Malware Analysis Report

2025-03-15 04:19

Sample ID 240825-jaez7ssele
Target .
SHA256 3fe106290c7460b745e429538e5b193d24b13a8aeda351f32a42e11888f42974
Tags
discovery evasion motw phishing themida trojan
score
9/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
9/10

SHA256

3fe106290c7460b745e429538e5b193d24b13a8aeda351f32a42e11888f42974

Threat Level: Likely malicious

The file . was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion motw phishing themida trojan

Identifies VirtualBox via ACPI registry values (likely anti-VM)

Downloads MZ/PE file

Themida packer

Executes dropped EXE

Checks computer location settings

Loads dropped DLL

Checks BIOS information in registry

Enumerates connected drives

Mark of the Web detected: This indicates that the page was originally saved or cloned.

Legitimate hosting services abused for malware hosting/C2

Checks whether UAC is enabled

Blocklisted process makes network request

Suspicious use of NtSetInformationThreadHideFromDebugger

Drops file in Program Files directory

Drops file in Windows directory

Browser Information Discovery

System Location Discovery: System Language Discovery

Enumerates physical storage devices

Suspicious use of WriteProcessMemory

Suspicious use of SendNotifyMessage

Suspicious use of FindShellTrayWindow

Enumerates system info in registry

Modifies registry class

Suspicious use of AdjustPrivilegeToken

NTFS ADS

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

cURL User-Agent

Modifies data under HKEY_USERS

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious behavior: EnumeratesProcesses

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-25 07:27

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-25 07:27

Reported

2024-08-25 08:12

Platform

win10v2004-20240802-en

Max time kernel

2696s

Max time network

2697s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\.html

Signatures

Identifies VirtualBox via ACPI registry values (likely anti-VM)

evasion
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ C:\ProgramData\Solara\Solara.exe N/A

Downloads MZ/PE file

Checks BIOS information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\ProgramData\Solara\Solara.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion C:\ProgramData\Solara\Solara.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Downloads\Bootstrapper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Downloads\Bootstrapper.exe N/A

Themida packer

themida
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Blocklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\ProgramData\Solara\Solara.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A pastebin.com N/A N/A
N/A pastebin.com N/A N/A
N/A pastebin.com N/A N/A
N/A pastebin.com N/A N/A

Mark of the Web detected: This indicates that the page was originally saved or cloned.

phishing motw
Description Indicator Process Target
N/A https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html N/A N/A

Suspicious use of NtSetInformationThreadHideFromDebugger

Description Indicator Process Target
N/A N/A C:\ProgramData\Solara\Solara.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\nodejs\node_modules\npm\node_modules\minimatch\dist\cjs\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\node-gyp\node_modules\minimatch\package.json C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\wrappy\LICENSE C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\node-gyp\node_modules\brace-expansion\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\fs-minipass\LICENSE C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\promise-inflight\package.json C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\debug\node_modules\ms\package.json C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\tar\lib\strip-absolute-path.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\sigstore\dist\util\oidc.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\libnpmdiff\LICENSE C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\node-gyp\node_modules\unique-slug\lib\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\node-gyp\node_modules\make-fetch-happen\lib\cache\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\corepack\shims\nodewin\pnpm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\minipass-json-stream\node_modules\minipass\LICENSE C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\safer-buffer\dangerous.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\rimraf\README.md C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\node-gyp\node_modules\cacache\lib\util\hash-to-segments.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\clean-stack\license C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\sigstore\dist\identity\ci.d.ts C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\docs\content\using-npm\logging.md C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\sigstore\dist\tlog\types\__generated__\intoto.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\disparity-colors\lib\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\readable-stream\lib\stream.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\bin-links\lib\man-target.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\minimatch\package.json C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\lib\commands\adduser.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\node-gyp\node_modules\readable-stream\CONTRIBUTING.md C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\postcss-selector-parser\dist\selectors\string.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\corepack\shims\nodewin\npx.cmd C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\fs\lib\readdir-scoped.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\libnpmdiff\lib\should-print-patch.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\events\tests\method-names.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\diff\lib\patch\merge.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\minipass-pipeline\package.json C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\docs\content\using-npm\developers.md C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\node-gyp\docs\Updating-npm-bundled-node-gyp.md C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\node-gyp\node_modules\readable-stream\lib\_stream_duplex.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\docs\output\commands\npm-login.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\semver\functions\patch.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\node-gyp\node_modules\unique-filename\package.json C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\debug\package.json C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\node-gyp\gyp\tools\graphviz.py C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\docs\output\using-npm\scripts.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\config\lib\parse-field.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\socks\build\common\receivebuffer.js.map C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\npmlog\lib\log.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\brace-expansion\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\docs\content\commands\npx.md C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\libnpmversion\lib\retrieve-tag.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\man\man1\npm-diff.1 C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\has-flag\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\man\man1\npm-audit.1 C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\lib\commands\diff.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\lib\commands\install.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\graceful-fs\polyfills.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\diff\lib\diff\word.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\docs\content\commands\npm-find-dupes.md C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\iconv-lite\encodings\index.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\event-target-shim\dist\event-target-shim.mjs C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\docs\content\commands\npm-whoami.md C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\sigstore\dist\ca\verify\sct.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\@colors\colors\lib\custom\zalgo.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\sigstore\dist\ca\verify\signer.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files\nodejs\node_modules\npm\node_modules\ini\LICENSE C:\Windows\system32\msiexec.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\Installer\MSI1D0A.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI1D2A.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\inprogressinstallinfo.ipi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI25B6.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI3431.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\SourceHash{EFA235B5-C6A1-42E6-9BC9-02A8D56F1CDC} C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI33D3.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI7506.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI7882.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\e5818a4.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI7301.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI738E.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\{EFA235B5-C6A1-42E6-9BC9-02A8D56F1CDC}\NodeIcon C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\{EFA235B5-C6A1-42E6-9BC9-02A8D56F1CDC}\NodeIcon C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5818a4.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI1CCA.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI2848.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI2877.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5818a8.msi C:\Windows\system32\msiexec.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\syswow64\MsiExec.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\syswow64\MsiExec.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\wevtutil.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26\52C64B7E C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27 C:\Windows\system32\msiexec.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\Shell C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\MRUListEx = 00000000ffffffff C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5B532AFE1A6C6E24B99C208A5DF6C1CD\DeploymentFlags = "3" C:\Windows\system32\msiexec.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac04000000c8000000354b179bff40d211a27e00c04fc308710300000080000000354b179bff40d211a27e00c04fc308710200000080000000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\5B532AFE1A6C6E24B99C208A5DF6C1CD\corepack C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\NodeSlot = "6" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\5B532AFE1A6C6E24B99C208A5DF6C1CD\npm C:\Windows\system32\msiexec.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5B532AFE1A6C6E24B99C208A5DF6C1CD\Clients = 3a0000000000 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\5B532AFE1A6C6E24B99C208A5DF6C1CD C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5B532AFE1A6C6E24B99C208A5DF6C1CD\SourceList C:\Windows\system32\msiexec.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\Shell C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\MRUListEx = ffffffff C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "4294967295" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202020202 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202020202 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\5B532AFE1A6C6E24B99C208A5DF6C1CD\EnvironmentPathNode = "EnvironmentPath" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\5B532AFE1A6C6E24B99C208A5DF6C1CD\EnvironmentPath C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0 = 600031000000000019599b3b122050524f4752417e330000480009000400efbe874fdb491959a23b2e00000050050000000001000000000000000000000000000000702d7b00500072006f006700720061006d004400610074006100000018000000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "4" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5B532AFE1A6C6E24B99C208A5DF6C1CD\InstanceType = "0" C:\Windows\system32\msiexec.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\MRUListEx = ffffffff C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 645089.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\Downloads\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\Downloads\Bootstrapper.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Users\Admin\Downloads\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\Downloads\Bootstrapper.exe N/A
N/A N/A C:\Users\Admin\Downloads\Bootstrapper.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\ProgramData\Solara\Solara.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\Bootstrapper.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeCreateTokenPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeAssignPrimaryTokenPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeLockMemoryPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeMachineAccountPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeTcbPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeCreatePermanentPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeChangeNotifyPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeSyncAgentPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeEnableDelegationPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeImpersonatePrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Windows\System32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\SysWOW64\wevtutil.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\SysWOW64\wevtutil.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\wevtutil.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\wevtutil.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4568 wrote to memory of 4748 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4748 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 3124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 5080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 5080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4568 wrote to memory of 4432 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

cURL User-Agent

Description Indicator Process Target
HTTP User-Agent header curl/8.4.0-DEV N/A N/A
HTTP User-Agent header curl/8.4.0-DEV N/A N/A
HTTP User-Agent header curl/8.4.0-DEV N/A N/A
HTTP User-Agent header curl/8.4.0-DEV N/A N/A
HTTP User-Agent header curl/8.4.0-DEV N/A N/A

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\.html

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc28ee46f8,0x7ffc28ee4708,0x7ffc28ee4718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2068 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2552 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4936 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4936 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4932 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5928 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5836 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5244 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3512 /prefetch:8

C:\Users\Admin\Downloads\Bootstrapper.exe

"C:\Users\Admin\Downloads\Bootstrapper.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6160 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1988 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1900 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5244 /prefetch:1

C:\Windows\System32\msiexec.exe

"C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\node-v18.16.0-x64.msi" /qn

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Windows\System32\MsiExec.exe

C:\Windows\System32\MsiExec.exe -Embedding 3A6A256226739E4B07DB088896E05442

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding 12BA877D5756C39FCCE03B5C2F287A7B

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6728 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6744 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6920 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1960 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6892 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6120 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6380 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3792 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7892 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7192 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8108 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8224 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8236 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7844 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9176 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9360 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9524 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7888 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding 56AA23D49AAE361A28379A061B32CB08 E Global\MSI0000

C:\Windows\SysWOW64\wevtutil.exe

"wevtutil.exe" im "C:\Program Files\nodejs\node_etw_provider.man"

C:\Windows\System32\wevtutil.exe

"wevtutil.exe" im "C:\Program Files\nodejs\node_etw_provider.man" /fromwow64

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\Bootstrapper.exe

"C:\Users\Admin\Downloads\Bootstrapper.exe"

C:\Program Files\nodejs\node.exe

"node" -v

C:\ProgramData\Solara\Solara.exe

"C:\ProgramData\Solara\Solara.exe"

