Malware Analysis Report

2025-03-15 04:09

Sample ID 240826-p5dnhsvbqb
Target https://www.nexusmods.com/gorillatag/mods/267?tab=files&file_id=93
Tags
defense_evasion discovery motw phishing
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

Threat Level: Shows suspicious behavior

The file https://www.nexusmods.com/gorillatag/mods/267?tab=files&file_id=93 was found to be: Shows suspicious behavior.

Malicious Activity Summary

defense_evasion discovery motw phishing

Executes dropped EXE

Mark of the Web detected: This indicates that the page was originally saved or cloned.

Subvert Trust Controls: Mark-of-the-Web Bypass

Browser Information Discovery

System Location Discovery: System Language Discovery

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of WriteProcessMemory

Suspicious use of FindShellTrayWindow

NTFS ADS

Suspicious behavior: EnumeratesProcesses

Suspicious use of SendNotifyMessage

Suspicious use of SetWindowsHookEx

Modifies registry class

Enumerates system info in registry

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-26 12:54

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-26 12:54

Reported

2024-08-26 13:07

Platform

win11-20240802-en

Max time kernel

750s

Max time network

739s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.nexusmods.com/gorillatag/mods/267?tab=files&file_id=93

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\winrar-x32-701.exe N/A
N/A N/A C:\Users\Admin\Downloads\winrar-x32-701.exe N/A

Mark of the Web detected: This indicates that the page was originally saved or cloned.

phishing motw
Description Indicator Process Target
N/A https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html N/A N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\winrar-x32-701.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Browser Information Discovery

discovery

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\winrar-x32-701.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\winrar-x32-701.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Version = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e8005398e082303024b98265d99428e115f0000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-242286936-336880687-2152680090-1000\{CFAF51CE-EDF5-4601-96D7-F97B1AE58597} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616193" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\KnownFolderDerivedFolderType = "{885A186E-A440-4ADA-812B-DB871B942259}" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \Registry\User\S-1-5-21-242286936-336880687-2152680090-1000_Classes\NotificationData C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = ffffffff C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 = 3a001f44471a0359723fa74489c55595fe6b30ee260001002600efbe10000000235c31fcede4da01d5ecd78ef2e4da014dc739ecb7f7da0114000000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616193" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616193" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-242286936-336880687-2152680090-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\SessionTicketAuth-267-1-0-3-1721937922.rar:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 311949.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\winrar-x32-701.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\a.htm:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 696 wrote to memory of 228 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 228 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 2180 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 2180 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 696 wrote to memory of 4788 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.nexusmods.com/gorillatag/mods/267?tab=files&file_id=93

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7fff0db83cb8,0x7fff0db83cc8,0x7fff0db83cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1900 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2644 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5604 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6188 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3432 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3352 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6764 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3440 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5948 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7016 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6872 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6792 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6752 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5100 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5284 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1660 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6024 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5524 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7076 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6196 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6588 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6972 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5860 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5724 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5648 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6516 /prefetch:8

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8016 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3516 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6832 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=6048 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7276 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6836 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3528 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4116 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5740 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6900 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7076 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6936 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2996 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6504 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8440 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8708 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8808 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8820 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9164 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9192 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8992 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8940 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6568 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8256 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9600 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8468 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3368 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7892 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8644 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8228 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8604 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9252 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9508 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9676 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9660 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9772 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9192 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9556 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5008 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9420 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9592 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8496 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8812 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10144 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10140 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7912 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=9964 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8264 /prefetch:8

C:\Users\Admin\Downloads\winrar-x32-701.exe

"C:\Users\Admin\Downloads\winrar-x32-701.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9188 /prefetch:1

C:\Users\Admin\Downloads\winrar-x32-701.exe

"C:\Users\Admin\Downloads\winrar-x32-701.exe"

C:\Windows\SysWOW64\werfault.exe

werfault.exe /h /shared Global\3842470383494d1087b5ee49b064be57 /t 5416 /p 1184

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7904 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7864 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1056 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5808 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004DC 0x00000000000004E0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9860 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5436 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4588 /prefetch:8

C:\Windows\SysWOW64\werfault.exe

werfault.exe /h /shared Global\0bdb77ee3c7c47e3931e55b0825b57b1 /t 2492 /p 5572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1888,17864748588794200912,3245100148950938282,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=3752 /prefetch:8

