Malware Analysis Report

2024-12-07 17:08

Sample ID 241112-1by8xa1jcx
Target https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbHNKZWxBOExZQ0xxc0hXU3JzMmc2a1NrVXpBUXxBQ3Jtc0trZmhaNU4xa3ljc1d5WFpNMTF1T2RQSnlJVTZlOXpBSl91N3lRTTI1NTBGNVExbDQxb0RQdkFBcnV2WnVSY09HSHk1SU1qRGU4bEZ1dGRmbzFMQXdiWGpiS0Ewek9oVUZLUnVvaHpCamdlaEQ2b3pOaw&q=https%3A%2F%2Fsites.google.com%2Fview%2Fnexol&v=6mF7AbF_SiE
Tags
lumma microsoft defense_evasion discovery evasion phishing product:outlook stealer themida
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbHNKZWxBOExZQ0xxc0hXU3JzMmc2a1NrVXpBUXxBQ3Jtc0trZmhaNU4xa3ljc1d5WFpNMTF1T2RQSnlJVTZlOXpBSl91N3lRTTI1NTBGNVExbDQxb0RQdkFBcnV2WnVSY09HSHk1SU1qRGU4bEZ1dGRmbzFMQXdiWGpiS0Ewek9oVUZLUnVvaHpCamdlaEQ2b3pOaw&q=https%3A%2F%2Fsites.google.com%2Fview%2Fnexol&v=6mF7AbF_SiE was found to be: Known bad.

Malicious Activity Summary

lumma microsoft defense_evasion discovery evasion phishing product:outlook stealer themida

Lumma family

Lumma Stealer, LummaC

Detected microsoft outlook phishing page

Identifies VirtualBox via ACPI registry values (likely anti-VM)

A potential corporate email address has been identified in the URL: [email protected]

A potential corporate email address has been identified in the URL: [email protected]

A potential corporate email address has been identified in the URL: [email protected]

Checks BIOS information in registry

A potential corporate email address has been identified in the URL: [email protected]

A potential corporate email address has been identified in the URL: [email protected]

A potential corporate email address has been identified in the URL: [email protected]

A potential corporate email address has been identified in the URL: [email protected]

A potential corporate email address has been identified in the URL: usersOID00060000525f4dc70000000000000000@84df9e7fe9f640afb435aaaaaaaaaaaa

Themida packer

System Binary Proxy Execution: Verclsid

Legitimate hosting services abused for malware hosting/C2

Detected potential entity reuse from brand MICROSOFT.

Drops file in System32 directory

Suspicious use of NtSetInformationThreadHideFromDebugger

Drops file in Program Files directory

System Location Discovery: System Language Discovery

Browser Information Discovery

Suspicious use of SetWindowsHookEx

Modifies Internet Explorer settings

Checks SCSI registry key(s)

Suspicious behavior: EnumeratesProcesses

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Enumerates system info in registry

Suspicious use of WriteProcessMemory

Suspicious use of AdjustPrivilegeToken

Modifies registry class

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-12 21:29

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-12 21:29

Reported

2024-11-12 21:46

Platform

win10v2004-20241007-en

Max time kernel

1001s

Max time network

1003s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbHNKZWxBOExZQ0xxc0hXU3JzMmc2a1NrVXpBUXxBQ3Jtc0trZmhaNU4xa3ljc1d5WFpNMTF1T2RQSnlJVTZlOXpBSl91N3lRTTI1NTBGNVExbDQxb0RQdkFBcnV2WnVSY09HSHk1SU1qRGU4bEZ1dGRmbzFMQXdiWGpiS0Ewek9oVUZLUnVvaHpCamdlaEQ2b3pOaw&q=https%3A%2F%2Fsites.google.com%2Fview%2Fnexol&v=6mF7AbF_SiE

Signatures

Detected microsoft outlook phishing page

phishing microsoft product:outlook

Lumma Stealer, LummaC

stealer lumma

Lumma family

lumma

Identifies VirtualBox via ACPI registry values (likely anti-VM)

evasion
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A

A potential corporate email address has been identified in the URL: [email protected]

phishing

A potential corporate email address has been identified in the URL: [email protected]

phishing

A potential corporate email address has been identified in the URL: [email protected]

phishing

A potential corporate email address has been identified in the URL: [email protected]

phishing

A potential corporate email address has been identified in the URL: [email protected]

phishing

A potential corporate email address has been identified in the URL: [email protected]

phishing

A potential corporate email address has been identified in the URL: usersOID00060000525f4dc70000000000000000@84df9e7fe9f640afb435aaaaaaaaaaaa

phishing

A potential corporate email address has been identified in the URL: [email protected]

phishing

Checks BIOS information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A

Themida packer

themida
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A sites.google.com N/A N/A
N/A sites.google.com N/A N/A
N/A sites.google.com N/A N/A
N/A sites.google.com N/A N/A

System Binary Proxy Execution: Verclsid

defense_evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\verclsid.exe N/A

Detected potential entity reuse from brand MICROSOFT.

phishing microsoft

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\WINDOWS\SYSTEM32\WINBIODATABASE\51F39552-1075-4199-B513-0C10EA185DB0.DAT C:\Windows\system32\svchost.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\cv_debug.log C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Browser Information Discovery

