Malware Analysis Report

2025-03-15 04:03

Sample ID 240826-wx6gwsyaqf
Target https://www.reddit.com/r/GenP/
Tags
defense_evasion discovery motw persistence phishing privilege_escalation spyware stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file https://www.reddit.com/r/GenP/ was found to be: Known bad.

Malicious Activity Summary

defense_evasion discovery motw persistence phishing privilege_escalation spyware stealer

Suspicious use of NtCreateUserProcessOtherParentProcess

Sets service image path in registry

Downloads MZ/PE file

Modifies RDP port number used by Windows

Drops file in Drivers directory

Event Triggered Execution: Component Object Model Hijacking

Loads dropped DLL

Executes dropped EXE

Reads user/profile data of web browsers

Checks BIOS information in registry

Impair Defenses: Safe Mode Boot

Mark of the Web detected: This indicates that the page was originally saved or cloned.

Checks installed software on the system

Enumerates connected drives

AutoIT Executable

Drops file in System32 directory

Subvert Trust Controls: Mark-of-the-Web Bypass

Drops file in Windows directory

Drops file in Program Files directory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Browser Information Discovery

Modifies data under HKEY_USERS

Checks SCSI registry key(s)

Modifies Internet Explorer settings

Modifies registry class

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Suspicious use of SendNotifyMessage

Enumerates system info in registry

Suspicious use of FindShellTrayWindow

Checks processor information in registry

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious behavior: GetForegroundWindowSpam

NTFS ADS

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: LoadsDriver

Modifies system certificate store

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-26 18:19

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-26 18:19

Reported

2024-08-26 18:30

Platform

win11-20240802-en

Max time kernel

680s

Max time network

681s

Command Line

C:\Windows\Explorer.EXE

Signatures

Suspicious use of NtCreateUserProcessOtherParentProcess

Description Indicator Process Target
PID 572 created 3300 N/A C:\Users\Admin\Downloads\MBSetup.exe C:\Windows\Explorer.EXE

Downloads MZ/PE file

Drops file in Drivers directory

Description Indicator Process Target
File created C:\Windows\system32\DRIVERS\mwac.sys C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File created C:\Windows\system32\DRIVERS\mbam.sys C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File created C:\Windows\SysWOW64\drivers\mbamtestfile.dat C:\Users\Admin\Downloads\MBSetup.exe N/A
File created C:\Windows\system32\drivers\mbae64.sys C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Windows\system32\DRIVERS\MbamElam.sys C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File created C:\Windows\system32\DRIVERS\farflt11.sys C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened for modification C:\Windows\system32\DRIVERS\MbamElam.sys C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File created C:\Windows\system32\DRIVERS\mbamswissarmy.sys C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File created C:\Windows\system32\DRIVERS\MbamChameleon.sys C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A

Modifies RDP port number used by Windows

Sets service image path in registry

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\MBAMSwissArmy\ImagePath = "\\SystemRoot\\System32\\Drivers\\mbamswissarmy.sys" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\mbamchameleon\ImagePath = "\\SystemRoot\\System32\\Drivers\\MbamChameleon.sys" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A

Checks BIOS information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosDate C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\AppData\Local\Temp\mwbC5D7.tmp\mb-support.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosDate C:\Users\Admin\AppData\Local\Temp\mwbC5D7.tmp\mb-support.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\updatrpkg\mbupdatrV5.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosDate C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\updatrpkg\mbupdatrV5.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\Downloads\MBSetup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosDate C:\Users\Admin\Downloads\MBSetup.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\MBSetup.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe N/A
N/A N/A C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe N/A
N/A N/A C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe N/A
N/A N/A C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe N/A
N/A N/A C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe N/A
N/A N/A C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe N/A
N/A N/A C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe N/A
N/A N/A C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe N/A
N/A N/A C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe N/A
N/A N/A C:\Users\Admin\Downloads\MB-SupportTool.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSA9C3.tmp\mbstub.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\mwbC5D7.tmp\mb-support.exe N/A
N/A N/A C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\updatrpkg\mbupdatrV5.exe N/A
N/A N/A C:\Users\Admin\Downloads\bitdefender_windows_d6cd4ccb-64c8-4083-8ccf-bb02a2d660c4.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RarSFX0\agent_launcher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RarSFX0\bddeploy.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\setuppackage.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
N/A N/A C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
N/A N/A C:\Program Files\Bitdefender Agent\redline\bdredline.exe N/A
N/A N/A C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
N/A N/A C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
N/A N/A C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
N/A N/A C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
N/A N/A C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
N/A N/A C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
N/A N/A C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
N/A N/A C:\Program Files\Bitdefender Agent\27.0.1.281\ProductAgentUI.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes_Assistant.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe N/A
N/A N/A C:\Windows\TEMP\bd_F83.tmp\ebjF84.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RarSFX0\installer.exe N/A
N/A N/A C:\Program Files\Bitdefender Agent\27.0.1.281\WatchDog.exe N/A
N/A N/A C:\Program Files\Common Files\Bitdefender\SetupInformation\CL-27-14811ECC-954E-452C-835C-6EB787CD05B5\Installer.exe N/A
N/A N/A C:\Users\Admin\Downloads\FRSTEnglish.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\NSudoLG.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\NSudoLG.exe N/A

Impair Defenses: Safe Mode Boot

defense_evasion
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\MBAMService C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\MBAMService\ = "Service" C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A

Reads user/profile data of web browsers

spyware stealer

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\B: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\H: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\P: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\S: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\T: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\P: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\V: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\G: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\R: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\E: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\U: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\U: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\W: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\Z: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\N: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\W: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\E: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\I: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\K: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\X: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\A: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\B: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\J: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\J: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\V: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\K: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\A: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\G: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\H: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\L: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\S: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\X: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\Z: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\L: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\Y: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\M: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\O: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\Y: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\M: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\N: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\O: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\Q: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened (read-only) \??\I: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\Q: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\R: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened (read-only) \??\T: C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A

Mark of the Web detected: This indicates that the page was originally saved or cloned.

phishing motw
Description Indicator Process Target
N/A https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html N/A N/A

AutoIT Executable

Description Indicator Process Target
N/A N/A N/A N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\38D10539991D1B84467F968981C3969D_C92678066E2B4B4986BC7641EEC08637 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netwmbclass.inf_amd64_1fab0fd8cb4d7dee\netwmbclass.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netmlx5.inf_amd64_7aeb3e6bfcb2f0f1\netmlx5.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\wceisvista.inf_amd64_3aa3e69e968123a7\wceisvista.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\net7400-x64-n650.inf_amd64_557ce3b37c3e0e3b\net7400-x64-n650.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netv1x64.inf_amd64_30040c3eb9d7ade4\netv1x64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netbxnd0a.inf_amd64_777881a2c4c0272c\netbxnd0a.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\usb4p2pnetadapter.inf_amd64_a9fd59ce64f17c8a\usb4p2pnetadapter.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\wnetvsc.inf_amd64_2518575b045d267b\wnetvsc.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netr28ux.inf_amd64_d5996f2a9d9aa9e3\netr28ux.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\kdnic.inf_amd64_49825a4c00258135\kdnic.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{a360c38f-e436-f147-a59c-a2b12f59ae45}\SET2E1B.tmp C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\drvstore.tmp C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netr28x.inf_amd64_5d63c7bcbf29107f\netr28x.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\net2ic68.inf_amd64_23084e964d79333d\net2ic68.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\229169D96B9C20761B929D428962A0A2_FC65190A8D1232A1711F16F9F20C5149 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\ndisimplatformmp.inf_amd64_206e9e544d84356f\ndisimplatformmp.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{a360c38f-e436-f147-a59c-a2b12f59ae45}\SET2E2B.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\DA3B6E45325D5FFF28CF6BAD6065C907_FBEAFB4EE7383EC8E0A3A2C1EC7FCEAC C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\nett4x64.inf_amd64_54eacac1858c78ab\nett4x64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_d2a498d51a4f7bec\rtcx21x64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\c_net.inf_amd64_cf2766005585f6cd\c_net.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netimm.inf_amd64_8b2087393aaef952\netimm.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\qcwlan64.inf_amd64_71c84e1405061462\qcwlan64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netl1c63x64.inf_amd64_4d6630ce07a4fb42\netl1c63x64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\rtwlanu_oldic.inf_amd64_1a82423cc076e882\rtwlanu_oldic.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\net9500-x64-n650f.inf_amd64_e92c5a65e41993f9\net9500-x64-n650f.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netbc63a.inf_amd64_7ba6c9cea77dd549\netbc63a.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netwtw04.inf_amd64_c8f5ae6576289a2d\netwtw04.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netrtwlane01.inf_amd64_b02695ef070d7a42\netrtwlane01.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\dc21x4vm.inf_amd64_d54f628acb9dea33\dc21x4vm.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netathr10x.inf_amd64_2691c4f95b80eb3b\netathr10x.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\mbtun.inf_amd64_add82795013a7c3b\mbtun.inf C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netwew00.inf_amd64_325c0bd6349ed81c\netwew00.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netrndis.inf_amd64_bccd4c0a924862b1\netrndis.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\b57nd60a.inf_amd64_77a731ab08be20a5\b57nd60a.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netr7364.inf_amd64_310ee0bc0af86ba3\netr7364.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\572BF21E454637C9F000BE1AF9B1E1A9 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\rtucx21x64.inf_amd64_d70642620058e2a4\rtucx21x64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netvwwanmp.inf_amd64_2299fee965b7e92c\netvwwanmp.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\athw8x.inf_amd64_55014eff4ceefbdf\athw8x.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\117308CCCD9C93758827D7CC85BB135E C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\net8192su64.inf_amd64_66c8bfc7a4b1feed\net8192su64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netathrx.inf_amd64_220db23f5419ea8d\netathrx.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netax88772.inf_amd64_f1efe88b4f90c639\netax88772.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Malwarebytes\Logs\MBAMSI.lock C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\net44amd.inf_amd64_450d4b1e35cc8e0d\net44amd.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netnvma.inf_amd64_7080f6b8ea1744fb\netnvma.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netvwifimp.inf_amd64_bfb9fd6f3a078899\netvwifimp.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141 C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netrtl64.inf_amd64_8e9c2368fe308df2\netrtl64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netavpna.inf_amd64_b98aa91c766be0ea\netavpna.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netwtw08.inf_amd64_62f41b89e0dc2537\netwtw08.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_8A3EB3B0E837053838683939C2047254 C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netvg63a.inf_amd64_9f5493180b1252cf\netvg63a.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netrtwlane_13.inf_amd64_992f4f46e65f30d4\netrtwlane_13.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\netmyk64.inf_amd64_1f949c30555f4111\netmyk64.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\net8185.inf_amd64_7a30f5a9441cd55b\net8185.PNF C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\api-ms-win-core-datetime-l1-1-0.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\de\System.Windows.Forms.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\mbamsisdk.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Bitdefender Agent\27.0.1.281\bdch.dll C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
File opened for modification C:\Program Files\Bitdefender Agent\27.0.1.281\lang\hu-HU\productagentui.txtui C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
File opened for modification C:\Program Files\Bitdefender Agent\27.0.1.281\skin\images\icon_warning_slow_connection.svg C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\System.Net.Ping.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\System.Runtime.CompilerServices.VisualC.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\fr\System.Windows.Input.Manipulations.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\fr\UIAutomationClientSideProviders.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\ru\PresentationCore.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\ctlrvers.dat C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Bitdefender Agent\27.0.1.281\skin\images\check-round-progress.svg C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
File created C:\Program Files\Bitdefender Agent\27.0.1.281\skin\images\failed.svg C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\System.Console.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\System.Formats.Asn1.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\cs\ReachFramework.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\fr\PresentationCore.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\Prism.Container.Extensions.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\api-ms-win-core-processthreads-l1-1-0.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\System.Collections.Immutable.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\System.Net.Sockets.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\de\System.Windows.Controls.Ribbon.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\offreg.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Common Files\Bitdefender\SetupInformation\CL-27-14811ECC-954E-452C-835C-6EB787CD05B5\lang\th-TH.txtui C:\Users\Admin\AppData\Local\Temp\RarSFX0\installer.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\api-ms-win-crt-convert-l1-1-0.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\ja\System.Xaml.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\tr\WindowsBase.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\mbae-api-na.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Bitdefender Agent\27.0.1.281\installer\additional.dll C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\System.Private.DataContractSerialization.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\ucrtbase.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\cs\System.Windows.Forms.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Bitdefender Agent\27.0.1.281\skin\images\close.svg C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
File opened for modification C:\Program Files\Bitdefender Agent\27.0.1.281\skin\img\icons\dialog_confirm.svg C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
File opened for modification C:\Program Files\Bitdefender Agent\27.0.1.281\skin\img\icons\feedback_hover.svg C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
File created C:\Program Files\Bitdefender Agent\redline\bdec.ini C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\api-ms-win-core-fibers-l1-1-0.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\System.Diagnostics.TraceSource.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Common Files\Bitdefender\SetupInformation\CL-27-14811ECC-954E-452C-835C-6EB787CD05B5\temp\params.json C:\Users\Admin\AppData\Local\Temp\RarSFX0\installer.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\Microsoft.VisualBasic.Core.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\pt-BR\Microsoft.VisualBasic.Forms.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\ru\Microsoft.VisualBasic.Forms.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\Serilog.Enrichers.Thread.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened for modification C:\Program Files\Bitdefender Agent\27.0.1.281\skin\images\logo-shadow.png C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\es\PresentationUI.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\ko\System.Windows.Controls.Ribbon.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\ko\System.Windows.Forms.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\WindowsBase.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\MBAMShim.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Bitdefender Agent\27.0.1.281\skin\html\Agent\login2_loading.html C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
File created C:\Program Files\Common Files\Bitdefender\SetupInformation\CL-27-14811ECC-954E-452C-835C-6EB787CD05B5\cstsdk.dll C:\Users\Admin\AppData\Local\Temp\RarSFX0\installer.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\msquic.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\pt-BR\System.Windows.Controls.Ribbon.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\System.Security.Cryptography.Pkcs.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.UI.Style.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Bitdefender Agent\27.0.1.281\ProductAgentService.exe C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
File opened for modification C:\Program Files\Bitdefender Agent\27.0.1.281\skin\img\icon-warn.svg C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.NETCore.App\6.0.28\System.Security.Cryptography.X509Certificates.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\shared\Microsoft.WindowsDesktop.App\6.0.28\zh-Hant\UIAutomationClient.resources.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\Microsoft.Extensions.Options.dll C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened for modification C:\Program Files\Bitdefender Agent\27.0.1.281\skin\images\icon-business.svg C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
File opened for modification C:\Program Files\Bitdefender Agent\27.0.1.281\lang\nl-NL C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\upnphost\udhisapi.dll C:\Windows\system32\svchost.exe N/A
File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\upnphost\udhisapi.dll C:\Windows\system32\svchost.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\svchost.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\inf\oem3.inf C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\inf\oem3.inf C:\Windows\system32\DrvInst.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\MBSetup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\bitdefender_windows_d6cd4ccb-64c8-4083-8ccf-bb02a2d660c4.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zSA9C3.tmp\mbstub.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\bitdefender_windows_d6cd4ccb-64c8-4083-8ccf-bb02a2d660c4.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\RarSFX0\agent_launcher.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\setuppackage.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\Bitdefender Agent\redline\bdredline.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\Bitdefender Agent\27.0.1.281\WatchDog.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\MB-SupportTool.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\mwbC5D7.tmp\mb-support.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\Bitdefender Agent\27.0.1.281\ProductAgentUI.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\TEMP\bd_F83.tmp\ebjF84.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\MBSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\RarSFX0\bddeploy.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Phantom C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Phantom C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\Malwarebytes.exe = "11000" C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\mbam.exe = "11000" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\mbamtray.exe = "11000" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Policies\Microsoft C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files\Bitdefender Agent\27.0.1.281\ProductAgentUI.exe N/A
Key created \REGISTRY\USER\S-1-5-20\Software\Policies\Microsoft\Office\16.0\Common\Security C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols\All Applications C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\updatrpkg\mbupdatrV5.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Bitdefender\Bdch C:\Program Files\Bitdefender Agent\redline\bdredline.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files\Bitdefender Agent\27.0.1.281\WatchDog.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files\Bitdefender Agent\27.0.1.281\WatchDog.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files\Bitdefender Agent\27.0.1.281\WatchDog.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files\Bitdefender Agent\27.0.1.281\ProductAgentUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\S-1-5-20\Software\Policies\Microsoft\Office\16.0 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\S-1-5-20\Software\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols\All Applications C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\Bitdefender Agent\27.0.1.281\ProductAgentUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files\Bitdefender Agent\27.0.1.281\ProductAgentUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files\Bitdefender Agent\27.0.1.281\WatchDog.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files\Bitdefender Agent\27.0.1.281\WatchDog.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files\Bitdefender Agent\27.0.1.281\WatchDog.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\Office\15.0\Common\Security\Trusted Protocols\All Applications C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files\Bitdefender Agent\27.0.1.281\ProductAgentUI.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Policies\Microsoft\Office\16.0\Common C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files\Bitdefender Agent\ProductAgentService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files\Bitdefender Agent\27.0.1.281\ProductAgentUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files\Bitdefender Agent\27.0.1.281\ProductAgentUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files\Bitdefender Agent\27.0.1.281\WatchDog.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files\Bitdefender Agent\27.0.1.281\WatchDog.exe N/A
Key created \REGISTRY\USER\S-1-5-20\SOFTWARE\Malwarebytes C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\Office C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:\ C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Windows\system32\DrvInst.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{23416CFE-018D-418E-8CE9-5729D070CCED}\TypeLib\Version = "1.0" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5250E5C8-A09C-4F87-A0DA-A46A62A0EACF}\TypeLib\ = "{A23C190D-C714-42C7-BDBB-F4E1DE65AF27}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6CE18DD5-2BD7-4844-B9AD-DF6A995750A1}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FD010FD4-ED27-4B3A-836C-D09269FF3811}\ = "IKillSwitchController" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F81B1882-A388-42E5-9351-05C858E52DDC}\TypeLib\Version = "1.0" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DD3CFEBD-3B8E-4651-BB7C-537D1F03E59C} C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{929A5C6C-42D7-4248-9533-03C32165691F}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F927AD37-BA5F-4B86-AE22-FE2371B12955}\ = "_ILogControllerEntryEvents" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A5091804-600E-4226-BF28-80ABFDF4AFAB}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{014D0CF7-ACC9-4004-B999-7BDBAAD274B7}\TypeLib C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{0AB5C774-8EB7-4C1B-9BBB-5AC3E2C291DD}\ = "IMWACControllerEventsV10" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{EA248A19-F84E-4407-ADD3-8563AFD81269}\ProxyStubClsid32 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{17A7CC72-3288-442A-ABE8-F8E049B3BE83}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5083B4CA-BBA6-43DD-B36E-DEA787CA0CAD}\TypeLib\Version = "1.0" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E2D56B7B-4B87-45A1-A6D3-5C77035141A6}\TypeLib\ = "{49F6AC60-2104-42C6-8F71-B3916D5AA732}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D8258E71-3A7A-4D9D-85BB-C7999F95B7E4}\ProxyStubClsid32 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EE8A9269-9E6E-4683-BCD3-41E9B16696DC}\TypeLib\ = "{5709DEEB-F05E-4D5C-8DC4-3B0D924EE08F}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{89AE2EF4-3346-47C7-9DCF-ED3264527FDE}\TypeLib C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F3968E6D-3FD5-4707-A5A8-4E8C3C042062}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A9AE95CF-6463-415A-94AC-F895D0962D30} C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{08932AD2-C415-4DE8-821D-5AF7A5658483} C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCB473CB-B8B5-44A7-A3E0-D83AF05350DF}\TypeLib\Version = "1.0" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1917B432-C1CE-4A96-A08E-A270E00E5B23}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{77AD284A-4686-413D-AA76-BDFC1DF52A19}\ = "ISPControllerV3" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2842058299-443432012-2465494467-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F415899A-1576-4C8B-BC9F-4854781F8A20}\Programmable C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2A0F9375-1809-45ED-AFE0-92852B971139}\ProxyStubClsid32 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2E423AF9-25D2-451E-8D81-08D44F63D83F}\TypeLib C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2D611EAD-3FEE-4343-98B7-DB35565577CE}\TypeLib\ = "{59DBD1B8-A7BD-4322-998F-41B0D2516FA0}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MB.LicenseController C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A0101B90-FD0B-40CF-90E4-33650F09A80F}\ = "ICleanControllerV3" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A993F934-6341-4D52-AB17-F93184A624E4}\ProxyStubClsid32 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{557ADCF9-0496-46F6-A580-FF8EC1441050}\ProxyStubClsid32 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{34544A67-823A-484D-8E18-371AFEAEC02E}\ = "IRTPControllerEventsV6" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DB82CDC6-F12A-4156-8DBF-EC7465B9C0B9}\TypeLib\Version = "1.0" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3B42C782-9650-4EFF-9618-91118DF96061}\TypeLib C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{4F3822FA-CCD5-4934-AB6D-3382B2F91DB9}\ProxyStubClsid32 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{D57ACF19-30E3-4B7E-BCDD-6EEB8E57AF27}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7C710FA9-862A-40CF-9F54-063EF8FC8438}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DC2F8F62-D471-4AD5-B346-9F214FE941A7}\TypeLib C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2650A9C4-A53C-4BEF-B766-7405B4D5562B} C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{21EA9E3C-6507-4725-8F4F-ED4DDDE7A709}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{89AE2EF4-3346-47C7-9DCF-ED3264527FDE} C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{23416CFE-018D-418E-8CE9-5729D070CCED}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2DFD7E94-47E6-483A-B4FD-DC586A52CE5D}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3A34647B-D9A8-40D9-B563-F9461E98030E}\TypeLib\ = "{74630AE8-C170-4A8F-A90A-F42D63EFE1E8}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MB.UpdateController.1 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{778103CC-4FA4-42AC-8981-D6F11ACC6B7F} C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{CE7ABFE9-8F8F-4EDD-86BD-9209FD072126}\ = "IScanControllerEventsV11" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1691A7E8-B8D1-46D5-BB29-3A4DB2D809C6}\TypeLib\Version = "1.0" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8D488C7C-023D-4561-B377-DD9FB7124326}\ProxyStubClsid32 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{237E618C-D739-4C8A-9F72-5CD4EF91CBE5}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79D77750-02E0-4451-A7BB-524ACD93DD93}\TypeLib\ = "{49F6AC60-2104-42C6-8F71-B3916D5AA732}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3BD2053F-99D1-4C2B-8B45-635183A8F0BF}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A2C9E279-3E50-44F0-8C3B-606A303BA1D1}\ = "IUpdateControllerV11" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{EEC295FA-EC51-4055-BC47-022FC0FC122F}\1.0\0\win64\ = "C:\\Program Files\\Malwarebytes\\Anti-Malware\\MBAMService.exe\\16" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{560EB17C-4365-4DFC-A855-F99B223F02AF}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{01222402-A8AB-4183-8843-8ADBF0B11869}\ProxyStubClsid32 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{EAB53395-8218-47FF-91B7-144994C0AD83}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BDCB7916-7DE8-44C8-BAF6-F1BBB3268456}\TypeLib C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2842058299-443432012-2465494467-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{ADA09B8D-A536-4429-8331-49808442D24B}\TypeLib\Version = "1.0" C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E149FEF9-F1DC-4894-8A8E-AA53F6807EFD} C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{17A7CC72-3288-442A-ABE8-F8E049B3BE83}\TypeLib C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8DA7F965EC5EFC37910F1C6E59FDC1CC6A6EDE16 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\0D44DD8C3C8C1A1A58756481E90F2E2AFFB3D26E C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F6108407D6F8BB67980CC2E244C2EBAE1CEF63BE C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F6108407D6F8BB67980CC2E244C2EBAE1CEF63BE\Blob = 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 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\2AD974A775F73CBDBBD8F5AC3A49255FA8FB1F8C C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 030000000100000014000000d4de20d05e66fc53fe1a50882c78db2852cae47420000000010000007b030000308203773082025fa0030201020204020000b9300d06092a864886f70d0101050500305a310b300906035504061302494531123010060355040a130942616c74696d6f726531133011060355040b130a43796265725472757374312230200603550403131942616c74696d6f7265204379626572547275737420526f6f74301e170d3030303531323138343630305a170d3235303531323233353930305a305a310b300906035504061302494531123010060355040a130942616c74696d6f726531133011060355040b130a43796265725472757374312230200603550403131942616c74696d6f7265204379626572547275737420526f6f7430820122300d06092a864886f70d01010105000382010f003082010a0282010100a304bb22ab983d57e826729ab579d429e2e1e89580b1b0e35b8e2b299a64dfa15dedb009056ddb282ece62a262feb488da12eb38eb219dc0412b01527b8877d31c8fc7bab988b56a09e773e81140a7d1ccca628d2de58f0ba650d2a850c328eaf5ab25878a9a961ca967b83f0cd5f7f952132fc21bd57070f08fc012ca06cb9ae1d9ca337a77d6f8ecb9f16844424813d2c0c2a4ae5e60feb6a605fcb4dd075902d459189863f5a563e0900c7d5db2067af385eaebd403ae5e843e5fff15ed69bcf939367275cf77524df3c9902cb93de5c923533f1f2498215c079929bdc63aece76e863a6b97746333bd681831f0788d76bffc9e8e5d2a86a74d90dc271a390203010001a3453043301d0603551d0e04160414e59d5930824758ccacfa085436867b3ab5044df030120603551d130101ff040830060101ff020103300e0603551d0f0101ff040403020106300d06092a864886f70d01010505000382010100850c5d8ee46f51684205a0ddbb4f27258403bdf764fd2dd730e3a41017ebda2929b6793f76f6191323b8100af958a4d46170bd04616a128a17d50abdc5bc307cd6e90c258d86404feccca37e38c637114feddd68318e4cd2b30174eebe755e07481a7f70ff165c84c07985b805fd7fbe6511a30fc002b4f852373904d5a9317a18bfa02af41299f7a34582e33c5ef59d9eb5c89e7c2ec8a49e4e08144b6dfd706d6b1a63bd64e61fb7cef0f29f2ebb1bb7f250887392c2e2e3168d9a3202ab8e18dde91011ee7e35ab90af3e30947ad0333da7650ff5fc8e9e62cf47442c015dbb1db532d247d2382ed0fe81dc326a1eb5ee3cd5fce7811d19c32442ea6339a9 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\B51C067CEE2B0C3DF855AB2D92F4FE39D4E70F0E C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8DA7F965EC5EFC37910F1C6E59FDC1CC6A6EDE16\Blob = 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 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5A8CEF45D7A69859767A8C8B4496B578CF474B1A\Blob = 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 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\0D44DD8C3C8C1A1A58756481E90F2E2AFFB3D26E\Blob = 0300000001000000140000000d44dd8c3c8c1a1a58756481e90f2e2affb3d26e2000000001000000ba010000308201b63082015ba0030201020213066c9fd5749736663f3b0b9ad9e89e7603f24a300a06082a8648ce3d0403023039310b3009060355040613025553310f300d060355040a1306416d617a6f6e3119301706035504031310416d617a6f6e20526f6f742043412033301e170d3135303532363030303030305a170d3430303532363030303030305a3039310b3009060355040613025553310f300d060355040a1306416d617a6f6e3119301706035504031310416d617a6f6e20526f6f7420434120333059301306072a8648ce3d020106082a8648ce3d030107034200042997a7c6417fc00d9be8011b56c6f252a5ba2db212e8d22ed7fac9c5d8aa6d1f73813b3b986b397c33a5c54e868e8017686245577d44581db337e56708eb66dea3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414abb6dbd7069e37ac3086079170c79cc419b178c0300a06082a8648ce3d0403020349003046022100e08592a317b78df92b06a593ac1a98686172fae1a1d0fb1c7860a64399c5b8c40221009c02eff1949cb396f9ebc62af8b62cfe3a901416d78c6324481cdf307dd5683b C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\1C58A3A8518E8759BF075B76B750D4F2DF264FCD C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\2AD974A775F73CBDBBD8F5AC3A49255FA8FB1F8C\Blob = 0300000001000000140000002ad974a775f73cbdbbd8f5ac3a49255fa8fb1f8c2000000001000000620400003082045e30820346a0030201020213077312380b9d6688a33b1ed9bf9ccda68e0e0f300d06092a864886f70d01010b05003039310b3009060355040613025553310f300d060355040a1306416d617a6f6e3119301706035504031310416d617a6f6e20526f6f742043412031301e170d3232303832333232323132385a170d3330303832333232323132385a303c310b3009060355040613025553310f300d060355040a1306416d617a6f6e311c301a06035504031313416d617a6f6e205253412032303438204d303130820122300d06092a864886f70d01010105000382010f003082010a0282010100eb712ca9cb1f8828923230af8a570f78b73725955587ac675c97d322c8daa214676b7cf067dae2032ab356125dc6b547f96708a7937a9592180fb4f9f910369a7f2f80b64fba134ec75d531ee0dd96330720d396bc12e4745042a1051373b54f9b4424fe2d7fedbc2285ec362133977506ce271882dce3d9c582078d5e26012626671fd93f13cf32ba6bad7864fcaaff0e023c07df9c0578728cfdea75b7032884dae86e078cd05085ef8154b2716eec6d62ef8f94c35ee9c4a4d091c02e249198caeeba258ed4f671b6fb5b6b38064837478d86dcf2ea06fb76377d9eff424e4d588293cfe271c278b17aab4b5b94378881e4d9af24aef872c565fb4bb451e70203010001a382015a3082015630120603551d130101ff040830060101ff020100300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b06010505070302301d0603551d0e0416041481b80e638a891218e5fa3b3b50959fe6e5901385301f0603551d230418301680148418cc8534ecbc0c94942e08599cc7b2104e0a08307b06082b06010505070101046f306d302f06082b060105050730018623687474703a2f2f6f6373702e726f6f746361312e616d617a6f6e74727573742e636f6d303a06082b06010505073002862e687474703a2f2f6372742e726f6f746361312e616d617a6f6e74727573742e636f6d2f726f6f746361312e636572303f0603551d1f043830363034a032a030862e687474703a2f2f63726c2e726f6f746361312e616d617a6f6e74727573742e636f6d2f726f6f746361312e63726c30130603551d20040c300a3008060667810c010201300d06092a864886f70d01010b05000382010100ad00de0205232e063262b46bb19416e41140de2bfa59c135efe0aa8f2b41b9d1f38739001df23db5a7470c0606c691f3075702d4edbd17c1909abf4875a2074f30dd4a6a42b50d3d15c00ffe845bc63c99cc5752b1d86e12d59692934b94e507e88982086a7a34d49e64e13d876a92909a63a14bf88fb6ea34d305be20c2de06e28c9f738b9f4d3985cace19369d85c99ec9f8503fb67e88a1efca84068b50b40a5ca61c44f1fdc8614060f26125aa07f4c7c27375e40c0b428d04e55f4448995b7b898196a7889d4b0d62e804c4d7feb4e8b26dcaecc01cbc385b1ddf85ce5b7ae3494b6cb9a7ddf405b249ade1c5146bc2ccebcd7fd65869bac3207e7fb0b8 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\B51C067CEE2B0C3DF855AB2D92F4FE39D4E70F0E\Blob = 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 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5A8CEF45D7A69859767A8C8B4496B578CF474B1A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\1C58A3A8518E8759BF075B76B750D4F2DF264FCD\Blob = 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 C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Program Files\Malwarebytes\Anti-Malware\mbuns.exe\:SmartScreen:$DATA C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File created C:\Program Files\Malwarebytes\Anti-Malware\mbuns.exe\:Zone.Identifier:$DATA C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 488017.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\bitdefender_windows_d6cd4ccb-64c8-4083-8ccf-bb02a2d660c4.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\GenP 3.4.14.1.zip:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 500194.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\MBSetup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\MBSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\MBSetup.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\GenP 3.4.14.1\GenP-3.4.14.1.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\MBSetup.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe N/A
N/A N/A C:\Users\Admin\Downloads\FRSTEnglish.exe N/A
N/A N/A C:\Users\Admin\Downloads\FRSTEnglish.exe N/A
N/A N/A C:\Users\Admin\Downloads\FRSTEnglish.exe N/A
N/A N/A C:\Users\Admin\Downloads\FRSTEnglish.exe N/A
N/A N/A C:\Users\Admin\Downloads\FRSTEnglish.exe N/A
N/A N/A C:\Users\Admin\Downloads\FRSTEnglish.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4240 wrote to memory of 4244 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 4244 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 2768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 1488 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 1488 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4240 wrote to memory of 856 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Windows\Explorer.EXE

C:\Windows\Explorer.EXE

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.reddit.com/r/GenP/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffc66253cb8,0x7ffc66253cc8,0x7ffc66253cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1928 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2808 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3440 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6040 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5908 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6492 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3868 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6160 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6248 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6228 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=4976 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5192 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6860 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6780 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1720 /prefetch:8

C:\Users\Admin\Downloads\MBSetup.exe

"C:\Users\Admin\Downloads\MBSetup.exe"

C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe

"C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"

C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe

"C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe" /installmbtun

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "9" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf" "9" "4ba9030c7" "000000000000014C" "Service-0x0-3e7$\Default" "0000000000000158" "208" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun"

C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

"C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" /Service /Protected

C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

"C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"

C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe

"C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe" nowindow

C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe

"C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"

C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe

"C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=6152 /prefetch:2

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

ig.exe reseed

C:\Users\Admin\Downloads\MB-SupportTool.exe

"C:\Users\Admin\Downloads\MB-SupportTool.exe"

C:\Users\Admin\AppData\Local\Temp\7zSA9C3.tmp\mbstub.exe

.\mbstub.exe

C:\Users\Admin\AppData\Local\Temp\mwbC5D7.tmp\mb-support.exe

C:\Users\Admin\AppData\Local\Temp\mwbC5D7.tmp\mb-support.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6912 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7156 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2580 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7148 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7356 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7548 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6020 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3792 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7176 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7296 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7700 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7528 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7404 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4632 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7332 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6700 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4836 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7840 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7860 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7856 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7940 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4068 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8108 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8392 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8552 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9120 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9128 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9544 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10012 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9512 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9472 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10500 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10904 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10588 /prefetch:1

C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\updatrpkg\mbupdatrV5.exe

"C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\updatrpkg\mbupdatrV5.exe" "C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE" "C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\UpdateControllerConfig.json" "C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE" "C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\staging" /db:dbupdate /su:no

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2576 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9284 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10608 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10008 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9372 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8372 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2992 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6772 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10144 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=10124 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4072 /prefetch:8

C:\Users\Admin\Downloads\bitdefender_windows_d6cd4ccb-64c8-4083-8ccf-bb02a2d660c4.exe

"C:\Users\Admin\Downloads\bitdefender_windows_d6cd4ccb-64c8-4083-8ccf-bb02a2d660c4.exe"

C:\Users\Admin\AppData\Local\Temp\RarSFX0\agent_launcher.exe

"C:\Users\Admin\AppData\Local\Temp\RarSFX0\agent_launcher.exe"

C:\Users\Admin\AppData\Local\Temp\RarSFX0\bddeploy.exe

"C:\Users\Admin\AppData\Local\Temp\RarSFX0\bddeploy.exe"

C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\setuppackage.exe

"C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\setuppackage.exe"

C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe

"C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe"

C:\Program Files\Bitdefender Agent\ProductAgentService.exe

"C:\Program Files\Bitdefender Agent\ProductAgentService.exe" protect

C:\Program Files\Bitdefender Agent\redline\bdredline.exe

"C:\Program Files\Bitdefender Agent\redline\bdredline.exe"

C:\Program Files\Bitdefender Agent\ProductAgentService.exe

"C:\Program Files\Bitdefender Agent\ProductAgentService.exe" install

C:\Program Files\Bitdefender Agent\ProductAgentService.exe

"C:\Program Files\Bitdefender Agent\ProductAgentService.exe" enable

C:\Program Files\Bitdefender Agent\ProductAgentService.exe

"C:\Program Files\Bitdefender Agent\ProductAgentService.exe" start "C:\Users\Admin\Downloads\bitdefender_windows_d6cd4ccb-64c8-4083-8ccf-bb02a2d660c4.exe"

C:\Program Files\Bitdefender Agent\ProductAgentService.exe

"C:\Program Files\Bitdefender Agent\ProductAgentService.exe"

C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe

"C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe" install

C:\Windows\SysWOW64\regsvr32.exe

regsvr32 /s "C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoveryComp.dll"

C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe

"C:\Program Files\Bitdefender Agent\27.0.1.281\DiscoverySrv.exe"

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s upnphost

C:\Program Files\Bitdefender Agent\ProductAgentService.exe

"ProductAgentService.exe" login_silent

C:\Program Files\Bitdefender Agent\27.0.1.281\ProductAgentUI.exe

"C:\Program Files\Bitdefender Agent\27.0.1.281\ProductAgentUI.exe" show=progress event_retry=Global\7295237F-E98C-4C46-A4A4-07F0D66278C2

C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes_Assistant.exe

"C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes_Assistant.exe" --StopService

C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe

"C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe" /wac 0 /status off true /updatesubstatus none /scansubstatus none /settingssubstatus none

C:\Windows\TEMP\bd_F83.tmp\ebjF84.tmp

"C:\Windows\TEMP\bd_F83.tmp\ebjF84.tmp" /source:central /attach

C:\Users\Admin\AppData\Local\Temp\RarSFX0\installer.exe

"C:\Users\Admin\AppData\Local\Temp\RarSFX0\installer.exe" /kitArchive

C:\Program Files\Bitdefender Agent\27.0.1.281\WatchDog.exe

"C:\Program Files\Bitdefender Agent\27.0.1.281\WatchDog.exe" install

C:\Program Files\Common Files\Bitdefender\SetupInformation\CL-27-14811ECC-954E-452C-835C-6EB787CD05B5\Installer.exe

"C:\Program Files\Common Files\Bitdefender\SetupInformation\CL-27-14811ECC-954E-452C-835C-6EB787CD05B5\Installer.exe" /attach /source:central /setup-folder:"CL-27-14811ECC-954E-452C-835C-6EB787CD05B5" /step=new_install

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5820 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2212 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7744 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8128 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2444 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8728 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=11024 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\FRSTEnglish.exe

"C:\Users\Admin\Downloads\FRSTEnglish.exe"

C:\Users\Admin\Downloads\GenP 3.4.14.1\GenP-3.4.14.1.exe

"C:\Users\Admin\Downloads\GenP 3.4.14.1\GenP-3.4.14.1.exe"

C:\Users\Admin\AppData\Local\Temp\NSudoLG.exe

C:\Users\Admin\AppData\Local\Temp\NSudoLG.exe -U:T -P:E -M:S "C:\Users\Admin\Downloads\GenP 3.4.14.1\GenP-3.4.14.1.exe"

