a60b09a4a4c1ff309
SHA512 805cd0a70aba2f1cf66e557d51ad30d42b32fbafcfbc6685ec204bc69847619479f653f4f33a4e466055707880d982eb1574ddab8edfa3c641e51cda950e2a0e

C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\websocket-sharp.dll

MD5 af01389110e8914f465da9cea606acbc
SHA1 faff022960f08f4f2569d96ec1c89cf017b832a2
SHA256 d91104b3c5eeacd5015d7e60345c180a057a55aeda2faa27692f52237edc90ab
SHA512 b11b616fb89f63433d3eb588a6ea728ad97785c945dbb425bb80177b930d96dcea9531a7533592f44c85dc789d8150bba69cefff9d6edbe4df3f37a475361059

C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\OverWolf.Client.CommonUtils.dll

MD5 9ccbf60c264e4a427cb9f19fd62d4083
SHA1 a8694b91f76ac2b774e88cdaa96ba28bd9b65ab8
SHA256 ca42fbe550e83588e95c1734155301b4dbfd8e3e7d9cb2090415f990631c42c2
SHA512 8e7d770fb98f987e55679646cd8534d9baa8f6fb24247dbcbe750afdb1ae2e623e9f1efff930cf787d0cc70fb6ee26a93a8076f05a2beb2aa5f202ae29234d1f

C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\nsis7z64.dll

MD5 284c46af1fd2ec3a60ee0c28f276f2a4
SHA1 4d4d41c0af12d928e4e553ab6b80e6b4ab8007bc
SHA256 2368be6d8b21e0047146d3f61f90966a71d0737eed0146bc692b59f3cac97793
SHA512 ca9e4ef79c9c7c5f2282ddeee34ec39a51cddf26dcad4e9f2e42230499b0b898ac2dfd33f25438aa995741d23037fa01a0269823c283b234ecec0f155d3c05ec

C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\SharpRaven.dll

MD5 788694dba72583983404600a12e516ff
SHA1 3eb07fa8d7b8694459bb39aaa4eb93179b69e201
SHA256 bd81b74c89e7d0fce89d8202bb1f403f298c019fc8076ea53f765f3809060b4b
SHA512 35391c412665cd13a634a114c5c4f77bab5682ba4317065e586e938e35bd08438380337b0ad92cc19673dec6349a4af38524e767508396eaa564bd5ee0629d19

C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\Newtonsoft.Json.dll

MD5 98cbb64f074dc600b23a2ee1a0f46448
SHA1 c5e5ec666eeb51ec15d69d27685fe50148893e34
SHA256 7b44639cbfbc8ddac8c7a3de8ffa97a7460bebb0d54e9ff2e1ccdc3a742c2b13
SHA512 eb9eabee5494f5eb1062a33cc605b66d051da6c6990860fe4fd20e5b137458277a636cf27c4f133012d7e0efaa5feb6f48f1e2f342008482c951a6d61feec147

C:\Users\Admin\AppData\Local\Temp\nsw53C7.tmp\Microsoft.Win32.TaskScheduler.dll

MD5 b464d8a50279bee0a40d8d58e4b7de32
SHA1 e47820e4cdf19fb2332e59eebd746f8e86d34c4b
SHA256 f18026eb78c2b81a5c26fd9c54ed24054074abfe0aa28a6d2f2abb4fd8bf4a99
SHA512 84b238b8d9b2bbd0ae857b12ea602a922d370a9134c64b2b05fccf5373371952b98762095d66e104158e275592bc49beb9619e45c64286cbc74cf8ca3e7ad936

memory/11260-9446-0x0000018DB30A0000-0x0000018DB3846000-memory.dmp

C:\Users\Public\Documents\gcapi.dll

MD5 3ead47f44293e18d66fb32259904197a
SHA1 e61e88bd81c05d4678aeb2d62c75dee35a25d16b
SHA256 e0d08b9da7e502ad8c75f8be52e9a08a6bcd0c5f98d360704173be33777e4905
SHA512 927a134bdaec1c7c13d11e4044b30f7c45bbb23d5caf1756c2beada6507a69df0a2e6252ec28a913861e4924d1c766704f1036d7fc39c6ddb22e5eb81f3007f0

C:\Users\Admin\AppData\Local\Overwolf\Log\InstallerTrace_2024-08-25_07-08_10680.log

MD5 be8458cbde7810f95021f8fff3e05ef2
SHA1 122f3f388527fbcab1580df25afe99c02c8d3e71
SHA256 255416bb4ccb3458c67cabf29876ba97e5c8c570b12f33ca9ba2d4099097a72e
SHA512 bf421c389e78e6a4f19b27cc4ec35c85d6333b1608bb86bb7ab700dd9d63e7a9f1cfe69971f44a0e7cc7bff62ece71a2770db450fb8a693741d617d3f34c20d4

C:\Users\Admin\AppData\Local\D3DSCache\1f336d8ce05c79d2\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 85885086f71da23b3706f8c4fd455f65
SHA1 6edf2e6bad6d3cc6cc79f79ceda05a47d0699442
SHA256 ff81443eb33c235cff7f6a93a338f7543e52969ae38b3b8c3f85d83630176ff3
SHA512 388a6a62408495c15303b659f5ed5cef66c0e8020dee7fa07890fe43684208faa6cdb7a7b792cb0a1ec9f69ba60ee815df35b3cf968f996f3950ed741ba5fe97

C:\Program Files\Avast Software\Avast\setup\Stats.ini

MD5 dbfc69cb3f90cf6d5ee3faceed7135a4
SHA1 db9af3acca7797ad7a0a15763ef7ae64dbaacd96
SHA256 90297c35697104ee543f735055474b3730ed19314619fbdd219e91647367a1a7
SHA512 5bc19406a940b2142a48adb0c9fce90bf1cb68849ae16f726bbd6a28459ebe756eb881afd462fcafb5da06cefc27a176152b65fce109f0a39feafc0bab33a94d

C:\Program Files\Avast Software\Avast\setup\ais_cmp_bpc-7e7.vpx

MD5 6a1910c51f39d1d89946615ad7c532f7
SHA1 584530581f5f30d09859d3031595441cf9ddfb04
SHA256 8d5a3de2b259d2c0fb35ad6d424ffa1dc00f890ace85b7c37932aeadb6482359
SHA512 04fb819b28281d28ad0fc97ed3790223232c79de19ae9826254db144ba6f944c811a37c5f9e5ecc0c6e4dd6c283053c59360aa4d9a1023d17ceac94a2a3f5112

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 635c8c6433aa641063b9ce8687237349
SHA1 3cfc6957aa5543095d1a75006cbc3f8dacf3fff0
SHA256 65910d54e7ce4185dc2991f88c3491da958861f00cb5474dd652520374f46667
SHA512 80e2a777ebe3d52e85bc17e2b14034961b9c21acc0e3826497658b9804a53dc1f12ac9032409b789511380cd9855e7ba8359f2565a65425ca9d92f1d43ef7956

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 d24be09a263af68a30f6ed5c12e00ac2
SHA1 1f0b87d3ac60ef1defc78a808796d46612b84482
SHA256 6517b773ae15bff05d30e2717eebf48dcfe905d33121b4c6db240a244e4625d0
SHA512 ab0a68c0348b26f7f143c1f8ddb37eef5aa86d1d6a6fb79e1bbd02d838812862de84469236c24c8c0933c86b669729427cce9fa910030a367c330caed92cffaa

C:\Windows\Temp\asw.cb357a2c39b5029f\ais_cmp_swhealth_x64-8df.vpx

MD5 12473b352ce7468ed0df281ab63cae7a
SHA1 b5e3f218445d49915cf912955205af22dc0e1838
SHA256 6408d23c8e68097878086a5627c81de7db032ecca69d282a6c3b6e8684ad85c5
SHA512 eb4089526afd6f45e6097685fb1b2f943477fa5eb2fb0ca702083d9d9425f0f414f5f4a05d2fbd226362c9fc41f89c719f13b8dc8ad58f53ff932f70f1c95563

C:\Program Files\Avast Software\Avast\setup\ais_dll_eng-887.vpx

MD5 24c1ba1221544007db08b39196b08a35
SHA1 e6ed33311c7a9b8001429a5a63847bd3808fd0df
SHA256 bf4a8700a6335d4e322ccce957735a080dd1a18b93bb69a2bfa353b6cef38943
SHA512 02981130c8bebba5001cb277bbc14fe0c916b7f39ff4c94fc294655fff5a63409eab697078249623a5411a4fb285e08766de7e04177dfc5377042c3d55f9420a

C:\Program Files\Avast Software\Avast\setup\ais_dll_eng_x64-8df.vpx

MD5 5bcf4fafa6f00d064cb4604750aa606a
SHA1 fd4b91a725ccae64292f2bb9bf13add071450b0b
SHA256 6ddbca44543fa211247805acc807aaeb7c89dd13d9a79bcb3a4d1e56b49e039d
SHA512 b2941d3d5ba2461f0cf9f8512c91a0c7545946d3dd2ab9179307531d101dbdc0bc6226842f6e6559b0fa33c1f67e6aa24cacadece67e2c8ad333bed269515e4c

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

MD5 314438075c01475d059bf60caefef1f3
SHA1 2f087531823b0ef07a280ac7952d6b0e0833ae6b
SHA256 0003dda8d1b6bf7cb5fc086c960d7d9e838f68ccc7e892d5ec21a26eaf084745
SHA512 ab4507ebf547b04cb26fe3e8ab23f3bd5277e2365eec29fb0e855e366a983c0e5cc7d3ac3135b28a3c71714bcffd79f6136b321d56e97063cf8764d861e08633

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 92c683d6005b32eef19539debcca489f
SHA1 bb0a2bef4a4b8c4b6de26b95e74e6b589c6744bb
SHA256 0224f0e62bdcbc81006f6e535c7f32754b3d53fdae3b65afabdefdb4550e6c5e
SHA512 f465744e224b1dc324e5b58f3bb9d919883ec6dc38a8b185073047739db647a981035bc18735448a519a1d7f1ba4be620d5d5ca621d242dec4ffc8d5f047457a

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 664cb8de24308b8572c32684edb40f1b
SHA1 1b8e200d2ae4d8263f5dc7f7f07aad46c4a9c2ee
SHA256 5a2d90f99db7c55f08adf6eda6f86926db77dbf3ced17019ee54a233be24bbfb
SHA512 266a0e5c08fb69a9865df968c9d607bc04a9329d7bcf76f413a0865ae2e76163c104ad8483d1768ca5a48e3f115dc7204a9520734aa95239b86f44e4d1381f4e

C:\Program Files\Avast Software\Avast\setup\ais_gen_protobuf_x64-7d4.vpx

MD5 907ef9a337e5ab144022f60dcfde9b51
SHA1 93676e5634338b42b54df4484d821ff5d5298247
SHA256 804270693ff4c54b03c4fb78fc15e1ed826b4b979e60c788e5f944246055fe8b
SHA512 b212bc8d17f252041364f301cfe34e528ff7bc8e791639683287bc5fd2554dc4e755513fe4e7f319f06f2348cf694c6c8004798f62fbac99b5b165c411aa70da

C:\Program Files\Avast Software\Avast\setup\ais_gen_streamfilter_x64-95e.vpx

MD5 8bc4fd6eef1dd087676cf34f31884fee
SHA1 7a4c965371693ca57abfac0169f36a9bc12de1f3
SHA256 a57f5016725ece4d151baf715426e865124f666f3a2627b1152d1933ac5eeec5
SHA512 09d12a3b5bd2cd33c6f982c64af4607b474906bca4b04cfd4b8fc180548b23d3dee015af5e2f5b7993c91be74cdc4f2cc158cba79745246400cc42ca92719592

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b8965ec18b263c25126b15c9c5117a07
SHA1 741a9803f4b69fd4c76f9e63056b08e84942ed24
SHA256 b4b7ad23745355021bad30794ebecc7255a97fcf7948464abc79f4063b2de78c
SHA512 7e49cd28b93fdcc89d8e12859cdad97f0a6777132fc575e30b0d06870749c4c1fa0429da49aded07d6707582f361fbe886e7a8eb9ba9e75750a6673539f95097

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 56dc6e3a50cb346b595bf95e20e11985
SHA1 97bd5ca80c82e53b950058bdd292ed79e9974ea1
SHA256 adddcaa893d9572d4164140ab4cd2f50e9b787ff1142bb39835fcb4b645fbc81
SHA512 b541cd48ca019cb764b921c6441544180da0b515300590e7c024c015756839a4307fb9f287156aeafc2b23097e8fe449d6fb91d8c05e4c392a87c81dce6ff438

C:\Program Files\chrome_Unpacker_BeginUnzipping6964_34593562\manifest.json

MD5 7eedcdd2a0fb64fc1400c8e84cd57e6d
SHA1 27a721c04ff8beffdc326a870cb25fc58be57b1c
SHA256 b411803a7f72f77780094b975b2a5d67c011cd1c79523c30a0473a0a72fe3842
SHA512 335a3d4847abae684ceddfeb5036a6cd6e30f8b15b1783de7c65a3ce1bf59b78f5c5d82877702918833cb26238f8bc6d09217c07cd58832e14f83083ebfd175d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\SafetyTips\3039\safety_tips.pb

MD5 73ff7e75b2f2b35ea938245dc281ab80
SHA1 6ed1a2c73d99b1baca893b0a706c2b3c9eb88179
SHA256 8853c21ac4bbf1df26a67809819676dd7b88fa3c5733bef7404dbd8c2d6a6c63
SHA512 ae4b4b7a5a11d8398683f5014609e08f0ff4423e307a6dc558c56222bc88bd015781c85f2d3a12d1e2745a5d04f9a95e5975f5329e03685c0a3b01e7abe6bdf3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 7cc6f4ad620ccee546974b004ff8d399
SHA1 669892b0d7c01fd189835af59510e04a6eef742f
SHA256 47f4771aad16d52b07dba9d4105dc0b3411627ed7c4e48347fd3630a7d5c6672
SHA512 ba177332c512ef9ebdf3f6eb052c9165bbff8333eb2550571d181b638547dbc9f33a1a5676bbd9e9a07aafd8f9510f906b29fbd129a22fc9ca734442c0daf818

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 1d958f0445a89c3fc99f9b71eacd6305
SHA1 23b129ecb654117e12349a3e02ada7e037daf44b
SHA256 27340b41ebd9a4fbdd06b46dcebe12f167887dfa5a8acfd872add6677082f6a3
SHA512 85833e245e9a744e3ab169ae252b5626f96e8271aa23739fbcc5314c068c4b86e495b8b30e3511b71dff92e3e5e97decd2bcfca23c478a2b077686ccef766284

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\08b99d499107ba17_0

MD5 aa026c31d8bca19c4627e92c953aaf5c
SHA1 491f776f11148f98a5188c05e20909ca80cd649a
SHA256 7ab905110f39307971bc2a522b87ce1f8701b262a9c2700f98addac7eb879df1
SHA512 a4359fa67429cb6d060c315d576afbcbda79b33cb8b0f26356f844f30ed4addb27cb139671ca4ac17dec20e202ec72a26e7774cc6ed8c3dc3239d9bf83528931

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7a29efad91a1117_0

MD5 35e03d7941c02585c2f74f5d9c70a23b
SHA1 b258d5aa3fdbbde2cb562b68e28bc3c3ee32cc1e
SHA256 0798dfc1965d3c1ecd681ccbd703cb25d049393aaba617ad5f752ee0687f52b8
SHA512 f20957c815b73f151a4652b80e7d02334a7fb19d471164e48e068276d8bf86f9371dc602055cc40f5c64eb41ea0a879b4c6186613ede0f912ab936fac22de04f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f89251fac2b69325_0

MD5 346a8e26df9acdc890637528ae492cc7
SHA1 4dc0e102887f14b5c311fa979f9852f5ec725b05
SHA256 07bdac1a6c48b2b3fc2633edccbbae690b98c42c608e247d53a4cac8c481c23c
SHA512 d9b6c22f6860b547a23a688396abd17a283e1c4c62b5de90f95d76dd832642f60aa3685751015bffccb6d81f5704f8605386a8b9ef431f76d271d18727673ba5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2e4bbad99a372cc_0

MD5 8f47153508eac586c28ce902d4187304
SHA1 16b6daa73f9fa8b8d02571aafca5a8de0cbfaf3f
SHA256 ec4285298b967267f687ffd44ed868540458685b4294252e0e2d7582fe0aecc6
SHA512 e8a07b476872055d4939ca9385f7f8e61f25801d621f683ac54054e424eaca2a9d71f1512a72fd6d10577bfe3124ab0d83443c96975c3b37eb0e1f0acbd9ab4a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a267b7c21d8b8c9c_0

MD5 2f652475df5164e1e9c1eb032f54a4f1
SHA1 def050a065dcc3df650bea992ac6ad8f5fdff4c9
SHA256 e6d3c8dfb4c0131ff43664eee1b205b6a1764fcf072bc4eba88a424daa84678d
SHA512 dbf1cd03741e9e1612aedd512d1dda6844fb198b0ec8032124d545b3cb9467747cea3d91c6649fe6f68578e035d19c3a77f4d079bb285c82385a4f367b8b5c94

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\83d6d3a772bbc707_0

MD5 98ec2a25bd3e1aa987831ceaf775390a
SHA1 3b6d130a8a09e36a9a406cf386b1aa0c320e941c
SHA256 1850fd9fd4b894043c30c023d3f13ac3e6016e45ea98605e62a0185640a81ebc
SHA512 d02f9f7e36f8e4a5bb5ae9c3fd859ef263c76d00f355fc29aeef0712db5c5adea1c4d702e1bcd92c67c5c7256dc1721f99bf9e9010ced27b8f8e4e36691cc261

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

MD5 66882c3f6e78760771c689672612412a
SHA1 2de4ad8c61c77c2d66f3bac32ffbd6b79d8b4ffa
SHA256 2fd948799d45ac81bb8d4e027ed509b651c8bccae8d8ada3e0eca43db50c2390
SHA512 312a3e0b04c0cea72e508548d8579f24896a4bd5030d538a7acc8dcb2ca3b0576f355889b2a9497562f670adc6da9f579efbba0b372ef8dcdfb100c1c323fc71

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c4545010b9c4b344_0

MD5 2f399a18a9766aa43c4ae0d9a012303c
SHA1 1d1db81d750e4bf29bbe5ab118f1fba1cf83d150
SHA256 71d89dda3045f907b14418dc54b296b4f5f8cf2cddcc6f6cbdce2e4e37194d73
SHA512 1a520eb0d930fb7d2c15b693f2ccd9db053c8af59d37b6481a4897309d8af5f69708df9c89d84d6ed4b83cf49dd5841e0104686b34063735f9e721893084fbc0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aa20c296787a3f88_0

MD5 edd0af1e330355cfa364885630d10130
SHA1 6f9862bb54d7261e28bcf08d9affeea54942ff3c
SHA256 1933396e061ecb1f5c3d7c5c43b3e5cefbb2db2cdfbe6ca58bf442f338fb2d78
SHA512 879288b2e341a0e7eccd16c6af83fafdb8dacc4053712f473b42be5aa96a854b57eca71324d99dcd45aca08aa9f07d8e8d6313601cccf7d801e7a7caa14df227

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b1d7d09e2437e8ee_0

MD5 400a4e03dcc2e275ecf638e2ca48734d
SHA1 d3b291eb0dd39b3bd5eadff20afd830010224daa
SHA256 5595d9439bbe0313ae09e45ba9f066a31580638adbccec1e3c949d2033e2eacf
SHA512 dfd75a438fc7c60f48be988f05baeaf3917dde94e418fd481cade3df5b175c815ed2e102c8e944f55044851a081993b64280480f2c86e74785409f86df48d7a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\edb3b6840a8ddc0a_0

MD5 2a86c9bdf59225da4294ffc93e814dde
SHA1 2ba48a838357236fcd59a59ffe19aff274538b16
SHA256 4d3d7016f9912b5633803f1e37b649aac56bd698925b0a5e69b1d2c6adbe9a3b
SHA512 a87f899a68c561e645233674bfcedcc6e99d701d0959ad69a74b79e56c265be018ec72b7e9e2ecfa523eae06f7825d19ebf65abdf2ab80be8a5f0548ee2ae9c0

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG

MD5 7bc454281e78c985b0f7afa37859070f
SHA1 3a78ebec35dd20d58149262d185ac3774a766d2e
SHA256 dee51715e69e4e24ada8ff9c48f1a6bc4d0d9d2021aed03148bc6d989881e698
SHA512 b007dd78d61c0a7a5f5a456fc2e3ff049f89d19dbe976ab31cce25f7fd267de6347aad16f3651df609cd3b88eac407323424e58fe0ce95c2722e373a6463c5ad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d3b0ad57bdf7db9_0

MD5 860c7fce22636b32f763fa3faa3677d8
SHA1 dd02905ec25a0fc7be695fff066259ce47595e21
SHA256 d09c812dc73b2a111781861945083696afc4492df063c2533b42b6ed9ab063a2
SHA512 f8b24785c6f85e76d0d641519581559e76bcd6eb1d4c8d3f0f7455602571271b8d2fffc957b499dbb289940d05815b3811638fd40a961c0f95df306639376989

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daea348421cbc209_0

MD5 38e22742ea744208291225a65eebdb9e
SHA1 4a33f468ca08edd6c481efb1a87ac6f3dffc9f4a
SHA256 531c670b335be44404b95b77928ee9dee1791a432e8ce1835da2293b58b54aaf
SHA512 6bf2efe541b0fc063114e974c11d9e4020b15c6e888352e888fff49e661501163b2d47c455470b422f91d8c8e03b0cdafc64cce9aeace4614f95029a7cc16c56