discovery

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 C:\Windows\system32\SettingSyncHost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID C:\Windows\system32\SettingSyncHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 C:\Windows\system32\SettingSyncHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000 C:\Windows\system32\SettingSyncHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A C:\Windows\system32\wwahost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A C:\Windows\system32\wwahost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID C:\Windows\system32\SettingSyncHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 C:\Windows\system32\SettingSyncHost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID C:\Windows\system32\SettingSyncHost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 C:\Windows\system32\wwahost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Windows\system32\SettingSyncHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 C:\Windows\system32\wwahost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\wwahost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C C:\Windows\system32\wwahost.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000\Software\Microsoft\Internet Explorer\GPU C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000\SOFTWARE\Microsoft\Internet Explorer\GPU C:\Windows\system32\wwahost.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "164" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Speech Recognition Engine - ja-JP Embedded DNN v11.1" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Haruka - Japanese (Japan)" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Nathalie Mobile" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "436;41c;401;801;c01;1001;1401;1801;1c01;2001;2401;2801;2c01;3001;3401;3801;3c01;4001;42b;42c;82c;42d;423;402;455;403;c04;1004;1404;41a;405;406;465;413;813;809;c09;1009;1409;1809;1c09;2009;2409;2809;2c09;3009;3409;425;438;429;40b;80c;c0c;100c;140c;180c;456;437;807;c07;1007;1407;408;447;40d;439;40e;40f;421;410;810;44b;457;412;812;440;426;427;827;42f;43e;83e;44e;450;414;814;415;416;816;446;418;419;44f;c1a;81a;41b;424;80a;100a;140a;180a;1c0a;200a;240a;280a;2c0a;300a;340a;380a;3c0a;400a;440a;480a;4c0a;500a;430;441;41d;81d;45a;449;444;44a;41e;41f;422;420;820;443;843;42a;540a" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "SR de-DE Locale Handler" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Julie" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\TTS\\ja-JP\\MSTTSLocjaJP.dat" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Eva Mobile" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\System32\\Speech_OneCore\\VoiceActivation\\fr-FR\\sidubm.table" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%SystemDrive%\\Data\\SharedData\\Speech_OneCore\\Engines\\TTS\\fr-FR" C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoft.asynctextservice_8wekyb3d8bbwe\PackageStateRoamingCollectionId C:\Windows\system32\SettingSyncHost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\System32\\Speech_OneCore\\VoiceActivation\\it-IT\\sidubm.table" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Eva Mobile(Canada)" C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoft.accountscontrol_cw5n1h2txyewy\PackageStateRoamingCollectionId C:\Windows\system32\SettingSyncHost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "124" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "804" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Adult" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "{6BFCACDC-A6A6-4343-9CF6-83A83727367B}" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Speech Recognition Engine - en-US Embedded DNN v11.1" C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows C:\Windows\system32\SettingSyncHost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Speech SW Voice Activation - English (United States)" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Pablo - Spanish (Spain)" C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\f46d4000-fd22-4db4-ac8e-4e1ddde828fe_cw5n1h2txyewy\PackageStateRoamingCollectionId C:\Windows\system32\SettingSyncHost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Speech HW Voice Activation - Japanese (Japan)" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%SystemDrive%\\Data\\SharedData\\Speech_OneCore\\Engines\\TTS\\es-MX" C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoftwindows.undockeddevkit_cw5n1h2txyewy\PackageStateRoamingCollectionId C:\Windows\system32\SettingSyncHost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\TTS\\es-ES\\M3082Ana" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\live.com\NumberOfSubdomains = "4" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "- 0001 ! 0002 & 0003 , 0004 . 0005 ? 0006 _ 0007 ^ 0008 1 0009 2 000a ~ 000b : 000c a 000d aw 000e ax 000f ay 0010 b 0011 d 0012 ch 0013 eh 0014 eu 0015 ey 0016 f 0017 g 0018 h 0019 ih 001a iy 001b jh 001c k 001d l 001e m 001f n 0020 ng 0021 oe 0022 oh 0023 ow 0024 oy 0025 p 0026 pf 0027 r 0028 s 0029 sh 002a t 002b ts 002c ue 002d uh 002e uw 002f uy 0030 v 0031 x 0032 y 0033 z 0034 zh 0035" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\SR\\de-DE-N\\lsr1031.lxa" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\TTS\\it-IT\\M1040Elsa" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Hongyu Mobile - Chinese (Simplified, PRC)" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\microsoft.com\ = "0" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Speech_OneCore\\Voices\\Tokens\\MSTTS_V110_EnUS_ZiraM" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\SR\\fr-FR-N\\L1036" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%SystemDrive%\\Data\\SharedData\\Speech_OneCore\\Engines\\TTS\\pt-BR" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Matilda Mobile - English (Australia)" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "11.0.2015.0910" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%SystemDrive%\\Data\\SharedData\\Speech_OneCore\\Engines\\TTS\\es-ES" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "0" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\live.com\NumberOfSubdomains = "3" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "40A;C0A" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Speech Recognition Engine - de-DE Embedded DNN v11.1" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Hortense" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "SpeechUXPlugin" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "{2984A9DB-5689-43AD-877D-14999A15DD46}" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "C09" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Koyal Mobile - English (India)" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\client-api.arkoselabs.com\ = "0" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "SR de-DE Lookup Lexicon" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\SR\\fr-FR-N\\c1036.fe" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoft.com\NumberOfSubdom = "2" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\TTS\\de-DE\\M1031Stefan" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\live.com\Total = "124" C:\Windows\system32\wwahost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\Internet Explorer\DOMStorage\live.com\NumberOfSubdomains = "2" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "%windir%\\Speech_OneCore\\Engines\\SR\\it-IT-N\\tn1040.bin" C:\Windows\system32\wwahost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\e2a4f912-2574-4a75-9bb0-0d023378592b_cw5n1h2txyewy\PackageStateRoamingCollectionId C:\Windows\system32\SettingSyncHost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\windows.printdialog_cw5n1h2txyewy\PackageStateRoamingCollectionId C:\Windows\system32\SettingSyncHost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "{0B3398EA-00F1-418b-AA31-6F2F9BE5809B}" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Speech HW Voice Activation - English (United States)" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Has seleccionado %1 como voz predeterminada." C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Mila Mobile - Spanish (Mexico)" C:\Windows\system32\wwahost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\zSMeVgHcAfbzUD = "Microsoft Eva Mobile - English (Canada)" C:\Windows\system32\wwahost.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Windows\system32\wwahost.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\wwahost.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\wwahost.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\svchost.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\system32\SettingSyncHost.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\SettingSyncHost.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\system32\SettingSyncHost.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\SettingSyncHost.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\system32\SettingSyncHost.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\SettingSyncHost.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\system32\svchost.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: 33 N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2800 wrote to memory of 2748 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2748 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 536 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 536 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2800 wrote to memory of 2292 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbHNKZWxBOExZQ0xxc0hXU3JzMmc2a1NrVXpBUXxBQ3Jtc0trZmhaNU4xa3ljc1d5WFpNMTF1T2RQSnlJVTZlOXpBSl91N3lRTTI1NTBGNVExbDQxb0RQdkFBcnV2WnVSY09HSHk1SU1qRGU4bEZ1dGRmbzFMQXdiWGpiS0Ewek9oVUZLUnVvaHpCamdlaEQ2b3pOaw&q=https%3A%2F%2Fsites.google.com%2Fview%2Fnexol&v=6mF7AbF_SiE

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd4f9746f8,0x7ffd4f974708,0x7ffd4f974718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2164 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2832 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5212 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5212 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4140 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3636 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1

C:\Windows\system32\wwahost.exe

"C:\Windows\system32\wwahost.exe" -ServerName:App.wwa

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k UnistackSvcGroup

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5860 /prefetch:2

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x540 0x52c

C:\Windows\system32\SettingSyncHost.exe

C:\Windows\system32\SettingSyncHost.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5252 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5412 /prefetch:1

C:\Windows\system32\verclsid.exe

"C:\Windows\system32\verclsid.exe" /S /C {72C984BA-0666-4D3F-A0DE-96BF43838E6E} /I {0CB6E812-BD37-4416-BFAE-E44A7C15B453} /X 0x1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5464 /prefetch:1

C:\Windows\system32\CredentialEnrollmentManager.exe

C:\Windows\system32\CredentialEnrollmentManager.exe

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k WbioSvcGroup -s WbioSrvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3456 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-redirect=Windows.Launch -contentTile -url 0 https://outlook.com

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd4f9746f8,0x7ffd4f974708,0x7ffd4f974718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1388,13536177776956363489,17712204763964738658,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2180 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1388,13536177776956363489,17712204763964738658,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 /prefetch:3

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1764 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4644 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6536 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7056 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6968 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6480 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6760 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6964 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7156 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2972 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6760 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6076 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7440 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4860 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6332 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4132 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3444 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6348 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3908 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=7740 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6388 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7716 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6860 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6044 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6944 /prefetch:1

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe

"C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5984 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4296 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6016 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6576 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1972 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5808 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8184 /prefetch:1

C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe

"C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe"

C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe

"C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe"

C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe

"C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe"

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\geo.txt

C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe

"C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe"

C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe

"C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe"

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /7

C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe

"C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe"

C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe

"C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe"

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\geo.txt

C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe

"C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6656 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6240 /prefetch:1