C:\Users\Admin\Downloads\GenP 3.4.14.1\GenP-3.4.14.1.exe

"C:\Users\Admin\Downloads\GenP 3.4.14.1\GenP-3.4.14.1.exe"

C:\Users\Admin\AppData\Local\Temp\NSudoLG.exe

C:\Users\Admin\AppData\Local\Temp\NSudoLG.exe -U:T -P:E -M:S "C:\Users\Admin\Downloads\GenP 3.4.14.1\GenP-3.4.14.1.exe"

C:\Users\Admin\Downloads\GenP 3.4.14.1\GenP-3.4.14.1.exe

"C:\Users\Admin\Downloads\GenP 3.4.14.1\GenP-3.4.14.1.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9888 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9932 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9496 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9100 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9140 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8028 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1708 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7864 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6948 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5892 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7768 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11024 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4728 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7744 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7760 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8188 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8196 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8208 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=10400 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8504 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9812 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10124 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,16475815418153096449,7446725535755572660,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6572 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 www.reddit.com udp
US 151.101.129.140:443 w3-reporting-nel.reddit.com tcp
US 151.101.129.140:443 w3-reporting-nel.reddit.com tcp
US 8.8.8.8:53 www.redditstatic.com udp
US 8.8.8.8:53 42.56.20.217.in-addr.arpa udp
US 151.101.1.140:443 preview.redd.it tcp
US 151.101.65.140:443 preview.redd.it tcp
US 151.101.129.140:443 preview.redd.it tcp
US 151.101.129.140:443 preview.redd.it tcp
US 151.101.129.140:443 preview.redd.it tcp
US 151.101.129.140:443 preview.redd.it tcp
US 151.101.129.140:443 preview.redd.it tcp
US 151.101.129.140:443 preview.redd.it tcp
US 151.101.129.140:443 preview.redd.it tcp
US 151.101.129.140:443 preview.redd.it tcp
US 151.101.129.140:443 preview.redd.it tcp
US 151.101.129.140:443 preview.redd.it tcp
US 151.101.129.140:443 preview.redd.it tcp
US 8.8.8.8:53 140.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 14.160.190.20.in-addr.arpa udp
US 151.101.1.140:443 w3-reporting.reddit.com tcp
US 172.67.69.19:443 ad-delivery.net tcp
N/A 224.0.0.251:5353 udp
IE 74.125.193.84:443 accounts.google.com tcp
IE 74.125.193.84:443 accounts.google.com udp
US 8.8.8.8:53 84.193.125.74.in-addr.arpa udp
US 104.17.151.117:443 static.mediafire.com tcp
US 104.17.151.117:443 static.mediafire.com tcp
US 104.17.151.117:443 static.mediafire.com tcp
US 8.8.8.8:53 25.140.123.92.in-addr.arpa udp
US 104.21.42.32:443 the.gatekeeperconsent.com tcp
US 8.8.8.8:53 www.ezojs.com udp
US 8.8.8.8:53 translate.google.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 cdn.amplitude.com udp
US 172.67.170.144:443 www.ezojs.com tcp
GB 18.154.84.60:443 cdn.amplitude.com tcp
FR 172.217.20.206:443 translate.google.com tcp
US 172.67.199.186:443 the.gatekeeperconsent.com tcp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
US 104.16.53.110:443 otnolatrnup.com tcp
FR 172.217.20.206:443 translate.google.com tcp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
GB 18.154.84.60:443 cdn.amplitude.com tcp
US 104.26.2.173:443 www.mediafiredls.com tcp
US 8.8.8.8:53 110.53.16.104.in-addr.arpa udp
US 8.8.8.8:53 73.79.16.104.in-addr.arpa udp
US 8.8.8.8:53 60.84.154.18.in-addr.arpa udp
US 8.8.8.8:53 186.199.67.172.in-addr.arpa udp
FR 13.37.187.223:443 g.ezoic.net tcp
FR 13.37.187.223:443 g.ezoic.net tcp
FR 142.250.201.170:443 translate-pa.googleapis.com tcp
US 172.67.41.60:443 btloader.com tcp
US 104.21.87.79:443 go.ezodn.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 163.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 60.41.67.172.in-addr.arpa udp
US 8.8.8.8:53 170.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 79.87.21.104.in-addr.arpa udp
FR 142.250.201.170:443 translate-pa.googleapis.com udp
FR 142.250.201.163:443 www.google.co.uk tcp
GB 18.245.143.58:443 tags.crwdcntrl.net tcp
US 54.187.30.52:443 api.amplitude.com tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
FR 172.217.20.162:443 googleads.g.doubleclick.net tcp
IE 54.220.6.201:443 ad.crwdcntrl.net tcp
IE 54.220.6.201:443 ad.crwdcntrl.net tcp
US 8.8.8.8:53 163.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
GB 74.125.71.156:443 stats.g.doubleclick.net tcp
US 130.211.23.194:443 api.btloader.com tcp
US 130.211.23.194:443 api.btloader.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
GB 95.101.129.194:443 www.bing.com tcp
GB 95.101.129.194:443 www.bing.com tcp
GB 95.101.129.194:443 www.bing.com tcp
US 172.67.142.121:443 bshr.ezodn.com tcp
FR 172.217.20.206:443 fundingchoicesmessages.google.com udp
GB 95.101.129.146:443 www.bing.com tcp
GB 95.101.129.146:443 www.bing.com tcp
GB 95.101.129.146:443 www.bing.com tcp
GB 95.101.129.146:443 www.bing.com tcp
IE 20.190.159.71:443 login.microsoftonline.com tcp
US 13.107.246.64:443 csp.microsoft.com tcp
US 13.107.246.64:443 csp.microsoft.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 192.0.66.233:443 www.malwarebytes.com tcp
US 192.0.66.233:443 www.malwarebytes.com tcp
US 34.96.102.137:443 dev.visualwebsiteoptimizer.com tcp
US 192.0.76.3:443 stats.wp.com tcp
US 104.18.38.142:443 api.weglot.com tcp
GB 143.244.38.136:443 plausible.io tcp
US 184.72.170.0:443 genesis.malwarebytes.com tcp
US 34.96.102.137:443 dev.visualwebsiteoptimizer.com udp
US 34.96.102.137:443 dev.visualwebsiteoptimizer.com udp
US 104.18.38.142:443 api.weglot.com tcp
GB 143.244.38.136:443 plausible.io tcp
US 104.18.87.42:443 cdn.cookielaw.org tcp
US 104.18.87.42:443 cdn.cookielaw.org tcp
US 104.18.87.42:443 cdn.cookielaw.org tcp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
GB 216.137.44.112:443 downloads.malwarebytes.com tcp
GB 216.137.44.112:443 downloads.malwarebytes.com tcp
GB 18.244.155.2:443 data-cdn.mbamupdates.com tcp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
US 150.171.27.10:443 bat.bing.com tcp
FR 142.250.179.68:443 www.google.com tcp
US 34.117.39.58:443 www.upsellit.com tcp
GB 18.245.218.2:443 d2jjzw81hqbuqv.cloudfront.net tcp
GB 104.103.242.19:443 munchkin.marketo.net tcp
GB 173.222.211.56:443 snap.licdn.com tcp
US 34.117.39.58:443 www.upsellit.com udp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 74.125.71.156:443 stats.g.doubleclick.net udp
FR 142.250.201.163:443 www.google.co.uk udp
FR 172.217.20.162:443 googleads.g.doubleclick.net udp
FR 142.250.179.68:443 www.google.com udp
US 66.226.1.69:443 app.upsellit.com tcp
US 13.107.42.14:443 px.ads.linkedin.com tcp
US 192.28.144.124:443 805-usg-300.mktoresp.com tcp
US 8.8.8.8:53 56.211.222.173.in-addr.arpa udp
US 8.8.8.8:53 14.42.107.13.in-addr.arpa udp
US 192.28.144.124:443 805-usg-300.mktoresp.com tcp
FR 142.250.75.238:443 google.com tcp
FR 142.250.75.238:443 google.com tcp
US 52.35.162.120:443 api2.amplitude.com tcp
US 3.226.45.238:443 ark.mwbsys.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 108.156.46.45:443 cdn.mwbsys.com tcp
US 3.226.45.238:443 ark.mwbsys.com tcp
GB 108.156.46.87:443 cdn.mwbsys.com tcp
US 3.226.45.238:443 ark.mwbsys.com tcp
GB 108.156.46.24:443 cdn.mwbsys.com tcp
US 3.226.45.238:443 ark.mwbsys.com tcp
GB 108.156.46.24:443 cdn.mwbsys.com tcp
US 3.226.45.238:443 ark.mwbsys.com tcp
GB 108.156.46.24:443 cdn.mwbsys.com tcp
SE 45.83.223.233:443 ipv4.am.i.mullvad.net tcp
US 3.222.53.170:443 holocron.mwbsys.com tcp
US 3.222.53.170:443 holocron.mwbsys.com tcp
US 34.209.199.251:443 api2.amplitude.com tcp
US 23.23.206.238:443 holocron.mwbsys.com tcp
GB 184.25.193.234:80 www.microsoft.com tcp
US 3.225.217.220:443 iris.mwbsys.com tcp
US 52.24.68.61:443 telemetry.malwarebytes.com tcp
US 44.217.17.179:443 ark.mwbsys.com tcp
GB 108.156.46.45:443 cdn.mwbsys.com tcp
US 3.226.45.238:443 ark.mwbsys.com tcp
US 3.226.45.238:443 ark.mwbsys.com tcp
GB 13.224.222.12:443 mbst.mwbsys.com tcp
GB 216.137.44.5:443 downloads.malwarebytes.com tcp
US 104.20.184.56:443 download.bleepingcomputer.com tcp
US 54.187.149.139:443 telemetry.malwarebytes.com tcp
US 54.187.149.139:443 telemetry.malwarebytes.com tcp
GB 95.101.129.194:443 www.bing.com tcp
GB 95.101.129.194:443 www.bing.com tcp
GB 95.101.129.194:443 www.bing.com tcp
GB 95.101.129.194:443 www.bing.com tcp
GB 95.101.129.194:443 www.bing.com tcp
GB 95.101.129.194:443 www.bing.com tcp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 95.101.129.194:443 r.bing.com tcp
GB 95.101.129.194:443 r.bing.com tcp
GB 95.101.129.233:443 r.bing.com tcp
GB 95.101.129.233:443 r.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
DE 116.202.231.78:443 bitdefender.ua tcp
DE 116.202.231.78:443 bitdefender.ua tcp
US 8.8.8.8:53 78.231.202.116.in-addr.arpa udp
US 13.107.246.64:443 oc-cdn-public-eur.azureedge.net tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 8.8.8.8:53 bit.softico.ua udp
FR 142.250.179.68:443 www.google.com udp
FR 5.39.10.93:443 bit.softico.ua tcp
IE 68.219.89.214:443 unq00928cb8c6caec118e77000d3ab15-crm4.omnichannelengagementhub.com tcp
FR 142.250.179.68:443 www.google.com tcp
FR 142.250.201.162:443 googleads.g.doubleclick.net udp
FR 5.39.10.93:443 bit.softico.ua tcp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 74.125.71.156:443 stats.g.doubleclick.net udp
FR 142.250.201.163:443 www.google.co.uk udp
US 8.8.8.8:53 162.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 oc-cdn-public-eur.azureedge.net udp
FR 142.250.179.68:443 www.google.com udp
US 104.18.1.169:443 www.bitdefender.com tcp
US 104.18.1.169:443 www.bitdefender.com tcp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
GB 92.123.143.243:443 download.bitdefender.com tcp
GB 92.123.143.243:443 download.bitdefender.com tcp
GB 92.123.143.243:443 download.bitdefender.com tcp
GB 92.123.143.243:443 download.bitdefender.com tcp
GB 92.123.143.243:443 download.bitdefender.com tcp
GB 92.123.143.243:443 download.bitdefender.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
GB 92.123.143.243:443 download.bitdefender.com tcp
GB 92.123.143.243:443 download.bitdefender.com tcp
GB 92.123.143.243:443 download.bitdefender.com tcp
US 8.8.8.8:53 connect.facebook.net udp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
GB 184.26.57.29:443 assets.adobedtm.com tcp
DK 157.240.200.14:443 connect.facebook.net tcp
FR 142.250.179.74:443 ajax.googleapis.com tcp
GB 92.123.143.243:443 download.bitdefender.com tcp
GB 92.123.143.243:443 download.bitdefender.com tcp
US 8.8.8.8:53 74.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 api.company-target.com udp
US 8.8.8.8:53 dpm.demdex.net udp
US 8.8.8.8:53 app.usercentrics.eu udp
US 35.190.14.188:443 app.usercentrics.eu tcp
IE 54.228.186.105:443 dpm.demdex.net tcp
GB 18.172.153.35:443 api.company-target.com tcp
IE 66.235.152.225:443 sstats.bitdefender.com tcp
US 35.190.14.188:443 app.usercentrics.eu udp
GB 13.224.132.75:443 euob.ofgreencolumn.com tcp
IE 66.235.152.156:443 sstats.bitdefender.com tcp
IE 52.31.127.106:443 bitdefender.demdex.net tcp
IE 54.73.228.19:443 cm.everesttech.net tcp
US 8.8.8.8:53 156.152.235.66.in-addr.arpa udp
US 8.8.8.8:53 106.127.31.52.in-addr.arpa udp
US 8.8.8.8:53 19.228.73.54.in-addr.arpa udp
US 35.241.3.184:443 api.usercentrics.eu tcp
IE 3.248.162.96:443 obseu.ofgreencolumn.com tcp
US 35.241.3.184:443 api.usercentrics.eu udp
GB 104.103.241.71:443 assets.adobetarget.com tcp
US 35.190.14.188:443 app.usercentrics.eu udp
US 35.201.111.240:443 consent-api.service.consent.usercentrics.eu tcp
US 150.171.28.10:443 bat.bing.com tcp
GB 13.224.245.87:443 static.hotjar.com tcp
US 35.186.249.72:443 d.impactradius-event.com tcp
GB 146.75.72.157:443 static.ads-twitter.com tcp
GB 23.40.43.42:443 analytics.tiktok.com tcp
US 35.201.111.240:443 consent-api.service.consent.usercentrics.eu udp
GB 143.204.68.17:443 cdn.scarabresearch.com tcp
GB 18.245.253.22:443 script.hotjar.com tcp
FR 152.195.15.58:443 cdn.bizible.com tcp
ES 18.154.41.41:443 tag.demandbase.com tcp
PL 93.184.221.165:443 t.co tcp
US 104.244.42.131:443 analytics.twitter.com tcp
GB 173.222.211.56:443 snap.licdn.com tcp
GB 173.222.211.56:443 snap.licdn.com tcp
GB 108.138.217.38:443 static.scarabresearch.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 13.107.42.14:443 px.ads.linkedin.com tcp
IE 54.75.167.15:443 ws.hotjar.com tcp
DK 157.240.200.35:443 www.facebook.com tcp
US 13.107.246.64:443 www.clarity.ms tcp
US 8.8.8.8:53 165.221.184.93.in-addr.arpa udp
US 8.8.8.8:53 131.42.244.104.in-addr.arpa udp
US 8.8.8.8:53 38.217.138.108.in-addr.arpa udp
IE 13.74.129.1:443 c.clarity.ms tcp
US 204.79.197.237:443 c.bing.com tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 34.111.52.132:443 webchannel-content-service.scarabresearch.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 104.26.7.95:80 temp-mail.org tcp
US 104.26.7.95:80 temp-mail.org tcp
US 104.26.7.95:443 temp-mail.org tcp
US 104.26.7.95:443 temp-mail.org tcp
US 104.18.95.41:443 challenges.cloudflare.com tcp
GB 2.16.170.58:80 apps.identrust.com tcp
US 104.18.95.41:443 challenges.cloudflare.com tcp
NL 152.42.150.143:443 srv.buysellads.com tcp
US 172.66.43.196:443 cdn.paddle.com tcp
US 172.67.73.98:443 temp-mail.org tcp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
US 130.211.23.194:443 api.btloader.com udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 bidder.criteo.com udp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
US 8.8.8.8:53 exchange.cootlogix.com udp
US 8.8.8.8:53 prebid.media.net udp
US 8.8.8.8:53 mp.4dex.io udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 pbjs.e-planning.net udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 rt.marphezis.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
US 8.8.8.8:53 secure.cdn.fastclick.net udp
US 8.8.8.8:53 cdn.hadronid.net udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 c.4dex.io udp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 185.89.210.20:443 ib.adnxs.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
NL 89.149.192.64:443 prg.smartadserver.com tcp
NL 89.149.192.64:443 prg.smartadserver.com tcp
NL 89.149.192.64:443 prg.smartadserver.com tcp
NL 89.149.192.64:443 prg.smartadserver.com tcp
NL 89.149.192.64:443 prg.smartadserver.com tcp
NL 89.149.192.64:443 prg.smartadserver.com tcp
US 104.26.8.169:443 script.4dex.io tcp
US 159.65.221.255:443 exchange.cootlogix.com tcp
US 159.65.221.255:443 exchange.cootlogix.com tcp
US 159.65.221.255:443 exchange.cootlogix.com tcp
US 159.65.221.255:443 exchange.cootlogix.com tcp
US 159.65.221.255:443 exchange.cootlogix.com tcp
US 159.65.221.255:443 exchange.cootlogix.com tcp
US 34.120.63.153:443 prebid.media.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 193.3.178.3:443 pbjs.e-planning.net tcp
US 172.64.153.78:443 mp.4dex.io tcp
DE 3.78.168.176:443 tlx.3lift.com tcp
GB 23.53.174.156:443 secure.cdn.fastclick.net tcp
NL 188.166.203.175:443 rt.marphezis.com tcp
US 35.241.34.106:443 c.4dex.io tcp
US 35.241.34.106:443 c.4dex.io tcp
US 35.241.34.106:443 c.4dex.io tcp
US 35.241.34.106:443 c.4dex.io tcp
US 35.241.34.106:443 c.4dex.io tcp
US 35.241.34.106:443 c.4dex.io tcp
DE 51.38.120.206:443 onetag-sys.com tcp
GB 18.245.189.34:443 aax.amazon-adsystem.com tcp
GB 108.156.39.15:443 config.aps.amazon-adsystem.com tcp
GB 108.138.217.61:443 hb.yellowblue.io tcp
US 104.22.53.173:443 cdn.hadronid.net tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
GB 159.65.211.77:443 srv.buysellads.com tcp
US 104.26.8.169:443 script.4dex.io tcp
US 104.18.22.145:443 cadmus.script.ac tcp
US 104.22.4.69:443 id.hadron.ad.gt tcp
US 8.8.8.8:53 156.174.53.23.in-addr.arpa udp
US 8.8.8.8:53 3.178.3.193.in-addr.arpa udp
US 8.8.8.8:53 106.34.241.35.in-addr.arpa udp
US 8.8.8.8:53 34.189.245.18.in-addr.arpa udp
US 8.8.8.8:53 173.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 206.120.38.51.in-addr.arpa udp
US 8.8.8.8:53 61.217.138.108.in-addr.arpa udp
US 8.8.8.8:53 86.53.22.104.in-addr.arpa udp
US 8.8.8.8:53 176.168.78.3.in-addr.arpa udp
US 8.8.8.8:53 77.211.65.159.in-addr.arpa udp
US 8.8.8.8:53 255.221.65.159.in-addr.arpa udp
US 8.8.8.8:53 145.22.18.104.in-addr.arpa udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 175.203.166.188.in-addr.arpa udp
US 8.8.8.8:53 15.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 a.ad.gt udp
FR 142.250.179.97:443 ep2.adtrafficquality.google tcp
US 104.22.5.69:443 a.ad.gt tcp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
FR 142.250.179.65:443 a5c164c50f5afc4212af485fc97f8608.safeframe.googlesyndication.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 35.241.34.106:443 c.4dex.io udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
DE 37.252.171.149:443 fra1-ib.adnxs.com tcp
DE 37.252.171.149:443 fra1-ib.adnxs.com tcp
DE 37.252.171.149:443 fra1-ib.adnxs.com tcp
DE 37.252.171.149:443 fra1-ib.adnxs.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
FR 185.235.86.44:443 gem.gbc.criteo.com tcp
NL 185.235.87.79:443 ag.gbc.criteo.com tcp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 151.101.65.108:443 acdn.adnxs.com tcp
US 34.95.69.49:443 i.clean.gg tcp
US 34.95.69.49:443 i.clean.gg udp
DE 51.38.120.206:443 onetag-sys.com udp
US 13.248.245.213:443 eb2.3lift.com tcp
GB 184.26.56.245:443 ads.pubmatic.com tcp
US 104.248.229.159:443 sync.cootlogix.com tcp
GB 184.25.192.27:443 contextual.media.net tcp
US 151.101.193.108:443 acdn.adnxs.com tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
GB 184.25.193.73:443 eus.rubiconproject.com tcp
GB 2.16.170.51:443 hb.trustedstack.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 67.202.105.21:443 ssc-cms.33across.com tcp
GB 104.103.201.8:443 secure-assets.rubiconproject.com tcp
US 104.17.43.93:443 gum.aidemsrv.com tcp
GB 13.224.222.101:443 eu-west-1-cs-rtb.openwebmp.com tcp
US 18.214.90.175:443 cs-server-s2s.yellowblue.io tcp
GB 92.123.140.19:443 player.aniview.com tcp
NL 89.149.193.100:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 image8.pubmatic.com udp
NL 185.184.8.90:443 creativecdn.com tcp
DE 138.201.8.249:443 sync.richaudience.com tcp
US 52.2.98.215:443 api-2-0.spot.im tcp
US 52.223.40.198:443 match.adsrvr.org tcp
IE 34.250.109.179:443 match.prod.bidr.io tcp
NL 198.47.127.18:443 image8.pubmatic.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 70.42.32.191:443 b1sync.zemanta.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 70.42.32.191:443 b1sync.zemanta.com tcp
DE 138.201.8.249:443 sync.richaudience.com tcp
US 172.240.45.78:443 sync.aniview.com tcp
US 54.205.147.202:443 sync.srv.stackadapt.com tcp
US 172.111.38.86:443 tracker.open-adsyield.com tcp
IE 54.228.243.229:443 ap.lijit.com tcp
IE 52.49.168.145:443 jadserve.postrelease.com tcp
US 192.132.33.69:443 bttrack.com tcp
US 8.8.8.8:53 19.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 100.193.149.89.in-addr.arpa udp
US 8.8.8.8:53 198.40.223.52.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 18.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 179.109.250.34.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 215.98.2.52.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 78.45.240.172.in-addr.arpa udp
US 8.8.8.8:53 229.243.228.54.in-addr.arpa udp
US 8.8.8.8:53 202.147.205.54.in-addr.arpa udp
US 8.8.8.8:53 86.38.111.172.in-addr.arpa udp
US 8.8.8.8:53 145.168.49.52.in-addr.arpa udp
US 35.244.174.68:443 id.rlcdn.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
FR 142.250.75.238:443 google.com udp
US 51.8.64.151:443 h.clarity.ms tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 51.8.64.151:443 h.clarity.ms tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 173.222.211.40:443 aefd.nelreports.net tcp
US 44.207.52.251:443 sirius.mwbsys.com tcp
GB 108.156.46.24:443 cdn.mwbsys.com tcp
US 51.8.64.151:443 h.clarity.ms tcp
GB 173.222.211.40:443 aefd.nelreports.net udp
NL 178.250.1.8:443 bidder.criteo.com tcp
DE 51.38.120.206:443 onetag-sys.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 188.166.203.175:443 rt.marphezis.com tcp
NL 185.89.210.20:443 ib.adnxs.com tcp
NL 193.3.178.3:443 pbjs.e-planning.net tcp
US 34.120.63.153:443 prebid.media.net udp
FR 91.134.110.129:443 prg.smartadserver.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
US 178.128.135.33:443 exchange.cootlogix.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 178.128.135.33:443 exchange.cootlogix.com tcp
US 178.128.135.33:443 exchange.cootlogix.com tcp
US 178.128.135.33:443 exchange.cootlogix.com tcp
US 35.241.34.106:443 c.4dex.io udp
GB 159.65.211.77:443 srv.buysellads.com tcp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
IE 66.235.152.225:443 starget.bitdefender.com tcp
US 35.190.14.188:443 app.usercentrics.eu udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 51.8.64.151:443 h.clarity.ms tcp
FR 142.250.201.163:443 www.google.co.uk udp
US 34.120.238.166:443 graphql.usercentrics.eu tcp
US 34.120.238.166:443 graphql.usercentrics.eu udp
IE 66.235.152.225:443 starget.bitdefender.com tcp
IE 66.235.152.225:443 starget.bitdefender.com tcp
US 104.18.1.169:443 www.bitdefender.com tcp
FR 142.250.201.162:443 googleads.g.doubleclick.net udp
US 13.107.246.64:443 www.clarity.ms tcp
IE 52.213.61.243:443 ws.hotjar.com tcp
FR 142.250.179.68:443 www.google.com udp
US 35.241.34.106:443 c.4dex.io udp
GB 18.245.220.173:443 aax.amazon-adsystem.com tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
US 178.128.135.33:443 exchange.cootlogix.com tcp
US 178.128.135.33:443 exchange.cootlogix.com tcp
US 178.128.135.33:443 exchange.cootlogix.com tcp
US 130.211.23.194:443 api.btloader.com udp
NL 185.235.87.79:443 ag.gbc.criteo.com tcp
FR 185.235.86.44:443 gem.gbc.criteo.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 104.18.168.222:443 central.bitdefender.com tcp
US 104.18.168.222:443 central.bitdefender.com tcp
DE 37.252.171.149:443 fra1-ib.adnxs.com tcp
US 104.17.158.3:443 api.login.bitdefender.com tcp
US 35.241.3.184:443 api.usercentrics.eu udp
US 104.17.158.3:443 api.login.bitdefender.com tcp
US 35.201.111.240:443 consent-api.service.consent.usercentrics.eu udp
US 104.248.229.159:443 sync.cootlogix.com tcp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 67.202.105.24:443 ssc-cms.33across.com tcp
US 34.120.195.249:443 o4504802466004992.ingest.sentry.io tcp
US 3.209.126.202:443 cs-server-s2s.yellowblue.io tcp
US 3.209.126.202:443 cs-server-s2s.yellowblue.io tcp
NL 89.149.193.100:443 ssbsync.smartadserver.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
DE 162.55.236.225:443 sync.richaudience.com tcp
US 104.18.169.222:443 central.bitdefender.com tcp
US 104.18.169.222:443 central.bitdefender.com tcp
IE 54.78.109.69:443 bitdefender.demdex.net tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
FR 13.37.187.223:443 g.ezoic.net tcp
FR 13.37.187.223:443 g.ezoic.net tcp
US 34.120.195.249:443 o4504802466004992.ingest.sentry.io udp
US 34.120.67.236:443 nimbus.bitdefender.net tcp
US 34.120.67.236:443 nimbus.bitdefender.net udp
US 104.17.107.108:443 flow.bitdefender.net tcp
US 104.17.108.108:443 flow.bitdefender.net tcp
US 104.17.108.108:443 flow.bitdefender.net tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
US 104.18.169.222:80 central.bitdefender.com tcp
N/A 127.0.0.1:57955 tcp
US 8.8.8.8:53 nimbus.bitdefender.net udp
US 8.8.8.8:53 nimbus.bitdefender.net udp
US 34.120.67.236:443 nimbus.bitdefender.net tcp
N/A 127.0.0.1:58001 tcp
N/A 127.0.0.1:58003 tcp
US 34.149.211.227:443 mclb-gcp.nimbus.bitdefender.net tcp
US 34.120.68.241:443 eu.nimbus.bitdefender.net tcp
US 35.190.56.82:443 elb-iow-gcp.nimbus.bitdefender.net tcp
US 34.149.211.227:443 mclb-gcp.nimbus.bitdefender.net tcp
US 34.120.68.241:443 eu.nimbus.bitdefender.net tcp
US 35.190.56.82:443 elb-iow-gcp.nimbus.bitdefender.net tcp
US 34.149.211.227:443 mclb-gcp.nimbus.bitdefender.net tcp
US 34.120.68.241:443 eu.nimbus.bitdefender.net tcp
US 35.190.56.82:443 elb-iow-gcp.nimbus.bitdefender.net tcp
US 34.149.211.227:443 mclb-gcp.nimbus.bitdefender.net tcp
US 8.8.8.8:53 227.211.149.34.in-addr.arpa udp
US 8.8.8.8:53 82.56.190.35.in-addr.arpa udp
US 34.149.211.227:443 mclb-gcp.nimbus.bitdefender.net tcp
N/A 127.0.0.1:58006 tcp
N/A 127.0.0.1:58008 tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
GB 92.123.143.227:443 download.bitdefender.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
IE 66.235.152.156:443 sstats.bitdefender.com tcp
IE 66.235.152.156:443 sstats.bitdefender.com tcp
US 34.120.238.166:443 graphql.usercentrics.eu udp
US 51.8.64.151:443 h.clarity.ms tcp
US 51.8.64.151:443 h.clarity.ms tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
NL 185.89.210.20:443 ib.adnxs.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 34.120.63.153:443 prebid.media.net udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 193.3.178.3:443 pbjs.e-planning.net tcp
NL 188.166.203.175:443 rt.marphezis.com tcp
DE 51.38.120.206:443 onetag-sys.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 167.99.22.253:443 exchange.cootlogix.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 167.99.22.253:443 exchange.cootlogix.com tcp
US 167.99.22.253:443 exchange.cootlogix.com tcp
US 167.99.22.253:443 exchange.cootlogix.com tcp
US 167.99.22.253:443 exchange.cootlogix.com tcp
US 35.241.34.106:443 c.4dex.io udp
GB 92.123.142.97:443 tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
GB 92.123.142.163:443 r.bing.com tcp
GB 92.123.142.163:443 r.bing.com tcp
GB 92.123.142.163:443 r.bing.com tcp
GB 92.123.142.163:443 r.bing.com tcp
GB 92.123.142.163:443 r.bing.com tcp
GB 92.123.142.163:443 r.bing.com tcp
N/A 127.0.0.1:60314 tcp
US 8.8.8.8:53 nimbus.bitdefender.net udp
US 34.120.67.236:443 nimbus.bitdefender.net tcp
AU 40.79.167.8:443 browser.pipe.aria.microsoft.com tcp
US 35.190.56.82:443 elb-iow-gcp.nimbus.bitdefender.net tcp
US 34.120.68.241:443 eu.nimbus.bitdefender.net tcp
US 34.149.211.227:443 mclb-gcp.nimbus.bitdefender.net tcp
US 34.149.211.227:443 mclb-gcp.nimbus.bitdefender.net tcp
US 34.120.68.241:443 eu.nimbus.bitdefender.net tcp
US 35.190.56.82:443 elb-iow-gcp.nimbus.bitdefender.net tcp
US 34.149.211.227:443 mclb-gcp.nimbus.bitdefender.net tcp
GB 173.222.211.41:443 aefd.nelreports.net udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 193.3.178.3:443 pbjs.e-planning.net tcp
NL 185.89.210.20:443 ib.adnxs.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
FR 91.134.110.129:443 prg.smartadserver.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 34.120.63.153:443 prebid.media.net udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 193.3.178.3:443 pbjs.e-planning.net tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 51.38.120.206:443 onetag-sys.com tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 34.149.211.227:443 mclb-gcp.nimbus.bitdefender.net tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
NL 193.3.178.3:443 pbjs.e-planning.net tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 prg.smartadserver.com udp
US 8.8.8.8:53 bidder.criteo.com udp
US 34.120.63.153:443 prebid.media.net udp
FR 217.182.178.225:443 prg.smartadserver.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 8.8.8.8:53 nimbus.bitdefender.net udp
US 34.120.67.236:443 nimbus.bitdefender.net tcp
US 34.149.211.227:443 mclb-gcp.nimbus.bitdefender.net tcp
US 34.120.68.241:443 eu.nimbus.bitdefender.net tcp
US 35.190.56.82:443 elb-iow-gcp.nimbus.bitdefender.net tcp
US 34.120.68.241:443 eu.nimbus.bitdefender.net tcp
US 34.149.211.227:443 mclb-gcp.nimbus.bitdefender.net tcp
US 35.190.56.82:443 elb-iow-gcp.nimbus.bitdefender.net tcp
US 34.120.68.241:443 eu.nimbus.bitdefender.net tcp
US 34.149.211.227:443 mclb-gcp.nimbus.bitdefender.net tcp
US 34.120.68.241:443 eu.nimbus.bitdefender.net tcp
US 8.8.8.8:53 eu.nimbus.bitdefender.net udp
US 34.120.68.241:443 eu.nimbus.bitdefender.net tcp
N/A 127.0.0.1:61068 tcp
N/A 127.0.0.1:61070 tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
NL 193.3.178.3:443 pbjs.e-planning.net tcp
US 34.120.63.153:443 prebid.media.net udp
NL 178.250.1.8:443 bidder.criteo.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 35.241.34.106:443 c.4dex.io udp
US 51.8.64.151:443 h.clarity.ms tcp
US 34.120.63.153:443 prebid.media.net udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
FR 217.182.178.225:443 prg.smartadserver.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 193.3.178.3:443 pbjs.e-planning.net tcp
GB 92.123.142.97:443 tcp
AU 40.79.167.8:443 browser.pipe.aria.microsoft.com tcp
PL 93.184.221.165:443 t.co tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 150.171.27.10:443 bat.bing.com tcp
FR 142.250.201.163:443 www.google.co.uk udp
US 104.244.42.3:443 analytics.twitter.com tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 34.120.238.166:443 graphql.usercentrics.eu udp
US 216.239.32.36:443 region1.google-analytics.com udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
GB 92.123.142.82:443 www.bing.com tcp
FR 13.37.187.223:443 g.ezoic.net tcp
FR 13.37.187.223:443 g.ezoic.net tcp
US 104.21.87.79:443 go.ezodn.com tcp
US 104.21.87.79:443 go.ezodn.com tcp
FR 13.37.187.223:443 g.ezoic.net tcp
FR 172.217.20.162:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 8c02b261faf27d707e84e738e68e54c0.safeframe.googlesyndication.com udp
GB 18.245.143.100:443 tags.crwdcntrl.net tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 oa.openxcdn.net udp
NL 178.250.1.3:443 static.criteo.net tcp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
US 8.8.8.8:53 cdn-ima.33across.com udp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 151.101.193.229:443 cdn.jsdelivr.net udp
US 34.102.146.192:443 oa.openxcdn.net tcp
FR 142.250.74.226:443 ep1.adtrafficquality.google udp
US 104.18.35.167:443 cdn-ima.33across.com tcp
GB 18.245.255.11:443 cdn.prod.uidapi.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
DE 141.95.33.120:443 id5-sync.com tcp
FR 142.250.179.97:443 ep2.adtrafficquality.google udp
IE 54.220.6.201:443 bcp.crwdcntrl.net tcp
US 8.8.8.8:53 120.33.95.141.in-addr.arpa udp
US 8.8.8.8:53 11.255.245.18.in-addr.arpa udp
IE 54.220.6.201:443 bcp.crwdcntrl.net tcp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.179.68:443 www.google.com udp
US 174.138.117.240:443 prebid.cootlogix.com tcp
NL 147.75.34.177:443 prebid.a-mo.net tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
US 104.26.2.173:443 www.mediafiredls.com tcp
US 104.16.53.110:443 otnolatrnup.com tcp
US 104.16.53.110:443 otnolatrnup.com tcp
US 199.91.155.67:443 download2326.mediafire.com tcp
US 199.91.155.67:443 download2326.mediafire.com tcp
US 104.21.87.79:443 go.ezodn.com tcp
US 199.91.155.67:443 download2326.mediafire.com tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 142.250.178.134:443 s0.2mdn.net tcp
US 34.120.107.143:443 oajs.openx.net tcp
US 8.8.8.8:53 134.178.250.142.in-addr.arpa udp
US 34.120.107.143:443 oajs.openx.net udp
FR 142.250.178.134:443 s0.2mdn.net udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
GB 13.224.245.120:443 bucket.cdnwebcloud.com tcp
FR 172.217.20.162:443 googleads4.g.doubleclick.net tcp
US 34.98.64.218:443 google-bidout-d.openx.net tcp
US 104.16.53.110:80 otnolatrnup.com tcp
US 104.16.53.110:80 otnolatrnup.com tcp
IE 34.241.0.126:443 neural40.cdnwebcloud.com tcp
IE 34.241.0.126:443 neural40.cdnwebcloud.com tcp
GB 18.165.227.8:443 woreppercomming.com tcp
US 172.67.141.135:443 www.chancial.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
DK 157.240.200.14:443 connect.facebook.net tcp
GB 163.70.147.35:443 www.facebook.com tcp
DE 51.38.120.206:443 onetag-sys.com udp
DE 51.38.120.206:443 onetag-sys.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 174.138.117.240:443 prebid.cootlogix.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 142.250.179.68:443 www.google.com udp
FR 172.217.20.162:443 googleads4.g.doubleclick.net udp
US 216.239.34.36:443 region1.google-analytics.com udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 142.250.201.163:443 www.google.co.uk udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 142.250.179.68:443 www.google.com udp
FR 172.217.20.162:443 googleads4.g.doubleclick.net udp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 104.17.151.117:443 www.mediafire.com tcp
GB 92.123.142.186:443 www.bing.com tcp
GB 92.123.142.186:443 www.bing.com tcp
GB 92.123.142.113:443 www.bing.com tcp
GB 92.123.142.113:443 www.bing.com tcp
IE 13.74.129.92:443 r.g.bing.com tcp
IE 54.72.204.14:443 pixel.everesttech.net tcp
GB 173.222.211.34:443 www.adobe.com tcp
GB 173.222.211.34:443 www.adobe.com tcp
US 104.18.32.195:443 adobeid-na1.services.adobe.com tcp
US 104.18.32.195:443 adobeid-na1.services.adobe.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
GB 184.26.56.177:443 geo2.adobe.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
GB 23.59.171.11:443 use.typekit.net tcp
GB 18.172.153.29:443 prod.adobeccstatic.com tcp
GB 18.172.153.29:443 prod.adobeccstatic.com tcp
GB 23.59.171.11:443 use.typekit.net tcp
GB 18.172.153.29:443 prod.adobeccstatic.com tcp
IE 34.250.67.152:443 cc-api-data.adobe.io tcp
IE 34.250.67.152:443 cc-api-data.adobe.io tcp
GB 173.222.211.34:443 www.adobe.com tcp
GB 184.26.56.177:443 geo2.adobe.com tcp
US 104.18.86.42:443 cdn.cookielaw.org tcp
GB 18.239.236.21:443 client.messaging.adobe.com tcp
GB 18.239.236.21:443 client.messaging.adobe.com tcp
GB 18.239.236.21:443 client.messaging.adobe.com tcp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
US 104.18.86.42:443 cdn.cookielaw.org tcp
GB 18.239.236.21:443 client.messaging.adobe.com tcp
IE 66.235.152.156:443 sstats.adobe.com tcp
IE 66.235.152.156:443 sstats.adobe.com tcp
US 35.153.197.106:443 server.messaging.adobe.com tcp
US 35.153.197.106:443 server.messaging.adobe.com tcp
US 8.8.8.8:53 www.everestjs.net udp
US 8.8.8.8:53 14257-contentmetadata.adobeioruntime.net udp
US 8.8.8.8:53 cdnssl.clicktale.net udp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
GB 13.224.222.69:443 api.demandbase.com tcp
GB 23.214.134.39:443 www.everestjs.net tcp
GB 54.192.137.113:443 14257-contentmetadata.adobeioruntime.net tcp
GB 18.165.242.47:443 cdnssl.clicktale.net tcp
IE 54.72.204.14:443 pixel.everesttech.net tcp
GB 18.244.114.79:443 tag.demandbase.com tcp
US 8.8.8.8:53 cdn.pdst.fm udp
US 8.8.8.8:53 sc-static.net udp
GB 2.19.248.89:443 analytics.tiktok.com tcp
GB 173.222.211.50:443 snap.licdn.com tcp
US 151.101.66.132:443 pt.ispot.tv tcp
GB 23.53.175.107:443 servedby.flashtalking.com tcp
US 35.244.142.80:443 cdn.pdst.fm tcp
US 3.163.248.4:443 sc-static.net tcp
GB 23.53.175.107:443 servedby.flashtalking.com tcp
US 13.107.42.14:443 px.ads.linkedin.com tcp
US 8.8.8.8:53 79.114.244.18.in-addr.arpa udp
US 8.8.8.8:53 50.211.222.173.in-addr.arpa udp
US 8.8.8.8:53 89.248.19.2.in-addr.arpa udp
US 8.8.8.8:53 132.66.101.151.in-addr.arpa udp
US 8.8.8.8:53 107.175.53.23.in-addr.arpa udp
US 8.8.8.8:53 80.142.244.35.in-addr.arpa udp
US 8.8.8.8:53 4.248.163.3.in-addr.arpa udp
IE 52.50.19.120:443 dpm.demdex.net tcp
IE 54.171.68.127:443 d9.flashtalking.com tcp
US 35.186.224.24:443 pixels.spotify.com tcp
US 35.190.43.134:443 tr6.snapchat.com tcp
US 35.190.43.134:443 tr6.snapchat.com tcp
IE 63.33.52.224:443 c.clicktale.net tcp
US 34.200.199.99:443 q-aus1.clicktale.net tcp
US 35.186.224.24:443 pixels.spotify.com udp
US 35.190.43.134:443 tr6.snapchat.com udp
US 104.126.119.80:443 analytics.pangle-ads.com tcp
FR 142.250.201.166:443 9212252.fls.doubleclick.net tcp
FR 142.250.201.166:443 9212252.fls.doubleclick.net tcp
US 54.208.196.179:443 k-aus1.clicktale.net tcp
FR 142.250.201.166:443 9212252.fls.doubleclick.net udp
US 3.221.57.65:443 srm.bf.contentsquare.net tcp
US 54.208.196.179:443 k-aus1.clicktale.net tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
IE 54.72.204.14:443 pixel.everesttech.net tcp
US 104.18.32.77:443 auth.services.adobe.com tcp
GB 184.26.57.29:443 assets.adobedtm.com tcp
GB 184.26.44.174:443 s.go-mpulse.net tcp
GB 173.222.211.10:443 s7d1.scene7.com tcp
IE 66.235.152.156:443 sstats.adobe.com tcp
GB 173.222.211.43:443 wcs.adobe.com tcp
GB 173.222.211.43:443 wcs.adobe.com tcp
GB 173.222.211.43:443 wcs.adobe.com tcp
GB 173.222.211.43:443 wcs.adobe.com tcp
GB 173.222.211.43:443 wcs.adobe.com tcp
GB 173.222.211.43:443 wcs.adobe.com tcp
GB 23.200.208.174:443 c.go-mpulse.net tcp
GB 23.59.171.26:443 p.typekit.net tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
FR 216.58.213.66:443 googleads.g.doubleclick.net udp
FR 142.250.178.134:443 s0.2mdn.net udp
IE 34.250.67.152:443 cc-api-data.adobe.io tcp
IE 34.250.67.152:443 cc-api-data.adobe.io tcp
IE 34.250.67.152:443 cc-api-data.adobe.io tcp
IE 34.250.67.152:443 cc-api-data.adobe.io tcp
US 104.17.208.240:443 zn3n5vyia1vy8b4ly-adobe.siteintercept.qualtrics.com tcp
US 35.190.43.134:443 tr6.snapchat.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 74.125.34.46:443 www.virustotal.com tcp
US 74.125.34.46:443 www.virustotal.com tcp
FR 172.217.18.195:443 www.recaptcha.net tcp
US 216.239.32.36:443 region1.google-analytics.com udp
US 74.125.34.46:443 www.virustotal.com tcp
US 172.64.154.167:443 www2.bing.com tcp
US 172.64.154.167:443 www2.bing.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 216.58.213.66:443 googleads.g.doubleclick.net udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 228fefc98d7fb5b4e27c6abab1de7207
SHA1 ada493791316e154a906ec2c83c412adf3a7061a
SHA256 448d09169319374935a249b1fc76bcf2430b4e1436611f3c2f3331b6eafe55a2
SHA512 fa74f1cc5da8db978a7a5b8c9ebff3cd433660db7e91ce03c44a1d543dd667a51659ba79270d3d783d52b9e45d76d0f9467458df1482ded72ea79c873b2a5e56