Network

Country Destination Domain Proto
US 8.8.8.8:53 www.nexusmods.com udp
US 172.64.145.202:443 www.nexusmods.com tcp
GB 92.123.143.201:80 apps.identrust.com tcp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 201.143.123.92.in-addr.arpa udp
US 8.8.8.8:53 z.moatads.com udp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 cdn.pbxai.com udp
US 8.8.8.8:53 use.fontawesome.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 34.107.217.107:443 aegis.anonymised.io tcp
GB 184.26.57.221:443 z.moatads.com tcp
GB 143.244.38.136:443 cdn.pbxai.com tcp
US 172.67.41.60:443 btloader.com tcp
US 104.21.27.152:443 use.fontawesome.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net tcp
US 172.67.25.151:443 boot.pbstck.com tcp
GB 18.244.179.121:443 cdn.privacy-mgmt.com tcp
US 104.18.8.9:443 code.highcharts.com tcp
US 8.8.8.8:53 60.41.67.172.in-addr.arpa udp
US 8.8.8.8:53 152.27.21.104.in-addr.arpa udp
US 8.8.8.8:53 14.25.17.104.in-addr.arpa udp
US 8.8.8.8:53 151.25.67.172.in-addr.arpa udp
US 8.8.8.8:53 121.179.244.18.in-addr.arpa udp
US 8.8.8.8:53 34.215.58.216.in-addr.arpa udp
US 8.8.8.8:53 107.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 131.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 9.8.18.104.in-addr.arpa udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 172.66.40.60:443 cdn.paddle.com tcp
GB 18.154.84.63:443 sb.scorecardresearch.com tcp
DE 91.228.74.244:443 secure.quantserve.com tcp
US 104.17.248.203:443 unpkg.com tcp
GB 79.127.237.132:443 kumo.network-n.com tcp
GB 13.224.245.89:443 static.hotjar.com tcp
GB 13.224.245.89:443 static.hotjar.com tcp
US 172.64.145.202:443 unleash-edge.nexusmods.com tcp
GB 18.245.143.110:443 public.profitwell.com tcp
GB 79.127.237.132:443 kumo.network-n.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
GB 18.245.253.22:443 script.hotjar.com tcp
GB 18.245.187.41:443 rules.quantcount.com tcp
US 8.8.8.8:53 22.253.245.18.in-addr.arpa udp
US 8.8.8.8:53 41.187.245.18.in-addr.arpa udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 172.67.21.232:443 u.kueezrtb.com tcp
GB 141.147.81.223:443 mb.moatads.com tcp
GB 18.244.179.121:443 cdn.privacy-mgmt.com tcp
GB 3.9.162.21:443 floor.pbxai.com tcp
US 34.107.217.107:443 aegis.anonymised.io udp
US 172.67.21.232:443 u.kueezrtb.com tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
US 151.101.65.229:443 cdn.jsdelivr.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 172.67.25.151:443 intake.pbstck.com tcp
US 172.67.25.151:443 intake.pbstck.com tcp
US 104.22.34.123:443 u.kueezrtb.com tcp
US 104.22.35.123:443 u.kueezrtb.com tcp
US 34.117.250.57:443 material.anonymised.io tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 34.107.217.107:443 aegis.anonymised.io tcp
US 34.117.250.57:443 material.anonymised.io udp
US 34.107.217.107:443 aegis.anonymised.io udp
US 8.8.8.8:53 123.35.22.104.in-addr.arpa udp
US 8.8.8.8:53 57.250.117.34.in-addr.arpa udp
US 130.211.23.194:443 api.btloader.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 159.65.216.227:443 sync.kueezrtb.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 ib.adnxs-simple.com udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 exchange.kueezrtb.com udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 tag.wknd.ai udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
GB 108.156.39.15:443 config.aps.amazon-adsystem.com tcp
IE 63.32.219.61:443 ap.lijit.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
US 34.120.63.153:443 prebid.media.net tcp
DE 3.121.186.27:443 btlr.sharethrough.com tcp
DE 3.121.186.27:443 btlr.sharethrough.com tcp
DE 3.121.186.27:443 btlr.sharethrough.com tcp
DE 3.121.186.27:443 btlr.sharethrough.com tcp
DE 3.121.186.27:443 btlr.sharethrough.com tcp
DE 3.121.186.27:443 btlr.sharethrough.com tcp
US 172.64.153.78:443 mp.4dex.io tcp
US 35.227.252.103:443 rtb.openx.net tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 104.26.9.169:443 script.4dex.io tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
US 34.120.253.250:443 tag.wknd.ai tcp
GB 108.138.217.66:443 hb.yellowblue.io tcp
GB 18.245.189.34:443 aax.amazon-adsystem.com tcp
GB 23.53.174.156:443 secure.cdn.fastclick.net tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
US 149.28.57.102:443 exchange.kueezrtb.com tcp
US 149.28.57.102:443 exchange.kueezrtb.com tcp
US 149.28.57.102:443 exchange.kueezrtb.com tcp
US 104.22.53.173:443 cdn.hadronid.net tcp
GB 18.245.143.100:443 tags.crwdcntrl.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
IE 63.32.219.61:443 ap.lijit.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 34.120.63.153:443 prebid.media.net tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
US 34.111.8.32:443 events.bouncex.net tcp
US 34.98.72.95:443 assets.bounceexchange.com tcp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 4.230.157.18.in-addr.arpa udp
US 8.8.8.8:53 156.174.53.23.in-addr.arpa udp
US 8.8.8.8:53 173.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 86.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 102.57.28.149.in-addr.arpa udp
US 8.8.8.8:53 100.143.245.18.in-addr.arpa udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 153.63.120.34.in-addr.arpa udp
US 8.8.8.8:53 8.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 61.219.32.63.in-addr.arpa udp
US 104.22.4.69:443 a.ad.gt tcp
US 34.98.72.95:443 assets.bounceexchange.com udp
US 104.22.4.69:443 a.ad.gt tcp
NL 185.89.210.180:443 ib.adnxs-simple.com tcp
US 104.18.22.145:443 cadmus.script.ac tcp
FR 142.250.179.65:443 9d82bef98ab2d500c543914758a51fb7.safeframe.googlesyndication.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 35.227.252.103:443 rtb.openx.net udp
US 34.120.63.153:443 prebid.media.net udp
US 130.211.23.194:443 api.btloader.com udp
FR 142.250.179.65:443 9d82bef98ab2d500c543914758a51fb7.safeframe.googlesyndication.com tcp
FR 142.250.179.97:443 ep2.adtrafficquality.google tcp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 172.64.149.180:443 js-sec.indexww.com tcp
US 34.120.133.55:443 api.rlcdn.com tcp
DE 162.19.138.116:443 id5-sync.com tcp
US 3.33.220.150:443 match.adsrvr.org tcp
GB 184.26.56.245:443 ads.pubmatic.com tcp
US 35.244.159.8:443 networkn-d.openx.net tcp
GB 184.25.193.73:443 eus.rubiconproject.com tcp
US 13.248.245.213:443 eb2.3lift.com tcp
DE 162.19.138.119:443 id5-sync.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 34.111.8.32:443 events.bouncex.net tcp
US 104.18.95.41:443 challenges.cloudflare.com tcp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 79.127.237.132:443 cdn.pbxai.com tcp
US 34.107.217.107:443 aegis.anonymised.io udp
US 34.107.217.107:443 aegis.anonymised.io udp
US 34.117.250.57:443 material.anonymised.io udp
US 159.223.96.127:443 sync.kueezrtb.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 35.227.252.103:443 rtb.openx.net udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 130.211.23.194:443 api.btloader.com udp
US 34.120.63.153:443 prebid.media.net udp
IE 52.49.138.93:443 ap.lijit.com tcp
US 34.120.253.250:443 tag.wknd.ai udp
US 34.111.8.32:443 events.bouncex.net tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 165.22.176.167:443 exchange.kueezrtb.com tcp
US 165.22.176.167:443 exchange.kueezrtb.com tcp
US 165.22.176.167:443 exchange.kueezrtb.com tcp
DE 54.93.228.39:443 btlr.sharethrough.com tcp
DE 54.93.228.39:443 btlr.sharethrough.com tcp
DE 54.93.228.39:443 btlr.sharethrough.com tcp
DE 54.93.228.39:443 btlr.sharethrough.com tcp
DE 54.93.228.39:443 btlr.sharethrough.com tcp
DE 54.93.228.39:443 btlr.sharethrough.com tcp
DE 91.228.74.159:443 pixel.quantcount.com tcp
DE 91.228.74.159:443 pixel.quantcount.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
DE 37.252.171.52:443 ib.adnxs-simple.com tcp
US 8.8.8.8:53 324645d3bf884739c098b1fe4fa4797c.safeframe.googlesyndication.com udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 159.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 52.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 167.176.22.165.in-addr.arpa udp
DE 162.19.138.116:443 id5-sync.com tcp
US 35.244.159.8:443 networkn-d.openx.net udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
DE 162.19.138.116:443 id5-sync.com tcp
DE 162.19.138.119:443 id5-sync.com tcp
US 34.111.8.32:443 events.bouncex.net udp
NL 185.229.191.156:443 supporter-files.nexus-cdn.com tcp
NL 185.229.191.156:443 supporter-files.nexus-cdn.com tcp
GB 92.123.142.105:443 www.bing.com tcp
GB 92.123.142.105:443 www.bing.com tcp
US 8.8.8.8:53 105.142.123.92.in-addr.arpa udp
GB 92.123.142.169:443 th.bing.com tcp
GB 92.123.142.169:443 th.bing.com tcp
GB 92.123.142.163:443 th.bing.com tcp
GB 92.123.142.163:443 th.bing.com tcp
US 13.107.21.200:443 bing.com tcp
GB 173.222.211.51:443 aefd.nelreports.net tcp
NL 20.190.160.17:443 login.microsoftonline.com tcp
US 8.8.8.8:53 17.160.190.20.in-addr.arpa udp
GB 173.222.211.51:443 aefd.nelreports.net udp
US 13.107.5.80:443 services.bingapis.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 151.101.1.91:443 winrar.en.softonic.com tcp
US 151.101.1.91:443 winrar.en.softonic.com tcp
US 8.8.8.8:53 sc.sftcdn.net udp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 www.clarity.ms udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 bat.bing.com udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 199.232.209.91:443 softonic.com tcp
US 199.232.209.91:443 softonic.com tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 151.101.65.91:443 di-images.sftcdn.net tcp
US 199.232.209.91:443 softonic.com tcp
US 150.171.28.10:443 bat.bing.com tcp
FR 142.250.179.68:443 www.google.com tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 13.107.246.64:443 www.clarity.ms tcp
GB 13.224.222.58:443 sdk.privacy-center.org tcp
US 151.101.65.91:443 di-images.sftcdn.net udp
US 151.101.1.91:443 di-images.sftcdn.net udp
GB 18.172.148.233:443 www.datadoghq-browser-agent.com tcp
FR 216.58.214.174:443 syndicatedsearch.goog tcp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp
US 8.8.8.8:53 68.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 58.222.224.13.in-addr.arpa udp
US 8.8.8.8:53 233.148.172.18.in-addr.arpa udp
US 8.8.8.8:53 174.214.58.216.in-addr.arpa udp
US 130.211.23.194:443 api.btloader.com udp
US 172.67.74.232:443 cdn.btmessage.com tcp
FR 216.58.213.91:443 storage.googleapis.com tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 51.8.64.151:443 h.clarity.ms tcp
GB 108.138.233.67:443 api.privacy-center.org tcp
FR 216.58.214.174:443 syndicatedsearch.goog udp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 brightcombid.marphezis.com udp
DE 162.19.138.116:443 id5-sync.com tcp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 34.120.63.153:443 prebid.media.net udp
NL 178.250.1.3:443 static.criteo.net tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 partner.googleadservices.com udp
US 8.8.8.8:53 cdn-ima.33across.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
NL 188.166.203.175:443 brightcombid.marphezis.com tcp
US 104.18.35.167:443 cdn-ima.33across.com tcp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
US 151.101.193.229:443 cdn.jsdelivr.net udp
FR 142.250.201.162:443 partner.googleadservices.com tcp
FR 172.217.20.162:443 googleads.g.doubleclick.net tcp
FR 172.217.20.162:443 googleads.g.doubleclick.net tcp
IE 54.75.251.201:443 id.crwdcntrl.net tcp
IE 52.18.140.32:443 ad.360yield.com tcp
IE 34.252.76.106:443 ap.lijit.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 178.63.241.79:443 shb.richaudience.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
DE 37.252.171.52:443 ib.adnxs.com tcp
FR 172.217.20.162:443 googleads.g.doubleclick.net tcp
US 151.101.65.91:443 en.softonic.com udp
US 216.239.34.36:443 region1.analytics.google.com tcp
BE 74.125.71.155:443 stats.g.doubleclick.net tcp
FR 142.250.201.163:443 www.google.co.uk tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
BE 74.125.71.155:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 162.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 32.140.18.52.in-addr.arpa udp
US 8.8.8.8:53 201.251.75.54.in-addr.arpa udp
US 8.8.8.8:53 120.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 106.76.252.34.in-addr.arpa udp
US 8.8.8.8:53 150.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 79.241.63.178.in-addr.arpa udp
US 8.8.8.8:53 163.201.250.142.in-addr.arpa udp
FR 142.250.179.78:443 ampcid.google.com tcp
US 35.244.193.51:443 lexicon.33across.com tcp
FR 142.250.201.163:443 www.google.co.uk udp
DE 157.90.0.38:443 s.richaudience.com tcp
DE 157.90.0.38:443 s.richaudience.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.179.68:443 www.google.com tcp
FR 142.250.179.68:443 www.google.com tcp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
GB 184.26.56.245:443 ads.pubmatic.com tcp
GB 184.25.192.27:443 contextual.media.net tcp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
DE 162.55.233.28:443 sync.richaudience.com tcp
US 151.101.1.108:443 acdn.adnxs.com tcp
DE 162.55.233.28:443 sync.richaudience.com tcp
US 8.8.8.8:53 27.192.25.184.in-addr.arpa udp
US 8.8.8.8:53 108.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 153.84.255.185.in-addr.arpa udp
GB 92.123.140.19:443 player.aniview.com tcp
DE 51.89.9.252:443 onetag-sys.com tcp
US 54.175.57.209:443 cs-server-s2s.yellowblue.io tcp
US 67.202.105.21:443 ssc-cms.33across.com tcp
FR 91.134.110.132:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 match.prod.bidr.io udp
US 3.33.220.150:443 match.adsrvr.org tcp
US 8.8.8.8:53 image8.pubmatic.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 tracker.open-adsyield.com udp
DE 51.89.9.252:443 onetag-sys.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 3.217.75.223:443 api-2-0.spot.im tcp
US 54.211.52.44:443 sync.srv.stackadapt.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 172.111.38.111:443 tracker.open-adsyield.com tcp
NL 185.89.211.84:443 secure.adnxs.com tcp
NL 185.89.211.84:443 secure.adnxs.com tcp
US 67.202.105.21:443 ssc-cms.33across.com tcp
IE 52.215.131.87:443 match.prod.bidr.io tcp
US 216.239.34.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 jadserve.postrelease.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 t.adx.opera.com udp
DE 51.89.9.252:443 onetag-sys.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 spl.zeotap.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 sync.aniview.com udp
US 216.200.232.249:443 sync.mathtag.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 172.240.45.78:443 sync.aniview.com tcp
IE 52.49.168.145:443 jadserve.postrelease.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 80.77.87.161:443 cs.admanmedia.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
US 104.22.50.98:443 spl.zeotap.com tcp
NL 154.57.158.116:443 ads.stickyadstv.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
FR 172.217.20.194:443 cm.g.doubleclick.net tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 21.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 84.211.89.185.in-addr.arpa udp
US 8.8.8.8:53 223.75.217.3.in-addr.arpa udp
US 8.8.8.8:53 44.52.211.54.in-addr.arpa udp
US 8.8.8.8:53 111.38.111.172.in-addr.arpa udp
US 8.8.8.8:53 87.131.215.52.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 145.168.49.52.in-addr.arpa udp
US 8.8.8.8:53 98.50.22.104.in-addr.arpa udp
US 8.8.8.8:53 116.158.57.154.in-addr.arpa udp
US 8.8.8.8:53 194.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 88.199.214.35.in-addr.arpa udp
US 8.8.8.8:53 161.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 78.45.240.172.in-addr.arpa udp
US 8.8.8.8:53 249.232.200.216.in-addr.arpa udp
US 35.244.174.68:443 id.rlcdn.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
FR 172.217.20.194:443 cm.g.doubleclick.net udp
US 192.132.33.68:443 bttrack.com tcp
US 192.132.33.68:443 bttrack.com tcp
NL 81.17.55.116:443 rtb-csync.smartadserver.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
GB 23.214.129.249:443 secure-assets.rubiconproject.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 52.46.143.56:443 s.amazon-adsystem.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
GB 184.25.193.73:443 eus.rubiconproject.com tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
DE 162.55.233.28:443 sync.richaudience.com tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 151.101.65.91:443 en.softonic.com udp
DE 157.240.27.27:443 connect.facebook.net tcp
FR 172.217.20.162:443 googleads.g.doubleclick.net udp
US 34.196.92.242:443 prod.us-east-1.cxm-bcn.publisher-services.amazon.dev tcp
IE 52.95.118.179:443 aax-eu.amazon-adsystem.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
NL 139.45.197.253:443 notix.io tcp
IE 13.74.129.1:443 c.clarity.ms tcp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
FR 142.250.179.97:443 ep2.adtrafficquality.google udp
US 13.107.21.237:443 c.bing.com tcp
DE 162.55.233.28:443 sync.richaudience.com tcp
US 67.202.105.21:443 ssc-cms.33across.com tcp
FR 91.134.110.132:443 ssbsync-global.smartadserver.com tcp
NL 185.89.211.84:443 secure.adnxs.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 52.215.131.87:443 match.prod.bidr.io tcp
US 54.211.52.44:443 sync.srv.stackadapt.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
NL 35.214.199.88:443 rtb.mfadsrvr.com udp
NL 89.207.16.204:443 equativ-match.dotomi.com tcp
DK 37.157.6.237:443 c1.adform.net tcp
NL 81.17.55.116:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 en.softonic.com udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 216.58.214.174:443 syndicatedsearch.goog udp
US 8.8.8.8:53 js.adscale.de udp
DE 162.19.138.116:443 lb.eu-1-id5-sync.com tcp
GB 18.245.143.108:443 js.adscale.de tcp
DE 37.252.171.52:443 ib.adnxs.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
US 35.244.193.51:443 lexicon.33across.com udp
US 8.8.8.8:53 ih.adscale.de udp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
DE 18.159.128.147:443 ih.adscale.de tcp
DE 157.90.33.121:443 uidsync.net tcp
DE 157.90.33.68:443 uidsync.net tcp
US 8.8.8.8:53 147.128.159.18.in-addr.arpa udp
US 8.8.8.8:53 121.33.90.157.in-addr.arpa udp
US 8.8.8.8:53 68.33.90.157.in-addr.arpa udp
NL 139.45.197.253:443 notix.io tcp
DE 157.90.33.68:443 uidsync.net tcp
US 199.232.198.133:443 gsf-fl.softonic.com tcp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
DE 162.55.233.28:443 sync.richaudience.com tcp
DE 162.55.233.28:443 sync.richaudience.com tcp
US 67.202.105.21:443 ssc-cms.33across.com tcp
FR 91.134.110.132:443 ssbsync-global.smartadserver.com tcp
NL 185.89.211.84:443 secure.adnxs.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 52.215.131.87:443 match.prod.bidr.io tcp
US 54.211.52.44:443 sync.srv.stackadapt.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 81.17.55.116:443 rtb-csync.smartadserver.com tcp
NL 81.17.55.116:443 rtb-csync.smartadserver.com tcp
NL 81.17.55.116:443 rtb-csync.smartadserver.com tcp
DE 18.195.234.25:443 match.sharethrough.com tcp
US 8.8.8.8:53 r.bing.com udp
GB 92.123.142.139:443 r.bing.com tcp
GB 92.123.142.152:443 r.bing.com tcp
GB 92.123.142.152:443 r.bing.com tcp
GB 92.123.142.139:443 r.bing.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
GB 18.244.179.74:443 cloudconvert.com tcp
GB 18.244.179.74:443 cloudconvert.com tcp
GB 18.154.84.103:443 api.cloudconvert.com tcp
US 8.8.8.8:53 74.179.244.18.in-addr.arpa udp
US 8.8.8.8:53 103.84.154.18.in-addr.arpa udp
GB 18.154.84.103:443 api.cloudconvert.com tcp
GB 18.154.84.103:443 api.cloudconvert.com tcp
GB 92.123.142.152:443 www.bing.com tcp
GB 92.123.142.139:443 www.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 104.22.56.144:443 cdn.freeconvert.com tcp
US 104.22.56.144:443 cdn.freeconvert.com tcp
US 8.8.8.8:53 eventexistence.com udp
US 8.8.8.8:53 s3.us-east-2.amazonaws.com udp
US 104.18.24.111:443 eventexistence.com tcp
US 104.18.24.111:443 eventexistence.com tcp
US 52.219.108.177:443 s3.us-east-2.amazonaws.com tcp
US 52.219.108.177:443 s3.us-east-2.amazonaws.com tcp
GB 18.245.253.3:443 static.adsafeprotected.com tcp
GB 18.245.253.3:443 static.adsafeprotected.com tcp
US 104.18.24.111:443 eventexistence.com tcp
US 8.8.8.8:53 3.253.245.18.in-addr.arpa udp
US 8.8.8.8:53 pbjs-stream.bydata.com udp
US 3.140.180.90:443 pbjs-stream.bydata.com tcp
US 3.140.180.90:443 pbjs-stream.bydata.com tcp
US 3.140.180.90:443 pbjs-stream.bydata.com tcp
GB 173.222.211.41:443 aefd.nelreports.net udp
US 104.22.57.144:443 api.freeconvert.com tcp
US 34.120.248.16:443 sdk.birdeatsbug.com tcp
US 34.120.248.16:443 sdk.birdeatsbug.com tcp
US 8.8.8.8:53 16.248.120.34.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 ea667b2dedf919487c556b97119cf88a
SHA1 0ee7b1da90be47cc31406f4dba755fd083a29762
SHA256 9e7e47ebf490ba409eab3be0314fa695bf28f4764f4875c7568a54337f2df70f
SHA512 832391afcac34fc6c949dee8120f2a5f83ca68c159ff707751d844b085c7496930f0c8fd8313fd8f10a5f5725138be651953934aa79b087ba3c6dd22eaa49c72