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 dc48986f8a61fe5407296c700605449b
SHA1 b9778bfb63a4edfbc59b681fcad32961e5e34a01
SHA256 e57fe914ef5c013933b111db14c0222314d84ceb28db34bf8e0ca11f2e1260c7
SHA512 0ea7735ed829f4c5caa73b6e8340e2f7874e6919d2880f2f2764d40a3d92afb25733e81e61d15f638213a7d03455fb702d17c439ba6679637cc474ec1517543d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 01f15a68f9680f899d7ce081df8d990f
SHA1 4e3dd476c72b9057c7a6810cc0821080b547f322
SHA256 52464255444b91924b6e3d5ee14d68ba5eb0c8d8180db9993b3530d44e4a1fe7
SHA512 dc3a5faec4851e4e3dde9f5a326789d42e508849521794cc2c2634acee82082cd18548b8f5a7ada0863132dbafe9a83c297369f3e686d541c911c029726c76c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b6422bd952cfd9dd43806f3f3246b980
SHA1 a2c565d92cd5175a263ff2c87e670d8a327965f8
SHA256 8b4d55a92ef4f106c1f553292e2ffab2e41b6ed0d25d79202a1001ae350b51b6
SHA512 619a4f02c561b7e914c1a854645c6efd54eb4863459d344c9370159212caf337582eca8ade0330fd11d9281a2d6c94347607f5a3ac8e25ea0976007c811dfad6

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State

MD5 726a94687d772522ef97782d4a5e4ed0
SHA1 a79921497fae50c4b105aa0eb8805dccbd3391f9
SHA256 7c64347a6180fce2eb31e1b3f96709997949d120621c46f04ac2aa167f833e09
SHA512 55439a8185b7ec5d029bef448742eb913f55001c2d4de751c73ce5cbd5494d6e7612cb75321f4eebb65e4704fcba99747e6dcabe32f8bc2937db697c579865b9

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 e57c21c5c6bcb68af10efd16364ced3e
SHA1 7042ab5792bf6f814f4cbfb2bf5c0f2d356344f6
SHA256 d2aff7c1aff87868461fdf0530a3327c5fdc09e57a824d61a6ddd455b9c18a29
SHA512 bd940bc5080005ab2934a0e62f676c896b9f9d4d00da74534eae21c58cdfe7989c22e2364972acd22649f3f6db0a7a29f22b3e929056772d4b63cd54902d1d78

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 282f75f68bd7ebdb4bd13c57ddb10dc9
SHA1 253a9a83bb4f92a4689689100eac8fd29a9621d3
SHA256 82e3254f80ac9f9689bc6ed63aa21ce4538d3a1d683b0a7ad22333fe2bd26def
SHA512 1e48788b48a252e9f1b9d9789b21dcd871a90e4334065e06429cd193d2ea500dff820d0282d5c7b2c07d7904ccc498484747325ff67bffecd5f6869ee617f5dc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dfe07f2c15075c28_0

MD5 10bf3922c0c44885204152119ca0f69c
SHA1 491dc211101d172059c0667e2135e7d778668911
SHA256 00d9ea8de7a01c9785bcd6eae6310288bba959fcce010cc22c2ff2a70f0e8804
SHA512 40cbc60dc28961a2c9fef8dbf304dbb191ac28c3aa785ecc0aea83dad82f8faf121c2706e188a79314f4bfeb1ff3fd7753a86310d8b14f2980b45b7e74e94b32

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\41ec3dcbc8a76ca1_0

MD5 c891c73f6607b6471a8fdcca540ddc2c
SHA1 874350fd86d91be83f4470a03998703600971389
SHA256 d7704066717ddf5bcc7b9262ceb0d8e3d4a3ecdf1507c0216e2298ac8ccb70ba
SHA512 f515f12df59bd0c48758f64790e6f57fb8d84587aeb8c3d75d8fca4deed92a2024e5e7501b7659a33e229740ae18f332bb972edfc9ddb3126d43d4b76f7c3034

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a4c52b8d2ee31223_0

MD5 4c1522b1bf7b9e52db8159e04c44917d
SHA1 ea1ae7c740a3ca5615e1626782150da06616df2e
SHA256 2fcab82222a0f483ad7ba912619d3cdc0e253d862d7ea461a344e2839c7d99eb
SHA512 a2fcd3c39a9dca77150643f8831831f1a22ac79d0a0a05b955669a6b16e5503ac9d5b3a767eedf8f535039b4c60d59100897e4e5cee735d5e742005206f81702

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\580fd9376c2d4a3e_0

MD5 111b73776fb1ccad86f37a309dfb6adc
SHA1 b81f49c1a6dc16f8676895aaae5a37562326a315
SHA256 8956a603d8889cdd9436e11c6b0032f0efeedcb65e63dd31f375b1263aa69e4c
SHA512 6d887a6bed27a1676dd49c1a0e759b5d7f63cd3d38859591f9068172fbd7f4b0993e0b5dd380d1eadb7bf646b1968c1a91fa78e029cc0e5fd0cdac573b5cc06a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7e23bcf4dbf5c221_0

MD5 fcabdebc587f059bb8eb37f054efe4a2
SHA1 d182b7ba168dae69baae28a43b61946539f44033
SHA256 a4021cdcff8a1c366795e076a1a1cb51be59dcb6cdac2796f6fa9bbcf619dd22
SHA512 bf538e894650f39265f8e40bf9517da5ba01a1fa36eeff8dec0f0f2931e57d7f39a0ffa3355e269f58c56795000754179cbebf0672b4fad1f99038e85b5884aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5a994fe24b451732_0

MD5 5026b1a7a0370ef19bb855c4c3d90b52
SHA1 203aa19501b67376ab6c8732b04b8fa8ac67b12f
SHA256 f2f10c3593f5769b18ea52c32d8d98c442df6312429f43340153facc289294c1
SHA512 05a05e572ad2d65f7444d088ffc12b3f719a2dbf4ad1d1206f61c07e67f09ed9bfaed3b047309584bb99ba4535f9275b1b57f7ddf42576041553cebaff195e87

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\65202f45faa534af_0

MD5 38bb0b75c6526ecbba6f592eec77b9ab
SHA1 9cd0e7cc6d72b96ab9cf8c5fb5e31cec365c94b1
SHA256 6d9f2bb9c2b5e70cfba988421b2d308d67244587b411bcf21f0f2fe5a9f88fa4
SHA512 85aacb9e50286bb867fb9053f2c291c2152a5c62adf5c36448e9a595cd01a397b732e69b934a21e79681fb3cf891104a4ea21f2e8a5ed6619a80115a8da2ec44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0bbe00d9bf7b798e_0

MD5 e15045ae4fbacd591e7be12b65b72c8e
SHA1 cc67a865f255bef30e7b75932a88581e2ff4f256
SHA256 c1e82aeafefe8b9c28ea3cd89aa2811ff49ab55345700e7ff5c71ee32f0773af
SHA512 f0b66c0552e18c91a734af6f57407cf40fed5e6200f5e12964dd0ecf5f4a10c3c076e7e16ddb8910126686c8c363f5e82c4dfff53ba4bcf86a37f3c9f64e1a26

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c756c12f65ed127a_0

MD5 a86476b526b797754aa73acbd72ff9ed
SHA1 a6a74959c251d14019e3c22f7163d15c4aac94db
SHA256 9f56e2ff55bc9bcb5271fe0d4f425d21a7fc23b4700a6d191fde097a82f8972c
SHA512 082233512a28119094e9cd8b839bea5356000fd144e3b0d58278f28cd1d82bcca928f8de289fbef04ff9f527e9463ac1d86f6356c0e64b4fa44beee2c9d62c72

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8ee73a31bd0cce7d_0

MD5 b8aa2263c0934ef530feb23dd1e70e3e
SHA1 2944d228f8b25105832e75355bdbf78e144f11c0
SHA256 026d772633c6b1355cb3870b9e5523d3730f52898a880f2b4fab5cc371940dc0
SHA512 837a4cfee95f0f68fa3e5e06372e4b4abfecfc52f3422fe3479d681e7c11b6cf8c27eb852edf4dacc6a79917a7916563562f2e8b4fc7ad2d4528fc473a9f6701

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3f02c4494b1a18ff_0

MD5 1c84879edb801ac44d6d57ad286aa319
SHA1 f61271d4c82bd6fd5ab7552cdbec6a7d85ee7d1c
SHA256 0a966a0b9c5536696fa18f681c154288c38a664203616cb6e08c14738e24a392
SHA512 a00567cf099b1844d8100b4e701d97b5b72d0f81a9ee4502fe2020f3da12405cccf6fa87e26ac06e13a24d306157216e125532b5e3f91786c27040b23a57e23a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2dbc1c31fceae27c_0

MD5 196f01836631d710341cfacb15eda9ef
SHA1 8e3bf16844cc73472a553462a0f78533ba969782
SHA256 899a8066c136f9abe89c65e4deae7cd808de4f5aea50d9f7d9380b8d0b451b82
SHA512 cf19e8c264d96dd67edb435451c32db05e6a58491e2fccfa9e66cb1e4b0a14f1661f58d13417fbb2217b74157c16e4990275f4d48eb6ac42b00f90bd9fd85048

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e504183595893c5c_0

MD5 362c6de89819436e36e96518fd25000e
SHA1 4b758f393fd30e1a75a9bb6c1310f65bfe740f0b
SHA256 6892db0d3babddad21233bc04e9fd57409f871bacbd6562fe20711a37846004e
SHA512 e41189cd3b1031440e05201ef16a510047a8a4f5372c6948bc0a7bc611d8cacc47f1a3fb9cdf4ac73facc550fcd7320668c588e17397072a8e5ceb0b37e3a30f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9412c8b664751f90_0

MD5 e967fde0260898bb80a4528740315e14
SHA1 9b7b9a172536dd47131ea73129bc50d8e88bf6c8
SHA256 805989851983a358e6a193344e2fd45f9024120d374c16e8c4050dbdecf133b6
SHA512 8fd068551927f564b64f7cdd163c125375af4842e3aa2cdc19579dc635aeb8497972a00d693a0486402802a297c08a8b15c1e377f680dd799f3615c054320c1f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d37cb16ef5eb861d_0

MD5 0ed3db16f31552b7ff91fc2ede743c4c
SHA1 2a95263d630ff75657d2ebeb375cd3f942e2c0c4
SHA256 ab1fe912bae92bbbb6513fbfd5c5bd82720465ed7458cb428f6d5c0d8ad13b2c
SHA512 60f2bdbd57afc52dba450426d436e4e1881ef885ec6d5a15e131931d5705641de22ba888d793ad8ffdbbbbf931d75036cf084f8bdf9172643e8dab6db8555ff2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

MD5 b1aa0cb562808f4ab220af439c4de596
SHA1 3ebaa3527a90ffa025830e61e30e7a40895c2000
SHA256 dccc5a84345ea8d56458c107dfaeb739f10214a3d7268757de2f238172d87b93
SHA512 b47e14bbc5d50dfa206bbdbbea21ecd686d7795893ce36cd1ec7e14af2a17e0470ecbf10d39bd181ba2772bc8cfc64e0c5f687b25e0f7480ad3465e8982a1f18

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

MD5 5627adb9909bbebf62de01f59e8cdfc1
SHA1 5d5b54dcbca801380281d9d6c1083741ef05416a
SHA256 4ec48ec4a280397d36aeff3201ebc808ba7d1f2c365ad1bf8667ef32bb7bda0a
SHA512 ab9699c68488973dd85d453be30ed3c85b590801a0c4da21a58b18664078a7627ceefdfe470f533df784ba9a4fd9a806298585796022d275b3c2ecbdfd4f14f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

MD5 368a77496d7e4b966d1809251c9a88e1
SHA1 8e832b8cfc7a41c4c4448d26fb332902304b84c1
SHA256 7acb164c8a99e3301d6ac3f28f0fa874c6ce73100bcd5ea5f455636d3a4637b5
SHA512 35a8151be77572c62a019af15f59f6a2ff47866cd437cb337a7fa2380c13eae53d4ab09da8550475b297c451d62f9958b6041ccc10e83f6bcd0660fe5c6936d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\15bb3a9b22e3777d_0

MD5 b136b617f5b5fdf5a41236523121365d
SHA1 773d96b87c76890b21edfc305e3caf6732957f09
SHA256 486866d6f02b789c5c54430adbb22862a674e2c957c70f91ff14820aabc768fa
SHA512 de7d848f7064e1d1a646f8a5f16291a6e1e7b21439b03823b2dc8740534fc1b9579cfff2ec5c73cfd833f515c7591cb18c6de40b87b8143f52e686072d003c41

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bfd9b5c29c5c8524_0

MD5 15673865fae1e6d94cecd4824c3703ca
SHA1 021a74f3d5652bb2ec598c5b38774e464af0c930
SHA256 e7aea23898cbec100c688f117565220ec4007833b080a5d61b74d32583e8bb84
SHA512 4f87fa20f8f4deb1a0ff5e146332072e6ca511dbad0998b594187fe064b91a8ad28faee91b4bcefb23d3640e6875eb335debfebd03d62212c9606c3b037af2e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e55f0a6d1b533c66_0

MD5 2f281014a38c2da9e6ad340abc0c2e2f
SHA1 601d4846e2d7fdb01610c54f4cbd6eac9b273f0c
SHA256 478753cb8effc3b41f0bb72c339715cf7c3037e4568f2ac56d59089947eb269e
SHA512 5d4cb6f042d5a64de7ad006343647ab8674da902fd9a8abeb6b0255a23674230765b19064a2002b00c23e68155bf74f013a9151822231344363db2e438187be0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06450eb6a7b09545_0

MD5 929aefb5dcbb4b7debd20789c29b80d6
SHA1 26ad298f0bf1875a48afb40f3d19da7ba00ef0ad
SHA256 14014aca903d6e9e3c832554b4f85dd9ee261b67f5706631412434256295fafc
SHA512 37aa4c493bd706bc0b54fe325393b1114ec72fdb7f7976a289ed4d883a12faa8defc87f2204469e74cbaf970c201b761150b5dc02cdaea913cdbf3a801ec07a3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0756101f06b827e8_0

MD5 a5d496ecb3ab33c91eb1feecf59aa1fb
SHA1 477b4fa16dae53f373fe4651b3ef22058b540ec0
SHA256 7f2b4e889e46b6a786f61789c50b63eb06bab1cff67c904941b105db8a3014fa
SHA512 1ed9b822dd25bb9c84b81901491b9fae55b5d912d45817498904831329ff8ae79d508e581edef084842f45d86ccfb72eee1d3e5f3d6e846e58a2fc0a8c0dfee2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3dbb3008455b523_0

MD5 6f13d6d8f0e5072c59aa0742eebc087b
SHA1 5d8ca4e57d2d59c4643f325480c63d002ef3f691
SHA256 5fac43a08506e8aa706c6e35eb23f6252ccc1c3754b1fc8e7900a982847d0fd5
SHA512 4ba8fda9853402cf7f4dbaed64936a3244edf04e3285f28629667863f87240275d6540baea2bf81fa8a413be57736fa11f6fe857d99c6f7944695cbade55722c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a09f6271ad0c4092_0

MD5 1b21b0cac8d4228e042a2ac6f9a2f3dd
SHA1 6e56e2223ea4072144f7626cafd303a33ffd0fb5
SHA256 32cb04b9a1dc5de7cde28cc379925653464a250df8ce976f44e4531dcc89a69f
SHA512 ea24b3163cece56e6d1421634482136fda31aceb5bef44d01c395df3997d707c9866ac961de092b30aba7f41989810379caa166e1bddffd7759a213249ca925e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9c07b1b2a3e9b57a_0

MD5 c6f0e47b7a36e1bfa1779c811edcb7c7
SHA1 b1571e96191b1387a48d6e00a6ec61ad75905201
SHA256 ba44280c0705e34bdec04beaeff4cf98e1ee97b7807fcab16f1f7a8b398e4aba
SHA512 6dea6145ae58cdb453a059a8f0d4120be9b754d9205afa6fe3bdc0911c3c851795b7d513a622be4053411c915082874236091df707f7bbd273e5ebd209c5aeb1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac9b40a0411376f7_0

MD5 272c9ba0881af4422249088c3632bc53
SHA1 376503a618932fc3ba292be55f3052211f7a32d6
SHA256 af1fde13f6a11e5ad592a6476eba6419ff976cac599d31c2a413bf3ca732c74c
SHA512 98a04c4c3b6a1c17731f2ced0d7674bc3e678d6eb44030a3b950bc868eb4618071988a92f3fd55939a872a4a229f25544cdc22c98009e7f3b4ea9e9a7c4a71b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\feadcc6fa014c0d1_0

MD5 6268cd1fa93d652956f4269ffed66f77
SHA1 f2068a659f1e7fd2cc9f377df5a1b2744fb8a0d5
SHA256 a516fbaa4e35633909b6308bd572d379c79f477897fbcaf94d6db79cb3ac11c3
SHA512 435c34adfa73019d57fee2f7023da3224adf14d34eb92d191b83fd275ff98c40e094c886b4e29a306a8cc5207d286cdecc2ac996f8f98192e075da330bb21aa3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daca09b4eb185a45_0

MD5 e229d28361f4f5e66b3eb2e28a46c301
SHA1 3d125c2e02e49e3a8ee7150b16ef0882acbaad06
SHA256 aee01edd3dec6ee8a9563ed0ffb6d76d5815a1625951773664762f8a125ca8e8
SHA512 511f758d934cc44e00b0153668e208dfcc3846503d7f931db4b65db01f9ece82b86e67c9e7bcc9335dce66fd3151c4fdb21eaf7957c7290678c856a4ce804a59

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1498203159a070e9_0

MD5 7bff75d2dc08e4524535d38edb21be3b
SHA1 408c6680ac2307795e0254c1c2df15c6ebaa769b
SHA256 ea5033a276adebd2f7edf86f2bfe53eab58ca992e98e8eb0c4db39cec1149680
SHA512 bf447870df7089711bef3c5be500857119905bae401c71ef6ce63518ddc390bc8ec0dd63d6b9adec4ddc8a4798968b69f511a71e68c502ce55958eb82eddbfc0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\513d53cff9ea2408_0

MD5 392932d242dbc5acb2ba4bdc52257739
SHA1 6c9bdd8c37ca5e922a419bf96a0c0e9581044a10
SHA256 c326ed8b28fba2dcfa906c6e21684b9dcf34d9be51a0c844d595c368dec5329c
SHA512 b7a537d666f4c7908e4b4384c58417dbd11bd4b7d6a03867d958f216fda29d83419f54236e3d2c1268ab4f0df37658a718610d3187c865d02ab8f986ec0811a6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e5caa11752cfaf31_0

MD5 3fd11121e1d8313a3cdd2c2d97d9bbea
SHA1 d08fbe00a647ad4f50e485603dffc86260f5469f
SHA256 076dc42d48e96a8d69c5a6638c5a0c50336cb79ca5096fb4633b4d63d43374e2
SHA512 4c274d5fa2b6236caddd412c3fe49062ddbadc14d6fd4ab9b7681bf687b797b5e21922beb70fef8ad56e48a5ac4a7535c16620cb4b101895bf2248560ef8f092

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bc3656b3aa4b8c8b_0

MD5 6702c9c81411665fa6bf0ed96bc39ebc
SHA1 07544dbf411f41115daec43139f2af46f5c7555e
SHA256 22036ea678a934280a93ff187819bbdf9b38587b0c9a5b9ca95f406d894995f6
SHA512 50e72f1ad8ed67597fb1c876333e723b12e6e9f6b7cfecc1d6d5b9224603caea4310538cefcafe70aac19e52243ad09f80843b4264c275897ace80f496828b0e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ba208775fb5fe09_0

MD5 17dcd7e6619071347a02d1be0aa2aaa4
SHA1 a09ae16298f2ea777974ad224e6baececa82159d
SHA256 2b7f44b51d395d64f0c6119919af414c10a2a2ffdc40f964d4d6c25becbb42e3
SHA512 c54db9bdc4487e146ef7005c47098c31cfd56aa04efbc08db11511f7ef2aa0937f4eba506feea479b926dc246f4485ab71607298040588dfb2fd19f61948152d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5f12faeff9e0b818_0

MD5 5e7ae8bde852a6eea56f83de33c33bb8
SHA1 e319e78c3034082c11d3e618ca4011156cc1306d
SHA256 f2468aa582c6236af867f9d7c79f3d9cebe61b9f22fa59c15b8dd7eae1197484
SHA512 aa1de2dc56713d0f1d31598299702d424fc0d6050b4ba072dc442a0e994c210853eccd04af41097c6a74801a064cbef44ce1510d373d62bca474c613ba141c14

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ae8d0b05a4b538df_0

MD5 29acf7ad781a0706776eefb944b5e6f5
SHA1 0ba4797e65d9190d9a15598cec76ff07f11dd5d1
SHA256 e0a62351c2ea54813e220a01c2ecdfa083ff5180d14b073976ec86a18cd6049a
SHA512 7e4e1a093bec0c6835d25118781fff8e7405e50151095408f89dcecd2318afef8f1a2cafe6ca2983f13694bcf659e958016f837e265542ea0ed07466e6fe6d2d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9c0109f54c03223c_0

MD5 3fcc786dd2a9a050fad9e96e98337db0
SHA1 37cb683d229b431821c96e4f671e4bda68471739
SHA256 0d9948c0fa41e57cdedc6e17d026cdc5245db4edc2caa85f29461fa00f9fdd69
SHA512 e8afe0d2ff90e8d21e12353b64179f0a0ccef1d01be90891ddfa9a962f1f76c1b0dc1efd7bfe428a5a6d75473ccb79d721a2985d3f5202e0968f2dc15f2eb09a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47d4e623e47f5bdd_0

MD5 ed36ac2b0128f5210d92560b017e7b04
SHA1 4dd36b1d681e2d8f368bc66a4aeeb449732f8e7f
SHA256 0f5fc3bc5fc389434404a03b22760956a1360282c04da6f8a3abb7fa91eb8f7b
SHA512 d1494029de2cfd5060776897bf7b6b3633f7015b14cadc7b70f9455677559678ae32d303ad538dcbaf3d9b8203f036bdadd67874a4785a3931d903bea7d0f584