\??\pipe\LOCAL\crashpad_4240_NEKWGORNAKJYPORT

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 026e0c65239e15ba609a874aeac2dc33
SHA1 a75e1622bc647ab73ab3bb2809872c2730dcf2df
SHA256 593f20dfb73d2b81a17bfcc1f246848080dfc96898a1a62c5ddca62105ed1292
SHA512 9fb7644c87bdd3430700f42137154069badbf2b7a67e5ac6c364382bca8cba95136d460f49279b346703d4b4fd81087e884822a01a2a38901568a3c3e3387569

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e139e3779e6d073d60f673b9c0a9a0d3
SHA1 9a591c2ca83655524d7dd373a784cfbdaeb3a834
SHA256 d1785c40d1b4258966ad629d2308efa6fe4f4efcd4e1c41aa3bf07da761e8c52
SHA512 ee74a5bcd2e15b795bde2599ee8e61b71649d0bd1a324ae104f38590d40222c018368ea9f0df8ebd58db3d6b88e1a1d97871dd0ea6168b6b8b099bdae6b9126b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 3d7096867c8203b183372ab5940a2872
SHA1 89957c49f050c99834136efc7c3f057831dd5ef9
SHA256 f61fcae1ec9b9802e2e8a892fba4f6a0df4a33a05b18bb21cff31f651a982acd
SHA512 0c81285fddcf56ff7526cbd17bd9eba7d316106f1afc1abdfb05103faa5c8b4db564ecbc16c234a476597ba2e859edd700728230cd65c7d4f318b6acdfea0b1e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 dafc9fefce37d84f3f2d37223e4b7fcf
SHA1 660b429af85a9f4cfb4ac842144f51d7379a21f7
SHA256 f1eb5b73be18e37795cf2ca3203991df88c8363931ced1e296cf7aceebce8777
SHA512 ba591f6098c9bb17e732e573951937e70d8081d3c0c019067e749de252768967f14faa2ecad142f6881f45a96243aa072da60f3f7a99cfa7ef278876caa689ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fadd99a1a56d4762676e604a40e59f68
SHA1 e3d4ac7eca79ba129bf2ed20cd2aff1e6d23f77f
SHA256 b08e001631df450410bc6685a2c4336bea35796eb2e6e0d85fa351f1f29a3137
SHA512 d39b18bb9ed91beb86b5a67d7732b190be7dad1ad11a6ccb2c05b31f5689435ad74cd07a14c7e44ddd0278e88dc20a79a0c1937123a297ed720a46dc950811b3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580de6.TMP

MD5 f0c6b4607550ef020eb358113847f8d6
SHA1 120565b477a4c1a5737e4f21b6bddffd91e48bb3
SHA256 f435624159ae49dbaa12aa16202c1be0107ac3f8352409ecacfffc7fded90702
SHA512 7cc92f5b222e6713537c1e876f4c9c45113cd2406b64fa44b22a5d51e7ee5a6f635eb490e08f747b51bcb01d7166edce7854addf149e969d463679c28e664218

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 153cd44b76f574ed6ffefd9a1adb24e1
SHA1 03837c8cd548974fd6e766004ea7b4681ff6ee92
SHA256 e7329f7cc91080a4efbc7413083c6457825de46dd720c5549317f0706bf59a8b
SHA512 611855f71d50d2fd3f624399e18c5c5f0e2d4c432ffdd33e0acc6002bf62cbc6c793a7f080af9deb39bbe39cf2886151d3dd4a61b69a2e6742f0eeb540ed4aea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e2b7586ceffbe266bd777848e23bf25b
SHA1 7e22212d25d413cc0b9f5dc63e83a5b290f5204c
SHA256 74d8f100851012bfe62bde6cda556bd0e622448b44a87228dffd675abc9b4291
SHA512 b5044fa6d0891c3bb8c966af52f0ad6afdc805da03b98260552c745f287019105c0f983187f6d2a8b0823e47763b19918331bda03c278ba745bd6394e4731e02

C:\Users\Admin\Downloads\Unconfirmed 500194.crdownload

MD5 d21bf3852bb27fb6f5459d2cf2bcd51c
SHA1 e59309bbe58c9584517e4bb50ff499dffb29d7b0
SHA256 de9c4e8b4b0c756eee4e39221c1e4e0e11c2e67effb828e27de3c4b4470ccff2
SHA512 17bc7740f131a1d4e84fd7e4ab5e1ce510660f5046340ef6d09ef99c56c88da2b6be3ae5c5ddb7213841c506eaec147c65abba1a7a2a8eb4fb8f6329bbaa03d1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8a8a51c6b6b773c4e70152c4f2ca3bab
SHA1 a179e026f8ac25efbc072396787f6b96230a527e
SHA256 65527dd72cdb34bf2243da98cec551eb3b63724c195280e497f1aa470b167b37
SHA512 4bc4160a36ad7455e9cb7db9dfb21eb6e415b56ee440481ba261cf837db6eae78ae4cc4202c272d7f7271bfcc97f4dd2f08626e337b633e98816afff6a16e794

C:\Users\Admin\Downloads\MBSetup.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 215a6df8871dcd37e0b315ed8cd1010b
SHA1 e44adf167e1bdcc84298b0f665ace749194ce09c
SHA256 d48eca6c027d85938daa40b478ec27500d2256e74c59c411c33f404af3ebfcbd
SHA512 81b7e31cfd6693e93c62001d74e95dce42e08aded923342ae4fd1d5286fbc2475b761cbbe630afebf147dbcfd74bc27b4ebb83aa702b3613be87b1a6cec1a972

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 51aab25ae5b5b62685628a7a041c54a7
SHA1 bddaa7e0c3f9c7fec0990613035c2f256e3bab91
SHA256 4cb15547ad1fb6caa605f8acfb80059083658abca57801e62898d5c597294732
SHA512 cf9cce378f7478fe1745f10236b76c6b952af71496e7e0fb55ee6376679bc16fdc2fa16360a63e18250585b653e04d0c194f040a9dc6ff4f88c4dc441a146078

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 fdd60e0c7277756b609d747bced1378d
SHA1 62875a485364b5d504f2c9757a52c8bebbe02aaa
SHA256 483411d2f282d646a98c95eba52b700099785413681f3ac771772413abbb1374
SHA512 72ca33fe9bf7fcc2fedc7822d0b5734fffd566e2bd7191b4a0bc45429beae2581d9bed06905f0f40412783a6afee3e43dd64b9bf0a63df2a52fc21c1d728b3a5

C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe

MD5 4dc92b52e48b9a7e209307def43f0fa4
SHA1 ba0640d5afd2d5b07fdfca4d2a37a1208bda1b94
SHA256 461727e42566cd84e4161d5332131956041e02e3d81cfec07c22862fa4b6d3d4
SHA512 cb1b2f63befed99c26a5f4912f5e9e7a315f75414097e66a2c2768573425129d18245e515d2bf38e352eefd78d0e61407d43a09993edf0aec6e2ff7c296d0d8d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 fefac67584467809a75f221039906ab0
SHA1 ca8c64952d5e620bf93061e109f7553e909851ca
SHA256 36d8f871179e811f1377a8a8e9201f2e3e39d8770e48d7ab7d2f841c95b91a83
SHA512 03ae44bf80f791402e143f5d02aabb5f8954bb3abb170a811b0798002e048cbecfdb86030b7ceaeec5a3ea578eba7ba1cb0dcbc148d167d403ac044458a136a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4da7235bc53ae98e200faa03970edd85
SHA1 df3fae423707f0a7fed9607b484aa332df525a6b
SHA256 9cc1fc29775cf37f2114750a5e6383b3049a5b95dd1b8c03ff22b30181296877
SHA512 d16441dcb1eab711d3c4ffb86cc68094b5887d1eab007f17c131b94ff8e6f9e0d3d4471722e0b84eeeb9312f5338e1480217879d3e4b20823663e6b58d3247f3

C:\Windows\Temp\MBInstallTempdacfb02b63d711ef98d9629b311473a6\7z.dll

MD5 3430e2544637cebf8ba1f509ed5a27b1
SHA1 7e5bd7af223436081601413fb501b8bd20b67a1e
SHA256 bb01c6fbb29590d6d144a9038c2a7736d6925a6dbd31889538af033e03e4f5fa
SHA512 91c4eb3d341a8b30594ee4c08a638c3fb7f3a05248b459bcf07ca9f4c2a185959313a68741bdcec1d76014009875fa7cbfa47217fb45d57df3b9b1c580bc889d

C:\Windows\Temp\MBInstallTempdacfb02b63d711ef98d9629b311473a6\dotnetpkgtmp\shared\Microsoft.NETCore.App\6.0.28\mscordaccore.dll

MD5 3143ffcfcc9818e0cd47cb9a980d2169
SHA1 72f1932fda377d3d71cb10f314fd946fab2ea77a
SHA256 b7fb9547e4359f6c116bd0dbe36a8ed05b7a490720f5a0d9013284be36b590b7
SHA512 904800d157eb010e7d17210f5797409fea005eed46fbf209bca454768b28f74ff3ff468eaad2cfd3642155d4978326274331a0a4e2c701dd7017e56ddfe5424b

C:\Windows\Temp\MBInstallTempdacfb02b63d711ef98d9629b311473a6\servicepkg\MBAMService.exe

MD5 2d49262ee00ca948aefc1047d65bca56
SHA1 ae60524cd5d0fc2e8f32b38835667871747db3fb
SHA256 6931bb215c086739a7b2ab089a8bd9cd4b2acbb9f44a32ec1b420f216f6ff782
SHA512 d069d4f20d69aa102438f1779f6222cfef7967733cce8d744bf6121e8e22bfc8dee4ee6887cf13e17ea173a0db4c52e3009fe85b861f5c7622294b63b366877a

C:\Windows\Temp\MBInstallTempdacfb02b63d711ef98d9629b311473a6\ctlrpkg\Malwarebytes_Assistant.runtimeconfig.json

MD5 d94cf983fba9ab1bb8a6cb3ad4a48f50
SHA1 04855d8b7a76b7ec74633043ef9986d4500ca63c
SHA256 1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a
SHA512 09a9667d4f4622817116c8bc27d3d481d5d160380a2e19b8944bdd1271a83f718415ce5e6d66e82e36819e575ec1b55f19c45213e0013b877b8d61e6feb9d998

C:\Windows\Temp\MBInstallTempdacfb02b63d711ef98d9629b311473a6\dbclspkg\MBAMCoreV5.dll

MD5 65a49aa18cfaa688a43a62e2821fbd77
SHA1 2ff08fd8149e1202e580dad63f7ac1fe3130464e
SHA256 7dc3f946efc0cba5e4e6285bb0c77c20e04ae473f41ba58ac1a7ee539168e6ee
SHA512 4e0a6c1491f398ad9ed4a0004b0e6e0c6a29693f7c225d93d567ad356a9a6423b35cafe2ae5dbd8bdce9b034b35055ec1c3e5248a09a3a209116ed1f7e62aea1

C:\Windows\Temp\MBInstallTempdacfb02b63d711ef98d9629b311473a6\servicepkg\mbamelam.inf

MD5 c481ad4dd1d91860335787aa61177932
SHA1 81633414c5bf5832a8584fb0740bc09596b9b66d
SHA256 793626d240fd8eefc81b78a57c8dfe12ea247889b6f07918e9fd32a7411aa1c3
SHA512 d292e028936412f07264837d4a321ecfa2f5754d4048c8bcf774a0e076e535b361c411301558609d64c71c1ce9b19e6041efa44d201237a7010c553751e1e830

C:\Windows\Temp\MBInstallTempdacfb02b63d711ef98d9629b311473a6\servicepkg\mbamelam.cat

MD5 60608328775d6acf03eaab38407e5b7c
SHA1 9f63644893517286753f63ad6d01bc8bfacf79b1
SHA256 3ed5a1668713ef80c2b5599b599f1434ad6648999f335cf69757ea3183c70c59
SHA512 9f65212121b8a5d1a0625c3baa14ef04a33b091d26f543324333e38dcdb903e02ccc4d009e22c2e85d2f61d954e0b994c2896e52f685003a6ef34758f8a650c7

C:\Windows\Temp\MBInstallTempdacfb02b63d711ef98d9629b311473a6\servicepkg\mbamelam.sys

MD5 9e77c51e14fa9a323ee1635dc74ecc07
SHA1 a78bde0bd73260ce7af9cdc441af9db54d1637c2
SHA256 b5619d758ae6a65c1663f065e53e6b68a00511e7d7accb3e07ed94bfd0b1ede0
SHA512 a12ccf92bead694f5d3cba7ff7e731a2f862198efc338efc7f33a882fe0eb7499fb3fb533538d0a823e80631a7ca162962fbdfd78e401e3255672910b7140186

C:\Program Files\Malwarebytes\Anti-Malware\srvversion.dat

MD5 8c32f17ad9b09f0f9e95390183d75c39
SHA1 e5a6aa1a94e2c94e57e2eb8e947aecc53c49a571
SHA256 f1dd5650648c79ed2c558113656944e34275506d964d34107d29a97a1ede6f9c
SHA512 081496d83a8db051f3f6165170f84e2287c6ec70d53934c0989d1106a44c7ac4e4e2826d777ed3f420d1ccf19e02c9df2c7a1cb1cd6db37d27d64ab6689e5b89

C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe

MD5 443e1483abff9e0fe2bc36fe44acc4db
SHA1 b78e88c08d726998f112e7bdf1dcf228a644ca8a
SHA256 18cc6f7f2f6f244298d448dae17869035b0044caa5eb9688d98b68419f4ea841
SHA512 654985f6906a6579402f5c93ccb1e15c1af5e0ed2a6f8c4bd0cd1b6b03a1d4eeda4a39ee0ede145ab7d1deb37472566ff128cfd0ae28a4cd6b58e1742cef4207

C:\Windows\Temp\MBInstallTempdacfb02b63d711ef98d9629b311473a6\ctlrpkg\mbae64.sys

MD5 95515708f41a7e283d6725506f56f6f2
SHA1 9afc20a19db3d2a75b6915d8d9af602c5218735e
SHA256 321058a27d7462e55e39d253ad5d8b19a9acf754666400f82fe0542f33e733c6
SHA512 d9230901adeecb13b1f92287abe9317cdac458348885b96ef6500960793a7586c76ae374df053be948a35b44abe934aa853975a6ccd3788f93909903cc718c08

C:\Program Files\Malwarebytes\Anti-Malware\ctlrvers.dat

MD5 4438f430d06fed3de9bfcb24699c192b
SHA1 778071f337857fc138d8f6c47f35a312021ee169
SHA256 a70023ca1b8d2bc9fc66f9425093ce987dab86b87e9471f6462c8efe7dec12c7
SHA512 fbd7f4ca807221924679aa932403be9408c1b6197419682edfab03fd76fc33c9babe3d58bc52066dc2237b4efc528b7bc83b201a3c80c20d29046933e3720c14

C:\Program Files\Malwarebytes\Anti-Malware\version.dat

MD5 57e2149ef0cfb50c6422325dad963d54
SHA1 f295372815c65d3c0379946811a97314d73740d4
SHA256 fea27179530208cbfd5095efaf17c453755b3c8d184e725960a9e96587012f99
SHA512 34e028436f124278014e18fb295d2ab651514e397a664a6b1b3085dd63e4fe1805918967cf357aaf0f571b8fb501291c2158d95fb237ab0ef1c03838e3a26ea7

C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json.bak

MD5 e99e37a18f587596d8d3db1edcd2aaa6
SHA1 8db8052ec48e9aed1e0f3b3cc291325959c2b441
SHA256 c7a59d8e29e3229803664c4f0fba7ce1b450e4b6042fc4062a69421169127227
SHA512 b0f33ed30182286c4e7bfdaf5689944ceb16639c747ea336fbdd23c36e21626a670a7f74302a1f04f1162289fabb72bad87262bdd5199a06a4ffadb208b3c750

C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe

MD5 46f875f1fe3d6063b390e3a170c90e50
SHA1 62b901749a6e3964040f9af5ddb9a684936f6c30
SHA256 1cf9d3512efffaa2290c105ac8b7534026604067c9b533e7b7df2e017569a4ec
SHA512 fdfb348061158f8133380e9a94215f4bfc0f6ce643a129d623cb8034c49144f1489de56cd076da645478506d9fbddc7590fe3d643622210084b15fdf0d16b557

C:\Program Files\Malwarebytes\Anti-Malware\mbtun.dll

MD5 2bbf63f1dab335f5caf431dbd4f38494
SHA1 90f1d818ac8a4881bf770c1ff474f35cdaa4fcd0
SHA256 f21a980316bd4c57c70e00840ab76d9ad412092d7d2d6a2cff4f1311f7c05364
SHA512 ebb9834323329dc01ba2c87e5fad1083a4cb86f5ed761cb63299ac5336a9843a1aadd42fbed706797c2295117af1c00f96806422338352653c8e0255fecc2fd5

C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf

MD5 5d1917024b228efbeab3c696e663873e
SHA1 cec5e88c2481d323ec366c18024d61a117f01b21
SHA256 4a350fc20834a579c5a58352b7a3aa02a454abbbd9eecd3cd6d2a14864a49cd8
SHA512 14b345f03284b8c1d97219e3dd1a3910c1e453f93f51753f417e643f50922e55c0e23aab1d437300e6c196c7017d7b7538de4850df74b3599e90f3941b40ab4a

C:\PROGRA~1\MALWAR~1\ANTI-M~1\mbtun\mbtun.cat

MD5 8abff1fbf08d70c1681a9b20384dbbf9
SHA1 c9762e121e4f8a7ad931eee58ee60c8e9fc3ecb6
SHA256 9ceb410494b95397ec1f8fa505d071672bf61f81cc596b8eccd167a77893c658
SHA512 37998e0aee93ff47fe5b1636fce755966debe417a790e1aebd7674c86c1583feef04648a7bc79e4dedaabb731051f4f803932ac49ea0be05776c0f4d218b076f

C:\PROGRA~1\MALWAR~1\ANTI-M~1\mbtun\mbtun.sys

MD5 83d4fba999eb8b34047c38fabef60243
SHA1 25731b57e9968282610f337bc6d769aa26af4938
SHA256 6903e60784b9fa5d8b417f93f19665c59946a4de099bd1011ab36271b267261c
SHA512 47faab5fff3e3e2d2aea0a425444aa2e215f1d5bf97edee2a3bb773468e1092919036bcd5002357594b62519bf3a8980749d8d0f6402de0e73c2125d26e78f1e

C:\Windows\System32\CatRoot2\dberr.txt

MD5 79d53f448d8403bd7de3629f7bd340a6
SHA1 92133b8ded6324670b8ba1c22a67484daec379db
SHA256 c10694854a92b77ebc063d190b98447124de9011ba21e4d570034338efdcb4c6
SHA512 fad4a9103687586789905aede45591e2cf0ce47e8c8adb8b2e68cd5c79db24b0f2bfcc0cf168560e497045f22fe8cf27b60df118400246d20265c1b0842e79f6

C:\Program Files\Malwarebytes\Anti-Malware\offreg.dll

MD5 2ccb84bed084f27ca22bdd1e170a6851
SHA1 16608b35c136813bb565fe9c916cb7b01f0b20af
SHA256 a538caf4ac94708ddb4240d38b1b99914ca3e82283f0d8a2290be28fc05eaccb
SHA512 0fd66d241bdebd0052f4972e85b42639e3c5a40affe23170b84bc4068dff8e84446898a77ebf7cc0bef97454abb788faccce508a68bc5e717980ef26d8436986

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll

MD5 03d6455dc6934a409082bf8d2ce119d5
SHA1 995963c33a268a7ed6408c2e6de1281e52091be2
SHA256 82ca2aec64fe151efd59a838c1845111bfb9f94ff277be3afae4e3f684ef3a62
SHA512 a0ff71bc01a11c9a95c1a0186a7bbfec9c3f84d7e600d0bca877934fa5f84053627bc59bb355f53ce9e3c9e4c6a841b8f5cb7436fe7f43b63426a8a851392c6d

C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json

MD5 a74fce0f5a626114614bb8976eb937c5
SHA1 1f40f220dfd2c2677db65fb7f8c459c0f8aad49c
SHA256 c9b5aad2cb8ce4026f05a70d175c9087197cc0c0aad00c223cce8caf8dc703c9
SHA512 24a3b13dc03b2383550ec5b63af1ac45d9a4603abe402717b1cd0053c0c2289ef2a7846131cbf39f7f5c21d08041865a3af693bcf78930d47901abad6396f500

C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll

MD5 b7e5071b317550d93258f7e1e13e7b6f
SHA1 2d08d78a5c29cf724bc523530d1a9014642bbc60
SHA256 467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064
SHA512 9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\LicenseControllerImpl.dll

MD5 1104d30bc3a2168af06974d91fe19b6c
SHA1 0adc46f39c7fe3b1632913baf6830e3eee65be49
SHA256 8fa8305650bd8ad0f28ba9e41a525334b8ed1fe58498c4318e95cf968607d992
SHA512 c55c8a71eecb2c8d2e74f2c735b308649046e7040b5934657c05f5c7c6c12c2d2d36c163c72888c69530d3730a185a46991b613c7dd78770034f40fd01663b26

C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

MD5 5ac30635316f426be417e82a7febfcda
SHA1 51da4748b91121f905bcec2d66c0de104cf2b1cf
SHA256 f34cf4d9c015266858a823e0059bf3459b8623a01bfee197abd6f89ce7f2adbc
SHA512 ad6a3d4d6b56d616d71026bf574b1789718cfd208bbb1ba39313cda5cb4d5a19d25d67c18d266ecdd874b0443b6e4e2c7c1b2d9e7095d33e45945f6876dff17f

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\UpdateControllerImpl.dll

MD5 26e2306862a3e09489e224b8c7c08b4a
SHA1 31b054b957d27ea4b2e3270ebfe7cf62e32890f8
SHA256 c8aca420097260a96d04398a90f7c346f0b1abf94a44ffa539050e4dd06259f0
SHA512 604c980476b386d5efad2ed273a840fb92dc40bcbee78c9f2fe9d300437978c8b47b2d44e903b43c3b1127c276fbf58fd823342850e6d3effc038acb0f6b1202

C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

MD5 326a0b6dcf2f3138b73e9b714bc70dca
SHA1 0e3825479c5fce7572fc1b32d6ffd90b2ff4a084
SHA256 5bbd4e4da6693175819e20574e1d16028515d45cf214616f3d777adc677f92b0
SHA512 25b6392aa414d1e1e7d79024f5409765010ccad83fe266a56afa9a6a0751fea4a473e7224454ee2f7059bd034b26082db5201274c58897e70b60852cf87bd561

C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\pkgvers.dat

MD5 43a1e2249f0fbc3526eccefc69d42fc7
SHA1 2d95cb5f7c4df3559c575c2f1078387ae7c21da4
SHA256 bceb8325d8a8b66909fc10a1b0fbd61f740ba1264db0b129eeb3b6f94b9b7827
SHA512 55c381377b4b82eb60f0f4faccb1a55f76dfc6dcd820069ae0b99b2de1b5e9750a3b2b870f572655cc7493b061628cfc2133417cec13da0cccc6d715aa48fc8e

C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak

MD5 f81cc527911dec393a1e2773d9878986
SHA1 20bc23ad53726549b66ffa042d8fc581d122ca7a
SHA256 bbe58e7e646f555685a7e84a2a7089e8a83d6b9176326072de05718be94f344d
SHA512 77544e34ee9f189b3b617faf956c2fd35b27941970667c6f83f24d2d5c72621a3a48dc9aa4f964183920b6d69df70081de4e07512b72b85715c160bee11ef1ca

C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak

MD5 50ae9c1e327770ce872ed870ef5a6117
SHA1 8471c4a3f8edce8a4681699180d137932f3945bc
SHA256 8047898d15549cab4db11e54a0112341bcf274943b37ff981b3b3e111e44e1e8
SHA512 e5f3b8ef2e3bee80b1b43dcffb3d03dabf36ce66a063617d1db04dfa84c7bf7167c24c5cc756082bbcdfb51c092824e911c4a6fc06af32ce4588d8f07d88a495

C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak

MD5 ac87cb24c651f8bc37610a4d2ca33548
SHA1 c212bcd3e0265c45f406f1fe246b566c7af4bbb4
SHA256 f00948506dc36bc35590f8fa377c4d778bc1e6fd70053c186cee22c63a8a86b8
SHA512 be6b7ca98f47de29f7a16068d1a90143d28c4a706a27ea65e3b8b0b2583a2d17a6ab97bbc48c0392d779fb98ddc0974985b50136d7347a2b042aaaa4b3f7aed3

C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak

MD5 d65c6d81824095f694af0bc599d6c705
SHA1 71258af68be433976e1e8a55ae39479f379d0b28
SHA256 88c1fa84612d9bada271ac0a238b137cdb4034ae4104c3a71db8060ad3b4a15f
SHA512 98d515a289a55d0c706f64b604275e9e36f3b68dcae7de320ee8bf6b125794b37a908d6fb5fec21956b10a2a47892698128fe184cdb1946280aed64da3b56a33

C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

MD5 79c20832a6540556b9dd12f8fb1f997c
SHA1 a4a0f2bde4599ea0aa7bb7f4e4dd4466503a567f
SHA256 7f6d43c4e245f92ac734ee3c466cee27b1f8f970c24c5850cfe9da1aa002b764
SHA512 9f53a83fd2131352443536b40be057373b378621c5ff47d34ede4029724003971bf517f5d6c693e36afdae5824cff7ed40489560ea0c3e54ff6a13dc509a926d

C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\rdefs.mbdb

MD5 2f7423ca7c6a0f1339980f3c8c7de9f8
SHA1 102c77faa28885354cfe6725d987bc23bc7108ba
SHA256 850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55
SHA512 e922ac8a7a2cde6d387f8698207cf5efbd45b646986a090e3549d97a7d552dd74179bd7ac20b7d246ca49d340c4c168982c65b4749df760857810b2358e7eb69

C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\prot.mbdb

MD5 546d9e30eadad8b22f5b3ffa875144bf
SHA1 3b323ffef009bfe0662c2bd30bb06af6dfc68e4d
SHA256 6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f
SHA512 3478f5dcf7af549dd6fe48ad714604200de84a90120b16a32233b6d44fa7240f5f4e5fe803f54b86bbdfd10fa1bfdd88fb85eb6a78e23e426933f98d0a2565ec

C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\clean.mbdb

MD5 ff3dc89a626c0202aedddd2c5335c8e3
SHA1 61b10c86a6d653924aa6cf4c244aaa34ad271d73
SHA256 3d517a57185e9b703abc0d6abe68dadbb9254864de80e245e4811c05aae3f5d2
SHA512 b2edbbf7b049fe31e04db4b843a1cd2355aa18bcb3d773ade3cebb3654ba635ea8edb1bc7cfeb5ee88558273f8cf20bc8347b4f584c65e204e18f9457130819e

C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\mbdigsig2.dat

MD5 ca9aac83b4b15bd3d48cf3013571bac3
SHA1 8388f0e0a72721b40427e5b917352c76d24589b3
SHA256 e7cf41a7e27de5a84d4d289e3eab6242fc4e8320194b2ecde2443f879ad62233
SHA512 6380cb2b4d03334cf71b03c8dafbb32bb080c33757325261c72efa09c053626c762b6c6b14443f27bc76012c04f7c0135e2c072210594d133caeafa2c54cec0c

C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbmanifest2.dat

MD5 73bf09025247c9a2fcf1280c626ecb1d
SHA1 f2f64fe26ec32a3fcb9ab340e5a153b374a76ac7
SHA256 fdd5fce21f1aab312e96034ffc5e6605d8853187761eecd70fc88b9be2cbd994
SHA512 b9348fe12918985057de500e0aa340f9b2036d06f618906d095273c0eafd15c0fc1ed66833a3638887de69c05338eb50a3d2bd9c999b1dc651c8c929365e7087

C:\ProgramData\Malwarebytes\MBAMService\lkg_db\rules.mbdb

MD5 6bbf716ca9a74b275412b5bf1034f0a2
SHA1 d1436976cf7db9c34b3bf102a8f69dbbceb7549a
SHA256 e79bbf9c27955ff423e40b6d37f6bdfc5fefe5d032adb30bffa39cfd88d1419c
SHA512 dc84d09a119be9770e01dc5545277af62358975c11e2a0cca211294f4e58b1d46d9f9fbf0d00a183aeba05ead506b3ca5bf5ba5eefee959f2bcf400a7f84b064

C:\ProgramData\Malwarebytes\MBAMService\lkg_db\scan.mbdb

MD5 960f876ee3400e62925a0d7623f0d28f
SHA1 8c13f797301e74d4b61416859f1afa7c40d2162f
SHA256 764a7ca550aae8fb916b86f88a8dd4c14ef7a6ff13c83f6ca7b05b108ef46857
SHA512 e4fb88a99a7651473a5b389ebe9e88e5f38aa0eadde9a6e6468aadeee1e382727340ebcee9d41a4ace0296ec03645eacba64b5ea2d89d8c2ea1ea0f7e6299e9b

C:\ProgramData\Malwarebytes\MBAMService\lkg_db\tids.mbdb

MD5 3706d1fbcd122c3d48d1160ffe14fbb2
SHA1 11ad6580789083414c3ebcd116eec3dfc1a15dce
SHA256 eddebb4a8afa2a5e42473fe545d260bbbbfe8cac3da5d8b762a9bbb35589194a
SHA512 dca9a0abbd115e61abde73c9fce0df0b9bca2a552375a7b5e7b4f989098ad1140db3cbaa0e913cde8a8a8f71e8cc4817364d6308e4acf6ac453a7f9720a3fe53

C:\ProgramData\Malwarebytes\MBAMService\lkg_db\wprot2.mbdb

MD5 2a5168d0ed0e13a6626448c29ad47bd7
SHA1 8007706cb91c8b96ff677732006fe2c9c4e89183
SHA256 a229d65bca337efbd326e49c408c9689527265aed6ca95eebad15487d47fd81c
SHA512 411461d4c613af026a10a5d84eb29be616d59e0c8d2ad0f684a75d4f9888c6b501d0b1be3c319201ff0a87b799ef27082740849e39e8e96b63d5e8494b84754d

C:\ProgramData\Malwarebytes\MBAMService\lkg_db\dynconfig.dat

MD5 10f23e7c8c791b91c86cd966d67b7bc7
SHA1 3f596093b2bc33f7a2554818f8e41adbbd101961
SHA256 008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc
SHA512 2d1b21371ada038323be412945994d030ee8a9007db072484724616c8597c6998a560bc28886ebf89e2c8919fb70d76c98338d88832351823027491c98d48118

C:\ProgramData\Malwarebytes\MBAMService\lkg_db\exclusions.txt

MD5 aef4eca7ee01bb1a146751c4d0510d2d
SHA1 5cf2273da41147126e5e1eabd3182f19304eea25
SHA256 9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f
SHA512 d31d21e37b0048050b19600f8904354cff3f3ec8291c5a7a54267e14af9fb88dfb6d11e74a037cc0369ade8a8fb9b753861f3b3fb2219563e8ec359f66c042db

C:\ProgramData\Malwarebytes\MBAMService\lkg_db\cfg.bin

MD5 a8e4820e175f7d9c0f37c4f63bdf44bc
SHA1 e0aa265a99ceb65255ead59d54ab2e044c7f63ef
SHA256 4c2d5ddb9c89842b4c0aa4289c62aa67d7480400b95b0bb9be5581576b680a6b
SHA512 68a717c19a8f3532ff8bf3fae6d28a081939618c0f49da8c2cb8c14a9b563cc8dfd3b22d1d0f0e3aec8bd79207f46f3ecb0c49f5caf4fee2d570a5d1917df0df

C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Global.nm

MD5 06d329967dea857473afd0545e7cec0c
SHA1 21d75229bd25ad54a8620b123a30298feae8d396
SHA256 7425e3b3496a9d1b55bea76b4343726e620879594226aefbb7398b59f518b946
SHA512 1a145d0f691cbccbd37b62bc0803efe059d5f32766e1ce16eff3cc4002f743792df886ebfb5692debc97dfd041c9f5957b7e8397a4f27fee96841c8c1b34d551

C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Global.sr

MD5 9ef9c177cb49c3c38cfe41dcddbd2b51
SHA1 d9e8ae1972c637e89f8d0e4209f7e08e3753377d
SHA256 7c733f8843dd7b46a37c7f9cae85050c76398b3edd84afa685e416fecd942235
SHA512 58c05879d40ab1f91ebd4a4d24a37c02b4602eb0a0841df2619ad7f11b914495ad98ebe2572a82fafed6d8775d3eba0c6aeac46309a5adc0dc3ebc9cb5ad786d

C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Actions.dll

MD5 f802ae578c7837e45a8bbdca7e957496
SHA1 38754970ba2ef287b6fdf79827795b947a9b6b4d
SHA256 5582e488d79a39cb9309ae47a5aa5ecc5a1ea0c238b2b2d06c86232d6ce5547b
SHA512 9b097abeafe0d59ed9650f18e877b408eda63c7ec7c28741498f142b10000b2ea5d5f393361886ba98359169195f2aceeee45ff752aa3c334d0b0cc8b6811395