C:\Program Files\nodejs\node.exe

"node" "C:\ProgramData\Solara\Monaco\fileaccess\index.js" 639ae66a53eb4d53

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7044 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6568 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7460 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8744 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8896 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5980 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6316 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7272 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7664 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9384 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6868 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8052 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9088 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8840 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7988 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1256 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7724 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6580 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9228 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6292 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8944 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6292 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5680 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,15766896731993512952,8562305829639546123,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7152 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 209.205.72.20.in-addr.arpa udp
US 8.8.8.8:53 81.144.22.2.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 14.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
GB 88.221.135.27:443 www.bing.com tcp
GB 88.221.135.27:443 www.bing.com tcp
US 8.8.8.8:53 27.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 getsolara.dev udp
US 172.67.203.125:80 getsolara.dev tcp
US 172.67.203.125:80 getsolara.dev tcp
US 172.67.203.125:443 getsolara.dev tcp
US 8.8.8.8:53 125.203.67.172.in-addr.arpa udp
US 8.8.8.8:53 getsolara.dev udp
US 172.67.203.125:443 getsolara.dev tcp
N/A 127.0.0.1:6463 tcp
US 8.8.8.8:53 pastebin.com udp
US 104.20.3.235:443 pastebin.com tcp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 clientsettings.roblox.com udp
DE 128.116.123.4:443 clientsettings.roblox.com tcp
US 8.8.8.8:53 235.3.20.104.in-addr.arpa udp
US 8.8.8.8:53 147.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 4.123.116.128.in-addr.arpa udp
US 8.8.8.8:53 www.nodejs.org udp
US 104.20.22.46:443 www.nodejs.org tcp
US 8.8.8.8:53 46.22.20.104.in-addr.arpa udp
US 8.8.8.8:53 nodejs.org udp
US 104.20.23.46:443 nodejs.org tcp
US 8.8.8.8:53 46.23.20.104.in-addr.arpa udp
US 8.8.8.8:53 file.io udp
US 45.55.107.24:80 file.io tcp
US 45.55.107.24:80 file.io tcp
US 45.55.107.24:80 file.io tcp
US 8.8.8.8:53 24.107.55.45.in-addr.arpa udp
US 45.55.107.24:443 file.io tcp
US 8.8.8.8:53 www.file.io udp
IT 13.226.244.82:443 www.file.io tcp
US 8.8.8.8:53 82.244.226.13.in-addr.arpa udp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 72.130.222.52.in-addr.arpa udp
US 8.8.8.8:53 hb.vntsm.com udp
GB 143.244.38.136:443 hb.vntsm.com tcp
GB 143.244.38.136:443 hb.vntsm.com tcp
US 8.8.8.8:53 hb-vntsm-com.global.ssl.fastly.net udp
US 8.8.8.8:53 hb.vntsm.io udp
US 151.101.1.194:443 hb-vntsm-com.global.ssl.fastly.net tcp
US 104.22.46.142:443 hb.vntsm.io tcp
US 8.8.8.8:53 136.38.244.143.in-addr.arpa udp
US 8.8.8.8:53 200.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 142.46.22.104.in-addr.arpa udp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 194.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 174.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 ad-delivery.net udp
US 216.239.32.36:443 region1.analytics.google.com tcp
FR 142.250.201.163:443 www.google.co.uk tcp
GB 74.125.71.154:443 stats.g.doubleclick.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 8.8.8.8:53 c.amazon-adsystem.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 cdn.exelator.com udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
IT 108.139.210.10:443 cdn.exelator.com tcp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
GB 108.156.39.27:443 config.aps.amazon-adsystem.com tcp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
GB 23.53.174.156:443 secure.cdn.fastclick.net tcp
GB 23.53.174.156:443 secure.cdn.fastclick.net tcp
US 172.67.36.110:443 cdn.hadronid.net tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
US 8.8.8.8:53 mydmp.exelator.com udp
IE 34.254.143.3:443 mydmp.exelator.com tcp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 163.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 154.71.125.74.in-addr.arpa udp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 9.223.224.13.in-addr.arpa udp
US 8.8.8.8:53 34.215.58.216.in-addr.arpa udp
US 8.8.8.8:53 10.210.139.108.in-addr.arpa udp
US 8.8.8.8:53 27.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 156.174.53.23.in-addr.arpa udp
US 8.8.8.8:53 86.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 110.36.67.172.in-addr.arpa udp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 104.22.5.69:443 id.hadron.ad.gt tcp
US 8.8.8.8:53 onsite-tag-logs.apps.nielsen.com udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 load77.exelator.com udp
US 8.8.8.8:53 proc.ad.cpe.dotomi.com udp
US 3.224.96.103:443 onsite-tag-logs.apps.nielsen.com tcp
GB 84.17.50.8:443 load77.exelator.com tcp
NL 63.215.202.178:443 proc.ad.cpe.dotomi.com tcp
FR 172.217.20.206:443 fundingchoicesmessages.google.com tcp
FR 172.217.20.206:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 a.ad.gt udp
US 172.67.23.234:443 a.ad.gt tcp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 lh3.googleusercontent.com udp
FR 142.250.178.129:443 lh3.googleusercontent.com tcp
US 8.8.8.8:53 3.143.254.34.in-addr.arpa udp
US 8.8.8.8:53 69.5.22.104.in-addr.arpa udp
US 8.8.8.8:53 8.50.17.84.in-addr.arpa udp
US 8.8.8.8:53 178.202.215.63.in-addr.arpa udp
US 8.8.8.8:53 206.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 103.96.224.3.in-addr.arpa udp
US 8.8.8.8:53 234.23.67.172.in-addr.arpa udp
US 8.8.8.8:53 64.98.95.141.in-addr.arpa udp
US 8.8.8.8:53 234.75.250.142.in-addr.arpa udp
US 8.8.8.8:53 129.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 131.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 194.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 cadmus.script.ac udp
US 104.18.23.145:443 cadmus.script.ac tcp
US 8.8.8.8:53 apps.identrust.com udp
GB 88.221.134.137:80 apps.identrust.com tcp
US 8.8.8.8:53 oa.openxcdn.net udp
US 34.102.146.192:443 oa.openxcdn.net tcp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 cdn-ima.33across.com udp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 cdn.edkt.io udp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 172.64.152.89:443 cdn-ima.33across.com tcp
US 34.120.111.33:443 cdn.edkt.io tcp
NL 178.250.1.3:443 static.criteo.net tcp
IT 18.65.82.112:443 tags.crwdcntrl.net tcp
US 104.26.8.169:443 script.4dex.io tcp
IT 108.139.212.147:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 track.venatusmedia.com udp
US 8.8.8.8:53 i.clean.gg udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 34.95.69.49:443 i.clean.gg tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
IE 54.229.112.66:443 track.venatusmedia.com tcp
NL 81.17.55.99:443 prg.smartadserver.com tcp
NL 81.17.55.99:443 prg.smartadserver.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
US 172.64.153.66:443 elb.the-ozone-project.com tcp
NL 147.75.34.153:443 prebid.a-mo.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
DE 18.185.127.61:443 btlr.sharethrough.com tcp
DE 18.185.127.61:443 btlr.sharethrough.com tcp
DE 18.185.127.61:443 btlr.sharethrough.com tcp
DE 18.185.127.61:443 btlr.sharethrough.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 104.26.8.169:443 script.4dex.io tcp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
US 8.8.8.8:53 145.23.18.104.in-addr.arpa udp
US 8.8.8.8:53 137.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 192.146.102.34.in-addr.arpa udp
US 8.8.8.8:53 87.70.96.34.in-addr.arpa udp
US 8.8.8.8:53 89.152.64.172.in-addr.arpa udp
US 8.8.8.8:53 33.111.120.34.in-addr.arpa udp
US 8.8.8.8:53 169.8.26.104.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 112.82.65.18.in-addr.arpa udp
US 8.8.8.8:53 147.212.139.108.in-addr.arpa udp
US 8.8.8.8:53 49.69.95.34.in-addr.arpa udp
US 8.8.8.8:53 66.153.64.172.in-addr.arpa udp
US 8.8.8.8:53 99.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 66.112.229.54.in-addr.arpa udp
US 8.8.8.8:53 53.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 153.34.75.147.in-addr.arpa udp
US 8.8.8.8:53 176.168.78.3.in-addr.arpa udp
IE 54.75.251.201:443 bcp.crwdcntrl.net tcp
US 34.95.69.49:443 i.clean.gg udp
US 8.8.8.8:53 api.edkt.io udp
US 34.120.111.33:443 api.edkt.io tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 52.94.222.140:443 aax-eu.amazon-adsystem.com tcp
US 34.120.111.33:443 api.edkt.io udp
US 34.120.111.33:443 api.edkt.io udp
US 8.8.8.8:53 a20e41010b7c58e8b3c77a2092fdc660.safeframe.googlesyndication.com udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
FR 142.250.178.130:443 ep1.adtrafficquality.google tcp
FR 142.250.179.65:443 a20e41010b7c58e8b3c77a2092fdc660.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
NL 178.250.1.11:443 gum.criteo.com tcp
FR 142.250.179.97:443 ep2.adtrafficquality.google tcp
US 8.8.8.8:53 150.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 61.127.185.18.in-addr.arpa udp
US 8.8.8.8:53 9.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 201.251.75.54.in-addr.arpa udp
US 8.8.8.8:53 140.222.94.52.in-addr.arpa udp
US 8.8.8.8:53 130.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 65.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
NL 185.235.87.69:443 gem.gbc.criteo.com tcp
FR 178.250.7.13:443 dnacdn.net tcp
NL 185.235.87.199:443 ag.gbc.criteo.com tcp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
GB 23.214.129.249:443 secure-assets.rubiconproject.com tcp
US 8.8.8.8:53 ced-ns.sascdn.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 92.123.140.113:443 ced-ns.sascdn.com tcp
US 8.8.8.8:53 www.google.com udp
FR 142.250.179.68:443 www.google.com tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 apps.sascdn.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 95.100.245.251:443 eus.rubiconproject.com tcp
FR 172.217.18.194:443 googleads.g.doubleclick.net tcp
FR 172.217.18.194:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 euw1.smartadserver.com udp
US 8.8.8.8:53 www14.smartadserver.com udp
GB 92.123.143.83:443 apps.sascdn.com tcp
GB 92.123.143.83:443 apps.sascdn.com tcp
FR 51.178.195.209:443 www14.smartadserver.com tcp
FR 51.178.195.209:443 www14.smartadserver.com tcp
NL 89.149.193.81:443 euw1.smartadserver.com tcp
NL 89.149.193.81:443 euw1.smartadserver.com tcp
FR 172.217.18.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 97.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 13.7.250.178.in-addr.arpa udp
US 8.8.8.8:53 69.87.235.185.in-addr.arpa udp
US 8.8.8.8:53 199.87.235.185.in-addr.arpa udp
US 8.8.8.8:53 249.129.214.23.in-addr.arpa udp
US 8.8.8.8:53 113.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 68.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 251.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 194.18.217.172.in-addr.arpa udp
US 8.8.8.8:53 83.143.123.92.in-addr.arpa udp
US 8.8.8.8:53 209.195.178.51.in-addr.arpa udp
US 8.8.8.8:53 81.193.149.89.in-addr.arpa udp
US 8.8.8.8:53 s0.2mdn.net udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 142.250.178.134:443 s0.2mdn.net tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 st.pubmatic.com udp
GB 2.18.108.192:443 ads.pubmatic.com tcp
GB 185.64.190.89:443 st.pubmatic.com tcp
FR 142.250.178.134:443 s0.2mdn.net udp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 134.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 192.108.18.2.in-addr.arpa udp
US 8.8.8.8:53 89.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 token.rubiconproject.com udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 api.rlcdn.com udp
US 35.71.131.137:443 match.adsrvr.org tcp
US 8.8.8.8:53 acdn.adnxs.com udp
US 34.120.133.55:443 api.rlcdn.com tcp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 151.101.65.108:443 acdn.adnxs.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 dis.criteo.com udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 p.rfihub.com udp
US 8.8.8.8:53 s.ad.smaato.net udp
US 8.8.8.8:53 sync.mathtag.com udp
US 52.71.88.198:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 creativecdn.com udp
NL 193.0.160.131:443 p.rfihub.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
FR 142.250.178.130:443 cm.g.doubleclick.net tcp
IT 108.139.210.117:443 s.ad.smaato.net tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 x.bidswitch.net udp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 216.200.232.253:443 sync.mathtag.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
FR 142.250.178.130:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 sync.go.sonobi.com udp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 55.133.120.34.in-addr.arpa udp
US 69.166.1.34:443 sync.go.sonobi.com tcp
US 8.8.8.8:53 108.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 153.84.255.185.in-addr.arpa udp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 69.166.1.34:443 sync.go.sonobi.com tcp
DE 18.195.234.25:443 match.sharethrough.com tcp
DE 18.195.234.25:443 match.sharethrough.com tcp
DE 18.195.234.25:443 match.sharethrough.com tcp
US 69.166.1.34:443 sync.go.sonobi.com tcp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 131.160.0.193.in-addr.arpa udp
US 8.8.8.8:53 117.210.139.108.in-addr.arpa udp
US 8.8.8.8:53 198.88.71.52.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 253.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 25.234.195.18.in-addr.arpa udp
US 8.8.8.8:53 34.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 gum.aidemsrv.com udp
US 104.17.44.93:443 gum.aidemsrv.com tcp
US 8.8.8.8:53 onetag-sys.com udp
DE 51.75.86.98:443 onetag-sys.com tcp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 18.214.118.225:443 cs-server-s2s.yellowblue.io tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 73.80.16.104.in-addr.arpa udp
US 8.8.8.8:53 93.44.17.104.in-addr.arpa udp
US 8.8.8.8:53 98.86.75.51.in-addr.arpa udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 player.aniview.com udp
GB 92.123.140.19:443 player.aniview.com tcp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 67.202.105.21:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
NL 81.17.55.108:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 54.87.195.130:443 api-2-0.spot.im tcp
DE 157.90.211.246:443 sync.richaudience.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 34.247.108.243:443 match.prod.bidr.io tcp
US 64.202.112.63:443 b1sync.zemanta.com tcp
US 64.202.112.63:443 b1sync.zemanta.com tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 8.8.8.8:53 sync.aniview.com udp
US 172.240.45.78:443 sync.aniview.com tcp
DE 157.90.211.246:443 sync.richaudience.com tcp
US 64.202.112.63:443 b1sync.zemanta.com tcp
US 8.8.8.8:53 equativ-match.dotomi.com udp
US 8.8.8.8:53 csync.loopme.me udp
US 34.96.71.22:443 s.company-target.com tcp
US 64.202.112.63:443 b1sync.zemanta.com tcp
US 64.202.112.63:443 b1sync.zemanta.com tcp
NL 35.214.222.169:443 csync.loopme.me tcp
NL 63.215.202.140:443 equativ-match.dotomi.com tcp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 tracker.open-adsyield.com udp
US 8.8.8.8:53 bttrack.com udp
US 8.8.8.8:53 id.rlcdn.com udp
IE 34.240.77.26:443 ap.lijit.com tcp
US 172.111.38.54:443 tracker.open-adsyield.com tcp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 192.132.33.67:443 bttrack.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 t.adx.opera.com udp
DE 51.75.86.98:443 onetag-sys.com udp
US 8.8.8.8:53 cacerts.rapidssl.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 spl.zeotap.com udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 80.77.87.161:443 cs.admanmedia.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
US 64.202.112.63:443 b1sync.zemanta.com tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 104.22.50.98:443 spl.zeotap.com tcp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
NL 89.149.192.201:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 225.118.214.18.in-addr.arpa udp
US 8.8.8.8:53 19.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 21.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 108.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 243.108.247.34.in-addr.arpa udp
US 8.8.8.8:53 130.195.87.54.in-addr.arpa udp
US 8.8.8.8:53 63.112.202.64.in-addr.arpa udp
US 8.8.8.8:53 246.211.90.157.in-addr.arpa udp
US 8.8.8.8:53 78.45.240.172.in-addr.arpa udp
US 8.8.8.8:53 22.71.96.34.in-addr.arpa udp
US 8.8.8.8:53 140.202.215.63.in-addr.arpa udp
US 8.8.8.8:53 169.222.214.35.in-addr.arpa udp
US 8.8.8.8:53 26.77.240.34.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 115.158.57.154.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 54.38.111.172.in-addr.arpa udp
US 8.8.8.8:53 98.50.22.104.in-addr.arpa udp
US 8.8.8.8:53 67.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 161.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 88.199.214.35.in-addr.arpa udp
US 8.8.8.8:53 201.192.149.89.in-addr.arpa udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 52.46.143.56:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 56.143.46.52.in-addr.arpa udp
US 8.8.8.8:53 ade.googlesyndication.com udp
FR 216.58.214.162:443 ade.googlesyndication.com tcp
FR 216.58.214.162:443 ade.googlesyndication.com udp
US 8.8.8.8:53 4c206720.solaraweb-alj.pages.dev udp
US 172.66.44.59:443 4c206720.solaraweb-alj.pages.dev tcp
US 8.8.8.8:53 162.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 59.44.66.172.in-addr.arpa udp
US 172.67.203.125:443 getsolara.dev tcp
US 104.20.3.235:443 pastebin.com tcp
DE 128.116.123.4:443 clientsettings.roblox.com tcp
US 104.20.3.235:443 pastebin.com tcp
DE 128.116.123.4:443 clientsettings.roblox.com tcp
US 172.67.203.125:443 getsolara.dev tcp
US 8.8.8.8:53 c.pki.goog udp
FR 216.58.214.163:80 c.pki.goog tcp
US 172.67.203.125:443 getsolara.dev tcp
US 172.67.203.125:443 getsolara.dev tcp
US 172.67.203.125:443 getsolara.dev tcp
US 172.67.203.125:443 getsolara.dev tcp
US 8.8.8.8:53 163.214.58.216.in-addr.arpa udp
N/A 127.0.0.1:54415 tcp
N/A 127.0.0.1:54419 tcp
N/A 127.0.0.1:54422 tcp
N/A 127.0.0.1:54424 tcp
N/A 127.0.0.1:54429 tcp
NL 81.17.55.99:443 euw1.smartadserver.com tcp
DE 18.185.127.61:443 btlr.sharethrough.com tcp
DE 37.252.171.53:443 secure.adnxs.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 172.217.18.194:443 googleads.g.doubleclick.net udp
NL 89.149.193.81:443 euw1.smartadserver.com tcp
FR 51.178.195.209:443 www14.smartadserver.com tcp
US 8.8.8.8:53 ib.3lift.com udp
GB 18.245.187.33:443 ib.3lift.com tcp
FR 142.250.178.134:443 s0.2mdn.net udp
US 8.8.8.8:53 33.187.245.18.in-addr.arpa udp
FR 51.178.195.209:443 www14.smartadserver.com tcp
US 8.8.8.8:53 48.229.111.52.in-addr.arpa udp
FR 216.58.214.162:443 ade.googlesyndication.com udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 apex.go.sonobi.com udp
DE 3.121.186.27:443 btlr.sharethrough.com tcp
NL 81.17.55.99:443 euw1.smartadserver.com tcp
DE 37.252.171.53:443 secure.adnxs.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 151.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 27.186.121.3.in-addr.arpa udp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 142.250.201.163:443 www.google.co.uk udp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 apps.sascdn.com udp
NL 89.149.193.81:443 euw1.smartadserver.com tcp
FR 51.178.195.209:443 www14.smartadserver.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 45.55.107.24:443 file.io tcp
FR 51.178.195.209:443 www14.smartadserver.com tcp
US 45.55.107.24:443 file.io tcp
US 45.55.107.24:443 file.io tcp
US 45.55.107.24:443 file.io tcp
DE 3.121.186.27:443 btlr.sharethrough.com tcp
NL 81.17.55.99:443 euw1.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 37.252.171.53:443 secure.adnxs.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 172.217.18.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 st.pubmatic.com udp
US 8.8.8.8:53 prg.smartadserver.com udp
DE 37.252.171.53:443 secure.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 89.149.192.241:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 www.file.io udp
FR 172.217.18.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 241.192.149.89.in-addr.arpa udp
DE 37.252.171.53:443 secure.adnxs.com tcp
NL 89.149.192.241:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 172.217.18.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 ads.pubmatic.com udp
FR 142.250.178.130:443 cm.g.doubleclick.net udp
NL 89.149.192.241:443 prg.smartadserver.com tcp
DE 37.252.171.53:443 secure.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 www.file.io udp
FR 172.217.18.194:443 googleads.g.doubleclick.net udp
FR 142.250.178.130:443 cm.g.doubleclick.net udp
FR 142.250.178.134:443 s0.2mdn.net udp
US 216.239.32.36:443 region1.analytics.google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
FR 216.58.214.162:443 ade.googlesyndication.com udp
DE 37.252.171.53:443 secure.adnxs.com tcp
NL 89.149.192.241:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 172.217.18.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 tlx.3lift.com udp
DE 3.124.64.248:443 tlx.3lift.com tcp
FR 142.250.178.134:443 s0.2mdn.net udp
FR 142.250.178.130:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 248.64.124.3.in-addr.arpa udp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
US 8.8.8.8:53 50.192.11.51.in-addr.arpa udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
DE 37.252.172.123:443 ib.adnxs.com tcp
NL 81.17.55.161:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 123.172.252.37.in-addr.arpa udp
US 8.8.8.8:53 161.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
FR 142.250.179.66:443 googleads.g.doubleclick.net udp
FR 142.250.178.130:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 66.179.250.142.in-addr.arpa udp
NL 81.17.55.161:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 142.250.179.66:443 googleads.g.doubleclick.net udp