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3557d97bacb52931_0

MD5 3eebe9937ffcc40d00cdede585133a97
SHA1 0a589774b39eea4070127aaf5f68bc0abc4c4697
SHA256 b91329092acc6d84b3a4d664a84f329527c92435ec7da3619f201e68cc161af0
SHA512 0df90725cd845dbcb8112b0ee040765bb7ddc311cb2b16f49ac76aaad8659fee9d05655eeaa475a75e94bcffca814b52c072845c7776f04b9e35ea28607e09a5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5b2f11f3f15a5775_0

MD5 0f8cfc84709d55dbba8a425d7fefa90d
SHA1 2fd4b9e0b1f6fbcedf76dc18056cdc53412025e3
SHA256 f05479fb2eb9cefc62ef4d7310474a44f0a6194ad34f8351d871755e8b522c1f
SHA512 1d3c79ee5542235d2aca197031117380f40c1279cfedcc619700809f55258af16bf0c27fb58484959132ade79818f3b63804e3d572b86ee411480abdd8f34e7a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f078f5fb70fd150f_0

MD5 3cfa8cd31c3255c82ec71fc7eccf3346
SHA1 99796cc34e20b43bf9abff337146e692154c86ac
SHA256 57f9e36bb1bd2f0955f2726e7d1f418004f3b229ed0838fcd828b005e429250c
SHA512 6fc4af84f65f36d0625131a0e285c53461c6bde06935b0305c3e827f164d299c1468fa13e5284e149dbed4537617291134da1b3347639b6a3ffd067a89bd54ad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a66a1246c4f29f4_0

MD5 9b0cb065573907c59f1363cd23ef2a1a
SHA1 2dec6a961d5498ed8c53e5ef11395d080f711276
SHA256 e0157c2da20f93af243d7345279e77d1aa75e5fb930c98a561a3b4999cc4d832
SHA512 0fa1aa422f812e073b6832daa2bc96aa0e310215c2ee65999282087ce24532bfccc71088114e7da549e0285c7a5196936b6d3a6441244b76e99ff45f2fd802fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d00019f29c31fea5_0

MD5 7aaa2d70a066db6364be513f43d69238
SHA1 638ac4357b338bc8dfae297848334a4e5cce6349
SHA256 262c264c531ef2675fc7656143b942407eb5e77f8ff1969cdce625a062a4431c
SHA512 d20548da93dc281d573d492cf745846d3f9e84df6d1c428f135cf95d53ab517f3d04855e4c0097d75bea9f8ec7f1770711d785ba0066c3ce76688fe764c2e90e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e8f6640eef188435_0

MD5 aa71fee3b5a0af684a55d718ff8c817f
SHA1 ce1e67af3ca56fe751d0bd967b5d0f3d695ec5db
SHA256 b7684a84f80d385bb3395eb309dc70f547106accd9d24422dc114ff28ae54e16
SHA512 abe4266b1b14a45344217607a8a950220f451f4ed1cb9cd4714db4a445d7bcdebe9ccf9fdcdd2b83aa2e6f5699fef4802ecbb829fa1928ed0f577511d4803133

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\81764cdb356c9506_0

MD5 bfd1442fe512c8480da0c89192f344f0
SHA1 2a1e3ccab34f48b08d2738224aadb0449b73c27e
SHA256 3038b7614e749be4304741bf6de08f8de79b5858f31fba210a86ee2298980008
SHA512 b48d01a6c5ca899ba8045d844477d44d58741886f3876de2011ac01022885aadb32490abd9e83ac37e6db98523d601ae1aea419f2c9c6a8939309c5c76be5e54

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e5987d08f7b6e11_0

MD5 b7d9840955524c5aff25664f4d5b52d7
SHA1 894bd7a5828793064a4061bdadca9ce456552a3d
SHA256 dfae03e36dcdb2802902e21007eccb106839a7631aa88bfe06806250c7c867b3
SHA512 b5e009e75f477bf6a305586f7e8456743e32e06218277ae3037fe764a2db575608316cec2a02c9a94ee490988668bf089f89f9539e4de4bfa7679d5f11f5a7bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af2cfcaf6d9b18bc_0

MD5 8482e1278c34878cb828ef4d51a6018a
SHA1 8de7daeacb27251855e66844c1a0727ed89312d7
SHA256 237b0b7476e8467e87ae14fee44dc6b691bb59d99fcebd1b698b1eecd8bf4b6d
SHA512 614f7738ac1dc9b403e17becee56a687d58a07f1dc57b14b93aeabd2145db86daf1046029a7a160539ac63ef41683bfe7a46273632ac23a51339ee231f5a6993

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2fdbc3d8f07d4d80_0

MD5 e185c2e025659d6a82d87c784377644c
SHA1 54e5c54b2bd8932dd00210090f8e62f471442c01
SHA256 ca2ec381bf2c0fc33acc43bbab650b21f0dc85c71634f10e37afac1dde70a802
SHA512 fa67542610780112bf571745ea036a47e05117f49cc4e25345dcf2d2aa49dd3f1eb28e398255da43d161552791cf5a55f35c2d07c35b5e791663f0d541347b14

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\671c7d04c2abc74a_0

MD5 1444d603d3f81da52d818b428b731ddf
SHA1 95e15a84d661b4c66be48bec2bffef51c485a32e
SHA256 b151752d6fce17a6a5252f6a42221fa227bbba4cab2af45a743e1f58f86c74d9
SHA512 be1f2b8641e4d84b2996288d6075c8613764e3550f4f78f88d56103746ac21794acb5de42dd60d9f9de708fbf38f5787ec34591cc7fb58754d55e264c31c1854

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ef4e966526e12a91_0

MD5 2fdd7b55b940ef1b2832c282df359023
SHA1 1c2b553e7c209a3387dd0166c2f36c4e3f77b2ef
SHA256 395e1fdb7b343784c09bd9b84b411c9503a624b3e892568c20afb161b84a1667
SHA512 57a35c240fff5d6fcdeea32c2cfa4e0e21c00f8393a3e15e9fdbe87fc27886867b196ef1931540c01905e7ba9407b7ebcb703033995acf93f2b0783a6bf1c699

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000134

MD5 19e5bca2ea3b41547c5dbf310adc8ea7
SHA1 9f2dc4bcdc49889a7bdb2ebd3963aa4e360ac62d
SHA256 c20167aeb1a3e7b332eec0abec940257c4905c3571e8aa4609c9db5f2505a36c
SHA512 14a63c5797cdd330b636e64bce3b3618e4e005d1e91bc3b4af0e3a2c4696b4d66abd13380770cc67c36b6cb22e8633f007a04e06e2ce1a5dc34e5c3f6f5c2ba4

C:\Program Files\Avast Software\Avast\setup\vps_binaries-1559.vpx

MD5 47c465a227dbb40eea44028a776d4e3c
SHA1 e885224fada71760fd43098f532480d1c39c6e5f
SHA256 4c503158a39eb832b7142e20620f79087396a07d57aa7bc8d044ac7acb371673
SHA512 20e35950d5f544f184b3b092d7edf6c5d3460b0e7045cfa2ae20bb7ad7f96e22e6181e7d9d520e12c3226f291b59a281c694f7852ff4514b7986dfd1ded07d1b

C:\Program Files\Avast Software\Avast\setup\part-setup_ais-180817ef.vpx

MD5 134b8d628c16ad8fb5caac6b55b29de3
SHA1 d58d0de11de07aa8d421fb7d9022aeb913b80b9f
SHA256 07962aba3ce63e90d12299bb387297b845e1ad338fe07cb0b09524e8a4896418
SHA512 77697266cf2f479b0c096e9cd94178a4fb4b252a25146fcb492e3b180da6056e4d00baefe43967de496876d290042fd9c9380126b7143c2a2f7fde68a33d2828

C:\Program Files\Avast Software\Avast\defs\24082500\asw922867141c053b24.tmp

MD5 4cc9559e38f3efd070bc26124417aa01
SHA1 9800094c303f787c764df9273ad796dc9a3280a6
SHA256 3b758d9160018ff7b4719095bd41bf41cb0033c292d27ab752ee1f1cb736d51c
SHA512 fe135d1d8ec191e0418ad80d298b0ee365d000b5d0b702236ce37f359d6622b5498743c3a901ff04eb6cfb7fdb169eea25501cb7ca96cb4c22240df84e2781ee

C:\Program Files\Avast Software\Avast\defs\24082500\aswfe5fd0894d8a958b.tmp

MD5 0bc871972f9a608037bed3905c80d30a
SHA1 61d80499a8ad06c69bf7022e731d81f0a781ec30
SHA256 c776284f06b9c26d59fc44b77da17dcc055e0e7b1b3503e2a8a067515f2de41e
SHA512 a173560dd3c0b4de620605c2e15e49ef66943a1526af8f9e4ffb5b0ed8f481fe72cfdd060269016ae7aab16477cfb6f31ae652c9c46275cb475265b6bf20a7c7

C:\Program Files\Avast Software\Avast\defs\24082500\aswac6ad5e3fa9d36d3.tmp

MD5 ba43e323d3601894615caa288c0b0be2
SHA1 86b98957a5c6c60993e3bbf8069b452dbdc5c700
SHA256 f974235730e70c599e11e0c93dbc16dc4d7410d8c5983766dd1a6910eb6c1225
SHA512 a595572fb648ea74da6ad2831699120e07b8cda269275903a6722cd0c69ba9a16918c19f65002d26c4bd14037935ad55d94419517ce38e1a03ef470e265cd2c1

C:\Program Files\Avast Software\Avast\setup\part-prg_ais-180817ef.vpx

MD5 37dfcd41dd4ec41358417837d01e0a63
SHA1 5ec999faac7e265f90688c50269bc3ea4c59a861
SHA256 9e605c42f11fa4d7c6055d7017c350c973944f197e5bae6437b98a9d9cca7227
SHA512 015e14c5c232d089d4c97242afd272025acfd86d60ae14c698d818279a5eb53d5c61754d476843277441a2cc8062c36d1ff394d0cc9e5ec172cce5fa1e58d38a

C:\Program Files\Avast Software\Avast\setup\vps_binaries_64-155a.vpx

MD5 0d139334d69ae54dbf16ef8197d67064
SHA1 fabb73a0fb9bda8382a4c48db89a6a2785434df9
SHA256 c7d918bae95752b73114592f43844cad8459b6cf79a505ecce9b5cc12a789aa0
SHA512 2511566965848893c4a2f1da8b79564374f041013f3ba605ce31e5b72788b90195b2536e61c62049b362e846cfd7d74ce25e910ed8679256bebd0beeb9f7b1ec

C:\Program Files\Avast Software\Avast\defs\24082500\asw21b3ba398dda9a01.tmp

MD5 f0532fc029fa20745fb38c01310fee07
SHA1 f3842f314404a0c6ddd1c3c076c67473e71cc197
SHA256 66c5150995ea9eede4602cf40baf489c979106041cb96222b79da9f8e03ee13d
SHA512 aa2d194d800215a28e55849609a3badb4e22fda1ac4bbc76b4baaa6b65cf9a3687573347cb0001d7668da39d04b2506e4d95d424ae113b1dfec68abc2013c992

C:\Program Files\Avast Software\Avast\defs\24082500\aswe6d61fc68bf6dc21.tmp

MD5 333992041f69a62745f86bd737b2a76e
SHA1 69886ccd4f867a2785e23e4b175429e4d38cbee0
SHA256 382975c3ec607c35aabb5fc54fe7a0fb488c7ef5bcba955bf2678e229a561d63
SHA512 23479b9715400e9b3bf4165f11891f5787363f21f5283a7a5153e0c8d2572b4b3a1f2819a52928271c8adb881dfc3878dc87176b850aa35ea600b410eabcaaa8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000069

MD5 68f0a51fa86985999964ee43de12cdd5
SHA1 bbfc7666be00c560b7394fa0b82b864237a99d8c
SHA256 f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f
SHA512 3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000068

MD5 3051c1e179d84292d3f84a1a0a112c80
SHA1 c11a63236373abfe574f2935a0e7024688b71ccb
SHA256 992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3
SHA512 df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

C:\Program Files\Avast Software\Avast\defs\24082500\aswe23a145c14ee4d78.tmp

MD5 06fd33f5355b72c1f3c8d54f08fa19fe
SHA1 0ba5ecdc64ab4863e0157174169f84b06aee76c5
SHA256 1cc95c33ed5d2b592c22e233bfd4aae916f6e00fe3568143121a18d6b8069681
SHA512 a59e59498f29af9933ae0464c89434daac59052bb012d79a79d9c43c714149b686867ae7bb24788f05ad67919ecece77441a36bfcbe753726200c61107e18679

C:\Program Files\Avast Software\Avast\defs\24082500\asw182b1914e7a3f821.tmp

MD5 ca327980bdc7ba6fb5557a1b262d6150
SHA1 0df12bdb6b4a8e6120657abfd3cbd29c369a966b
SHA256 86fd85c6a9d246324d5f36676b6f44452ecd2443f27dcaf1a826875e2cc7cb82
SHA512 7da49515d4f6609f0671792c01623004843dfa571b6ba1edea1a7c6938701d9706eba54e19da18e63a21f58cbf5cbdb34c351c9e4768b02ae0d74efb78fdefc3

C:\Program Files\Avast Software\Avast\defs\24082500\asw52b4a271690b3391.tmp

MD5 627be44e69cafc457f7f11e68461b842
SHA1 7a3ec623098c3d061cf4ca55a11ae242478fee56
SHA256 88a41211347f6cb1bef794fd676d8baf35d672769c524dfbf720586249374f5f
SHA512 8d3417dec6d7d65e9e7c34de1075207cbf34c2e76d5a144f1d45bac4fcfea5c3ac60ea148f5a347cf144b5368961ad6311a81aebf31433607010c26ceb259445

C:\Program Files\Avast Software\Avast\defs\24082500\aswc39a572926344711.tmp

MD5 e11f2bd6ebaca8ef20004a661b1c3531
SHA1 4255bca4ecd8c67f53936a16d17f5533a1212841
SHA256 1a9ed58cfdff0b81c2ae1a17434ddb2ddd13e2a424d5d5732bbea74d1b25db73
SHA512 25d70e01e3874b0462221bc626034165708ae4731df3c3349848367e66210194c74854c229526714d75981172b2285c3f070e8f448e60322f59823a0a678d350

C:\Program Files\Avast Software\Avast\defs\24082500\aswf0af76135366337c.tmp

MD5 9d9b525ccbdc4d5aec7992cba318e753
SHA1 776141b44e0f82e8d2217cb02f1327db99a98d83
SHA256 bf4772e205afca4b4721711c268397e09f19b7d1190ca9076bd2bf812f15113b
SHA512 38987afd56d2db8f39ed8687aad0bcac541dd7b4ed5a434ff1750204302e5bda790d36716630b254f57fbb51a03aaca02ca924452827b5324902f610f56c4268

C:\Program Files\Avast Software\Avast\defs\24082500\aswb76de2ca3cf855a8.tmp

MD5 4d6b99de0723a534b91731913101b917
SHA1 0072ad9d688212d808671e0d4a0a74dcdadf45db
SHA256 68fdb03880f9da53474fbbcaa116e283b4a81110cd22e8ab945caf35ee0903b9
SHA512 3a18160c2dafed3cb42b2b8521904ea112e0500ea794ed2bd1587b145c694100839ac3457b776b76be4dc0eddadf5041065e9bc717dfe2aead6f8eed83d26d0f

C:\Program Files\Avast Software\Avast\defs\24082500\asw72b7821a53f91845.tmp

MD5 32df3dc13a259fd07f293e2a2e8d2ee1
SHA1 d2b1761dc139cb685c96bf11ea176c24bd649535
SHA256 1edafde4d4e254c9e0fbeecffcfdc5ade815dd829eca0812fbb0482817c83c15
SHA512 13bab8a26f3e0a0ac116fda33d237f546156b6c832cb24d89440447d68528846cb801e79b164022881e744d0ed9e061f0446d3eebaccbdef78a72c33005daf02

C:\Program Files\Avast Software\Avast\defs\24082500\asw9fb44205eb8f4e7e.tmp

MD5 e5335cc622cd3b6caa774b7645921abe
SHA1 46a03b58feb1e60b2841536c5296c4295eb5db6d
SHA256 52b4728e074600e6ed0ad72a401159f0c20d1d79ed43fb355bc41572928bfee6
SHA512 340096c326dfac145cb39a7c3a4031f8354a291d2851fee6b16b487be0bad7cba2232b1411991963ecef32a2b5f18e21af5c454425b9345d835feb24e911aef2

C:\Program Files\Avast Software\Avast\defs\24082500\aswe6dbe4fe07be72d5.tmp

MD5 a3f8069aeb7afec23812e03af17c51df
SHA1 0f0d681f97c3eb55677d4a532421d4017f6861c5
SHA256 c16e4597c8f800a0bd04db230d7a28430fa7361dc36e234e9dda50c01f86fede
SHA512 54ef4189889633ec7f49620fb4b56d72d8936a64455686521007eff77af9b2cfcdaa3bf8a5e9159395b6a24e9a472fffcc999ee2ea46a06da57d3c3d4568d9e7

C:\Program Files\Avast Software\Avast\defs\24082500\aswdad955df17fe7fe1.tmp

MD5 ae2a8ccca48383f5598f887146a9f6ab
SHA1 60e131858075a41761318d91973a8a32b9256467
SHA256 56ca4dbf6a49361cc9709b299e158ef14025cd527e97b070d38984c5c4d6881e
SHA512 605b15a526f9b511c2fb4e2a199dd2bfd4cf0b01ef679b6d1183b2d5c95b4a7369e37e4fb936000a8dc9301abcc8cc02b4c761f40fe2ba7ac2fe9fbdbc39bb43

C:\Program Files\Avast Software\Avast\defs\24082500\aswe7b81a4467aa9901.tmp

MD5 15cd4b09b55fc325b016513e93b54b8d
SHA1 7a417c377c0647749e04c033c9e143bd2602f7c5
SHA256 a06480e05f57fb16ba9e377a1cb23e476be1321eb15ede286f67213ff303ded4
SHA512 713bfb634e02c6507fbcbf5db987443fffd3e411798c0736a16ec0fa406301fafac8cc17cea80e43feb5a3e5627bd514938796a2300b6c134e5f386f8baf381c

C:\Program Files\Avast Software\Avast\defs\24082500\aswca5e8a387b94b4c4.tmp

MD5 33f54b53d2d361ff3cc165961eaacd07
SHA1 996faf13c0c906c4876cbc9ea23a192cd9afd948
SHA256 2a830fee8dd633beb34374255a445e12610218522fe5cbcefde4a21d56d27d46
SHA512 3f5ad363a2c9327caff24487e39ca7a56fe3f588f8091cb6284e29fb8d3957a374837e3bf0b31469450ed45322e2282235baab0ba54715e665a1e10c42fd0ee5

C:\Program Files\Avast Software\Avast\defs\24082500\asw294c760c65ada262.tmp

MD5 97572d8320adce6beac1ad75409ceab9
SHA1 c4a409f78ccc1b46cbcddac1afd0b4702126c5ad
SHA256 f9bc013bfa0fda72b5b36795e36fa649d99ad14c78ca17effb0f332b65869f38
SHA512 403051f16f5a32c46d397759bc9f5ea932a38e4850ab79773c91a43d321f990083f84feb08d0a361a85e0bd5d3743840ab502716d72a8238f6bb74a7b05fc84c

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 886cf1e2fc548b96b272a73d5fe2abbd
SHA1 5876b4cd144ed887b355f5edd6de10255e191c10
SHA256 30b1a587f8aae259fbc31d87fff7af68c077a61eb3be07c688f712db4b14fabb
SHA512 4ab6ff6e8a9fa902e4769cca52196a89b0be2f17d9f4429328c9bfd648061b349104f34097bfb86e3d8d69344d80d9c482ffbc085bfc1cae9289e6768123c95f

C:\Program Files\Avast Software\Avast\defs\24082500\asw38a59fde8eda0dcf.tmp

MD5 db37b3a5f5d2e5f6244bca17fb4aa430
SHA1 f2593857f1fc63bef49e0e5252d35cef9f2065d9
SHA256 6e96f928b16ee1a1c557ea3f938a2bd39ca4e793bb0366f471161a18592d58f2
SHA512 f2d22ec3749c5a64fa68c5493b81f58f15215001ebc3305bf3f83c755dcdc09062b892195d8289eb86cff1be609f1a91dc4dc161ae5b7551efe47bd193dff4bd

C:\Program Files\Avast Software\Avast\defs\24082500\aswb244852498b01e35.tmp

MD5 9b069e7577cea853b93e80c45e76fedc
SHA1 09de99703594114280860430999bb93dc3cd34df
SHA256 0b3e2ca6df55e15b72f317c624da1fc36a328cbd504ddba73c9c001f7928a614
SHA512 81611610e5b9efc3750c1f8f4cb1479fb10c577e202d1e7eb6904f46e594b6433c6608cab2f36ecec666098364c7a74c5c014ebdb3cdc72c9e5fc55ac69b91dc

C:\Program Files\Avast Software\Avast\defs\24082500\aswd05d638de3ab975c.tmp

MD5 a33466e6867d31defdd2004a916299cd
SHA1 d5a16cecf687d64c399a56813b872db9dcd1ff2a
SHA256 4fcfe5c085cd8003a4249bf02c19650a0680080662341aa74ae78efc230e5112
SHA512 69466f8395ea53f5b9ba2b5984b84c99bb1401f7ec00bed131ede6565b53b38ee9d38cfbb929a16e473354aaddcbe2e72d54505f3d3926f1f7a80cd2ac47ad05

C:\Program Files\Avast Software\Avast\defs\24082500\aswd9af610a644c19d9.tmp

MD5 f822dc7f19561bbb9b5d27673fba0bd3
SHA1 318e01e8a4720b67d24980922c762140e3ededf6
SHA256 a7c074891bdfdf6c4ff1a9684db36d3d83240382ca21bb7f7fbd7cacd1258e4a
SHA512 e17274a445adb5b2d2ee69f556b8354af69123a63462c989e5379ddce4703a9578d325a4c9fe0abcfa918a407f495b9fc93dd8c212c8e3d8f38bb7f6022c69cd