C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe

"C:\Users\Admin\Downloads\SоftWare\SоftWare_(password_1212)\SоftWare.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7960 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4656 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,1757460330031751759,18221256254370124492,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7512 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 www.youtube.com udp
GB 172.217.169.78:443 www.youtube.com tcp
GB 172.217.169.78:443 www.youtube.com udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 78.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 140.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 sites.google.com udp
GB 216.58.212.238:443 sites.google.com tcp
GB 216.58.212.238:443 sites.google.com tcp
US 8.8.8.8:53 apis.google.com udp
GB 216.58.201.110:443 apis.google.com tcp
GB 216.58.201.110:443 apis.google.com udp
US 8.8.8.8:53 238.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 10.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 35.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 110.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 ssl.gstatic.com udp
GB 172.217.16.227:443 ssl.gstatic.com tcp
US 8.8.8.8:53 play.google.com udp
GB 216.58.212.238:443 sites.google.com udp
GB 172.217.16.238:443 play.google.com tcp
GB 172.217.16.238:443 play.google.com udp
GB 172.217.16.227:443 ssl.gstatic.com udp
US 8.8.8.8:53 227.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 238.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 nav.smartscreen.microsoft.com udp
GB 13.87.96.169:443 nav.smartscreen.microsoft.com tcp
US 8.8.8.8:53 169.96.87.13.in-addr.arpa udp
US 8.8.8.8:53 data-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 logincdn.msftauth.net udp
GB 51.140.242.104:443 data-edge.smartscreen.microsoft.com tcp
GB 51.140.242.104:443 data-edge.smartscreen.microsoft.com tcp
GB 51.140.242.104:443 data-edge.smartscreen.microsoft.com tcp
US 152.199.21.175:443 logincdn.msftauth.net tcp
US 152.199.21.175:443 logincdn.msftauth.net tcp
US 8.8.8.8:53 104.242.140.51.in-addr.arpa udp
US 8.8.8.8:53 175.21.199.152.in-addr.arpa udp
US 8.8.8.8:53 signup.live.com udp
US 13.107.42.22:443 signup.live.com tcp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 8.8.8.8:53 acctcdn.msauth.net udp
US 20.42.73.27:443 browser.events.data.microsoft.com tcp
US 13.107.246.65:443 acctcdn.msauth.net tcp
US 13.107.246.65:443 acctcdn.msauth.net tcp
US 13.107.246.65:443 acctcdn.msauth.net tcp
US 13.107.246.65:443 acctcdn.msauth.net tcp
US 13.107.246.65:443 acctcdn.msauth.net tcp
US 13.107.246.65:443 acctcdn.msauth.net tcp
US 8.8.8.8:53 22.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 65.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 27.73.42.20.in-addr.arpa udp
US 8.8.8.8:53 account.live.com udp
US 13.107.42.22:443 account.live.com tcp
US 8.8.8.8:53 fpt.live.com udp
US 52.167.30.171:443 fpt.live.com tcp
US 8.8.8.8:53 171.30.167.52.in-addr.arpa udp
US 52.167.30.171:443 fpt.live.com tcp
US 8.8.8.8:53 fpt2.microsoft.com udp
US 52.167.30.171:443 fpt2.microsoft.com tcp
US 8.8.8.8:53 fpt.microsoft.com udp
US 8.8.8.8:53 x.urs.microsoft.com udp
US 52.167.30.171:443 fpt.microsoft.com tcp
GB 13.87.96.169:443 x.urs.microsoft.com tcp
US 8.8.8.8:53 50.23.12.20.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 73.208.201.84.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 79.190.18.2.in-addr.arpa udp
US 20.42.73.27:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 14.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 iframe.arkoselabs.com udp
FR 18.244.28.48:443 iframe.arkoselabs.com tcp
US 8.8.8.8:53 48.28.244.18.in-addr.arpa udp
US 8.8.8.8:53 client-api.arkoselabs.com udp
FR 18.155.129.16:443 client-api.arkoselabs.com tcp
US 8.8.8.8:53 133.200.245.18.in-addr.arpa udp
US 8.8.8.8:53 90.193.84.52.in-addr.arpa udp
US 8.8.8.8:53 16.129.155.18.in-addr.arpa udp
US 152.199.21.175:443 logincdn.msftauth.net tcp
US 8.8.8.8:53 246.197.219.23.in-addr.arpa udp
US 8.8.8.8:53 windows.policies.live.net udp
US 13.107.42.12:443 windows.policies.live.net tcp
US 8.8.8.8:53 www.windowssearch.com udp
US 150.171.27.10:443 www.windowssearch.com tcp
US 8.8.8.8:53 substrate.office.com udp
GB 52.97.211.114:443 substrate.office.com tcp
US 8.8.8.8:53 12.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 114.211.97.52.in-addr.arpa udp
US 8.8.8.8:53 edge.activity.windows.com udp
US 8.8.8.8:53 edge.activity.windows.com udp
US 8.8.8.8:53 continuum.dds.microsoft.com udp
US 8.8.8.8:53 prod.rewardsplatform.microsoft.com udp
US 8.8.8.8:53 substrate.office.com udp
IE 40.69.83.104:443 continuum.dds.microsoft.com tcp
IE 52.236.29.249:443 prod.rewardsplatform.microsoft.com tcp
GB 52.97.133.242:443 substrate.office.com tcp
US 8.8.8.8:53 104.83.69.40.in-addr.arpa udp
US 8.8.8.8:53 242.133.97.52.in-addr.arpa udp
US 8.8.8.8:53 249.29.236.52.in-addr.arpa udp
N/A 127.0.0.1:443 tcp
N/A 127.0.0.1:443 tcp
N/A 127.0.0.1:443 tcp
GB 52.97.133.242:443 substrate.office.com udp
N/A 127.0.0.1:443 tcp
N/A 127.0.0.1:443 tcp
N/A 127.0.0.1:443 tcp
US 8.8.8.8:53 outlook.com udp
US 52.96.229.242:443 outlook.com tcp
US 52.96.229.242:443 outlook.com tcp
US 8.8.8.8:53 www.outlook.com udp
GB 40.99.213.34:443 www.outlook.com tcp
US 8.8.8.8:53 242.229.96.52.in-addr.arpa udp
US 8.8.8.8:53 outlook.live.com udp
GB 52.97.211.178:443 outlook.live.com tcp
US 8.8.8.8:53 www.microsoft.com udp
US 23.192.22.93:443 www.microsoft.com tcp
US 8.8.8.8:53 34.213.99.40.in-addr.arpa udp
US 8.8.8.8:53 178.211.97.52.in-addr.arpa udp
US 8.8.8.8:53 93.22.192.23.in-addr.arpa udp
N/A 127.0.0.1:443 tcp
US 8.8.8.8:53 play.vidyard.com udp
US 151.101.193.181:443 play.vidyard.com tcp
US 8.8.8.8:53 181.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 72.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 cdn-dynmedia-1.microsoft.com udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
GB 95.100.104.22:443 cdn-dynmedia-1.microsoft.com tcp
GB 95.100.104.22:443 cdn-dynmedia-1.microsoft.com tcp
GB 95.100.104.22:443 cdn-dynmedia-1.microsoft.com tcp
US 13.107.246.65:443 wcpstatic.microsoft.com tcp