FR 142.250.178.130:443 cm.g.doubleclick.net udp
FR 142.250.178.134:443 s0.2mdn.net udp
US 8.8.8.8:53 98.179.250.142.in-addr.arpa udp
GB 95.101.143.219:443 www.bing.com tcp
US 34.120.111.33:443 api.edkt.io udp
US 8.8.8.8:53 region1.analytics.google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
FR 216.58.214.162:443 ade.googlesyndication.com udp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 hb.vntsm.com udp
GB 143.244.38.136:443 hb.vntsm.com tcp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 8.8.8.8:53 219.143.101.95.in-addr.arpa udp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 p.cpx.to udp
US 8.8.8.8:53 pub.doubleverify.com udp
US 8.8.8.8:53 secure.quantserve.com udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
IE 34.248.228.76:443 p.cpx.to tcp
US 104.18.166.224:443 pub.doubleverify.com tcp
DE 91.228.74.166:443 secure.quantserve.com tcp
FR 172.217.20.206:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 prod.us-east-1.cxm-bcn.publisher-services.amazon.dev udp
US 8.8.8.8:53 i.clean.gg udp
US 34.95.69.49:443 i.clean.gg udp
US 52.0.220.230:443 prod.us-east-1.cxm-bcn.publisher-services.amazon.dev tcp
US 104.18.166.224:443 pub.doubleverify.com tcp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 rules.quantcount.com udp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 35.71.131.137:443 match.adsrvr.org tcp
NL 81.17.55.161:443 prg.smartadserver.com tcp
NL 81.17.55.161:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 btlr.sharethrough.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 104.26.8.169:443 script.4dex.io tcp
GB 18.245.187.55:443 rules.quantcount.com tcp
DE 3.75.188.13:443 btlr.sharethrough.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 8.8.8.8:53 pixel.quantserve.com udp
US 104.26.8.169:443 script.4dex.io tcp
US 8.8.8.8:53 s.cpx.to udp
IE 34.248.228.76:443 s.cpx.to tcp
US 8.8.8.8:53 mydmp.exelator.com udp
US 34.120.111.33:443 api.edkt.io udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 224.166.18.104.in-addr.arpa udp
US 8.8.8.8:53 76.228.248.34.in-addr.arpa udp
US 8.8.8.8:53 166.74.228.91.in-addr.arpa udp
IE 34.254.143.3:443 mydmp.exelator.com tcp
US 8.8.8.8:53 55.187.245.18.in-addr.arpa udp
US 8.8.8.8:53 230.220.0.52.in-addr.arpa udp
US 8.8.8.8:53 13.188.75.3.in-addr.arpa udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
DE 162.19.138.119:443 id5-sync.com tcp
DE 162.19.138.83:443 id5-sync.com tcp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 image2.pubmatic.com udp
IE 52.94.220.185:443 aax-eu.amazon-adsystem.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 185.89.210.141:443 secure.adnxs.com tcp
GB 185.64.191.210:443 image2.pubmatic.com tcp
US 8.8.8.8:53 onsite-tag-logs.apps.nielsen.com udp
US 3.224.96.103:443 onsite-tag-logs.apps.nielsen.com tcp
US 8.8.8.8:53 51acc869a00138483360f688bd0a25d7.safeframe.googlesyndication.com udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
FR 142.250.179.65:443 51acc869a00138483360f688bd0a25d7.safeframe.googlesyndication.com tcp
FR 216.58.213.66:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 www.google.com udp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 119.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 83.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 185.220.94.52.in-addr.arpa udp
US 8.8.8.8:53 141.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 210.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 66.213.58.216.in-addr.arpa udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 elb.the-ozone-project.com udp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 sync-tm.everesttech.net udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 192.132.33.67:443 bttrack.com tcp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 sync.mathtag.com udp
US 8.8.8.8:53 p.rfihub.com udp
US 8.8.8.8:53 dnacdn.net udp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 151.101.130.49:443 sync-tm.everesttech.net tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 216.200.232.249:443 sync.mathtag.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 54.204.207.243:443 sync.srv.stackadapt.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
FR 178.250.7.13:443 dnacdn.net tcp
NL 193.0.160.130:443 p.rfihub.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 69.166.1.34:443 sync.go.sonobi.com tcp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 gum.aidemsrv.com udp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 8.8.8.8:53 player.aniview.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 64.74.236.127:443 b1sync.zemanta.com tcp
US 52.45.172.157:443 api-2-0.spot.im tcp
US 64.74.236.127:443 b1sync.zemanta.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 8.8.8.8:53 sync.richaudience.com udp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 52.45.172.157:443 api-2-0.spot.im tcp
US 54.204.207.243:443 sync.srv.stackadapt.com tcp
US 52.207.51.223:443 cs-server-s2s.yellowblue.io tcp
US 8.8.8.8:53 ap.lijit.com udp
US 67.202.105.21:443 ssc-cms.33across.com tcp
DE 51.75.86.98:443 onetag-sys.com tcp
US 172.111.38.54:443 tracker.open-adsyield.com tcp
US 64.74.236.127:443 b1sync.zemanta.com tcp
DE 157.90.211.246:443 sync.richaudience.com tcp
NL 89.149.193.101:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 id.rlcdn.com udp
IE 52.208.228.214:443 match.prod.bidr.io tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 match.sharethrough.com udp
IE 52.211.219.216:443 ap.lijit.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
DE 18.197.30.174:443 match.sharethrough.com tcp
US 8.8.8.8:53 130.160.0.193.in-addr.arpa udp
DE 157.90.211.246:443 sync.richaudience.com tcp
US 8.8.8.8:53 49.130.101.151.in-addr.arpa udp
US 8.8.8.8:53 243.207.204.54.in-addr.arpa udp
US 8.8.8.8:53 249.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 157.172.45.52.in-addr.arpa udp
US 8.8.8.8:53 127.236.74.64.in-addr.arpa udp
US 8.8.8.8:53 101.193.149.89.in-addr.arpa udp
US 8.8.8.8:53 214.228.208.52.in-addr.arpa udp
US 8.8.8.8:53 216.219.211.52.in-addr.arpa udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 token.rubiconproject.com udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 c1.adform.net udp
NL 35.214.199.88:443 rtb.mfadsrvr.com udp
DK 37.157.2.228:443 c1.adform.net tcp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
NL 81.17.55.97:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 223.51.207.52.in-addr.arpa udp
US 8.8.8.8:53 228.2.157.37.in-addr.arpa udp
US 8.8.8.8:53 174.30.197.18.in-addr.arpa udp
US 8.8.8.8:53 file.io udp
US 45.55.107.24:443 file.io tcp
US 45.55.107.24:443 file.io tcp
US 45.55.107.24:443 file.io tcp
US 45.55.107.24:443 file.io tcp
NL 81.17.55.161:443 prg.smartadserver.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
US 8.8.8.8:53 www.file.io udp
FR 142.250.179.66:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 eb2.3lift.com udp
FR 142.250.178.130:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
NL 81.17.55.161:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
FR 216.58.215.34:443 cm.g.doubleclick.net udp
FR 142.250.179.66:443 googleads.g.doubleclick.net udp
FR 142.250.178.130:443 cm.g.doubleclick.net udp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 89.149.193.113:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 www.file.io udp
FR 142.250.179.66:443 googleads.g.doubleclick.net udp
FR 142.250.178.130:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 113.193.149.89.in-addr.arpa udp
DE 37.252.172.123:443 ib.adnxs.com tcp
NL 89.149.193.113:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 142.250.179.66:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 ads.pubmatic.com udp
FR 142.250.178.130:443 cm.g.doubleclick.net udp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 tlx.3lift.com udp
NL 81.17.55.99:443 prg.smartadserver.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 www.file.io udp
FR 142.250.179.66:443 googleads.g.doubleclick.net udp
FR 142.250.178.130:443 cm.g.doubleclick.net udp
US 45.55.107.24:443 file.io tcp
US 45.55.107.24:443 file.io tcp
US 45.55.107.24:443 file.io tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 81.17.55.99:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 142.250.179.66:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
FR 142.250.178.134:443 s0.2mdn.net udp
US 8.8.8.8:53 ade.googlesyndication.com udp
FR 142.250.75.226:443 ade.googlesyndication.com udp
US 8.8.8.8:53 226.75.250.142.in-addr.arpa udp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
FR 142.250.201.163:443 www.google.co.uk udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
FR 178.32.197.48:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 8.8.8.8:53 apps.sascdn.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
FR 142.250.179.66:443 googleads4.g.doubleclick.net udp
GB 92.123.143.83:443 apps.sascdn.com tcp
US 8.8.8.8:53 euw2.smartadserver.com udp
US 8.8.8.8:53 www14.smartadserver.com udp
FR 178.32.197.49:443 www14.smartadserver.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
FR 164.132.25.177:443 www14.smartadserver.com tcp
FR 142.250.178.134:443 s0.2mdn.net udp
US 8.8.8.8:53 48.197.32.178.in-addr.arpa udp
US 8.8.8.8:53 49.197.32.178.in-addr.arpa udp
US 8.8.8.8:53 177.25.132.164.in-addr.arpa udp
FR 164.132.25.177:443 www14.smartadserver.com tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 142.250.179.66:443 googleads4.g.doubleclick.net udp
FR 142.250.75.226:443 ade.googlesyndication.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 tlx.3lift.com udp
FR 178.32.197.48:443 www14.smartadserver.com tcp
US 8.8.8.8:53 apex.go.sonobi.com udp
NL 185.89.210.153:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
US 8.8.8.8:53 153.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 8.1.166.69.in-addr.arpa udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
FR 142.250.179.66:443 googleads4.g.doubleclick.net udp
NL 185.89.210.153:443 ib.adnxs.com tcp
FR 178.32.197.48:443 www14.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 st.pubmatic.com udp
NL 185.89.210.153:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 149.202.238.96:443 www14.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 172.217.18.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 www.file.io udp
FR 216.58.214.162:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 eb2.3lift.com udp
FR 142.250.179.66:443 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 96.238.202.149.in-addr.arpa udp
NL 185.89.210.153:443 ib.adnxs.com tcp
FR 149.202.238.96:443 www14.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 172.217.18.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 ads.eu.criteo.com udp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 8.8.8.8:53 widget.nl3.eu.criteo.com udp
US 8.8.8.8:53 cat.nl3.eu.criteo.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
NL 178.250.1.9:443 widget.nl3.eu.criteo.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 imageproxy.eu.criteo.net udp
US 8.8.8.8:53 csm.eu.criteo.net udp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
US 8.8.8.8:53 6.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 14.25.17.104.in-addr.arpa udp
US 8.8.8.8:53 17.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 15.1.250.178.in-addr.arpa udp
NL 185.89.210.153:443 ib.adnxs.com tcp
FR 149.202.238.96:443 www14.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
US 8.8.8.8:53 www.file.io udp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
US 8.8.8.8:53 cs.mytheresa.com udp
NL 178.250.1.3:443 static.criteo.net tcp
FR 35.181.77.138:443 cs.mytheresa.com tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
US 8.8.8.8:53 138.77.181.35.in-addr.arpa udp
FR 149.202.238.96:443 www14.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
NL 185.89.210.153:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
US 8.8.8.8:53 prg.smartadserver.com udp
NL 185.89.210.153:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
US 8.8.8.8:53 225.178.182.217.in-addr.arpa udp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
FR 217.182.178.225:443 prg.smartadserver.com tcp
NL 185.89.210.153:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
US 8.8.8.8:53 4.230.157.18.in-addr.arpa udp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
US 8.8.8.8:53 www.file.io udp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
US 8.8.8.8:53 cs.mytheresa.com udp
FR 35.181.77.138:443 cs.mytheresa.com tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
US 8.8.8.8:53 z.moatads.com udp
GB 2.18.109.123:443 z.moatads.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
US 8.8.8.8:53 mb.moatads.com udp
US 8.8.8.8:53 px.moatads.com udp
GB 132.226.214.62:443 mb.moatads.com tcp
US 8.8.8.8:53 123.109.18.2.in-addr.arpa udp
US 8.8.8.8:53 62.214.226.132.in-addr.arpa udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
DE 37.252.172.123:443 ib.adnxs.com tcp
NL 81.17.55.98:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 98.55.17.81.in-addr.arpa udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
US 8.8.8.8:53 www.file.io udp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
US 8.8.8.8:53 cs.mytheresa.com udp
FR 35.181.77.138:443 cs.mytheresa.com tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
NL 81.17.55.98:443 prg.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 81.17.55.98:443 prg.smartadserver.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
US 8.8.8.8:53 www.file.io udp
US 8.8.8.8:53 eb2.3lift.com udp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 81.17.55.98:443 prg.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
FR 149.202.238.97:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
US 8.8.8.8:53 www.file.io udp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
US 8.8.8.8:53 97.238.202.149.in-addr.arpa udp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
FR 149.202.238.97:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
FR 149.202.238.97:443 prg.smartadserver.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
FR 149.202.238.97:443 prg.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
DE 18.157.230.4:443 tlx.3lift.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
DE 18.157.230.4:443 tlx.3lift.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 37.252.173.215:443 ib.adnxs.com tcp
NL 81.17.55.99:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 215.173.252.37.in-addr.arpa udp
DE 37.252.173.215:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
NL 81.17.55.99:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 ib.3lift.com udp
GB 18.245.187.33:443 ib.3lift.com tcp
US 8.8.8.8:53 www.file.io udp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
US 8.8.8.8:53 track.venatusmedia.com udp
IE 3.248.98.103:443 track.venatusmedia.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
US 8.8.8.8:53 103.98.248.3.in-addr.arpa udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
NL 81.17.55.99:443 prg.smartadserver.com tcp
DE 37.252.173.215:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
DE 37.252.173.215:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
NL 81.17.55.99:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 tlx.3lift.com udp
DE 37.252.173.215:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
DE 18.157.230.4:443 tlx.3lift.com tcp
FR 51.178.195.209:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 51.178.195.209:443 prg.smartadserver.com tcp
DE 37.252.173.215:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 37.252.173.215:443 ib.adnxs.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
DE 37.252.173.215:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
DE 37.252.173.215:443 ib.adnxs.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
DE 3.78.168.176:443 tlx.3lift.com tcp
NL 89.149.192.193:443 prg.smartadserver.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 193.192.149.89.in-addr.arpa udp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 37.252.173.215:443 ib.adnxs.com tcp
NL 89.149.192.193:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 8.8.8.8:53 ib.adnxs.com udp
NL 89.149.192.193:443 prg.smartadserver.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 32.1.166.69.in-addr.arpa udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
NL 89.149.192.193:443 prg.smartadserver.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 51.178.195.209:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 www.file.io udp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
US 8.8.8.8:53 track.venatusmedia.com udp
US 76.223.111.18:443 eb2.3lift.com tcp
IE 3.248.98.103:443 track.venatusmedia.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 51.178.195.209:443 prg.smartadserver.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
FR 51.178.195.209:443 prg.smartadserver.com tcp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
FR 51.178.195.209:443 prg.smartadserver.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 prg.smartadserver.com udp
DE 37.252.172.123:443 ib.adnxs.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
NL 89.149.192.241:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
DE 37.252.172.123:443 ib.adnxs.com tcp
NL 89.149.192.241:443 prg.smartadserver.com tcp
US 69.166.1.32:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
NL 185.89.211.116:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 116.211.89.185.in-addr.arpa udp
US 8.8.8.8:53 129.110.134.91.in-addr.arpa udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
NL 185.89.211.116:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
NL 185.89.210.141:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
NL 185.89.210.141:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 185.89.210.141:443 ib.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
NL 81.17.55.113:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 113.55.17.81.in-addr.arpa udp
NL 81.17.55.113:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 185.89.210.141:443 ib.adnxs.com tcp
NL 81.17.55.113:443 prg.smartadserver.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
NL 185.89.210.141:443 ib.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 185.89.210.141:443 ib.adnxs.com tcp
NL 81.17.55.113:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 prg.smartadserver.com udp
NL 185.89.210.141:443 ib.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 81.17.55.99:443 prg.smartadserver.com tcp
NL 81.17.55.99:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 185.89.210.141:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 81.17.55.99:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 37.252.171.149:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 149.171.252.37.in-addr.arpa udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 37.252.171.149:443 ib.adnxs.com tcp
NL 81.17.55.99:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 37.252.171.149:443 ib.adnxs.com tcp
NL 81.17.55.99:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 tlx.3lift.com udp
NL 89.149.192.65:443 prg.smartadserver.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 65.192.149.89.in-addr.arpa udp
NL 89.149.192.65:443 prg.smartadserver.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
NL 89.149.192.65:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 180.210.89.185.in-addr.arpa udp
NL 185.89.210.180:443 ib.adnxs.com tcp
NL 89.149.192.65:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
NL 89.149.192.65:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 185.89.210.180:443 ib.adnxs.com tcp
NL 89.149.192.65:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 prg.smartadserver.com udp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 217.182.178.224:443 prg.smartadserver.com tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 224.178.182.217.in-addr.arpa udp
FR 217.182.178.224:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 217.182.178.224:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 8.8.8.8:53 prg.smartadserver.com udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 178.32.210.227:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
NL 185.89.210.180:443 ib.adnxs.com tcp
US 8.8.8.8:53 227.210.32.178.in-addr.arpa udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 178.32.210.227:443 prg.smartadserver.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 apex.go.sonobi.com udp
FR 178.32.210.227:443 prg.smartadserver.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 64.1.166.69.in-addr.arpa udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
FR 178.32.210.227:443 prg.smartadserver.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 69.166.1.64:443 apex.go.sonobi.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
FR 51.178.195.209:443 prg.smartadserver.com tcp
FR 51.178.195.209:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
FR 51.178.195.209:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 ib.3lift.com udp
IE 3.248.98.103:443 track.venatusmedia.com tcp
GB 18.245.187.105:443 ib.3lift.com tcp
US 8.8.8.8:53 105.187.245.18.in-addr.arpa udp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 www.file.io udp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 8.8.8.8:53 widget.nl3.eu.criteo.com udp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
US 8.8.8.8:53 cs.mytheresa.com udp
NL 178.250.1.9:443 widget.nl3.eu.criteo.com tcp
FR 35.181.77.138:443 cs.mytheresa.com tcp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
FR 51.178.195.209:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
FR 51.178.195.209:443 prg.smartadserver.com tcp
US 69.166.1.64:443 apex.go.sonobi.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 apex.go.sonobi.com udp
US 8.8.8.8:53 prg.smartadserver.com udp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
FR 149.202.238.96:443 prg.smartadserver.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 149.202.238.96:443 prg.smartadserver.com tcp
US 69.166.1.8:443 apex.go.sonobi.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 apex.go.sonobi.com udp
FR 149.202.238.96:443 prg.smartadserver.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 e765f3d75e6b0e4a7119c8b14d47d8da
SHA1 cc9f7c7826c2e1a129e7d98884926076c3714fc0
SHA256 986443556d3878258b710d9d9efbf4f25f0d764c3f83dc54217f2b12a6eccd89
SHA512 a1872a849f27da78ebe9adb9beb260cb49ed5f4ca2d403f23379112bdfcd2482446a6708188100496e45db1517cdb43aba8bb93a75e605713c3f97cd716b1079