C:\Program Files\Avast Software\Avast\defs\24082500\aswf32e7b6af1200188.tmp

MD5 282c51e24226d2b3c117fa3acc4e8245
SHA1 8b7c654329eeb0b140ca9307a9ba0edc8ce0c805
SHA256 721c530d40eea87c3683f395f3511e28064a240c7bff2d6ead54e790665fac64
SHA512 250ccdbabc03371d3c070ed664572619e80a44931e1bf1d612e8d01f3493b3d087ef2a9b304d6f5ae4c9b0eb911a740c3439e05f8f18e1160bfcfa485f3cee18

C:\Program Files\Avast Software\Avast\defs\24082500\asw2d59754593ed8203.tmp

MD5 2013294cb1a4bfca714f790caf87d51e
SHA1 9fb1f2bdf9f98be6bd90be50d044980f1581f838
SHA256 6a4f974fc88f8eff8e310b048a28a040f76e559cadc3ec2af0e47a2990cdb07d
SHA512 97c416302962a512736a936a2fd0a0d59e098914a4d68a6619d11195ccf9cc288a3bfcfc5be3cbabb31cd86efee00472e93ab35b8ef82dc34c3e14de8c8fb15b

C:\Program Files\Avast Software\Avast\defs\24082500\aswb46d642e2ad0ff4a.tmp

MD5 eece480bd04f509eee89f9f36992f836
SHA1 f2965934149ed9ea836a3242076f2f44f703a8a0
SHA256 83329a8b70648558aef13b49eb8f5ec5e41dac89ad4ffbf325242b9b14aba277
SHA512 762468d5dc57d5ad7cdc2644a3e0b309b0ec73884c783c7c45d9158de45deae649699a7312914cc9dec0b2a98e7af75e950215d533325aa62c9da16d6d603339

C:\Program Files\Avast Software\Avast\defs\24082500\aswfd94a766ff7aab30.tmp

MD5 e5ca5ffeabb082ff472d894555dfafaa
SHA1 7868109b2dcf091b170615dbc9b329304885dbf0
SHA256 63e8de4e68f1aadd478c8886c08c28139770bdf9f758c6cd8cda4ae3554d1e22
SHA512 e9c52326544b1570a799113090c8b449ec9461a10f4add35725036c92acca66995984a9f7f425a485e6b2705ed439a688a8c7a2da550d0599b39071b223db7ff

C:\Program Files\Avast Software\Avast\defs\24082500\aswf3866f137bcf0602.tmp

MD5 3b66d2532bdbe94ce98d815212662363
SHA1 8f4c515a6e21136fc49ea99e5fb1d93256854dff
SHA256 d51c8adeeebcd706e3a70ee1c5994dc5a2cbef43824211539498e273ac98d600
SHA512 55cdb194a861fa9a2748ec9232454cf5108cd064bee468a852e0c706135938b950a924add5dfa970f28498c038be632a487819bb23783cd10e51a82ee1b6ffbf

C:\Program Files\Avast Software\Avast\defs\24082500\asw0f93b6440c0b581b.tmp

MD5 9ca55760364eeaf5f6c21f6560c892a3
SHA1 9feb5e721da698de9fc9b38771a8fb63225d7d70
SHA256 24b41784a71a687c9be72f568508b8bdceb59af6365aa0fa8536d2c0051b48e6
SHA512 93abc2d7461132686623fa3956c3c58448b4e85b10cdb56de1b26865b354ccd4cf8ed02ea9919cffc57fc21cad76ebc32d6167e5b0e3fe0b5dd363c85765ccb0

C:\Program Files\Avast Software\Avast\defs\24082500\asw6ce54c22de67b751.tmp

MD5 b303be0fe38d0ffded1b6040c36b908e
SHA1 c38e5e09c32506cff884c3a7e8adf34b4541f371
SHA256 332181dc9aca3cec4f6d6a69c6e75b6a18394810772e8622f8d00e2ceca65dc4
SHA512 36380e21b39046a0d6f019eb7ca8bf492d1c2a162dbb3f646cdf33686fbc5c2b55767ddebb2a9956d6e043c21e8b3468717d3815f730a99f89b31bd9ceb08e07

C:\Program Files\Avast Software\Avast\defs\24082500\asw8bd73a757d11790d.tmp

MD5 86be9e219637a886943cce93741beb01
SHA1 0e3c42bcab50c93b584b8a258ee6ef6107a6d03c
SHA256 2814bd0cb372999d3f755b523a610aeb32c752c40889683f209e0f488a2b43d4
SHA512 b13afbdfe3e09ef344665272dc52f9e674b4cfc23bcd0fe5cbdc25ac811f58b30807cd6d778565e5664cba7e49eb3bfd6f8160d1be96aae3aabc8a6911bb79a6

C:\Program Files\Avast Software\Avast\defs\24082500\aswba02b6fd43799160.tmp

MD5 bda703cf34750e37eadfe761dfbfdd1f
SHA1 e0abdea7633f85b2105174cc70a24ecce5f340c7
SHA256 db0accb1a17025e96a859265fd538f35cf30c29d3fb6b0344b70df9d48e12158
SHA512 f006aa81c954964a3f1e7f549422af6c2cc69f094ca6de14bef0467a6eb963c7c7c6f42dc68fd4cb68a8fa3db85444a61eb7991e842617100d747648163b73e2

C:\Program Files\Avast Software\Avast\defs\24082500\asw18a0543f948f4171.tmp

MD5 916b49bc31c9509573b0ab3f024fb767
SHA1 0fb4a4660bc5b9b2f03d94db981d3a6fe4a3dda0
SHA256 3d7807ed12da35b60c1b9244824320838d3540bc0cea19bb79f0876459e395d8
SHA512 0fe95f6ee30bc6802b0b34d31be13da9fb829f2a498b276c38159d6f61b3559aa08636c53c245ecf8f4dc255ee0211633f15e7b2087b02e893099f9ccc5665b7

C:\Program Files\Avast Software\Avast\defs\24082500\asw1e3a217fd4dfdd55.tmp

MD5 d29c80a50b33e08ec6732fb668a2c37a
SHA1 eda31c6876cc2a9156d8123b610f3f3732043df2
SHA256 a65fd805462f251ee803741afd1dd544d7d4ced6f3d7fcda131707741edc06dc
SHA512 2458cfc446099ea9eba2475dcda9f9234c6e46c3f708d4b87c93f0f7bc4d25e159204ef1f21661a8f2862a4ae9893125de233cc02c12b43e5f0885332ae1ad3c

C:\Program Files\Avast Software\Avast\defs\24082500\aswae84f6dbe2c0d76c.tmp

MD5 2a86321772f9c5199a9f431bb7bbe50d
SHA1 9473273408121c86bda53cb22f4bc5066500cf3b
SHA256 e741060038f4131640f04bbbd9fc84301187cf71cbd64fb4fdcf7bceefa49b69
SHA512 099a712bf1424559cf3ca43569e75b4728de8e586cf86f314209b4dd00293e6f26871071e97bcd0cb6f277926efe2e9eea84f7660f7e2bf5a0138e8f2fe79ec8

C:\Program Files\Avast Software\Avast\defs\24082500\asw71de08d7ce87d452.tmp

MD5 09e1f05595da9db1ba7810933ea4c5cd
SHA1 97fbf33c5d085507b77922f918f40f38d4aca558
SHA256 3f65a1f48abab346c977dba5aedd7c8d4e36ee467f70cfae90e2c870f02a0e99
SHA512 263da76be9dca6c3217dce0826c901d1ff2a20fe49ce2d7a37edd14c42cbe2c910db0868d8295752bd2b4ceb12d4e88f45d6cf99d65b87b7c5940e5d335769f3

C:\Program Files\Avast Software\Avast\defs\24082500\aswb2ba1ec020e66054.tmp

MD5 6ede115ddfd6321cfb4133a6c92bc5fd
SHA1 d04354faeab5bda518b49a309578990776fe5cfe
SHA256 51217ff438ba6efdd2c6c83d4829e8f802640bfea6b84a0a8427ce7bf7ecaf17
SHA512 3dfa1e6a1cfaa93289ccc73a9b26f4b7652f6101f2a32b3be3b6e98ab2458a453dd0ce083b0952842c964a5fbfc0fbe1b322caad7d142a7576cff2c88bc341d9

C:\Program Files\Avast Software\Avast\defs\24082500\aswaa544d9bb04a587d.tmp

MD5 a65d7854311248d74f6b873a8f83716f
SHA1 d091d528b2e0e9264a0d377487880607ac870155
SHA256 68484e75c86aed8c948d83a9c55ca4d0b557987063f5e47493142d8e09837e4a
SHA512 fe87aacc0be8e6cc9c05725f7be3392ba850171e028f157ce786eb1ab6b5f06dac99b21394967253b6a7d0148b0013a2fd91d6d55afaa7ace52b066c60d4a79c

C:\Program Files\Avast Software\Avast\defs\24082500\asw8cb40f16eab3793f.tmp

MD5 ced1bced491069f3b1fe35cbfb91bb6b
SHA1 836bf0342531aedcd6866c8a19d3e2599c576916
SHA256 be36bd28ccf235743e6a8dd8a8b944956c520d56ad7503f31a157e6876694fc5
SHA512 e882ef19b90843cd483bf44826f4b8df22e1a44df2ec83ea529902280ed532d287ff132701c3acf1b207492c9a8e55f738aa88902c936829d3e8b30d6ba85d72

C:\Program Files\Avast Software\Avast\defs\24082500\asw8f0fabfb7f362c9e.tmp

MD5 7732e403b7a9d018e07af6984874dcde
SHA1 254d7b0d3355a8f20cd3a62fd0efce21bf68072a
SHA256 36d6da4b2c780fd2d0b869ad62a36c78f97329d1c94fac466a70ce9417dcc7e1
SHA512 a4d31672dae988ac1edd966b8b0691e860aacb9951aee4e76b196695b65c68c6be48efb22475a9ca6c8991da4b40b03a7ccffda9050b445cb198e0a22978eb59

C:\Program Files\Avast Software\Avast\defs\24082500\aswc848cbf9dad931a9.tmp

MD5 963baf7ab6904e0e83936fb075e45f78
SHA1 63d2a6b22041e957ccc88db513e8a9e88bbcc63e
SHA256 d7f5ea27d3c5c2e52a17adf394e7669e1875aafec76d5e244bf44a728306dd21
SHA512 e4602b07da97bd52b7da02d9fbc0c22977b883e3fcf0cd8a866fc6fdc0a2976002dea2afd4c128e69f4ef505e3600e5f4e243498377f6f1327dd24ff93655825

C:\Program Files\Avast Software\Avast\defs\24082500\asw06ad02cf8eba172c.tmp

MD5 ec31008e738eb8b36da94dabaa2dc3bf
SHA1 ff9a10d2a5117fc2067b95eb061d4d7dec95b329
SHA256 c3897b5dd4f05623650d14fc1dea1dab1beb4cc648c094a832707b8f0cffc035
SHA512 941e40d58624a9742848895ea011e7aaaf85e2b7c4553df779cc040193003fde245c219609f7754aa927fb5311f82cc1a73aa5e732dbcb2da8b5adae9a1faf2e

C:\Program Files\Avast Software\Avast\defs\24082500\asw47bbdef7ad7a90a4.tmp

MD5 2159e5f50261f38ccef2d9993aa5bc5f
SHA1 4831509e32e8e00aec58d8c56f07b3607fb423f1
SHA256 0a15cf6364e7c930a944a84d3b960df1ae97ec308d4a7ee6b24f6d2fce50436f
SHA512 87e709bfe19e4b2e1def9ad5eebc880ac62c5aef7c169b57f9d63d97e8d3ff6b76ac51dc80681812d090fc6377d09623495608111190f173316c582c1f29a9fd

C:\Program Files\Avast Software\Avast\defs\24082500\asw5ad554ddb8719f6e.tmp

MD5 5ad6260dba269dfc5208221e6c95f369
SHA1 105761309d643432e334d641d4bacec54d1dc35f
SHA256 0eb012a4cbf7e04009ab2dc08f3e7a81a2680906b7fe1c952ec145311de98062
SHA512 e294b733fc8b56d328abcf544f8f327689f70517ab9ceda6fb9b4c4aed76bc0a8a6b6e8be222165b0835936e6a5636668eba6116dfc0b1420393840f1691743d

C:\Program Files\Avast Software\Avast\defs\24082500\asw4cfdebe6349448af.tmp

MD5 a9e9e45238fa588976dbb5965f539e24
SHA1 d28b5fe5b79b5d2bbfa19f356588118c55476390
SHA256 bcc3b7f08bd136c37f801edb705bbcd24dcf1db02738cce66174e4c13585ac1e
SHA512 ef13be912de4d0cdd30187cecc8332f1bcc721677a6b7bc15f421cafa51d42147168065c0d2620fb7e7b1b7392102edd48f0f7b05ebd40718f5e55bc932fb520

C:\Program Files\Avast Software\Avast\defs\24082500\asw08e8aea89e39addf.tmp

MD5 af0b80fb8a97bd02b5af0fdc838bd05f
SHA1 c2587ede6f3fe3ffb62f7d2944e5ca8b900088dd
SHA256 232867c4cffd5d252960f7b8a87c084fde65ea9edbb377231202f8f060a6a53f
SHA512 3b7f32567b36240a271bb4d99815c9416c94bd9b1549e5f96dff8bc00546ba054f102f00cd6ba0fef23820afde46bdf68de11771dfab27e1b0262f748e064de4

C:\Program Files\Avast Software\Avast\defs\24082500\aswfe45e737f99a3fbe.tmp

MD5 5483e001b9d22b973388671e092f8e17
SHA1 210728e4f47c23227d0cdafe687f49e51c78c4fe
SHA256 ad1eae6545aed2134b26d714475952767b68e20f971e3db3dd8ac6cd4b0b0c7d
SHA512 8e48e70a9eb5e59915bab62321ac39e325a7fb5d7dc463d4dfe576aaf7607fc2a49d5f4c2d0feb8f6e7bc5309cee8c33184ea3fa6c09ee594b5641aaf775447f

C:\Program Files\Avast Software\Avast\defs\24082500\asw44e2e48173b17e5e.tmp

MD5 0350d9249e86eb4be7ec22713c441212
SHA1 ec80d845fd6b59fcabefabf44688be0a9b325169
SHA256 46467997038bfda0c95ea4f4a6812c5964b28ac665bd224d1b060d164c23f754
SHA512 3d713ce5095dc6f80b378992748eb1f08c928d9789272f2e38c6abe29d51bbfbace2181d99df77ba1f6eb64fa784e61c097fd528e4d3bad51699a5a6c2761e0d

C:\Program Files\Avast Software\Avast\defs\24082500\asw66cf47253d1f7d24.tmp

MD5 bc11f124cc24c50d41b6df61f1e1979e
SHA1 8dae3eb4bbcae658b1bf614b0083c4d6b57485a0
SHA256 ff50b8768705eb35adb24a9eb004b09bc4da3fc73a1223148b2d4ce3e6b69c0c
SHA512 4862ebd413da72d3cf547ed9fffdbe792d45ea1364c5b908c94c323901f576129e0d558d28f8a1775a761a55bf1830b3022ebf58cdda1b3f4f93bd5e1451bd88

C:\Program Files\Avast Software\Avast\defs\24082500\asw96232bd4146963a7.tmp

MD5 d9e702b0770fcde0e8972ef908f407c1
SHA1 1dd133a49bdbc660555e6b1817e7f32b86cea207
SHA256 80462d9f317d92d6a30859cc7dec5eee5f0831ae3314a6028ad75363e64dfeb0
SHA512 eb1beaba3e6acf231e24ed339b505ec9fcfd5391f5e79b2328f612212b01e281dd17538f74e9b2601dc157da57f07c963fac5549e6c23c92571d42f182ea886e

C:\Program Files\Avast Software\Avast\defs\24082500\asw8d2a477f50287860.tmp

MD5 3bad7185946dc2334e952c33e2645429
SHA1 004686b900f7deb38df50d87f6a3cc77c53a2469
SHA256 a81ad19e99e4ed4c6c2de89466adeff821b9643a376f797eaa95227fa9afcfd0
SHA512 ce7f1bc8294c2d4d1101fd302d1a01ecaf4103e0aff9de098459c859d8a93ec22d6a7f04d506b508feb3166d5aafba39e67fa0e367896a59e04d6d2de538f96b

C:\Program Files\Avast Software\Avast\defs\24082500\asw8522673e88f147c0.tmp

MD5 1c93d6461cf948b206529d8fd23a32d9
SHA1 f8546f48c489f3b2afc6f3d03db6cda1cc541b39
SHA256 fea66899393c4bb0ef9cb7c7361c6105606b3ab7cadc5ca0cb7cf615e625cd2f
SHA512 454e14ebf3a592ba7b4342ba9dcc60b25b9db32d0b4be037b9788fe72ed4050e54f649773d7f34c87eb7b824d6b053f1bd2b15b8164a8b223f7a373b0ffe1842

C:\Program Files\Avast Software\Avast\defs\24082500\asw3a2d371806ff5175.tmp

MD5 919b04c657c1772274cb10ec63563b06
SHA1 6b0ba0759bc3311071c9c8bd84804bd979cf9994
SHA256 eb176c2f83da8fceff93c34a29ca578070ab3c5da607b3de599f94a212efa660
SHA512 d3fe4f9652d9d550d618f2526dbbbdfb7415c54409cd627fa6ebd41b9bfb56e7cad86b09b18daa0a4b20410569e4d6ccead5a8e908bbfb93b4f6fd3fb06faa79

C:\Program Files\Avast Software\Avast\defs\24082500\aswe842185d359d9bf4.tmp

MD5 534fe68a98dd9a38b72506bbda9a9daf
SHA1 8b33da97ba8a55c28745536ec46cc3fa22876c96
SHA256 847756a48e1371ae2a6008772ec5e7993db907c2cef716740e67c71aebd89bf2
SHA512 8495e8c23b463d84513b25d472e31cf8b0be902d9a4f24bea11e4f39f8745d6b6a7f5d26b5e211dfaf9570ca9f16174217a6ef4365c846b1650b0fda0ccdf6b0

C:\Program Files\Avast Software\Avast\defs\24082500\asw580dbe3afab90a8d.tmp

MD5 cb4a7a9c9143d12d76f5367ab3c612d8
SHA1 02997965cb84d64a8146bd6e47bd79026157a826
SHA256 de92f02c0a0e4dc70196682fcb2e922a43d46958049fa4540ab1b681b2d4784f
SHA512 fdae5e9718580a6245561d9a09f72dfa63cb833cc77963e53aa7492d4d746a1f3acf40e2d263ff1417802116766330f9fad8a2992b9b376fb5374301f6e0759c

C:\Program Files\Avast Software\Avast\defs\24082500\asw2865ea9e0261b78a.tmp

MD5 77747af85d2b2510719ebb3bedb890f0
SHA1 f1a4377ce436d132b8e89a295b31a2efa32335c9
SHA256 b7435bb22549893592e83bccec3877e8f0faf346391bd0d9d1cc66082d64c93b
SHA512 b0bd0c2732c8e772eb484f3f1e2cafc3d2eda77c36a5328d53749e1e49803247827cb78b022fd536fc98d739ebcfb4e41141ed333416696893f263677c530f28

C:\Program Files\Avast Software\Avast\defs\24082500\aswb2b114853c4c1c33.tmp

MD5 4fd0b0d3bc05bbc367ac033d8630882b
SHA1 90ce8eac90bd50c4298022fe9231c8522cbb7dd9
SHA256 b6f6716b5bb8ca6e20fe9d5cc611077341b59b2255fa134bb7cbc72b5998ac74
SHA512 bd1360797de3dc03824c1bbde114d6eef79bc379c1be8b1a899b868f75389f07d0782a90fcf743a899c241405258bcf1596b85bb1a1c9bd4c931750a3cb02e8e

C:\Program Files\Avast Software\Avast\defs\24082500\aswa83f881323848afa.tmp

MD5 7c110accda9abd81acb15a6f371db77a
SHA1 51d04181f4da7b1ba5feb4af429da6102f9a3532
SHA256 730090f310d9e25aebe922e621c00cce7a1e176733b7d1fa61886ddca1838847
SHA512 9d001bf17b5b8a0a33b07cd316f8e5c49a27dbca01cfacd6098c4fa68308aa7305af54169c95381f555cdfd06c02b83041871180e6dd904dc4dd23dd6b4ff9f6

C:\Program Files\Avast Software\Avast\defs\24082500\asw638a858dadcac98a.tmp

MD5 166bc915f5b48c0189b6287fca681886
SHA1 01e4fff7c200b5ecf67dbf7c9cc1257081bcd61c
SHA256 6bc1a6bdee13c7ba72dd79a4c286ff3bc030834cc9cb717881eebcae4b150863
SHA512 03be847c3ed297c38a56cba15a1fb66c96d5f49c32e0c24572f7b6c306670386af8d56568662f2458359024f0d2a102c7406153fa65a4bc0d983b1870af25140

C:\Program Files\Avast Software\Avast\defs\24082500\asw9d382f728614e396.tmp

MD5 ad65b06fc2f18b4e5182d04ec6e6de62
SHA1 94bdba3696df089f3e841c5f0ffe53ebbab0ef1e
SHA256 57376b0aadd70d5fa3052ba4b22c70a36eb1a769b93b120806df8de748248ce2
SHA512 ed6a7aafbab5fa07dbb38fd9844c92f6dd894f9b43734b0d00763dab5f7691bf2eaa41fc50fe24d26d94e04fae9eb55a1736e76abb1af2071f6f6a52bb9f566e

C:\Program Files\Avast Software\Avast\defs\24082500\asw494f8347ad24411b.tmp

MD5 1fcdf3aadb76aee544a33b48fd956250
SHA1 0d36b5bb2a7b7c12b94f8a33cac454775c33992d
SHA256 ecef5ab52155d7b3b3a6bdf6d160c939c899c7d0837c7e435707534ffa5193e0
SHA512 e5d7cc78cde54a817c8d1e9a20e25eb3dfff4b9f73496267347eea4563e6892722b1a326be7e7bec09663f71a47c8b990d14fd57e42ae2777bddb9e64488c2c0