N/A 127.0.0.1:443 tcp
N/A 127.0.0.1:443 tcp
N/A 127.0.0.1:443 tcp
US 8.8.8.8:53 22.104.100.95.in-addr.arpa udp
US 8.8.8.8:53 assets.onestore.ms udp
GB 184.87.176.59:443 assets.onestore.ms tcp
US 8.8.8.8:53 59.176.87.184.in-addr.arpa udp
GB 95.100.104.22:443 cdn-dynmedia-1.microsoft.com tcp
N/A 127.0.0.1:443 tcp
N/A 127.0.0.1:443 tcp
US 8.8.8.8:53 sites.google.com udp
US 8.8.8.8:53 www.mediafire.com udp
US 104.17.150.117:443 www.mediafire.com tcp
US 104.17.150.117:443 www.mediafire.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 ajax.googleapis.com udp
GB 142.250.180.4:443 www.google.com tcp
GB 172.217.16.234:443 ajax.googleapis.com tcp
US 8.8.8.8:53 117.150.17.104.in-addr.arpa udp
US 8.8.8.8:53 4.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 cdn.amplitude.com udp
FR 18.244.28.6:443 cdn.amplitude.com tcp
US 8.8.8.8:53 connect.facebook.net udp
GB 163.70.151.21:443 connect.facebook.net tcp
US 8.8.8.8:53 translate.google.com udp
GB 142.250.178.14:443 translate.google.com tcp
US 8.8.8.8:53 api.amplitude.com udp
US 100.20.102.35:443 api.amplitude.com tcp
US 8.8.8.8:53 translate.googleapis.com udp
GB 216.58.212.234:443 translate.googleapis.com tcp
US 8.8.8.8:53 200.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 6.28.244.18.in-addr.arpa udp
US 8.8.8.8:53 21.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 35.102.20.100.in-addr.arpa udp
US 8.8.8.8:53 234.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 216.239.32.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.facebook.com udp
GB 163.70.151.35:443 www.facebook.com tcp
GB 142.250.178.3:443 www.google.co.uk tcp
BE 66.102.1.155:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 translate-pa.googleapis.com udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 3.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 35.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 155.1.102.66.in-addr.arpa udp
US 216.239.32.36:443 region1.analytics.google.com udp
GB 216.58.212.234:443 translate-pa.googleapis.com udp
GB 92.123.128.148:443 www.bing.com tcp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.128.195:443 r.bing.com tcp
GB 92.123.128.195:443 r.bing.com tcp
GB 92.123.128.153:443 th.bing.com tcp
GB 92.123.128.153:443 th.bing.com tcp
US 8.8.8.8:53 148.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 195.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 153.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
IE 20.190.159.73:443 login.microsoftonline.com tcp
US 8.8.8.8:53 73.159.190.20.in-addr.arpa udp
GB 172.217.169.78:443 www.youtube.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.178.22:443 i.ytimg.com tcp
US 8.8.8.8:53 73.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 22.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 accounts.google.com udp
NL 173.194.69.84:443 accounts.google.com tcp
NL 173.194.69.84:443 accounts.google.com udp
US 8.8.8.8:53 84.69.194.173.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
GB 142.250.180.4:443 www.google.com udp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 youtube.com udp
GB 172.217.16.238:443 play.google.com udp
GB 142.250.179.238:443 youtube.com tcp
GB 172.217.16.238:443 play.google.com tcp
GB 172.217.16.238:443 play.google.com udp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 216.58.212.234:443 jnn-pa.googleapis.com tcp
GB 216.58.212.234:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 consent.youtube.com udp
US 8.8.8.8:53 suggestqueries-clients6.youtube.com udp
GB 142.250.187.206:443 suggestqueries-clients6.youtube.com tcp
GB 142.250.187.206:443 suggestqueries-clients6.youtube.com udp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
GB 142.250.187.206:443 suggestqueries-clients6.youtube.com udp
GB 142.250.178.22:443 i.ytimg.com udp
US 8.8.8.8:53 yt3.ggpht.com udp
GB 142.250.187.225:443 yt3.ggpht.com tcp
GB 142.250.187.225:443 yt3.ggpht.com tcp
US 8.8.8.8:53 225.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 rr3---sn-aigl6ney.googlevideo.com udp
GB 173.194.183.168:443 rr3---sn-aigl6ney.googlevideo.com tcp
GB 173.194.183.168:443 rr3---sn-aigl6ney.googlevideo.com udp
US 8.8.8.8:53 168.183.194.173.in-addr.arpa udp
US 8.8.8.8:53 rr4---sn-aigl6nzr.googlevideo.com udp
GB 74.125.175.137:443 rr4---sn-aigl6nzr.googlevideo.com udp
GB 142.250.187.225:443 yt3.ggpht.com udp
US 8.8.8.8:53 137.175.125.74.in-addr.arpa udp
US 8.8.8.8:53 rr2---sn-aigzrnz7.googlevideo.com udp
GB 74.125.175.199:443 rr2---sn-aigzrnz7.googlevideo.com udp
US 8.8.8.8:53 199.175.125.74.in-addr.arpa udp
US 8.8.8.8:53 rr3---sn-aigzrnsl.googlevideo.com udp
GB 74.125.168.232:443 rr3---sn-aigzrnsl.googlevideo.com udp
US 8.8.8.8:53 232.168.125.74.in-addr.arpa udp
US 8.8.8.8:53 rr1---sn-aigzrnld.googlevideo.com udp
GB 74.125.97.70:443 rr1---sn-aigzrnld.googlevideo.com udp
US 8.8.8.8:53 70.97.125.74.in-addr.arpa udp
US 8.8.8.8:53 rr1---sn-aigl6nzr.googlevideo.com udp
GB 74.125.175.134:443 rr1---sn-aigl6nzr.googlevideo.com udp
US 8.8.8.8:53 134.175.125.74.in-addr.arpa udp
US 8.8.8.8:53 rr2---sn-aigzrn7e.googlevideo.com udp
GB 173.194.5.39:443 rr2---sn-aigzrn7e.googlevideo.com udp
US 8.8.8.8:53 39.5.194.173.in-addr.arpa udp
US 8.8.8.8:53 rr2---sn-aigzrnsr.googlevideo.com udp
GB 74.125.175.39:443 rr2---sn-aigzrnsr.googlevideo.com udp
US 8.8.8.8:53 39.175.125.74.in-addr.arpa udp
GB 74.125.168.102:443 rr1---sn-aigl6nz7.googlevideo.com udp
US 8.8.8.8:53 102.168.125.74.in-addr.arpa udp
US 8.8.8.8:53 rr4---sn-aigl6nz7.googlevideo.com udp
GB 74.125.168.105:443 rr4---sn-aigl6nz7.googlevideo.com udp
US 8.8.8.8:53 105.168.125.74.in-addr.arpa udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 rr3---sn-aigzrnse.googlevideo.com udp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 74.125.168.200:443 rr3---sn-aigzrnse.googlevideo.com udp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 33.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 200.168.125.74.in-addr.arpa udp
US 8.8.8.8:53 ade.googlesyndication.com udp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn3.gstatic.com udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 172.217.16.238:443 encrypted-tbn1.gstatic.com tcp