\??\pipe\LOCAL\crashpad_696_MYGEZWYOWEZUDQUH

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 2ee16858e751901224340cabb25e5704
SHA1 24e0d2d301f282fb8e492e9df0b36603b28477b2
SHA256 e9784fcff01f83f4925f23e3a24bce63314ea503c2091f7309c014895fead33c
SHA512 bd9994c2fb4bf097ce7ffea412a2bed97e3af386108ab6aab0df9472a92d4bd94489bb9c36750a92f9818fa3ea6d1756497f5364611e6ebd36de4cd14e9a0fba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 07dd6406cd05fe74af43db2870ddc5b1
SHA1 23c09dc8109c41d4542d915c898f6670adab8b48
SHA256 ff2f58d7f7e274be6616f6f5ecf2e8a17e868b3f8cf3ec3a60bd52943e28ce9f
SHA512 fa582d4114b072c588306f96f71186165b16a3e69d892cfa4d80a4db8dc6b40a553779c10998f5d881851c307711ec9da98362c44e1e6d7c26749066d0af9f31

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 bd3f7c1f631419b03f478858c8921e0e
SHA1 7ee568900d1cad415fff984a98360be39c9f0e82
SHA256 e97786aaa62c21b88b2cb5fa25aab941715d0022f526ad86980a9474f3768327
SHA512 b347ae4c141b1c6c55bb7a752a11af04115bf41005cbcbea74427139ee3e0f5015c00e6939f5fee3586f0c4016817a8cc9be3c01c2874e070e3ce656fa49e4c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 cc66ec511f4cf70cbd28c669ec6956a1
SHA1 c2854701e41ee91e96109e302313d0295a68dcb1
SHA256 e5e492e31875f8698931defddb6194c2c6311ae06ac2be349b39d81fc0bd4b87
SHA512 6fc90164042c2088d731b155bd3960a4108123c7ee0eea0c821ebb0b5266ef6911cbadf7bb9ada5d32a66ee36354555e8d74db63d608e5924bec2e3a2332b05a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 74cbd8ad52aebd3a9869cc550b8b7db9
SHA1 f21f5781076b204c8f0952a9aa10fe584f762117
SHA256 4c95d058db44d134e2a1eba89638c6fd0e157dfa92b20212e7a989b3389d2681
SHA512 da78838e7b5c606a750fc47eb6ad44af656737e78918d2b05cd3c946a3ab8c27820b5d239a8af18c5732ff8f41096b050b42aa456d635b1b2132b81cfdd750cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 74a432da183bb58b96df31ac242f93e4
SHA1 0862ee3f02327b82a99bb73297e00138bc8cdf3d
SHA256 8d446687f1b93bf4f0f18b71de10fb869402b0ef754a3c53ddaa3972ed2c414f
SHA512 b88b2163a0f65d958f7a05f52203e76180c8195cd4058f97696e908c2cd60ecb8e9cc17a237ffc9dc873673d845c1780b31ce78656acc568d0e339660113b387

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c92d852d47490ae0f973f1693b7b2adb
SHA1 9ddb55e0186d0818a85567f9bfc4354ee7956ec7
SHA256 caad7e75e76cf5292dd1763d3d8b2a870ee8df1e86e6bd5f12d8a22f72a888c1
SHA512 08d280f89db5e826a505a4ed871b3c27d8ac17d5db0dfd698078d443896d7fba693b295cbbafb92c06ee7a507e54e6b696bd64f1e80b03a50e771c95a1c0901a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe582313.TMP

MD5 ae7d0c74512dba39b537b41aeb89852f
SHA1 e8afb9cd09df31f8dc3b3693a73f2f2dd8d2cf05
SHA256 786f98f835990a03bb0f28f715b566ac3c9a237cebe9a51ef964bdf9d230da5e
SHA512 ee02e6df45ff7543eef6fdbddd9129fabfd6e5e5a8830d7484d533966e6079f537b5578f0b08da9173bd7485021c2d1b899ec1b33f0c2c2fb81796bbfea7baf7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

MD5 0728625a147ca79276a1790b9cf3175d
SHA1 60d4d776f49c7e1627a935314230dce18fb3b382
SHA256 a9a1ce7d77f651dd85dbbbda3c151024e47c5c85569801c994cca98c52e3da71
SHA512 647fa86e7a24bad9b8e4664dfdde280fb2df9c0b58cda936a1671d4bc3a4cc314f0ae231bd26fcacffad0a428b9891cd04df63c6631e2aa6d18d8cbde5b654b4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5a5886d8570ed559b4c4c1f496c3c7f7
SHA1 013a6303c594e08a3b47c91341ad1458a27c102b
SHA256 25d6ca0130730bb48796992853677099475622f011eb2d478cb1441abb22ec37
SHA512 d655fac33d97bfa7f92005ccb5786a54700337f741f4d2e67069e560c424f95b91af81903afc83f725c9fa1abd3bd43cd241401393f396da635088756051d517