C:\ProgramData\Malwarebytes\MBAMService\lkg_db\ig.exe

MD5 00bb4872fd3c456f23b2b00a679b3890
SHA1 b2f98fc663e37bbfda7398079d4d483d862256a6
SHA256 1bbaa5b2a9e7423568aaaf7b6c2939a6ea784e0b8fb5e428b6e7423927e0c9ca
SHA512 eda71ee5c4bb9490e9a303347180e94425f2228476a45d983ee4ce5ff1c84b60c359ad29d545b0bcc8dac0aafc6cf0d4297560bdd2e68587aeb0137de61f19ae

C:\ProgramData\Malwarebytes\MBAMService\lkg_db\sample.dll

MD5 a8de0cb6e0103dc9dc9f1a7f4f35f819
SHA1 27674efbfcc8975b4a372742b141ddce47cb540d
SHA256 87bc58ad3b68b87620c543f54f1e5ecbbb49b7468aa7c271a6d9ab95ac9beefd
SHA512 6688449e115b0403e08cb24c61f961c74c27cfd6609af360c251eb446d294e42ab1323e34a4e3992020d8c7fd0e8002fb7b96329cdf9c486910508d81429a072

C:\ProgramData\Malwarebytes\MBAMService\lkg_db\BrowserSDKDLL.dll

MD5 956b145931bec84ebc422b5d1d333c49
SHA1 9264cc2ae8c856f84f1d0888f67aea01cdc3e056
SHA256 c726b443321a75311e22b53417556d60aa479bbd11deb2308f38b5ad6542d8d3
SHA512 fb9632e708cdae81f4b8c0e39fed2309ef810ca3e7e1045cf51e358d7fdb5f77d4888e95bdd627bfa525a8014f4bd6e1fbc74a7d50e6a91a970021bf1491c57c

C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json

MD5 6d0c8cb667682fbfbda8ef656e08cf46
SHA1 7fdc520fcdf1b7ec639d498cf641705bcb96b81d
SHA256 f4e7eb71d79c19bd73ef044f1d43ea855ad4da2be49a22432700723073a0b66b
SHA512 fd422ed4c627253dccf524a78122dad6ebbb222df5be0335122c6c91b09ff9e1c381f6023aab1a01670e587359eb4ed4bb43122eb85f22d0707063a6e2b7c2dd

C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

MD5 0304a366b352a6ab9adbf078e43bbfaa
SHA1 2f365543034a90fcceead481cbba23cb7a45cbb2
SHA256 dd53b338768e580360a33de680daca3710b247b0d63aeca304d5aa85520ccce2
SHA512 1ca51a4b7ad2442e3029783363dcceeb494b73a4b24d7229775cfc07f2da8b3eac294201fe6ef20541229b1cfea954faa204949ca23ec6f9d02b3e53a97c8e32

C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

MD5 9466643e3977945283c1bb228f689b5b
SHA1 27b72c699e5137fe4b2e48728fcc65abd4019d25
SHA256 85a511dd843230866f7b94aab1610029ddbad25a914a6a12d30a41d7b055558d
SHA512 d997e3b9befaf40097f7e28c4058dbeba9d786b39c4ce8255774f975ea0c0ba324f943b450774c4c8ac7b767b9a953c90e97d3fb2de781172c5b90f225397844

C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json

MD5 dd3b830b06f3f79cc230f4257abe62e7
SHA1 b3159e43b0cf33c59948cded83d069e312edcd23
SHA256 04781de60a7f8b36deec0fd6a716bc90b47266bd4ec865a6f6fd1be18ac70ce8
SHA512 a099bc058e70961bc3a74fc96b3392800e926c5656963519e8637c1a9b1b6b402f9e8b0d9cbdac6db58f9bbc83247246521c580846345b76297b60abb05abaa6

C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

MD5 d621972071d9c3d123b373e607b7b5a6
SHA1 a20a991aabc306debde9ac6befd6c81c6e7da1a6
SHA256 533fff58c27b40769da8def3004cf4944ac7963974e0315dbcabe4613f20bcf8
SHA512 3ead9b55c695815a1e22600f0c6f76bec8256f1723837ab9981a5c1bac7e5d19b42a5e02a5ad73c254b0937cb812a0eee45157d1a68da04742b709dbe40f590d

C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.sys

MD5 246a1d7980f7d45c2456574ec3f32cbe
SHA1 c5fad4598c3698fdaa4aa42a74fb8fa170ffe413
SHA256 45948a1715f0420c66a22518a1a45a0f20463b342ce05d36c18b8c53b4d78147
SHA512 265e6da7c9eede8ea61f204b3524893cf9bd1ed11b338eb95c4a841428927cccbed02b7d8757a4153ce02863e8be830ea744981f800351b1e383e71ddaad36ad

C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.inf

MD5 d87c2f68057611e687bdb8cc6ebea5b8
SHA1 27b1311d3b199e4c22772fa1b7ea556805775d37
SHA256 ff93773f55bf4a6a0242adf82276a8c95c0b244b9bc05e515c4e810c81a960e8
SHA512 4aa65b8911d8a2a0f9ef0ee6e934b94db0a9ad4c2ec543b5edcf21486be43f6ab1fda6617ea2cbb85eff230628c9fa8e7649da915d6de695803b28e55bef5819

C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.cat

MD5 ddb20ff5524a3a22a0eb1f3e863991a7
SHA1 260fbc1f268d426d46f3629e250c2afd0518ed24
SHA256 5fc1d0838af2d7f4030e160f6a548b10bf5ca03ea60ec55a09a9adbbb056639a
SHA512 7c6970e35395663f97e96d5bf7639a082e111fa368f22000d649da7a9c81c285ee84b6cf63a4fccb0990e5586e70e1b9efc15cf5e4d40946736ca51ec256e953

C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

MD5 f47436bfb526bd5d236a39ef887d53b1
SHA1 78d1a9149a60d2e0c9271c79ad952ba1cd2a1b03
SHA256 ad2c2cc20aba8f81c1f1942466164e5ebe07b4f4f66e0a8c740a1abe8efcab41
SHA512 eeaff79e4054bf916037a4580bbdfb0fb63da51ef0d87c3a18cbb6a231f1c23867a8ce9d1ffc7aeef4f86d3c3d3ee0f8df744e7f754320f6529924402990d458

C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json.bak

MD5 e1a02d267bed7fce8c03976f6a599d9b
SHA1 69d9f271441020b0c25896dc6e9ac231f162d24d
SHA256 fb670e98cc034e5236c36cc4d4cf1c749ad68c7d29c6d1116a36c51ffed6937e
SHA512 538fd02f5d721c803394dbceb353d3ff5aab50741546b144a86975dff04e598c79232261b0cc6c794a25af875319c6b1bb691b3bb25890534f1740105c3b468e

C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

MD5 4198b3e4027dbbeb56d4da5fd30e0292
SHA1 8d52eb08134c98fbe94fc6394033acf6b8f396c3
SHA256 70bb3cbaaedcf2d94f346424113b68d02073609cd164aa2b4a121ecb770d1059
SHA512 88d1d84e9681d382c0350eb4c9ae9e74c59a13c4ba6fedaa110fed4e0c080bfefcce6bf69d5b270df7b61a36e1b17311f9a2cd5e0d2acbb8f5a157c0ff30567c

C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json

MD5 a123162d4f92da63a5c1b951891cb62f
SHA1 733068ef6576272153c4610221ab23d324b3ad56
SHA256 f7c361a38ea9ec45d160d5e2c09aa3e15f5cbe569a6f584337b62bd967eb9f76
SHA512 2bf6b1d8313cad9f2922be6030f5e5bbb8c2946203c0be18e8a9f291736fba3b62c5812b0063e1f22b7b3d7d7f49d7f08b4461256d1051b45f310c4d9818281e

C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json

MD5 b622576cc5592831318f1a0fcad4bb9b
SHA1 af4737942e882b8f0c4175fcaba3b86cd4b9761a
SHA256 56e1db4c548a8cb48490c46520cc54368e1ac57103e40b17f82d62f1d16eef57
SHA512 1d89fe004d910fd4a70cb66ad850ee8bc4118db0e6b32053c79893be92a026ecc928cccb983c7ebd2585aee35a052ddc930109a0a02918469bfd1797d5e9cec2

C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json

MD5 20918ef97c225b6947d6544140f4aa48
SHA1 f439942c23c74aff658da65c6b099ce34be7ba43
SHA256 5133990e42fc147b5df314c25d0070c1b495f669470deb53acf49b01292c17c3
SHA512 f19d049fc45071ee977fe56e5a6ab5077a5402a9b21e6559444725cb5018f27d37fbbae80b510f7d4928e3cf8f8019c8fc07dc922d3da72e53c6314731461992

C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

MD5 e2a53252983eec381ea0c68bfed8fb4d
SHA1 8eeb79887ce86195e299e48ecbf5fa1cb2e397a9
SHA256 88d03402a09bbb3fe29ce069156cf497571e6181863329780e7d4479100f99a7
SHA512 f97dd7f1eb8662602fd0504dcb5cb9124d6ac0b0fad0a97e5f25ad469efa6d82a21dea5208f88aef6c9bceddf989d90ab6baa54a30a3467f344fdce46d54ec56

C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

MD5 8445946bafab9d04adbda8396895d1f5
SHA1 8b91b0bafa3d98aecbec0f3a5afa0a4aead68414
SHA256 3a2c4a2860fcd8891a22578fc52e74b0516db5a1059201fa06e604af07bd4431
SHA512 43185a33aef011c8938896d66fd38367389dc479f24f4ce623f934e49b1387dc7a920d3417db318bb6c8ecb5a36f0d1ab4f2dbe8fb02567bdd225fd115564094

C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

MD5 2db1121fc42d6dde9953a46a36c5da75
SHA1 42b57d081ffce2a7aa4f9104060c5e3133c1861f
SHA256 49a775edb2f18495bd2cf8b948b8caf3128749e00d10fca815c8273b0a5b07a0
SHA512 7b614ab4aebc6b7234f83d35fbe4cb70f5104e767b9821111ab6b10d29607f42dcc8f3c1edfcf8e880b99993e34859e3cf91714b51be4e982a401ca65583cfca

C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

MD5 b9ed38051a542b66c88411380c90df67
SHA1 80a018b991219836dc2d0bec92e92d6ee86f0cd7
SHA256 9d7e1ee57d005af8ce50ac9d133cb097c9f09055e0d7da805532fd76588cc8e9
SHA512 f6c7b1055187c5ca659c076f6a7c8754692a33545ba109f0a35414f40e5080cc345182581667ac8904ef18762a622af503cf96bbfcae2dd97be800975b6f5ae0

C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json

MD5 080730b1bf239bcf00d2ca6b554a5d09
SHA1 65adca436dec19ac1cc0014b342dc199cbbae924
SHA256 cad920531866afe5091c0e67d1355f8c7eb0dd989750cf9a22ec673a1e6935b7
SHA512 c67fbe121e54d3921d565f2a694b1a9ad21c69072d37221604a41cc747ee6cf4a19239af429b4ab063bb1ef26329d7f6344a487068c48f50ef81b55ce076aef6

C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json

MD5 c1ebfb5661c6beda0c93c70d43030405
SHA1 7f32556c888632bdd4d769677167c97014bdf8de
SHA256 59a30c7b623ed9d61483983d2d198034e97948d5a8d60472ac4333a3849018f6
SHA512 35faa5c109fd3fb55d45c4cf02062107c54745ee1844fa756449233d2e1db75dd97ce7987a0aeac3b9c84a501f860393b736853ed5b15d9c1f3321777bd37ccd

C:\ProgramData\Malwarebytes\MBAMService\config\VPNServerListConfig.json

MD5 7399c21ca084595c97e9e6ff6b2e3389
SHA1 cbe0fad753a1e0797bb2fbad2347037f044cb5dd
SHA256 d27ffb73be44cbfc65f5f6e5f2d106315637aaf0c7052f942aaa028c495aab4f
SHA512 27594465309cb0c37f788dc1060e3ce4479a43c5a6992122a94335dc2f9069871d98bd0b50187e166b24dea4e8811577b35ad16bf2829680d85bb0ac97f8631d

C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json

MD5 073e9bc3d8dbd2e3290e3f14cc868d78
SHA1 13343f6c7773f25f080c09d4bd3651017a5b6a0b
SHA256 4fc7c746604feb034facd7b8f76923cd8f9508a1a9424bbe711bd3f0f2fdb0cf
SHA512 9a33174f11f53caa7d62bc0eef3f09dc9ecf9732112b812c999285d86a631786d9af2184bb6f058ee67cbbaae3b9d22a4fa6e3e290fc0e6ddab0f9ee8aeb3547

C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

MD5 cedc0f5b379c7dc89f2dfb5be216cd78
SHA1 2d65c2aa53001d93077482eb9cf1566655d32a23
SHA256 9587c66c3eea94b22e70e700ad7529ce38959584d98bdc21b7dc7d52564d949d
SHA512 0fa2cefad3424f9fec612d2c49d6ae1dd5b887e80256e3bf017e5befea3fc90e2c939c91def4c2e4740bb7146b0af95812e39ee830e769903b4ec37631854977

C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json

MD5 49f3f4839b5e047dbfdc0e2d09cef747
SHA1 84c50a6c27699ba8fae9f3e927e94219c444aa71
SHA256 4724c1736850febf5ff740d3bc2ead36367fa04da22f91c6fd5f7cd7a7588505
SHA512 e449bcd6a3127e05c09cc1425a40b35aca91ace8badb6464b69ca3c3e8d7c1e76d97e339e26bfac2f229abd56ef1aeede4192265b7575d2f3c01c9a6273d84b8

C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

MD5 43dfbe03f509fd274e072a3b4addbf54
SHA1 9ede3bb6c59b2376070647c78e850c456944065a
SHA256 7f164fe7da03142105406dfe55932bad8bc4530144b257a4689457101e5d3765
SHA512 6127f08d074dd9cedf4a13f68c32e8523f6efb848eb21d59124e67a2fb4cd878b02d6b8ca0346f6265c2211410a926d5d3c87447d4895a2a82a4264ba09c1803

C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json.bak

MD5 ce02108c9748afd5c6cb7383e1fa2ed0
SHA1 776c9029b223752929ae62aa0a20d1d70bba7b6d
SHA256 c41ae548ed4d7771bb68d20f4a0840ec09a7bc4eaa92de4ad9bf639c08f8d542
SHA512 53124277db2f6aaa6176df0c7d4a716a1eaef8b910c7c6232749fbd24d29ff43fd76c2b292c88dd77d3e9c77f00f90a36f23817831798efe1118eba7e687883c

C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

MD5 e9a90f7952c0372d1a54fdf31cef3ba9
SHA1 5467d57cc48027c8396790637fcf991ebfc3853d
SHA256 6c26c8727343ffb767f9a671af5b4e711e4ef3090830c7d49821e1a2f6155c70
SHA512 483d2ce573c9379c3390dde7be162767e586b40d7b29b512ca992ab3ef0122659d884009b0e215f367ca81a3061cccae36b7c15b3f81a381332da217b8e2a8da

C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.inf

MD5 5a9717e1385703e8f06b27aa10a69e87
SHA1 84ee67a9167b5eb6560711b9871de98898ad07a5
SHA256 47b7c516bb57c612de19f0ca865590af95b6e32bf873a0fef9e011b2c5b483d4
SHA512 dd3c7278c2c11ad15a55fae6d19b96dadd92f85b7f0c8ce934298258af00bb5c052a84a98499b8867b0f43704fb307c67d03692ca69dda4d814c6c17dd73df44

C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.sys

MD5 817666fab17e9932f6dc3384b6df634f
SHA1 47312962cedadcacc119e0008fb1ee799cd8011a
SHA256 0fcaebe94f31fa6e4d905b5374733d72808f685fa3bcc9db9a8a79bd4a83084f
SHA512 addc9a5b13da4040a44d4264cbfe27656b7d7971029a0ad53c58e99267532866f302ca8831a3f4585bbe68d26ec2d11a6b43de9bf147b212ab1f05eb4ed37817

C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json

MD5 a070e659cd3a46373c40785c4ae39694
SHA1 9ec6e1c5695a3e636fbf974cbd5d9b0ef9ce5c9e
SHA256 09bf1b0a95f94a769f424a59c40f054149daf12c2cddbe41215ca2c4e155ff73
SHA512 4ccec62870d1f8212c625c312184dc8f2274de03a885dfddc80a02cd5d2ca45fae330994136d1b133188722d2d8974469769fa8a97ac3eb4e952597a40c48bd7

C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

MD5 bdc3340843d7dbc6894913f62b246e65
SHA1 6188c9db1645299d279a3730ac7119e6f8d24c2a
SHA256 f2c0a0714a9b6e72be39b27a31229c1e0c97756243b1524775bf185c694443be
SHA512 7dd90cb5d12bd7f40c3c60fcbb1918a6da8484f1672a32773024b56bd9bd5d1507bbefa93af6e451bf3288e3b73f9bc9a26e995e4d36dff3d71380e35a8911be

C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

MD5 246c5302a7910b8375c444996d485809
SHA1 779d54c087cff82a9d5a6efd2f88eff19e871ee6
SHA256 404f1237e7f601af2b65f2cd0e27a7bb319ef70912560864143b38f00039a660
SHA512 f17105d028737ba1a3fd5bc45f1903c9f4a453c7d183ba3b84fdcf7e458457ebd7bb6b5389b819481dcb67ff22739a253b75b39121e3969a36c8527abc9aef78

C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

MD5 8bade55769617eeca07f5d531799cce1
SHA1 6b9e598811cce6278f3c716b08f3b663ee4d6008
SHA256 f0c57dce0775ea3baf22f6f31fb53fd8d57cbb37b9ca5e2d138bcdc68a1a3576
SHA512 cf85a08bc0bf992fdc13cdec6fc094c4f13c3e27c12900801b9fea6b56a73b915078e07d46e72d53c2ef5fb72fd0f99b5af066de434067a7ab9b947ac8c9ffc7

C:\Program Files\Malwarebytes\Anti-Malware\mb5uns.exe

MD5 b672a064c3cfdf56ce0d6091edc19f36
SHA1 1d21d4ca7a265c3eafaae8b6121be0260252e473
SHA256 04fdd99a4e8ded496a99c9d3c8c0b6a9a9bde9c4187d07342260f63852ef6273
SHA512 53e6c4bd68a0cf36160b21d63e7a6152ca78f17c76ccee9e185c1cf3f5a254c05f401f91501ad3d6806d5085b1f58322e6b7ad483fb813b86cb8570519410680

C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

MD5 78fa295562f9fda181bd2367f8d85435
SHA1 ae1bd93341f59784bf0390abd114e6c041d2cc6c
SHA256 c6f6c8083746380084c73d16e09cc39d81770acc950d126d922c2a9b7414967b
SHA512 45baeb5667c45b5aed1918936f10eab4df8ec258f78c7add28d9db5d2b8f0c371496726a33c25008cd1f66e991c75b7c91070bf2ec541ca5ebd4e43833da78ef

memory/4092-4772-0x00000179BCCB0000-0x00000179BD198000-memory.dmp

C:\ProgramData\Malwarebytes\MBAMService\LOGS\mbae-default.log

MD5 86a0cf8f1e5a33fb51795ef0dad4fcd9
SHA1 bb067b0f1285262e95e7ed6717d6eb9b1a0cb24c
SHA256 a7acc069eb302328c47b3f4123c5349b52d46be05e9ac9163c74e8cb7fb2ba08
SHA512 5f70819f528d36d934c11c899f2e053f58fd295cad647ce39821d2eaf6b301133eec50ca05e3cecef5960ed1bf5f13713f3d3002cb11a55eebb8685d4d657339

C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt11.inf

MD5 1b378aed3afa33a9d68845f94546a2f6
SHA1 95b809a20490f689a2062637da54a8c65f791363
SHA256 6ef70c4c969b91775368b3c5a6d0dce4c5a5d59463e32b872474f0c50b59774a
SHA512 fe0706f48ae52a14936e372dc1406720baf21e018b12ad79727da892c498fc62af59efd08024ba257a94442270c1fe59859a81a2eb7be54be6c7a3cb76051808

C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt11.sys

MD5 1484dae9eabf5eb658e3b2348a059ed6
SHA1 8566619e880dfe75459ae5ae01152cbda2ea93ad
SHA256 c39096a43345040c5db043bbadfa422216fb11ae9cf238096495ea2b521eb380
SHA512 bc2471dfcf2d2bad72a9de23f362f84321c5b60448bbad9cc63f377ff0bcc2b47cbdb8a537fefb7449d52860882b677ca78a62395eee1e67a4467e1284b86f62

C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt11.cat

MD5 b2baf02c4d264a1be3ae26aeddfbe82a
SHA1 4eb1f9a76925117802f9d0899c7afb778deb7b11
SHA256 72d16d98f71b3d3468cea6225e0af63ca1352ddec901febad261f83ce782fbf2
SHA512 b51a48dee62eb722c68286b8fa00f3256ddfb4f585ed262eeb9449a20612e31e6334abcab4bb6333621435259548916a6ce03f4ac13515c7b5089454ddffb3a5

C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json

MD5 c2855d22e0709b491e6c52953e5fc130
SHA1 0d177c76e805ea40f27fa0862d9b60d067cfe323
SHA256 ceae5a9860ebb88f3818ea439916866b949546bfad4677bd07f14e68b4243d5c
SHA512 b08a26e991d541c6c8a58be6f8df06e5b6ad7ce42ca898ca06e908d32fb0635815721f1493b4ec3994b1245c6c9666c048fc7b47992e75946095ae44221518b1

C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

MD5 ab8f78ca5d27afc0d9b41af7f8f0dc06
SHA1 8133cc115dbd53ab46ae97a3168091f31daec722
SHA256 6de1bc16f8eedc71f7a29034cd88d47d6b159fc6f37926fcbe5208a6da369ce1
SHA512 6e4d37314defb3afd9bb6e285965e0f912389007e236d12a009856f7c13e4c43def039ea324e501d5a7009fdaddd749032dd0932f779e2fa86e5974a85d6d244

C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json

MD5 1d6c796b36f41435b47176a668888c19
SHA1 14ffa821c96876ce8e59f73b560b88738f0bc99d
SHA256 ac77baae9264e5275ba6e55a2d981a625780510464df566319963fd715ca40e3
SHA512 5e752b35621c7ffdfb7b376622ca89d1b3f83c1f76154a37fb058024ddcdd618ecbfa0e4f7086746faa23f6370c97d9f87f2868a77a0583e0d955ce2346dd6b8

C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json

MD5 72478fbf595d663ee153cd710b06e7b1
SHA1 6cd55bb7e8d20932e77111b457ca30218135ca16
SHA256 5432fe1f9da85658e077c044c59872a7f15d72cebf67d15a51b4acc61861880e
SHA512 e72fbf5f54ef68e92c2966bc4f7893c26783c45b02812f17c98b99543c58880d085076293ff50a91c8b486029469070ec136dd63a93beb2c9a5e020836537499

C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

MD5 cb1cbc35555aeebce06fecd0e0aeb6a4
SHA1 baae5b9d2322eec89fcbdf7f8022bb669a67e679
SHA256 c38f32e04abb9f05f610464eb107f25336a8f2a63e4113c790e102032c53098b
SHA512 5fd2e617e20342e8853a534508f8cc67764b4cd5e695328f248d91626898aa28b8108ff7793566965e66c6917cded4cc7c0813b0499ae8ab2c128a411d931bef

C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.cat

MD5 3da850e8540c857a936b3d27c72ed0af
SHA1 cd5b3a36b1c3d762835ed2f62a151c5127f01dbb
SHA256 0c77c63c9eb8eef49e833dfbb2d4f0e91bf9aba6bbea1fbb8ff8d1cdc16f7e38
SHA512 5c9d5add57ad377cea6958e13e515053ae8aa9f9d8471e8ec57064e5bf8f5c1f3efdf26078aa287e63f38b528333c69be0745894cb2c0b427d78775f7605507f

memory/4092-4871-0x00000179BCCB0000-0x00000179BD198000-memory.dmp

C:\Users\Admin\Downloads\MB-SupportTool.exe

MD5 de14da361ce2cb6402cdb86482b3e0a1
SHA1 12f67216f9c07d16a866053354ae3e65b7a07022
SHA256 4dbcc09193952fac4d9168b92c9a164baadc37a76b3806d2a84c5668536a0588
SHA512 6b8ba4374d9a36ff5e154c4b6316b457e1bf0077fd6c3290dde5cf780796466c39cff6a530f8bb303ca2588dbf2f650967047af7257525a7046087c754c3609a

memory/4092-4965-0x00000179BCCB0000-0x00000179BD198000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 1a839a8ade2ef5a3862a9f9fb40d0e35
SHA1 79e2faa6f41fc594a47c08fc447762a1cd11a39a
SHA256 40ed9e802f8fa38cd351778580f4f6169fe46e111ca8b129e801dd3db256fe70
SHA512 58624109eacdab3ae22833591ad43ace288752186a145632a4ab2f7c7022011e5c0b30d5d00982d79f682302fd6da80ac35299d8a7e9fbfeb6b0cf1cb45f0b74

C:\Users\Admin\Downloads\FRSTEnglish.exe

MD5 d36f18a901e2bbb52106180305e89a0c
SHA1 792aa3b0d44917527ce71953faf63baa18577bdd
SHA256 cd0477e9efcc30e0af8956620125c7a46660b180c3083975f3a163d004c7f7c7
SHA512 16922644dac1505dc3f80da9a264b4c3b81814b4a8c9eca29f73a29cbf7a1b52d876387de8acf6b7526ccfda802ae5d1635fe2e6b47e7ec562f971c3a5ec07c3

memory/4152-5151-0x0000000000C50000-0x0000000000DC0000-memory.dmp

memory/4152-5152-0x00000000017C0000-0x00000000017CE000-memory.dmp

memory/4152-5153-0x0000000005C50000-0x0000000005C7A000-memory.dmp

memory/4152-5154-0x0000000005E00000-0x0000000005E46000-memory.dmp

memory/4152-5158-0x0000000005C80000-0x0000000005C8C000-memory.dmp

memory/4152-5156-0x0000000005C40000-0x0000000005C4A000-memory.dmp

memory/4152-5157-0x0000000005FE0000-0x000000000606C000-memory.dmp

memory/4152-5159-0x0000000005C90000-0x0000000005C9A000-memory.dmp

memory/4152-5160-0x0000000005CA0000-0x0000000005CAC000-memory.dmp

memory/4152-5161-0x0000000006620000-0x0000000006BC6000-memory.dmp

memory/4152-5162-0x0000000006F70000-0x0000000007002000-memory.dmp

memory/4152-5163-0x0000000007130000-0x0000000007244000-memory.dmp

memory/4152-5164-0x0000000007010000-0x0000000007018000-memory.dmp

memory/4152-5165-0x0000000007060000-0x0000000007098000-memory.dmp

memory/4152-5166-0x0000000007020000-0x000000000702E000-memory.dmp

memory/4152-5167-0x0000000007250000-0x000000000CE9A000-memory.dmp

memory/4152-5168-0x0000000007050000-0x0000000007060000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\mwbC5D7.tmp\mb-support.exe.Config

MD5 899a7629e0ba26baf8d7ee918145cf8f
SHA1 5f958ab1302906f824ed09ad307a4d239ca2599d
SHA256 4038778b4bbf343e4f0f68c5076a7ab00ab4815345fc122618a98f2d48f97886
SHA512 bce12dc399049813a22e408379155cb6afd8e69e4d02a4fb0fb4249cf734e18cf84756cf876196d23e242038c9965e0b5ada99c1aa2b7d81d535fffffd076f1d

memory/4152-5181-0x0000000011FF0000-0x0000000012012000-memory.dmp

memory/4152-5182-0x0000000012020000-0x0000000012377000-memory.dmp

memory/4152-5192-0x00000000123E0000-0x00000000123EA000-memory.dmp

memory/4152-5193-0x0000000012B30000-0x0000000012B38000-memory.dmp

memory/4092-5200-0x00000179BCCB0000-0x00000179BD198000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

MD5 ed124bdf39bbd5902bd2529a0a4114ea
SHA1 b7dd9d364099ccd4e09fd45f4180d38df6590524
SHA256 48232550940208c572ebe487aa64ddee26e304ba3e310407e1fc31a5c9deed44
SHA512 c4d180292afa484ef9556d15db1d3850416a85ad581f6f4d5eb66654991fa90f414029b4ce13ed142271a585b46b3e53701735ee3e0f45a78b67baa9122ba532

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

MD5 76a3f1e9a452564e0f8dce6c0ee111e8
SHA1 11c3d925cbc1a52d53584fd8606f8f713aa59114
SHA256 381396157ed5e8021dd8e660142b35eb71a63aecd33062a1103ce9c709c7632c
SHA512 a1156a907649d6f2c3f7256405d9d5c62a626b8d4cd717fa2f29d2fbe91092a2b3fdd0716f8f31e59708fe12274bc2dea6c9ae6a413ea290e70ddf921fe7f274

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

MD5 60f8cd04587a51e31b51d1570d6f889a
SHA1 88574c41d0ab81721b275252464da5c7927a4835
SHA256 27cb4390e32a97375dd4987ae000406933bceba5199f17893711e782333b81cb
SHA512 84c12448ac55dd819749fef9be9919111a3df4bc51e66d2fa9f7376c11c101ed1349cb36aa119aa873cdd6c0c91027e201fbe23c2c83b89bc900a4d9077bcc52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022

MD5 b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1 386ba241790252df01a6a028b3238de2f995a559
SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

MD5 038c1f469deb6932520d09a340856ebc
SHA1 8b361a8c0489b69e9ef4e132e36f20c161c5ec1e
SHA256 5fafae77cfdc093baea4dd31485ced7dc4ab8e734311b3c2aaac1dc2ed95f451
SHA512 fc3123f11323a9f18f5e1bb31c61fa229e0de8b6d07bb01b220605cfd9ba499ed63e76be0b7146e096412cc94486bdba0ee102982b38b258958c6327fc6bb6c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1f95f1237d6ec009f0f91b05aecf4fda
SHA1 a05a2c1fe2b1e36e34eb515848eaf7ac555633eb
SHA256 a345a1cdfb1f068506b8cbe44985a1a8084e3c095e9868d299ae1ee1006741fc
SHA512 e05aaa7619a5b29b048a21818a6173020a504ddc2674604cf4030fc8c9c4c8f975b7ed197677516b4dc91d763c013b0cd31330e36893805d6134ef293695408f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

MD5 0d2283b0df70bc0217118f5c6d1fd836
SHA1 0aaa2e0daa0f0671fbf7817e222fcd777be523d0
SHA256 fb02c03e84b9a15ea357644f15643bc90eb9c6ef6532e1c82ecd052df34c2abb
SHA512 16071fce7468cc47fd7a57dc6913cbf41e142fd16b3f145dc30b13fb4a84a05fa3211d3b435ace7378c76682a1afc49e45d180eb88f6d32b0deaa2266196b2f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e3683336c6a0ce7128fd0c116e98f387
SHA1 a8416776c5231925e9cfc7caabcd2e632360c458
SHA256 8061d406b108ee417cafcb72a27f631a4cffd93e3d0627c5b6365dbd3ad52abd
SHA512 5cea06eb8d600e6eda813bb29a075d461419df6a9611128d7794e9d8cfdc0083bcfa1e258b3d6f9f22052c01f232bbefb2771b6659c29323de7039946119f404

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000063

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000065

MD5 2257803a7e34c3abd90ec6d41fd76a5a
SHA1 f7a32e6635d8513f74bd225f55d867ea56ae4803
SHA256 af23860fb3a448f2cc6107680078402555a345eb45bc5efb750f541fe5d7c174
SHA512 e9f4dc90d0829885f08879e868aa62041150b500f62682fc108da258eee26ad9509dcbf6e8a55f2d0bdba7aa9118dd149a70a7d851820d4ea683db7808c48540

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ea66689765d9a5907878bf1ea677c1e9
SHA1 a41c94a652be4c58d97d27f824c309e32c25b63f
SHA256 44bfcd09224bad6290d87d2996247b5f721208a7e73ecb6f32688149e3bc847d
SHA512 25d74b917991d1a56582ff0dbc3be0fb52399a56809ff6c1f186f77b621cdd2515055b63533abf621e1c74546d36c77deb01de0a24fc3bc3bf7b54582f542f78

memory/4092-5710-0x00000179BCCB0000-0x00000179BD198000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 17e9cd3641106acd864615ac08777364
SHA1 a1077738384b3b02b17ccbbcf09d954d1db51526
SHA256 5e91044a147dc722f0666db2e5e2ebcdb3d032a9c515ec6571055e6a79167f32
SHA512 f62059b63b59a92a5bc41f0c2803227a1963a9fddf812b374f7d5c3b539b2fa82b0536fa5a47447fdf6914fce79e9a4025b96a4ab58c0eb6da950246ebd741bd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000026

MD5 b07f576446fc2d6b9923828d656cadff
SHA1 35b2a39b66c3de60e7ec273bdf5e71a7c1f4b103
SHA256 d261915939a3b9c6e9b877d3a71a3783ed5504d3492ef3f64e0cb508fee59496
SHA512 7358cbb9ddd472a97240bd43e9cc4f659ff0f24bf7c2b39c608f8d4832da001a95e21764160c8c66efd107c55ff1666a48ecc1ad4a0d72f995c0301325e1b1df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025

MD5 209af4da7e0c3b2a6471a968ba1fc992
SHA1 2240c2da3eba4f30b0c3ef2205ce7848ecff9e3f
SHA256 ecc145203f1c562cae7b733a807e9333c51d75726905a3af898154f3cefc9403
SHA512 09201e377e80a3d03616ff394d836c85712f39b65a3138924d62a1f3ede3eac192f1345761c012b0045393c501d48b5a774aeda7ab5d687e1d7971440dc1fc35

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000090

MD5 1e0d5c75c3fa0521f02326c609140fda
SHA1 16d762d62ce5610c1e4affaffd8bbbf9bddd0493
SHA256 a668e4d5dfc330fab5956541747a2a2a9e0dee6bd14b7e1af7117c4c3d6e26e9
SHA512 0f1708fbff33f6050b5496809ad5bd00000c84219950c024d93dec759e553cbd1c25852388f1ae683220cc1a1081b545167e20280fa6530861125dc59d5f3022

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8896cf5f9c4356df2250e58735083a77
SHA1 a15a80329c15e8055c42b0149b86e0df3e9d01ed
SHA256 5deb5e7d418de32c8eb3a578de5ab990ca30b5605e6d1f9e830f286be27961e1
SHA512 b637f0e7c2d66cba23f3b00f346c117018c6f0b8c96c0dc93c17b140618ab121bb718ac708f5f438829f1544c2e188d90e822331438c7ee8aa9b86ee12695a5e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029

MD5 f930621607e050dff86f94bbf4806b73
SHA1 d06bdf16d5794550b78713955629c465b6970676
SHA256 fe97ff9a43f7f196dcd9088da3818e6f80ecdc2ad8937a5bd4a52c8b3979a09e
SHA512 df4c634c95cbc63c44c0f884817333fdb3965d225fbcf008d134a12ea99d05965b043c4f74bbe57f8356fd7f698fde30fe34638387ffcb8ca1226fe7c8b00cb7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 eb677ba02c3b6d08b53a49e538b2eeaa
SHA1 7b83befb52e43f0e7fccd2f530b1b5cd758f0a57
SHA256 d34478ded50b86ea22f27db2bab3e087076ed4d025a7fecce8ed8d11f08801fa
SHA512 e324ec9a88a37a724396098e2e13ba6f2e61d0b31bd7f6e83e6247dcd188cc0f7f8173cb05a6b3905e7b08903a574456bc8ce0181aa81d2cf4820d016d0f99d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 68f0a51fa86985999964ee43de12cdd5
SHA1 bbfc7666be00c560b7394fa0b82b864237a99d8c
SHA256 f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f
SHA512 3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003b

MD5 3051c1e179d84292d3f84a1a0a112c80
SHA1 c11a63236373abfe574f2935a0e7024688b71ccb
SHA256 992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3
SHA512 df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4510fd8c1ff303c2cc27539cfbf7d496
SHA1 4fed88ecccd04f199bbfa9c3f329d36c1f9af0fa
SHA256 0b78491b0b14899bc5fc31c0798a302b8ea74f997686a104d089b5d80a50be1f
SHA512 dc6f4d1d4f518e47eda22b1af2adfb7230f9158fff3aa87fc30afe68cd905c0b664e88105993859f739f2bce36de0a9a36139335dbe93c6cc6d1cf728b095840

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 da9a655b7ce4d52f9afb37e090cb03dd
SHA1 3dce28413ee338e3d9ced3183d1e950239009f0a
SHA256 b05e76ba5bd272a6359d11ce6adffecc0abde8a221134da4398b45e79ea3becb
SHA512 7d25f1d86d27f2c068475bd8162a7dc11e622851d30eea46e24ce8a464621ac6f86a6034b5f72cfc005ba203728c2d19006e6b85e0c575032399eb8e85a366e0

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fb2a64f24574e14f07326e1aeea4bbb0
SHA1 0f8059ae8c9b895c2fee133e9e07de9cf8e4c2c4
SHA256 ba706405be155537bb7fd4fdde604e94c0de62fea3dcbf6a8e5b5a248d584348
SHA512 be177e8847c800eaad98a82e4fdddf4211309373cb41605cca9f86cd3e54a33fe5ac9835774b302d6373191dddd222f2da9fb98a0f9b6597debf4dbddc71ba14

C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json

MD5 4a34d03d1521b65cc01a66540cf00a57
SHA1 4b89a9fc9d1dfe0eb4778b1ac14acbc220ac34d3
SHA256 9daf688cec301cbb0119ce0a66c4747188cd7941b3307ca65e3e62078260d2c4
SHA512 2b1554c640f6e6f7f3d80a54715ccf633215ae306c577c539b03cf4890a52633c01dce4dde58dc09bd6447e747b1f6ebad04223c7e4892d7e7fb783789e19744

memory/4092-6252-0x00000179BCCB0000-0x00000179BD198000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c86ef4670aa96ea16622184ba78e73f7
SHA1 8b2f5a7f86a69ea939d27f67d3c20b7f85747871
SHA256 85572a8651d504f5a1cecd7f6a62375e506710bcbd6599696d8eb023517f59c6
SHA512 254024186cffbd32236bf7c927fae5680fb807318384a849a80dbd8d39904d7db0c1a789409f6bd46d4fd403bfee8b0faebd11ca134dd6b2c8e55c3ec87ddfb1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 3f312def9b76f25ea8afd5366a7c2375
SHA1 b126a12bc07e16cad162bd074f7297140ca3cac6
SHA256 35112c3928272e16d8757e86fb0ecd03461f37c6256c267d867ce6f52f2f9a5c
SHA512 23fcbf765510ddcc947d0816966f17a9577a32d5f108aadf7135e3390f207a0ad3810848ddd647407dddbda38ca3508d6c19ad23ace0a20b517ad0dc33564863

memory/4092-6283-0x00000179BCCB0000-0x00000179BD198000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ae765b4b6f85fba59b7daae09d29d284
SHA1 d8eb69bea279b1beb8a949f82dd251191efccb1d
SHA256 1ec6512008ce74b4a9e373288c96eb738e97870b1cf18759f8c049188843d6f2
SHA512 db6000a51b8e8d2c94b514c49c6c3a13a04516c464889bd85c23287f6fbbd3e6907d6c69fc76f6b5139d566c902844a0175065f4ad9b3ffddd7cec044ce037c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 df67f03b649fc0a4f73e6c3ca522ca84
SHA1 0016135c1a71e9a082274c7e59fa05aa3729b5ed
SHA256 6cb85e44f6860626e3f214544f655b1affc07ae4c3cc163fe386b8007452fc9d
SHA512 b057f63ae059287e130e8d6a22c7e0739c65219dedcbd7d7ed392b69eeb0866a09d4318fe49bd64c6ba2129d642d8a68a13b3e10b00d208d46e0ddd94752e635