GB 172.217.16.238:443 encrypted-tbn1.gstatic.com tcp
GB 142.250.180.14:443 encrypted-tbn3.gstatic.com tcp
GB 142.250.200.2:443 ade.googlesyndication.com tcp
GB 142.250.200.46:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.200.46:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.200.46:443 encrypted-tbn0.gstatic.com tcp
US 8.8.8.8:53 i9.ytimg.com udp
GB 142.250.179.238:443 i9.ytimg.com tcp
US 8.8.8.8:53 38.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 14.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 46.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 2.17.178.52.in-addr.arpa udp
GB 142.250.200.2:443 ade.googlesyndication.com udp
US 8.8.8.8:53 rr4---sn-aigl6ns6.googlevideo.com udp
GB 74.125.105.9:443 rr4---sn-aigl6ns6.googlevideo.com udp
US 8.8.8.8:53 9.105.125.74.in-addr.arpa udp
GB 74.125.175.137:443 rr4---sn-aigl6nzr.googlevideo.com udp
US 8.8.8.8:53 rr5---sn-aigzrn7z.googlevideo.com udp
GB 173.194.135.106:443 rr5---sn-aigzrn7z.googlevideo.com udp
US 8.8.8.8:53 rr5---sn-aigl6nzr.googlevideo.com udp
GB 74.125.175.138:443 rr5---sn-aigl6nzr.googlevideo.com udp
US 8.8.8.8:53 106.135.194.173.in-addr.arpa udp
US 8.8.8.8:53 138.175.125.74.in-addr.arpa udp
US 8.8.8.8:53 rr4---sn-aigl6ney.googlevideo.com udp
GB 173.194.183.169:443 rr4---sn-aigl6ney.googlevideo.com udp
US 8.8.8.8:53 169.183.194.173.in-addr.arpa udp
US 8.8.8.8:53 rr4---sn-aigzrnsl.googlevideo.com udp
GB 74.125.168.233:443 rr4---sn-aigzrnsl.googlevideo.com udp
GB 142.250.179.238:443 i9.ytimg.com udp
N/A 127.0.0.1:443 tcp
N/A 127.0.0.1:443 tcp
US 8.8.8.8:53 ibf.tw udp
US 172.67.210.122:443 ibf.tw tcp
US 172.67.210.122:443 ibf.tw tcp
US 8.8.8.8:53 122.210.67.172.in-addr.arpa udp
GB 142.250.178.14:443 translate.google.com udp
US 216.239.32.36:443 region1.analytics.google.com udp
GB 142.250.178.3:443 www.google.co.uk udp
US 216.239.32.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 www.facebook.com udp
GB 157.240.221.35:443 www.facebook.com tcp
GB 216.58.201.106:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 35.221.240.157.in-addr.arpa udp
US 8.8.8.8:53 106.201.58.216.in-addr.arpa udp
GB 142.250.180.4:443 www.google.com udp
GB 172.217.16.234:443 jnn-pa.googleapis.com udp
GB 216.58.212.234:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 the.gatekeeperconsent.com udp
US 8.8.8.8:53 btloader.com udp
US 104.21.42.32:443 the.gatekeeperconsent.com tcp
US 104.22.74.216:443 btloader.com tcp
US 8.8.8.8:53 www.ezojs.com udp
US 104.21.63.106:443 www.ezojs.com tcp
US 8.8.8.8:53 privacy.gatekeeperconsent.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 104.21.42.32:443 privacy.gatekeeperconsent.com tcp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 ad-delivery.net udp
US 172.67.69.19:443 ad-delivery.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 8.8.8.8:53 cdn.otnolatrnup.com udp
US 104.19.208.227:443 cdn.otnolatrnup.com tcp
US 8.8.8.8:53 g.ezoic.net udp
FR 13.37.187.223:443 g.ezoic.net tcp
US 8.8.8.8:53 go.ezodn.com udp
US 8.8.8.8:53 www.mediafiredls.com udp
US 8.8.8.8:53 32.42.21.104.in-addr.arpa udp
US 8.8.8.8:53 216.74.22.104.in-addr.arpa udp
US 8.8.8.8:53 106.63.21.104.in-addr.arpa udp
US 8.8.8.8:53 73.79.16.104.in-addr.arpa udp
US 8.8.8.8:53 19.69.67.172.in-addr.arpa udp
US 8.8.8.8:53 227.208.19.104.in-addr.arpa udp
US 8.8.8.8:53 223.187.37.13.in-addr.arpa udp
US 172.67.142.121:443 go.ezodn.com tcp
US 172.67.142.121:443 go.ezodn.com tcp
US 172.67.142.121:443 go.ezodn.com tcp
US 172.67.73.78:443 www.mediafiredls.com tcp
US 8.8.8.8:53 api.btloader.com udp
US 130.211.23.194:443 api.btloader.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 8.8.8.8:53 otnolatrnup.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 g.ezodn.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 bshr.ezodn.com udp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
US 104.21.87.79:443 bshr.ezodn.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
FR 18.155.129.21:443 tags.crwdcntrl.net tcp
US 8.8.8.8:53 ad.crwdcntrl.net udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
IE 52.18.153.131:443 bcp.crwdcntrl.net tcp
US 8.8.8.8:53 crt.rootg2.amazontrust.com udp
IE 52.30.238.153:443 bcp.crwdcntrl.net tcp
FR 3.164.163.127:80 crt.rootg2.amazontrust.com tcp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 142.250.178.14:443 fundingchoicesmessages.google.com tcp
US 8.8.8.8:53 121.142.67.172.in-addr.arpa udp
US 8.8.8.8:53 78.73.67.172.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 79.87.21.104.in-addr.arpa udp
US 8.8.8.8:53 21.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 153.238.30.52.in-addr.arpa udp
US 8.8.8.8:53 131.153.18.52.in-addr.arpa udp
US 8.8.8.8:53 127.163.164.3.in-addr.arpa udp
FR 13.37.187.223:443 g.ezoic.net tcp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 id.a-mx.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 id5-sync.com udp
DE 79.127.216.47:443 id.a-mx.com tcp
US 8.8.8.8:53 api.rlcdn.com udp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 cdn-ima.33across.com udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
US 8.8.8.8:53 static.criteo.net udp
DE 162.19.138.118:443 id5-sync.com tcp
US 8.8.8.8:53 oa.openxcdn.net udp
GB 87.248.114.12:443 ups.analytics.yahoo.com tcp
US 34.120.133.55:443 api.rlcdn.com tcp
US 104.22.4.69:443 id.hadron.ad.gt tcp
US 172.64.152.89:443 cdn-ima.33across.com tcp
GB 142.250.187.226:443 ep1.adtrafficquality.google tcp
US 35.71.131.137:443 match.adsrvr.org tcp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 34.102.146.192:443 oa.openxcdn.net tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 104.22.52.86:443 cdn.id5-sync.com tcp
GB 18.165.154.87:443 cdn.prod.uidapi.com tcp
US 8.8.8.8:53 c3.a-mo.net udp
NL 79.127.227.46:443 c3.a-mo.net tcp
US 8.8.8.8:53 oajs.openx.net udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 34.120.135.53:443 oajs.openx.net tcp
DE 141.95.98.65:443 lb.eu-1-id5-sync.com tcp
FR 178.250.7.13:443 dnacdn.net tcp
GB 142.250.179.225:443 ep2.adtrafficquality.google tcp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
US 8.8.8.8:53 ads.yieldmo.com udp
FR 18.244.28.105:443 hb.yellowblue.io tcp
IE 54.229.172.252:443 ap.lijit.com tcp