\??\pipe\LOCAL\crashpad_4568_VYRUYONXIWJWALIW

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 53bc70ecb115bdbabe67620c416fe9b3
SHA1 af66ec51a13a59639eaf54d62ff3b4f092bb2fc1
SHA256 b36cad5c1f7bc7d07c7eaa2f3cad2959ddb5447d4d3adcb46eb6a99808e22771
SHA512 cad44933b94e17908c0eb8ac5feeb53d03a7720d97e7ccc8724a1ed3021a5bece09e1f9f3cec56ce0739176ebbbeb20729e650f8bca04e5060c986b75d8e4921

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\34dfa9db-33cd-444c-8b10-f4ce6199bc3c.tmp

MD5 0afa4648261ca6ad2f2148cd20a04382
SHA1 bb6a11f7cc96c102bea55e242ea57a8eb90a763c
SHA256 5e56c9bcbb22852786fc17f85707795ed89ae911e5891700fdb6e33c4ae37b70
SHA512 11e73bdcc59a3446f33a6640cc4d1d69f5ffa2dec61a426aae04f2e03efe66b0ec48c4e3fa59af38923316ddc7c3262dd46addcacbb9da628a7c3407c63f215d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 765d0ce6fcd75b26d27dcb4005632313
SHA1 de63e2c81f2ffc3950a5d26823e3e600bfc68b5f
SHA256 cadb2a62c2c0c0e18ad9d9724a99d0b4c650214b18ccc2988dc49ae51a02a3c6
SHA512 7f47527bd0c2fee35dbe24c85bf37321549c137676ebb2843c5973193e625de7621ea037ae2884d6ba7d742bd85e01d2e0aba243e71efc67d00792dbe8d80c1a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8deba18cac7c57b8251ee786184ce54a
SHA1 e00aaa365e03f241103f7ad161bcb7ff5568959f
SHA256 70e8d8f7bdb5dc328739f13e61a75b6febc442cc94165a7e02205b9efb81bfb8
SHA512 fcfb49d95e45ecf7518f1cf32957b5b1e3bfd81717a30b2ff4fcd62fc972c328043e19ca09a41e479f581b8cf6af8442f81f3d0226325576e12e3af32cdcbb12

C:\Users\Admin\Downloads\Unconfirmed 645089.crdownload

MD5 4b94b989b0fe7bec6311153b309dfe81
SHA1 bb50a4bb8a66f0105c5b74f32cd114c672010b22
SHA256 7c4283f5e620b2506bcb273f947def4435d95e143ae3067a783fd3adc873a659
SHA512 fbbe60cf3e5d028d906e7d444b648f7dff8791c333834db8119e0a950532a75fda2e9bd5948f0b210904667923eb7b2c0176140babc497955d227e7d80fb109d

memory/5060-91-0x0000023BD5180000-0x0000023BD524E000-memory.dmp

memory/5060-93-0x0000023BD6F60000-0x0000023BD6F82000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8e40b3f179dbda1be1a1f2c189c6442c
SHA1 b6145850c703b0a6287aaf449ed04d9a295a832e
SHA256 22a4c7843d20e035b166c6b8d57cd071cedbad7bb04d3904f01ebe625edabde1
SHA512 376e280911403447af4bef67586ace79b9aa64b740ea60258f1733a58de64303c514883db6544960e36229b82f8999e207212ba4f1df27970ebd43b39619b77b

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 dab6d0edec59cea480b81882a45f6f7b
SHA1 e532b1cba308f0e8a5e9765cdf22b2e64acfcb2f
SHA256 84ae78a9b777e70c73888a57567a9b107d08352d2cecc1ebf26e3869012eec28
SHA512 4256995be54eee5ddb912061244422708a59c086576e42dddfe2b4b2ec28023bc47caf7753090074091b9d7cf7c3cc3c49cad6bb2e1c1b0dee166628a178655c

C:\Users\Admin\AppData\Local\Temp\node-v18.16.0-x64.msi

MD5 0e4e9aa41d24221b29b19ba96c1a64d0
SHA1 231ade3d5a586c0eb4441c8dbfe9007dc26b2872
SHA256 5bfb6f3ab89e198539408f7e0e8ec0b0bd5efe8898573ec05b381228efb45a5d
SHA512 e6f27aecead72dffecbeaad46ebdf4b1fd3dbcddd1f6076ba183b654e4e32d30f7af1236bf2e04459186e993356fe2041840671be73612c8afed985c2c608913

C:\Windows\Installer\MSI1CCA.tmp

MD5 9fe9b0ecaea0324ad99036a91db03ebb
SHA1 144068c64ec06fc08eadfcca0a014a44b95bb908
SHA256 e2cce64916e405976a1d0c522b44527d12b1cba19de25da62121cf5f41d184c9
SHA512 906641a73d69a841218ae90b83714a05af3537eec8ad1d761f58ac365cf005bdd74ad88f71c4437aaa126ac74fa46bcad424d17c746ab197eec2caa1bd838176

C:\Windows\Installer\MSI1D2A.tmp

MD5 a3ae5d86ecf38db9427359ea37a5f646
SHA1 eb4cb5ff520717038adadcc5e1ef8f7c24b27a90
SHA256 c8d190d5be1efd2d52f72a72ae9dfa3940ab3faceb626405959349654fe18b74
SHA512 96ecb3bc00848eeb2836e289ef7b7b2607d30790ffd1ae0e0acfc2e14f26a991c6e728b8dc67280426e478c70231f9e13f514e52c8ce7d956c1fad0e322d98e0

C:\Windows\Installer\MSI2848.tmp

MD5 7a86ce1a899262dd3c1df656bff3fb2c
SHA1 33dcbe66c0dc0a16bab852ed0a6ef71c2d9e0541
SHA256 b8f2d0909d7c2934285a8be010d37c0609c7854a36562cbfcbce547f4f4c7b0c
SHA512 421e8195c47381de4b3125ab6719eec9be7acd2c97ce9247f4b70a309d32377917c9686b245864e914448fe53df2694d5ee5f327838d029989ba7acafda302ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 aa67610207624ec8a38c4314cec692ef
SHA1 2518b57e3c0c536fc3d9fccbce0e679f8bae2a4b
SHA256 b76f058a7a38857a0f69c4a6b77b62b209ed532971051de47586c268d2982837
SHA512 3e7fb9cc9c764c42536b1a1a83e31ba2856c39fda95459f191c3bcb7af97c545ad4c6eab616ab198597fd9957dc567b468ec2f27536cc7b96b4880b200d7295d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe584002.TMP

MD5 661760f65468e15dd28c1fd21fb55e6d
SHA1 207638003735c9b113b1f47bb043cdcdbf4b0b5f
SHA256 0a5f22651f8fe6179e924a10a444b7c394c56e1ed6015d3fc336198252984c0e
SHA512 6454c5f69a2d7d7f0df4f066f539561c365bb6b14c466f282a99bf1116b72d757bef0bf03a0e0c68a7538a02a993fc070c52133ca2162c8496017053194f441c

memory/5800-389-0x000001B0F2D90000-0x000001B0F3851000-memory.dmp

C:\Program Files\nodejs\node_modules\npm\node_modules\nopt\LICENSE

MD5 b020de8f88eacc104c21d6e6cacc636d
SHA1 20b35e641e3a5ea25f012e13d69fab37e3d68d6b
SHA256 3f24d692d165989cd9a00fe35ca15a2bc6859e3361fa42aa20babd435f2e4706
SHA512 4220617e29dd755ad592295bc074d6bc14d44a1feeed5101129669f3ecf0e34eaa4c7c96bbc83da7352631fa262baab45d4a370dad7dabec52b66f1720c28e38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 90d417a3e33c17ebd526027bd010486c
SHA1 5ec6b8d275dd7672bc429aab7f90d87b09cd9bea
SHA256 e76a8ba3d434a564d89f2683b65af2d4e50927501a7e9326596feedc0fb317a7
SHA512 1e6a591c7b45bb90957331d00c2043d2cbe1ae515f57d272739f190be93519c930f1785953c4d9e5b541b95e7fbaa0cc98f5f467ac8c4a14c762074224ec2512

C:\Program Files\nodejs\node_modules\npm\node_modules\bin-links\LICENSE

MD5 d2cf52aa43e18fdc87562d4c1303f46a
SHA1 58fb4a65fffb438630351e7cafd322579817e5e1
SHA256 45e433413760dc3ae8169be5ed9c2c77adc31ad4d1bc5a28939576df240f29a0
SHA512 54e33d7998b5e9ba76b2c852b4d0493ebb1b1ee3db777c97e6606655325ff66124a0c0857ca4d62de96350dbaee8d20604ec22b0edc17b472086da4babbbcb16

C:\Program Files\nodejs\node_modules\npm\node_modules\promise-all-reject-late\LICENSE

MD5 7428aa9f83c500c4a434f8848ee23851
SHA1 166b3e1c1b7d7cb7b070108876492529f546219f
SHA256 1fccd0ad2e7e0e31ddfadeaf0660d7318947b425324645aa85afd7227cab52d7
SHA512 c7f01de85f0660560206784cdf159b2bdc5f1bc87131f5a8edf384eba47a113005491520b0a25d3cc425985b5def7b189e18ff76d7d562c434dc5d8c82e90cce

C:\Program Files\nodejs\node_modules\npm\node_modules\aggregate-error\license

MD5 5ad87d95c13094fa67f25442ff521efd
SHA1 01f1438a98e1b796e05a74131e6bb9d66c9e8542
SHA256 67292c32894c8ac99db06ffa1cb8e9a5171ef988120723ebe673bf76712260ec
SHA512 7187720ccd335a10c9698f8493d6caa2d404e7b21731009de5f0da51ad5b9604645fbf4bc640aa94513b9eb372aa6a31df2467198989234bc2afbce87f76fbc3

C:\Program Files\nodejs\node_modules\npm\node_modules\minizlib\node_modules\minipass\LICENSE

MD5 d7c8fab641cd22d2cd30d2999cc77040
SHA1 d293601583b1454ad5415260e4378217d569538e
SHA256 04400db77d925de5b0264f6db5b44fe6f8b94f9419ad3473caaa8065c525c0be
SHA512 278ff929904be0c19ee5fb836f205e3e5b3e7cec3d26dd42bbf1e7e0ca891bf9c42d2b28fce3741ae92e4a924baf7490c7c6c59284127081015a82e2653e0764

C:\Program Files\nodejs\node_modules\npm\node_modules\minizlib\node_modules\minipass\index.js

MD5 bc0c0eeede037aa152345ab1f9774e92
SHA1 56e0f71900f0ef8294e46757ec14c0c11ed31d4e
SHA256 7a395802fbe01bb3dc8d09586e0864f255874bf897378e546444fbaec29f54c5
SHA512 5f31251825554bf9ed99eda282fa1973fcec4a078796a10757f4fb5592f2783c4ebdd00bdf0d7ed30f82f54a7668446a372039e9d4589db52a75060ca82186b3

C:\Program Files\nodejs\node_modules\npm\node_modules\tar\node_modules\fs-minipass\node_modules\minipass\index.d.ts

MD5 f0bd53316e08991d94586331f9c11d97
SHA1 f5a7a6dc0da46c3e077764cfb3e928c4a75d383e
SHA256 dd3eda3596af30eda88b4c6c2156d3af6e7fa221f39c46e492c5e9fb697e2fef
SHA512 fd6affbaed67d09cf45478f38e92b8ca6c27650a232cbbeaff36e4f7554fb731ae44cf732378641312e98221539e3d8fabe80a7814e4f425026202de44eb5839

C:\Program Files\nodejs\node_modules\npm\node_modules\libnpmorg\LICENSE

MD5 072ac9ab0c4667f8f876becedfe10ee0
SHA1 0227492dcdc7fb8de1d14f9d3421c333230cf8fe
SHA256 2ef361317adeda98117f14c5110182c28eae233af1f7050c83d4396961d14013
SHA512 f38fd6506bd9795bb27d31f1ce38b08c9e6f1689c34fca90e9e1d5194fa064d1f34a9c51d15941506ebbbcd6d4193055e9664892521b7e39ebcd61c3b6f25013

C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\arborist\LICENSE.md

MD5 2916d8b51a5cc0a350d64389bc07aef6
SHA1 c9d5ac416c1dd7945651bee712dbed4d158d09e1
SHA256 733dcbf5b1c95dc765b76db969b998ce0cbb26f01be2e55e7bccd6c7af29cb04
SHA512 508c5d1842968c478e6b42b94e04e0b53a342dfaf52d55882fdcfe02c98186e9701983ab5e9726259fba8336282e20126c70d04fc57964027586a40e96c56b74

C:\Program Files\nodejs\node_modules\npm\node_modules\minipass-pipeline\node_modules\minipass\package.json

MD5 d116a360376e31950428ed26eae9ffd4
SHA1 192b8e06fb4e1f97e5c5c7bf62a9bff7704c198b
SHA256 c3052bd85910be313e38ad355528d527b565e70ef15a784db3279649eee2ded5
SHA512 5221c7648f4299234a4637c47d3f1eb5e147014704913bc6fdad91b9b6a6ccc109bced63376b82b046bb5cad708464c76fb452365b76dbf53161914acf8fb11a

C:\Program Files\nodejs\node_modules\npm\node_modules\treeverse\LICENSE

MD5 1d7c74bcd1904d125f6aff37749dc069
SHA1 21e6dfe0fffc2f3ec97594aa261929a3ea9cf2ab
SHA256 24b8d53712087b867030d18f2bd6d1a72c78f9fb4dee0ce025374da25e4443b9
SHA512 b5ac03addd29ba82fc05eea8d8d09e0f2fa9814d0dd619c2f7b209a67d95b538c3c2ff70408641ef3704f6a14e710e56f4bf57c2bb3f8957ba164f28ee591778