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a4dc4f1b008bfb46752f6eff6e5e1c94
SHA1 fbeb0e041ddd806e0fb75fb72521a5bd994ac43c
SHA256 33c4702e4cde5a6ae6463557e43a429dbc4bebb61d2680fba7d7940116308866
SHA512 7235848c68075d4aed5f0b09083eab0402721b416b88882674c58c173d6b0b287967a425bbae6b1f5b41aedc4ec70599ad2cdf03984d7582068e886401d0ee0c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 03751a37046f6120a6b2560c2c453b3e
SHA1 b3a72d4c2ce960393cf7cfa30ddacf007dbdbc48
SHA256 ad8358632735c96c1eb3ebbdbf58b7d562c0c7b003abad8a72cdfaa50334dd95
SHA512 1dcd133c1c38a2eb33fa710de61023b577aca85dd1a8b18ee0e5b43588ce5034cc2f7bf38762488d0af2500b0e15e06c651cd03247cee348bb20bd19aab917ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 27d4261dbcee3f4b96cca4e4d5d00b51
SHA1 892e2e325fa51bef3cbc867320ffba8ef8654ee6
SHA256 bef1c424830203c1fbc0a8e8c2f1c7312f3486d0cba9c3e398b7c8fb3411e786
SHA512 c2bc18a30003d13b0684161296bf5ed4e18df12b1106919cf0d6c51b91e83176e9e4b9e6963b9ac3a240afe241f81dec02817659457e6f80c1c2ea12388b338d

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f27755e5fdce5e9a09be647e61bf0ba8
SHA1 aada1c15aee7f72b6fd38d1855a4fd00f3f841bb
SHA256 364f90632bf55f840cae208d227d801fa5bb7b49ca09e592e40755d7bdaa0395
SHA512 0f74efbed4394fe3db8bdcec34de31f7c2dedf6ed4058c0b6587d2121564ce87706db851d644315c8c6a50665875bd82c13e356742787962efdd6d0e76477981

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9acd7e67ea0ebe53b7dc60e1f62141b0
SHA1 36cd132f7d5e3dc09fafebb2f427422eaa9690f3
SHA256 c18dae4e74b05ed7e5ddcb76628a5b25a381588433d79cda0fd3c482b0e30686
SHA512 fce2464bee129cc4e77b94fe074eb24d7e1f5c59b2b815b840225ed949be853884e6d44f160568eea74a2bf121a59d80a8c17a432f09910a9587c85cb893d37c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e

MD5 6ea7ed51f32a6fcb55e87c98d7315c6c
SHA1 ddaa0ebd196676c251421d459ab3dad04e294454
SHA256 b7ba54178026892f60446a4881744d48390bbc3e2d21d5191f3debff7791bb05
SHA512 de410d4e6bc2414a633f5588aae19419b83912adf95b67de46b182b52496f38d51ca2385ee24cf30e9df7cf0cb62dddf7d2ee07b8dbf930b7313370dc5f72a6c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031

MD5 086d835140fcbe6cf0133e429e2c1c42
SHA1 90d9b03e5fe8f25f305a45300d5ec417eb953c8a
SHA256 ef7fff18c18c4bafdfb1235d9a2a9351ceb3b2572e84c40b5c4b58af6a574f79
SHA512 a517c0034ecd3cca10ae1d1df05dc70ee57735aac0adde8fbbfa28f862a33ec6bcfcf5a1916cbe15ee49d66eb43b1ab02426f41ca045315858ce9f46ac34ac9d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030

MD5 b1d8d7198303ae7b8b56c297eaeec7e7
SHA1 0e7ff2dfd877e28bc2b6e74c3f79b86c4cc4213a
SHA256 ea946c9c5d7110441b47ed7d2b01e3ff98c53454ec33e4a0bd07db07d177d1f3
SHA512 37d525c375443fa452c76931830a645bd8751ae299e504d384c203fa34932869535f226a3cf73dee058baa59196812581105c806eb4c85ccfafca9ec6c4bd5a1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

MD5 eff754a9f98704339b5f3a26e065becf
SHA1 0ff4859e992480138c0da63bf77d7b9b1d7454b3
SHA256 c2f80f1df8982872fc5a3a6787b0a1b186d25e05cd2431274c55df52af808114
SHA512 bab5f31c161f74fd27ff347d51bafd85f7ddc7e69ce818f9029925fc15b16868a975fa15dee7fe1936ad741f9e7d82840e6854b7deff4be7605c7ceebc475f73

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3806f2b8b814fcea4cceeab02ebeabc0
SHA1 124c9a37c0648e2e9a9bc1fc077a4f92e15779a7
SHA256 21b1ddf7dbf4757ce793bfec1c5a07e08067a32f7977dbbf13540c8bbeabf006
SHA512 e54088fd11a5806b2962bb50d0218f65eeebc38f5e4556819349d9e7e0ba254b54e3a33d4d20503bb9a8d0dc27692067fd63742997de6cbf9a84161287b23e64

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 0f7d8e2d6176e0e2fb2b28f5b4133824
SHA1 dc1dcdcdf765bade25beef1e731d7d37fb84c417
SHA256 0a2bec2a833e2dccb8e171393a805dfc85b58bcf71bbce489001fcfd394e5f8f
SHA512 976dd73711390d8f5ade21cecb18b3e9f180c0e1e500f938f703f1b6f1fb8efac8c6d55cd6cf6102c729a5d1f9c1fd93e3fd81780f98b11706f6f618f9241bbc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 91b85ccf177fd6fcb6d2a6f4ba368958
SHA1 e9a918326a4d28bb797a5b5f77f41869c90c1103
SHA256 c7311e5db20fb479bad9f9a24ffa6e56e020f816bb5e1d4cff5910420a141963
SHA512 ca6532fadd3e2225c1fb33b8764472e03c6f8ccba441b4a83e6e4c56d5007828b1c5b29c0d911825703c3673b10e2b43ca3b22dc7c102c885fcb17659b916364

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bbc48919ce07c48b_0

MD5 ce65a41d2dc9db03ab5e18b55d145ac6
SHA1 896b66c04a22957a84b3f4c8359452d2b38fd05a
SHA256 258896def70466805abc7a03374e8fbe36d7b2397d83fde49f01f87618479d86
SHA512 f4ec3f8a6591bca9cecaa55f1790bf1c89680d02ab27ca9f6c9b21a3aced9ef850d42482c279d95a9a0488b61b06e9ad74426cdfef507b03c5aca40eded9dea9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\443b104a57c2cc51_0

MD5 59aebc76e3cb12879b73bda1fd556268
SHA1 b9d353af84f09f4dbc0952d530c61f52c30cf613
SHA256 e9a060c47d8660941d0b058ee9cf624dc15e039e32f6c3032f0c21ea82dacb0b
SHA512 25051f676176842ac89d82690b54c7dd14482dbb8686010fbac3a9945b3b1bdc4debf41c98756eb5eaa70eb79b9de3553bfc562c71e45a32d1c1bc36f8a57a26

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3f2ba273b866031_0

MD5 3654330802e3ce2e0bfb505fb26fd759
SHA1 f9a4c49f8e1cfb66db9905603a14f5260b2bf72a
SHA256 7ecb75eb26bd2017f0e9040db3d9df3892863b1f2ae19991be3c3771b88a1d40
SHA512 d4fbc13f477951efeebc6af018ac3348826c52a00539e19c8a171f816bef2b2d1c70371f4ac90c02e904126616bbad653f401c0b2867b7aaae8d332bad7c95d3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\840c51af5f1e0e0c_0

MD5 4d61471320e723f4fc6dafd3ec03c86f
SHA1 80f6c4efe3be3b779b55e357750d1c51bc4f4c58
SHA256 06679539e153cf4b68b8d874ad972fc881fa21bd64b3efed17355e1033f64084
SHA512 ee9e015d886bfaf5a91c019921babee1be7f5f42eda4d1992c33aa895b3bc164b23470438b5236e58b3a72677afb87b115d4596543781492732b7d30b8dccf7b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8572b67ff0a3b542_0

MD5 30267ebd59e7461f435245ee1706972c
SHA1 1cdaaa59aa944e536ec92f9dbe491a6aae4aad00
SHA256 c683c75139b4d62ec034a35037ca05eda4deea47919973dcf7d327b8d3f3c060
SHA512 b8b9dcdd8b195066507b7ca546d3b107657ab18dce05b4be5a53d3cfaf9f68ba954036ea0aea53a80472fcc538ca6c815de7cb81cb522c21b2f0325d8c841380

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9cc608e9567fd5282c762495e2ea53c8
SHA1 54ebaed2c68f89b6eee1ec68e63be832a1c5c502
SHA256 d777d8b302246227480f02d2a657c27608ec5a90e927cd13e6989164b9739236
SHA512 01d2111e217480e8011bd6a41660377dd0e275b2fff581cf9926fb47c2519c23117aee9c6346f7efedd9ea0f2dfc98f1e387a8b8727a95363421a8ff7013f18f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 76329702442367e4e3d1aab0d08fc483
SHA1 579eb17b71c398af8a3cac81c9adaac712597194
SHA256 ab17d0e5c26743258dac786f45947ea8dbe1193698be231cb1053d84a671d667
SHA512 8f48af48e0038474f6c558ce25dfafdb3865f902ccb97f9ec595bb098f2c389328402829bf6c852deee223b57a2a09e308baa372c712c78907690a156d4cb1d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 602d382be0979530deecaece28dd3c17
SHA1 fd599712688c97ed33f298c247ff6f81b21d787f
SHA256 dc82bd212c4490b8434f2bf6c43da29f454b12832438316606a5f844f6237149
SHA512 e6828229d26168d25b9a9f3e05753e4a59fddc3d470a10744fa3a0d61d263fc7ca28ef1792d8d970677653ac7663113dc7f396066632d1bc22ccb4d5515b45eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ee8570af-6501-427c-88c7-2d15630fc823.tmp

MD5 b3b498e185659fbb6b19cbbda449126f
SHA1 699dc6cd4ba681fe92e3089e8f285769deb64c21
SHA256 ad3b3f3e40a353ff193299f8f47147de14584dc4bbb04326448b44390bd22d03
SHA512 93d7554bc3454410a24b6f7661146ccb2ac0e4b8da45ca4dd4034c96d7a548774b2b08d2d0f467d0d67ba1cd34a5cbb485b2cca63c95ec5f54a8a50eb8f0e803