DE 51.75.86.98:443 onetag-sys.com tcp
DE 18.157.230.4:443 tlx.3lift.com tcp
NL 185.64.189.112:443 hbopenbid.pubmatic.com tcp
GB 142.250.179.225:443 ep2.adtrafficquality.google udp
IE 52.209.163.31:443 ads.yieldmo.com tcp
FR 163.5.194.35:443 prebid.a-mo.net tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 34.120.135.53:443 oajs.openx.net udp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
GB 142.250.180.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 google-bidout-d.openx.net udp
US 34.98.64.218:443 google-bidout-d.openx.net tcp
GB 216.58.213.1:443 88a17d52ad8617ee9b84ee59add16445.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 47.216.127.79.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 12.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 55.133.120.34.in-addr.arpa udp
US 8.8.8.8:53 69.4.22.104.in-addr.arpa udp
US 8.8.8.8:53 118.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 89.152.64.172.in-addr.arpa udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 87.70.96.34.in-addr.arpa udp
US 8.8.8.8:53 192.146.102.34.in-addr.arpa udp
US 8.8.8.8:53 86.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 137.131.71.35.in-addr.arpa udp
US 8.8.8.8:53 87.154.165.18.in-addr.arpa udp
US 8.8.8.8:53 225.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 65.98.95.141.in-addr.arpa udp
US 8.8.8.8:53 105.28.244.18.in-addr.arpa udp
US 8.8.8.8:53 98.86.75.51.in-addr.arpa udp
US 8.8.8.8:53 13.7.250.178.in-addr.arpa udp
US 8.8.8.8:53 31.163.209.52.in-addr.arpa udp
US 8.8.8.8:53 252.172.229.54.in-addr.arpa udp
US 8.8.8.8:53 35.194.5.163.in-addr.arpa udp
US 8.8.8.8:53 139.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 112.189.64.185.in-addr.arpa udp
US 8.8.8.8:53 46.227.127.79.in-addr.arpa udp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 4.230.157.18.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 53.135.120.34.in-addr.arpa udp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
NL 185.235.87.27:443 ag.gbc.criteo.com tcp
NL 185.235.87.61:443 gem.gbc.criteo.com tcp
US 8.8.8.8:53 download2260.mediafire.com udp
US 199.91.155.1:443 download2260.mediafire.com tcp
US 199.91.155.1:443 download2260.mediafire.com tcp
US 8.8.8.8:53 1.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 27.87.235.185.in-addr.arpa udp
US 8.8.8.8:53 61.87.235.185.in-addr.arpa udp
GB 142.250.187.226:443 ep1.adtrafficquality.google udp
US 104.18.159.164:80 otnolatrnup.com tcp
US 104.18.159.164:80 otnolatrnup.com tcp
US 8.8.8.8:53 woreppercomming.com udp
GB 54.230.10.77:443 woreppercomming.com tcp
US 8.8.8.8:53 1.155.91.199.in-addr.arpa udp
US 8.8.8.8:53 www.chancial.com udp
US 8.8.8.8:53 check.analytics.rlcdn.com udp
US 104.21.79.34:443 www.chancial.com tcp
FR 99.86.91.124:443 check.analytics.rlcdn.com tcp
US 8.8.8.8:53 www.opera.com udp
DE 35.156.202.138:443 www.opera.com tcp
US 8.8.8.8:53 cdn-production-opera-website.operacdn.com udp
US 8.8.8.8:53 www.googleoptimize.com udp
FR 2.18.131.41:443 cdn-production-opera-website.operacdn.com tcp
FR 2.18.131.41:443 cdn-production-opera-website.operacdn.com tcp
FR 2.18.131.41:443 cdn-production-opera-website.operacdn.com tcp
FR 2.18.131.41:443 cdn-production-opera-website.operacdn.com tcp
FR 2.18.131.41:443 cdn-production-opera-website.operacdn.com tcp
FR 2.18.131.41:443 cdn-production-opera-website.operacdn.com tcp
GB 216.58.201.110:443 www.googleoptimize.com tcp
FR 2.18.131.41:443 cdn-production-opera-website.operacdn.com tcp
US 8.8.8.8:53 77.10.230.54.in-addr.arpa udp
US 8.8.8.8:53 34.79.21.104.in-addr.arpa udp
US 8.8.8.8:53 124.91.86.99.in-addr.arpa udp
US 8.8.8.8:53 138.202.156.35.in-addr.arpa udp
US 8.8.8.8:53 41.131.18.2.in-addr.arpa udp
GB 216.58.212.234:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 edge.activity.windows.com udp
US 8.8.8.8:53 edge.activity.windows.com udp
N/A 127.0.0.1:443 tcp
N/A 127.0.0.1:443 tcp
US 8.8.8.8:53 chimneybuh.cyou udp
US 104.21.35.106:443 chimneybuh.cyou tcp
US 8.8.8.8:53 106.35.21.104.in-addr.arpa udp
US 8.8.8.8:53 thicktoys.sbs udp
US 104.21.52.119:443 thicktoys.sbs tcp
US 8.8.8.8:53 fleez-inc.sbs udp
US 172.67.150.243:443 fleez-inc.sbs tcp
US 8.8.8.8:53 119.52.21.104.in-addr.arpa udp
US 8.8.8.8:53 243.150.67.172.in-addr.arpa udp
US 8.8.8.8:53 pull-trucker.sbs udp
US 172.67.135.173:443 pull-trucker.sbs tcp
US 8.8.8.8:53 173.135.67.172.in-addr.arpa udp
US 8.8.8.8:53 3xc1aimbl0w.sbs udp
US 104.21.72.16:443 3xc1aimbl0w.sbs tcp
US 8.8.8.8:53 16.72.21.104.in-addr.arpa udp
US 8.8.8.8:53 bored-light.sbs udp
US 104.21.68.80:443 bored-light.sbs tcp
US 8.8.8.8:53 80.68.21.104.in-addr.arpa udp
US 8.8.8.8:53 prod.rewardsplatform.microsoft.com udp
IE 52.236.29.249:443 prod.rewardsplatform.microsoft.com tcp
US 8.8.8.8:53 300snails.sbs udp
US 172.67.138.157:443 300snails.sbs tcp
US 8.8.8.8:53 faintbl0w.sbs udp
US 104.21.96.94:443 faintbl0w.sbs tcp
US 8.8.8.8:53 157.138.67.172.in-addr.arpa udp
US 8.8.8.8:53 94.96.21.104.in-addr.arpa udp
US 8.8.8.8:53 crib-endanger.sbs udp
US 104.21.39.101:443 crib-endanger.sbs tcp
GB 92.123.128.192:443 www.bing.com tcp
US 8.8.8.8:53 101.39.21.104.in-addr.arpa udp
US 8.8.8.8:53 steamcommunity.com udp
GB 104.123.95.227:443 steamcommunity.com tcp
US 8.8.8.8:53 marshal-zhukov.com udp
US 172.67.160.80:443 marshal-zhukov.com tcp
US 8.8.8.8:53 192.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 227.95.123.104.in-addr.arpa udp
US 8.8.8.8:53 80.160.67.172.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.128.142:443 th.bing.com tcp
GB 92.123.128.183:443 r.bing.com tcp
GB 92.123.128.183:443 r.bing.com tcp
GB 92.123.128.142:443 th.bing.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 storage.live.com udp
IE 40.126.31.69:443 login.microsoftonline.com tcp
NL 13.105.28.32:443 storage.live.com tcp
US 8.8.8.8:53 142.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 183.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 69.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 32.28.105.13.in-addr.arpa udp
US 8.8.8.8:53 www.hotmail.com udp
US 204.79.197.212:80 www.hotmail.com tcp
US 204.79.197.212:80 www.hotmail.com tcp
US 8.8.8.8:53 outlook.live.com udp
GB 40.99.150.130:443 outlook.live.com udp