C:\Program Files\Avast Software\Avast\defs\24082500\aswb5db7eb04a255677.tmp

MD5 f596ff9268b628568b4be4f997c17515
SHA1 e7e8ff81669cc285229aa1f66138cd6a4dd56771
SHA256 78d42dd3b747803520aff575cdb2ce527da4466cf4d7b5003f0ff25fe9b195da
SHA512 b600e7f9df2f1c14d8f636b4a12602ad485228efe1a0e12ad5ee0de426790692e5440e83f073e1b17ed9f43842a6fd433694dcb47f5f4bb70b17036eae0a8350

C:\Program Files\Avast Software\Avast\defs\24082500\aswddf9e5ee863a8a15.tmp

MD5 cb96428901cf8b797f1cd7852e4edafe
SHA1 040a74d657ba2234c1c8917629e2ea52065843bc
SHA256 f53513c4bea4563bf35a41bddc26555ee31864e94aabefada06328a0e8b36b0a
SHA512 13151d9e58c3994d379dc11a167c20cf9564ff26baac13c29bcc17883c1e3499858c9e259744f89ec3cbaac8fb25b6049285fce9006057931d05f0deefeb636c

C:\Program Files\Avast Software\Avast\defs\24082500\asw003f164f8f9caf42.tmp

MD5 9dad75ce2a2a377fe300166d8a46640f
SHA1 c625ca95346a4b050c2fbdde83b08ef7230a7601
SHA256 70896027901d3e4d8c5df191be04445d7c022c52af0ca46ca2763d9bacec373e
SHA512 fba5bae13b2c8571aab8cdf5538490c0ba8d442e99d908693c24c7b9e8e49ab6321ebd535a80becabc5ad57fb0fdd93e60fccb61dcec4e898394181c44c3900c

C:\Program Files\Avast Software\Avast\defs\24082500\asw817cf3221cb43142.tmp

MD5 80a29f786b653c1686f0e2741daa548b
SHA1 7ae8c460324c7a48a8f14533857ea475aa619d0e
SHA256 84d9ff96fa8cd7b85351e953033ca6f00f3f10aef44a8bb2a1f9c62ce442b595
SHA512 8fb409f2538105320cbef24aa2bd91c8027bf165b821f321108ff1e2d38198e38514da6ca1c2979a1a7ab0de8b488b8c007a588660b5258f5bec4d4a9150e45d

C:\Program Files\Avast Software\Avast\defs\24082500\asw379706c181636929.tmp

MD5 9612ec821e42d06bea4c2838b8aa1917
SHA1 9502172ea03370bbee94f2f90fe1542c387d7640
SHA256 df0b9177501c1e0f8116160744bd305b62984528b9c8c24ee9bdcd159e0e1a05
SHA512 ae21a68ad4914eeb97f9701a86cccc58889574295bb4084eb74fe316f9ecf848677e2a76f868a584184179a9ca5b4cf9ad082a84815d3fc42f27da6910be4786

C:\Program Files\Avast Software\Avast\defs\24082500\asw6952a461c07ab695.tmp

MD5 94bc975541f0cc655bbd94d053faa375
SHA1 48a505b651dfdb8d20bb77b3f9dac08810a10aca
SHA256 6918958c9336b6e9db95cd4db53b3d97ff075b665330f77f43cd5f4e1e851e67
SHA512 694ebd8f3daafd14d1b4868cb9f805a633e20360ad834a1743b05b5f0cd6347be6b4283f0e615d9e867c436f1bd60a1563f26c6778a356ee552157bd0400785b

C:\Program Files\Avast Software\Avast\defs\24082500\asw5e405b4c01d3f87a.tmp

MD5 59b8a4388296904fc61a1436296f8432
SHA1 a1fc126a3c5e0e7793457bf6c9c0b22ec2a53e0c
SHA256 f2fa34103b86d9faa88159c4df5cd799e7eea674c3b672e96c4424cb4ab3b15c
SHA512 69de56453cfd594a7d2f896900f53b800e94101ec281ca3486db4cc010d532a677017b305be53d0a44abd37f608a552c1927501519adf6dc885fded8f4c0097d

C:\Program Files\Avast Software\Avast\defs\24082500\aswdb21e4cc785bbed3.tmp

MD5 af1ff639afe05d8c43cae23aa8ea7957
SHA1 700b14fcaa01a09f063f7c1184c644cf70997713
SHA256 35855571f51f1f751abdc5dde02a7fb158647b52cc24263da5f550b8b19872ac
SHA512 2fc8ce883110528ba638bfcf95b2cd93cf401a7239c12cecafab8ea223932df072a07aaab2c7097190aaf8a7ee21085c293d762a6c670fa64ba9f7a183833e1c

C:\Program Files\Avast Software\Avast\defs\24082500\aswa375d29821c6ca07.tmp

MD5 762f6ae29d4b29368598757122ee4f25
SHA1 826356fbc8bd4963c70ac7972941379f8728d8a5
SHA256 e8dfffa50a441133667d3dee3973c39e394e5d5537aafe0f5786dff93158603e
SHA512 32032a7751e868babf53936349611bd73e9e0c8e7fe61babb43790e0e7fd7c51f47eb1028900226d09bed602c5f2045d062846856f19ef27288232a03b9b0f00

C:\Program Files\Avast Software\Avast\defs\24082500\asweafbc0474bdf20b5.tmp

MD5 e98ff1c86946dad58bd8ec5281407e32
SHA1 d6cc0871f9905d963ff228ea644512ed09baea76
SHA256 c6039ae8948ae7f608f2a575bda1a80c9bb2ca4e644476d9498b48b995b37fc9
SHA512 bdf9d61a2e251b0f85339c7d41f77e02b8afc5f0a59c3fdbdec313917e4d2a216b18ed82dfa1ef85d0af3beedfa674744ecc75c7f55f47eb3f08d8b7658b6b61

C:\Program Files\Avast Software\Avast\defs\24082500\asw5fe678cb865ecf60.tmp

MD5 13cc2cc12b2752bf14d49188a1195da6
SHA1 8adca3a81e9a7748881d73f0d35a93f93fa0775f
SHA256 e24430528a9707173f08c5a2a4b327b7d790fca2fa44b7be58d8e3fb31d9d8f6
SHA512 baebfeef682a0f8cee62b5d3fd1af0c0aa64b9a93f07db8e2364cdd39efa424d5c49baaac66def8d137bc4c74c8b8cba0986b16466d75471ef9db6f2a9f76066

C:\Program Files\Avast Software\Avast\defs\24082500\asw35d27936bd0cb983.tmp

MD5 cbe7b288f23c7e91f4bb232f087596dd
SHA1 7777f1804213a13586d2fdff08ecd3d227774f4b
SHA256 db576f26f350761f3f2bcf84041c12b2a469c3b109e6d942f53c5c247c06cdbe
SHA512 ad9eb6eb8d31b82165c129b0c68360f41430922d91abef1161cbb72306bffc366143445895a521a452688569b019b400cee421487a29e6ddb0133aa3d87f6513

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 003a5286699579c2a07521556906d692
SHA1 0446dc7f16e0182f005d9c6d75254640fbeff4a7
SHA256 1eab93ec310072e93d2d8a75034f6d7183564c8ffc9bcfbb6e326bf5250e9f6e
SHA512 767ffc3164cea679c294eb3d0c4c3d09a86f0077813d8f65113878f919adcdfd862b44316cd5fd8f3e7d3eaae12e47d764e14753bf205c5e42cde36191deb9c0

C:\Program Files\Avast Software\Avast\defs\24082500\aswf14ac0bca9a5e3f2.tmp

MD5 654cf8a1f5e98cb4ecda8bed3ec62322
SHA1 a65cf159bcd5eb1dce16f7617bf627e575644fc8
SHA256 9a5e73b1bc77cfb11634d18f3aab27188b64de804edecdd07485e98870806b97
SHA512 dec0e603752f0981b27a883ef3f23bac1944b67f17d31de18feea57b8ef0fc35fca27f0050d6fc339081853664bf88fc1365217aaadeecca639069a784549ce4

C:\Program Files\Avast Software\Avast\defs\24082500\aswe56918e7773e2b13.tmp

MD5 06091bf5e29d390bea0f1ab936a4e848
SHA1 fb4426c8455c8b472951cfba3e36b5a6752d92da
SHA256 5c47098f6b7cb642b7d18cba624ed7e520c915ce18229eee72a7c1ffeafae004
SHA512 716a83e62def4d4c585046aa4686a67f9714a6e0afb1305a89ece4f9ab90a7319c32fef95c5c6619913fa6d90d2f49956253619e518058f72d69e5dc804fa723

C:\Program Files\Avast Software\Avast\defs\24082500\asw087e1e3e773f9d1c.tmp

MD5 d6ff5c363b9b3cf5a64e5dfc88412f28
SHA1 59688548d48f96f9bb886da89470ef5f5e687b7c
SHA256 4c1a3d7c492b54872ddcd0675d6fde6a866b49fa8fdea8338ab8abc0eae258df
SHA512 ec3cde94be2499d0d93d7128337d2462fafee794151f64de51ec03307d7212b544c6bb20945345a88828dba8fde6cab0279c95feccca87dc1f34532284c30679

C:\Program Files\Avast Software\Avast\defs\24082500\asw4844f26e4acf1b15.tmp

MD5 446c9e28d48f6f98ecc331f6699b6154
SHA1 b6adfec4630a361664f1c09aa0828b9c36b51680
SHA256 9b1a4e1535422da47d4be1fcf4ef739223068f6b7de3258fc5804d2cb02c8e4c
SHA512 a92c41405c3da3ed19a89cbae3a4946b58a481c589d7e271ae6e2e622072cc85c2481a37d4ae9bfffa9852ff01a1d44f075d54d32cf5db5c81eeb589b95c9102

C:\Program Files\Avast Software\Avast\defs\24082500\asw4629ecec0c8787d5.tmp

MD5 81534b89474714bcee0019698a8206ff
SHA1 5e712579a30a12c8b8b6c95affb865bb115516f5
SHA256 8cec1b352aedca5909050ae4285266fa7e6da00ed696358e1ffe88f6361dd375
SHA512 25af3073fd0ca9fb4053120c080635dd9b3170b73aab1cf73a8f9bc9eca351a6d2a355c30cc6aa82f7fbb997514b6ec95065a46775694dcbc75d90473e8b9df3

C:\Program Files\Avast Software\Avast\defs\24082500\aswa9d6d7d8403e6927.tmp

MD5 c838d5e46b10619ee43d1d203666ec21
SHA1 a041f513f7c76590f2a92329d75b8bff719de375
SHA256 deec78885e387a05b5d98ae9e218ee0be3b72793787f19f95e1521727d133743
SHA512 a7713021c04df99c4cc8ffbd33122f4d9b45698dd2d4329ec05a787340766a74cdff9a1834da13403986706ec30e35ff06f43153a1b1b491db277fe2abfa16bb

C:\Program Files\Avast Software\Avast\defs\24082500\asw4db6a28cb8efde16.tmp

MD5 6eafc6b178ba81a9b4794176cd2445b3
SHA1 dd5fcdcd18df2d7652dabf500545578fde57f829
SHA256 c3b8286715f98d76d611069d806d881afbf72e5ba139c6f3807080a9fc885389
SHA512 ebe7338c733d2307c7a4b542249eba4588bf47439c3d012794d1700b4e5f805292514126a044b96733904175add8777763bbe254d7590f927e2ab333cb9a7663

C:\Program Files\Avast Software\Avast\defs\24082500\aswe7665207211eb623.tmp

MD5 d3d61156aa25a967b01827d5d478c7d8
SHA1 1e35afc1fc55c587d2b6a0dd0b1fa5a3d21e476a
SHA256 2086e21de1cdf7a16bdada153364053ad5efbe4ec5688fddb9111ad2dc7c2876
SHA512 b9651703d1ad7b7b065f430835e5196d864b9c464b3544dc01583d45550298447277d95bedb661c45a03dfe3b67360629f53b0ccbf9b1f92b578f67dc8e2440a

C:\Program Files\Avast Software\Avast\defs\24082500\asw0476f317d558cc91.tmp

MD5 9e8d3d87825897f301fe7f31651374d4
SHA1 53a40c4bf1fdfd4a74e4f0ffe648e92153780c49
SHA256 85f9a442c054695f46d566b783bc97947cef4a4f9525aa438299910d51d36581
SHA512 f0cd3d2c909d2a09d8f17d92a8c7516e13b1d0c40baf45c37cf9fa9d319c3ac12d6a34de9dc0587eccf987cc05932eb80b922cacaedcbd9f8c9100c4fc4ed57e

C:\Program Files\Avast Software\Avast\defs\24082500\aswbc690eae46e4dcd4.tmp

MD5 7e4576980a9621109b7017a0181c352e
SHA1 bac27f02cb04e911d2b8499ccc462808858218f6
SHA256 8e3fa0ee48c4e7b1104b43ca46d2a416963eae8bd746877897b4fd60b13de4f6
SHA512 afdb7519f69d22d10c4bdb2475809f7451121465b165c2c66cc4e855892ecce34e904b69bef034cc7cd690de751c0010689f2dc0cb26c5b8e170d78477acc0ef

C:\Program Files\Avast Software\Avast\defs\24082500\asw5442d872b18c67cb.tmp

MD5 a52353626716c65ebf611debc7b6efde
SHA1 6d49f381ef479f0933f791ffc95f4e1cbe4080f2
SHA256 873715c1f8688cd7a9f95ed80f10dbd9e020e21107a15c5dad09a27d817b43a7
SHA512 d8e131b0522970814c499b2617e0700dd43afb6ba94a96920c2837c821e4c1abdd5c903ad583c63cdebb152716bc501b40dcf2f4f415289b1c122abb1d4ce0ad

C:\Program Files\Avast Software\Avast\defs\24082500\asw77b419144c23e0e8.tmp

MD5 92c79ff1f9738e5ad939ac34e4dd78ac
SHA1 5d944651edc393417d2fe9f22bebbad0cd1906cb
SHA256 d909f44dbc6b2621e1baa59e4052b5a9bbbb03a82ce53f8e1b035fae67bde332
SHA512 a72e176fb872b34235223bf9591ae21760acb83a9d936b4d7d342f8ce0f20426fc78c03ab5efc8e56d9466a4f44698a663822ba30e7db285f151485333956c79

C:\Program Files\Avast Software\Avast\defs\24082500\asw1371d0eaa80ba00f.tmp

MD5 2116f24701b1a20479c3b32b677a38d2
SHA1 1f42a6b4052902a2820da6905e5a8f599d39d54f
SHA256 9ce7ac468c1f7b881b04888fb5d3e12e620d7e81525d505ff6a57171e3fce8ec
SHA512 81ac3852cbcb80d367e1a124a2f3f413fbe1dce2e2559cd0fbb454667f8909ae39aaa2cd090449bffe6a8275b812c3fc9909053127178721410d82da3da4ccfa

C:\Program Files\Avast Software\Avast\defs\24082500\asw6225f9c9b436e2d9.tmp

MD5 c68413dffba8b52a402b79f0b479b302
SHA1 c468a63c0ac4cc63c11a1565fb4c5fdf095ba905
SHA256 067e4cada19a98b69a8cc5c4fc0386a86342009609d9d4a508744b1bebc7fa4f
SHA512 1cc4b1b6306897d2afd68eeda014d0bcdb322b1bb046bb7b4dd5ad504edf2253a58427c64c398a3ce82e674372dfca4ce1d362bb0f24f26fb6f40b2bfcfbbf74

C:\Program Files\Avast Software\Avast\defs\24082500\asw46e6d5f51875f689.tmp

MD5 4a1fc69f4bd818753c57ab0e10a8df14
SHA1 0f9b83cec11b9c5a60ac50ffc90ace6e9686a89e
SHA256 dd719bebd002054dad455d8e8c4ead02fdf37c22998367624c4e41110bdc9c9e
SHA512 049dd97e52cf51f655db51807ffede5eb0dc86d8bec1c38c4e89164f3d1f3cfdcd69e0ce05161ff9d1095d6a43006e0b7de7c344bb746a0f876071f51c3d6e1c

C:\Program Files\Avast Software\Avast\defs\24082500\asw7fb9d519c1d112a9.tmp

MD5 2761dd29fde2506779286b324c2df973
SHA1 9107cbbf654cf12a43af4b32f26e5008a758fa0d
SHA256 f042e2961e1bd881b10f75cfc4e247e17eac96ff49b51083e37f8591b2e99b89
SHA512 ee0eb7855e25d5264c02a242d1814804681b4ab1f686496a502969dacfb7fe9402a3d3382d58f4363e5650c37429acd44d49f2892d755fc34193e98b49a6c3a9

C:\Program Files\Avast Software\Avast\defs\24082500\asw6217a7d7bbc6f84a.tmp

MD5 525f4fe527ca7c09d4ee3cf687547757
SHA1 8332ab48a2ef07033b97d2178442d8c6ccf6649d
SHA256 aad3b0a87587ea79ceb4cfda51ac5c93c565357f1c62b21b653ad5ce916244d3
SHA512 6763281d8aa1a985e767d4d7b8c22ce361ceec646022bfe33c66452548cc519aec23e9afab61c12f5c3e6bc7ff191554f226f3b8e94edc2458b8190056a38fed

C:\Program Files\Avast Software\Avast\defs\24082500\asw88f51283050b7254.tmp

MD5 fede58c5e447d2fa7d39b9340d72ef0d
SHA1 4f258d23692d795e2a78d73ff299063a0abfc33a
SHA256 cf52174b647373762150cd11a50eb0ebf1383caf6f641e3f79cbc713959d2a2d
SHA512 d51a55e7475d2d78cc7f79915729e05075b4c24484f60ce89149d1a5a4c598fb260a766b9b5e255d414d8adc3f3d19da1cbbb89a18601ca313f1cefd226d10cd

C:\Program Files\Avast Software\Avast\defs\24082500\aswb6fb099522e9b4c3.tmp

MD5 74de21100533f6e2bd51abb5eb3f7261
SHA1 a58335484afd0bd6b6c83d3b2853c040ff4453b4
SHA256 ae0c64e01e78af4592ee3f1351f4fa786b21302a79e5553fbecf76efff0e6dca
SHA512 d29f83c7e51f503664586c08d41d2af70025a9966f851dd1bb8d81e17260703b0f96705a28193630595e77fdaf31b1651c63b3f7ed3e5d286812d1dc4bc113c2

C:\Program Files\Avast Software\Avast\defs\24082500\asw7e10d8efa03ab4c6.tmp

MD5 fba7a5641bc95590eedf15fb6fb512ff
SHA1 3a9c1a75427512a1c038308ade604655066d7af6
SHA256 50c9bcef45b1d21d0500a5cdd5209cbf3a626c8a0e5d95979eea5c39fe918f12
SHA512 6fc43d45cdd883441ac49e5bb1323dacfe0b343874e74e7cbc61326a8f9f1b59bb0c964a38475075940b6c858d5a2b219c8bc34a3c58b80ebe36490e59508eda

C:\Program Files\Avast Software\Avast\defs\24082500\aswc405dc933e95a96b.tmp

MD5 eb29ad680806b45043d15912706dcaf6
SHA1 1c9500597f477edc4e70e51b80e88cf167d95a0e
SHA256 67a75b5a50c542178b28059fe030aa4898765a2dcad13645627822f52b5bc528
SHA512 f78404aae51af60294458dbb8f4397666187263f20f5725a3d5f288ddca641fcc800ec02854319264712f752ae6ad5ea29a618cd2c150e9f227e6fc1695a4b13

C:\Program Files\Avast Software\Avast\defs\24082500\aswefcb20642fa08afc.tmp

MD5 1a35729a9ee5ce1dc796d3dbbdd71f63
SHA1 b32eec824d760b7685626631e3292170e04c12f7
SHA256 3d29c0c31055be7095f47c70465534d16bcf297f0ece27cc2a6d63085c80f444
SHA512 fe4e36e19348cb5891f78b0590b96aa7fc9c53333eb26e2e31bb3c3c739871cd917f007a36a06d643269110f84cc9dde1e091ffb05f70b65174349e9a7730d63

C:\Program Files\Avast Software\Avast\defs\24082500\asw54cfa4871050743c.tmp

MD5 454cc829853b9d0dc641f252b5aec843
SHA1 e1a85ebf833138853865f8283cc657a412690309
SHA256 eb893ae069be2a714c2d2f4448f3615c6220450992ad0d6ebffe9ea538b0fd4c
SHA512 5e3d90e2b72a1bcce710d84c5264433ed5ee933cd7e607d9999702743c71a700289f2a379018b1eac2c9c2bcd278b466dec8330eb005f5c2e12ca4a9b93fa875

C:\Program Files\Avast Software\Avast\defs\24082500\asw6c0578a383f0ce50.tmp

MD5 a8a22e3a5ef88854b3c61a7c48a05fb4
SHA1 5aa85cb15d6b66fddd40aea58cad11e93acaf934
SHA256 6d817dae7678ec76cf6f7cd7ad26fd04c156bc818b250e1189aa55ea9c6f7e4b
SHA512 43232176639f6a9c36e19a920f7520a73e06c41a73916f76cffd7b62415d056bf8f22558e0c64141853d736302f95c94ccf837e0125ef5b9f2d7f23a83132e48

C:\Program Files\Avast Software\Avast\defs\24082500\aswcf6106837fdf71f8.tmp

MD5 b67760f733c1a492e6c44f82a689d3eb
SHA1 2cbfabcd5a28d0dc5cf99d593a0ec9f9dabfbedf
SHA256 453dde3cda5ebf91e270a0b33c9991bba67e889359aed66108e76290db542398
SHA512 ba7f1b84206ddf42cdfe64309eb22c4d62a88beeb815404a6796f3af2436246d22d47cc46532c021da6c238278e75676c82aed5badfb9b02b4df5db38765df54