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5f2f2f61cbe0e0d1f56018a37337b15b
SHA1 267762e20b97b4be0622ad8d1b322863f6b884f2
SHA256 7eaf8a721dc73d8af88d4df63fbb8756f9e1105666775e9561063f2bbb438d7a
SHA512 b0104ff8c70f8332c3bc7b635d0ccbbd837d345dd71aabf3ef889b9c1558e35c8c0456b6cd807096acd40f38eeffba3b1663ce8118a29c0492a81c464e9e51e5

C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\SdkDbUpdatrV5.dll

MD5 52c4aa7e428e86445b8e529ef93e8549
SHA1 72508ba29ff3becbbe9668e95efa8748ce69aa3f
SHA256 6050d13b465417dd38cc6e533f391781054d6d04533baed631c4ef4cea9c7f63
SHA512 f30c6902de6128afbaaed58b7d07e1a0a674f0650d02a1b98138892abcab0da36a08baa8ca0aba53f801f91323916e4076bda54d6c2dc44fdad8ab571b4575f7

C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

MD5 718212579e53150d8142b46477da4191
SHA1 627848ac330f544b9c7c1889f10e89e115a429e7
SHA256 7a8130779b54995723aced3e97d7106bef3f91bd2d86e1ed99ea94dec8bbcd12
SHA512 a5ecf3555c81e8864e4cb8447b275352075bfbc002c7b109aa3ad740e8a71ccb86efe59576465b3d95b14da3a80ae135e216cf366801dba2e0ecacb0a4b995ed

C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\mbupdatrV5.exe

MD5 9761279abf322b5679210cdc11ccba78
SHA1 e3956b256a2d34f2326f9956129a2d2c098dbe01
SHA256 73514832c7e23866058fc434ff282be593357f086d84550299c3ed3bc540d221
SHA512 f1ecd3f05dbd1cbfa3086ff4c21c957ab720f7786db32a3435d9333508112a767fed8f289a33c7c7799931d9ed1dbf248aaca6bfb444e351b763341f3b435c89

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f690caaa75ed7c2ff0a70c78edac03d2
SHA1 bb33b5dd1b8aca6e0fa4298d73f505c24e8ce9fc
SHA256 80a87b6df2cdeada7bdb6c282a88c2fb547bd11898a9eed87ac91973f33b7e88
SHA512 2dadb738cb1821d80ce3db1dbfe0f4072bbf78d038f76fb7e3b1ac213257f8eb9843a1393dee328a3cada77112319ab848daabf8f41eef29258c8bf6b7fd17df

C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

MD5 ae58cc90742a3adef2eae77eb886d7aa
SHA1 8416f934e38adef6d693f14d671ab7c2db4cbc20
SHA256 0629719cd188b5857e7b85c1426ccd070a77cf39095624b7fffd8c08a0039b3b
SHA512 313328fc69799c313d50ff7df1721ae6744144b69ae04e99695e8f06941738622a87588ead41725bc8a295f5410165c5c9b83f52058fa77438705986e644dc5d

C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

MD5 f9356b3cfcd8b756e9c521660fe9f42a
SHA1 54e44a5365250219df75ca0001e26fea55205ebb
SHA256 a7f0d3ba0d53f7c3260a33eb31719d49d712353b1122191262a78af731a3425a
SHA512 09833fc38a873daedf28fe8be2ef9da27c4b6ee0ddacef13e32c9187dc65471b348d6fe80fdbed084600e202ab59635d6dcf8fd3790e98f59248f7dc3c228e42

C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

MD5 f8e50c14615c9eb1f2076469237f8350
SHA1 646a334579f41811d1e51bc47b875b8ece2e1e61
SHA256 fd4964d6c0fcb415f10e454ae1a8d0c7e801351895c2f2484fa4fe8f9a55dce5
SHA512 68d9e66a6f7aef047f0de875a777ac0993efb4992ab36ddd268f62626dfb368a2c8be61eb83e80c75c265add962b575b948adda5377a091b37a9912d04314c32

C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

MD5 1166fcce3f9d8cce0beb633b8924ea7c
SHA1 1ef023358e88846c809ccf1181d95214a8502fd7
SHA256 4f6d797dab1c09014577a45c371d794f91f5ba562de332066e4052508cd10a14
SHA512 c87366329af17e63352d8fdadc7e189003448a4369a3adc81064da2121d3e768b25434eb6a82a6d6ab3faa17459db9666a8cd7a891fdb943f8c12dccb5c561c7

memory/4092-6391-0x00000179BCCB0000-0x00000179BD198000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 86bd7ac29ec8f491a3a29bc4e3941046
SHA1 140f13ba0cdbf4a3f61df7a571386bec31076c25
SHA256 83fb3060eadefd63dce9051c81cc5128ae7ecd5c3b117b9bf2f4fa0e2ef370d6
SHA512 456c1b21813b126770bcfa03b28bebc98b4f5d3410bcdd68a2e0ed8beb704ab36fc258c3219a2b153a8b92748fcdb9caef9695814b1e16bc9b1af3f314981ca0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a2

MD5 a85641dbbc2e737f08a83875d8e7706e
SHA1 6e4acbef413babea2733c3c689ccfd7788e2091e
SHA256 c274acf372114f67c76a61b7df530b657e371997ba617b000363342c0abaf3db
SHA512 9b967a390c47d29be598ea89691f9944927ce2335bd4f296402055b9432941707e2a22672e55d5d6684adf0f2e46506749585b51c53b05631e316065af3916c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a9

MD5 6fb26b39d8dcf2f09ef8aebb8a5ffe23
SHA1 578cac24c947a6d24bc05a6aa305756dd70e9ac3
SHA256 774379647c0a6db04a0c2662be757a730c20f13b4c03fe0b12d43c0f09e7a059
SHA512 c40f4771c10add1b20efb81ee3b61fc5ede4701587f29a1c2cdde8b6faabd1c76d769bf8b99aa19082012f95d99ba448a472463fb9056acd2e43542e14e605cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f1f835e5cc9e75b9_0

MD5 9814083ac193f3ff5c7bb1cf726fc309
SHA1 348db6879c81c08308609a94e44cdf82b87cea78
SHA256 44414c7cdf41ee251a63091eefbfdf57602b432d1fe71f238d5c36392a7bd05e
SHA512 3d3bf7b94ee0c6de52b89103568adf9c89c5053ac335fb1e51cb189cb4716bc6113bcf41cd1b4c72524ca46c06b286a8d5866f2f7d82f5112a9ea083ea68fd3f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000aa

MD5 e4cc1ece2f2425b10ae2ccc212c1dafc
SHA1 92609e6d0093693110baa23758382889bcb30da6
SHA256 92e9415d8bc8529e2a3f335258ef7ff159cce2965ce3b2b7c15f73720efee809
SHA512 2848dee3a6da891b7044518bc97aeafd340705cebe846350b9a7f314b52450f1eb977b8b492638965ce4674ebaa341e4f832438199c3cad2fb0a0793ef83a619

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f4111438b19c0927_0

MD5 a60a05869137ca639b71d914b7ae674b
SHA1 724e7dd11c945e4bb2b1904f634c886b7097c7e7
SHA256 dd7a4f6334da0df542ab005dbb3d2d7033f80ba78c0d2f68b0bfa8ea385e7469
SHA512 ab4af834c0f9e71c36dbf71b6dd4f6ca1d2d30841385eed4f3b4f79db49c3295c426d8c6092636082aaa6f473d036be65aec2728724029ebe9356eb6f5631a3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4c307b02b4dcc58c_0

MD5 bd242fb1c21e705cf8f7d811d474f43b
SHA1 6ed6916621459dba3ef3640789d7dccb81adac9e
SHA256 49225d200fd04a9f579dd1ca536c720bf7079ad41c2171cc9e74a1f3f8573b57
SHA512 22b3e6a50127ac8449fecaf1f24789e3d7b9d73f64e5408c6d7478572076f6e269198426351daef028f8baff1a3abc99ee8f1cf5b47ea07f03b24699de72ccce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\336a68eaaf209f48_0

MD5 40839cc145e91a54cbbd937e967beb03
SHA1 abb5927d2dacc0d95773e666a58d2b0038e7fd66
SHA256 25533fa9e013eaf03a2e33b880dd085fb0703d7fc7c4b5b123ab7058f1fd2755
SHA512 556eb491ad10b76e70242dba17f11e666b1dc0b7deedc3c25f30b220a0c3116ca6096a1a4de7f9086deba3819e75f2020421033a39690f5fd82f87147e899705

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d5b39ba0c2fcb1c8_0

MD5 8640212fa700d481c321b83156b90daa
SHA1 01c6234544603e03617fe810125bb7e9c488c42d
SHA256 c47789ced26ce3aa5bb2a6c6e1eb11632bc5fd95c2f0aa54d522f1090fe5c886
SHA512 54cc5eb962882b988e3b3d16ee2c14b508f57017eb5d47d0f19b6df5f5b5a7e00da609e131a4cdb5d42240a99ccc014f32b9add71fd239fbae0bc21bc46e0d72

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7612455cdfc66f62_0

MD5 55935146671dab2e11ba2ee098075072
SHA1 489fef44a33f56c1e7e4831744ef0eddfbf14f0b
SHA256 67efc39d865eef26bdda6e594ac9846da8dd97899afaefc3839d1b104d4bb927
SHA512 86ae792b5243aa88c0d8e0d93ed9efd504c821950251f0f7070255bf2e6451d2097028eb4b3be060e51bd009c4cefbbac877072d4d962a5aeb45dbb0114f4aa9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007f

MD5 7b45be58cfd13aa538f70c53d1ffed50
SHA1 ee2238a1ae253dd3482780d284a8c47b52c9d792
SHA256 ea1eeb7ff17c3dd6207438d178e7be15d139e40f6eb29c2c81141f38629c99ea
SHA512 2450a0a0fef7437566e8408d113ac8998a4bca4ef5f4ea429280f44907e598bcccfc7d92b7542ff47938252c13b5b257f53fee21715e84b4203a7a5b57ec166b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b8

MD5 9872de6f2db55990245b5a6eecbeb4ce
SHA1 1d7be5e0bdf8d007fc4801bb2794412b6058f573
SHA256 0b307741b706d747cdc6006574ce7e7ad3eb5e57477f6705fcc7fe3c047c16d7
SHA512 e5578fc05c546c889b9cdeb396202c4a6959545c8259644e761a2327716a5c1214a2d248906a84f1dbc4d57a2c8f39ada7205ebaa67b9dd160e8fe35c436bffd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 aaa4008b7a79d9690dec0ea0fbeed66a
SHA1 7be91b933e3852d22aae7fbf382f9380c846d059
SHA256 29425e79de3f0ba846778316e4664614ec1745cdd1d71cd92c36e0f326700381
SHA512 ec81f0ab063e9c349cd2b408c0347ca806fa4c8899a286389294fc467fec7858fb74a36402f9017a2d938eb4f66991ac3d38453d3ae4e9c725b2c6a54eb15bbd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000087

MD5 0728625a147ca79276a1790b9cf3175d
SHA1 60d4d776f49c7e1627a935314230dce18fb3b382
SHA256 a9a1ce7d77f651dd85dbbbda3c151024e47c5c85569801c994cca98c52e3da71
SHA512 647fa86e7a24bad9b8e4664dfdde280fb2df9c0b58cda936a1671d4bc3a4cc314f0ae231bd26fcacffad0a428b9891cd04df63c6631e2aa6d18d8cbde5b654b4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0c8b5be9a91cfd12d141ed0a91e8cc47
SHA1 9f382af9d2edc3bd5fc66f193facb9c2ce48e4d0
SHA256 aed4b6fd81498d66d8fbca142931a7c4075428973d5f214555da0edf869b45ee
SHA512 e373c4fed79895016f31cc3f11676b928db456b5e9b52deb0a5c2d34562e5be330ea5f180702e9ec9705bd66897a39a9f68440db7b8f3fe33e09e423e2f03f6f

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 6c67dd93e53bea0ded1be1230e56726c
SHA1 ab40c49edda9f33e34402ce901bb7deb0fa16140
SHA256 aa3d630754fdaae714fda75ecf605b06915c3910d33fb66a6bdccfd8c65847cd
SHA512 e2726f1523b219af9547d3a4d68b188db1981caeac4351292c22917111970b2c9097d913711d960a5c3e384246bfd52c8cc6c75c86db447100ad80dec8e5cb99

memory/4092-7027-0x00000179BCCB0000-0x00000179BD198000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9c71d6db959b6d88_0

MD5 7070a5af421ec5ac23baae4ee53997f9
SHA1 93c6c4058cf4517ed470497ff6096abdfa677d3b
SHA256 a0647629abd31f0d124ef3fca337444c1bbacdd87cf4d04e16f5e9589ed6373f
SHA512 126a8e0ecc6fd9048b953c91e1e2d102ccf42eb4d6c9eb27e7e355d8ed1f8ca6ea31f9079689f1850dc72eed7a1df2bd93e9f7c6c2da526ede032ee350c90635

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e1f201b8962576f9_0

MD5 0835dab24f0628fa3fad05508d17ee03
SHA1 b2c43099385973e82ff8c7eaa8d7cba4b99ac59a
SHA256 6d8943babcfca56f8289b35634ac7040d8a5aa12b8f2637b4161fcea061cdc94
SHA512 d406bf415e3fc52e2f2539f1ee042e72a9749b35a45f0dcb06a7431136c10e7be1f54aeac90b1e52b573530a4c389d3915dc0a6f69b0b2d4b0001293cdb39acc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c283d82242f222fa_0

MD5 b18d9e77114a138ac1851dc913f7a62d
SHA1 f2dfe14beac8bccaca1c3ee98d44bdac2dde09c0
SHA256 a53fb6d8656f5e4ad255239214618a42b3160527f9625a6421396180c8f2218d
SHA512 4bdb1a2253c8aa73a42d4bef5c34b4df4009ad88a98175ed9bb21370548f1bc81e9e0bb6ea1bb338e10b24ae535a56e68e7f808393f7dc25f5a41b9ad55b7c7e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b456264ec9ae46fe_0

MD5 1a21114ad78761cf09d5005ab8b1bb11
SHA1 ed7bf1415f92215de09f916a40be230969b7f978
SHA256 dc491ad5c2976d7df98b37e4e6e8244af4898a7268238ecbd9cf452847e70d70
SHA512 2278a9b39716ebca0cacbe6add83485ae230bc1b2115ea2362ad111c38de0f5f41b266d9b0a7a46c94ace487b41957725ace4d91b8acec91a1ab5efdfb8732cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cfd610b9b83f3391_0

MD5 950d55b8c7a4a911acab00ce2fe7c06b
SHA1 7642b90a30204c2f696c82fe607d2e8a01a289d0
SHA256 624719950ba2c78d4fb991b3bc52d22765711e3c96543a31323200d67221305f
SHA512 7d86a2345c5ba274ba5af2db789be84049b7edd86ffa1c35c17cdcca2834ee6e3f9ffaa0f9629aa7bb24d88c600a3efcc4e4ee9cf9a4ebc55821611c63b064fc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\02707c83473ccb9b_0

MD5 d157cfb001681715ccafca6d3a7516a5
SHA1 699c461c5b9529e5bd4932b6e624cfaad49666fc
SHA256 ffd49b568f74a310f045f9d18a0ec31edeb5f2a15da90bc0326a592080e57202
SHA512 fcc08809697ccbff7a930cc5bc443c7796595e5ae47b2f8f851e447d520c5b3145ad68360f28d13b7cced4342a1ee3bd579571e716a1b7a580a830bdc2feb5b0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a359bbc2cdc78363_0

MD5 183bbf1d8fc2c2151d28d8bb6f8700ee
SHA1 00bf85f30f804324520d958cbfe838dbb2a4d164
SHA256 3d3507c4ba166bc65344a6a73b0d2e36bc3c8f7e5523f8f5658120f95a3716e0
SHA512 fd820731aee9591633c9bfe24cc7c3677e6680db0097f697dfb8e52bde5805c3b544a089d8b8bbe329b4ba9815ee9c81ee0c4ff08306d49cd0d184726a9f4ba5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000dc

MD5 5a4be69c0f1cc749237d1dfe2d96ee8c
SHA1 346e6464fe1ee79ed89c701bec8327a45e4d1493
SHA256 42e17961b5c349b9330b4d326f1348895923d8e5af2a671d411461561eb3c268
SHA512 ba4c66f1b311ff2889e088903f7680fc99b95a92bab03cef83279a9f2599e806473101e86a2ae0d86b9fb9ccf76de436b74d794dba650076c3a9f193cfd17edd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000de

MD5 1fd74eb82223d13234019fc26111152b
SHA1 47cb9a6f7dabcbe26aa35764f277d99ba405df67
SHA256 da0134c56189e2e226d4f70413e6ecc1d3c3ae30630ff8b27cb2dab5cf3d3368
SHA512 2adf16e6423b845c8e92a04c6a6d532b711b4d971d9ee664eab7bcc6f0a416f1216f3a77d3d323b4b47d37c65850e0d469d6d85387853d84ab6f4c348cd32178

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000dd

MD5 7f0559fa822157538bc8eaf4f2d7b2b4
SHA1 5ae28ac5c5e5223faaf5d5651a1855cf683b85e6
SHA256 d451cfcb40c5b0134f6a0446ef259cbc26c53530be6f4ab710c40d7ef6fed0c6
SHA512 bc7a8cd89731303a159cefa54f150abf0dbccb0b5cdbc14bbb2c9e712239e37610f7b04b997f6f61ebc2941db8cf9ca8ca178bf9450ce945d38c77939ba38ce0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f8e8b7584e1c9b05e4bda0a195f6fd14
SHA1 195f6f37e095a994813593a9391478a30daa6fcf
SHA256 3bd0ad5d2a102ef1b609271d4f48aee4533514edb36f44f315a1834c407cd7d6
SHA512 7c5f06a2f5b5ff9d087d94e2d4eb03fe329fb50f9cbc9f054624a213139399be5e048083c92ee8801f77d17c937358d33a32db5e37d0e91f435bdc7a093f53c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 39ecd127c406df30071a16f26448ab84
SHA1 b70979f3dad26d3d5cea8cc86951e89ae4bd74e8
SHA256 883ef3c51f6acab6f9e563e9eb04f2d1bec59257ca2007ede2fbbecf26b3702e
SHA512 155b79216ae7a225f73a1a8bd6a85299951748382921e01a8cd498d3b39da3be7bcdebf5c101eb04506af637a2b97c00c6288944219b7ee53a837e4814dc5874

C:\Users\Admin\Downloads\Unconfirmed 488017.crdownload

MD5 829a83f252522644799cd374c2134d0a
SHA1 28609b97a64d43938e6c833ce17194d3e90d043a
SHA256 e1376c562b280fa8b334412a43d935d461ed09c1f73867590ff6439bef706669
SHA512 f41026eadcf176539d460317327ccb7b2b77f61c143ee12a540bb2219e1c850157ccb4c003a78eac790bc3d9b34d4f897ebb6465537128fe9f86fa2dfbcb1610

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 576b8d5af2fcaae9e3e47fd310e56ed6
SHA1 ac5b72cc70ea188d53829e0c1f726be5482b9ae1
SHA256 37df2cafb68caf98f27b16e48a4a5e193c2328297f0f131c84a5a1e43b7237a8
SHA512 e1963586673ccc3dc49d483ea0da93d5f2c4a7692bd0413366334aabb4bd90eeac670e9a14eb5d9f5c4856dc531e0bfdc40e26505abf0fa80776fc74b60b40fb

C:\Users\Admin\AppData\Local\Temp\RarSFX0\agent_launcher.exe

MD5 b2696933d452f1586c5454a26cf2327a
SHA1 05d963d7b635ccc5f8f4e3b5ca6958e7e24da03a
SHA256 2660de1bda9927a0b681e78729196432c89155b5e5da5fb80a921c10f9708ae9
SHA512 e437de67b3aa06613c5c8424763a5956b7c11de81e2d1bc0958abb2893f8c8b187961e74fba42973d819aef84ff03c09a9d61328fa633997fc1117aefb7cef21

C:\Program Files\Bitdefender Agent\27.0.1.281\bdec.ini

MD5 96d15c4f3db04429631866751a1d2890
SHA1 61066ffead2b6859e4d3fd497a78b05343ccf25e
SHA256 e8d31c1de790f738ef75daa0402584560a0672402d0d3ded0899d2dbc95fb911
SHA512 2e5c94e2d92eadd28f604ed1f04d6e2dc9d9a4ffb3c2270e9d19792ad41c0c536260616a17b433f4f2bc57b31b116ffa06eefb61955b98029f15593db4122189

C:\Program Files\Bitdefender Agent\27.0.1.281\x64\bdnc.client_id

MD5 f4c2784aa289f17d144a589751c7980d
SHA1 b414dd690863acf3614c25c911697f1b16c24c62
SHA256 e6e827f81840ce8975cd5e30467ddc1661c3f407cd9d342d00800f32c01dcc26
SHA512 3f3f8f8ae91d679745189722c88d97d19e8728ce3289deda2e89a79061ad06d0a627a9783a9ef2a833f6a7843d882bebdae77d178f3d810b581093b299f2b70e

C:\Program Files\Bitdefender Agent\27.0.1.281\settings\LoggerConfig.xml

MD5 bda7be337da35949bb617c42de5fd811
SHA1 bf5e6c6a7dc9f9ccdb6207ac0d31a1aa76ec93e6
SHA256 54e2f0d07609a40a45bb12d3a271eec1fb9021f62b756a4bdbdc42191fd79dcd
SHA512 19b96b62a4055bdf254b13acba70fb8a4ec606a45abfe4fbf97c29aeb16a9e12d4e2529339f7571f62558559111f493bc52797388bfe629194cc89fb9d1b275e

C:\Program Files\Bitdefender Agent\ProductAgentUI.exe

MD5 f6c7f8bfae19800422d8afc5f8a95db0
SHA1 c8781ec45549d49c4f03e6b5dacd63ea7c7da42d
SHA256 7c58afc287b3ba027821cbd3aee1291924db3c6895f8aa4e62a0ef4d7cd24a79
SHA512 e93fc9342e4db95094a7a6e5ef934b0bbad7942bdffe22f605cc6e4aeba22317d14a7a63248e0976feff01a3e998d54d8aeae94f01b6119d4caaf5158bd2d90d

C:\Program Files\Bitdefender Agent\27.0.1.281\ProductAgentService.exe

MD5 3607dc44a2dbce3f5ef4c1d159cca937
SHA1 b46cd13711a4d42096ef698f89124452afb81832
SHA256 571d57e42d1edc6da868945929366286ea0864f6d0243ba621a355cbf0ed32b9
SHA512 0f2d9f6215bede21fafa90efd4947bc64cbc8a3ef257c1a54a92937941e4b7f2d7b819aa0a16fd6cbd7e6dcb7cadfbbc71f867a46456cc330c6ba4fade79d2c6

C:\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll

MD5 586b378ff2042405cdd7dbf564ffa3db
SHA1 54ce637ca6ee728bcdcc3e4f52838a35b1e56885
SHA256 03b1870f8f58e3ab9a2983a6bc06d7db571e40afdef18b8d843b2ca6aa5dd626
SHA512 898211090f9565870c46251171e6b178ad8e94a9a774e68f8663166bba9c31e80fc0cd7119174ab4874f842cafd4cccdbee5e8881e96250103f31ea5d118b2c5

C:\Program Files\Bitdefender Agent\27.0.1.281\bdch.json

MD5 c71584a964b617d71bdc566c0bc70ca0
SHA1 db2265678986447e783613acd0a6be33f1208534
SHA256 96e1e7bd0087f33cb282c67e7be315af3e8d74651c462a4276c6518e40e73750
SHA512 bb8b9cf441983a67b94cf2486b1e3c7c70445329d5fb3b791a4df5e0f26069f8ae1f5af441a337cfc930a28bdd6de09dc324046374781a20aa97b8b176313c38

C:\Program Files\Bitdefender Agent\27.0.1.281\bdch.dll

MD5 45bbe02be9b13856e050cacec293add1
SHA1 c3a3cc4339dc37545796df5fcb4f4bc9596aceb6
SHA256 a18a260e34a992e1802933725301e224311e533c0905903158a55510fa938018
SHA512 053696c6d717aba23a667a6edf8064b7bdc79875ed6ca8fb913f6017ab7818b98f89825dd3409466da95de7701591a4e3d233930f395886bdd79faecff09feae

C:\Program Files\Bitdefender Agent\27.0.1.281\bdnc.dll

MD5 059fb6af87fac021ef77b2cedcfba708
SHA1 7aad25a14a3f77387f1c5e7ed39676aea739d2f4
SHA256 a88a1be5fbd4c343dd59c388bfb2b84b53ecfe4286e607b8a3d09b27d08aca00
SHA512 90d64115ffd941b4d7a027e310ca2afeafb4e700de78eadaca6d4aa8d99420f5474899444b823dad8dad46f696464dd0c993cb50579670d4f9286f8d28bebb49

C:\Program Files\Bitdefender Agent\27.0.1.281\bdnc.ini

MD5 758591d297b16ee7b5127f2fe3e67a27
SHA1 d782a572579a9f52e31bef5377997c7f9be28790
SHA256 2c6224951714e685114b51c4e598c2bad8c7bc16975f7401ac51e101afcab837
SHA512 808f47903ee90c68939aca97ca06b1523bc5355d7de6c1b3ec14d0cd560b3bf77abe7c429964176711b91bf6a9bb2a1a9fe22206daa465ff2ec55e55ccc2eff3

C:\Program Files\Bitdefender Agent\27.0.1.281\bdreinit.exe

MD5 9b319ec1e09695cfea5a12dd1f48ccb9
SHA1 af5401d6accd8acda7bbbd1c7b3596fb548c3f80
SHA256 e7130233819a1aa2949fe30e6982ed88963e341cf99d442643dc93ef88b67446
SHA512 1765c5de5850490bccca1e9a140218b1bbcc7a757515bb7c7d48766d49386b91bc9f1f2fd2331ebd0eb826bf87e71c68680a488352c9f090dea63f323c4ab257

C:\Program Files\Bitdefender Agent\27.0.1.281\bdec.dll

MD5 9b7925d2fd4ea5fd57ed85c4d523cfb8
SHA1 cbd3794366ed2c5725422b50b869b7b48f9c3c8f
SHA256 df93df32c8a7aece380add382434367d30309aabda759de3cdf1d7c0bc4a47e5
SHA512 a2362e413efb663bd1a45ae751b59bb53edea20734afa5019250a806e4e576356915b154dd23c5ab36a352e8e8a719c60dc9aee200046a6c567889abe4f1bfbd

C:\Program Files\Bitdefender Agent\27.0.1.281\installer\bdnc.ini.md5

MD5 3a0a7d7823833be6e8af5ab1af295139
SHA1 1895dea63fb05e7e6f90e052936de086874c4c75
SHA256 a5f15ba3b16384b584780f2bbb0ef3e7fd49ccabd0b9ca10437882f65f49c7f2
SHA512 0d1377acaf8c5062e4ed7b3ad3fe0fbae594b6ce234aa9339471a31c63d6ea768c6cb2ca24820fc7726282c7fbbd41da29242cd3c288d7a0e8cc6b7e49c9835d

C:\Program Files\Bitdefender Agent\27.0.1.281\installer\ProductAgentDP.dll

MD5 40ad63feef027d82fd70518869646b8e
SHA1 99bd828723037bbfededec1636aa40625e8dd94d
SHA256 70ea3a22ef38140a9f6bab4466c1fa837453afe305f1983ec3537d6e183e45a4
SHA512 65f7cfe419fc08ff3b2496d23d12c645e313bb44dc3b424c20ce3d5d19e362beaba6e8fb127f4c4e490415767874db033a7a82125e45991e4008e1f74daab103

memory/3820-7713-0x000000006EBA0000-0x000000006EBB0000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e534c8969a1e705068b85489a9710ea0
SHA1 cdcd1e9143ced37030c07cbed4280f12094f43fe
SHA256 58927970df24ef90b38fd2264865ba355402dfa9b05f4ed0201c11f3923de5a9
SHA512 c8029872163c37b9508b008c0f9bab0220945e15fd9602c22887048905845a16114220581efba5c07c4a92fe408076269176012eba864651263649526cfdf685

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 5306d8ba1430139d4f8a2978889e0dc2
SHA1 2191a1db5dc52b5f0c7835b92b5ad10f09ef429c
SHA256 d06dabed59cf8c003a9cde8e66b0c35e20227b0eb603787e89aae2ff2f62be48
SHA512 fd2e5fb155f0c410fbb0127ec6f1c1f01b66aa95abbcc4d5ec36de13df3abda82805c700176608e1a82ec1e999793435e7940958228dd1ca6e455083dd81a233

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

memory/6684-7778-0x000000006EBA0000-0x000000006EBB0000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 84b9aaae01eb5a51bcc8650fe1ac1f3c
SHA1 d51a3345bf9ca3a49c359261e4aa9ec4d7e57ca0
SHA256 78c8e1ea3a0a4db9e207a3d051a2354bffb62e5e8e3e7b38c37a2f3ed5e14b89
SHA512 3d6546fb54afc198d62835903bd725b6edc990542f601e70d2df86ecadf1e10beb970a9ecae7780c75dddef9d0341a8844ed5b8233c2c749c9e8acf75116481f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 e9b3ab317f047bff489d6b10bf06b98e
SHA1 099796a471ecd77235b79bd6b48672c9cefb831b
SHA256 daee7a30e58cba1d20ef411a57f2abb1f9284f11541bfc447afc4e25a8597fb4
SHA512 19d59421620908a1072b2f6402d1a3a414296f8c628192260c561d7749406140fb33b271cdc2bb2e7a77cb483a8d556713fdd696edb27d2b9f55d5a6562f63ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 337665e8fd39e955f4fe915204fb359e
SHA1 ddacfa34cef25c6ef920e3603b802601889d5d9e
SHA256 2c85c06c11cbea90e850b7b017e2460cd78b92e3e64aad3516a0d37621903737
SHA512 6affe62e81b7213913e344b75b1e578ea214c93faf70cc5373589af1ef40db7f8b34ce24c6b0f39f4d00e44c047d860d9d88d658162f3ad2d47d7229df532b4c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 8aabb99808e4edc3bd6463dba1b9a0a3
SHA1 795cb812a47ff4fc394e21abb731a68bcca28030
SHA256 033558c8f5de64e04037dffd5f4e9fc7583c845ec072d30d6370ae7b10f3e68e
SHA512 abbda9e710fa0e972ff66ab92822c4e9eb9571f3b4e6efe27d0e0092fb9f19b25687dd3014b3af5e4ff0d68fae01d9943192b8fb91253ef014dc97e294f44b26

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 c712772be3ba647c7cc5d15f9515ec5a
SHA1 7f673468c735f11ee35a7ce31406b1ec51f23bb4
SHA256 72e1d90dc92d5bef0392efb92bec5225dfbf72d491d8bdfe507f6a403726cd1c
SHA512 f1d44513a089864d176de392dddfd55168d7eecf2d3494907b5baa4318a64bd0e5c315db2843ab84822c094cafdd021c34fe74e35fc58639f2f4e659cc0d39de

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 7716e686d0d69076f1306815f4dfcdba
SHA1 0cc8bd7dfbe1cba65c3efac9edf9acde81b2ea51
SHA256 60662316c31e7f0f78de35b156e53ff4bd7f53cb982e65c46c3a9a5c0981dc3e
SHA512 1eb0ac7621bae3a900ab9752e6c631bf00cf29056d79e7098287b50cfe9ffe3edfee557e1d3cc2c30076730635b2532baea7d67f48a64c5f644f6a5710b6ef07

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 1548813c84fcbc9ea1f541255372dc05
SHA1 a0147f2b1d2a8436d6534c13e779e84a5f240edf
SHA256 735e69003d544e9af66e37edd530a79ae34c24f3b5f66b671440d947e7394fd6
SHA512 eacb156c730617aef954b785b3f97ceb750c45576164b11bdc282d91d27c493c76cb7f11310686a00e286c181ae3fcd624a0c657c6a06b8a1ed3917e82c5c840

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 dc4b7e5c878160b5a3f77027fb703de5
SHA1 e31fc04829a698804886c1c2d1bd434b461772dc
SHA256 b8d348896a5b91476021a74c2234a01e663f2751ed91e8873ca208a877072edf
SHA512 3ca2e4673429b8a35333691852d1ca5c9ff0bfbe8bfa91ce0aaa2ed0cf5c66034621c140ca56c75268d53251c8b30a302db5c5589866a0500a16c37d467f19f4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\a960b909-885e-4ce4-be5d-aa2e614d9a49\index-dir\temp-index

MD5 783395b9796c73a0a00a786bcd40797b
SHA1 a0ee2741f23578c47916516c4e886b3d881ae0d8
SHA256 32fc00bcd83401182929bc077cb161d36e049f70219c139d2732e637019e3954
SHA512 f92b5826b13227ade51dd11c64e430fefa43bce222e7b01f453a3aa6e44f05291fcf1a66ef5a1a5e0f2feaf2fde5dbfdc2ad42b673382e9ea748d6c210f3fd04

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 ed1e1d39810f485f616fc4e8aa57a90f
SHA1 0612f73137a0b1e172550b65df735827268f8212
SHA256 deb0af8aa02585696fb32957d42e826ab88a54af8539f0d287468987ba1bed6a
SHA512 faf226a7b761b3c087fc52d503b9f1f8771ef0164269f5db20e36873fdbfd05a425d99d7626eefa6b56a0e0ee21b0fdb376349ed96a0a83013a63b226e849ac5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\2fc3e23c-5b95-47e6-b411-e6432310f107\index-dir\temp-index

MD5 b150dd2f2b79345cf6c7f7c1c6792e04
SHA1 70d30905eb7d83d031ba465eb8511b8c13eb507c
SHA256 5b2339a6dae611799f6c8afc3af5d4495138af464276175008cb9188d890217d
SHA512 85508608037eeea9e5bb5aa9b779eb3756bfab6ad1cb9322a7a2a92539b21e0d41c83aa6870650c45ff9cba0ad12d7826998a51b13141697c6f997e9a4d54da4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 8e3c04cc766e9dcec7e646b9c5e457a5
SHA1 7107571925497f3b779ffc41a4453374a2d6da7e
SHA256 8959f6cf2959456cdddfad1e96c645d11e55f2e24a79f3341984435bec057e32
SHA512 4eb8d07c83ea9e26e10c872b4ad76ebc1d8b6a55f73059509da9f110ea66b7ec6a1834c34bb8c3a67c7d19c03eea51e1d60fe3a3072832e1c56a657fecd4a990

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 31d9ffae42a8a2113279649037f97a7c
SHA1 a4b123c5356b47631a81555b1b6f97da30b805fb
SHA256 875f96e0a384207ca32ff108936bd35594644a6be75c5bb31aa099c5aa469117
SHA512 22e1154c2fe864d877ca1018e022a5cfa423cb7d47d5347f4cc301f172b84bd96fc13297e22d4feff1f08549a3d2d27a828172bed44918dcbea84b5b92377e3f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 fb5e2b8f19eedcc603d0738101fdf197
SHA1 d0a7a9da190f02f1769a315ae284f05429ccffdd
SHA256 fccc00a7f9a1a42c1e5a578dc45fb0f5488f97f8d99263e9a1768ccf910f936e
SHA512 d73d2845bd320c99595701c7dcc7ad9c21f7d5f25fd65c9c07b4b07a41c2088ca8af8a40f2db23bb48f5753e07bb934905cf99b1dbc40e42381747522793d0df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 d112ab03c4d0a75e476041b9d80ee21e
SHA1 2a16a099c5020de0242bd9a56b17a4b051ca56b6
SHA256 1cd1133f7e083a2239d80f6aefc546620d864a4c8d573f73016a90de6ef47fd0
SHA512 a46336e60abe01d13757b849bcca0d135f6a2aa5c9da9be0de2878c9d8b2ff22cf4a579d228837192a41c7252597b8c2e8a9b75f912587e5456af05d24fe1417

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e1e2f73f-9048-41f8-8de0-edaad7f3baba\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 e38213e2e03cdb3f651e037824c16bb2
SHA1 255ae103de99520357ab1c5aa31da9b6b7c6f796
SHA256 80806c67335dada48361deba418352f9aadd94ded10d42aecf40ae74808ae658
SHA512 5a69e7cb7a08b3e944eb4a82b58a8fbc09fd1a37972bb10108673d265187b43049f6b1a4eefbffece0089038413848618d7fef788490c2314a2fafade9a42e2f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 59b4968507028c29c1577aab060ca05a
SHA1 08622edc47fc50cdaaf5c2113ba37bd5b3e84a60
SHA256 db5b3df7b93daeeda3fa9f09dc2256e630c20f073a776b13074b22379c50c17a
SHA512 85e84a4a6a056128b20ebc38f92ac07f3696fcad225836f64335213540a4cd1f0ab4c43ea15a485d1cac6cf9e4d7eaba050b10e13a0ee2c3efa7d97b786405c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 98dacfbcf8db324b70d4f5060d83cca0
SHA1 e7a6149bb9606e0cc1628c73edc7b26cb9192080
SHA256 bf76f95ace92673a5fcaa7417ae56c96ccf63e520509772f83d79d48d304bdc3
SHA512 0c3fb25b208b321cc5a36c05842e6e1aea47b9cb0f83e2cc7625298329a58c672114ac05d9bfc922e98704e211ff614158bc3c61758467f733dea5abca2836c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 138ef5945c46e1b3099ceb65f8383231
SHA1 93ee74a58cda0aaca6e5dcbab7da57177fc8dff7
SHA256 83e6386f177c6c25459cabce5c749b0bf778e21a30020f4107d64d614988573a
SHA512 69a91601bbebb7eb2d6dd61988a5e902d5cb5ee79a2f89f82d3b71b28961e0466ecd901708fc89e1e01abb678db64f3ef827fbf541ec2520a5d87798af150cdd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 88e411863f426053f3c8e01950e813d6
SHA1 1742bf752056510104fe88c9852d7a69ba1c1988
SHA256 1ca14ab36561e6e176ea6dbda089b965df2d9aafaaa4e9d9e1842354f1921a54
SHA512 817cd638bc5c75ef048078ac53cd6db0ecd81c6410bab5f9fd133e9309f9ee9872c93f45950782fe2d4a32514ff12c86d40970d520089c977b1b470ff6317d8c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\d1fe2e2f-9bcc-40ad-9a49-3e01f0f2bbff\index-dir\temp-index