US 8.8.8.8:53 212.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 130.150.99.40.in-addr.arpa udp
US 8.8.8.8:53 res.public.onecdn.static.microsoft udp
GB 2.23.221.136:443 res.public.onecdn.static.microsoft tcp
US 8.8.8.8:53 136.221.23.2.in-addr.arpa udp
US 8.8.8.8:53 browser.pipe.aria.microsoft.com udp
US 52.182.143.214:443 browser.pipe.aria.microsoft.com tcp
GB 2.23.221.136:443 res.public.onecdn.static.microsoft tcp
US 8.8.8.8:53 214.143.182.52.in-addr.arpa udp
GB 40.99.150.130:443 outlook.live.com tcp
US 8.8.8.8:53 ecs.office.com udp
US 52.113.194.132:443 ecs.office.com tcp
US 8.8.8.8:53 c.live.com udp
IE 13.74.129.1:443 c.live.com tcp
US 8.8.8.8:53 132.194.113.52.in-addr.arpa udp
US 8.8.8.8:53 1.129.74.13.in-addr.arpa udp
US 8.8.8.8:53 csp.microsoft.com udp
US 13.107.246.65:443 csp.microsoft.com tcp
US 8.8.8.8:53 amcdn.msftauth.net udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 151.101.129.108:443 acdn.adnxs.com tcp
US 13.107.246.65:443 amcdn.msftauth.net tcp
US 8.8.8.8:53 c.bing.com udp
US 204.79.197.237:443 c.bing.com tcp
US 8.8.8.8:53 eb2.3lift.com udp
US 8.8.8.8:53 m.adnxs.com udp
US 76.223.111.18:443 eb2.3lift.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
NL 185.89.210.180:443 m.adnxs.com tcp
US 8.8.8.8:53 108.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 res-1.cdn.office.net udp
GB 2.22.249.197:443 res-1.cdn.office.net tcp
US 8.8.8.8:53 eu-office.events.data.microsoft.com udp
IE 20.50.73.13:443 eu-office.events.data.microsoft.com tcp
IE 20.50.73.13:443 eu-office.events.data.microsoft.com tcp
US 8.8.8.8:53 loki.delve.office.com udp
GB 52.111.242.2:443 loki.delve.office.com tcp
GB 2.22.249.197:443 res-1.cdn.office.net tcp
GB 2.22.249.197:443 res-1.cdn.office.net tcp
US 8.8.8.8:53 180.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 13.73.50.20.in-addr.arpa udp
US 8.8.8.8:53 197.249.22.2.in-addr.arpa udp
US 8.8.8.8:53 2.242.111.52.in-addr.arpa udp
US 8.8.8.8:53 eu-mobile.events.data.microsoft.com udp
IE 13.69.239.72:443 eu-mobile.events.data.microsoft.com tcp
IE 13.69.239.72:443 eu-mobile.events.data.microsoft.com tcp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 20.189.173.17:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 72.239.69.13.in-addr.arpa udp
US 20.189.173.17:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 17.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
US 23.192.22.93:443 www.microsoft.com tcp
US 8.8.8.8:53 outlook.office365.com udp
GB 40.99.148.226:443 outlook.office365.com tcp
US 8.8.8.8:53 attachment.outlook.live.net udp
GB 40.99.214.130:443 attachment.outlook.live.net tcp
US 8.8.8.8:53 gbr.loki.delve.office.com udp
GB 40.99.214.130:443 attachment.outlook.live.net udp
US 8.8.8.8:53 130.214.99.40.in-addr.arpa udp
US 8.8.8.8:53 226.148.99.40.in-addr.arpa udp
US 8.8.8.8:53 cdn.adnxs.com udp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
US 151.101.65.108:443 cdn.adnxs.com tcp
US 8.8.8.8:53 108.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 apply-creditcard.oceanfinance.co.uk udp
US 104.18.24.109:443 apply-creditcard.oceanfinance.co.uk tcp
US 8.8.8.8:53 cdn-ukwest.onetrust.com udp
US 8.8.8.8:53 www.datadoghq-browser-agent.com udp
US 104.18.32.137:443 cdn-ukwest.onetrust.com tcp
FR 3.165.118.202:443 www.datadoghq-browser-agent.com tcp
US 104.18.32.137:443 cdn-ukwest.onetrust.com tcp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 109.24.18.104.in-addr.arpa udp
US 8.8.8.8:53 137.32.18.104.in-addr.arpa udp
US 8.8.8.8:53 202.118.165.3.in-addr.arpa udp
US 8.8.8.8:53 logs.browser-intake-datadoghq.eu udp
US 8.8.8.8:53 privacyportal-uk.onetrust.com udp
US 34.149.135.19:443 logs.browser-intake-datadoghq.eu tcp
US 8.8.8.8:53 19.135.149.34.in-addr.arpa udp
US 8.8.8.8:53 consent.config.office.com udp
FR 20.199.32.48:443 consent.config.office.com tcp
US 8.8.8.8:53 admin.microsoft.com udp
US 13.107.6.156:443 admin.microsoft.com tcp
US 8.8.8.8:53 48.32.199.20.in-addr.arpa udp
US 8.8.8.8:53 156.6.107.13.in-addr.arpa udp
US 8.8.8.8:53 res.cdn.office.net udp
GB 2.16.247.166:443 res.cdn.office.net tcp
US 8.8.8.8:53 166.247.16.2.in-addr.arpa udp
US 104.21.35.106:443 chimneybuh.cyou tcp
US 104.21.52.119:443 thicktoys.sbs tcp
US 172.67.150.243:443 fleez-inc.sbs tcp
US 172.67.135.173:443 pull-trucker.sbs tcp
US 104.21.72.16:443 3xc1aimbl0w.sbs tcp
US 104.21.68.80:443 bored-light.sbs tcp
US 172.67.138.157:443 300snails.sbs tcp
US 104.21.96.94:443 faintbl0w.sbs tcp
US 104.21.39.101:443 crib-endanger.sbs tcp
US 8.8.8.8:53 steamcommunity.com udp
GB 104.124.170.33:443 steamcommunity.com tcp
US 8.8.8.8:53 33.170.124.104.in-addr.arpa udp
US 172.67.160.80:443 marshal-zhukov.com tcp
US 104.21.35.106:443 chimneybuh.cyou tcp
US 104.21.52.119:443 thicktoys.sbs tcp
US 172.67.150.243:443 fleez-inc.sbs tcp
US 172.67.135.173:443 pull-trucker.sbs tcp
US 104.21.72.16:443 3xc1aimbl0w.sbs tcp
US 8.8.8.8:53 exo.nel.measure.office.net udp
US 8.8.8.8:53 m365cdn.nel.measure.office.net udp
GB 2.19.117.18:443 m365cdn.nel.measure.office.net tcp
GB 2.19.117.18:443 m365cdn.nel.measure.office.net tcp
US 104.21.68.80:443 bored-light.sbs tcp
US 172.67.138.157:443 300snails.sbs tcp
US 8.8.8.8:53 18.117.19.2.in-addr.arpa udp
US 104.21.96.94:443 faintbl0w.sbs tcp
US 104.21.39.101:443 crib-endanger.sbs tcp
GB 104.124.170.33:443 steamcommunity.com tcp
US 172.67.160.80:443 marshal-zhukov.com tcp
US 104.21.35.106:443 chimneybuh.cyou tcp
US 104.21.52.119:443 thicktoys.sbs tcp
US 172.67.150.243:443 fleez-inc.sbs tcp
US 172.67.135.173:443 pull-trucker.sbs tcp
US 104.21.72.16:443 3xc1aimbl0w.sbs tcp
US 104.21.68.80:443 bored-light.sbs tcp
US 172.67.138.157:443 300snails.sbs tcp
US 104.21.96.94:443 faintbl0w.sbs tcp
US 104.21.39.101:443 crib-endanger.sbs tcp
GB 104.124.170.33:443 steamcommunity.com tcp
US 172.67.160.80:443 marshal-zhukov.com tcp
US 8.8.8.8:53 ams3-ib.adnxs.com udp
US 8.8.8.8:53 outlook.live.com udp
US 8.8.8.8:53 res.public.onecdn.static.microsoft udp
NL 185.89.211.84:443 ams3-ib.adnxs.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 84.211.89.185.in-addr.arpa udp
US 8.8.8.8:53 ecs.office.com udp
US 52.113.194.132:443 ecs.office.com tcp
US 8.8.8.8:53 csp.microsoft.com udp