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 badb7fa9e1d261972050ae30a9a36a73
SHA1 d6dfc3e6f3df5a2c124b80037750b94a041e8235
SHA256 d7ae4fad790788942653aaaa987cd5421d88c668abb4d45fed40ab5040984bca
SHA512 6257e907a06a6eee6fa3586eb48804c236466fb5e4b9cdc7893c27de132bdbd963aeb821b6666575f4c3ceaf00323b879ccb6bed8c42c601d16aaf363d18f82e

C:\Program Files\nodejs\node_modules\npm\node_modules\libnpmhook\LICENSE.md

MD5 e9dc66f98e5f7ff720bf603fff36ebc5
SHA1 f2b428eead844c4bf39ca0d0cf61f6b10aeeb93b
SHA256 b49c8d25a8b57fa92b2902d09c4b8a809157ee32fc10d17b7dbb43c4a8038f79
SHA512 8027d65e1556511c884cb80d3c1b846fc9d321f3f83002664ad3805c4dee8e6b0eaf1db81c459153977bdbde9e760b0184ba6572f68d78c37bff617646bcfc3b

C:\Program Files\nodejs\node_etw_provider.man

MD5 1d51e18a7247f47245b0751f16119498
SHA1 78f5d95dd07c0fcee43c6d4feab12d802d194d95
SHA256 1975aa34c1050b8364491394cebf6e668e2337c3107712e3eeca311262c7c46f
SHA512 1eccbe4ddae3d941b36616a202e5bd1b21d8e181810430a1c390513060ae9e3f12cd23f5b66ae0630fd6496b3139e2cc313381b5506465040e5a7a3543444e76

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Node.js\Node.js website.url

MD5 35b86e177ab52108bd9fed7425a9e34a
SHA1 76a1f47a10e3ab829f676838147875d75022c70c
SHA256 afaa6c6335bd3db79e46fb9d4d54d893cee9288e6bb4738294806a9751657319
SHA512 3c8047c94b789c8496af3c2502896cef2d348ee31618893b9b71244af667ec291dcb9b840f869eb984624660086db0c848d1846aa601893e6f9955e56da19f62

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Node.js\Node.js documentation.url

MD5 db7dbbc86e432573e54dedbcc02cb4a1
SHA1 cff9cfb98cff2d86b35dc680b405e8036bbbda47
SHA256 7cf8a9c96f9016132be81fd89f9573566b7dc70244a28eb59d573c2fdba1def9
SHA512 8f35f2e7dac250c66b209acecab836d3ecf244857b81bacebc214f0956ec108585990f23ff3f741678e371b0bee78dd50029d0af257a3bb6ab3b43df1e39f2ec

C:\Config.Msi\e5818a7.rbs

MD5 6f7c8cb9a4d7d52634259216131743d5
SHA1 580883483d7fcdcfabe7fb7fbf01c2568fe1951b
SHA256 d8b3e958845f10949bebc9bb9ee55f387332c8907e302f0861dcc5b0ae6ac620
SHA512 1f62ee18f8aa0c0bbd25b98d908e32856e200bfa6b135ee51e82b74a50827bcf6e3d3d1e4b2767f168c8f07ed25616b0c9585099ac75e63e32c153af19d555d0

memory/5060-2777-0x0000023BEF9B0000-0x0000023BEF9BA000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 5cb30539baa721a25b4cf974f63b8820
SHA1 e21332a78748992666472c65902a321811ab886b
SHA256 0762e8c0536bd888adc4649ffca69597ba5ff1103427d433bd8e3906848d8e44
SHA512 d7d98c08e49fcd339187ca81132fed9f0586e05c987de87130657b5e00e4daba1baf2afa6cce6015cab5f5eee59d6974a4f9410212c555346cbf85ce10e3d43c

memory/5060-2804-0x0000023BEFA20000-0x0000023BEFA32000-memory.dmp

memory/7128-3218-0x0000021FC7B00000-0x0000021FC7B24000-memory.dmp

memory/7128-3219-0x0000021FE25A0000-0x0000021FE2ADC000-memory.dmp

memory/7128-3220-0x0000021FE2250000-0x0000021FE230A000-memory.dmp

memory/7128-3221-0x0000021FE2310000-0x0000021FE23C2000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a55b0d9773e4267cee464de6904a8b6c
SHA1 1b0fff4f34987393e9fcea95c82ed2cec85e8636
SHA256 58f2ade80a7524fecc19dcac6616f5fd20135d7a39d9b2b4da1073f2d6fa5662
SHA512 d4a6aa44d98fbfa4c5438c32517b41542f3c2eed45ad6e4eea08a924a39f658f618e09460f481e57a1b51c2cac814a2a56f5ae666f7eb8f1d7218e1cefd818dc

memory/7128-3228-0x0000000180000000-0x0000000180FB1000-memory.dmp

memory/7128-3229-0x0000000180000000-0x0000000180FB1000-memory.dmp

memory/7128-3230-0x0000000180000000-0x0000000180FB1000-memory.dmp

memory/7128-3231-0x0000000180000000-0x0000000180FB1000-memory.dmp

memory/7128-3232-0x0000021FE21F0000-0x0000021FE2200000-memory.dmp

memory/7128-3234-0x0000021FE2DE0000-0x0000021FE2E70000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 07276582cc80cd084b5396ba457b31d7
SHA1 05d6939d73e24df36d6b5d74a488abc82dc1579d
SHA256 3e2258920af3b4167c9733c6700c929fce6af4d82ea29bb0247df2ae715f6823
SHA512 d125f0ba5616ddb7aec9de0499844876023be456840e207bd66e60f01f15734abb1790adefb8d64d02b72ab2a6a1a190c3246550561788afd8c233c65f2e91c0

memory/7128-3240-0x0000021FE6590000-0x0000021FE6598000-memory.dmp

memory/7128-3243-0x0000021FE6B60000-0x0000021FE6B6E000-memory.dmp

memory/7128-3242-0x0000021FE6B90000-0x0000021FE6BC8000-memory.dmp

memory/7128-3245-0x0000000180000000-0x0000000180FB1000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

MD5 230ab95d87a717be265134072eb17c25
SHA1 71a3d3dd6f952057ba0c6025d39c9792ff606828
SHA256 3fdfeaa675697f08f1c7c0fd6b77512f4bf9465e670637e8e332e65ebb9db068
SHA512 9b0636421ad14161f211e846521149ab0a7c866e77db309dba79718487835204cee3821c9f4678e48e134614be6a02421c155a34b7c9bc424012137705960b11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

MD5 e4cc1ece2f2425b10ae2ccc212c1dafc
SHA1 92609e6d0093693110baa23758382889bcb30da6
SHA256 92e9415d8bc8529e2a3f335258ef7ff159cce2965ce3b2b7c15f73720efee809
SHA512 2848dee3a6da891b7044518bc97aeafd340705cebe846350b9a7f314b52450f1eb977b8b492638965ce4674ebaa341e4f832438199c3cad2fb0a0793ef83a619

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

MD5 a1afe33ce7442502a96deee597945384
SHA1 fe34cd78635f5617cf238de6dc746058d6f88899
SHA256 f7eeb570c60aff1435db1daf3767c0672634269789870ef91c69b2b90a47edaa
SHA512 f8bca21c3fd79d63c8265f5dfcba95419eac697b42efb600e7c33d15dc5d9c3e0d0d360da39e14004facaea4cff4dcfc00d7437979283ce0a2b06916b69b8c80

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 6c66019a77d0510c3cd4d040bcf19d25
SHA1 e5b09ee4818ebbd2928347668601163c01ec57bc
SHA256 c194d60592c520e4338e32448739dd1aa6d0b41f032691548e2aee2b47e5a50f
SHA512 447b6b615cf15013bfbf3bf633c0e1a2339b33af2a6435469fde2706f8162f1a1e48bc7f2b59411f9f1aeb1cc407aead65c7e29e136e9b90be88debb525b8ddd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e9c2924f2475c457deb0331e214c443b
SHA1 c934025ca44ee62b4fe5fdaab623faf26b1b751f
SHA256 bd83f387883d5d5a940a547989526bf2ffa5e52c5f1e43cba72d5855654c2ac0
SHA512 2e89d95acbebcd999e1bee5adbe6ae4c7adfc65341f313874667daf95ac782adf21404ae99ec87c787abaa6bba4bb0213b70b8361b3a765bfc5946740b43f8f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e51f6704dcc8b1019ed280cafe6fe293
SHA1 d0ff5f00f02a70ff58b7b831a255ec75d1541ae0
SHA256 e5f567523dee136cc0872b57416f9a255d8653a3113bc5bc929015a92330dffc
SHA512 79f15c65a4fcc7e524926e25a904c457dd388a6b6650cfd8d655d5fee6cf87b09481431a73a39317c432c2b42984f1ee718bc601d7fa43a1fe94bd45f175a2b0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dc93a24a55bfa5319ba4925d9da713cd
SHA1 e526ba37dca5b9487e81983c8928c1f3eb3dddd6
SHA256 8ddcaca84cd5ed1e20a392496d8512f934067045a80eba6ebbd5f63a64c55568
SHA512 f6da6369cf459b4f3648245ee04008da82d2cf993a8ab3df6e1859819d509d088542cc7a9d9ad7a80398360ae14ef2f619bb246a9bbcb34fea4f2c8c94667d09

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5ae7a0dd458415aba00ce4558feaa00c
SHA1 bd083aa6460e73b1765e70332b7aac84b9bbaee4
SHA256 edf8d3cd4ac5b1ab61dfe67398a5ace852583c62a6b977fca4061635a9234d29
SHA512 d46955a33c0e3cc986a8a545aebc1f71dad832a15c5769f8d92e48bfcd006eb952009ac4c7534307349d2a9acb899a4635a00a7de5e196d9900b8aca3e672057

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f68e0b1db4fcc3e10c6895b63c45aee2
SHA1 9b877d15aa65c91d25c1e1d85c8d2e3072fdd216
SHA256 5e89377922f64f3db8a73da4e6bb2cfe17446294d18978907a314d44e11e3ca6
SHA512 79b9ca557cfaf1361b09e15ceba25545333bec9099a1b2b77bd45b1342a364e0b4fef1742a43234547a79ebbfb56cee91e679c49b9f660e626e2884d37cdafae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 fc969cccba766b4c182a0c4db0e366fc
SHA1 391397a7e576b37de3b3a6a2ce5eaddc4906ab62
SHA256 a1c3fcc7bbe5693efe1bfc1a2063bbcdc29288f88580fb97bff5f6b0366a8f92
SHA512 0597fefcd6bf69d8542817ae9416c75a99977b721758f8570bd78402573e584cc382c39160bdf306649c6a12610c4394fef57aa7e1a824e7f0b9373b7ff3c08a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a8b9c8ec49160299fc058404d78a31c3
SHA1 a3d1dd0548daf9e0109863a8228faf4ed8088122
SHA256 520bf9cc3517fc4dfc804dd506022141ec87d599b97d4103a56cd81af99e4928
SHA512 2084e60a10a23b243f09ceaac1d4a75ed4d7ef2fdb37205ec02accc41342cfb6db5a6a5dc477b1b5ff9928645f0bacf1547adb190e0694bf2d83f4cbb093b896

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d0c71056e9e3544f_0

MD5 0e50f2d7fafbfcf9b371ba7b4d49d3da
SHA1 20fea1bcdc295d3dd98b5af2656db1504d52e2bd
SHA256 3e981766426733d2c698b49cfbbea82d24b21adbcf68aef63386a81b7f6cedc6
SHA512 ac566e8d0ac94eedbc11242b564d3dcb5a9d2cb4e30fa901e5e86cdca106bae35ab6209c5e29ffead183dcbf04b3eeaf02d9e7d0b67431cf42c6b57e01e8d3e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 85a2092e4270806d9e0942489f20a61b
SHA1 cff8268bd25efed1dde65c34286dbe006d435d7f
SHA256 448a7e4289bd1c5393f7e8c3eab4d08596e5959ac4673ab5d6b035f4310cd727
SHA512 c2a0e8f9ba2831ac2a9b5f2a5bebca3272b54fd4473b380061168487c45bffe4c4a5d207018651dda200e4464030d95a6f8dfeec4b22efaeb910c53175b21e52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 47578eec2623bc73b2f74cb867aab383
SHA1 2968e053ca40cbb31e13e6730238dedc8164acd4
SHA256 587e69c9965a4c30d951ad05f20df268d8c4849bfe454b6df4a49b0ccb4310ad
SHA512 a0a819d06cf590875a65f52e58deb77044ff3fc75461f456dd514754ef9aaea8a532d197674fb81d639378407459b9098e070fe97295bc1668ae4751a140e78a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e9b0a28de9124d63fb7a042ca4aa25d3
SHA1 9482f31d28d0557bb7279756b0d08a1c6084a40e
SHA256 9f75ddb6038f19087b6b566ddc9003b789683f9a6bbef0784b260df1be20395c
SHA512 d28a8b5d75c1f111a014e5271c4b345a66d0d25698160e379714e9dc4e43c19f3d72ea1d2049d7f93bc49fb00fb41896c450bdad83854cab31f56467bfc78e38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c36bc187a8d2e21f10db584d31607b29
SHA1 9926995e552336bb9dd379b29a57999efc96941f
SHA256 8734f30bc9169b73dae25455e3cdbdde71cac3086526bc791c0a1e2995b85b40
SHA512 ba2f0ce9615384039fcd60063ef5032f0926f13b1dbfbc96fcc2e47b2dc8b1ec25784e5034ad1e525e72493fbe598e397e054abb587ed70aff1903ca0baea847

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bd7b7e6d912f4891_0

MD5 638f44798664b2cbd5a4e7f808a65b92
SHA1 0324b7f05653cfda0ecae86336903af6ae20f0ca
SHA256 c0e1633c1fd2f76239f35da4e33ce1ea7e54b4bbc26b2323a3fb3ce8ee5d5329
SHA512 85fab862df505e1bb62dfb22dc7b6282576673db5014733cb21c60a5ed3cda74aeff82921299d8b2b0955f6bfaaf4a947a2641581e300ab7ef698c98b4842a01

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2609622b392e99cf_0

MD5 b2fcd8c65463d27c67a52880a8ddbcd0
SHA1 f3605a8883170fc4b23be5f757860a98fb2be937
SHA256 fb096fc37acf8755f0493aecc1803f88706341b14b730e7e9515d25d914c1f9b
SHA512 a6d8ed3a97fd23714b2d436ffac459ed9edc01d75c5fd2dcfcb727808efca908ab165c76691dbe7b7b03ba013bcd4f846039119ba816d4f5fa10f01f09d36971

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2d2db31610c17423_0

MD5 83eeeca8daf58f0c4bee0f1020a9b55b
SHA1 606ea59338a1a9dd4fad38573f07dbeb977882ff
SHA256 13582d73b0c4aad61c94af8c336d32f5e62a9a2ed24c74789e1ce9ae5141edd0
SHA512 2b07ee7fdecccaf28345cefcf428aa421c9aa7ad6d32faed708977027c15ad9d607d3487a4dd0bfeb1905022de9c18ce8f0e8d3ccc063b9b13e44805c3408583

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\abf7a846e735b530_0

MD5 0e7826a0f3ab227d7b06f2cf512d25c3
SHA1 82c8c6728472330e1866bd7ae2b8c819f37fe055
SHA256 a9e60401cfcd3634f82ad96cb703fdab82719886216e4e831b363a401f747dcb
SHA512 ce44e95041fdedd9d375bf70fbc2dfbc4cdca205440bd1e1f3fa873d891e4486f56047a2eec597f63b83c7fa0dfd47e8a2ca99eacdfd82494f8d7d7d91400ce7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8639827639832ac2_0

MD5 ace777c1315322a2de8300585f168ed4
SHA1 cf3683ed42353141c0e0110759fb8a015947f462
SHA256 92b266c39ebf9ca0853cdf1ccdaa5d74f39b69e77db12e1b3261c7802376fe31
SHA512 85a1f55ce789601eac2826bed7947997cda97b3ae11afc61ee9920cbf3912bf434c311dfdd250026812e663af04a96c23284e3474dbedc1b6db9fc07dec65461