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1c325c2bc22f373e_0

MD5 01f44a1c1fee348e599ed6e5bfa82b2e
SHA1 7c1add9e4a75286693fb7edad915bdc28d62ad70
SHA256 c8cf2096aafd5de8ed998d0a0d41de939f968ff26d8e0076af93012ff775953f
SHA512 7ddf75c52d26ea5abd1149144510d6cfd6e494bd8f2ae461a5d74eb7b3baf5d2317af66a4035204cbc820d73905f3e5eadbcb8ceb2f33d163948425f6a891aad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4177cf8bf5fa10c2_0

MD5 1a2c87c5838f30b0bc74c0313f9b134c
SHA1 cb2a577bf3afea8f23fef5329d331c787f5a29c7
SHA256 9dbb18a15cdcda66e26efbd3dc2b86caa2145da898d763cf85e968ba3268b37a
SHA512 72a740c7df74c9ec768616858bd7b17ab7e98a76ca5e39ad8369d8c7746b3e64db9c375d9a5410c3f12f8e7e1c9d1eae1ad5055dd0766f2a53f122d909b886ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4d0ba600fa5bd535_0

MD5 e30b13f67b963d4a882321acb6621947
SHA1 2994bbdae26d1fa0b32021c5ba7653afe729f6b7
SHA256 55cec42a12c1f1dafd9b680e53f8da5bff8be01dbce6841fa36b6904818cf17d
SHA512 28248530f2a8e3f17f433c60e9d858c0422cb677c4666ef88867c0e93b42bd5c3aa18ce925c0e7300f2fb2b62a7ee1a0910e8e8c30c05e07d9ddb74c8ce75697

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d9d42bb1b223ee9f_0

MD5 714b34a30085784805f52456f8920984
SHA1 79c4ad7b66182083167dd4c037477347134b67ce
SHA256 3f28d6cad484b38289928e5b495f76bcfc9d686e69c3b7a52646963c58baa81a
SHA512 519e950e75756685087d2b77432bfab4a0728ef9f779dfd9f93dd6a5ad03934d638c41de762824e1b4b39763e160a9dac7eda2280f797c92366b758e166a996a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 65a5e015f008e05ae6aa8b68a37beaea
SHA1 bc660cc3baa4c8e853c5cdb4322edb0820c9be41
SHA256 59dc5d367ce8a5a9ee169ff42ac9e39adcb034dc0c0c4d6469a18ff4e58c7300
SHA512 c29514c67e568335cdd52d2576fd282210e9a20d00faf46ea51c4b7978e74fe5d1e54ae4767f6cb2576f034bdc13bac6a9793da1bd5e64529c6b5a54c219db2b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 06becba6fd0f7f61aa853df85799212c
SHA1 5a02737dd976883b4d1865a2962b50edd84b3268
SHA256 04da14c5dcf40be8ecc3e4aa303416de69e40c4f31c42927af66653cadfbaf22
SHA512 67be49a6cc7dbed0c4b3308ee345f0ad924d89716eccd1b504eb2215247bfb967b90635316db65c84efb03dea8cc807b01d0ee637c082a79ceecb49907a8c8a1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 afebce5cdf868017374f2668c45e6089
SHA1 9eebe30c1f7bb840d257e4107935447968c6f597
SHA256 edca826aa4da6084f6124d6a0a79b5d995b0d56e77209e716c6a2cd76b8efbc7
SHA512 e7be14e0ff777c358d6a2a8a5a04acf418167c51dd00773c81b60b70c9e7046642ead8af56d6b5c6d66f9bdc0f11fad43156badd31667d05fcd5bf0d46125512

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 02b1e4c835f7b616e7354b326a693915
SHA1 3eb74b030cfb64cd4acf4acf3cac12e7f49c3cb3
SHA256 dad03f7ce408044c2a9ea5946da9197ff93b099609096cd5cfa7afed3a678771
SHA512 5200b4f513f7cea0021a8ce9cd1381b7afa97b7742f17f3aebc7f0445fc65f9d654cf1c6b328401e1867babbe8f6ba774f4de5b8784b236dbab71d8a9ea925ca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

MD5 291881d52877becd9060c2799d198c50
SHA1 8fac77d52deba4c57d9aca6d977fc5d94bd1902f
SHA256 acb1ea8ae92c6e49f6181a992801ed3a0f1b9b466a703654244f36c050a62256
SHA512 2feb0d062fd11845a31d4b933f397116e53f4441784d2026d038cc68a4b1b9f223af157a369a4237b9b8f8d74712ef353da66b7e7e6286f8d2cbf0b9ca4b9071

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

MD5 1ad2705352fd341271b61d78957b1926
SHA1 4104518f240c8c670e574e9d3b2993e7a377b97a
SHA256 b30052e4945364c474f951a1b4ec84ba211d6ae9b150d9b472aff93dd829449b
SHA512 fa0374a22ccb8cad6cc56fe7645d41435bfa5361cf2791002d237c4b30a7833f0ae024591e28ce2b48a5da9a81d1547dd223b2fcf3fbf896f4010b2f6f24462d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 1d123d593db0b4e96ac24898c9fd3db5
SHA1 21025503a9c3ae8f9e8d4463844f87dfb417bbf8
SHA256 df3b7026fe0d623361e10ea125cd9389b6b0a96f40527969b2805610b158b8ed
SHA512 f79102e61cff0c1592eba83903fe0a97207c6f7164319729c9750f6b98d79fea738c2fae03b745b76f05d80c64014a15b247e4653b01b9b989c2a7762cfdce1c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

MD5 a1d61af2da1219ada77ffddd89b009e0
SHA1 08b79f2e4968ecc4b41c5172cb99a0c935ed5405
SHA256 766c3383907e3b9d92d40c008f8f61f62f9dbf63369b093977cde5bb1a9588a6
SHA512 11246537f3a69994c219996951fb8b0b5bdfbe13bf10c56593020ddb30c4ba6c6fa2d592670363da4b6c51932a544897870f7dc107f1041777fc90072f66c2ab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

MD5 65d3f83d879428f73e751d9a36db6db1
SHA1 a19668aecd92ffeaec17643ae7d6140ad763351c
SHA256 8e802d53da4fd798ca61b4aefc77e20767bd4696e15312b0ac7229679292560c
SHA512 e2550db4a106da242ccfa4dd8346364d0223a6034d38232dd3b867c79e18620da631fb4ad0c90c42ba3e69c17b9256df8ed05646feccbaae2fbcdb9129884ae8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

MD5 a03c4ec96cae97f312bfae89e551904e
SHA1 905235d0125fa3f5e1b7be3dfbf4c960b4a36b83
SHA256 0231e73f578be7187623935c372fb96ecd235c917d4c794d37a5ceb40cbb4f2c
SHA512 0f134134a227118dd5efbd66d4a09a4081399760b0c6df13cd8d49379dcb0120f82a63675742f564f41a1b9221ea0fa0ba3a7164f7e5b92438f9c89a93a43f46

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022

MD5 b898e30714189441186bbf2c8f7911e0
SHA1 d6310a30fa0ce14ccc581ecc170c5a70267f2f91
SHA256 5a0a2725207317c5b5f78a6d0df739daabcb023ff5d9bde667dbdd70ad722061
SHA512 ec32483b96dfdab7595044870cf93a9a6d0225f7f58eb379e37f758cb3e0b0393225a8527a4080379e2da3c5b8f524e00469e1689e38f14315f437e7eff9aa32

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

MD5 5dc9316e07fbaabaa2978a88c031038f
SHA1 c410f6b109740fbf32072188101909a0ebf00e99
SHA256 5c12aa42dc20a41973da0aa2c4700b37b2251b9051ca273d355fa1e25050f770
SHA512 eb5e8c560f040a70a535f8e98ade1be7acd4ab43270c0f83c7ac6b4d395503fba025b250df902b9222cb43b9571b584b7ed11427c3a85cd74de9cd6354ddc529

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

MD5 29818a231b45f9d710e0e715ef8eead6
SHA1 be2749bafcf03d61510cf71a829c0e2a17358028
SHA256 eb691ece77ce67c71dcaa0b2f8ef6caff3ff5faea77a450103419e0f5a150d86
SHA512 6671b4b32c1dda1729919bfa0cc80734a7e4e152481780338d1765fe1962f780b076e55e1dcb22bbac9dfa2873a5544c51c2fd26f598f4cd2757bc16fac95f9b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

MD5 e753a343013b5987746c4a25565bcca4
SHA1 aa1f2f12a0c1cf89fe28f98b1af4f3092e803da0
SHA256 674bc9d4354e41c63797c2ea26cf0a0ec211ac73c274a70164a8f81d9c9f8c42
SHA512 74a60bd69d4fcf849bd2efa24b9d66e77e843d3d7b7f4201b31964f26d55de3067a72afe6f7676ad63c47163d2e9973387c76e7cd5d2a3c28a558664320d29c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024

MD5 1c32818efedc2862542f2c0544b95ea7
SHA1 13e29c5726c31287ffdd975f04393d482645e789
SHA256 7910bec153fafd3ceef48a31685130946173b917409a5388d93edc953a72e7e0
SHA512 1f8b3b431af7b7aedae7b4a649ec048aca1e6730aa9088bbf31921b58753e3937cc527ecb379048f645453137c0d2b09c4a9bd6117ac28ff310b4f370665a52f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

MD5 35fd3892aac38644a95f08bf22384587
SHA1 a5e27ce2ff9f27289ed3c709be8b9e83b86ea04d
SHA256 32bbe6140858cf0b27f591fb78794a8766976224344dd736b6598b3c638c44da
SHA512 f28fda891d182ec931ac9c5519dfbfe85b9681fbb389a42612f259f92cd6cc4ab96e950d35909bdbf7459ffaa8386299760df38b3e41c6f7deeb752cff4d9d38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028

MD5 c55dbb2a5e2048f8ac7b88cafbe13ab6
SHA1 6629572a0fd059184b4e5c57687fa414fa7283d3
SHA256 a82abfaf7dd683f673153324de1295a2a952e5b40fbbc581b5fc39603883f5cb
SHA512 61336d53f5f14636ad0552e92bafec6ab262faea08d28143dbe6f631bd6be86ed1b6b2dd5a2127cde53a1405ee4bc8384c3327521571917dc22c7fd553f108aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002c