C:\Program Files\Avast Software\Avast\defs\24082500\asw6198def1cdb11bcb.tmp

MD5 1ec7c4feed230426245df226f55ff5af
SHA1 86cd49511bae8209a98689e9be55036e35c12554
SHA256 0d280884fb0a08c0e62dd5299df248501c9d94d9714b67990833bda5d592104d
SHA512 39b09da401b99360a9c404f46cbe2ab6d87a944d13ae367ae5aab0b768963fbbf9df66616dde11e53e12ce9216f3434332a7e8aa451e6c5cfe385a15f086b4ce

C:\Program Files\Avast Software\Avast\setup\vps_tools_64-1559.vpx

MD5 b1e103325047442380de967b73a64847
SHA1 ab4c38f6dc6395ed2b5e12eaf1d95ea69a00bf5c
SHA256 a7e54ccacb4985eda618913661be099b8e4fdacec05ab25bee44ec0ac9a969f3
SHA512 895f923630f0538cc5cee02c1b20fd9aa14ef2060ad70b775ca04967a367413d440851e952397438eb9d3d4dcf4cd104c7f16de4b7067b8ae64f5048d8a76c3b

C:\Program Files\Avast Software\Avast\defs\24082500\asw82362a4d0d1881ce.tmp

MD5 a5c087dd6f5247734aa46850871931fd
SHA1 533e861445890cf351fd98cd75224fcba3a22a67
SHA256 6b13813b9dd76c9da3e1cae8d931b9892830322715029670ef0a6524c6355a39
SHA512 8c212dfe443f4c6cfa4839ff4c5c484640a2399664de808c5dfc18fee8a5f43deb56342a2d66ea6bad2faaa317815816f4d4e53078c0d6941a30cd4d94be239d

C:\Program Files\Avast Software\Avast\defs\24082500\asweac332f12a34ec71.tmp

MD5 4faaaf751b1cfd5dc13e5f268feb1c83
SHA1 0203420715d6fcaecfe77af69a38abbcb8ededf4
SHA256 e2e96751375499eac0dc72e86e15499ab1cdac457fa910c8f837c11a6a6f7e1f
SHA512 985f161d334379296bb26821aa776c4ef18b895ef618718f5482d50454762d17ea0f37a9fa870cad0974abe988f97aefcdd4c42a60545e62b7ede80248956967

C:\Program Files\Avast Software\Avast\setup\ais_cmp_cleanup_x64-848.vpx

MD5 0daf7d68c0ddf7746e9b98b3d2261dc0
SHA1 42ee64049b9539d70f1f08ef0aea9fd2f2518db9
SHA256 494204c0b7631c2b59d682e56cbfb3990771c8e882edb58ef0585ce7bafa3b76
SHA512 162efe81a3660263cd3805071a33c54616b4907cfbf4354a0b005f436c72d8f7b7abc332a4a2686a19b31c61257dc7df74eec8410889d1dbe6dc73c7335d5d4e

C:\Program Files\Avast Software\Avast\aswd7695e51b592faec.tmp

MD5 4957ed73d5e5e303e351c8f8b7b53e1c
SHA1 e61238f49e44237c56d4d5b41aeb150160880b74
SHA256 59727f7a256b7a70971f2e62b43b0a923937f85689fc3aa4ae50e4fbfbf83499
SHA512 db4854667285bb1cd8d07ab189607ec5bc489afb2d0a5b5a3388f91cefd012feca689787452901e0eb1de6e8792e69c0097c38b89bba0d977d0b29e5e5ef2feb

C:\Program Files\Avast Software\Avast\aswdfd81928cdb5b864.tmp

MD5 17b24cd98ab8714abfb1847aab4bcc38
SHA1 e3c8a2ea624e9e4739e951f27e8fe0748511c420
SHA256 532fd260954d47eb1364ea4e79f313b56f4b440a17f32519dcedeb7c91276705
SHA512 29ae5c1d51699e1fd11e0c8d14f5d8b0e56dc973b6b39834c1892014d6a512872e8d9331d9553f3c2ff31dac51dc3b7df7d4df0bee3cb76db84d2bbe9af1a29f

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 1255b45fb626d4a17a4ae087e0c35745
SHA1 49351a6891efdf33f6e08bb7095d835e05d66537
SHA256 9fdde37bc7b071f7a64bd8cc4bd3b8361d790bae3aa228c73a3c57b344624d38
SHA512 4dd1e01b2a509147ceae7ce9ea50a5a10a3c1aedf5f6ddeb7adf4e28aa9d11bb86b76dc7b7b63bb829a8687d5c8baf2245368dfd9d73d3dd58fa881c9e4edeff

C:\Program Files\Avast Software\Avast\asw0577fd4936deae6e.tmp

MD5 55e8abc2e2a985bfcf63b31fcb616798
SHA1 1515621393b52ae31c697422c3410d9738d58ad6
SHA256 0e5c4afb2fd25f3b0843c1f982d5f1314040ec5446d3587888743e6e5825ef31
SHA512 a0e8ea08b458a791455846b8a38f4576e9d88040dc4240eaf76253d100212f24c3fad76963ea26edfc3dc634ac83cb0151254e64bdaedeb943dbd12d8cbd6e1f

C:\Program Files\Avast Software\Avast\asw9632154f6a49a007.tmp

MD5 62d829f91ec96677fbbc4362cf6fb98d
SHA1 f641fc9376557d0bd15fd5706d367d4bf76f9cca
SHA256 9f2bfbd4a93bede82d4b5e465660deeffe3291f3e0df7a37c36282317be588d1
SHA512 0acc08eba170495d9b815fdc1137347d60294d0f5ebf8515c5710cc49d9cc20f266710bd1f005fd867880d94a68ea9dcb8d04161652078ebb7bd6283749e789a

C:\Program Files\Avast Software\Avast\asw53875e0bf7771e6c.tmp

MD5 a7bcd6caf81ec3885556a8cf8c4add00
SHA1 b0137bcd506c563e26f41eeac42300332db7c3d2
SHA256 73cb1a52cda3ca650d5e6823e5454f76ffab2ce7b69eeeb261df6276006f3d2d
SHA512 7e022fb8d15b99e8d5816ea491abe5e12c247c0ca338c87350e9dc499bfbfd8d32bbc76132d176b2b86e215d60a4ff331b8b66ce73275772b5155ad66c2a9c69

C:\Program Files\Avast Software\Avast\asw01d9bbcab7d01478.tmp

MD5 13c520abb15829477f295cc8c11b5889
SHA1 e23f9aa51e65fe6d9b30362774a5b9ba36ffc10a
SHA256 f2aad2ac13e4fdc8bc1031f85928d5e00f4ea62c81ca57aefe3833a86e85a559
SHA512 76e202b72f9b64e45b39b7e22b69c60ea55bfac51ed45380676064f6314039cd1e761eafe367e2b7246b1ebf933a0066843f5f6666e3cf0d27e63f60c19031f0

C:\Program Files\Avast Software\Avast\asw872b5f00530bfab8.tmp

MD5 cd603f7abfa6cc98d2e6d7d640468d57
SHA1 b231e348d3ad9c4cc921b330b3bb6594b18fde3c
SHA256 6945421b8255e116c5a12cb971183b633746c276a45edc91345a35194c891127
SHA512 ee3175b624e0e05d282952c5b83669ebc607b20c0a10b504f868631844fb8f6d4d2793c097b21cab18ef620724dbe5ac5ab2a4ede41ca2f41f9ffb925a4bd58f

C:\Program Files\Avast Software\Avast\aswbf2e1da838a65da6.tmp

MD5 ca3d0ed22986a2de113775efa75a8f63
SHA1 4b916189c327b10a4ea6881c4cef79cf84c9d261
SHA256 452465990604e30da82e0b5a1c6cf6d4d2cdf6d988b18e8c7a7e90e18e550525
SHA512 59630dbf98e5c1f570da6c48943e945e71563f3d2419cd05dee915125b6a0c486bb690d6c5dccf2518203e7ead299d34f34804ea7b639746faf02e7ce662bc26

C:\Program Files\Avast Software\Avast\asw2a89a18709774a2d.tmp

MD5 98d3b5c05fe1cd1cc2d9411857604909
SHA1 0dbc4dcaf98b6c9f0ac4a977fe760b7351c6c0a3
SHA256 3726f629d730116ddcd239fbd4a25d9087247d265d20146cc78b19008468be5d
SHA512 b88b6d60232e41ac90d4100fd0044f02220ed86ea44194e502e5e62feb99d82cdaaca5b04ab53240d682bf5f406f4402cc1bbdebde9f8f8045ab3ae68b04727a

C:\Program Files\Avast Software\Avast\aswb6a4cdb742672531.tmp

MD5 41e43713bd50b25ef524420dfffc5249
SHA1 3b753724600e16ad77ddbe92b8aee13518ae65bc
SHA256 6bd760a72831bbfad454402283961df9dbd6ae4fd1d09e0cf62cffd995fc42de
SHA512 cdbc9e9b11d56a19d809f4f9b663e1585f8728dbfb23a6f24df847a60f3ec22c9ba03fa3723055490bf7d662f122be38a38761ad858f6b33f82ee4a6ee2a75a4

C:\Program Files\Avast Software\Avast\asw43ebf6f026ed3dd4.tmp

MD5 189de1fa52703670682d951a93002996
SHA1 d089227e5aa87d0aa1973060b52da1c4c7bf0e49
SHA256 4159967aa520790539e229332e140862bbd9f82a5f58881f5880ec2a556b6447
SHA512 94a88140d00e5644a6c9250cecda98c7fbb86bf994eec9fedcf3840040ed4814b89710cc613e67f00d5ea2da8e4eb306ab0be26c085a83ebda84585f3ae1f8e1

C:\Program Files\Avast Software\Avast\asw8cc20bb50f335396.tmp

MD5 0b9199f978354026e8a571d0b87aeab4
SHA1 c58872ef4cfc8994550e9c59cb70839afeaadf31
SHA256 c2f77f4ac4123b0083096d1ac9218a2da14fa3c28399fe75f3970c740e962c6a
SHA512 3e70085bfa174a74723959bf832ce10155c55def270431f3bb9401816468dfb8cf3e16f4108574900434fbfc5dfb3b325ef1dc0e797906e109514e513f38337f

C:\Program Files\Avast Software\Avast\setup\ais_cmp_gamingmode-92b.vpx

MD5 1d30ba5218107fedc99cfbbda02bc3ef
SHA1 5a39a72c4bc742efdc5a4d6c5a4795a57b149e01
SHA256 fa848f9bc0d0e255226fb5e12a3aedc6e6a2ce3012fa9fb1134d899652d03c91
SHA512 6b03925f6426c834ebe19a9f773edfb6de84825542a4cee99dcccf049fa0c97cba13be96e80fd77e86634cfa9b275d1b50d47816c082de2d3e3deabcd071e2e8

C:\ProgramData\Avast Software\Avast\gaming_mode\aswacb5c4ec7d8602e8.tmp

MD5 9bf31c7ff062936a96d3c8bd1f8f2ff3
SHA1 f1abd670358e036c31296e66b3b66c382ac00812
SHA256 e629fa6598d732768f7c726b4b621285f9c3b85303900aa912017db7617d8bdb
SHA512 9a6398cffc55ade35b39f1e41cf46c7c491744961853ff9571d09abb55a78976f72c34cd7a8787674efa1c226eaa2494dbd0a133169c9e4e2369a7d2d02de31a

C:\ProgramData\Avast Software\Avast\gaming_mode\asw80752f6274e34508.tmp

MD5 1527c1fd5da898c3bdb68b8a105937a4
SHA1 d0f9fd4a698f91f54f78dd2043c1349a7e4ae7f3
SHA256 c269c9e66b2acdace62e8ab631f39c24801c4644193bb3934a8dea3c43f669df
SHA512 d574498392a55b47dc81276d63a33e9870232e77f60ac0d78c9bd29e3d419d015a19241e86a7963191643f6c0d0fd2db613ca5290d559c3801358a60fd5cd27b

C:\Program Files\Avast Software\Avast\asw69a21a873a8eca3a.tmp

MD5 472e8f002c889e01a01f9c69e5955232
SHA1 224f54cbf34939f4441f2d520cb240a5d4f986af
SHA256 3c44178eddda6799378721df0b44991f332d8befea6f8650d68461a2e4d13c5a
SHA512 c05190724e4f387b6101843b8b8d4cb008cbe6cf7a387993c977d1cd44ca51b0377f1d5f105cedd5759dab665c4582f19b2582399a1a2a788750ccb960074d72

C:\Program Files\Avast Software\Avast\x86\aswd548bc5e191f42bd.tmp

MD5 d76695ddbf821460229bdca70230c908
SHA1 c6e74bd729aa44c206b1d5d4592d92376ed41684
SHA256 ac05172acf8861f49fd98d2e77ffb1ce58bfb1e46fbc75f38c7ca6325eef92a5
SHA512 207e70b36447d8c496f731d32ec06126d44eeca69b12fc92c001cc09fb556bff589a9f258062a03d3e5102425b870c0af5de30f813d7d5c75e03a656e274a2d9

C:\Program Files\Avast Software\Avast\setup\ais_res-994.vpx

MD5 63f3d38948083a360602b6f9b9f10085
SHA1 27b9948cf65533e4669ab05cb64129069416954c
SHA256 4d37071b7efc40ad03b972680002454ae4d8163a4b4f4923a600a1446a7990c0
SHA512 6a7fd2681e0bd4bede2c8d943d8fc572b7b46cbb7333dee62dee9da5c03677fa757a3878b55f38bc6bc0cc90b54eaf1ee45ed88dff5b28c3c9954de6d26a0f02

C:\Program Files\Avast Software\Avast\asw192781c1452ffd6f.tmp

MD5 e7dd12904d1a42f482a6f5336a994cdd
SHA1 d9eb61a91df054cc4f5d67c39b0cda46417b0f24
SHA256 e011df5987bfde71db261e85ded37617b3b41564592c66f438b1fe5a02aae56d
SHA512 e76d03b8c937b471cc1420d1d8f0ceef07f1ae04388a4d4c653987617d5f9a3a591d91f79d58f477626da2b34fbb68e4e4c8baa070f1888ced2fd910d9bd71ca

C:\Program Files\Avast Software\Avast\asw489b8142d885ae35.tmp

MD5 a660f251da18d76bf075d43c982f9b80
SHA1 0d9e4c645494916f2ba13ab5486cd382c06d8d70
SHA256 c148a09b5e36ea148dd88b3b40bd018ba6a1cd10ce0a76fe1cd7b33f74ac963b
SHA512 9c813acc928ea7bc6707102d3e9496f373fc1d6eefcafc7b9c2c7b284b6f27214f4a46b9bfe73270ed109afd9534d2d3366135abd1e40e8dc9912a792f522162

C:\Program Files\Avast Software\Avast\aswdf99207a822faca9.tmp

MD5 ea9331986adca142e27c771f621cf01a
SHA1 4a51684451153d4b68882ca7b3b9034b75d4b5ee
SHA256 13e9735b602fb954b933c566bfc6ebb8874c346f838ee3cf1d50d480670d779b
SHA512 aa6fe582565fa255685c1f86c1caa0a74112dc5899183803a50b59a0682396d45dbc4d5708c5234b7c53602fa3e02dd07d5e5e0f8f4a6cd6975026b823feacf7

C:\Program Files\Avast Software\Avast\setup\ais_x64-994.vpx

MD5 c869bf1dfc1847371a8a75d4cdca7cd7
SHA1 425b7a83fced05d6280b702ba55b3c781436eff8
SHA256 920bb82374d011372338aa6f3db2993df938af6c0c50f5c26eba69f9fa08aa12
SHA512 e97c04295ae1ea8cd1e0c0c0a6dab61a737a4847b5351b2375563bdf16a1e99986f87a04311eade67ca3476ae85ad5dbbcd5c3920d5db82ba2d88b823b6e15e8

C:\Program Files\Avast Software\Avast\setup\ais_cmp_idp_x64-92a.vpx

MD5 5d30bbfee567e7d9ef6458bd52de77cf
SHA1 01713185d4fc9e904423cdcfb165c5f8422c3732
SHA256 59e6f4771ddd804cac72f82a2388f1109edfa71e490b168dd7ca5441d0317233
SHA512 6eeb782a94d6301d61b01d5c4d210dc1896a9bd00c492d5bf086d582146d4518298d49b35b08a64ad737878e00329e41b64a30b7c45755190bc39cb8c36eb1c9

C:\Program Files\Avast Software\Avast\aswda78d96393456738.tmp

MD5 447999a84de14cfa6120d7c29386a24d
SHA1 b94cc96ca9d7e4d6fc9c40a306db5b662163fbfa
SHA256 869af77b527029d1d2cbfc5404259f6a5611170d131242fbe65015c475e18ea1
SHA512 ba999b0bc5f5706c6aead920e7f6d700fa3b86c667e8ffbed046ee10b556943eef6acc89d4872b565e932cf64e9ae42a3c80edf7e8f0fb8cb27f2ad2451116c8

C:\ProgramData\Avast Software\Avast\gaming_mode\aswe4cbddc1b2d21093.tmp

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

C:\Program Files\Avast Software\Avast\setup\ais_cmp_rescuedisk_x64-8df.vpx

MD5 22747d1fff5cb99781a8512ba57baffb
SHA1 971e5ba1fbc0aa8164c1cea68a0ff2ca4a1f85ef
SHA256 f4c68a3d832c3a13096199c6980af7117dd159ce26e55d739198d4afc81c2de8
SHA512 2f524ea5076d8ffbd482b85aa79fb44a6dbbaf153029ce54c26827c99bd2d357b588f98afcf8487bfa556fe53aaddb74164879ea416798312acf753c9a4de620

C:\Program Files\Avast Software\Avast\RescueDisk\aswde1cf33b1b797f0d.tmp

MD5 51aba93b65204620176963b8437ced3b
SHA1 5e52b7d58aca658da053f7cb6a4d982dc04ecbfe
SHA256 875204eb16b067619ee9ef540cfd822391685e16ce9119c74dfc7c9b5b940206
SHA512 abe37d442508fb8fd749b694e900d30d70fbaded4f5c798214ab2ac7d9a3ed55d853a5c1b59b24bc26e9c58ec079cf1f32a611a447f95d057e3e4d06323d6de1

C:\Program Files\Avast Software\Avast\RescueDisk\aswc34c79cd24cdfc60.tmp

MD5 71401ee5d9904fde8130ee189d277646
SHA1 83d0b33bfd04d11dd59b06bad44124a6b1134490
SHA256 228abed4a2d65b3ecbe3d11f575440756d9754194d56df276be46cb420706f58
SHA512 bceabd532bc1898ff6b68442113e6d58f180a6904f2f9a80af899da1abc71eaf531ba5f37e40915b2638cefc4af395d7fdcf8ed98cff39a69fda143cab54432a

C:\Program Files\Avast Software\Avast\RescueDisk\aswad69658a22873020.tmp

MD5 60f89980c467facb8a1bd00ea23333b0
SHA1 3bcfcc9ca70e04c2acefdf386391661b9fb6e3b8
SHA256 02345aa3274436abf12417468b730d82dfd55d7049e036fe0208fcc81ffafc71
SHA512 4f138ce5650424ca69e0b62034ec9467847a6055a211827af1f77069c1c68d7c36f921926a95ca2958483caab23c6881e06f2d7f573823b931533fa96da50bec

C:\Program Files\Avast Software\Avast\RescueDisk\asw6e2afbd17de7a901.tmp

MD5 88d6c96d0cde56ab23396686d204f64c
SHA1 7e75efde14ed59ccbdb94fbe237c88bb45d492fa
SHA256 735be90d18b1bc630fab0216e076a6f3185691d510a5784170bc3d9b96ca2ea0
SHA512 ce7c1a715945ff2a81ecf11dbb6c2a25836378c093d8ce9aca24bc25d38b3b5b5ae6faf44841bd434b378c86651ee73da9941e8660107c073e44affb5d7f0db1

C:\Program Files\Avast Software\Avast\RescueDisk\asw0d66ad4494eac2f4.tmp

MD5 ec82d1081d31554e75d7e72b30d31d78
SHA1 ff5615640cda8cec9fb0ad3fb8a4e441bcc8e398
SHA256 0823905ce46355fe514ed547d5c639af39b2b3d28a5bcabd1846997c7a4208b7
SHA512 2f36323db92f1c1d4e3b8f18f8258830a6200bc7061eaaeadcd0a655e30276592376fa4c4f706f497d5fcd00a1e5c5649e20407d3860910a184ccbe4b36547b9

C:\Program Files\Avast Software\Avast\RescueDisk\aswc5d3559fb1e1acad.tmp

MD5 bbd60a023299b63864fbfaaf9699cf34
SHA1 514838176e634bf2249f730895cb7919c16c5463
SHA256 3b7e420a3207016d2d80aecad0664b4d9bd518b6bac72e4784fa0e85bb0c7a39
SHA512 e5b2740d314ce766d3a5e2c818badd876967a050be0a6ebd5909582be111a178745881e23aaf944ef3a3c8094719cf480b6d808f4bdd2f360f131f723b5cb02e

C:\Program Files\Avast Software\Avast\RescueDisk\aswd8304cbb28f8c591.tmp

MD5 75c0e61a3beca2de20a6fbc39028eca8
SHA1 e5928cb0f902e6e4a984838ba67e7b5f0815f2aa
SHA256 329201f8de3fe1697af5a5a317b45ca857475bc1e7dc7cbdb248802b9586368a
SHA512 4ff71d693178035d4ba9d15246a3cbe0896b50ac411bd2942edb68bbd20fc4933f8068aaf8a08f18fac16bbee849ffb24fa402ef3247969e81af7861c1b5f680

C:\Program Files\Avast Software\Avast\asw532ceb53b64637d8.tmp

MD5 4864985d84c75a371c7a0c019861d28f
SHA1 a8bb246365c9c3caa22ca57661fdfca6e6542fdc
SHA256 b5cb666e05ccdf3ea8dd575892c3465950dbc845bfde6ef46b9257848e1e20b9
SHA512 1f122dc236ae47f6f122171e5ebb7d829e867677a09ab9afcd93d17d4a90b9f3a1fb3aa207719510744c73bf213a3215b9b98b2da83f23e67defd02e24994145