MD5 b8d66dae5fff98312d7278ec9abd2ba8
SHA1 04309cf6432514e0ba8277bf944b27f6ac815af8
SHA256 0e082e865c8641e87911d543250803b48bb79dbabf597f6ec49cdfe76a4d09a6
SHA512 4f35595c0caa3dff57b0ce8328f42cfd711084757d7914a9383160962d585524dcdb1faf1c713bf9c0726dc5179498cab28bb5befacec840e064d7651a39c26b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 6f6fd4845a67ab7f8c16509c1fe42082
SHA1 c4ebadb30e807d7c9f5522e5fd4d92c855bb89e0
SHA256 717bcb3cdfaa1f71b32a726ae86e074fae4b493f41eddbb6e1e8ac49c709c7c7
SHA512 154edf1436446eded79e024df0ab11f9928a07dc79adcb48b10bc20f33bf8ecf7c645d26361a0b39d0d0244ea38abaed316305ca760c623e1b6db4718769c153

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 74b1658617ac13bbfa2e16349ce0e08c
SHA1 9ba870d1e25815acf77620e8fc011c2b6a6454e4
SHA256 e458574f971f2662e29a03f8e3617b066bb745c8e5423302d1f9aff4db854743
SHA512 fd50e86cc0b6a89418c7bbd89b43da46cee496b567951c67e7dded64086946186801006b633e38bfa1b6d45017bbbada77fe01534e933e957a267890c1effcb0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 c703f2f7908dae0c2eae5f29abd849ed
SHA1 5e2e00fe417930328a19d99075e02f921ac3d209
SHA256 517dab7858b1dc606e125f36b8ab739023bc00c629a657ff8a76264e05f116b1
SHA512 30ffb9f9edda5fd1c4cfd1c2f187d8df6c410d4ebb8197acbb855b49e7eb96cac848fb6be5f9927611b24db452e08209b14fa1ae80e93b95a8e8c0b8d03f04b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 e8c714de056db607ad5b02941e82c494
SHA1 cf39c6137349bd6740d5e9cfb3a82bbdce12ad9d
SHA256 4a229afbea5bc892f645620ac214a2848c211a8f139924d30c38f68a46b01499
SHA512 6f46ef2ab78b5be5e45108e670fb99eaf445144a0667903489febe5543ed4ac1ece80a9d108f5a77466180492dd16f4fd0ae4276b99f449d1afeee9df361f794

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 f0bd68ca3a46a626a8f66db3508b85ed
SHA1 8e29d83c8e48f55edacdd19dedf1e28c7d04a0fc
SHA256 1c633cb46ea686ee546dc7552307a033b4ea2cc7004eb724f7d980e34e01bb2a
SHA512 05e015e8b33b384f03934e2a4bbadb51f99721f10ee9ed0b1e1e330c7dc834e34e999b9b2bfcfd4ee0850f2d147a91579d4aaa60afc8f987ac7cd19c8fbfb148

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 567a02c8e725136546f064ac4495c08f
SHA1 f6f065b419039c4b06a00f0b8ffa3d2028d9345b
SHA256 7cd19e4a968123ca3efe0de01af2474cb4fa9965b8126812c77047a9d9e94911
SHA512 ad13072a9c59b26089f050f0905015b675dddf948c55bbea0e9139e07c910ad3719401a22cfd292958b33690e421693aec3c8e3702c702b2cd734d0d18d22aae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\6bc0bdf6-1c9f-43c0-9106-7030694a4072\index-dir\temp-index

MD5 620e55cd27e0e201801899f0f9bb813b
SHA1 b615ad4551151e3b5582547a6a2a8d2492b5faca
SHA256 b0b2e760fa48d2be800806fa473b4b1af7f5ef815ab762176196d1e3f9dda084
SHA512 7ec7d1f1deb8e67772523bf6696dec1cba4cef3764d57636293d4f19b65f19f2bac92ab215e7da12114bc41c14970063b47d81cfccea90ab65b87eef3ae14e85

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 94edbd2e652a22c6be76275bb00a17ae
SHA1 a0e72afbe5bdc42cf651f7b0bd63e53d00d98772
SHA256 dbc68fa9ac56df79fdc914e66e22e0686fea35ea5e1c16cfe8a3ce769319eb95
SHA512 b4380724e1f432ad23ac072663b19b7bd8391840d7a3c820ed30bb538898bd6c9aa1dd08c23f6688fd8876bd071167185d130b8a0abbbebbcf6546c4baca1876

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 84467336edd1a880074fba411f56e44d
SHA1 72525d3f90e4985457cc6dad2b567b5064c30a1f
SHA256 207635a699833fb5fc9cb114285a35b3eab81d929bb484bd3ee76869b5cbe59b
SHA512 ebf00c245d0497c876a8adcc59d9137480fb89b37f97cfa94e4939cd717350437f505871861b79ced8ef3b2579e3b67744443d0348e48dabf98e21ca9163b6fc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 79ac0408a003c3f26effe0d4bc04406e
SHA1 3dcf83e665653e1505a7d87c7b75b08ef80d0e3b
SHA256 714ea5bd4889f058ed28ae16e0b976eea1b4a73df566510e867ce8adae9da89e
SHA512 324a3742d4386c096694d68e1558ab829d9b905b4d5ed95ff520b87a10d8a43a442ff535c5eb3042e097d00ff4f2413a447ddee86dc39ef940c3cc770bb5c080

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 959c7e31642152a27b3fcbe75dc73b86
SHA1 833748e016e52b220dac10abeaa513746f4c2e76
SHA256 403202800980d739415bf9e6090a622e1725620af8637ccf74d3ee2827a5757b
SHA512 8557accd82c2b09695ca3879848fe3f5d3cd8ded6d3aae44a87b1d7acd008cec2e4118b5a3f9f2dc9b963ba45d020776e26f55593936dc15341e1a2654462e0c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 9ae649bf4ea9f4f66e9c1eecf201b601
SHA1 5d835330b144e6efe5566113f08528eacde83145
SHA256 a32ac1be7f0471d62b3c5a54bae8606d75ea6ea70844ad67594970e38df49202
SHA512 a5dd7c890ac96a07fbe130f25183227510babcc6de8a017ae7c84e426eaa8cf14aa995a0c850cfa84279905c1fdb6bb0266056ca26da65039358a8f2ea555ae2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 828e576417e4fcb75bfb263533cad4a7
SHA1 d7bc17c071215ddef8bd6bb3ae1bb0cd9ab72e8d
SHA256 7ac150a3be67fa748f37b3f3d2870437c1ab3938405d2d872118b5a35a820437
SHA512 b58498aba9ed8f6f1e6f059442a7c280db1f6020135cfa2c601731571d91f7b51c6f416547806104932cf8f9901256252d5b11989f26bd188b6ad2e3ca260cc9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 b6d59838ad4043c5092f60b13bd98427
SHA1 ede81827b16dcde7a7fc228ba16032cbd92255e3
SHA256 073e1d97a8a3ff609f6a51c0e94f569329d8100537a7788267a8a1d20a6bc70a
SHA512 96469bbe673a6dbdd6315623f0c433dcf47c82c019ed428f686ddadf1135a42b8b926d834e9367dc044233d0c667d72495a390580a4c9b9834c56e3814786c5f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 374a1c36c14857f70090ba6d4af78967
SHA1 f69a56fe400aff2d2f2ae63a140049a877b65b09
SHA256 de2a8ad41ecb5fc497e22dc1064274a024a26aa77f9d4bc818660682459b430f
SHA512 56a54db701daca3e4931e8def31c4897920abb59c24455820822970dd0ccc790c853d2475645c83ad19eafe5132a21ce00622c558c1b7aecc81c91f477813fb9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 9d8a40ffb8747dab0ae170c19840732a
SHA1 dfdf524bc6b7964c7f21ebe8a3e7fbd099714cec
SHA256 62705f95b969ccc6c21bd42951fbeef132d88ef10c90a4997290e5e01047af70
SHA512 a573d4445c223a4744901291b7bea87c37e7743cc1a5a08c968bfdcfc20e2741f3a0a3db7bdaa01860b1b55b4a38a9bf1016394e5eb5ea721ba3d6861a0b7d77

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 60024349ed0869b71ccb8dc7aadb89e9
SHA1 223bb4847e5b53e215c80d284923b6a6d3e4c1b7
SHA256 078cc328f96bf402f536d9adc183ba38876a94aec9f1de73dd089bd9e392d775
SHA512 d71ef158b2e543220674d3eb3e7221903c35962d624d73d671fd9a9723acf27b9400f7bc1253609a44915c0097aa0990dfb1186722471c22ae8f83503828c46d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a77f1c47951eedfe23308c880988f6c9
SHA1 2cc8259dae0baa2dc87876002e9cf7b22fe72ad5
SHA256 e112f8526f0476c59dcc668276a3acdee3241db92c5c511e30c64d3adbb47ab7
SHA512 86d4113e583f3490637188385b6c393edb21a1d9f27b42d20d280634c823ebda44bbf2c436c348fe8a2c065bda96834751fe48ff90fbfce85c22c1ee1fef1475

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\f6983b7f4cd8b2f5_0

MD5 81e07cd15eda4753083f1f1805d58c13
SHA1 68caa6d6e77b40f27bc31516e5405dcc9e1bae36
SHA256 0ebad7fe24b0a6ab003140fbb02dd430264dd460269be6810c57c3d45d0b36dd
SHA512 d5479af16e0f8587a97e0ac77daa802d6ba8a439d8bfb81b2489c539bebcec8e113fdb82189678752178dea5b4c64243797108d6e335422d16363b8591078c0c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\529aa3e368abe088_0

MD5 db183fac94a68703d67e3e03a3563093
SHA1 8b242e7b34ee1e50a69962da5c32e52e414d875b
SHA256 9e2ce9f61dde13c7dfb3758a4aa6287c0f80af2d6355a75db4bec021a536551a
SHA512 349eb8740b2fa9c4c2350bdd5ece66f7db1c894c89f350ee6c0f96b2ea68c066d7c0a73cf2747122f68e30031825cc48fe3426c1142f749b3ca400cb91d00691

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\6c70e0197a22b289_0

MD5 6f72b118245269e36cca94245fcaa8b2
SHA1 f7313e5b3fd6ef3005cf4859fa3c22b6e8d6521a
SHA256 a3ac2442d7aac68310479cdea404d07dd5bf0da4cee296c4d46dce9dbd0702dd
SHA512 b34dc02360d8d408ba048910b815fa7dd3a27b82ef11a869b6acbffe3d87aa87a6b4d8c16cc03d29876a89c3122cbd3a08b7507f8da95a96bb8361389067d60a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\fd5e29285aa71ed5_0

MD5 0193b85c935e98fb727e1d457205050c
SHA1 df28206a97822ba41bfc73b6fa740d174d733efd
SHA256 2e2ecfc66bf89b039d14053cf1ad51c05bdaff0987df2e2ac292d49416779ebd
SHA512 e10811e386aa1eeb25e50fda269adc86f09b8ab3311aff32a5eeb7e9411d2855685ce790aa30391fff842af6e44a202896f498679603f8ff98064ee288400f7c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\ed274675696e6268_0

MD5 c44add0707126a553e2dd0120a2adbbf
SHA1 c0582d57ea2c691d13de320057a3352a899505d4
SHA256 4f1a68c94a0474b92acedb44ffcdc42f8bc0dda9264756effe9b9b0f881941b4
SHA512 0d23b7b5f1b8bda236472a2599da3b92e0475be6cbf52165561179f7c5097feb0dbd014e0a73badabbc75ff0c4115c78f28bcdab421f5656b55f328d39cdf7c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\652b761fbc29f177_0

MD5 87ccdea8953a2a5c30bc7f650c818ddf
SHA1 2c56710095688d9ef622b8720ffabf8acf197a6b
SHA256 545ab3165170ba583c61dfff4e6dfcb9055a236c9d14628b00104523f0f7326b
SHA512 4e2dbee0e54bac9efd38448a59c3a9681ddd9a0ea10d49c10017a52ff270827aa52343e6407c9e1de6ffb8e20d15ceaf71093f2267d21709ae940d209270fb9e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\8d8be7b954ad1c70_0

MD5 1d08e90e22f07e2a0c24349a460a3b67
SHA1 7407ec4a3a7238bc41e5f69812ce03c1370cc9fe
SHA256 27813a18339c6597f580bea997403a26c9ac4f608507342630dd4dba21ad750d
SHA512 1012b7f8c3175186bd77a3b6157bbc12b369b60e2258b251af41b90bf3ad527f2af2144d7b32447b7d8e493e63349ddeb5cc0c19a156985f77a293eb0829ef46

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\91b1441543be463f_0

MD5 319f4456d28bd2d2d57fdc3a03f853ad
SHA1 26c1d99375af1ebebf9f4d5ae96a263641cc72e1
SHA256 4ab9f9f491ce9e9ed636c4d3f919c7705a6114c4ae6d57cb60c9d19b35d4671b
SHA512 5af0d70e66565be0b43ad60cd4cda1ad4e92a0df299a3853bfd507307792edfa68b1bfd358e94e9e0e2f85026dd0df86f6bcac44b39187db5250ffb063910d0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\68cab1aa4d0a16a0_0

MD5 89ec56c6a9a5dd2cd0b122c0306360f1
SHA1 f8ee8b5fddf88f1c7ed62fe28467f71b28baa3b8
SHA256 9ab6d234be6141ad86cc72fc7a1b0deea3d6f26a029280f8f5103dd5ae0e6c07
SHA512 576a0813b81e6fadff8e01d5f11949144cd6e4df748748aca5513b11e921d08476beec703452486196762efdebd261160f8b95bd791d1a09cae19e01aed22d71

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\f3ec92bfdd26bb68_0

MD5 6046ea3d93448564a7d94b37050681a2
SHA1 d690d5af028a810f73f6747fd960e077b46bb1cc
SHA256 d1df7ca1c35cf39bebed7743f7ad9f212029dcd2be14ed83993fbde4bf588355
SHA512 e94a214485754e306aeb3e017d13944f40f7012c13493acddccafc26aeaf6afce9e7dea1efc9cf3da0fec2a6c1bb398142051f96190ebe2412638b6a0fa1740d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\a66001fa16464f0e_0

MD5 f1b3c38a6dc8eeca8544fa76338cb4a8
SHA1 108bdb42a459c46dba2a394f8411f4ba3d4a1000
SHA256 f3f10c6dab07638a9b2879e1b2c3f9a2321c41faf53493d2f9e71eac0dd4041a
SHA512 b0c6de692fce167c6b14b8cfb1d4a1d1fa6f29abe554285d13934c018a48febd1c2de8bc77d677b436d67a9a85b1894019ddb430ac3dd7c667992e1d8b9b3b92

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\2f0517fa260f97e4_0

MD5 24b90050a060681258bd7f772860000e
SHA1 91200cfb5d01ebae53290e938327e299acf2b68d
SHA256 5ef426d6620dc0b6dbe8d0eabd7393935cb11bc7a139b45e6858b6b96644d829
SHA512 b4f7c9fef8b2e50c3a284621a6e4e4307db652ec79af9370d3f8731432f9a06cca5c234ee44fc5a46217c2a96550a663a2da03476890fcf5e53459fbddc8eae2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cb4f312788a3761029a5487683260cd3
SHA1 066d0a31b9eec5273b8efe37fb47f15319e8bed7
SHA256 717c3bb12b7e2682def50b33edbd8d3f23dd785686d7d42c54747e977933755a
SHA512 35571ac063197432f89b851aebba00957235a2a09ccb2c6855b1de2a31b83c2ed53a651c737f6a898a3723909fe1daa169cc7fbbd013044655c7e822514808cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\1a65fae138a9f893_0

MD5 a74ea9b426458de0cb63261d0220a53f
SHA1 6f0bc4baca632ce7da1b5560a4db34d606c82c54
SHA256 09bc6d3849c784ce529c8fda81f2865d409810ed05086a315e42a76ad8134a93
SHA512 a24514dc74390f8e1c3dac6f9251baaa424bd3fd878486f6a1c390b2e381702469d1c178e79e469f04db5cbf461cb7dfa95da7681396b67fa45b7b5116497ac2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\a66dacdc8715c28d_0

MD5 fc7f12fbc61ae5017946d732b2dd7b6c
SHA1 3dee2571b2b50c7027b7c64368f816f0ded1f49c
SHA256 8cc2ddda0150b63e01217ff28b69d5d063b6cd8e153237f61da615f0d6571b06
SHA512 f19462f21de3842195b09abe9babe59c153059a72c577fac633d782227fac1a5d81a3261c7723e86ab2affb5276e9aa18e25b17a79c1d9347dab390552a83a4c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\a36c2ac0fc213ac1_0

MD5 9ee6b37f6405075573a829c3835ac67d
SHA1 41f5503dbc962fb393777301f3f59a2f9b7191f7
SHA256 3fee6419fd88c23e3983c5d6b4c8c6ca6bc5aa7143546eed2fc3683c4bb62470
SHA512 c588d5d014f8abf0c5ce69f982f3316338d432d1557c60b42b709261b45cad6a72d3b9c6616426d366027fec3a4e091a32a41f22e89fc7639d32f9792cbe2561

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\a21ef2864537e1ca_0

MD5 051d770d94ac76f0d0f51511e5c24e6a
SHA1 773bb4f8c5b6ad3ddc1307d614df1d7cbc74cccc
SHA256 246563713575c413166fc82de577ac8c179a0a546c40952eba3757b51dac4c32
SHA512 8857871832b613c3633ba34a220cc8a9a5396c2650b386b89e8003db62fe988cb2ed0b509ec3b7f8102571ed05dab874401a9c29d049ca70b7f49e6e08c11548

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\097f58705bcb3320_0

MD5 8a3d3ac48b34439f7f84ba31b8dfd96a
SHA1 e6ef4ac1baffa2992df1d1b53d7657d97a0f5189
SHA256 954861b9151c8bb332144879749639a70c028e1ead501a2d0e91ca8897d2bc6c
SHA512 ec9f67d4f6fe706ec2bbdf2203c82854a7ae6fc242b569c6a0db4a18c510f0b669d8b464eff1f438d1e13dee34e934c8d07d71724630ccaa65e78bba5c6627da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\153faf11b467473b_0

MD5 bb2e5cfbe40e4a91b4c354e93a59deb0
SHA1 f93e22101884fbc0cc495c18d5f0838f1084f322
SHA256 9bc64bb8df5b80381466543ffa6bbb99dff7cd250debf45c003d99ccf9b358e7
SHA512 8617107b2e21ff0290b0926629494ed9871d9bdbce0b6949318831027cfc8e50622b03e1daf8c4746d91e54a4535046fbea352b8e137b22a6cede72e319a95ba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\51bb644078fc66ba_0

MD5 f6601d1205f20e3d216b7414c78eb40d
SHA1 fc2f8ecec47dcba19fe72603673b10b40c4d3bc2
SHA256 a0fbf872076bb9fe4371415c85622fddebc2fdec31f5af9280cc97d48aec2373
SHA512 2cd13b7562656bf2d13c784aed4167f0ac4a2dabcb24cc20ec8d9645262feffd34ad1a44e1f09535d123f4f362af78c508c39458dcdb2fb196a240240b33bc24

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\ac122cb388c0989f_0

MD5 179ad7e122a6df1694055ac400108f86
SHA1 790a1f838cbace2cd2e607f25dc0fad128699af1
SHA256 538410f27af9c6a92c65e9872867a201e9e90a7e017cc4306e12a61efb1eb320
SHA512 0474aee387852add3afcf89baefe76b89a13c3792f3945374e51bf93a61624d1d3b414c8070e5fa41e4fc9be59c255190c55298d7e2127e0cd22dfae35a960dc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\3be501c2f6601a7a_0

MD5 72a70b6ec0e2e0bed50efbe53dd25b62
SHA1 278a7a568a77d3635b9755d6c98c0f19ce589683
SHA256 4da4a5825fe4e019761e51e19dd98a29e16d82146afb0afaed62b0eda786c1fb
SHA512 cee64fbb85f5cc04372369a0ce5c6c4fa07759506c28dfc2ccc232551d35e0dfb7b0d05be44c90252ecbe73366d2342e1f5c8dff9e52ac3a9b4c344720dfa9a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\2adc3639d34eb76b_0

MD5 8341f834601931d0b4a4d04a71b0a8f5
SHA1 25ec5b01fd3c7bc5aba579be2bc67dff2dbea274
SHA256 fc032dc79afcd166142ca885553897f571bcdc52a2df3aff9a1623b070849244
SHA512 834336dc62f0c29455817b5a8dfbbf7bb5540847191ed56ba43423a11c7104d7798e64ffc711103a0e10719f6465bf4258f4dbacf64d2e35f249a3947a6227f4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\27cb77ffcf15add1_0

MD5 0da12f46d733728cadd7fa4e715b2669
SHA1 39672897b94566969849800f383e4f14bc558e23
SHA256 bd658d83998b3c1bec1a6d38efd494425f0d06cfc6475b442eb891bbd158f428
SHA512 5b27f51e96537cf4344edaa93e5cc88a026e632f25fe55bc6da3f14344162ca7d834406a119ff9856a0d0c5b7df85ed01654d5d3fca9500d90c27b0850fc18c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\cc389990111c1f6d_0

MD5 80dffce8c0b6015f7b7726d31a700830
SHA1 f3c8477a2cac172ea7f940ec20583d8ec0bf2356
SHA256 ee1d74eb164084aff9e894ecd19932190bf9a7fdd75817e2ec0dc9dc670cab98
SHA512 17d13a193114055aacee7aec526890bc68777134ee8c39146e42188acba4db463a2f555ee39b154297d1c1159aacbd118b0d4b76dc41a96a05df3fb0a07d58ac

memory/4092-8678-0x00000179BCCB0000-0x00000179BD198000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\da30602550246a5c_0

MD5 f5593b003e97f81a903a14b1a47e1bd6
SHA1 a42906fccb2534390674dd1f63a01b255a138377
SHA256 498ef685b1037c89073f31cc74a49346eb98f9a1a8fc72c81c409b02622c2d37
SHA512 4fc424ed1fccabe7f2068dec8f282517fadbc7c22b038d825e17398935ddc6013257c38d6c1d8c73fd8cbdf086402c9595017e9ae26ddd58c38693af531a5144

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\f26e26f669607e0f_0

MD5 6d38aefa060f80a7ea67e8cbb3420b58
SHA1 00e568e1e8620765740aece8cbb8ff48a74b9181
SHA256 a4e468cbb62524483df6489f19f8cf97857df51330b60ca7b0dd6891fc6b2b7a
SHA512 8fd6010851dd952a690eb85c58be80b1fa6e5d89cdf3d5145fef6f6c6177a8c143287f63417b49e7eb72f191463d2a98aa3dd06fa5b5aae0ee4ebaf39570295a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\194332e1-3a9e-43a1-8cad-5e943607540b\81bb6f8f45b7f424_0

MD5 dfdece8e53b98eff2bee1343318ddc02
SHA1 c7febf0522b7abf11b4e98237f2ad1e422f73ef9
SHA256 f4bbf01b5338f64c33998b1e55f4e0815d25d15281443a41d5b328ac8c511d21
SHA512 28ba0f85053c15dfafae85f78615b0128490a83c698eb515c6007d2c1ac247c62fe8df90a380a4df64900bc830a882e41f4332756afe42ffb6e24f2b4f54bc40

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\ae5d05056aa402c8_0

MD5 263af87194c60a4cf3d2a3fe5c154e7e
SHA1 ce13190c79bbe154f178d43af1a2a8bd41f8e99b
SHA256 6683af584b9dfa6a8041a022f5e9a457f27fd2cefe2d7d3040ac89a5d06a08ae
SHA512 c4b62c66a24521e746e6b3d2324ef025c7f6147c3595baa8cef267a5f1b77d3bf38a2f5b1c37ed3e678d5f75aedeaa54c8370be36e6d8761835401fe66157a1b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\850f00c411b08c6c_0

MD5 17ded15887bfb687ac0f4c907f29fa7a
SHA1 65be0a74cae1eb109b67077915c16fac70122218
SHA256 79380b700d061cb3c539bd81753e9f2bf708453f6e16c86ce870493ea9f517df
SHA512 8de90015e5689cd6a7ad5ce57094bc4921033dd2094e6484accacb12d42da597b650f4539d426bc5deafe4e6339374cca259952bfe0c2aae14c4ccd949aeb310

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\55fa7cef15e72e77_0

MD5 e86f135a9e4460bd94e63177d4bed845
SHA1 7625d74190c0ff301d7556fa213f683d2b7ce96c
SHA256 6c99848198a2559bdab5f2c1ba9b928613d46fa0aca208be820ebe344dfc1d7a
SHA512 a20d6630bf0a630c33777f5a7a7a209d9815ce0850d80abccb3eeffeb7f3d5bd1f1a7de466addb6210b31acdf124365923eb9bc41aee2e672f1706898840b039

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\141b6f97cd598a59_0

MD5 f5c78d23603ce2da87a8b98a42c7c26b
SHA1 36b71fcb759c68fd9df61345b10b6dc1cdd83f0d
SHA256 8a0f423b907d53d342e40ecb34c005d6d21a14462f3a3edb2bc6a621fafc1426
SHA512 eba83645e790f3adbdd5a2e84b6dadcd2c7e3d7eacb68cf42fb1070b88153185d6bb2251db6c440073bc34c015a657ae0e7471a9368d7f2c387a8a346824f473

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\31f28b5b21f90716_0

MD5 3710541a61557e87f037c03189f8dc88
SHA1 d493a865a117ca29d17c18198f3fbb8e14fafc6f
SHA256 b6dd618c443079f224e197c5c9401745002e95394e206924027cd6a31a03beb2
SHA512 b3102ac81a43d8001209d04d62149671749e47eb3ff4ef0813eec84941ec6eec8744337deedbf6da857ee7dab834a4c3248c52948d9b91692f420f3f6370f27b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\9f5dec6b095a7b18_0

MD5 4c4f8cff5d3e4c65497a68239fbfef1a
SHA1 ad3d85a10b8b57cee09e8e7eaee8cdaf9a9667a0
SHA256 507a5c1976498e1b45dae24a90ac9cc716b4980b7a884a6005782e9072d7939b
SHA512 9d8c1a81c5072e455421246e8f61fef0815422944f7c5e1b5383b94945fadee0fdf1b393e55ce852a4a6a7038837d4e97a924f57f1f9c369a88f1669cec0ab15

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\9d03d9ba54d1f48b_0

MD5 53608d8afc4f8362e11457d2ef0dcd10
SHA1 16a9ea1661a92939a56496eab81fb8d964aae7df
SHA256 a9777eb13525b3372f551bb84bb231ce1a64c714d18bd8160210d179f046dbfa
SHA512 2b55885e215957eeda5172a96361cb5abc4eb4a5269974b7d60ec7363caa03c98b94963e9e39bb20d11aeab90f48af56897b7fd278b528ce24f1d92ba07ded4d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\a439a00ca29bcab6_0

MD5 7dfbcfb99cce993382eb6e596099c36f
SHA1 6f0f30837aa7dbe4bcc962957ad06eabff607f37
SHA256 21429087e9468be692647318160d5be9cd9d6b76966bf2b887cee274f1db554c
SHA512 5f9980664f3d077685b6914d058f4e58c18d3b06692917479d2340b16df4e47432d1b73ec77568450336a2ab905a8dc2938204bfe816821e02c298a76271f0f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\5bde7a77a9baebf8_0

MD5 5f5e0767ef1460c7132f4d6e39fa0901
SHA1 b871034a151b2a35f6ac5450d80f3c926c423363
SHA256 24015273616826673900a6ca946b8ab1340bc47ff00c2f96967bc4f886171b52
SHA512 9e5bf5778006340556d38ee90695c170e4d1271d52c81bbd232f8c04c7e300b5abdbf8bc1fab386d1ce1c84bb4c09f7f774c30a18ad3f60a78d8f82fc022a8bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 735f1e3b715679cf1caa010e8ca99a92
SHA1 19e44fb9665efafcc38f7b1a701c617d4be47bae
SHA256 76cf115e2915ea7afba1197bb7d3609b55429e194b86d0381ae8dc0b98de6d80
SHA512 18a7c1a62ec5e4da2ce81753655435b12d71dc8abad652f99be5429878849d186ea40eb9565c7ef4c2bfddb9fac848a4f38988a6117eee76599039857da82bed

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5d6b4f.TMP

MD5 5637338fc8577bf77736a59cf02ca9a5
SHA1 3549a056b5f58343ebf4b047869731dcdb1273b7
SHA256 e699d8269a429e37098007ea8c2675865fe6242b7499bddea4e484d6d06795f7
SHA512 2a5594ec0b65ad5d8c5247067f26bb2d4b605ed9d5e3fba20c6fc56bd252a800952c823393cb53839de40eaa9bcd19cc99de6c899cf0baabea0a9a75f2aea972

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\7616eb295de7b7f2_0

MD5 9d8537183927348c123981d94f2bbe86
SHA1 274b2f135d8bdad8f34d2d24521e94bc3e6ad4cb
SHA256 7a6502705a1dfb11f658371c5abbd3a7d692e9fae85c5947c4b92d90cf7fc2c4
SHA512 a21d2619d8cff5caf95fb0ebb99234b626c18d93facbd35dab21b8492f2230bc791107b2d4c382da836a5beded21e4ab66981823a8b7df7a967fd5fa16720358

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 86aa9a33f4d243120bfa49368b1d329e
SHA1 c15d74405390a89602d84f0f9328513b04c6c3c0
SHA256 96de8825339df306e769e9fe0801d2532fb0ad88c2f9875d4200c0cfba3dcf3f
SHA512 47b69ba07116b2d278743ed6ee0a52e827e366f7c149df9518525d62c720fc5dda8bb04647da69604905a11db79741b0053e1ffcb05ba750ccf7f7f34194b98a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\d0a3cf1e57d5bddd_0

MD5 b30fb6ba70d9675b8ea87dbc08d829ba
SHA1 e3a56c20b97bfbb7dc2652fc821aa30114f83679
SHA256 36c137ef20a97f32be6f6379478271cfda7bb7da59a23f54d962642e126a6c22
SHA512 8873c4f098e0b528de5f5c89e6cfd0b72f47da555308ed6b67c7824669851c1ced610f6787ad839d3b63b2e73a44107aee8d4f78e91afc76812366980aaa2fb4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\2c5496a1ee927658_0

MD5 5d077e025fa6ba25d053fa76ee32a39f
SHA1 19f1b1c1e3aba194f1fe4d4aa1b456e74f23a003
SHA256 f39c0f132caf8d1a0cddf2f03cd24408f586014cd03fe7cda208a052c025d660
SHA512 47291a3a11e5b442689ef95f48660d6e037736243f0b01653df7499666e6502d890aac1b3cce0bdfd3d715cf31dc6092ecfe0e004939495362bf15745237c5b5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\f8b5710b1686fc83_0

MD5 9f0760dfede46cd8d63f9bcf7d5ee261
SHA1 5fc81739fc20b0edf6d3d0f74df5080b95767454
SHA256 dcbb1c5b58b1d9f0a93d4ad963a186e27aeb79bb86f6a3e61c985bacff77474b
SHA512 3b058abe71988d304b3b126065b12227722ed526af12bc48ddc50731a8beba8c226e5ede4d2dd5041e06c64fad1ec0639113c43595902ea0872b170c6137fb21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\b149cff85dfabdbf_0

MD5 3e005e709f1fd909b834b76b749612c5
SHA1 b9cf15cb633a69cc2db8093a40bde85a2a34a369
SHA256 7efcc2dc49ee31fab090c7fecaed3802a48760657bb02d2881d618333abe57c4
SHA512 d6f646a5d4e12786eaa097d630f2c622c3d9e8253b07d50f165771fe35802f5a6af4072691c355255e547f75d37c15e6a92e52f4676b83498d94e9a66e0ce5d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\01553aae085bd1d1_0

MD5 dd336e7ea1eeb9c3f039d5611d4f2fc0
SHA1 fe6b1013da21d930f96ae307fb9565cbb25be070
SHA256 0fa49b280561c014027759d5c30e9b48aac4b01bda64058c01e3ebae2a50826d
SHA512 49e8cd97448d7f692c2ee2a13c2e8ab0e7f30aa6469bd3326cd327870d49ac1454571bce9ee9b1e90ecfcda8716f363da4856f6e847b28d91f84727205b22019

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\6e4f8adf68403e4d_0

MD5 a6965d8ecce22d998dee383296bf81f0
SHA1 2299d2dbfaad219a7ac0b8965a43fac16bcb5b88
SHA256 88f451bbd4680a0e092a8e5544eeb95eebe0fd8817150d31a5695a7558039ba0
SHA512 110285c0b0857e914cf0f2061c1ab6428a8c97ea931ad5cfbb20bd5bebc5e0e8db7ee2cec5322b1514d39c560fe3e2cd3597e45fd71dab2b7bdec46547cee329

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\d0c1f0108bd78a89_0

MD5 4c6c80c3937d7f87c2ccbea50fc474c6
SHA1 841d28e95cbb008f2c64feb13bf5bc5e1fba1909
SHA256 4fa41ba44dea03764cb11b50abcd9dfa6893e7e50d969bd4b94f7937c3eeb4cf
SHA512 350732aabc100530c5eb5ee0ebdd53a9d0950cef9a3be2f35971753fe87b7310e650690cd5a3eb5efdf551e4ff8b7d8b11148602052ed06724d274db896c779c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\1de1ab4b5560552f_0

MD5 c4743b15c0c440c951c634aa5d07c9b6
SHA1 2354edf81da2561d40219691591da82e8617b473
SHA256 27c6dfdd36b69464a06dabe83aa32e19c29ddd194da1d9d20413ad46a88542fc
SHA512 10a4eed5e3f95fbf006afe73e4acd2b9eee9ac421453d16d551306a4630e03e80703b709b61ea58758718c67bf6c4ed9fe1399d2eba4cc6046f26385c73595ea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\51c761a658a9aab8_0

MD5 ae5df9528f192f1273471a77cd8d2628
SHA1 e406b5ed4c3bee9ed06b5efc4988ab1820c2eba7
SHA256 b74340ffc4a6a66b9a087c0b64cdfd939c20f498ed22d9164797f8cb975b7caf
SHA512 c1a1dd535be076e8d3f99fa52d10bffb781584c11bcbbc4d9cbad44eef57ccc9046fa180680ae8bde048b6a95eeabc820c0ad132432b5db37a74ddbca438c59d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\85cf0bdd406c6dba_0

MD5 b098b9a6cb599fc3062e143267444cc3
SHA1 41b2f251995d61642a49a8c2a70b25af5d8a92fe
SHA256 86de4b021933c1fd7de0759d17a600874c8b9cd936c39efcdba80cf15e8fc990
SHA512 a6050b1a288930ddd15c2e2a4a86c9b51aa09cd08306186127c0348d7c82b7badc6e49f7644e7660810b00ef9605b0d69adfd32ac113e4486d623f520998930d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d8

MD5 86b3f187543f5b8be63654d93ff6192d
SHA1 5fea19297e0662c7031f9e3eb4876e3b97e9c11b
SHA256 636d7e3fae0782402357ad110bf6b6375e0eb75d26bc0c9117fd255520814c4b
SHA512 db1b7286575be77a5d3711eb550c2e09886875f122911d9badd332d8cbf278d0c8b13c635c6b7cfab70e6101bf2f7a46582e32ee0346bbe4c6f9d9c0fc2aeb15

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\e51f86905f9eb849_0

MD5 6554ad6328adcf0b49a9457932c9e67b
SHA1 8da38ae48a847eba1733ed2178898414906750d2
SHA256 9a34245d452d46515444a59d1baa28e4a3d94dad411edaa1b4b8507ed5c706c4
SHA512 c4a7555cb6ab7793476c9b854c0bf463849609ee2179579cbe813729b80574ef64731718fb8dc2799ecd5d872b0dcbd133c74e62d1a568b73bb2ccaeff0280d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\b8ad17299202d7de_0

MD5 5bfccaaacd69edf5269b9a9d6505af33
SHA1 2bb3bfd4e678854ba0d6aefef5f6d169a1aad080
SHA256 2389d07ffa322ff3595c9bc80dae74ef7c906e92427d081b40554f68905e28f1
SHA512 3f7a3faa26eb8f2ac6b7b2c04d79d7c59093f0167e1fad25faf3d5ac0fb52e9ff7634f8568f972648f573788ca881c2543e749152ae4a3bb104c4c23088f42db

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 7863a2d914281f2ebc600b485b422dd7
SHA1 a03d4275b85e0e1938b76b5299d5d337f6de35aa
SHA256 25e93774e9d641cbd422b29155117892106e4235c1f37f499ded01adb34ca09c
SHA512 38171a77144ee514308063b09508505df50029a96fbc4d0e1c56d8886aa35768aa351435165ed592fb6aa5764c2ae8274206a2614fd73ed08c990553ec01d6e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2304a328766ac132df45386649bdfb24
SHA1 ed2e44bea2ce45d9bf6c8415598751c8a6c8c103
SHA256 ebd39e9dab0b8ada8f5b49febeb7967370c3aeb733feec91e9d4a04558864117
SHA512 3f8db99cac43577cd9f6584459234b2e981fdc9a6b07d46b3bc9526050b73514acb76f7f2ce1f1dd7d2c40b7ba34c030b16a4fa34d9b9cce23a3ea95b9e6a6a1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\194332e1-3a9e-43a1-8cad-5e943607540b\index-dir\the-real-index

MD5 2ccd92b8758c815f9234939d57aa33d2
SHA1 632a869facca407d221b2dfc591026531d5accd7
SHA256 f5c8c287aa9a3eebb06a446c5a8762ec2775b056a4d06e77f633e9be3f532ddd
SHA512 bd49c5477719e38b89eb28d95a9b7a9e8237b8cd4566b5b9a3bf190ecb7b56d0d578c28c550ff15ed3702b566b5a1359f6fe3cf7789b965ab432608c6d4daa84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\194332e1-3a9e-43a1-8cad-5e943607540b\index-dir\the-real-index~RFe5da5c8.TMP