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 52bd937da4427f48dfd1daf410868482
SHA1 ef7d1e0581a29224d1ad02ad97d7fb765d89afc4
SHA256 9b35b03739ee0f7fbed2f1ad794025f2b86f509e90e96d2252c8dd35aa3b3b0d
SHA512 3679861b652eb0ed5c21de881d4f62ceb5b3b9294dafade8806285f22c0e03f8144a03d79aa769754043f8436ac7afcd7cf9187efc9c25705fbda07e680a73f4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 54681ba2c6575e16bc14f8bc52da5345
SHA1 5d7a148b6d46c8ddb8f08ee03ba62504c245db1f
SHA256 5c4bc49cfcbb43e7ba8a2f5fd3c5bcd98d8fb89426423224a5f4c3e696ab26d0
SHA512 9269a80a5107b67ccd1898c3db281aaed3e80017984aa9412962cc99226b4f7494a5f88dd3936de72299f24dc18b91f6cb8c3e11fb67a04ea33a34fea2787da4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 52fcb2b1dd8470819cfb446569c9eab7
SHA1 52d6e81856d2a334a258711170136e7e6284062c
SHA256 1b67771db28bfd649f6f370d55c78f98025cb6e290fc15c78c36ae07b3057830
SHA512 07eaa7e2f76cd9a1c555c8b42eec7019923c1182dc457ae00051c7e0751b596a84cc2a98f7c5e262c1371e0b12f83649d8b303ae0480b5eebbc0f1f46e7857da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 45364bc60770e895ecacdd179b3306b3
SHA1 ae0329139711d6014edd05a6bb1359cd9b435aef
SHA256 2b1b12e9bdc43553cf4ce4eeadb9a390d710ff13dd77f2b90d3f9a2a3c95451a
SHA512 5481aaa06e19e39391c2c97e02291a91337c74d17cdefb7153aea3c9a84b00885b06bf56930eeecc199bcd9e9ff6ff83e3c93ee225073d492a3a015ab3bafe8c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 24413fe53338bcf21aef314d645d6f73
SHA1 3630e30aa0e61efff6c1b22832d81a57660150e2
SHA256 5ff2de2fd0dee4d8ec4227cab8c9724712a2de36251790af48afde4bf1bcb2d1
SHA512 9b1f866fadb048e27ca365883b4e4cdcb46714b0e91851197c351b721f4f560a707168031c2c3336efd3e000cbf6b1f98186c668242663c3c43078d55e598127

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 515af92933b1f04ab7b99745443a7c0a
SHA1 570bf54d487adbb244d39d6d5437abc091816a3d
SHA256 49e2596a5dc5635b59e5b04e8e2c6ae53843c0d052a87727af35491df1fea3db
SHA512 aad41409414d290362ce248f2ca7cb440f37a3c165b91acf713191216059571f03c67f3844a092cceba80cf6f4bff25c974076619898c949983a7e8079c93d77

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 85fdb0357f47aa9bcb6cd3c12ff46de8
SHA1 55399ce0560c765a580769fee352f8fb73ae28dd
SHA256 09f908be43254b92eb6191409766e8e5c8cf264821a2f244c88912c4d5ce3180
SHA512 a1cbe1f091f3db4b44a706261dab9cd97ba5cb1b2524de7a36b4a1df46628040ab80a4cc2ac0114b42826634bf2f69c4f6323c520a430def91962334fce51808

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a89121467335e58fa9b131bba89f0fd4
SHA1 c6e986fdca574f51c48719c57c3b49d29b3545e0
SHA256 d96ad0250d3fa7366997f4307a0d3c0717085b0b80926309499cb7ddaa038451
SHA512 d924297ef5e2b8a872ae83c654de970023d06b6e2e8c2ea1517b454cc039bfbcf1c80edc617b830218b97cee1190d73488aac88550b2dceec01e96b590b54a9f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 676da6227e033ac41bac1f377801bd9c
SHA1 2a79ab95b2137400f43e4d1edccc8b9824f1975f
SHA256 fd5884d98bcf5355838b4691b68a2435516fa5143df528ed824df6c7eab44108
SHA512 af9fd53d6fd7d364480262f968bade3c3b6823bfee4e5ac8c7b4df503922342981489ec3bd06c747ce5858e858cebfafedc55a20fb90724513f885a8ac29b794

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dd422309b2f8aea8063b727832bb5284
SHA1 94792295d86668308ac8e3d6731c2ac704bbf781
SHA256 704e998852674aafcc6ab944caffc4f6d5f89cb099baf83f77795a5829002978
SHA512 fe42947be44c6f72b8023ff8594c48d90662a4ff73ddd20ae02ce267da900f7cccd678ef0a9a1019d5fa303549bac4a630d77f5d444b46545703f55101b4651d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 00e03a9183c450358c807c8b6310293a
SHA1 77b7f6f5e5d94fdc49d0e5e63a7269777be83cf7
SHA256 ab0fd83bed32102fa2ddf202c6ee718be82f10d495a3ec8363c7567b8daf6ae6
SHA512 0ac6d97de442f0cdf2af0a98ce0571daa217d5d49509841750454fbe067a5b1e7f2dfec27f2328655a702ebc2091beb78c65d318f6309bfd94d36aeb932506e8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 8b850a717827813d4c4b16cb29d77deb
SHA1 30f8773d4896d3fd81b3291c814523da37d410a6
SHA256 b8dbbcefaa7a65ebd42e44e79a2780a74595c40b81c0cc780379740eb6205298
SHA512 034cd29a2f2925d3f85c163b15c1353f4e4b908026399bc2be0a2325f8bc05772ad93ce0b79a68aa67d83269afc85026e35d5fd6cd4706d7766672a160c8131e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 49a79fb68e5c160fd08aad07c125e8da
SHA1 64193342def945436a05bef21f61e8a984444e99
SHA256 7aba5d4ec11bb3e55574478d173e1eccc3cbe253815ddaa426d4b4f1ba88b085
SHA512 a1ae5c2365fd232a79f8f833faaa9aa7894ad5be1d96b8532d0dfa9365c0c46618137b0c914116d7c6ebc306b5a9169a7bd11118e68dc8297e624652cbf28f91

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a9391d005e5a0575999c6d9413618b74
SHA1 c816eb65a3d051e977451e2bf4cfef638c3d381b
SHA256 935736fff07217fb628019044c5a0d5fa01c1fc3329e0596e35389793b6971f3
SHA512 06fa1c4d2869c94e2af776ddd99f8889848e697528cba21bb466c019170c80148756cfbc05c6913b5f186d341767cf296e421c88e0f2d5edb82491a2affa0217

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a7697566f4849be691d189b97ca40b41
SHA1 b7163ffc22be510f13c6fdb33014402d50cb0222
SHA256 5a0c545cdcdc445c64ea8bce05037fa5ab51908a6b671c187c92c3354d4b0d16
SHA512 115a964af1bcec7c42f95b6462608790f2b73e311121a162b6b6ad3b1cefaac930628e09b5a2b2b0be6b30be36ff3fe3c0fb6f7311bf537243b13049eb4f9c1f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

MD5 e68dc41937e75b392b26998acb2d09be
SHA1 b3ffd33f790eb21b8bae1c6c8f93c85765fc4e91
SHA256 e4b53b7fdd39514df81e6bb419cb980f00cbb8c95cd421f17cb702faf18af513
SHA512 68eb5da95eca580e9d3040ea91717300e810e26cfed80f0765c2edc2e983d102671c358792c72c680f9a621304cfa542bb116cac9f6f1dc2fa28e39201210425

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

MD5 a1d9428879a7aaefb214e7f5dcc707c6
SHA1 9223cf3d285f0e612e81da3f0a53c98ec3abc7d6
SHA256 dd9a76fa10002fbce9288c8fe3ea9f399f22312828e0d7518f951136db93f10d
SHA512 677e4d3ff3c3eb194eda739a23f6131d9b612f34e608a19839dd5bba983748f93c8174bb1159b498b914ecff0f5cd366520d38929178ac9e7e4326c7ff60a7bd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 cdb71facf82ea0602e963e96cfd752f1
SHA1 ccef38fcdf471263f923aae31d4f622ba04bcf49
SHA256 8b24b24f2d1ac793c0bc36e538abc75427d6380c920ccb8b16f99ec916dc609f
SHA512 f4540009d889584c2102fa760294da03a00d5e0c133c9d9819d8aac8a9a4cc6bbafca7d47428487369d2f042bcb1382fd97b81dc93a75130c5f1ebc0f97bcc9e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9032c5309234697e5c98d788b404ab73
SHA1 fee159473653608c896c2227a16f4a4e73fd95e9
SHA256 36d76de1fb600cebaefb29e1460d9e6b76f66929a5ffd457b20b73efa39dc2d1
SHA512 6bb99066f57d65c338485fe494859194b41bbc4e2eaa43d02e1b60871dc54073d3d8717354ddb33a5937a83d342f541bc6b8adb7b7e143fbc097c883d285b45c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b9ab9417b2d2abe11dd3d618357cbf82
SHA1 7db98934181060abaad91134423bb44d9e79054e
SHA256 34a0d3e0ac940e86bf6aab2c107326a3b590c37af264db26f7efd91873fdd3ae
SHA512 8f54db5836fa2a9c9adb27b82bc3a8080b41caedea479f710a710f9d2ec58e63b5816a5c1a2f674ca7825b5c63cddef5964f1a285a83e8acc0e9ce1886cce7c8

memory/5800-4135-0x000001B0F2D90000-0x000001B0F3851000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 904b3c0af5f229baf8503a121ef9bf28
SHA1 deb071a6a1e5bdb65fc618fb0a1c2fca9c0fa627
SHA256 f409aedf2991595dbae5a85b7e3be8062a1b7b963fe2fecdf65649480ee4d5ee
SHA512 6db6ec4ac1fafde02f20752629754ebf8cd1be45766471166987f85253aaf11511fddd3a579e9da8272ff64307f55503574e6d5b47ec3b384a155d05deb0ab03

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a0d6f7309d5eb89f1e1fe7144971307d
SHA1 d7bf0cbd4fe7e04889a8b4244f48f3ce15d9cf22
SHA256 f5d1f3963f7409b50033f11065af487356281e799a18bf92debf567bf3d6e598
SHA512 969f662333eccdeb55436e2c621b75da2316de810d9107f8618b0196b07a9b275e716d43a78b40f7f5d3305f04c7c17540f13982a493ce5c05a0669774fee5c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d1fc07a42386fbfa_0

MD5 8f5f3061632b2f29d46c193036a6eeb2
SHA1 b473000fa03db16a0962f111ebd7240827fb9714
SHA256 2d2d3d91dcff5ee13956113fe30504ca53b205af28e84023100d46b32076c28c
SHA512 5d57eed83d6ee785c1f9378b9f0e29a57e5b44f2982e1dcff49b5794c0287ef125a99df7498d06fbb20e43d798b299a8465d57569dcc7658d5eb159ed4f8d85c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1d0c123db21433ce_0

MD5 59aedbe25a29b34a4a4312ba6736b03e
SHA1 02fe214b8847864effebea73bfcfc137f38888eb
SHA256 c20bd0a5475f6e50cf02fb709ee75851ec8f1e3d4fb3da3b9f43fa96cc943679
SHA512 53546257eb0b34bc8f107420bf3d2abb3a2f0d29c4b4110072b23ce607397e1be04aaefd1435aa64913f0265bfdf71e0cbb9947a44b1eb34c73934f71f9e36c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1caca2b0f6fb3989b7cef30d01f0784f
SHA1 7b3776ca7d6cb5c3498621513adfff8179ab8d25
SHA256 43a2b6131986832d000670e6658fb7d3e38da69ab2b82399dd018645ca10964a
SHA512 e494ede41c5e9d048455aa114eb85178d4da241f0326f660e35ace4616e48dc59bdf3dde01330868f09ea9ff7e8168ee0b6d9a21cc59458deda2158fa35d3d6d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f3f6a5ba72e134c22293d9a1330b0552
SHA1 930b2e2a83378e4bb5125abcc04c517b00811f2b
SHA256 b9b5e9c0ccdcf941039ce0953562b11ee98afb54143bc384cb83b2abbf6fcaa7
SHA512 4473c7a6c7e2a73526c7251c21e130a7f817d169f4968b18c4934977007f3ab419053855bb4d6dc7bf7b434c3ffc7866b126a224c339d1e71f445ba294c5eb5f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4be5b1e27a36d18d55268b8e445871f7
SHA1 c4dd8a16bdc2adf73655d03080cfa8012b7ee663
SHA256 d121fd052cc3b4aca5b498fc38db0b57762e4dea238dca3b25a3290c9658256b
SHA512 c1c212a69ddb3176388dc486b6b32a02b6cff9979e2d9958100bcd85a37037e23689022a021fe628de20cc951ddbe7b3eb7144274b0cd1ecb5095ae03082334b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 871b52501aada09660f0eeabd2099b26
SHA1 39647c6d39bdfefac64512f27059ae82b23f01df
SHA256 39d68be09ac056da42ab2f57f5f34863ed898527f3422dba6a04ac27a6fe705c
SHA512 d1ddab7992cc18431fd0ba9c9035403ff809c3e1ec6f3a00314e2d70a4b12943c4291b638e9d8cca08e72c2876c52c1af4ac6db159fd019d152cb1ca62692b9e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 48e9b3678fc799224bf7df2856104313
SHA1 f10af3b9d96068a45b26341172473997adfc6a82
SHA256 fcd4583aec3c99c6fb685c05fa3d712243e780b1dff6a5f581ec6d6c255e495b
SHA512 52791bcc9397b0500d2bdc35908e396798f0f02e73e9decb34052438f1fd70651a5cf57ca62518811b4e37c4481e38424e155191c2c3c3bc5d915ad66d5f6319

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fd7f8552dd4e59a7dc0e1563b7ba1fe7
SHA1 55d4ce1a1d9f50e9780b30aad318d1a5db7e8262
SHA256 b20026285282e71dd4f155e103ac180358b50cd92f0ccb46c3e7cc6e4ca20d03
SHA512 d104343cc99b40196c0740f6a543805dcccbd1e13353503f3510d40b93047091327b91b28d09997c92496fd4f3a17679d57df013213268c4e659686798072967

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e9464a742e92b8b0edf9f6a7a0074c1d
SHA1 7b4a60fe4465d3e4b9d93329b1512f1f07661fe7
SHA256 cd896283b84f9e0eed0a93473c6385f2f27bb5c7e62eecd8c7e17ad70e774daf
SHA512 001b70944b65c6976b0e16da04c7965c1db13014a5a4691e892f6d392a5501d214ff2c5b5a153c13d25792d2f368d970d3fb727e3d976254d040ef44a425c17a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 73a183dc4c12682af11736ca32a8d8c7
SHA1 e5393cb318bdf6fc426d980a15e9a48ded1982b3
SHA256 037e87b6b1fce494ef851a9e0a4a046848a17f19c3a97fc08c20fc488712d8fc
SHA512 5bf25c873071c8093a590253e70c9d8bb5ed84e3b47136288147be70bf1339bd6f6bf3f1c1647cd31d9e5c905dcc331e8f43d104117211d31411853ba5f2c607

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 372985e02a4ff9c037d37c77fb0ca80e
SHA1 6e519d4c7b71b65ea61e0ba73dbc195d3bc129c0
SHA256 0fea7b63f07d4a273f3733494c15b7627847774615de7293ea3d05928aafebd2
SHA512 29e068077b784efd3d31707edd7d3c557bdb87f3a82232ef72ed1a39bac534f99bb174f173f136c7e9eb8887bb2e7db69e3ec17338b473192c83860f5b5c746b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 af6f9e89613c8f097595a28cf6bc9b34
SHA1 6c45ccce362bf11459f6e8830cb85059c0cc56a2
SHA256 adb58635d2f4366409bc2b922b89435813f63cb89a08b512f42dd2793e6d4853
SHA512 83d8cd24c71af9ababc1f11b398f3ad2d1433ff99c149f637b9bb7adec2075324dc1fbe20525dd942cff0df71d98bbd9d2af495659c65ec117440608591ad6c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a7cbc500b5ac51f6198c1d3641403c33
SHA1 fc22ce3642df1448889ef5b7fe295d2cac523f1b
SHA256 b2c74cb505c0286b1189caee4dac7aa8fb985308ced663c12d45f4c0f09010a8
SHA512 37de1f84a18c1a2d150947af4d1cd25a716bbccc941f6d85b8ad86fcb4ecb185c27189a4028e822f1b68747f7ccda4af36441247043a567eaa7110101c29d229