MD5 6fb26b39d8dcf2f09ef8aebb8a5ffe23
SHA1 578cac24c947a6d24bc05a6aa305756dd70e9ac3
SHA256 774379647c0a6db04a0c2662be757a730c20f13b4c03fe0b12d43c0f09e7a059
SHA512 c40f4771c10add1b20efb81ee3b61fc5ede4701587f29a1c2cdde8b6faabd1c76d769bf8b99aa19082012f95d99ba448a472463fb9056acd2e43542e14e605cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 91fafe0a568193b186acb420fb882e98
SHA1 1997a68e2f3abfa6902af28b9eeb7a6d160ea65b
SHA256 e8dbeea530c5a3f901bf770bf63bbf2d8714cc5bff621ac1cf214dc4f241839d
SHA512 264c99b6d5f4e06bdfce21a23cfe605f5f4b92f3fd5045f2e396ab0603eba0a25f6dc0b44adfcfcf7a31561c4a07f16eed2be1b75da1bc49a42118df578fce7e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f9a03be4a423e8ba33f490c970d712a9
SHA1 d1ee001cc129f4c0a6d1fff2f3217254fc4cd455
SHA256 947b59958912c0eae9af30d0dab2a952f255113c538b6a8957328ce69a03907e
SHA512 852850b0f8ad440079f4dc1e4b797bb4d6821cb76a53d818983b6152cc783eb5d62b3d869f5bb014f0c31a5a7ba7986e9a1b073277387be5fc2fbf0870844659

C:\Users\Admin\Downloads\SessionTicketAuth-267-1-0-3-1721937922.rar

MD5 bc53620660cddd37a87fcf2e49fde9a8
SHA1 c4f4bbc936dcf91530f0aa9cccecaf5b13b1f1bc
SHA256 d4898dd6290a20e0c8e029b1c6c7ff1dc3b5e4eadcf24129bb0891b30cc589a8
SHA512 bc81594b0b0e2626f865169a85d50159b717e31d34f436c9011d4f4a28a5bba1b888ab55107632e9caa05bf79ef2cdfd06586e3a1ff758835d277049b6b34c21

C:\Users\Admin\Downloads\SessionTicketAuth-267-1-0-3-1721937922.rar:Zone.Identifier

MD5 57eec65e5ed362562fe71f4121839e4c
SHA1 0509072dadb53d066c86eb28184d931b1934dd66
SHA256 994699297f15bf0c1aa08f348e7b82b8051d196cd64d9cad41838ffb87ed1abf
SHA512 f5b4b48fa1433fd3dae2203a1600767deeedddb4c80e654aa54755f4210bb2e0ba23c04dce5a94ac1e52f8e20ad6e6439a7144b3a3f8943697b6fa0e78f95aa2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 332f4f3798c71dd727b68819b49cd3e7
SHA1 6fea57da3b0a8fe033bc322f933a683f74a58946
SHA256 3c513e52818278e305ad0413bf5e8b2946c8c8f1ff23d070a543a25122aeb5dc
SHA512 8ecc07727fd5afeda0ba2d8fe8afd4cfe20c827216f3050942c4ecafcdf3e6b4aca9bdd5e7f5b567b9d381b96a0f3d34a55470ce209eb5cceef979cea1c149af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4cc0394773521bfc8cb10ed191f15486
SHA1 5b7dca61559e763ec2500fd2ff634f05b530b6af
SHA256 2b44a815029f552dae0a2e437ac35225b9e5cb56350f672afa1d4bcecf26c7b0
SHA512 3ecf545c012d40d30559dca7e67587e591da18f06de19b835763eed843ae1583c028d76e17a4a10d877d9ddf84243ce6c82d13496fe44c2232149b64e443d77f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 cf8557ec6a30b43a67f30adebaaeda14
SHA1 3e81897fa190f87a431f4028a47d88a0c774f5c2
SHA256 5b6ff47599ec0b80d977d851429b853aa766bfee261bceaa83f7599e818afc46
SHA512 f7d716460bd8bc939cccdf0ac309de55af31f20bfae4a26fec97707e21d25e8b264113b197b1338d0c74e3caaf4bd4844fd52baf65574287087327c7e1c4de02

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0f33c3fa45c20d831713b13ecb776df3
SHA1 108b6bc2e08a3760f92a37eee6deb9f8659492fe
SHA256 5aaa16dbc1344a0125fdb21019ac947d8b5b27f3f9a8c7217e3243d223449de9
SHA512 a32f0177c90f89160aa00b78eecd1b3661f5cfdf59d708d3290ef6a890a797d040f5106a2f6b00e480edb1a8d3629d342086c25b499c1b958c4b60dd63d695df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4a3073024ec1ae4347ad191068e1a65b
SHA1 6c97ad5c1c99c025151b71a226a077b25cd3558b
SHA256 e48de7d46650e66df861a4ad1b8bce9dd4e44d7414d3ba4f882b3d27aed9edd8
SHA512 d4abde040079d5edd5b9d1b0d004283df650db59e7cacd02cee6adbe865709ce585928a8aaf3c59525c687a7e6b1664111e0c6de0e117d79dc361c3c5c1ffea2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 104203904c83fb636a2a1f5efdbbf879
SHA1 6ffbebf8731cfbed37048afb49f571f616a8185f
SHA256 cd0d5d410c578846933b5b8719b40e78f14f794eb91dba7d5ff348882c7f4399
SHA512 32d3c0140ec76f648004a31d8a68370dfe9e97be54eac58f5a83cd83f7634396fd33903c807754db45cd6853feb7c0d37202078ed869d65707e0a3cdcde84a56

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 d828dcd23f5b131f9a436042650cf26d
SHA1 7dabdf855b77821ac3ada53fa3a9ae7920e61e88
SHA256 bf2dade002872ac7848d55d85258fdff359078ba50d9362b105c67f4a1ddcf99
SHA512 1bab178ce602e4dc798034225e4dc00cdf314548042d18c5ae9b2463c42bc8b64de953f82d4d9a4d4d1a6ba784af581136140aaa155b5d1c796e0ccd39ed16e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000067

MD5 8eff0b8045fd1959e117f85654ae7770
SHA1 227fee13ceb7c410b5c0bb8000258b6643cb6255
SHA256 89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571
SHA512 2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0cd652b2598ea8009904f51443e29ca7
SHA1 b53e07156c57b73d72818abe816b18795b981838
SHA256 7846cc841363cb04dfbf5c179d7edcad9ba2a2f2fe6dbecaaf9385b3401b604c
SHA512 2c7a86f7f46065b9a39e4b3dab45b10de29186a443882af19a60fd282beb9fd89858d7e2182514818011594241dcf5038ea65d536e63ebb96cbc6415e5972e67

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 864723fa0a0e2575829198e0a30018e9
SHA1 3759640fc1238dcea121ced15f1f91e877179cbe
SHA256 e2e857ca0b7f2af068db9fd966e42b7fbf552b459c902e46afa2496c8ed6f8a1
SHA512 62a9f1dc3796f0c7d9e0c8855104056d9dbd288f35b99f2f8b44664fc7118b9c8f5047af298e1aef9afea5a6f8e59a6de1f67a3730f60e5b54351c9d89992ebc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000069

MD5 2257803a7e34c3abd90ec6d41fd76a5a
SHA1 f7a32e6635d8513f74bd225f55d867ea56ae4803
SHA256 af23860fb3a448f2cc6107680078402555a345eb45bc5efb750f541fe5d7c174
SHA512 e9f4dc90d0829885f08879e868aa62041150b500f62682fc108da258eee26ad9509dcbf6e8a55f2d0bdba7aa9118dd149a70a7d851820d4ea683db7808c48540

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 aac12ecaacd5fe56eb39e247be8c5b8f
SHA1 19fb7826ec2a69ca5fe88b4660f779bb03e68aad
SHA256 841d687d786065af7f1b48423aaa96d950f1701d6fcf674e1470690bc80dabb5
SHA512 fe7a3d05ad063821b83db59d0bf6a360294e328eef8c35efa1c46db195c659f4ebb00da9cb71a1434ac1010cf3387e9563e4e55fd627c50ed5b7cd72fdb46de5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000070

MD5 a6ad24daf242e845b5d55268bd5d1f9e
SHA1 dfd157ac56810ef2b816480bde8d5557665261e1
SHA256 8598c88986c155a9f89ba7a6a426f98fb2a8e6ec1cb3dd06ad75a33c7a9518e9
SHA512 c623261c1bea860b09efd48f0b623a39a18e483d6620c3ef03bf993467db0c3ce40905c568ac63be03162916f60a6e3447aa75aeaac1b97387d4cde29f463f57

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000063

MD5 e4cc1ece2f2425b10ae2ccc212c1dafc
SHA1 92609e6d0093693110baa23758382889bcb30da6
SHA256 92e9415d8bc8529e2a3f335258ef7ff159cce2965ce3b2b7c15f73720efee809
SHA512 2848dee3a6da891b7044518bc97aeafd340705cebe846350b9a7f314b52450f1eb977b8b492638965ce4674ebaa341e4f832438199c3cad2fb0a0793ef83a619

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000077

MD5 c83e4437a53d7f849f9d32df3d6b68f3
SHA1 fabea5ad92ed3e2431659b02e7624df30d0c6bbc
SHA256 d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb
SHA512 c2ca1630f7229dd2dec37e0722f769dd94fd115eefa8eeba40f9bb09e4fdab7cc7d15f3deea23f50911feae22bae96341a5baca20b59c7982caf7a91a51e152f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b8add9a755c292e44d2a527103dde207
SHA1 8d5d9e198d15a4c314843f16cc7b61f174acde2c
SHA256 a99f625a126e6b40f6ee5a8cae3408805bfb2d5268c3ecfffead66eb62ea9600
SHA512 4aa71c8bc7be13a0bc07d658f5c22f935eaeb2e462e886d27d49da17b4fd5c294aab9aa831540a404549c2bb92e60e696ba4f2c5068929ed664c477192426455

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d8630f7f5856f3e6e833eaddf79b66c9
SHA1 509906cdd4b682e56e762db221322953cd5458ec
SHA256 6151d6a37414aa5baea1c3221167511fdb8248570af92fd46d3a82ea8fbbb555
SHA512 0e4874451061eb5676a5c40d35ff62a8e2dfd3d2ebb259b3fdf83d1d1647a887ebbf56c2ae181be3492ae0c16dfa17ac784e7bbf38467c50771dc16d9368a197

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005a

MD5 67e30bbc30fa4e58ef6c33781b4e835c
SHA1 18125beb2b3f1a747f39ed999ff0edd5a52980ee
SHA256 1572e2beb45d2de9d63a7e7fe03c307d175b2b232bad2e763623dceb747729ba
SHA512 271d4a65d25b0a5d2ff2fe8f3925fc165d9b4345893abfd919061d78ffc5ffe8890ded35e41274ad8b860f06264b027cfea6030ec9411a4e03bc6d7cb4d4d228