MD5 ff0a5c4e1caf949fd65815a03304e3ca
SHA1 e42eb29b010cf5735fe074c20c87af3cc436bd8c
SHA256 2e5fc4a407ec137a3c3cbb485d30de78bf0ff9ab02bb408506081d7f916ca67b
SHA512 15b81aa5b4d6292cf5a3f752e1ab6e374bd38b15f5499863692ed0039d56d09fc77369b3f30c37aaf3ca43a29d167fd459597fb24f526a0569ee92a4127c9e31

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\a960b909-885e-4ce4-be5d-aa2e614d9a49\index-dir\the-real-index

MD5 b64c94877b587e69bc8c57b1b718be79
SHA1 bd56e7354933961a378b41a4820a47b17b2a7526
SHA256 92bcfae407ebe638fd4e8ea2c1035cae844ec1c05d2376846730caf29cf36877
SHA512 bde7745ff4aa3344e712764f5875a3a6ed2cbd6e223eb3d34e051b45724f7ac0c06faaeee38a751ec46d7bd04731f9b644ad3e49d977ce6ad7fa3c98c9676fd7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 4ef19de479da3c2d281856d075d3bf0a
SHA1 040b975a6641613d936ddf4196fb546477c1fcb8
SHA256 10ad63c3fc41e044d1d202b2166be5dc0be173f50bbd04a8504ed7b1f436b8c1
SHA512 c79513c80af57bda76b0b9c9daa524892905b9654b5331ac834dc488d8d780291567ef3bec91cfadf36c6b2c201abdc362e879ed24bd33866b96ef1e463336b7

C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

MD5 1f7eaf6e5a4f42fccb496fb952f679d5
SHA1 d0738a69b2054997cebd13410222772043755429
SHA256 445bdf803882b43f906f6f91c2060a404682395cde428d485dbad91a82164619
SHA512 10d21f366e8007e4994de75f6027f386cc26070017f9e181b364d4852b1504e6659237495babba0d64e49b9918bb221ccf6a446eeb27f30b8343ba402ceff815

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 855db4bac0499e487463e1ba8d97633c
SHA1 acdf0dbcbd606b588a7398de117cca3d10d6be03
SHA256 db48704af45f8dfa1de79eb3288c589346a38e1ce4129fa72e4f8f678500b615
SHA512 40cc816fa89de89904abb6c8da475133ad7342ad0ce8a12e16f9c015a3370c29dedd0ef7eb3731914b0949a349a37a7c510b49bea98ca2ed8608e3353d567c17

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\index-dir\the-real-index

MD5 7e86d9d6b407a04d2a4389efe6cd16ac
SHA1 9671e3ef31e77ffd09c428bc9b23a516ddf99293
SHA256 43e07db16389ece41e7aed1b8caee0b0f59583c4dbda922cdbd07127cb49cece
SHA512 c1c3a448c7e5925a692d1608918cc75ca5f8070e692563dd21b6977952943d9c66abf877072401ab2df430f20fda5c1c53a15fb932c20a8e0c2a89b1c2ec634a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e6119810-630c-4c44-b8f4-e749ae8ffb89\index-dir\the-real-index~RFe5dcab5.TMP

MD5 066320b2c08e0f192e708bbe81bb0d14
SHA1 ca19a78eadb470f8bf9bfec5829c6f4539933184
SHA256 df8929663372ed2a6c9ad44625828c365c3f8ff84d57e2b8ca60a529d6283ba9
SHA512 2cd0c0c115410a1f6bc17648a5bc70a0bd7ec9e4a83c614ae685098e5a116d2dc241e31b5d2d3fb1600591046e4f8a5997f38fd0db8bebcdf336f6f01781e409

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9e7cbb53a955bc4ddea200079ebd6ce5
SHA1 31ab16fb8ad7b2a9defc03a5b5f01061f2d14673
SHA256 34522a132463f5e78200b6b5987446829c32959ae12ace6f9083728847e361ad
SHA512 5aa1d48ce512f5d3a944a44070152428f9e1114b8c03693d159e4c598aa25d1ba5213913d5f03ef5cb620c52f0aec265d9ec834cb2422f29892177d241ec8497

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9ac5677505e30d05e14a1d7a409b1147
SHA1 96c06154a31152465f0b6d730823a75aaecc5464
SHA256 efe1112b9015c5d2f0da033c47d72def1d991e51493c4562b08d1ab20949c466
SHA512 f6862f56727c2fe6d950d43b85839a2191b84e93356403d226a78b1ffdaac9f22d71620c6e7d76fcbca8796b878eaa8b733d1a14b309fff7ff3aeab2fb7c0807

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e91d32be4859fac1b1835096a12d6dbf
SHA1 9aa6abfd57f6fbf1ab4088acf8ca4c067483d77d
SHA256 037e2518dbd075b6cbb442dc9da5b39fe45aef5643f6df03a16b89ed5848c5f5
SHA512 40d6e6822dbfcb37b3ad57f78511d250fa11ee21bc284bcd59096318aae72f81407329eaf96115b1612e7d3a6599f3bdd1263ddc64d42fceb4871a4d6c87f03d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 be5132071546f9e2dbd5b499c5959be7
SHA1 24420eb68a677b84dc5408a40077b8cbd463fb3e
SHA256 9670825388b36d5b1ed11373467a9d8834f94fc8f18f0cdeeab09656d17b25b9
SHA512 c69616344c3d69e1c3c945529adf7d48806134cae67fc0e43603b688547d821106cbd8c77cd093c456f24c9d5f40ad2bfe37914b1a0ea091a9968068bcd9b61d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f971d490c92321453531fbb36bad1dfb
SHA1 f07ab0c330c3428572ca23c439ba0e41e06bea11
SHA256 4ea80e566225ed01b5597ff10b34968da0e977a90a505e994e206f631e6df200
SHA512 ef55431beb6fc28a6cc9437f20a28d9be9cc7ccc66b5c68fabb7cff3a1aa4385ae276ad081c48b7716d4b9023a0117a5927df3c78e118b20a31f866363f781ac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000119

MD5 46437d5bb936cd1c61e8c36d1fde2c4c
SHA1 fab96b90cf8f107cdcb9fe964dbda6ac9e73a1dc
SHA256 c17435f8918ccb84b6c72df7f2cd5913460312c60651c2125ee9fdfec8025815
SHA512 691aa7d574a36058e2a4f28033600c2f8ad6b9ba8b91d34f348a82aef61a0805e2aca897cd207945a0e10709d7b01cf7e2a15bd116bc473b5e961d99fe56e23a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2bd16dadc279012a86e365343a25ac77
SHA1 a286d41574a4d54c8f489eae6a8c192fff4303bc
SHA256 eda248779646e8b4f78dbb1afe71b6883032f6cc4f7888186bf1137a294baa08
SHA512 d9d36178854c304d0b99751e893b2d8fb2180582efa0ca26eaf88ce553650d1d711fc4b40916c9dffea873f3b08b2be72d768f300775630149e9b7b82bb1af54

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d2

MD5 a091421c5abd04378f160349351eb5a0
SHA1 d6c24ca5b96eb76cb2d180e16c2f82d77cf9f0ee
SHA256 9683e76b3d486be4c46ffdf83532380db2e13faae18d2c11c0cafe4a7c0ac51a
SHA512 720dc7b23b0e20ebcbcfd61cf3c17e4e3eafa966203e42031491db84ea8785de90135462666184256ed4f6f0bfb5c8de3b4527ef3119726d521d5c13462116ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000cd

MD5 df19cab57a62d4361998bbb494f37043
SHA1 601f84eb13a6eb51a9c2ea2598c22bd211b95c85
SHA256 8b22a4fa4566cf68efbf8842420d5eadf2afd62151729de16757741ca0f124cf
SHA512 b2659e4b20aff75c4aa86f1cd8e65ef71b8f80c8b52d2256d73d4ede4fbf012cde2c006026adaf9c2845043e921abfa6272b2b1d43e33db1ee77732ce5c06059

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000cc

MD5 9fd80128706e26ae202b7075a0239919
SHA1 90aed0c9ac45c0bc96054962328cc23816fe7530
SHA256 63ec1c05ead4d64a5fe148416ac6398b4c33d0586d03407274dcbb47aabd5012
SHA512 5f09c2c63895a150579cf3e7c956f1853579c5045f04f3171befcea88b6bed96b7c9d98b7fe0859e8ae62edb3252f57f51e5f4af7e3ab5f4c34230335918cfd1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\a46b31f2-c63a-483c-9484-d73f628be1bf\3bbdc565ec74be16_0

MD5 3a3f54ffcbde358e2a2d92a80b5e7617
SHA1 aefdb603ae1399c54fb716a7fc63587c8a098870
SHA256 ec7f6b50fda01922b4ecda81efaadbb3998dad776b31f0d0859c2d2a18f522ad
SHA512 7efe10f1def20bc2fa65f5f95ea017b6d11003c4b70c5bbeda8432d56657c3f198603756e26b203c6bbf5aee8ee346b5802e04ea55819fc1f7ceffb1f1a7a7b3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\a46b31f2-c63a-483c-9484-d73f628be1bf\6fe6c65da88041ab_0

MD5 6aa4d972f757857a2ce8385b0ff6f719
SHA1 3f5d32f086d7712f1a2a073807b461334a9bfefd
SHA256 3346749e12fbadaa87deb987bc227a4d08e4e818802485b8402c3d51f10311c2
SHA512 2835c52ff9be4a7eb23466f6343ba4063403898a889a27208d571747ef5e468d5540e0e1af7a57540f966b994d9304cea063405048883adfb7d0d17584083c80

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\a46b31f2-c63a-483c-9484-d73f628be1bf\d17d4a362af4eecb_0

MD5 d48ed7a897e656378c6f78bfd69065cf
SHA1 c52217464a6f1d31a5bda16c54759a65855db201
SHA256 f05c1d64c60757ce7506b03265385257206e5984d63fb4997a8323779a06d04c
SHA512 12afb4e5ea01cb04dab68e36f5a42298523005344281dd49797e72303a2f891f72a20b98dcd716b7846feb1b13f350536336c0588c6d581066ecd9cd0060aa14

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e6716383630e4274fc8cc2e6d3e992b8
SHA1 beef000a8f1848031d386620cb77880d6c1dc919
SHA256 aa6c51077f2bc48ddbf72a54dab100d055e2230f451d03b6c000a1beb3970d6c
SHA512 83047e47a83472ce70695da1f2a8ea1072d064501abcd5cb0b3921bbe236a797517da0810d6fb242e84cfcd2735c0939c779825c22fce24eeb3c6a1557ed2448

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\a46b31f2-c63a-483c-9484-d73f628be1bf\da93f4ee5e426c56_0

MD5 81c6bb6b1d9d0b1d28ef89fcc2ac969d
SHA1 2f83f12a2cd056c22d76a252014a9739d9f00b0b
SHA256 bfc720d3e2f0dbaba75e7586622a8dba4be1a2cd1a46f78620dc7b4fe8320463
SHA512 5fe579d8ca3f5c9c8865b4f6ff547181f0b4905e681ab9c177266497c409a60fd3c61c84b4231aed5a7d56a01af834ed98c05f6524a131278b805f80cc28f1c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\a46b31f2-c63a-483c-9484-d73f628be1bf\fed7746333d73f18_0

MD5 b62e23092deafb0b4d2913e479f7798f
SHA1 86203ea8affe9c77aae5b42c9813005fac44dd7f
SHA256 56831e35e59dffa6610aa367abcb1742225d6e0bb1cf2c58dfb35beea8bc1a45
SHA512 0252d6be78b30f38d6c5945d1135aac082dc72a76c14cfee824bfa6f6d4d673a79cd310cf1fa49b22b915d6e2628b879d80690d3e42918be1cb497ceda8708da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\a46b31f2-c63a-483c-9484-d73f628be1bf\ed617e807f3c1e7c_0

MD5 d4e51c98021ce3fcf6c1104f3b4a389e
SHA1 18e766e45195aa18beb3b8621cab9b46bf413fbe
SHA256 56bd29feeb167db49a9634a175fa038c40c23ccb88c9acd48fda0eacdc994572
SHA512 0549277a4b0eb9401bc788081d1851087a4b0e0f9fe79f6624b0ce994f37d87b3d99d01e80c944a553e885adc1e4b9cb375f7f5e30b7f1c37c735dcb6ce18d52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\a46b31f2-c63a-483c-9484-d73f628be1bf\e48f0400deb7b410_0

MD5 b3e73313b2f1c770098c2683c590f5f2
SHA1 485105c3811ff9d7ae30da482455fc58d926144a
SHA256 389719345ce27780aedc84a9dfaa09861606c792872e9ebb3eeffaefadf6a65e
SHA512 2e9695b332908c95a1ffb10b86b5226e2fd4405aa73e6a61f53c8ba767c746eefedb4eaa35da8943692d4a10b4668f4e3d818d9bc6cb0c43f1a1f78860892e44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\a46b31f2-c63a-483c-9484-d73f628be1bf\b96fac512d2f97e2_0

MD5 c946e60a1b3b42358643392ce68363c6
SHA1 49bffc15a9d01b0dc1ab1b91a74796305b591908
SHA256 891fdb925299fa9760231368130b61e1842406258557e34cf06bb569c826d21e
SHA512 d6474cd6e47559db890621471d0a89c47c8fc8ba18e56f8a760e8b62af4a12c0528f89ad52ec0ccf4f435ab6fd47a7b2f36c27134afd42b11fc6546c9a47ac00

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\a46b31f2-c63a-483c-9484-d73f628be1bf\4c2f7edddf9f0a33_0

MD5 e5e623c5af97e665140a72ab91bda399
SHA1 f671f988bf9cb8efbe1443af81451025b61738e3
SHA256 e9f818c989ec7ead67eae0ccfc79db72187efe5ffa7305804787f10da3464094
SHA512 0a2ff191d46a7760f4a90fa4ee62e7068f4ce72f670f054ed83aafb1dd6a17cba0e94dc69dc8b72b03363795870aa9936092628fed59fc4c048a0a6df4db08bd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\a46b31f2-c63a-483c-9484-d73f628be1bf\38acb6c3f23e2dd8_0

MD5 47f6a271f01bb3ecab0359ad1ac22418
SHA1 767e911ea0e0ccf0f476c9805efdce5c8d6229e9
SHA256 e5d6350d6238c24d9bcee70b4c86e3a8bd6cdc5ac72b9399b32bf5c2ff6e21ed
SHA512 c074b636eb906f8d3cfd7b4ac075e2ee5bbcb699d3c184aadb39205746eb8d73b1223be5c02a32ab6f49b13f068e32e5e64b3655babe1bea0eaf2d5362b93e0f

C:\Users\Admin\AppData\Local\Temp\RarSFX0\installer.exe

MD5 773a58cb4cc8459d38df010d3f9d9806
SHA1 02c3b45fae08436e118acd4f607f3bfef7645a48
SHA256 a1de2e263a928ea2e401354efc6204d810b025aee030eaa6657712d25a5540d5
SHA512 1b26fcf8f3d40d6220f388a766d491f4cd228c34d67ca3a1929b9aa42fe7b35746cb1f717aacd43508f05038dab13a45950e14a8b3fde12c3a04ec8b4ecd597c

memory/1624-10596-0x000000006EBA0000-0x000000006EBB0000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\RarSFX0\bdch.json

MD5 bcdff804f3a5882a27813caafb66cb41
SHA1 1cdbf11ef52edb45f6dceef1c8c148a4173727f5
SHA256 01de52be797d2ab6ba40f432b250f1e7e409d69efa12b4b5a4f151f2f548f682
SHA512 69503058fd39bf05847d2ee16b90d8da32568c29d34a502921b105dd591abaed578e21b1d8f985c0c46ff545c02e8385c156f158717c12415a7c4afab59bddd5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 42c1a669563ecc8368939c52ba7b5a46
SHA1 c6b800934fbdf5864cafd9e3cf9c8faf23d0ae37
SHA256 f04fbe5446ad6717d299af675fd254fdae45ef724917a02b1810c5e8ea52cd52
SHA512 c0218cd73dc934cf8fe92fdd84269e4d9d1ae3a06a6eaadd4e308bdb52e2167c596d8bb30556922b4c7bb25b452cb1d1f9e7e4921e3cb13a9a853779582455e7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e1e2f73f-9048-41f8-8de0-edaad7f3baba\index-dir\the-real-index~RFe5efdf5.TMP

MD5 ca002df8153e959a9aefcb7e4add9ea4
SHA1 0839f5de5525c48f4905d709409a4d735c879bce
SHA256 1d5bd2800a885ce692adcb94868cb4829cc1cfbc1b80b23063d8968f3a676cbd
SHA512 d3b3354b600baf9d433bcf305055d338e7a7af4beab76f8286ffcc3b1762fa49d957bdba70422d3e565266b562ef8e3e6d4e296944e6a0880110e682a7b1913a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\e1e2f73f-9048-41f8-8de0-edaad7f3baba\index-dir\the-real-index

MD5 f4ba1e4f8feccd9d0a4541efb2d6ebe8
SHA1 3905a078e4cbf1e5afeb7fda1621717343531765
SHA256 14972cd311248675e5d8af711f1e6ce0fbcba9acc3d4880557f5b80a7ebd8109
SHA512 ff446f1deb73e92371bda5bb63e61ecbde1e4d9ebd2a987963e113afb3e9a301bf623dccbf56eef8ec9dd4ca5db833e265e3752ca30b8a4c98b05f43dc36a93c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\3d357d2e-e087-45e8-bc53-78ef7b56e80b\index-dir\the-real-index

MD5 4b6f31e9763ec006e326c5f4ed5c1d0c
SHA1 970e2972a0214a4126affcd629dbf57c4c52de7e
SHA256 aacd2e83bf74049d642afd39bba1d926a716b26be8aa5f40645543c79901139c
SHA512 71efaaed515ef4be95949bd87a7a980fdcc2260c41792cd46a123b63b8002da43d35e2577e9fa57fc08e146f33cfee813840816c62e1c6652a73c1418c377b7e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 30f36e794b8dd7648324ef9de8082a80
SHA1 c07896636a025ebde064d7d7903d537d5fc291a5
SHA256 f4a4e4a5e4f8f2681a57bacf76d3d7f8d6943e1395897e1ba09f92e4717a42c5
SHA512 7bc126f674688cb46573ae0dfef5fde3932d0e245d8fb17a4602017c78a57fdae0479b5272bc3bc43ce7225017384e52b6aa2ae5b0ed761f8ec4b9cdafa5f9cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\a46b31f2-c63a-483c-9484-d73f628be1bf\index-dir\the-real-index

MD5 e7a1700fdc45f724a631a49b4858c3e8
SHA1 0fee5807390dbe5b63f9b4615d96d2922642e502
SHA256 aa92bef9de1ed185cf32ab3d0b60b086b0c9aabca42af239cc9c3386ac1d472d
SHA512 142c8f68333b7d2647447d03e6c3a4cf25f4b8cbaa09233de23f184d9ab44f72d047f0e21b44bfc491e63ee0c92f9abb557b50a424fc7359b0e440567ec37b22

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6ef5e024f5f40f4cc2d74f31581a990b
SHA1 7970dc505ef8d918986977a040d3c17cf4e05d5f
SHA256 aff5072101be80e1fdc66ba95a2df56368b1b4a3027440383e1c39729cac8b7c
SHA512 2fd8371e431f67453f86c8e4150dd8afd062d6e677acd3245b1444ca991cce265d6f7a3ca1eeb37f39e478e22c90ce54c93f11cf09fb8270b2d8d22402e30acc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ccdce2ab90b065c8b191524d11498c3f
SHA1 5af80c87c075e80c8e1dd7445eaea7caf90eac7b
SHA256 e9e430ada2ed4440c6744d483bc27d36bf0a5a5303caac2d2e8751bdc6467677
SHA512 b97bc64593c9b73d6a2676ed144fbd227ae2c1b28e91a4c22b43e47c736aca0d06ab179d96b6881f6e3c6de5365286a2f4fb506d43dfda4924de5c2553b62fea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f3b5d918c4a89297a76dfc482a5f002c
SHA1 e1e3cab7524ac92812f4cd7b6e78fee6d77d8214
SHA256 8e4aa33aa88e2836d65715256a7be66766d58a041be8b2f9770d12754f132b9e
SHA512 fd14ad4fc5ae0f5dbf81177b788cd54550ff2f3864eb1a8c6940c52d77f1b91dc67a4389fe958770c515ab1daf5b6d982fdc15b121c2b0b21718862bbbe90640

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5dc47f944f5f8b97453458a5c9f3995a
SHA1 ef83df3fa85428294150be1c73468787753a0f67
SHA256 9ec8100c6ea1941f9f61d625bbfcbf4813cad2a67ebff39a3015215ed08dd3c3
SHA512 c43f6e5b0ec864c225040a48c1f2b88c1b7f41b0b6b892678db6d7353cbd705c2234eb3b0ed63beacfc0d53a844e6e81766f5c0bc83d736ce3d7ea2ffe336cba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 aea061b96534d18b331b837c0ebe6291
SHA1 c8f58e59a304d670dc22a885894369f79983f755
SHA256 230760e96c20bd2b68432bfa89a1c18828db7e625fdfe7f57c70bcb3b9d386fc
SHA512 21d793416cc13f8e29a9162ee78c2aaf29a92cbfdd4063f522a50994b906148485f7c31b7a18441b6a22212e40c4fc8c02486cbeb996dcf76c67c5620f9cf307

memory/2968-11365-0x0000022B41620000-0x0000022B41B96000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f1f835e5cc9e75b9_0

MD5 fe870c34deff30f685b789e2f5b9c14e
SHA1 39bc1f48c7e1544ff20fc2ed3e49d854265d9220
SHA256 12bcc4392b5c7760d365b4ef627a3a797544a730fd10aa0c6d82ab9282e99c7a
SHA512 3aa7af8486c9582791a2fca45d6dc0c5752b1b313bfb7e6953d0b87e32ad331ea1bd465dca33d303eb8dcd650ee608ac836f8a7ece665a9dd66317603ee73622

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000139

MD5 98f7ded41df9df121c853574b3e7f15e
SHA1 c33dc8e6b84300e1dd99600e453b1c1103719410
SHA256 52dad93b12d78578fb838e07303cb9f137cc1f46a9fbdc8bf4bbf1ace762555d
SHA512 de43441f031169efa3dd8ba99d9735d72f07272c159a505634a53a5cc34cedf7530cbea6aeb720e69c91c903baca27c271fa8288c97c9c4541aac74821118d50

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 f131028faff4c45e07b017d81377f702
SHA1 43eb2a1a6a29ae4ee2dd84717bf74708d85d012c
SHA256 ae148edb7bf66107527fc329955ea78c3160ec4792e06bb0d226e6cacf8791e4
SHA512 2a92c87fe1b88e377faa25d60d90500eb3bfe97b3fe38a51b36d9ea3e8481f773c6734d36b7bc8f9384c0423b3593ce9e85b2a12ad430e7541dda537f493e049

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 93ec5a253cf32155cfaf9097c2959acf
SHA1 e3809105213e84a65bc1fa49fad0b0d01505cb63
SHA256 6420d6e770dbde4cc37446332ac94b171a78c32be56ac66f3267e96d73d330c1
SHA512 8b27e3274727eebd384c236a149f6c891967bd6649614af88e40a7a7215e75e34d14dcadf11341ec1d6e5ce31f3a5fae20216690ac65bbaac00905d6105809fd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 069a4b4e9f905b70c110289ca1a4a587
SHA1 7cabf1b8725a398d6461ad7aeba209f773d8cbbd
SHA256 19b86c6e080e33c4a511f293310642e44e7e4267c1160bd94df2a7f87d314018
SHA512 601e9ae1d21cecedff4b0008d0d389cf0be5badbb4f6b3a96bda3b82946b8b6001f9d333bc5a4f5847b5bb30b9d33a77d98c7d9c5f6846b6ae946469842987b3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000145

MD5 c7499ca185afb8a4b149196d729b7d1a
SHA1 515a63fde84030ddad31b84390f9ab655637705a
SHA256 517f12733d8c3f36f4acf51221bba37f77af472a283b7e65e9c6fa6ec8615ead
SHA512 4737416dae70e637999ec218c38d176ce2571cfe892b704bcb3a68cfe4c0a8a2deea50f9e1cfc2f70da05126d748df73747e19d72f983eb335ddd350068e23e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0fee0566d513f939934737bff15544ce
SHA1 50642d7a20957a5bef3e05f0db4337a1ca26d5c9
SHA256 f0af884f89dbc2a4ebb94f0440da8859c144975ce9050e4003d3e8d94ffb94a9
SHA512 4b8196953fe2a03eaf20f66ff49db0002618d7a30a0e6388d903cb25771dbb5a8217fab85ecf081ccd93ee8536113bb76f93ecf8a955918063735ce758edffec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 bbd4e6fafb73a0f84cc92cf84fc6ba68
SHA1 2386ce68b5201bd1f46ef2c2cd3cdf1111d59216
SHA256 b1c585e9f796004c186b9a2422213232a94e10fce2766e0d8a066c16e1d788e4
SHA512 830da1ceb7b5bbfd3b1ecf355c159cb4f4492170e04c029bc7b934c94ab294833f5c11a0a7a06e3d0dd16b0fbad05c85d32d285e5de60e4a596681a33aaafb41

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 eea1d63d6b1e372b7332aab0134ffcd2
SHA1 b272cea9e98384c70dbe833ec385f4326d3bdf79
SHA256 d1037b93156a6c58a2658d36513ee518c77a0645f0f3ac63e953c37feced11cb
SHA512 a6730b8f90294a7309b3d945b64601474ab73fa20c8dbb87f57a6680f8c541d74a62376fd4c927596da89353d870e3b80727364b938a7628104647bd01cc0e61

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 80edf9829ea13cf22b223f125898fc31
SHA1 cf8b52b96324cbcc9f4adbb0c5fe58167eaad49d
SHA256 da76b9cbcacb219f71ede058b71a73b3757c0855eebf07fbf8abc745d0580900
SHA512 40178538e7f3c11c84b5e8da27844fc022af3674d778077f0872f14ba77be827e82bb268fb4a84834722fb43a19cbac73060061b42cd25dc23726a169682e243

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00013b

MD5 6b04ab52540bdc8a646d6e42255a6c4b
SHA1 4cdfc59b5b62dafa3b20d23a165716b5218aa646
SHA256 33353d2328ea91f6abf5fb5c5f3899853dcc724a993b9086cab92d880da99f4d
SHA512 4f3b417c77c65936486388b618a7c047c84fb2e2dd8a470f7fe4ffec1ad6699d02fa9c1bbd551414eef0f2e6747a9ee59ca87198b20f9f4a9a01394ae69fa730

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00013d

MD5 c03ff64e7985603de96e7f84ec7dd438
SHA1 dfc067c6cb07b81281561fdfe995aca09c18d0e9
SHA256 0db8e9f0a185bd5dd2ec4259db0a0e89363afa953069f5238a0537671de6f526
SHA512 bb0fd94c5a8944a99f792f336bb8a840f23f6f0f1cb9661b156511a9984f0bb6c96baf05b7c1cf0efb83f43a224ecea52740432e3cfc85e0799428765eefb692

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9cfcb2cf926bc3396184f510aa798a80
SHA1 f55611b4a99b339a72d21d82ee1da6c09d453125
SHA256 db3aaf7b3e60b87731cde1aa077864bc5ec5de31b7546206cb3979395d805137
SHA512 a1c3e526e82b20b65e499a3a8b26ea16a5717bc6357d07a35df2e8eb71a95fdf2cb7e6dd5af098af155ff2f355878434fe5551eb3825213ecd9c4d30c9a1f5ec

C:\Users\Admin\Downloads\GenP 3.4.14.1\config.ini

MD5 add427035968bc6f8bcdf0c5d7580495
SHA1 7c1d13771b0546c31b87b36d1f158665ba9f793b
SHA256 66232a4d8677cd50612eaebc664b2f2f3556b497d5bf8657967c259ef4723b68
SHA512 085c3f314f556fe2667df998eec6114f017849746a6691ea2e0bffd6fc8ddc5a1c00e0bd25caca233cbf4b3db59072cce212681c29a480220f1584ff26e1ee3c

C:\Users\Admin\AppData\Local\Temp\NSudoLG.exe

MD5 7aacfd85b8dff0aa6867bede82cfd147
SHA1 e783f6d4b754ea8424699203b8831bdc9cbdd4e6
SHA256 871e4f28fe39bcad8d295ae46e148be458778c0195ed660b7db18eb595d00bd8
SHA512 59cce358c125368dc5735a28960ddb7ee49835ca19f44255a7ae858ddd8a2db68c72c3f6818eca3678d989041043876e339f9fafe1d81d26001286494a8014f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4e6b07352d29a087eb0c4d835660f2ec
SHA1 c43461c16144e578531c4f92b891d3ec47f600f7
SHA256 b4042c8b4fb50cc4378afbc72fd261ef58cf1b28cf3c12929073b37e44999dc2
SHA512 cfeb9643b619824c178c9e7d805b5a1977b06a8d59453698b8e584bf2fbe514617968d34e2775d03f2087721aeb564b2c4fe7653248ab26eedcb12a1fd82e0d1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b4a3dc4d065a789fc8977f413475ae49
SHA1 a7cab6f295f1a9db71389184b189f63a325f0221
SHA256 b54c5334e22aba2cf887ab6b55dc8dcdc73c2647a4c2abc3a08040f80fdad7b9
SHA512 f5a3cf68769ef00528cc3ba772af767be719fa74c38a386cfb2c0922f95fe28b32152d7c74726a4b4fb1bd6941be01cdf1a7800299f466984a4ea213ad8032ed

C:\Users\Admin\AppData\Local\Temp\autBA1D.tmp

MD5 6f040b192b47d1d0860045aa30c102a0
SHA1 55d3f78eb8c09edf77760bac0da2706f1efaa90e
SHA256 a85d89e380cbf4929ee5b6e7d91be71af1c3a727a91cf30affb414b98e912180
SHA512 8fd8bb6e860569c1cf884c9aba664b570e708a2665b236051ca7ffd8e8f723e80b192660b7fac34f330ba99b47351d06a0f8b3881f1e5d7aba9faf3bba9be59a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c0c16eeea6c7da1954011235b551c9f4
SHA1 f37e0e65b88aca98e27a5e5b094b936e5eabe18a
SHA256 ce2df7bd9a78ddbe309974cc32c96af6db5922e49b1b30fcaf507698fdd55b40
SHA512 6b02c630f8257007c5be84a6eb6438756d176f8c287e6c8dd6d1ba04f2225935a502f8e915375e97dde6cc223f1f18730186fe92928de7cd9110171ef5b3a123

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00015d

MD5 4bc7a90451f1d7da19da915978e4eb3b
SHA1 4bc6342eb4d2617c2a7864ae8fd4ea958703c1cf
SHA256 7419dce4b840faf7ad22a7119c48d82fbd390241371281f190c2fcd546bf0211
SHA512 074e55cc18a47ee9af1fc6dc61e550713d5913ca1bae5dfe84908162c8a6e9a71a544df879393a64b977aee087c964ab8fe20696599702c10578b334a388030d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 56adcb0676f7b1435ce2e997afddd4ce
SHA1 beae07c916ef440c267b8f72d3126ffbaa16cb91
SHA256 414ac7f3c5628f0dd886216695d6e76a9708eaa73f8c6615c28b15f26ae6694a
SHA512 6311ed4f5e177b278ad3980b81ed99c37f1a5e42161aa555dbd174cc418683869afbf51677cd7aa094edb9e749629c8edb5118d3641883c1e8db165f0a0a533d

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 8904545b8ffe4a3dbd434c27033068cb
SHA1 2b628b47d84dcdb6f2b6998b4fce1c32367c0e5d
SHA256 4fa0364d7a40de63f6e819ba607df3cef0bcc89a439c2e776db6fd7d5b774a8d
SHA512 a8f57d08b88e501018fe98575e706cc9b035753121d3cab38a38ad7ac8311b4c0bf6143d80dae9c3314bc575b496aa8114b4f0a84fe4eb3ee5a6e4c21c61d678

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 7dab172078ea14fb5bdfec6e916aa6dc
SHA1 bcca67f3d4156d50e115a4f5421effb59703f324
SHA256 704195d19fa56f78a58bf816afab820b27ddb7c80477a2d1e856759ae7839e20
SHA512 4afafc2460574928e7cf0180deac3c89bec1e919dd3a838e7e848b7ce3d39921f27ed5a504dd540b4ae0036e0581034d8b0f7f90bae6d364759b838dbefe30b5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

MD5 7ec5515027a94c25348e5a7c8cdc08ca
SHA1 f4ff5c3b9ec393e4b5a090004a2b8783598b6d19
SHA256 234d3103b4d787315fc57f06c283acebdcec598e135986b58fe4e7de51cac828
SHA512 af504ca79fa4c14c744757dd2b7d7f613d56391fffd760f61231e421872098e46bc1f9445f3f1e38b9a3653ccf959e3282ede72f517ae4714d32bba5f50ab7c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e504183595893c5c_0

MD5 2f88b66d974f67a52b61e3d67276894f
SHA1 95968a927fbb74ed8dce7c5ea129f9180e6c9df0
SHA256 fc5783c9bcc2fb42640124aba304728e1e97434524a3df80a7690a3a72b5b3f9
SHA512 47a8233f050bab66d404baa81151bc42faa7273f2ba48a38e3912c02f6c1fa6f68efb8d82c85f44ba7581333089ac0a1611936a9a0f2f1938a9c130ae533bad0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

MD5 23dc5ee145b2f75b235fe15cad9a356d
SHA1 4190183b1870ede1107ad8f042bbab81dc9deafe
SHA256 4fe625db716757d617784f41843cb584705f61943e9acef82a1680790ceb5789
SHA512 3a510c788f7af288b4129ee2a7e727e8ba94f9a774a1ea6a112a3000a164d26f805ad4596ac9287209acd430605ec7251e245b121a330f17734617f58ec004cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac9b40a0411376f7_0

MD5 aba01be4dd2b3f60f6caeb8721b1c6b2
SHA1 8e577c5641d206552b8fb0c84147cc1c440472ee
SHA256 7e9c4583ae5f4a22201de41894fbf67747f0c418075445501b6341541922f046
SHA512 4e3f3b8dc1acab292537caa7df3ac20aa97dccaca7d43c8b3764cea7536d004c30c003a251e84bcea1e1c91c8c6cc23be0f9f7f4cd8ec4b9e2e2fac91496c49b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 476bf4989abb8e52cbe434c6ec2cc2b9
SHA1 77c23f4f7386f9be1a7bf0cdead6eae1d315b05f
SHA256 5d9310c688544076efb65bd6242d2237e37c86475c16947177623f42dc871ed5
SHA512 3c45eff36461e7ff95574e3416c672ce5c2d70d70e2b661ac6fdecda5d49f242fc590ec4ef2984275bcc2dd2a84e34404e0394698b45afd7c55f408bd709b2c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aa20c296787a3f88_0

MD5 dc07d53e5bc0965b2e5504f7c97477b1
SHA1 04045b7633460c34dea36a5c8ec31908a1c933e7
SHA256 056e2531231cbcb6ccb32c4203c12c4607f36b5d7faa490467f88a73124d7694
SHA512 3c15c9b2c3cb7daeec3fcedc609ce6910f557ab991949e21a24d05bac743956e6fe3f6a359eeca944018014446860b72019601b09863efa30dad79d0ac8cc059

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00018c

MD5 bc61bbd1e296ff27e49479b8218d0d05
SHA1 e0695da4ea671e09df78dce99194ed403507c865
SHA256 291da2cad482d5b5f7bafbdb35010f090fbfc40718883a51d51fcc13dfca5fbb
SHA512 aabb7a59c4e1605dcad87b95776c42a9a9ad23619a89f6b94083ec999ba9b4ee40974fe8bfb830259c09cd5fd0225a7a66790dc0003b488f4537f574ad8a476e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 67e5b45301502fa82e94191f7e1c36ea
SHA1 85f54611b49d678ec21cf94d0cf32853d3c94da9
SHA256 dc8b5a1465e95315e09b7dc0b782ebe0528ea1ef09300cd06db1daea5567aa09
SHA512 f2d44cfcb231e0c1d9cf294c72e2c44ca75bf370e97e765b1d3d3d74c8ae5f8ad1a76a76c83d31cd29a8a5f9d3ba1052d050f83b84ff182dbd51f8a6ae0e28c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 45651669e4b2cdcf833985dcd2b29e1d
SHA1 923ef455d33a0589c8a2b40fd47462d8d7717b7d
SHA256 1e4997fd500b85e0e51ec012d0d4fbd4a0ff5363ddf19740f85956919b21c779
SHA512 4d96921eeac0a8c59cd4fee0d548ed8a2ef3ce39b892f7fb48eb37cb2ec35d0193c0e129a923a5ddaf94f6c124335d60767b4514a85706df9b1b848eb5af78df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\d8d05327c5274855b1a8796001e4dc6b8f2e344f\index.txt~RFe613865.TMP

MD5 c7037bb45e0f1cb67691b5bdc63878fd
SHA1 91c0ff0bb429250754771030d3bb287a7f36e35a
SHA256 a6bdd05ddb396b2bf3b6489db644cf1545e8372e0b51ab1a97ef0462489cc2e5
SHA512 097b9e65446658c54bd59d9ee9f8c88204edbc8f213f1941821f5076e7a8347b43cbcb3c2abf0de3931329b5987b21573a0df2d483d95fc4ee80511499f44acd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\d8d05327c5274855b1a8796001e4dc6b8f2e344f\index.txt

MD5 5fe0e6f102c1613946a8d20c9cb96fb2
SHA1 f7f922edf50b9bdb94b2477e3d6d6061e130adc8
SHA256 305cc8a6e34ed3f780bf08813ea6d68411ed1cc1281c2365e30c6f75f6514a3b
SHA512 00257e33fa36a3219791c3009c91a3bffd47d6124b2bd6f0efbe9c6ef9df23eaf76e23ab75af3687bd222a07ccbd8c9cf64b6248aa6776fff5a3d5db0afd7b0c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dfe07f2c15075c28_0

MD5 288188589aec4ad0042844ba708e996b
SHA1 d4c150384282ce0d469d25889e731a57b844ca0e
SHA256 4e83eb552486b90c6b62d46a5a5c632fbe2bb324928f6e16ef57dfd333e4f389
SHA512 e10a3d4bb89c75fb77438c6a25faa6a2554b4403b07fb27f45f4ca87338b5e45cc2b7156cfb9301e0d5816ee91908fb120f9d85fe35c850a31f3ae3a494066df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b90119b2fcd37afa_0