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f6e86d9e7b767ccac8b0de91e2870bab
SHA1 d8b2e64c71fd282646c60bfe58835bba8172cde4
SHA256 b4d4a12f9742ee7d38eb6cfd6ac09ead45f436f4575e4cc9997e41be277f79e7
SHA512 316e13e75ccc346c3dc4f7e0ae49638dd25bbc7d9b5774f785a7c9fe2ca69a6192589159533739acd9e60be20d24a6bae0ac6bdb26b8d12d196626ee5ef84cd0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3cf251f57c15e287716533f1067e3739
SHA1 b5fac876ab94a298bff88afa393173ae13c1386e
SHA256 f7083bd5ced6cc0fad92f625aa558bf25bbfa157a288b57b12759c8fa7eddbc1
SHA512 aeecba9ec8eeb15eb3d5c7a6c81f2ad60a090416c31eb125ae60be866cd580f7290d8fce4ad56cd41e44f38f805053ad29627f2816f501b4ad604e79fd835353

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 aced9ad79e506439714c9c1f399c5cbd
SHA1 148ede2210ee750f8ce2d06e669bdeb1a1fb41e1
SHA256 58987ae4cc51061e128b59e2084d8b367aa35a11ea7628080c2f42eb02e69f74
SHA512 1fe60ff2b27a5cfcab8c06ac003528a1d66a5c56a9182e98eca2ffa784e0c11491f42d89752df801194b584dc3625ba2df7cea7a10c48dfc318d1cda1a662ecd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 82d7c167e955bfbe08e0e54bc1ad2c92
SHA1 35c9b5ba13a7b929d200a815a6b98fc33a656785
SHA256 98182803652042e6cde48acfbaafce2c70867033d17c806a2746cc636a0ae52f
SHA512 cd5c4239fd392ceb3b00da0d19ed59887c1267b83e3aa3e99f4d4fb05809d5fee1fe55cf8c78bdc89a1923db23d96d6a04b745947e2d5e0058ffe1a85dde6288

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a83dd577e8aface11f68a8c03038fcd2
SHA1 bac35e3fd34e5e1fe787c973838241e81607a4d2
SHA256 2e02f6c3180e7bd559e6aa25e209c10ad36c9d42c852244312ddf33f9aeb3085
SHA512 61d9182371c8842748963a61cd01860e37072410c75da3f9da53b90b65bbeaca133c8769156dbf77e5479afe64f050d68af629cea32f810265a4009f6624026d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 347cb5622eff37e168f4d9f5774c316b
SHA1 01e4ee3ac129c41db70418a634bf19437bbc987f
SHA256 2adab292c35ec9022a66dcb5b494413226784d86dded45c3b450f407e29f4a94
SHA512 47d096ddf2ef9bafdb1ad1a32cd81008afdea81af7c8f9384be527838234af374074490abe3c43fbb15e4d143d5882875858d805171eed9802020f7d613c1162

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2ecdbcca7c7a3105aa028d4e53f2c04f
SHA1 dc88cc7981550b5182423791fc00bebf8ecb4364
SHA256 660faa05d717b77f5f2626da5b13f50764946f3da23d3b3f04d1fc5972095b47
SHA512 91de90245a8e21006795af3081c318c0cdf6aaa348463fb3ab459a29dc9dac5df392aae904a613e9840671d76d682a6683938b0265060733e76f5d9250c2394a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d6d9984ea6c66994753c3ff32113a7e8
SHA1 2a3fdc8c40fb676a19af19b1ef6af10108a37a22
SHA256 216f0df6f05f5eacdaf6194f59ed33a89a4ac3d84c4e6aada247b0aae6dc38fc
SHA512 907770af220cf29624f6b94ea9387cbb81c02b6b03a536df537b51d9ed2a8b23d63bc4058b0637560ea0ec15108fc9d1c634f1e4b79cfd247a9d5c0dde45398e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 cd789ba539445224344de80ff000d731
SHA1 c12242f4a86cfb1cc70d6dee68dca6edc91881a2
SHA256 70f517624c04aec487f5e0b56c3593d138bc443bb6765e21917f2bdeba8a08a7
SHA512 059fb77715219fd13324a50f6aa8c444af1e5dcd97c3696fad4955701523a0637b171445d30c79b4a547bc8eb3d5954b83faa90a2f09435e5ebbd4d7b1fc4c2e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 899f511e40f2abcb67bf8d2c768eb5e4
SHA1 45288df49f2221c0e7dd23dcbd1f613237602dab
SHA256 17f0568d75f8819b90dff008c1d72a24f0987031da8334814db78a87e1f9ab9e
SHA512 b696979b3bf8391e049979b76c74c9e099c4bff19ea10761e2205a07f5e3c715847e7adea360a37101cc95581926b479db508a4d88446cc9e31d1d171b248876

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 af8883eb6f553e1c34e29676aed7d9cd
SHA1 99051d0b6afb35c76b8649af89684bfff45cc52a
SHA256 54213a6523a005a288c053a427af603b619e78935f56cdfbc825898611c892ff
SHA512 a972e0484bf86f86feac70ba50443fd9aa914d8b7d990082ec93ab0179643dd2fbbf76fbbb7a2ef62a5bb75769af3c01759d09eaf14b23a9b7ba8b43c8220769

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 b85f383212335712457d7c4ebba38adf
SHA1 c0b27fdcb69d34bf07d9b8f506a9112c87b7379a
SHA256 3914829e101454db37858b06ed896cd04ba7f1a50c98080003ccda7f088d2956
SHA512 4e15a87d071bdad9ec74f46e8a612b3b6b6ead60229ba5465576e598f7389f0f8a2b0e401ffd84c4424dea1c05f733c8280ef03508c2b0e5ce9163e942c15476

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a784db6778015e502efdeee3211af394
SHA1 eb5fae63d0d2c804392e48e9a4b1ec591b2ad531
SHA256 aba183d7da33b6d86bef1f888a227cca77b3a8cfd4479a359d0b11718d7dd608
SHA512 dc7e54a8e5c89d2eb3d75a3a163fd2afcdba40e1ccfaf9d75b68d1e20c69dfce979bc0a9a30f1d348b4a9e7fd29fd096728a519d50857ccdb7af1518c62125f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a5b72bf7a6b17984fca9f9579b9e3aa1
SHA1 d548bda82ead036bd5e403759400d7f7dad2c12e
SHA256 9d61a56bfb2b405138d1d03591661a9135036347c61e655a5bc0168916bd1af9
SHA512 71e891a261574a724938753d5e232d190375de8fb72fd27b49a7a178e7e61ceb7ab351b76f9c4e448117d5cc7a8b264909ddf7da0c7a02075be413e98eff51ee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 beae964a3caa0ed8036f151fd91df455
SHA1 58ba9a5e92fefa708b30b1004fad9cbdb3789bfe
SHA256 88aa56baec6cc8473dd33035ccdf79acfb77159c2ef64b58a697fe3885c2f720
SHA512 6befac15e8e793e237567e5792986c983e6b655c046a84de82bbb2aab7b64ef0cceae32ea90d2ff0f21b89579f19e7461032c0364846b9ae5465b32e9f121db8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 096d7f9674166c8fac2b5f56a81532f6
SHA1 dd4d4eff0b7f8a6f8865348f78d5c4e0b684dafe
SHA256 a74760ebf67b0a1bc0d02ff34cbb0dcbb83490b812148fd1d3cf8b32b0d54fe7
SHA512 86f8974f24e940bdf19d5cc76707c760459f33d61b547686c6d7049602c764ec2cb09956551fb1724c3afc94fe899c3dba9fee09bf119ddde798dbfc75df8389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 13081ac6df033818a8ca5a016dd82d63
SHA1 98ab2df2ec2a67cea4da4f575aef9564541f8c40
SHA256 1a4712d910438dae8202e33f4a866746b35ede94ee1b580c05292ec639c953d5
SHA512 1c12c659be572371c51f611920f50a3b6f6c4e0df204532389b6ae62f17ca5e5998c46afde1d54aa629286f7a2edad7ee1b8ebff064c14645e8a632c675fff58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 fbcd60423ba37209509aa2f11e513ec1
SHA1 789406f21cb1e91c751457123a15df74d0a36005
SHA256 39a6831c07ff09a9cce548a2e77bbe34358664d46ed306fde35eed755bc3b0e2
SHA512 e6c3db7d07f9035f511bc6f5224d589d512faa54c92ea58e9a6bb45080382a0cc24f50ec5dbe1b8cfc0b746ef44073887e3150055a02adbd69c0044ae8b69385

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cae2ccad72dd7de2_0

MD5 48413190c8832d28d1e0eab01d3a02bf
SHA1 199c176fb1f7a000d98d9f2acc0bb1e53ad60b03
SHA256 8d1887d6029643ac6e3dd2f183e8ebab3fad1b65d8120957a39e9dfd0fa7fee4
SHA512 dbf733e396ce9f8e84e75d61974fbdbe27782cd8299e7261463fd5ea251aa12c455770662e80f81f95cdf03ef065c573caf0a2f7278ddfc7f097dcb265e70278

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\32d0e7ce0721af93_0

MD5 5951d32ff9477511a6553adcc37b0256
SHA1 bad28da9397b2e3515fe26b5743d4280755c7282
SHA256 f2a15fb1ea9653498b4c8f11732e2c0555873ab97120669a5f74dc341b4544ff
SHA512 d66f144c154944bb70dd45bd2c93178ed39690c2dd47ef560607f1aad28de358315386453da3a024407d450122656a813854390f0f5e54d2c8c341f383e7bac2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004f

MD5 c56f3ef6c995c4ee56637412da2d2b5e
SHA1 adb19deb59b1414b441782668b1cfed5aaf8b79b
SHA256 91fbf4db16e06f03aa69274beaa67eec5b664a4db4a7e60acfc8123edd595d1c
SHA512 a5693c4fe074d25ccb1a522f819fd734d547bfe8813ee705478c0326d9cc82046b8a3646be2848a68263f02b12eff8a82df9565ed8fb1f7ff7e6a5f3d8e0262f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000050

MD5 ce9c5514037ece9d05e7d1f39ec4dae5
SHA1 41cdcc5d6928bdb3dea59f24a93e6c9a5c281d35
SHA256 59113f210d047feaec3554d9e554a141f371ca5a8d2fc8e93b8b9ef7013f8c6a
SHA512 9aec016d6c0bfa3ce4c2ff84a576aacee1118a045e02e42e97dc1ec4eece48f940baa4d99cefb8a5f1d18ca32a4b328e1d6e7887ff4ac704cc157fbf1c7f546a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 5d3da825c5f342ba6a18ad3919d3dfad
SHA1 cfa1c5897b545012ef101757a73abc36ffd5b748
SHA256 7676931034af3bc4ce286d1926828b7146551f8dd12b0937fd608d11e51bc046
SHA512 b2767c6cc0cb17a0b57d16f4c126af2142eeecfe5229f8c6b33912945eeed26f61a93db274982d352643a81a6908e31be95b0909c9f591d82ee3e2ad1bab7a14

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 e60d4c7839920f5a416fa41d1dc0689f
SHA1 81688ea4486b1017c473ed2270f17695e1a13702
SHA256 a28ad47c6eb1c7784675451deb980ebc4d017d10fb264dd0905526efca864177
SHA512 46a356cc38d9a8d4d04edcf7f54e8bcd0cb964321fed66d0310a8b1aceaed43e34078f16836b0f877a96ff81d5d1e509146e34018d17cc79272586ac170d0e0f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 14a75454100e2f0778ac6a335f1eedc0
SHA1 64579bf23fe0c6550e03a218ab4e0a8519c881f1
SHA256 6379a301a61422d7504082fe7af839eef25569774b668a72b3ba852d267c5952
SHA512 51b3ba0c9b2bd121d550f00e14e7d57a87a3f9ee657e639bcc9bceaf95dffdaec2d80d226da44d7ad81e9aadb547a39cbc625b3aa80df6996d1a0559d757d496

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9d78ae0e5489e968_0

MD5 52e238c44f255b5d65876354d8ccc1d4
SHA1 9b627c4e4858223a798b68005144c57e6c8163bb
SHA256 a32a7f0ea864d13fbaee5747a0e522a33416e9e52fc31867727eadd6281b7682
SHA512 8c7a3d71af863776710bc45a973236c4412924bb8ee5cbce49bcae7bde36cae2c3a6e5d733f57e59654668450d06f76ecf2c9a3516fe255cc001dceee1395e22

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 0088f342be86732275a88d6229245075
SHA1 9b5ee0c53c4bbaf7d43b42d50529c1ef71a28a79
SHA256 725e6876c7ff91056b785a72ce82552c51dc08727849dab27b063acc2fd7a0dd
SHA512 14f1b8ddd9352f45c6fac3aafe6ab863c07f52cf63c4698b676aca10a7d2adf0cffbfd96cdd57ec78b56ca6abb5a75c1fcb3d0ae33711213bf01a2fd9cb305c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 edbd5629af55c3ae1c0dfc43a4b46938
SHA1 228abb7ca7c80972ad81fb19dffd30d6c0216d3b
SHA256 7f9886f325d921e63b7c859d92311d431d909166f6d189f4c51a72969764f400
SHA512 62737f5c50d98acf9a81181bb7ed74643c2dd613968cf8415e26133e5fae28562e4d2a78ba9663626c0c4d468672c2d3e0b36dc277979325d5487ab61899e728

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 82688e6a73f01c72f1cbf01a3502d1b5
SHA1 5c378b7f6eb1a540340cc9ae2be8ca68f0f6d45e
SHA256 e6de53106da9d0a2f887ee94b1cef160951fb733010477b03fe0d584efb7a61f
SHA512 f1bb1b74865e6002ceb684b1c6c66d2ea926b14ab2ca3335c315c9b88c3a354fe257acf6b1047f5804a51262389f977518afc33bad4b1b3dfc532e6fe3c62606

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 1eff1cdad9852a7d91603c71f68423a6
SHA1 e0cea675fd8b32950284b579c101887fbdf0607c
SHA256 f59da8a840ff44e86c2d2b4929ae0b8141e70e79c666de0ea6defc7a8a6684a9
SHA512 b9a6a946b7321c886b23c67dbe4fb968e45452d52fcf747ec57e7de7cd7cd0ad3e596d04339b7841513536400956b12d5a34d989da06a8356164986ce3c14555

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 eb75e127de79915cffc730ddb942ef59
SHA1 fb9368157b8cba57f945709970dcdff526f2bc5e
SHA256 6dbed5495da692b52fdd35318bcfef64cdc600b4da0c1084afa279924838a120
SHA512 c0f0aa7cecaafbd59bd0f64676ea2e45cc30dc79228e5761b499e18cd2ec759f9d81ee33106bdbefcf60a6b05d538c29f4972a1f36dfccef51ad9b715595b791