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005b

MD5 b44ae10069bcc3f69241236bf77cf12a
SHA1 84460f394a5de239b92735cfa2295fa91317c071
SHA256 13a04a3904e9c14f5e191f247ebc229d2af511e3a036b79ce3ea5ba0bac3c84d
SHA512 61588590e2a1022bb8eb4830f8785ecdf9d2a3ae17007f2cf0460f1f46fc08ec579c682c08ff19c45d0caf0099ad520a110e2e1fd783fac4715b1af3b8ebffe0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004a

MD5 e43e0c9ff2b07162574e854adfefb8fc
SHA1 381a63702dc4ec38599fb3a02b139c0030dbda59
SHA256 ba6e069af8bdd8d032fb6a69a763677faa544d128f57ae990107c80b3294a63a
SHA512 7f76e6173c95ea4b793412c884d28af0627433e8e389fd7a4088b9bc37fdd4c7c07c15327eb669d1f8451ef10375f6e269fa42379035072d49f599814210d2f4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004b

MD5 cd483e835be8f1aa16f788c1cb760690
SHA1 374e1a22fe4829a2e540cc288217160d5cc65651
SHA256 0430d9d1f09f7d1f7a48f54deb4453c3f1e7a27ff6c1857d41fdd7a5489930e4
SHA512 3edb43907ad0cebb75e0eae64293b7277761122113a891570be9516c3ef77fee9287c25a3754245c2e7bcde92277fe1049324541e43defa79ef8074ca93c6f9f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000051

MD5 c0aa7b7fbefc2d316bc57b82c0d93301
SHA1 48a80ffe83032d9ea981b78683cfe581a6d0e0db
SHA256 437468dce0dae41920cac62400be197378b8bed9e30f62db4a18ddfb95bab497
SHA512 5f84926a3b420f00b80d4217c337a1d59e5fedb839aaf285ee89577596f2afc5f2811cbe4d3b9f9cca62c184749896245db2b2387e73101de55549f1c56c0cea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000049

MD5 79a4fb9106eff56777272a5662845d43
SHA1 a878f1dd33a153872dd36ba87ef2c77162a7dac9
SHA256 04eca9c418101afeef2cfb67bda5b1afee24bef7c50d0b8fb608387cb03a64ab
SHA512 f7ea777306eb70a943379b750cbd57cf2b9056b7096a5109207006b168d430f5e94a169be2e1e50f319077233f6c47eaaced4ac12ddb3afe95cdd55aa8efd9b5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004e

MD5 7651b1187bb58ac4c7be625337b35e5b
SHA1 307d969ef4137a66fe2793737dc1c546587c7f43
SHA256 0632850d01a46bc2f8c223155a4bf6c398b33596bb711e098440623f118c3968
SHA512 a81d2f768af155bdc642941404e7ddf95a2cea33c9374acb5fe32f6f5266e337fbef32f904551f61fcc9f9ab5a1c6a5ad130ab85b38bc2258e2f82c0ca1e9c7a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000050

MD5 54a72abe59fef9b7dae29e9c965c14c7
SHA1 8f09ba8b8643b4d6e29fc2f28ee19c8ed1cb45bc
SHA256 db830216078057dd4cd44bce201c69cb0d1eaa7e32803be70ba8f92d3ab9f9a5
SHA512 2a707b638f24974c0656491467039e5a48334a7d998d4ea2bd9f06f6701112e5d53fef22e99621d812e3cc85812606778da233d3394c729775bd84db0b57b8e7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000052

MD5 4e47ee50a5a3553dce45be9338908c8d
SHA1 3ec19371a119b9fb42405e7106dd96e173e7ce62
SHA256 4dc35e2e7e20824a00a7c04d113db55724a133c66749c3193dc846adbeb879aa
SHA512 ec5fb4513a3b1390c972faab08256ef709d0e9eb810c95f5b160b4c68b1fcfb818efe8aaf4b40e646a4dda25abe1a3ea2b0438747fc2796b1121af3d268c0b36

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000056

MD5 7dd17c7f6f9f3288cf44dba950e14015
SHA1 03f866cf3a59d57a9d0f98619ac38d52cc415c01
SHA256 fed74a9f2350b474d674e06422b402221d7d4c30b20ea28a55f2aeb644b15314
SHA512 b584cf0648ef2cd23e07d4d479860ba6bad31ee719a9eb4c47cd883848f554c7bf29ff7596646fe483d39b05147d2052536444a4c97131e4914ee2e3276bfa11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004c

MD5 3859fdcc9dfc8ee238149b68a1cb2f98
SHA1 4c78ac8554c35cdd4ec8a0318bde9bba8b670b67
SHA256 9a2ec9b64eee6bfdf104fe6b873c26c8ae22b90c9ef77ce61217030f16d81d31
SHA512 dc15c3e84175327f6e99ac1130927b0cd1f194e4759553151bb54b6f7b3256f35a690f8650a3d0806a34f3b4855b6936c3373180b9f9c838dac8c7fbfe6e681f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005f

MD5 482d8bffa58a2cd99643abc3bcb6bfaa
SHA1 f8b768fa91efcebfc3949f4ca8d57c4aa1747780
SHA256 2586c8e640ebb54768d9489f9466b7b0f1b08d64d1a165c5d369314ef82b70e6
SHA512 d358b45992aea5bc0ac3c9f457ff02fb54950b0782fd7a6311689ff110d34cd00cefba53d4d371251844f15d00418bb50880dce1dbf6d43cf18f9ae4107dff9d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000057

MD5 ffb79e734a2aac77f2005fea96fddf0d
SHA1 444dc7cac0c07503bacd9444819c7f9aa9849bdb
SHA256 a60b67333412b06ee34ecc48e7c072d49df1b3bab050d5217322e9dedc216d91
SHA512 c270e0488603003150f4ddc8a3be75028a9156a61923615e5af482f4a3e5bbbec2f2001de14dfe862abe8ed294f47c38e2845cbb89ee100c915aac908a8135d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005e

MD5 e2a5dd7d231fd3fc1150f01712cbd075
SHA1 f7e7cc3286fb546f4d98f00e66937a7576de5d52
SHA256 18db9b26eaf794ac5c7812de3e89156f3d789b99b59d6e2f75c127f4a37bf006
SHA512 c543a16e52ecd63a9a9f536412f38b2cf5ff44b7b0116cbe8b9b4490908cd95201ae4954730e05e2e09d7aa0d904b995b635a79d35520218667cabee5c103efb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000053

MD5 8c0fc2a8cbdf5aa41247d7eea196ec4c
SHA1 50d3a6444aaa4d1be4ce53f9751e67f7fbf601b7
SHA256 91bd5771843bec133c4f6a8b7b0b31951e7b666306c5ed1984e4c3ccbb0c88c8
SHA512 5c7d5c0c629db6129874945506904a3a4f8af94a2b316b8e054cce6f62a0c37ef7a1643b069c57e294df191a5140772bccf9904f55aeb71f4fdb30f0803e7836

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000059

MD5 79cf44db94eb465700d65a45a527b379
SHA1 a9ea6a3d2b3a3a61bf80caa643b077dc7fc10787
SHA256 78996e6ffff1656b85b4b50393b4a9f1133550694f87e66f9c2b937bc7dd2c4e
SHA512 7a2edf730c401e21b69b86528489adf587f4b830ceba0af2834bc7c69937e754c0a3e18ee9a174910391846a94394fc87bf927fb101fe899275bf072c804a519

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\000001.dbtmp

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00006a

MD5 c594a826934b9505d591d0f7a7df80b7
SHA1 c04b8637e686f71f3fc46a29a86346ba9b04ae18
SHA256 e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610
SHA512 04a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cf192564a35cc4e5_0

MD5 9c739c715ce54bab98091d936e1c3834
SHA1 d9ea299e1aac6761a75ab823bd16938566f199d9
SHA256 50b4256cdd76c355694bb9cf218ce259110fb4d4013042ba81c86154308b545b
SHA512 70fafa703cc8d807bbfe410e2b349082816dee06d7ee4300c4c789a5d099725b30fbcf60e2fd559b3c99e73b4789a5342317a2878dd80895cee16aa7ca521111

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\122d8bb54e8831a3_0

MD5 13c21a243886c6d699de5d6851f20ef1
SHA1 4ecf84d357efdd489cfb7642dfc023f57e0e357b
SHA256 d35d54f8a1223d4818b2161fc12c9ae670171f09c44ec70cfb4b5fec140c5498
SHA512 24a2b4c938d98324da2d23fc4852fb835c99eefad9067f41455c0d94a3a3f15390965bb816a7157773cdf6147268a3016ea807ec890821dec3971ef45ee835e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000068

MD5 9c6b5ce6b3452e98573e6409c34dd73c
SHA1 de607fadef62e36945a409a838eb8fc36d819b42
SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

C:\Users\Admin\Downloads\Unconfirmed 311949.crdownload

MD5 46bdb27bef607370423917d822645f8b
SHA1 4e1cff98a74a279f72c63d14144b64174d54a8a1
SHA256 ad50bd4a42ecaaa7731c91abcbb9aa87303c97398ee1ad86b9c81ab74b021db5
SHA512 bcbd93fe3b300bd53541df409252a23421e96a5b606d24a1b560eb6a38932f0c84cd97a3ef4e26608a4b77ee9c828e13fc131cb6770793de25aca9d53914a4a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2e047113c271d788365f51133bbcf898
SHA1 a67ef2f6889c5028c7f742320c6510056f72ee42
SHA256 f37639fe28a96cc53f4648eb0f30cf4da81fda911c8a06ccb208ae3d652619d0
SHA512 f977523b2aeba90fff317fc729739fbc76a81078a5c0c1921912ffc46571dce78691858d74e9909c64557fb2f5a51d0b892820b8de28fe013371308bd5be36da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 802218166dedbfd1d617348d7199b01a
SHA1 256d296638d23892102426ee7688e19434807f13
SHA256 056da35e18ed846f4baa85a9b879e06ea74e249502ef2de68c5f40fbbb2112d4
SHA512 4622eb87426dbaa1ff76d3e33d1236363cedeee4c58c56a334afa2467be285c31c36eaf57c45cd94ac9aa6e261a065b5cd0b67934a3fa3c74f877807c0f3108c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b927f36da7e2e21bbff525108ac9b326
SHA1 407c236bbad246451caf1a907cfeec40de6bf639
SHA256 21c74b63126df0b556060b0f577ea956bf49b06241903b214d1435336d6abada
SHA512 e1f39c2460fe91898d574762500e7508b538fbdc26374b693f5bade4b6d6a4b137843f40534865bcdded9fb2c319891d6bd7493defd955767b97058a7294b396