MD5 dc2e607773eaa772c4530db074e3769f
SHA1 e1c75f68cb9c2db53c601d869320ae70c192f58b
SHA256 b646c94d198ee1f5055c58769be5050cd1655165d356d131d8e321b1e65e540f
SHA512 dd492a2b4bb6192b84e7661f5fcb902189356d1953ef7f8a06d2f160075cc32101300534cc346ed31ee8c71d0a4c2cf230d5b2ff0eb4550bf0c1e5e1c001ba46

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1c93469f0396bbbd_0

MD5 ec3b9994e3c926be8dca8f6b819433e9
SHA1 fee7a2517a480551669849cf9b7e3632401de8d4
SHA256 56623da94f0c332d2ba3356cdc5efb5ac804373b17beb8ee53d8e55029b487ab
SHA512 2a760a0974b63050c50a3ab4eed12d6299da40271de9b38d8ffd7df8ec348b9939e6712327efa0ba8ef1905b5802761d787bcee1309836f28a315c70b90e62e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\580fd9376c2d4a3e_0

MD5 1a823f175850316f82679c8dfdd652fc
SHA1 c973c50195edb9e4336b1bb88bd9f576617aceb1
SHA256 a751776aacbb23a3d041923535b5f727a4c1305ba2496a36cbd02ae64aeb660e
SHA512 bb99c63cfd33da0a05f56fb8ef291897693ee850cc4eb5bfaf38aed9654eebf8515e9aa455203b90cb9ec6163353d90baff53080762f889f5910eebbd509b27d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7e23bcf4dbf5c221_0

MD5 82b8b49096540b4eaf6d4ba69e570ef6
SHA1 cbb777031230e541933b9a042205105470f630f6
SHA256 07c46fa5c52de220ed787433bacc4cbee0501ef3a9d835b9ebc2999ee6f9400c
SHA512 db4a1c02eba2f9953071f968c73b4229b54ba97523cd31aa1a9f85110aff124de1685c402746b142301c78d6948b4bd4c72826055fe6f4d591f59fe4ea4b2bef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5a994fe24b451732_0

MD5 90acb0bf811feaeb182672ab6088e618
SHA1 871e13f52556eb34352e6c788cfe10054c2f3333
SHA256 b05aead8fa394ef1af99edcaf1491cfae4bbcf16aaca44aea460df5a006ab9b0
SHA512 e282374e1bd98486bc4ecbc79017d0382a60a634ab3a1ff74b3c0be2356fe857923b2b984c57d3f435690d44dbaccabcd5fa8039cf196858d137502bca28c71a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0bbe00d9bf7b798e_0

MD5 cc400dbe2b57b7cec94df49f5dc77308
SHA1 fdf3fa6717e55c7bb883c20fff32c038bdfec73b
SHA256 bad3797374066f71461eaacd07f14437947490e2628ec37ae769a08d943418e1
SHA512 4253fcf4f8ed3f8ea00d6a8aa9fb783fed60b51edf71cbe78ffe6a582ec78faa00ec855ff744fb80271ebfd0e24e6acaac2242e4c11f0cd20298925e14cb8e9d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\498035a7eeb5471c_0

MD5 ae69114cc391ae895da5cebd5cd0008c
SHA1 9ccefda6c2add6237df4b080809f18a9e30844eb
SHA256 5166952d7fa89b7b62ff24d55792a4c0909c11a00506f3edb1fa8c1812f02fce
SHA512 060c1a33628cca1e0745023c47aea9c5ad6492018e8c019d1d69c95360c924187eaab6b03cf44e3017e20ea9d2c6c8988ff31539f7b023f79843b29c71c3748d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2dbc1c31fceae27c_0

MD5 d1a214d4a116db03ed31d30fe8f5f4ed
SHA1 f35b3710335432a39577b6ee7f5de11dc621c5f1
SHA256 8aeec1088f6841800bf3a729a9786ff71305c00546328b3c953ee3ef1d1a409d
SHA512 4b872c83a87cad11cd14cf81b54b7aed07dd21aba42285c79852307216fccb169af12d8cadcfe03a7e5fb74c129266bda04bc575bf10bf6667712c4adb7d3b5d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7a29efad91a1117_0

MD5 ce75739bca4b6140380ad31d5e2794c6
SHA1 6a0c3fc57d25a98958823afa466e1cd49ef1dedf
SHA256 50c4b8353a06cb6ceee536b55e1f61fafe46bafc5e560282c49ded18a1725aef
SHA512 58b2f7542d1e5392ec831e59951035c1a40556d7c4c77f7f91e468e4363d253752b553524b32f615e6560018c34b2701e5b21cd6fc40a88c50089158867895f1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8ee73a31bd0cce7d_0

MD5 4161ec8fdee570460e1f38fb68448e53
SHA1 29aa5adfcc7c921f197a2494cb27e1a2c0902f42
SHA256 c4d8628e045e018985f401c87835fa7ad73d1c32799c20bfb5a183993b901fe5
SHA512 3081c3878a09d9452a1ca6703ee94ecdfa300ec8e7f249934dfce4a07bad0279ac0e60ed5e059203ee702079182eb40b8052e788fbcf7f684aeaa54ca55fd11a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3f02c4494b1a18ff_0

MD5 4dd04fe6acab6e5d65eab2d6b19f0f0e
SHA1 c229f732780e1a02c40704fcf58ba42265557d44
SHA256 33f0ca92e210260abf833c04dfc5e140fe72a78ceafb0050fa5d8b5912227f08
SHA512 c92d670670c3588aeb95ea4d7ba1fa84dae66e11fd63562344ccf976c019233088d0bb8d248e5c1c8bab9eb43dfc9d79052d232a1340e9658abde975845274d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bfd9b5c29c5c8524_0

MD5 590923821fb55bf269a5c68600ec4e83
SHA1 542815b62e834eabe33e09a006fe0de09ad36f52
SHA256 29d2f4897bf2f69f7a496d2bbf67a4766d804f44eb7501645ce4e44a027eb9d0
SHA512 b9a78e798fb0d4faaa53ca0f02125f67adf5846077f1a4e883536df4afeac7b1df16d53899cfd81259078df4d38adf20a7a0b2d8df9ccb17b540198f309e2e8a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

MD5 8d1e69bd2c177ef02109e838d1e862d4
SHA1 ba58598e5c4eebd0488f831d2120d8da20feee5f
SHA256 85bdaaccaa704d2cbc406d254a60bd29cdc1af8a1b9ffaeea4382bf496e08e0e
SHA512 eb19a0361fa5c1391200d0286132cd3343ad8de9d922763c70cea79e320c9e50239c23165c6fee70e2450392e7783fc7028ee65fd0c6f7b82f86821b9f520372

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\15bb3a9b22e3777d_0

MD5 7eee4f39ed8f5819869d613f672a762d
SHA1 be4f0e08b56b89d45efb24933bc560f416cc4885
SHA256 bc3b21e5df1bcba79eeb914c787f0904e5dce76d23af15c71fc6f63db8cc6966
SHA512 0130a2540558d0f4db048563a527c5c4c6666c66b3ab06f377dd969ee12a9ad6eaae421fded4078a5d58e6b3b39833234e8f802b1a332d2cf905abc6e6ae545d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9412c8b664751f90_0

MD5 0e08d9807cda88e6849a403d3b2b9be8
SHA1 bc6f82b883a627a60b19f4ca9e017a319ea571b4
SHA256 530432798526ee3390fe4a11f49d8efd2f00e0a92d571a2723c36ec5da78bc40
SHA512 aeac055bc8146404f1bdbc0af804ecb617ce0aac5a2ad01c431a35a6d38d64297ef19886a14a81cb62a745c265307441d7d0ed9959ccbfeda8b0d5406b1cad37

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f89251fac2b69325_0

MD5 053871f0410acea2b5b16f412718b178
SHA1 9c24972f9497b80f78dc5bd0a98c6232fa4f1f8c
SHA256 6fcb61244615d2315737b1b4596e9835ade55b0b360ca5843b618639a89a4ed7
SHA512 f0a0a4482aa85c2a6f3c4835b295aaf0c1311201ad3f56b1b1b6b15853d1d937e8c28398dd697d91ff5e6afb08cd6ca23fa1b714b2dbaacbee78fd3ce5d2babb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

MD5 9d441ec7c56e05f4d5c77f9bab7146ab
SHA1 344725a29abda66c80adc3c134fe1530736ef068
SHA256 570d0603d0a7de72029f383558d100147c87225a16701ac445c055457214e159
SHA512 f0e0ed20ab2b3b00ec4aa2dd0f24c5dc180750e846c759be2583934652941bc9294e079c9aab3657f6006f150b44986d93f0bf3f4d9ab476c244800e2ef567be

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d37cb16ef5eb861d_0

MD5 b65bd34871910938d405f7d00a5238ca
SHA1 7aadc9343410311d86e96b6af42feabad1c8c5c8
SHA256 d646b9fad3437bb9a7e4b4ef8b3f064fa118b31036962420e0c416afb73fd81b
SHA512 036bda85258b651076d1d6449b1acd4675b726126b4edca1b1065b83d5a1df32c3157e84b0ee910a575a61cbf89969abbcc8c8988d32351a46dce1da80846a03

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\83d6d3a772bbc707_0

MD5 5ec01c49a57044596639a9dcba26a800
SHA1 3b1b10bc263f98fcd3fee8fe6d34ca3aeff2bad0
SHA256 b974be596a8cfe055bc5f256f749028b5f5a9668df4d43f68635136a493363c8
SHA512 ae0693943b2e7bd7c09940651585398ead14aee75cdc7202cf632befa6068973190b636bd031fe23c2790e6ca6d06e680e9f2b1ccdd70fbaebf0a0c1c15e07af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e55f0a6d1b533c66_0

MD5 f1f8029c0b84cc413ae23c0c5b4d0d76
SHA1 e46f53870c6c5db0ad850c05beff3246e73f4ef1
SHA256 cca89c76b9993f5a485a35833dba8509afe2f5b8763e8da8ce7bf993edbdaba9
SHA512 c41c2638f9eaf849b3c5fc892a58eeab25beb29edc8259bc7292f8949438806da174c941c338b5d9caafe1be4183bc814a1a0e2b800a68c725f188c6a6315e3c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06450eb6a7b09545_0

MD5 1914c5755852d861285b030e5df75b84
SHA1 1160a1815d38de382245d9381db4c4705f429335
SHA256 43c9278837baaeb35880f34ce6a1cb3ac1961e3274b527045d8c80553a972716
SHA512 8af84ee5d947b052a2bb3dc3a2a4e6c0ed63071f443b03fc5b367f1caa9ec884cfa03beeb1cac548068ef9bdbcb265228dd99623d2005e652affe3671b3cb04b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2e4bbad99a372cc_0

MD5 79051d2d5be2ac6a5143efcbcf715cb4
SHA1 7d3e283fc09f0ded8f080a59d025fa640709590a
SHA256 677854c4baafe70c32e8db4cc22b238ee4f34ee87b5d53ed00f600ee94801231
SHA512 ae7f3169ffe1edc4b52396f1413ab119f3477d113bc1ffa7a81395bf3d33bd633100d4d26a2b5215cb6b0a936bfca6555f42fa77cf0612ba2485bba04c86b677

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a267b7c21d8b8c9c_0

MD5 f4e17d65ab97bc595f103b515e18ff95
SHA1 27b03abd246e171e6ddeeadffe8339b5bdd0f00e
SHA256 6f1795e5030377d40b654d7b41dc5380ff6761f2221c542cc3dddb7abdfa1efd
SHA512 a67807954892ab2ca576339c0fbc056cf7fa4e330b0921819d7b5554ea4ffb2715993527264f132808693e39b45e6345e3088c251927879c1d1f77fd8151c4e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3dbb3008455b523_0

MD5 c6980f4a2678d40cfacdf436cef29025
SHA1 ec1bb8df2f02fb5910d0e31fe3c93e14f5dd3da2
SHA256 fd1055cdbd7294e0e6b0d2466a63a4a472e3109072afd9158d0a0a4a7e0d161c
SHA512 aaf1f93d20553cb26ffb5b0f9bea3044fd925904af1c7fa6cf00914c243a1ffbc0e6d464ec1222f298e3690822bab38cac9a0be6fc375de9072763bafa01af63

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e54a91d5724f0315_0

MD5 bf4a6276590031777012a02123e634d3
SHA1 45884907418766995fbf4a9c44adf0f354cc2f86
SHA256 13e3cf0bc444f5ad59b5b2a0818b31cee5765d9994ae9131b51e2b445327dec3
SHA512 d8228a9c42b3043ed7a021e3082951d204ba0d0d768bf74060c4954e1dc16689dbe04a74720dcb277c9ae235c77c1e66f0990b438dc34ae7524146f5566c7bf9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a09f6271ad0c4092_0

MD5 8080da4b8d8fb2c3385c282888284ca9
SHA1 e42c086682d6c858b8fa597b236b8e678ff39fd3
SHA256 0f8fa37c4d78e59b63e3dee01cb872cdd46f4369ad9ae06f303f933e409e6f58
SHA512 8a36064c585d222ee884c4078553af7c4f0330d516d6dc4b10e69a8ba38c91027c3af1b180f0eaa1057948b6a59c3c045522ed9fc5304597b35b3197a882655e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\feadcc6fa014c0d1_0

MD5 b4729ff75e96a4548e640e7269655084
SHA1 fec316b86bc5f2c34eec71e6d5d0b3623faf4912
SHA256 4478e362d7a9c21b60f1d754666fb310ad61428bafdaa16194a700634d9df56b
SHA512 0727ecf5a41b580fea6789ac239244e1f261f5a0a5f6e8e19f80c37e3c5037f4d61b2b0ba5b12448367d7e40bfbae3b5423f2181e97680cbca6084751b4e5ca2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9c07b1b2a3e9b57a_0

MD5 7b003d01c79bb0ff9f79c4c54b14a16e
SHA1 2eb470d3f32eca37ee5cb95ddc6e06f8761f341a
SHA256 0e47c94f5cc1573ab51a6e597b5852ae7a16501f33a537a9d7eacdfebe9cb4ac
SHA512 0def8252af9f5bf4d91d829ebf6b92ebf9d6a91ef99f23c3ae3dd633da63835ca47a0519e0621b2eb2e168ee19ca2ea97ae4ad407af9430bd5b0712e874de845

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c4545010b9c4b344_0

MD5 86f61112f586fd8fdee86b3da973b5e5
SHA1 6940044f767d13819ffcc4dc2830d59fae9194cd
SHA256 2214318c3d8cea5dc987f3298a7287032f6b3bdacde838828cd663362aa61d7c
SHA512 4ec5f35e4863aaeca5f3c865921d29991aa70e6fe810a44f9d1b7c465a79799a99ecabe8af3577ad1a976a4433a9beabb1e077612805aa7a8719d49afb31b43a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daca09b4eb185a45_0

MD5 42583a341ded458cde1f272a2fcd73cf
SHA1 913c2c6d237e1241c02a564fffec3d90e9d712e9
SHA256 ded6ce1ac057d4660ffc8fe2f6f0434b97cc8525106e252376e441c3a12e2605
SHA512 c29a725a08ec18c77989662cfb533ea82d798aa855066af02d965af80b6c3f325e9159031e26696b92d9364befdffa6c44ede48c5b10dc195f974ca6ee6ba14c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9c18d8acd7b03b7e_0

MD5 0cc4defbca8ad70e484dc70f90f894d5
SHA1 51010f0f058acf2fb7885349ee9a4de0ba94ba6c
SHA256 f002c68e681e341b0732cf803c1ba148ae65a0b7ce728fac6bf09796516d73bd
SHA512 006a1dcc8563ca754613d10dfd147de40417ac3887925ed48b19a8a5582a90224516ce6373feaf9a31d0bab9992968dde5e1155fa501b34f0806034cf1021fa9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\513d53cff9ea2408_0

MD5 c5c3c7ea24a2d9dfb5d55c412d981858
SHA1 c237e5191403a34400587d828b2595696cc8069f
SHA256 1a3f685b4d29f227e2305ea35fa8dbaf04a4f1d8690050333d841d47580cdc3e
SHA512 2cee3312c871f6ced3b4d2523a692f2dbc4a4b547177e41d364a9e166a342d0024053fbfe19f8c66a9edb5531cfc1bcb3838a1a8ae5819b55f0a6c63cd749241

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bdce15783b3e835b_0

MD5 4bf7f6cdb2abcf2b4b322bb04c47cf88
SHA1 bd6329f3d2f7bd1f637d5648ac4056b4e02b0b5f
SHA256 6e4b1fa25aa8580098f5badb6c0e8029f4f2ef018255bb6550ac2d2b41a6359e
SHA512 e69bf9ea9c4f28eb28051da0af0f71100d7ad5d7f34f9e856a1500d6f7309252c70ef58a91eeb335f7d83ed25a56a66a44e2a456555c5c7f17124891fc2740db

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47d4e623e47f5bdd_0

MD5 025a696daa2b8bb8cfeb84345a944867
SHA1 aebd15e9fe5294f2dd2e9a05e4559ed55b629aa6
SHA256 ea4df97c4d2894a30d2219de9a136f701100dddb54aec1584687e03d295af7d6
SHA512 cf23ccabc16e1a32661f2da882cd506a7bc28a18b46747256a7a0f13443064d8b103c85085a89abe0aed520fd9164accbe852af6e5b40da3a612c98773c1d783

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ba208775fb5fe09_0

MD5 f52bb075347425eae70e7e1339fa1e2b
SHA1 6223cf9ab0e400c78ce8b581bd73f8aa4102e206
SHA256 75298d4e60f61870080444d5be8c499f34c4c8f1a32611107011559cc482f1bf
SHA512 c9d65dfe0b69ab070fb72e5eda97ee592ffaaec981a85eb51e6c5b4a43475052d9f39592da379637bf76ec1435f2b3d0656e034cfda3f731ddef5bffb1ee75eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5b2f11f3f15a5775_0

MD5 c3f7e048c23751e10144febadbd1249a
SHA1 4e95f122a786ccd6d94b53f83ddd4164bb122598
SHA256 4448c54f7825ba81fbed681938d30f33ebf369b3cafcd1d1257e04d0af7c828d
SHA512 9b55736194201999cc4b61feb358de7071c2d78eca852ff8ef1fab9836efc4218860815848af279c7eed60e2d91512bb836ef2024c6b0bb57354a1a014eb899d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b1d7d09e2437e8ee_0

MD5 236f92c219361c4ec55801607ec5b69f
SHA1 6d18cf81c34e8f5f485a019481d419958132e57d
SHA256 21b06ffdd72505136a89363becb7e110c5c233d655218b367b37f272ff9823fb
SHA512 ad2ffc3efcb269b7c56a84f1d276c0539a73c47e1f53052cf197b0afa1071b5d4016890d8bac6affc3f0fcf3f1b63f1d4e590885373f41a2928f78b45f0ea0d8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3557d97bacb52931_0

MD5 18ec3afdbc42e04431390ffb765a5ea5
SHA1 2b7c291491eba6615a8c446612db6e8dce753bc1
SHA256 d1db408d0be522c98e6a6d392606e6a9ce1fad8b7fec93e90e13ab6aa6be6317
SHA512 4cdccb2f3c065f987cfbbe6e6de673046dade87b28a01ebac758e61a01ac507f23a69dda0519b3ac8d93c9009510684171b2a9aba7b385d3ea5ccf1c5782be2f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f078f5fb70fd150f_0

MD5 fbfde3d0b7e54d12ce032b3b9f082905
SHA1 b4ff2e09e1fed94f05c242936018a180569b50e7
SHA256 e48abddc89202d402f5c60237afece2e4101bc172088f7245cd82d9850f241dc
SHA512 059582fe70cf6719d5fa67400e2814271aa8a5b481d3ac775ca088dfc32a6a65ee67ca51b6b31ac738b9d70ffd931623cd2709baffec221c07c32985459a0b39

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a66a1246c4f29f4_0

MD5 85ae83bb9ef02aadf4bde7b5d819e127
SHA1 b724bf35a01bf81c0dc0d39f6186033f06c26ddf
SHA256 1471e823be256a3ab11dae0c5c4b317a75694bb5880593d63b0bdbce8ef5b1cd
SHA512 a39fdebba7017cc73cef7f3ef886f626fe12724fd0f8850bb799ab3bd620034737359024b30a868d94e4cb5208d5a2d2da4cbb1763019119ba5697a414e39d74

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\edb3b6840a8ddc0a_0

MD5 974457f9d0436887956095f5ad286961
SHA1 1facfd9798bca2473e939208af772a05df322231
SHA256 b9be0829f12bb5f7778eded5c069990e6fc8756a97c893bcdc733209f37fe623
SHA512 44628ab324eb1620911a3fb63faf0971b3d2c7a0b7b6632e9cc07a225c582998752c0e118b77656dd705f6f2b1873c38cb0b2c6cdb780b9e81d40c2289e1308b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d00019f29c31fea5_0

MD5 9a32ca0f1e921ae5df5fb117fb3028fa
SHA1 1d91e7dd6677914de9f1247707c4619d288da687
SHA256 b1f8ecaabfeffac4fd98e898f16db66daa3908b71f8d46801cd3f901d32b5d46
SHA512 91b2e99c69d3adfedc2b42237a6e5b58be0aa1a29d6ab1add81aeb6c95e377bc7e5f9ecb41850d6ac2900721a574562beeab1e424e913d2e54ce981e405e78db

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e8f6640eef188435_0

MD5 b113a2bf53f02c9b0f740e9ec09b9e1a
SHA1 28ba9741e99cb49fd4e9c5e70bce88dfd77c7658
SHA256 7c4046c88ceabb7c15c76db597aba98805c89c0dda17b01f347119e46c2872d9
SHA512 33cb474b77e1082e000dfb5ee62276848a424b1171d9e32da2142e77666c0801de395872df0a62874cc451c132d2c7a7b31163a4fe74bbbd19055542132c2bb1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a67769912ffcf13f_0

MD5 81612fc7c9613f4895a2000e62a4c3c7
SHA1 e3f2175ffeae309807a19a914bed3681833b50eb
SHA256 59df6e8535b00d5bea5f76309c2674a21e620c9d25849b37e4479a00fdd067ba
SHA512 020ef0b8ffff798a4d03beb4e06de718d7cf163b74bf3925b68d489d02da28ce2ef733da25a3d754c570eb1f085f91adc4e5f5b565ce729c16b444b64532ac90

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9a93a5af80c0c9ac_0

MD5 4e98c7edd27be8f6b9eccee8a26233a0
SHA1 f82230fc2bcba5f53eed7752f574d83ef14de668
SHA256 5c0d7adfa1f7b8685a28e49c4a7e7dd702ecb5c9307c2510cf24575c9fa7e23b
SHA512 ccb42a4e0fb441cf5c064cede82a22f627bed65e5e00819f001ba968c225149986646c66391211868db9c8db9e65f55d22c826ab91765c2f496578f0e56dd1e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2b7ffcd51b01561f_0

MD5 29cc63b2616b44fb288c73955fc42f76
SHA1 035774e40ee99a2cee183c49fc84339d82166510
SHA256 3e98d80a13379565c3dacce4b8db15c52507761220a670a0eb0c0d5b45ce1a7f
SHA512 5ab766b157ea3db2846e50753a5dd7dec6113eddeae9413e0b7054525c1b74e39af237b559a0b2f41c3a712ce7e6ec5ae27089dfaa6698a9c5ea4600590271fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\48b1105b4c2874b5_0

MD5 7a4dbb2a78171c864f2719aa82645d13
SHA1 24b02a9817b9a86de891705f73dd9ea7281111ad
SHA256 d9e07dd0b58dcf94f5dc747a4298928be735040e723366fd999b2564042a6dc6
SHA512 61c9405a9bc82fdca4e6832d074d4383a74c89e1abd07581f300458173bad100c9a255b476055d51c96cd9475fb4f0ca712152a3de370aa1c71c8b026119e4f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cc2f0fedd3e9608a_0

MD5 4f9a8222af049aa7eebbf7041c9fb4d9
SHA1 be24db69c9b774e0c47fbd0c0c2e3c9d249e2044
SHA256 b173fb31db45abc706db635eb09cb1e5376fcb4302a8a7bfb340e6d8cfbbce52
SHA512 f2f225192fdc3cc30e530247a03ffe3ac6d11ca80e44d41b55121ac464da4a5f4b6e4c3dce10efe37e7a2bc5b8494c5984677c94472be61d00f7800a5da30599

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af2cfcaf6d9b18bc_0

MD5 d5836077660bf63b16313f40c0559188
SHA1 ede8de0b9afd6528ce815b0515d03527caec5280
SHA256 30d7eeb498aa53ca78d60bb9e4ae504a0714f61d39267fb559e72e19e29c76a4
SHA512 4fe44625cc60b61dd1c785dcb4b5fc70b7a063d1c206c38e20114f402b020f5450466cb095c6f032bb6ef122db07b5870605dc3a22725b20a28f9569e04a7c02

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d3b0ad57bdf7db9_0

MD5 f28207d84f3be9340eb04da77f66dec1
SHA1 1adefc0a98034a2086911e8715fcdd6a2d174f4f
SHA256 4691c33897f48eaaed4d145fa318c33cd15993d0b45e3cfadec1500d7fbf3db1
SHA512 7cee9e4025ddbfbb3a6dcb1a36dad529eb0e9bc06a320c35b9a006da7b7ecea9cbf3426bec65a95cf9bab5b226f39ff1dabc15c76d35917491c164cb1f17ec4a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daea348421cbc209_0

MD5 f8f308d33253715d58a53efb8099e070
SHA1 f250cf6e9cb75a125afcd837dea3ad90f5b47897
SHA256 80168ccd26b7bd2b5084b64368de88d8e559ffbcc998da59d0c92f3b7c5fc14e
SHA512 045cec43b61e2be4961f2952e2a5a4b22c861428c92a9b234d257a0d003a3e87cd1963b74dadc5de6f13e3cd579b6d4e0f20c176b4b562ea87c43f29fb75d05f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9e269a0bc98fd20820fe8910c69c2302
SHA1 63fbbd583c7f44dacfd7d47e61cd540a79d51492
SHA256 3aeb0176257d8948927066d8355a53cb40361453daacc33baa35055ded329af8
SHA512 cad2ed325a51b64e0e206f09304fe031028c51651e3a0e2f2fbeef7ed568969746446e586cf6b871c53d5767b8ebe81602915c9d474d28405ecf7b93f1858343

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 66ae1511514c616c65fc3e72a66bbe30
SHA1 666519e1563e55e0be697460d2514eed3615d621
SHA256 9c85e38788c4682c52171da8616727b59c77f3e20c7370b4913b77cf0fc16ef4
SHA512 43f9856eca35685926dcf9e1b0880dfeee9d74af590cf31fe0b9dbcdf7f25ab7ec10af5bc559a6c634c1e2e679ff878f2f731a95f392c7d157c84c100aa690f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0001dc

MD5 230ab95d87a717be265134072eb17c25
SHA1 71a3d3dd6f952057ba0c6025d39c9792ff606828
SHA256 3fdfeaa675697f08f1c7c0fd6b77512f4bf9465e670637e8e332e65ebb9db068
SHA512 9b0636421ad14161f211e846521149ab0a7c866e77db309dba79718487835204cee3821c9f4678e48e134614be6a02421c155a34b7c9bc424012137705960b11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0001de

MD5 a6ad24daf242e845b5d55268bd5d1f9e
SHA1 dfd157ac56810ef2b816480bde8d5557665261e1
SHA256 8598c88986c155a9f89ba7a6a426f98fb2a8e6ec1cb3dd06ad75a33c7a9518e9
SHA512 c623261c1bea860b09efd48f0b623a39a18e483d6620c3ef03bf993467db0c3ce40905c568ac63be03162916f60a6e3447aa75aeaac1b97387d4cde29f463f57

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 984b57009402a665d17e655c6bc3f7c6
SHA1 74ed2eb0b25ad9e06301fdbc039fb9441ea60f73
SHA256 2c305552cfc158da262c4ce964cb1e0007bb2075cfaac70810381dd5ee9215c2
SHA512 334cb3360508cfa7c5750a162462418215bb60f7b6045f4a8ef8ecf4a80ec713113462e6cfa41a3ed62ca4dd857e11cdff1f6cd7e29978f1cbf6911ebdbb9c2c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 9d94b6b91ad874f5116e4ec493e02ee0
SHA1 3d26406ff91f89559c7a869380d18b90b2bdef85
SHA256 b3f5b594a2717e167efa8f8874fe2cb0dd6e59f7f56b275f3e3eb15887bd40aa
SHA512 d2a76c9b75a275fc3e7f34a54eb56ba228cb0072340e32df1a71e299243429abc2df9f51e5bd052438b11e060fbf462197e6932cf400256298a289789ab57e32

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\d8d05327c5274855b1a8796001e4dc6b8f2e344f\index.txt

MD5 488b3e94eb2a1672320a82a44692e8f7
SHA1 e3a68229b38bac3ed4e60a0ef838fa38207ed762
SHA256 726eaba0f5fbfcc26f376424487b98657ef51c1e281962c555e2dc3a8a4d4eee
SHA512 340a4585fc0cb7cb2383c8fbba43013da0cdef42a21111aff3deedf34f1b6eeb14635629a871ed9b0a3e8fdfab2699c29cbd54fdfd3fba5273ea839ca8e47122

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 7be3984b40ba675ed45bdc279ae6bb1c
SHA1 4b73641803bea473988cfdc3b3f8ad666cfccc6c
SHA256 74555d873c67bec24d37d8307390e1d2216ca705824f3a95a0565c8e91907d37
SHA512 d46562075520838de191105c7c23e1a0177e223aa59aedbbbeaa13eca1600ee0c6b7df47a173bfc618db5a1ef66f58c7cf6bb3129e30a903a8a5a687850b76e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3937fef877441886_0

MD5 30fec27d44ecca81a1d5d013f88939a4
SHA1 d3b9d3e5dd2c3c0280b8112e063fa86920f54658
SHA256 57d4beb52a89fa7ad151c3323cea856ffe3c30a13fceacb7ff4325eeea23f0d9
SHA512 45ce7e5c1e34076c78e817cb64ab3b9c4e3a0e737b7647b971790a86af4a7fe59c2028aef3442dc531361ed606bc3a33f179c45806b2441bb6352f7146982648

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9c0109f54c03223c_0

MD5 b509de247c8e4ae1d04245a5036702b3
SHA1 4c07df4ac9655001d5d05fcd1977c47595e87029
SHA256 65336a5b75f4ded7748ef69831af8c714adb0e1255f79082b2a675f72e629d36
SHA512 7177d45bdfe24c6d164b5d6117489a728493df344014db1cd7ed7579e68f717ab9c626e48680b5c01df4124c76e209079481ec2aaa653e24e39d015108014c4f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3b6bfa921a05c6cf_0

MD5 6d2059b9de17a03e4dab79ec7e85c3c7
SHA1 4de57f931f46480879f31665b09f0e0a516129a4
SHA256 a32c3dbd3234df53c46958af8d9195a667654494548789a0a8306c4243a3b316
SHA512 fb0b0c1029c65de1c587b6383f1d47dbca3f993d882983bcab2dbd662f37d596944b49f0b55c862c6adf3337e07e597e728bd37d9a1cbec59733652c94c50a4d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ae8d0b05a4b538df_0

MD5 611985d9724da3e1b49a8778633611c8
SHA1 4935a745b78f59669474aea1b7118fbb9f3554d3
SHA256 321f3ccf71bcd2f2b84a4fdf1be95c95ddd48d20eeaebdfad8efb5461949319f
SHA512 e7b779ed308e16abf705bb4572bf5228bc5844877b2e4fe55b618656a2c875f22f269a855984becadc1a1de54c86b20cca486c808f91fa3282e724d8f8769661

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\02735674612cbc52_0

MD5 9546979af2e09f084c9f4b671c9a3d88
SHA1 c85d86567ff1771f1b245a3ed7d041de1eb946a4
SHA256 0befb0ec50a96c5e60120ce365df45b042a78960d4f8cbf536b19056dff1f21e
SHA512 8a66e5c59c96c795ebd2dd72bf0868291481d34ce8a4833516e75db2296261db44a26fc3bda24eb3cb04145a07422033ea06c8e2b5adfbe2c02f3326f93deb6f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\14ff8116b518ca2d_0

MD5 12257f158f25b9ae0c67b19b90f8964b
SHA1 40f683dfa57f58bea86bc9df0817375579cf2d42
SHA256 145806670cdfb188b05fb150614904d6428cee9339aa086ce7a0e557887049b6
SHA512 7fe3c5cd1a0e7288213a5354f73abe17217a8536c9d45576312ea2806588d20ad32981e1fdec22a11b46314ea97d3b021a3f6e0e79f79d90e30242e4d2f492cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\120ab24e8b469464_0

MD5 35004b14c0d647b01e4e7fc13f84b39b
SHA1 c348deb7ebae7a029a9ac0d4c37cdc83ca1b7f33
SHA256 89fe751a7b2c0da93be88d6ad9ad02302e6da5132c1246be9a56b8e0ac4665ad
SHA512 c6608ff69813cc0e6d456dd7d3855566321d8acd312ff155629249a28d8d98488ad91d934e0c5d538ae4138ff088320638ff68ea5bf621a1b46e84b07a7c13fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a6537dab24e365f9_0

MD5 27d2f4c2d6fc79452aed95bf3a0999ac
SHA1 aa6a0b60daf92a251c7986a1e3436f8244652733
SHA256 ef09f469e95cb26a4b3ec21cc756975ed4be390bc989bf4b736aae8e64bebed2
SHA512 ab572ac195bb0104f543c42c81846ef49b9e9cad2b6b57c00398d3cc04de60df1814575d7d3fef5d41a679d85873b38374616414c827802cd1ac1a8b0bab3e76

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000200

MD5 c594a826934b9505d591d0f7a7df80b7
SHA1 c04b8637e686f71f3fc46a29a86346ba9b04ae18
SHA256 e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610
SHA512 04a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\671c7d04c2abc74a_0

MD5 7b4b9bcc3ca8607281d36b8af471b25d
SHA1 9d49c624830b18216db233e463f5bfd40e79d456
SHA256 989ccdee743250e9c6e6667a2b994bcc90b16e3e943e078828704cd5072fc06f
SHA512 8f363e1d6d0eedc0cce16435ecc494fc6e37a1cbd51dc7e6e24506371bd0a0e74ccb00294767f3bc6b2ba4c29e02d9c03496e289426472e8f9b38ccd35e75201

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3a2f649a65b4fd9a_0

MD5 61d331e1900d38a25ca7496768450f23
SHA1 7a2eca410b3a6a60fdd97dd4467891e673e16a4e
SHA256 944ac60b89977629f182f3c8cc16d425dbbf9ce70130d922ce6c69944693dc8a
SHA512 31ef79e2077f749d041fdf2b598bb8313e61b074aadd8d693881b6259c192021a622b669f26eafb453f8600be878f5ba500ad92697b1516a3a5ce7275201cb0a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ef4e966526e12a91_0

MD5 bab88bd2a2d074f7bd618fecf41b9139
SHA1 85bfc8c2b755c640ed5b848de8baba7e0e4ec363
SHA256 c86aa3375425b9e774349636b0c03ae11c873ba94d0d5082af6d5f3de92229b9
SHA512 72861a3cff25767dda8f5e2c44140a8cbb5f9ab3d448d6b91a47ba76b6e0d0e19cd5c48c60b064068d183ba5a2dae4f1bcb1323d3f44d8ca4da173bc159b6d8f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 638c6fcb400c1a9ba7d74cafd38a26a7
SHA1 4d1f4601efbc7748fc091c0f7e3497846a5a0e2c
SHA256 c97cf5e8e4d88a4833404fc95b9af12e833ad26d34c5e811e1f0de7d9b0de27c
SHA512 d239bb1e5a6c20023dd7a00e16538a1da0e346a1fa2de12a23f5073aa0a8c58cfd510a3b33250694c3c503a43032c4af92e47c5308220ffcfce860a747bce234

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 02ef279f9dd3c3786a6419c454ee0f46
SHA1 d6af49c4d2714d9e0ead6afe11ab738107628c6d
SHA256 465227b46e4e95892c0b344c4d600b3a4a035960169926768d8c9b59e93378b0
SHA512 d9b24f372a8e26d9da3a9d0f883d79574b93a95174de378db2899a87f94fe5a2d33a0defde86fef4d07766418390878a31edcb70905b11d98a4e7dbe989fd36b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\a960b909-885e-4ce4-be5d-aa2e614d9a49\index-dir\the-real-index

MD5 4755c1ae175c89061a630447fefaf33c
SHA1 56e40fd88ee814599e8ab052e4fadbdc793223bd
SHA256 e453d16e58705dabde24e6b6108386b6dcd45816be56ab2b53ed931140603a73
SHA512 ba84095a4a7c1659fcc90fa5f3a7a2e90923da7c288e38b5a0bb8445acbd5197ae0bfe7d88eaa3bcc4190025af7b3a80012ba9bfde98794bf9070de7f587af74

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bb92b06dee3ecfafc93ff64714b514cdd8ebb2b0\index.txt

MD5 d345124ee62d27d753ebec03d4f4d494
SHA1 d464c9ac3166ddb24016a8b0071dc6eeee3c51a5
SHA256 5ab415d16aa66b25052397ecc49662800ed10ae07b7f91a4e64f7ae201d05e7c
SHA512 612e1f8e98cc2c3f0f2547f1f023991c5d1d35d14de59d13ac1bb24fc918860a57bca247be92a8bd53c729b0a14de4ea1d64df2fa6d8d8ecfb50a6362e015296

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0f821565380ad3182c48e7830c9d415c
SHA1 1b178e480a2b5dcda70aeec0b82e4278ea746cb6
SHA256 3dcc02666c1cd81a1a9dc9d04cfe2f95c49f9a0e8a9a2e591dc10638e5ce3be6
SHA512 4bee0700041a80f9dde68df3a02b1ee4a48cfd5360b36f1f71bf74b9c92bda6e92d4b6f7752234651717006584f00db1f962cdbb39399c544d72647874bb36ee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 2c3ff13f065edaf77a322ef7e1340aae
SHA1 1def954b022f332d6915421c586991547163ff6b
SHA256 0e1245f2add7f62385e9a698b07246cce8074807b8e8fc0a852fc8925e80f857
SHA512 196abff09c56364300fb1d14f18b1d18c545f68ff33ec01fa2968fb893bd8a4355bfb2151ae99de95e56f9cb9d33c78a7450a1343f6fb4c29733bd2592e8fc01

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 fb0bcbc54b7f433f1d21271add825f7d
SHA1 041275165a7ab12bffa7ddfc4a583d7dc0716b09
SHA256 41fd2c06f96c977bb868aee1dc14c59f3afeb56865dc80681288d596abdb07b8
SHA512 f67f9bd2d5437df25b4ba36122e78bd8e8906ec2030d4819058afb06c88fdeb0765500c06a1802bb90668315b6e508359091db0343687da248a538ff0f24d67c