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9f8805664d086222188d25bfc80b95bd
SHA1 6163946c2d8b7e23e24252114279f28d7177d523
SHA256 5b25df2ab152ee9f8c63f0ce47d14858eb779f770aa745f8bc67a86f1ea560ee
SHA512 93e934927bc102256d91a2a16b7125b0e414db363c9333baa434cf86df0a3025beea0c60ad35610950672bcfe71d14765a4ddc997606f15da13ebf1ca77e6dbd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 13e44fd7362296f292e8226a32d225ab
SHA1 6154e0955c2c47ba7af5465075cf39504ff9e808
SHA256 0ebcb8ba47a91b47c2ca2cc37372dd9647db99cfb787c3cea88dc02007f752e6
SHA512 f6008c6d891fa6494340075d74bcd44aa4da3c75a2914c92909a1b9f802076482102441ff825e75e4061164e229efad08677d0e084d145e679cfea1d3ebb9ecc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 758342fd35c202130135e690380f14ec
SHA1 6bd238e3494834fe2ee4c0feef23c0ed2fce42d1
SHA256 65a575ad78e24af10e174b502c9e8d8a449e888cdaa7a69505b04f8c43260520
SHA512 c0c96a978ce711ea499c9061376a65df8d70473694247be0ace22fc67dbb3ce3c900053241462a43eb708bdeebafede1ef846738aab2242fa84acad91061d82b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 91bc7f8b56de00cd98bc2b7d28d429a1
SHA1 995ecba2379345a74578ec00c134f551be47443c
SHA256 3850de693d3ae0280deda6ff08e804cff842aea6c58866257afe504f8af59458
SHA512 afe95e6173246f39cd1385296fb2d28dd8b1fd9f0c1588a61c0bab7ff638a86d13276237968586c95ef68a30c0b25759546271c4186f9b46fca4b51e8018b4bb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c6a9f9e35efbe08990becf585fe27acb
SHA1 0910ed862c47c0ed3430f5ab441e7549aa468937
SHA256 9c97c51c242fecdc3bc3fde747a5465a444527e8514c11d82be03ec7a132dd86
SHA512 30f0504d641cf73879780c2e806214c13058b73d0e7ba6f92eb330c9efa83254cff4c41692fc2a8ed6b303ee3f450d76f9913ce46e19c78c581b6c7c28078258

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 379d676a2e407179628cd55e904a6ea7
SHA1 ea50dd05f6a073c707f02e0e01b79e9d1bef8487
SHA256 b48acf0653d5548a707840cb57e88e8ae58a7419870fca22fb1914ae626b2574
SHA512 a494ced89ba688144385b26372259846521d530cd211e4b7689bd1b4290a23dde8089a4ef0e2e7affecfdcc5f1ae7fe71e1cb27c9ab427c65116fd6bdadd9a04

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 268c78addc979fa670931c775d27c7ea
SHA1 0a3de6d6bb79f23ac62472a627daab473d251e4d
SHA256 53b5f98dde15a3b97b0afb6b0f5d94ad4295bacdc9a9662293ef0cffd9758d85
SHA512 bbd1091f3086394320a05f44da32140594482ebe4d9925d2ea79ed5aba5f77edc15101f4ccf0d707daaf39b93b9c289f496d7123a23a8a4881cc3d69ff76d976

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 027f32a7aa87272091a30565b46c66d2
SHA1 f9ef1ba1a8fce58b969c1a8a4725b8e5c8cfe5a8
SHA256 caa160291d168a7cdbedfa2b9cc7ee1d20927a91d69a9e0703056fa5c3e286fa
SHA512 120358517021ac578513b773b70cbc2290ea04c2e104807787503adc87c32e21fafe65b6b71c8bb84ee53063e9eff286760ef573811abb0b78d02917166d7f90

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005c

MD5 5bdee6550070cf472f4ff506d10c254f
SHA1 162f59621cd4571a2d6abe9b5ba2e96fac9386eb
SHA256 8b7b7011cd53fd498310c0f1df7c04cdea83fd99b35d9a39d5892e336c4a24e0
SHA512 14dc129c32f95ad2e6e99fba171172be252901c1798415607bc969357d46682360d4da955a0eeedec39eaba5f944559c6d5bdbbae4b7635d9fbdbe490f3efd86

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005b

MD5 29565adbd67fa87a7ad3c19eb5475bde
SHA1 1d92f4e63f0ef7cad96a94368b342aa93d27f0ab
SHA256 8be12f58eadb1b300a1e01075c05247f30227b9e7aea3c58d3846a6c3b8d82cf
SHA512 ae1af3ad85b7c8229966102fdf161298e327c1bd865d12262a84bf63c9684cb05ec2df3d23c3a90c7c6caf9522c6f0fbcc91da6df1679c1e11fdee79b2fb9aaf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005e

MD5 519531d094511f123dfded0e96b01f30
SHA1 a15a69312187afd2c00bdea2916f342f8ad0c0fb
SHA256 33d3e2fd5a67081797b8d9e2bdffe27db687e91408a4cdecf44f4e5c0e9e1205
SHA512 b42cdafec6b799787dabac4e63eac77f0da9e4a4d96e50cb1407b7df82ee66f734f695eaefc806c7f5bbe09a3194534b1ab928d4716b7cc0c5c1b515e12ab92f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005a

MD5 52b5f03271ca2ae156e7374ef2bafa2a
SHA1 7f0003c82a62403993d4c75e658e45693652f2da
SHA256 e3122af4c0aa2757faaf93637003ebff589aa5e2f8a6856904f66b5cdc4ec653
SHA512 66349e69501b6713e75c8c57efccca1918f3fa35d20c7fc03e0d074a2af2011174a227b9a99d7618e81a2db9d1175b14514fc1b9bcced666d43baf35dee7ca77

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005d

MD5 5926489d1883c12f959dbeed66d0e0c7
SHA1 2f5da09e0a692dd42984dbdd6690f17d0828fb68
SHA256 3582d4ea742010150e60da21fb18c5f643c21fb83fd68d1e66cc40bb17550fc4
SHA512 8490fd9625f698c23c150e1b3cbcdda1b0356e37912a462dfbaa6b863476b59027d782f883e5ea39367c04cb60e52feea8887be5965e478ffe72947e92bfe01c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000059

MD5 6ef95098ab3827f225c783b55097e3a9
SHA1 8e5c9e7afc9bdee13ea32f4ef885305b09e3e2dd
SHA256 6a61804b33ae13d7fd037ffbbdeb66fc360febf0a861262cf5fe7a22c3d4cd2e
SHA512 f5aa35e234b0cf28230029e88dd522715b5c51f42ef8398cfe783b82b7f3cdbcb3b5b35f3035b45919872a068695b63a3504cba3216b18a215902c3daa2d8830

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000058

MD5 3549ac702baf8cc4266324e726ef122e
SHA1 2031032d99f7c7b3a5c3239d28e376d53d10c964
SHA256 871590bc2af56cddcf4e80501e8c4d0ffef5ced17b6a8e8f8391c6bedaeecca7
SHA512 202e17ae87a609f56734a17947173bf4779b547b43874cf25ed1de54150f12a83335a7fbe9112f754a65af77797d155b1dba309fbfee055fc5e608bb30e2a395

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1dcf7cdabda806b8eb472162458218ae
SHA1 705cba8668b06e3906eabdc01ec222b8f622b059
SHA256 2feb8f65b41be714d18774f824a3d603480bef6007b0dd833dcb1e864e91c494
SHA512 c45da80c1d2217ca8450b8ed0a83787ce6f6cf5370d9023ede1df3655a32e94bc4d90afad656e08d3c9db4cc249d54b84dc7697e483ba8c5b6d9996582e1edad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 765a7cbf18042bda373b72e51c3c29f3
SHA1 7e191f8f96c5cc0373f2dd26a8fccd86ffc7f6a0
SHA256 9690e6085afe93af17d848b2e8b612fbdcc7e0407ca48c819e8391dd95e2d6e6
SHA512 4bd8f81c5bf2256e7334cdafcd1d1d38acceb8825e6c6c55a1410ec6e3cd84985fe89ef989ad1f58081009684f79f3ad6a7c9744d4a62d95f3257013d73db073

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4d98c19f08a4442f_0

MD5 350f934abc107f31b8a02df4c580e4a9
SHA1 203a880b9c5cb5850140f6b616bf66d86240803b
SHA256 1a2cadf81b5993462b25f92f81a1bc38532460379c9ba0e76701d1be36d20559
SHA512 61e35ded82b1f478f7f2ebf4e56b9317d3140886e0c3dee951ebcfc9b8e52fd7f8e04375b677aa204d9ec5c9347087464800232281fda367557cd9593f87c32b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e513c5a702e5aa5_0

MD5 cba47fb7219fcdb167c01ef349c02307
SHA1 2aed871883b8b8100fccce9d8b5f8adb764f63e9
SHA256 cf526adb65c08a6bbbdfd91f11a31048c93d17ab2e2106482cefb6a6224d5ab6
SHA512 3f108c0f1f6ceda5c36597f2fe91d9679ff4f3cfe9540b26f531e5b8a25db5f343661d113241237410ba3ec98f9bad304ece212686230149f52f805cb5196b79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cfb01ce53a6e8ca1961941baa403fdf0
SHA1 2be953b8fabbdb9a273451325855dbe8424ea350
SHA256 0f53a3a68cba4261ada89680e94c2a2543c18bb1025d8226fd5d3a6c699c354c
SHA512 ab177096ecc1c7648becf5df7750a24599d95ab4b3a110e5666a8e00d8aa8b4f10d83798820116687f0a508555dd18f7b525ca5a5ced26bb0f49c3f43b45efb7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 b70409a77a5c716820ae1496674efdf4
SHA1 95395ec3927a77fd38de3c294125e8bc8a6f764b
SHA256 d42182b5a3118e506045b67a373be6a8d0ab2c2f1d064a0f9dc63cdbb9951b73
SHA512 7647c67cd61e2770f484a05b7e6dc7c885959c9b9f407be75d9b946d0a98b891b3d9cc2a7436cd940a59925458dd1a167a9b85d2a731d409bf37562a7c2756a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d4eef0610a7400aca6af638375766820
SHA1 9064250bbb31ccce8d452fb2e21871792be17f3c
SHA256 1b32e3c1730844e0dd661ef68ae697985ada2cafd2969d9a071c6ab77a809a5f
SHA512 6f037c3f3e5bfb2e7249891968e516df365a3d862237fe9200e416ac997499f8a5ee1ff0f953649e7c84054185fb6b942f68c720e0cb04a75a14a3dc0d49ee23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c1861d869cc7a1d77936cf1ddb789fc3
SHA1 9ebfc0d5719074ea0c0425eabde74f8d66ab51af
SHA256 258a61fa21ae451dde70e9b789413afb1f725f114e780011d46192f366994ca8
SHA512 b49208ae000fafa66dbca92aba9f7cbcd15a031909044ca8da02742a0559a2f9d41582d034e8f811dc834de0f30e064695ca5ec869f3b4413263c4c55be809f4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9a7a2171e0af11afe27fc1a05af83e89
SHA1 5913e38cc4d6e32ee17f8ddf69ba2861c7ecd84a
SHA256 72768f7a9b55bb896074ce90256f635638e2ea1ebca761d2cc96c1fa215b008a
SHA512 d4628748efa85fed586e0258767f6bf4061ff229ef63a5d0459b85ce0b894b0183fedf777324dc425c0c90e3a14091fbee1c1ecb45e0d852182ca4fd72bc9b32

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6bfa16dd2193573ab4ea7f9da66e9c93
SHA1 571d8d5aad9694223be94e074cbfa40ab1f62a8f
SHA256 81f12a2c77b570873e43b4eabcd2d8ec64602fb5a9f6b1a7f723fc1288fdeea0
SHA512 72b9300a6fd29d92eab720b2024f3ec40af54b0c6d688f0c98a0b575ee1d6175f769822fc6d600c6861c3edcf953be5c40b64e0e8917c6aafe84ede5717c32d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fea4618b130f55598b6d24233e629674
SHA1 096834ac67bcb9adc6d38879c84fe2b3f5878af5
SHA256 0856a84f361c9e8f4871da86e2daf95daecdff36cdc1e57d82886b4f36c1d787
SHA512 c31153083a901fa3847e922bf58adaad7785cb0ccd571a82831e088de37dc318330c5aa21e0391dcb9ba59ce11eea85d0b63ef7bbf2451bb812aafdabcab4a27

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ced1d29458ff376de78ed86afe68ceba
SHA1 f47f6bc6b05ddb96b230e2078d7171d835782abe
SHA256 6a0e0468fc78c85735ab563fbdbf8f5bdce2dfb7dd5bc87a18d999eceb6726dd
SHA512 2c9c98411379058dabf6d8c9e61f1915cd79ffe1b94b5aaa25220b4ce6078230154e1c6e94bef5a216ef31b8f6ec3e6c20c56e819bcd5bbbf2262ac5062eee67

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0af7fbfd8cafd78d71aa6eb0816317a3
SHA1 d103adefbcd322b8a96684413f31b71013e616bd
SHA256 4894541aae5137dc8b8d008b5bdd6fbcf96eaff2b8c716f091535ad4e18b4c8c
SHA512 6f7f2279d6d8daac6e88151a22365b628f2aa7599d417d5cba3dbedce6401b00043c28ebeb237b0f60cdcc03049660ec04c649ea6ede13bc1a418bb9cb3f3726

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e5d0a9ef0b8eafccc3277d3e6ff5a291
SHA1 f4fab37ac50bfb9adbcdc5520396b8b018c578cd
SHA256 3ee3e98ca58f8c929701c4d3138ecded5916e935d33606a2bb6463b93630377f
SHA512 ff3f3aa1885464085b9f6ac270d0bc3d9f83d7f4170d4f38f56b98e1b751a5d6b23e2442fa0c72b73bec6c9d4870f86b3aa71e2e8de516d58ecd4a117b0d68e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 19ce19ae1f6cdbcb0d5133fdd6222957
SHA1 37a17a2e035806b83ecc2d9c311cef45bdeecdcd
SHA256 cbb2661d468e39623e90edcad3b10038b4c80c9f915dea406b55c632e89367d3
SHA512 267485240a0197218534cbac6a642417e1b9ae3864cc12534a789004fe852b9d4518fdaabde0d17443429d4e658641d25f57022286ceceb657a2cf3bf9087bf9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 0fdd04a112a7e217e824d7998b7f2305
SHA1 ffae40537884c3d3651defc853ea5de8e999770e
SHA256 5c1daae074446dd30a13bdbb32862c211b73b824326c6387c57c817754295ad1
SHA512 5e580f970a4bfe052d2781e3d2a0f42c53fffbb219df9cd59fc0b24bdfbbd00609a7992c4018adec5708bb589487207cea6a312fd5793b9ee20834653a98e5d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 236fe9ea5568a2a74e1862053cc6db24
SHA1 d32df38ca81c1599783000ac5ab1cec2640f5194
SHA256 0252a4a859b82b0571cf118efd1ac58c5aab771ee29fec61dc5317830d48d8e7
SHA512 ccac20cba65f6a58238bdb3aa6dad72372b9c4989827c73b555fc527d4acbd6fb5bd5d9ba827d46c58baa2dd6cc71dbee91910b0e8958507c5fb757c3bbbd667

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 47cf6c84852337cfd1ae4cab30d32c94
SHA1 10c3c204911357595439d97aaccef69ee9c291e5
SHA256 acd89bcb4d41144456530ea3398ae53fa153bfac0e070efbcf61c224b5b855f9
SHA512 f438686c1547dc5b566b0f039b13f06a00cb8775912c779cd1d84088e8fca7b10b7a473053bae22399e744a3011f8cf43003ee95df5a8920f542c7c3b26de3f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 0d1a5205c8faf521098eaf9d4a91cb1a
SHA1 14c094a2b76df1be8063cb4b034dd5662e3590f6
SHA256 6cb7caa6d296c400d5a6e800c267be185d687022acba2e7e1b0c51bba51bba1b
SHA512 6615478120928d52346f8c463d5507b520ce7af0f1efded3a0e33244904c65d429e9f01b6b76405f746c17fbffcc9cd98940d7c22ae5ce95a85fedafe6fb0923

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3d7b4766c8e169a6db9f7dd87d1b9149
SHA1 b5c25dc3175fe42fe5ff4525ec79cb3f76aabf75
SHA256 4c67c6590fef2a47038ac946b17d5955436962b8ab47d946280412ab2ba090b7
SHA512 5fe11fe86ce16234eaf758b1899db048faad66fdf8e89b3bd5d775c36f996b7f7326144d053354db5cd0d7caedc524e29364489bee3add4ba04b5ac13076852f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 376ca9980da93794fe55ff651c855d2a
SHA1 d81243a1d549d64679cc9d341044ba78e5830834
SHA256 6f764a359f8ae8d9bd4f444151e18b59e3a9c930e35dc702fb806e1c4b81eaf9
SHA512 1fef43a575bf24bfb501a27a5de631e7480bb9170ecb66517aa74edf4791ef72c3f437df36228e5474e00114f1c3be453502ad0ee7cba4da9bfbd9df0d435925