C:\Program Files\Avast Software\Avast\setup\Inf\x64\aswcd133555f747cd42.tmp

MD5 12f974d1c1eb2ba91c89f1fa86ed0140
SHA1 23de371461585c1014f18be01f48312676ae661a
SHA256 2f57cd327163a69cbf241798dc57607653f3d376015bbedfb83a235447c33e25
SHA512 f725d9f4c05ce22099b2c98f6a02d829b8515a2d57f1346725c5d5981b7aafb23cc3bd30255f1205f3866a894728f75a4b187dffd01901e076f553d13b2c93e4

C:\Program Files\Avast Software\Avast\Licenses\asw25bcff84929478ad.tmp

MD5 c58efea00b9a80527a4eb1edf3b48d42
SHA1 7a9460def676dec00affda16aba1e93f0fb26f74
SHA256 a9c42b959825bce9b7c72a7b0797a41580cb21f407b73e08168fb1ed1db438c4
SHA512 6cbcc440792e05c8b73755acb329e2961a1991b730fc468d7483b1c005bdc664271237de634c3a1969967f8feea03b36ee8d2dd58e94dc61f553c4d728ff9d2e

C:\Program Files\Avast Software\Avast\x86\asw591b1bba8dcf85b3.tmp

MD5 71d9b1b49d0fbfd2986b1eddc1d5f559
SHA1 5e79318987ae4e2c5c94e4cccf72dee56934a60b
SHA256 f6d5f85d43695b654499e9207c876eb3166629a7150f1e384107bc6bd13ba385
SHA512 ec57aa1e0ddec706396bca1755cc402420700039e0c85f9ca2764cd4c86e910492cd9a29f455a4fed07cd2df864952807a47981c7f30340057b17c4cc0a966f3

C:\Program Files\Avast Software\Avast\aswddfe2920b6068455.tmp

MD5 70542eb1308eb5c5a4691692419f5ee3
SHA1 44b72fdc3f9fb1fba0322bcbe99616b345d4b2c4
SHA256 f5c1e7c37024542913900cdd96aba550ac3482d6c6e5f6ae1d7d6688cd83e3e8
SHA512 13144665c13afd11e8e13f7aba580c11ffbb7aab78ce0c7365196f3b049b7fe8015cb68de4a8ea6f95188202602c482b9b81d667f13c5d2a8735669afea2ca1c

C:\Program Files\Avast Software\Avast\asw8ea63e77d30a02e3.tmp

MD5 678b0d25cc561932e77f1ecf0788e7a5
SHA1 2e98a0a214cd2ca3af8f7ba7fc9fb8b17dc18fee
SHA256 743bd75c1ff9ca23a355f93aa89763fb51c10a616836f74576c27672c2ae2927
SHA512 adcdc34457519e122b614f9f6037c3e0769718e64185fb2b1a321c6fb6a73eb08af6368aa7c4ede1b3030102c35ad6cd1263efb434977e7efa3770a68bb82054

C:\Program Files\Avast Software\Avast\asw999722925a7d82dd.tmp

MD5 f9fa25480a525a370bf7e75150af0c0a
SHA1 eec74eeba578cc080d8e5d9c804b9b95f4292063
SHA256 78338d4cd052c725064cf2f1e76cb217feb8278144d6fd67b2b573764c12403b
SHA512 6fbb3c82e084c0bfc7c378dba2c8f79b139abd3a24a8cc0131781dc749ce0f1001dfa9c4d05286ce1e19e567beb9f2cfdf1d770bf5133f02cf0b94b728111f74

C:\Program Files\Avast Software\Avast\aswd09e54516e16c97f.tmp

MD5 cda2bdaccbe6cfb02c7a78dc11a6e4f9
SHA1 e4c5e5f0f7269220592c80ce9e6138c43eb593dd
SHA256 bf67004cfdf402a456a219ff956ca98bb68c26fbbb7cc07fb2b61fb2192b7637
SHA512 9bfff9d3ff9d93f4f944687d2a12e18b821675baf8a03201a984b8e58a970bcb0be6179d3fb4f6e78cec74998dd919688e2d45605a9271c1dd98c9a01bdcefd3

C:\Program Files\Avast Software\Avast\asw9a32a2bd42cc9200.tmp

MD5 92c4d014d61102bc79aa24ba82d5abee
SHA1 5847fe1193dd4af5dc686c9a24cd552bb1db6f1b
SHA256 55afe8eabb3f948db9dc47bb0d17b95e8ea1db766019d3da7cbe336fb8742b41
SHA512 f4fa34163a3f80b928c80a90904c30e2aab6fbd173b8c41a2014e640fde159b29903edacb7ff22f8f3219865c65d28ff5d119797da509f0c6fb184ca1d013375

C:\Program Files\Avast Software\Avast\asw465fbf9bb1b7b9fe.tmp

MD5 1e9139bb06a8d15e433160a18078b35d
SHA1 8a099b0f55a4f6ac99f27e27e1b07b092b559a67
SHA256 66451fdcd6d132c7ca1ba1315bb519db5f23367db515b436d3b444f1217a42c6
SHA512 92e19c224994214d716ba8267b004711ebdb63ecc1a530a827f7710a5c1076d082b07ea40205c6e7f3ba9975c05eaf32fff66a40a1b91e2f7b2865990501bc11

C:\Program Files\Avast Software\Avast\aswfbb881af1ae7ccd6.tmp

MD5 e9f6e98093ff19439319df83e819ed58
SHA1 483695da3af0eda977f37131f9c8c5409a8c4a45
SHA256 fdf7242f2ebe857e4058c4977d77e3811e65a65d77d5e888362d418a4309b894
SHA512 ee0a49c08ddc4bc1c8c5b41de9a49c33ff51d595c85aaa944f2ab2933ab32df3a4aec4f4e994a5b0e8941d65ff7ed4d95fbbb6442eb386e9eecccd6cd95e8eb5

C:\Program Files\Avast Software\Avast\asw7080f9fb18b04310.tmp

MD5 90daf63452103ea015be4e425f995755
SHA1 aea3448eab5aba236190566d9ab24e500de6c452
SHA256 2dc5b596cc21616a440df7ace59a46d3a6b2cea2d2b0b4d88d2bc3bb82ebe034
SHA512 cadd958283709df26e6dd12412fd5e8d46907f8d09ad854aed9bb418c07b30fd08b1089d64dba180c75a5854459c670e95c9d70290738fc365a3263e29f61828

C:\Program Files\Avast Software\Avast\asw81ef46cf3267bb2e.tmp

MD5 5fe7315a87dea196013eaa270f8dba47
SHA1 462b67743eb8525f10bbd390b288bd34ca168288
SHA256 3b6a7c53fd975298e66ffeae78f90fba5a1b7bb918634264c355e3c59942cd94
SHA512 89a26e92ace83f279318695f0765a6424e1757e2c6ee4908ce490b302151aedea34c8dbcb9bd41825604467bf789867a2462b5e37c398ff66045f2caeede6bf1

C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\aswb9664ab5334a58c1.tmp

MD5 0f4e5f6c68c514e63c4cdae9eb9e40f5
SHA1 b755c91cb14e9f22c690209d0b4c3661ab20770d
SHA256 945225e01a65e5199aa7372b893da3b42dbd99f315c345f0e7c136af88e897ef
SHA512 8962e7f92446c535151b38a7e34bacbfb9f0f48ab57d4c2c8f2162dc2f1cd9f15be70742032192b41aa368c97a149e1e6fa6991e29077b7b7d7c1708f1a54f9b

C:\Program Files\Avast Software\Avast\setup\ais_gen_gui_x64-8df.vpx

MD5 a40cc92dcca97dc079864c35247655e2
SHA1 e79037cb78c1134e3d032673b32e68b9133eeed7
SHA256 8f2d45dab3900573f822d7f2164bf4042d8257fd1c109148a9623128c4fd5332
SHA512 879f67284647d42dd181a7f7be2e4b5330c98e3515f2b66e868c9bcdf68104e3accea79f491ac1c0ffce27680055dc7c451976d3b17defdc2156726732d9d8fc

C:\Program Files\Avast Software\Avast\setup\Inf\x64\asw9770fca4bf675416.tmp

MD5 c62bbf2d342738cf22841ed579a65bc7
SHA1 52e357a5e215973a58d5f17527d2e1064a810b7c
SHA256 cdfd69906e3265a1537cb74ce4280b7ef535ab3427ef8c2e41ca3ffa4c8a6efe
SHA512 d2afb7ba55903c235728a79502acf8827a1f1cd2acfe3332438743639f45e365546defb2f29e151f6b163d35a04a3375301f3243854b2e834bb68c956f9d4a1c

C:\Program Files\Avast Software\Avast\aswf021bbce2ecbb65c.tmp

MD5 7fb6fbc977e5bebecd0f32fad53d7b22
SHA1 197338ca4bd0939410907158921d8078f5beeb50
SHA256 640f1d10f2a76433eac3a85e7e48e18dc4de11773205fda721410173ae499a40
SHA512 a11b7bcabdc50d3a2cc9d26d664d1b85506abee7f0f2ca7ad3891cc1871e2eb700bc56dd3dd512aa03c5cd476802daf77c936c36fad5a9bbb5c185d95077be6d

C:\Program Files\Avast Software\Avast\locales\asw3a06d74f14206d13.tmp

MD5 0ac44c1ad8985cda2e3ef0bc2082fef9
SHA1 66f721bac3f1ff5be9fb7b926b87341d303a60b2
SHA256 ae4a8e4e3706626f7ba53cb395e2472389bdc1319fbbaaca608ee1ae3c918e0a
SHA512 5ca7d91b3ac747241acd8b76176b19a62cb44c62d991e2db6631097df9276c277d19d3ca6713e382ee69f61550b5d40daa03da838d80f04727a03a97a0b28da7

C:\Program Files\Avast Software\Avast\asw8e0c2349d3379e68.tmp

MD5 ef152e0cd55ae9c1df1491c7551bac8a
SHA1 feda9499fa256246ffaedf6d4a6615a40e0ad152
SHA256 6a8df79486b9770629573ebc87b43aaec935b9fb5e20b5ef7622837801fb43e5
SHA512 f9aaa848324ea5a728c28683f1992a8388a58130bfcc8ffd02939a15050e1288416c5809d09580f5b9367932cf6495e28be889ef11889d80b02826d55dda1c6d

C:\Program Files\Avast Software\Avast\aswc8300aa20ceee822.tmp

MD5 abcb0e5dc06a0b2bfbec4796a78e0f80
SHA1 67faf8d954c6913d606c81758078b56415456366
SHA256 d94a14ef4e833ed6c0cead145108ae3d94a4ab88cc89b460afa43f487051ff9f
SHA512 2373c8aa26281acf315f31cefdb1ed1fd803b566bc12981bff4d36956fad3f368843545dcbdcf8c5b274cdd554159975aa44197587d40a7cd66be115e1f21eaf

C:\Program Files\Avast Software\Avast\asw2d3a92dce7a78647.tmp

MD5 7d373e5595e4418de841026f9c0a0e74
SHA1 499e2b411860082dc491faba11d95bfb908cb2b9
SHA256 3f1ef6d072584118036e5f64b4b3903b2ee8f5580a39597c0459f8d8684556e5
SHA512 f28fc45ef9d0a514119df165a24205367c8575d952180a93d411db48e73047e4bd7637c1b342547b1829c018d757fbd28c5df8de4363222f0130b6cd9b039b97

C:\Program Files\Avast Software\Avast\aswe3a66e392dfda357.tmp

MD5 df4ad5771b9cffa410ea860a72919040
SHA1 194992f0f1bcc96fc8ef980ed7adce30b63fa3b9
SHA256 78eafc968e2524216fedb753a573fac41a24076d808a9223e82c1fdf3b3b9055
SHA512 d425018fd709056e8cc8034d76944b682261c635b5592c8fb4fab6b49611d2e2ef30f9b57dd14feca0eee66efb8a263b5ba4df4a653d0e0563943acd9bf6be27

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asweada05d3aa80d17d.tmp

MD5 7b1fd77cc634e0a7255e96031bb8554c
SHA1 40cd8258f052c446344b1b20e399ccf0ef4e0118
SHA256 2df0cac1eea12f6a2e1452db3a1a61081f4530b399afe190d3c417e22b24fb54
SHA512 d1639d194876ca29f97806265a3d216028bf56f5f531d59f10c3fd9c15427d177b952ea7c0763a04cf6fced382f67d4439d226dfa67ec430114e0bf10f2f2282

C:\ProgramData\Avast Software\Avast\HtmlData\aswd500c0127b2b5b0e.tmp

MD5 c69e876c8bc4f3bca56ba333eaae7a71
SHA1 d00ac516dadf10b6a9fbaa8b6fd7f7800511d36e
SHA256 d1e88cc6880e3667b06b2d006f5fb8516f28467dd1153453c1bf954571fc4f00
SHA512 3453ec35e83ed63f2e88326c1a3f4ee23a6b979d272243131c37bb06ce8d2467585e311a3c01198f3384d852ee9fe525434f8a6eb58b7698c0c8c56b7a8f3b40

C:\ProgramData\Avast Software\Avast\HtmlData\asw83d197d6ba2e9cd0.tmp

MD5 94aa8569ec9b33e05f3088b136dda05a
SHA1 2e7779731351517e2e6df18b313e5df28079160b
SHA256 179fcd4c70b0e5958c56387c7849e4b49e695a284b75471a15a8e6c8637eeefd
SHA512 52cc30da7dc6e6ae7266bf171e4e9c9e16c0d8bf72abda793a0f03e2889eda6171044ed65960fd2c40251b135015a0fa62132c76cf16065ef6fa47476b6d8ff2

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswae5a2e36b66930c1.tmp

MD5 40578e333ce9a0b1bbc77434267cc919
SHA1 e3cebe3086d075385734df344bc8c1fc6bbb19d1
SHA256 9c2e256cd531dc613030276ffec22899a77d2eb6c14c1b038b3da0d7cbb54664
SHA512 4ba7f630a18496b7893617bfd1737005aabbc5f292f45572102559c9a8b964a86c18d09d0d7e715f5626ddd141a731935e99052c5855ab85b348169610623c37

C:\Program Files\Avast Software\Avast\setup\setup.ini

MD5 7982ec4e741766d705ed976d3539a1d9
SHA1 766429060bbef40981989770e9ae1125fc2d14b5
SHA256 b12234725104ca556cf08f2056b57f392441584ca013987ffb803255b8ae0164
SHA512 94554a53985636f045c8b85a1f2f25b5a328cee51f74707d4752d7f1adcb106783694e036ae01c9d0fdd3133d2c4f5e0f62d6c1c1f57db94e7968d1899d3d8b7

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw7af18cd6ea478e7e.tmp

MD5 ada2d45ef84fa1f8a9086b5f6278af2e
SHA1 54110e250311299ba88dcc941961c7ebf0c90a67
SHA256 bd0b70411945c4945618d3ed400a87db33902ed8862cef5cf2997312594a5598
SHA512 9e6c6b7b390a5fba8d75194cf823bccb021270ae2e5dc7e3a0106802f8b18c5e11dc690563cba4e19356b3f5dc6e52cbafc9b4a510e993cf12094392a49123d0

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw617a6277d809f92c.tmp

MD5 476cdae441eb55739fdb6afc8ca06d30
SHA1 e375259fbc0cdfe80247771bd83a76725cf7ede4
SHA256 df031da9881e52b7a1c9535fcd3aa73a0013cc56224c96127f7a57d951d77573
SHA512 49de42c3ffdc08f5d8f8191c89cb087170748d1d6fcb6e4a3a1ff2cc87684241c4e854d5d54ae4f44d0492d725c4849df15ba01702e68fd3b824dd79690e4a4d

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw295db7c82fab0d24.tmp

MD5 5abe8b9a97af33e894775b510512ab19
SHA1 cf0d9b4567ba1692197161bc682c53c976f6100e
SHA256 fd875e9b5db54b1889a83b0b773204fc42c798585c8d77c2431375f7ae2816dd
SHA512 974da58661413912175780272afa1c6c595ea9aff989ae580e895a134f6b425f51db9f6002fbc878054cbbf32ac54ecc8d07c5af7cdf993501acbe0995a3cc89

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw6f4ee7a54974f2b2.tmp

MD5 935dea992554350b3cec04dae14624b7
SHA1 3715ea80df5dac6d52ae8fdcd62b4cf3a5a64887
SHA256 9f1e663c83083130a3e0863ee642155dd2ac9d5964d10345bdda153bc808a6d3
SHA512 5550abf861a31b193b579298d84c244acee313362d8a9001142ec545823dd91009e1931c71b81a7c4d4e5380804e52d2c1e9592c3c538cc133b4ed8aa5956c55

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw64ff0115ad970af6.tmp

MD5 7490b7798417364db18a28945a941db6
SHA1 ee2468aead06205e8aaf986ba9d428627fb4a713
SHA256 3dd397ac6148d654f8e4469234d8c71ef9a9192eb21ae6da4b9aa214b70f8127
SHA512 3362170f92fec1e24d05de0f72fa39c120ff9f48e67ad03981e9ba1eddcaed366228159ee622af3726646c4d74a7bd88d36f4515af47213f9e0e6207c89a8bd5

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswa5a4b7bc70f32dff.tmp

MD5 565ca24bc64a9c99c80187c2e30a45a8
SHA1 b52332f1c8c3b62286edaa33b8be473911b93ee7
SHA256 e38d4cc17c71facd3584657b5bace11713b9b9058a6ff67f85a898885f7c1a90
SHA512 0ade5b5430a803b1da9abc22c1db88dd3d74a020ada62fd516a33c7adf6d956ec4b1efa21ef6cad90cc35f4cbd6aedb89c122d9d2618b6833a1a8a5bf740147d

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswdee9020de9251c10.tmp

MD5 aa0342759d0d0ecb14e38125187016ec
SHA1 6a66dfa2ff57e721ad2618100f23aaafb47365d2
SHA256 24d2176fcbf6ef7ed213a64a109dd3cd00f93f83931cfb66416b12af8838ee4c
SHA512 73d354f0aaa87a1134c09af61f0a7d58aa87141042ac00f236d8a69d32d57256001e1c3bfddc043af136da7a299c54339bbfdd20bd71f92588a2044da6975da5

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw16c249f009c1f48d.tmp

MD5 91c91da140dbfe0bfd4d2426207b9a14
SHA1 3d2ffbb159e715cac22b6905dc07673ef0a3dd37
SHA256 6a68f393d6378592b1f112d893bf15e900e3368c5688e2316f45d34dde81cc77
SHA512 66d34baa741a9a83b1ccd6675ba203309f4dca15b8b047671bfb8f6e9bebe3ea5854834bd1240faca7bb009c3904747459ecdfc83b872cc79e246458e73844dd

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw4b06019642b2073f.tmp

MD5 59beedf9045381a091fbd6ab0d679390
SHA1 6d5a73ebdbadc85804dd447abadddb827bf9d19b
SHA256 6c4b8672832d51b7307951e42f2b0a96e63fcdd5349e37584b89f95e9137d138
SHA512 bd4ba08bc543d80b3515d737833b93b5b9205977c2e727cf0171cdb1d23a622dad23d45f4ed6b5b9481b93a077822544ed2fbc38e38ed861bd6d158736aa8c1c

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw62aded5bce1bf2fd.tmp

MD5 d5b02a76adb3e415a229bb76d27f27cb
SHA1 67cbb57fa039300db7f58a38f6d27933d5bdc2fd
SHA256 f3cafd027c99295d910e7c16018d0bca007c66a8d17909a8ff43313720090f5b
SHA512 5c6b3bcabbe2b90e1e469231c35073d58c98fbf96cebe7d704ab30ead635ab9818d43e59fbd52d57a5f705ce658773beddaa67c937b18eff7874888e63ec6396

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswe2ef1999f04b1c51.tmp

MD5 6221163785c8af7cad4008acd1d2a303
SHA1 28bf7aede7bce518bea7e3b74784382cb1eb1cae
SHA256 ce61b77d190d630188d5a0bb5d5596445844ea2822a8c27be6cf50ec296baabf
SHA512 0c822a53dd63848e4f98f2ddb84db81f1ad8c5654e22973ff4fe98fa6f039313fdfa8730d3e10cb64a79891ae6de56fcac003aa802514b13bcd432f2a8ed43eb

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw89cd7d47d4241664.tmp

MD5 6e0bd3af55ca44033e866bec71bc88bd
SHA1 275d6c592ab2a1fe285cb9277e61da1a9b181630
SHA256 0d5fbf5abeaa955df93dd1375b047f1d19d2d798f774f0d4dce3a8b058602a89
SHA512 12a2e36a53ededaaa14521041830c044455a6d524a31e764d6a62adc3f480d513be823790262a3d382460fcfcf91250c641a12d3b62078bf1bebe4b8e6597f35

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw868320ef326caa4d.tmp

MD5 20d7b24296c2fcf3fec14ad092ffcc69
SHA1 d55f6e5e0f6f0d8394ab8b805ec3ad981ef7fc1f
SHA256 4c06e5ff91f39f057165d9da177761a3bcaf98eb3647b926c1e3f0e41b00d85d
SHA512 b68b79d2ed67ef60f923b907eb43608a5ad9de32645fde4b0b2ab7d82490d0b48afe8f74c4f3a0812d5adbac79f06c19d5d4844ba1a23b739b3a4f7df670b403

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswf3025a4b2e203535.tmp

MD5 98ef57e5395bedd246a498b25bbda900
SHA1 060a98e578ec53c3336531d88d06ca2f7e0b2214
SHA256 57ccf9873ae2c00c9e585ffd36b52beafee48e9a27710ee147de384af1c0a60b
SHA512 cfcd00d9174c54d71407d95b8bd3b6b4827395a5b28e86c9f9631b49730a3b6254cc7ab30af13857093e16be929e2c2c14513c4af1208a3f78a0cc5e72a86d11