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 9aaf5a4a8d130037995d0a0459a8b0c0
SHA1 fabc8123484e17c960537a0c6ae765fe711401f6
SHA256 0a3747e1b1a09f3ed276d600c3b194a6c6129f664f802c297911a9ca5468f4e7
SHA512 47bad8eb2751aa168c4194d3531b3a2b4278a9d3eba028debdc1a34b39146095dde56754d0f1462e367d9e1592e26252f8485752607c7d8f1f2e7ac0e80b74ee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 95bbc0400727b05d3907e5cc9ee46cb2
SHA1 8cb7c085b48fcf43811fe827e7ac83d60a63e483
SHA256 f9fd1e6c7e2eaaaddb3552e958cf03ed5e17f9ba6f3457cd3f459c45988e66e7
SHA512 b2afa99fbd771d740873baac06d34c7bcefdae76eadcaa2f4893f9d5020ab3c3a21cf7d9ea1a56d3a2ef6f4fd32faf798df28db32f5a4cc9572cd5ae1f45b0a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

MD5 ed124bdf39bbd5902bd2529a0a4114ea
SHA1 b7dd9d364099ccd4e09fd45f4180d38df6590524
SHA256 48232550940208c572ebe487aa64ddee26e304ba3e310407e1fc31a5c9deed44
SHA512 c4d180292afa484ef9556d15db1d3850416a85ad581f6f4d5eb66654991fa90f414029b4ce13ed142271a585b46b3e53701735ee3e0f45a78b67baa9122ba532

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

MD5 60f8cd04587a51e31b51d1570d6f889a
SHA1 88574c41d0ab81721b275252464da5c7927a4835
SHA256 27cb4390e32a97375dd4987ae000406933bceba5199f17893711e782333b81cb
SHA512 84c12448ac55dd819749fef9be9919111a3df4bc51e66d2fa9f7376c11c101ed1349cb36aa119aa873cdd6c0c91027e201fbe23c2c83b89bc900a4d9077bcc52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000041

MD5 76a3f1e9a452564e0f8dce6c0ee111e8
SHA1 11c3d925cbc1a52d53584fd8606f8f713aa59114
SHA256 381396157ed5e8021dd8e660142b35eb71a63aecd33062a1103ce9c709c7632c
SHA512 a1156a907649d6f2c3f7256405d9d5c62a626b8d4cd717fa2f29d2fbe91092a2b3fdd0716f8f31e59708fe12274bc2dea6c9ae6a413ea290e70ddf921fe7f274

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000040

MD5 710d7637cc7e21b62fd3efe6aba1fd27
SHA1 8645d6b137064c7b38e10c736724e17787db6cf3
SHA256 c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b
SHA512 19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

MD5 b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1 386ba241790252df01a6a028b3238de2f995a559
SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000044

MD5 038c1f469deb6932520d09a340856ebc
SHA1 8b361a8c0489b69e9ef4e132e36f20c161c5ec1e
SHA256 5fafae77cfdc093baea4dd31485ced7dc4ab8e734311b3c2aaac1dc2ed95f451
SHA512 fc3123f11323a9f18f5e1bb31c61fa229e0de8b6d07bb01b220605cfd9ba499ed63e76be0b7146e096412cc94486bdba0ee102982b38b258958c6327fc6bb6c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fca49d68e2ed658f9c5f0052cbca48ea
SHA1 eab0b39ded12fe1bef84dda735460a40379d32d1
SHA256 f2e2e02ba22a08f27ba59888530bcd96dc078c4e0144d8d02fe29d7fd1ec4b33
SHA512 ffb9d0cb484cf54d705fac95680bc52bbe50956f26faa7fa3a54e868dabf83e7ba0980dde2204c868a7a6c3a81aa71dcae18d0d145f50d64c8796d1eac705a49

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 49e5552b177c227f94e67a0cbbfc3c4f
SHA1 723936f6d39ae967f616f373764e1827898253fc
SHA256 a525af4f9916e0dc9695f53844f528b2d1647aadfac07280742f408d9c693390
SHA512 d8e1f8c4e9a1a48e8fdfa2c361138a604f97d97f80a2429a923f25b3a9b3139f7d8698736e084223177f6f8e91264b29447baf0a5738ece0766056927fd4e9fb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 475a5ce93e8c7d5c4c477154de5f7fa5
SHA1 01405445a67d47d9abbc1c916c7469ef77bb580c
SHA256 b14a55a7bfedcdcf7dabf24205fbde95610bcb93c220c862825ea56b0be1bfa2
SHA512 ad624c8b7b568830f528883bd8441e21c6e706298012ecfbb0d2523f0062b81dcd0f3ba2393e5a99b38b6f685735a4c6b9d8e16b8e4515ca8da6b77ee93ee96c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 0d2283b0df70bc0217118f5c6d1fd836
SHA1 0aaa2e0daa0f0671fbf7817e222fcd777be523d0
SHA256 fb02c03e84b9a15ea357644f15643bc90eb9c6ef6532e1c82ecd052df34c2abb
SHA512 16071fce7468cc47fd7a57dc6913cbf41e142fd16b3f145dc30b13fb4a84a05fa3211d3b435ace7378c76682a1afc49e45d180eb88f6d32b0deaa2266196b2f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000045

MD5 d9b427d32109a7367b92e57dae471874
SHA1 ce04c8aeb6d89d0961f65b28a6f4a03381fc9c39
SHA256 9b02f8fe6810cacb76fbbcefdb708f590e22b1014dcae2732b43896a7ac060f3
SHA512 dcabc4223745b69039ea6a634b2c5922f0a603e5eeb339f42160adc41c33b74911bb5a3daa169cd01c197aeaca09c5e4a34e759b64f552d15f7a45816105fb07

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000047

MD5 b07f576446fc2d6b9923828d656cadff
SHA1 35b2a39b66c3de60e7ec273bdf5e71a7c1f4b103
SHA256 d261915939a3b9c6e9b877d3a71a3783ed5504d3492ef3f64e0cb508fee59496
SHA512 7358cbb9ddd472a97240bd43e9cc4f659ff0f24bf7c2b39c608f8d4832da001a95e21764160c8c66efd107c55ff1666a48ecc1ad4a0d72f995c0301325e1b1df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000048

MD5 f930621607e050dff86f94bbf4806b73
SHA1 d06bdf16d5794550b78713955629c465b6970676
SHA256 fe97ff9a43f7f196dcd9088da3818e6f80ecdc2ad8937a5bd4a52c8b3979a09e
SHA512 df4c634c95cbc63c44c0f884817333fdb3965d225fbcf008d134a12ea99d05965b043c4f74bbe57f8356fd7f698fde30fe34638387ffcb8ca1226fe7c8b00cb7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e826d6ee3eb04d43d2c6dca3be9723da
SHA1 9ed4dfd6978375e9aef60c3ff8fe601cb49a931b
SHA256 9e999effb324cc9efd8c3783b284e595468588209709026cd24c7fa166215704
SHA512 0a2c56473036471bea0372c7c3952ba9977fffc1bfe1ebcbce2129399d3265e9ecf15f7f421a8ca25a4dd1ab927ad5d779cce76b2049dc2b04a94ce50df73bf1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f23b528966c8e6171eabe03e54e03002
SHA1 e5e112b7423c378dcd1bceea8310af2a9bc4b051
SHA256 c66141edc94d6294d9daa5b4481241c1e60768a1951a54012d9707436875df11
SHA512 85f51c53aad9d3f849b8cf3797a9e1aaeb017049849dafc39443d6ffd2275f0186183b726c040bb92a7d4141597b37b8c99240fffe8b8216ea9361fbeaf64b81

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d2940bf950a986786023b24a005e0a8d
SHA1 c88246f912d71c518676833e70d6bc3807910712
SHA256 4bd3a71474af2604e6673c2e4cfb42ddd7002eb547dbd1aa1d312890ce1c52f3
SHA512 e12a4370c9dd0d9a3a1a249ab737a57d16239b00aa31784e1480cf50305af7564d5c5ca895cd23dde0bf5bf8f76dba0860d78404dd31c603009d98cc864f1171

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b95b0df19f7fdd6503a3da167f8e7a82
SHA1 fa3d855a9dae1d7f67200c57792cbf5bd93b7eb7
SHA256 5b8274dca5468856f20a20545dd8e94c08c63adff3b0b298543bde49b5e3e4d9
SHA512 700254d2d8942b8f726877a14c1f9f1ec5798e649f7312fc140843568922e8f10843bc129b56344bba9633b33799062cdd34a769a83453b8d2a763611e131167

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 db972aa2bd4c91ea93a3337257b0c52c
SHA1 e838e6b5dde5e502adb35a0489aba36381762713
SHA256 2117424155fd36adb534b874d95176c9b1b5ed4881b55fbe347e636a02b65aa5
SHA512 b9a861dc863bfa1b9e64e52e0b89468a5d3180831bffd5baacea367b2d330cf71eaf9021ed53621ddaa8fdfab6f55c00bbc7e018b8995b861e162605e5d3e85e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 06dc903ebcaee7daad3169facfe402e8
SHA1 89b6e3140fe43a6cf9156cc3dfcedbb7f71d2810
SHA256 48c9fdf1f2ae9a44fb0cedc42866563ab5c45f4623217b23247532308a183e47
SHA512 df79040da6d1dd421be1ad5ffd166122701aa4ee5b2635db2629eb2f64a59dada23b5663e53c98e2054323d7d5b4ca7145c72caa1a50ae58342b7424ef70755c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.freeconvert.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 4c99ec3a64e8fb1ddd3d3910a980cc4e
SHA1 a5c2f86b047daaecf4ca868c0b6299d76e5bb6f7
SHA256 166b6a80e7bdfbe2a3ea899978e6db1ba758b4773762912ef569c387a3477e9f
SHA512 36b2c871603b2ced0cecc37c336601657272c37210df4e9da65d8f4f3e317ada94a6008d84a0f3e1940182fc656ca2af729234c2d2621228a75f2ea21d569075

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9804f99e869cfab6d817420970560da3
SHA1 b792e74d21a666bd9e1bd3f2852f1ad2709a1413
SHA256 08d2d45d0552a2090e3ef99c8dbf09c322c539262a1495c00a5032df0e32122e
SHA512 97d506b298b6ac6a777e069e6445f5fffdfb9deac41281f51d56d3bf9040a42994fd209750e2e4aa551b23c0fb84225f32591ce92eaebe2832b154e1a2aae70f