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswf1d788bcc4787a40.tmp

MD5 72c1ecb4b4edb0951cdaaffa42d8b876
SHA1 27dd0c6a6528d5e24241d435f831cef827946ee9
SHA256 538d073b3ae49de8212c3ff3ffc1bbf5145f53130a3aa5789c401ea65a606270
SHA512 7688d4b0559876724da06a63a6c3a7ea8ca1dbd8e0421878f9254c4b3c607db78dde95ea98bdc29ab5d19bd884ddd85164c7d3bd8543bdaa3ac57ca2ee1098dc

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswa9d4f776dacd4254.tmp

MD5 866f17bb7413b37b448315ad52fda7d6
SHA1 e9765a508b29ec65e8dd836e42597328e4adf7a1
SHA256 2cd28b7f5649387e919245871e4700c5eb6feee137cfc08f1883786f4f268d21
SHA512 9ca587c35bcd09cb2ea04a04d98cdfbb5678b3f5f70224df5fdc0c065d4a5ac6569a77e2566cbce6ff41c364118fdc3022e91d95352c8b545d379b6276a0a42c

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw3c99e014c6d3be37.tmp

MD5 3ed21e6a9491fb52f83ef6fa05aebb99
SHA1 5a4742fe168bf14628803683a2fff1a2fc1d38c9
SHA256 ec2cee15c712c8e43297f81d41f758c7c783b28ba75203407980b035cfff378f
SHA512 a720dbb71d6ad6534ed4c6139e6ee7f1c180c2c9ff8c556e2b6c07fa6c872985560fcd3c27b1be62b655e017aa16eee3dc9e40aa73c0180fab3080dbc6b3714d

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswba2dcb3af8b5b9bc.tmp

MD5 1f8c527f66e833d2fbbf3a26b203744d
SHA1 02b2cd34cffdc997d29c11f3fe79b2f17eac1783
SHA256 1694449a8cfb45ebaa64b5da18f8ea13475c1da94f3be24e5a10698df5a711a7
SHA512 d07c2bd149b9373753cfe28df76e470aa051fda580eebf50a7d18061cf0c5a0f027329b46bf948ca98f1cc309e94b53d26c581797b041982e93ffebf8d42cebb

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw80f4ad714ead12ce.tmp

MD5 ba60499752d05cbcffd6e00695f7cefa
SHA1 8c1b2185eda0ba853f6068b36d8f8b1ce58cc946
SHA256 c0d5b84c90dc17b2ce9c3b55324f8e0be665b09c16094677812840c23fd8e4ff
SHA512 fb2cadd3ab65ec97b4fad69d7461beffe3ced3895a653a2afa90766c968d806748316d7090aaa138d15f72e90286ed632ae94724124b2b5926c94e334f73f1e5

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswe49c02a6bfad3f4c.tmp

MD5 717cd77e7cb76356dea516724fdaff9d
SHA1 5f4eabad02ce1430e8f963dfb2b6bb60cc52a4f0
SHA256 323e50ebe3e286adc8367c7c11605bb4ab4988f6cf5f323e770088bc356cd4f3
SHA512 08ea19e7457d8d9aad2a8abd1328e404914a5ff22f3514f04cdd9de08858397578443790115529b7b5036db9e9d00bdda28310e3118a84757c6ba1158d9804bb

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw9edf2b7fbbd2b517.tmp

MD5 98fb53f4263e749b3601289fc869419e
SHA1 7a33de16d5d88b16f17d8d6538a56e0a4f6ca988
SHA256 dfa5a4cc7bcff662281af133dd9f8004c19c83ca66e7b41ac487f9a5697b3bb9
SHA512 8df4e56c47b15bb7daeca6b66c11367b607b2655388f68d9b0a29431ac20d6cbeefbcd5c3cf890c5f00355e1561266c7510985ea13f064b8f507d7e45e4600ed

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswfd65654f9ffa51f7.tmp

MD5 849b0cd219f0903fbb501f635f418674
SHA1 542e4f0adaec0731e19c98fb2921bf3abf4e1be8
SHA256 aee4ed8de29973fc6526823e482c992bd08137e738c43684344b7188599fa566
SHA512 de7aeb30af51cef29c06f0048af68ff26605033550ae8bd5aadeaa1a6c100f55bf9cb15ab02c87b019cf3304a4ea6bfff0fe3cc0dc96e99ef05d46bee429ec7d

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw3de41d54c462b09e.tmp

MD5 96b61b195fc47039906aa337d66e7fdc
SHA1 12fed5defb5846ea7b7a74d7156ba94d224c5f1f
SHA256 ec34fb9946e61539a70dfe7de7d1745f216b5d4fb7eda5887ec0cd8a3d863c25
SHA512 a44576b971906ff04fc1463661e8d9a1c37d8999122f1c438701d13510ece4f0f67d7c68f5ac09c09d6b758a58d358e6bd25bff8ebefa6eaf58fb076c1e7a006

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw1f819c72449770eb.tmp

MD5 21e21b249418056dfc8c764acc9f1a06
SHA1 9d93cbadb08e2618aae0e110a6a88ebb442ca018
SHA256 e701368c72cfa91cab40a0b4493018d4678a91d7c7cddc87e01dc45b42381421
SHA512 bed447618bca657d295619460003bf763a2b3fe24de0cb2a9b0bf98ac94b03ca9733bb62d8b6536836aa2ac6923c336c55b89e6db22a2eb2afbeef34290b8cfc

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw038f62c0ec22f9fc.tmp

MD5 51206550e746270692f85712c24ebb89
SHA1 4deba2cbb28b037b15df2d89d10d01a7ee1cd385
SHA256 d4a70db3299c99a59ab812fca86008f5d94265f8ab31a20f627244b6e51d6389
SHA512 9a9a0aeed6dc47f4fe44af243dfe5650298d490875e123f2a3c76c797e1e01212c94d7f6b63925b5f7f7f3a45c46f560f2a185b85062d43b371b50c0a31e2e61

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw89864ac854c87121.tmp

MD5 74047eedc155440e5d55b4a8932f82fb
SHA1 a50d46ed4025ebeb44588c2a7c85e62dcd9bb16f
SHA256 b4812c1f202e598d3d26c3f08ef960ffa9e533f658865d1e1765df565b253058
SHA512 a37b6f1b7c5d2ddb03775982466c734d1e759d07f38a693b72f65dd29f6585be221229b92341eec0eca171cfdf81a60ac5197951856e3d9bf69348e7825ef849

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw8175bba30e213b61.tmp

MD5 a593f86141b8a293372fffedacef35ec
SHA1 2f2c7d717a02b41d449975e0a95ebde71b93f1d4
SHA256 2e8f5b2746b08a673b2807423f9a9b0548b42eba499989a45b39661a8b540554
SHA512 a457cf8aabd28875dae9226943627e35e29aecbcad7ab95de2266e0f9970b04801c4cd83834aeda49b298f198fde0219c648712b8d8ee333e9fe17324dd1657e

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw1565a667ac22a5e6.tmp

MD5 5d21827de75ec11edbd54e38f153f288
SHA1 b85da53e3f8f5ed450c167381f00c807969444ca
SHA256 e851d3c62177df95503f1615e8a07b9d61ca9250784e2d00e0a325d76563dbc5
SHA512 d75ab0e9043a2fd06f14834cde7578f014fa4266a4ac05804943bd1b2880da37b56c00f4803b90aeeeec692ea40032f55d5ae4d5b9ece9cbaef3d3d0edae9a63

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw65a59689a963825c.tmp

MD5 4e9ef5af39c373c4724bedf6831ac9a6
SHA1 9ab99758b631c63edd8cfa12ecf4f655aaef70a3
SHA256 ac36104360b665e1d974aeb6667b7e3f216fcdf45b8f2e8465e5e377c593b0b4
SHA512 3d9d2a590758f7d5bae876b5dbdb59eaeabe441258f2eaedb4edb33dbed1450d8fb36dd7b454cae96ed1bffe69d41539f2ce70b669ce8ce43352e01bd29dd780

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw63bbef692cfb1574.tmp

MD5 0c025212c6f456339096fce094fcd7d7
SHA1 97dac74b04ab52fb525884768f0001001ad76aef
SHA256 cd53a6d86133e0a4c48d8aff355650148f1c582c55185260ac492348cc14fac7
SHA512 96c80253c0d77c66dd96564e366c04e36762f3fafb5cca9002da09add7086cb2eef24467429b56f5ac51358764dd1ff1b25f318fa4c3428783f5a93981c7ded5

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw9d5178e5843df0ab.tmp

MD5 554fed79b3a59d4a3232d6a89d1c2e52
SHA1 1d048db8365a149a1873261b398007b691512057
SHA256 2772df81893ec206c17a20ab30337b6208e56ebe2308d75829b12fec12510eed
SHA512 4e9dd4f1c8360d490e5b87e8efa5c568c745fdd9c69e2a051bc3276c0bbd97e118c72f65978b76c3ce1a77733773aeab41baab7d9b02ae31ba10e35ebf6cafa5

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw7e98dde6abe2048a.tmp

MD5 c4e3b193f072b039fdab2685d6a94da7
SHA1 ba621206019cef4a9ac85897d0df0efcc8bbae75
SHA256 084813bb4ad165fabb07df395bb14b0d315ce7505fca782dbc2b42210151d8e8
SHA512 7ba71fa18457a487082bccbe47084104c65d7efa12eef31c74a99533a61b53b8d1d3a1bafe86f75d46b3015016b75f136f2efa7451ca75cdc82d8bb6183b6990

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw28f0da39e8e5d68a.tmp

MD5 1947188eb6d728c27bb2fa8b15ad3586
SHA1 9f55dc99b253901d7e54ec0651862b1c0f912470
SHA256 9bc9041342a91663ad0ca2e55fdb8ad708767bf28eafd568c29900697451defe
SHA512 d0101aa531d5583c6c7c308f7e763da45c19f290ad373a488176d183044d13d221c4ae414ae814d0c8fa1a96c4371f5a0356d43ae19125ec7352805ac08eb1d6

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswffa82e44d868b42a.tmp

MD5 2ce34ecc2dcde17ad27921f5badad9e9
SHA1 e2f9171d17bfd5f33a312d2c0ca217b6655331c6
SHA256 33b3633057c94439125668fafc484a638d49d1c0d49e4e7f1aa9c7c05e8c7277
SHA512 bfc6c55e447ecfa83ca25b957e78bf810e76ad0173f2f83d965d79cbcf94ada5ec0fcd7056dc18269bce57452a017290b8203566210512a7643a4224993e5c1f

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswbe0beef1888d750f.tmp

MD5 358a247b989c2e44c8e800ebb551d97c
SHA1 6752292e14325009221e8d89a1344cd29662d890
SHA256 f38cf58c36eded53f87dcc10ff9ce67b30c5d6d74a14b6ab8c2cf44167df7f72
SHA512 b4b0323e5c9641aea8d5084c01d553d19a8277b34e71adfaf359d219a6579ca63b6f9be8e79abcd4a6e981b66cbda1dda32e8c87b9b41de9b50803d1e3f5464c

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw831a00a0afa73b4a.tmp

MD5 e7bc12add90a229355e1088247edcb48
SHA1 c5f9f9bca1380c78ca6fac36d4c5f1bfaee8fc3e
SHA256 73c2a27f9d71c688b372a5ff5be74133c5c6086dc3388d39e01d3c51baeb1eaf
SHA512 ddb04db5432a995ca3d708019082f8d6884b6588c742f5201d6272e6ad5e2806eb411ec8de16e94c4bf4148ede0f407e29fd79d7a407df674230a10768dadd01

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw2702bfd382a10fb9.tmp

MD5 8e5fdb6c66de74d6244b2ccfe72dd380
SHA1 89682c4630fd3da40a60dc9c350850e1b93a607a
SHA256 6ea452bc2f6df63b74c419d3a08e96ce80ae4062b0869fa66daca41539a613c8
SHA512 15b37190b76db2b4124aa47bf08f68b33f00ff2f6e3736c62312d3cc141d2efca2670a49162e4ecb8de2cbac11c039090c47d445e306ab36b1111801d06ab8e2

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw4318ec662a4cf1d1.tmp

MD5 f8c4dec9b8c019a9fe378ef38dcb4bcb
SHA1 1bee1589a587782ea22a341dec1d4a4730c1e14e
SHA256 662abfac3eb692340fff4596990330f4ecf1c92c7c6737bb639f30915e9dccee
SHA512 96d6674e2aa89e5e81abb05786a3ca75f6d62bc5d6caf772cf95886a6565fe2632885650f06efc550f2e42972927ca0b76f2336732d1f3809b9b55e4f0b092f5

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw8538f0def81d7b76.tmp

MD5 0d70b2e889cb42fbfd268b2d223c14bf
SHA1 db88108adade09d7197b91679bfb3f542b91c3ab
SHA256 ccf5f43983a27aa867283faa2e50d064977e67c538b5b402db74d26b6961dca9
SHA512 a5123c7d67f75a0fc238fe1d2349d30df858cc276a9bb7bb8f24eaa8eb197d2566a58a8c650238f54bfa54f6d77516c28c00461369435cf050a46ef29eebeb44

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswa5d8c0c4e6f9cf6b.tmp

MD5 36425c5b7d0337d7696cbc27c54d0f1d
SHA1 5406913534337aa608588ea22dba704112c95d01
SHA256 cd6cdb5b094e33e98ce5358d75d7a700ba305412fda83cb892cac96e6778c791
SHA512 56389f5fcb7bf66da1ce54a24df1d762feb992ba1626d250dc194bccc48cf8c1e5e75dce78315e9f80391882b0b751426d8f54564d434d9978ba46ef8856f5bb

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswc459728244bfd4ac.tmp

MD5 91215d5ad47305b9a91785da3993c18e
SHA1 216f02673c4398c9965a7474363209039eabb586
SHA256 fbb14a232ce2b83543145e23d37795a055aebc0e47a1b0df30746713858619ac
SHA512 c413f87f27305ab37df43770c2b06f3fa9d66a097f5ee0688426b18ab0241cb6788996c138a5f4550a06d5d3562dbde58eecb20b8217ce8fd167de1b8c81707f

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw8caaccb969d5527b.tmp

MD5 15bdec828dbfb05ad041fda99d9a3a96
SHA1 0d7891455ec3335e7d7c1ace94912c6fc48151cb
SHA256 1ae49ac96d317887acc3cd21bbc5f59a47146e8249c7620be412b0e1ace651af
SHA512 8e8c7f7681c024fa9365ab4a1364ab88b25496bfe8c4206c46f650c5c636b0e081753b1ab8f9ea072d238b6998a4a4a62721aed9f0a85a61598104ed049416fb

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswf36816fe2e5259dc.tmp

MD5 3f66466372f68de9c361f314a4e4838c
SHA1 5e17a97dfc709c1a7bbbd26b8b0d7112ec9fd4ac
SHA256 b80b1358701b4cf1d335de6c7515a9ce988510eefc434f95509c873d5990f907
SHA512 0e9b7bc2edaf1d0aa89468b0ed9176ac886c032ef47156357f2a09b0380b2d22c9d1f6316b5d7a89fae042b156ccbab7a01564fd482cc88cf07f9d40adbe0843

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswe66d65cbbfcd2298.tmp

MD5 5c5ef17e35b8924b35a3c1bef66c0e1b
SHA1 9aa583108aa4743ac1679f2fc5ffc051b0c8c385
SHA256 e33dea640819a2c41b1c64147b00b5987b8bf3a927f25d3f5a55f1c23ed4dec4
SHA512 02eb8a6652ae9b286aa984597908524da75ac41d5a394263c702543350c6f2007e28c40866008d696069135b0ad2f54f6155ff07b84b91d8b45821fe2d4a0c09

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw544fd9638f6367c3.tmp

MD5 7232e0b787fb6affc9e5d7d3fa1beda7
SHA1 496e500a2695367901eb9fe20ec18dda5726c4a6
SHA256 a6c31ed8841546a593a37ad66882bc8a8ed1e0d05246a46f34aff4b1aa67b6a8
SHA512 144bb104b73238c1d680a01455ff7afa66e0cdd6811d8b506715a4b56f7be5b528b81ac9e28aa2a3cb47fedbb0afb701093993a24f02cd2611b3a8e9c033dd79

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswacd9db9e183a594d.tmp

MD5 121ba0144b4c7c1e8db6fac5df3f29ff
SHA1 aa4aca67a16cba4afecc9564c7cbd4987e4d3d18
SHA256 cc9dcd6c6e33e164b4afcf6ce2b63ff7854628e6f407e5026b756bcb923cbf63
SHA512 6e4132d917009756facea627cacfde005696f9a18e82da90dc72563d3c9d58bc2bbd1a07011242312e31bb416e4ea4460b525cd2f903d2c4eead90a21f1d2251

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw97b984965b9605ae.tmp

MD5 6a4ffed7a7c9320397e06bf6734cbdab
SHA1 373894c5741aec82813aaba1162a863f23d54ca6
SHA256 8961477f54c1ebb3696a9a8eda43177f9dd08eed5f7c1f6aca58d8507cfce2ab
SHA512 4e6b271a04705e852d79eb826b157916cbdb458e7fb4cfd1aa11a423e8eb68e8fb6030d3f0c96f8548031ab4bbd109e7d60c2974fcacd34b9e9dcc2c40be0915

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw3f0542c04b0a217c.tmp

MD5 48b3cd7ffde166dfbad065e59245c139
SHA1 ef4b434a335c063d4319cc404ac98fff72b2de5b
SHA256 453c25adfa94db0ff051bc506711a8d61b7d18a4fd784604e337362e6924c2a4
SHA512 1730341d86b06a1e54d608ad43f6cc03ff6b191414f808741a39f55cef5c16911574fb0a7f5cb4fbd9984484053f54a0bee6e04868d8b014a8d1cc8bedc159f5

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw56b0209137f7cd87.tmp

MD5 d6e691d788bc16628e999b0e571a9974
SHA1 1d972a41f0ba0fc409ca97357efe56b2934a26c5
SHA256 53d9ad975536e2220fb834d9ac95ce6d4758fad61fd27104bd82ac1fda801b16
SHA512 c96deb427b560a9df9ebae75e0e0a892b363c47284fd116ac0f1ca68258568184caa72f3f27fa8f0c00ad942a6c11171ad1583e0c6761684284c7565f7e90180

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswe68e63bc03a3cfd8.tmp

MD5 3312ef7d62cfbaf9fd3176d398b8e430
SHA1 d8c7880e21bbed727c38f36cbdd211b0790e60c2
SHA256 deab91f46971246c7b4136e294c75ff9c51f233f045798a9ef696593c7130e75
SHA512 90dd469ede0690ef31a79da9245f99b27cce85e60a5c09538fa78eff982b79a741721ba7a9693dba4a89948918350447d6d169af6acc212e277bc0b9455510a5

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw3870d9675f81f776.tmp

MD5 75db93cbeee52db79a1e72d0c4895277
SHA1 132a53b9e37816bb10a47f62419979942a515d77
SHA256 fbfec168d137d755bff12b72ff33e2780cd1e6f4bb5485dc87b3b426612178ff
SHA512 ccc8de4a86266a93ee85eaec6fc1712c01fb3ce25b3cbe9948efd83bdea32aea300689f0994d655d292ad2a3a1b0d33a42c6edebd3d2ce87c4590818f6efc7dc

C:\Program Files\Avast Software\Avast\gui_resources\default_av\aswabef108b63c658b4.tmp

MD5 99c2e7d4d0697ebe93ecbff4104b6655
SHA1 71b3dd242f5f5550cc8d72604412d465fd867c78
SHA256 558876e93dcabcbe79c5a7fa20238c4b6c0fb51e9e2ce0afab11d73db6c59c48
SHA512 741e01444f6e78f071ee73498a191ec852355ddf5181ef82d314b7dad615bc4347566c18d84e8545e1ebaeaef14fd54a3999b4047d041afbe850ae6b09a511ce

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw89ebc57e71659cd2.tmp

MD5 c16fdc4d5034e71b069429f817d3c065
SHA1 1d4dea7638d0976c87cec0adac8c9f1dab2d3b96
SHA256 28c63574adcf4c0cf4d4ab2b6e5fed7cfc4256d83c00df218b6fd5cc5ea5f341
SHA512 2e20f9b994b7665a01fb2c2c7be33df0665908e1207951f05366784ae6e55b8bed829f7179fbe8f06e6779972518c1c22ef0f728a081e7c26a9a2be59844fe85

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw65eec5c2c45ffe95.tmp

MD5 b0af523fb4f6cb3c8d524bd0d3277d69
SHA1 6f138a14e9881a5fb7a0fd38693a459f7ccce9c3
SHA256 ab052b5edb41782dd3b24d6c1819722e1188d35f845d205dc8ae21e2d18bb572
SHA512 3074d5beeec500bb1dc633c3253d62bccd5c8a796fb619f94f08740501d953fac04bdcfe777275daa68b1ded7f457b463c26e565c69722ec6a4b21c97a90c40e

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw6684d41a6e56e8d1.tmp

MD5 da54e5b20ad2ea6a99191d946f1b21a2
SHA1 11bb7a61791ac254c3e6a3dfdcfa010eca101e0e
SHA256 1fc72a4223cc83631f3335fc337b6747b6a2e1414846e1fe6486d2956ecf87da
SHA512 23b4d5f861906e7cb5e9eeb0da317cc2e63a4b7052121675d056d51ebb40624de0832a5766734babb20d4af3ac89b9b2e65122d0c9aab682a0ed65ce17f69276

C:\Program Files\Avast Software\Avast\gui_resources\default_av\asw4ba8c55326ef1997.tmp

MD5 6830919e6f3272876e4cebaf398c13b9
SHA1 4603f602d14fd4fb58cc914af215d16cb65a8268
SHA256 86b78009074219f23f64e10137dbc3c836776eb2875686a56331c10dc91e9fdd
SHA512 aff3a516bbe2ca4cc74e828657fb48f470ce005660743b7d280a37ede6f79b5e68ce76abde5a8285c9827c5e77c6a9c5a950d9ed4d38d7b61af24c6c2d68818d