US 13.107.246.65:443 csp.microsoft.com tcp
US 8.8.8.8:53 res-1.cdn.office.net udp
GB 2.22.249.212:443 res-1.cdn.office.net tcp
US 8.8.8.8:53 20.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 212.249.22.2.in-addr.arpa udp
US 104.21.35.106:443 chimneybuh.cyou tcp
US 104.21.52.119:443 thicktoys.sbs tcp
US 172.67.150.243:443 fleez-inc.sbs tcp
US 172.67.135.173:443 pull-trucker.sbs tcp
US 104.21.72.16:443 3xc1aimbl0w.sbs tcp
US 104.21.68.80:443 bored-light.sbs tcp
US 172.67.138.157:443 300snails.sbs tcp
US 104.21.96.94:443 faintbl0w.sbs tcp
US 104.21.39.101:443 crib-endanger.sbs tcp
US 8.8.8.8:53 steamcommunity.com udp
GB 104.124.170.33:443 steamcommunity.com tcp
US 172.67.160.80:443 marshal-zhukov.com tcp
US 104.21.35.106:443 chimneybuh.cyou tcp
US 104.21.52.119:443 thicktoys.sbs tcp
US 172.67.150.243:443 fleez-inc.sbs tcp
US 172.67.135.173:443 pull-trucker.sbs tcp
US 104.21.72.16:443 3xc1aimbl0w.sbs tcp
US 104.21.68.80:443 bored-light.sbs tcp
US 172.67.138.157:443 300snails.sbs tcp
US 104.21.96.94:443 faintbl0w.sbs tcp
US 104.21.39.101:443 crib-endanger.sbs tcp
GB 104.124.170.33:443 steamcommunity.com tcp
US 8.8.8.8:53 substrate.office.com udp
US 8.8.8.8:53 outlook.office365.com udp
GB 52.98.207.146:443 substrate.office.com tcp
GB 52.97.211.66:443 outlook.office365.com tcp
US 8.8.8.8:53 75.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 146.207.98.52.in-addr.arpa udp
US 8.8.8.8:53 66.211.97.52.in-addr.arpa udp
US 104.21.35.106:443 chimneybuh.cyou tcp
US 104.21.52.119:443 thicktoys.sbs tcp
US 172.67.150.243:443 fleez-inc.sbs tcp
US 172.67.135.173:443 pull-trucker.sbs tcp
US 104.21.72.16:443 3xc1aimbl0w.sbs tcp
US 104.21.68.80:443 bored-light.sbs tcp
US 104.21.35.106:443 chimneybuh.cyou tcp
US 172.67.138.157:443 300snails.sbs tcp
US 104.21.52.119:443 thicktoys.sbs tcp
US 104.21.96.94:443 faintbl0w.sbs tcp
US 172.67.150.243:443 fleez-inc.sbs tcp
US 104.21.39.101:443 crib-endanger.sbs tcp
US 8.8.8.8:53 steamcommunity.com udp
GB 104.124.170.33:443 steamcommunity.com tcp
US 172.67.135.173:443 pull-trucker.sbs tcp
US 172.67.160.80:443 marshal-zhukov.com tcp
US 104.21.72.16:443 3xc1aimbl0w.sbs tcp
US 104.21.68.80:443 bored-light.sbs tcp
US 172.67.138.157:443 300snails.sbs tcp
US 104.21.96.94:443 faintbl0w.sbs tcp
US 104.21.39.101:443 crib-endanger.sbs tcp
GB 104.124.170.33:443 steamcommunity.com tcp
US 172.67.160.80:443 marshal-zhukov.com tcp
US 104.21.35.106:443 chimneybuh.cyou tcp
US 104.21.52.119:443 thicktoys.sbs tcp
US 8.8.8.8:53 outlook.live.com udp
US 8.8.8.8:53 res.public.onecdn.static.microsoft udp
GB 184.26.188.100:443 res.public.onecdn.static.microsoft tcp
GB 184.26.188.100:443 res.public.onecdn.static.microsoft tcp
NL 40.126.32.136:443 login.microsoftonline.com tcp
US 8.8.8.8:53 100.188.26.184.in-addr.arpa udp
US 8.8.8.8:53 136.32.126.40.in-addr.arpa udp
US 172.67.150.243:443 fleez-inc.sbs tcp
US 8.8.8.8:53 ecs.office.com udp
US 52.113.194.132:443 ecs.office.com tcp
US 172.67.135.173:443 pull-trucker.sbs tcp
US 8.8.8.8:53 c.live.com udp
IE 13.74.129.1:443 c.live.com tcp
US 8.8.8.8:53 csp.microsoft.com udp
US 13.107.246.65:443 csp.microsoft.com tcp
US 8.8.8.8:53 storage.live.com udp
IE 40.90.128.21:443 storage.live.com tcp
US 8.8.8.8:53 21.128.90.40.in-addr.arpa udp
US 8.8.8.8:53 res-1.cdn.office.net udp
US 8.8.8.8:53 m.adnxs.com udp
NL 185.89.210.141:443 m.adnxs.com tcp
GB 2.22.249.212:443 res-1.cdn.office.net tcp
US 8.8.8.8:53 138.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 141.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 104.21.72.16:443 3xc1aimbl0w.sbs tcp
US 104.21.68.80:443 bored-light.sbs tcp
US 172.67.138.157:443 300snails.sbs tcp
US 104.21.96.94:443 faintbl0w.sbs tcp
US 8.8.8.8:53 amcdn.msftauth.net udp
US 13.107.246.65:443 amcdn.msftauth.net tcp
US 13.107.246.65:443 amcdn.msftauth.net tcp
US 104.21.39.101:443 crib-endanger.sbs tcp
US 8.8.8.8:53 acctcdn.msauth.net udp
US 8.8.8.8:53 logincdn.msftauth.net udp
US 8.8.8.8:53 acctcdn.msftauth.net udp
US 13.107.246.65:443 acctcdn.msauth.net tcp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
US 8.8.8.8:53 acctcdnmsftuswe2.azureedge.net udp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
US 8.8.8.8:53 acctcdnvzeuno.azureedge.net udp
US 8.8.8.8:53 lgincdnmsftuswe2.azureedge.net udp
US 8.8.8.8:53 lgincdnvzeuno.azureedge.net udp
US 8.8.8.8:53 steamcommunity.com udp
GB 104.124.170.33:443 steamcommunity.com tcp
US 172.67.160.80:443 marshal-zhukov.com tcp
NL 185.89.210.141:443 m.adnxs.com tcp
NL 185.89.210.141:443 m.adnxs.com tcp
GB 184.26.188.100:443 res.public.onecdn.static.microsoft tcp
US 8.8.8.8:53 prod.rewardsplatform.microsoft.com udp
IE 52.236.29.249:443 prod.rewardsplatform.microsoft.com tcp
US 8.8.8.8:53 g.ezoic.net udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
FR 13.37.187.223:443 g.ezoic.net tcp
GB 142.250.178.3:443 www.google.co.uk udp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
GB 92.123.128.193:443 www.bing.com tcp
GB 92.123.128.193:443 www.bing.com tcp
US 8.8.8.8:53 193.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 outlook.live.com udp
GB 52.97.211.178:443 outlook.live.com udp
US 8.8.8.8:53 chimneybuh.cyou udp
US 172.67.217.187:443 chimneybuh.cyou tcp
US 8.8.8.8:53 thicktoys.sbs udp
US 172.67.198.129:443 thicktoys.sbs tcp
US 8.8.8.8:53 187.217.67.172.in-addr.arpa udp
US 8.8.8.8:53 fleez-inc.sbs udp
US 104.21.0.123:443 fleez-inc.sbs tcp
US 8.8.8.8:53 pull-trucker.sbs udp
US 104.21.7.31:443 pull-trucker.sbs tcp
US 8.8.8.8:53 3xc1aimbl0w.sbs udp
US 104.21.72.16:443 3xc1aimbl0w.sbs tcp
US 8.8.8.8:53 129.198.67.172.in-addr.arpa udp
US 8.8.8.8:53 31.7.21.104.in-addr.arpa udp
US 8.8.8.8:53 123.0.21.104.in-addr.arpa udp
US 8.8.8.8:53 bored-light.sbs udp
US 172.67.192.57:443 bored-light.sbs tcp
US 8.8.8.8:53 300snails.sbs udp
US 104.21.8.62:443 300snails.sbs tcp
US 8.8.8.8:53 faintbl0w.sbs udp
US 104.21.96.94:443 faintbl0w.sbs tcp
US 8.8.8.8:53 57.192.67.172.in-addr.arpa udp
US 8.8.8.8:53 62.8.21.104.in-addr.arpa udp
US 8.8.8.8:53 crib-endanger.sbs udp
US 172.67.144.50:443 crib-endanger.sbs tcp
US 8.8.8.8:53 steamcommunity.com udp
GB 104.124.170.33:443 steamcommunity.com tcp
US 8.8.8.8:53 marshal-zhukov.com udp
US 172.67.160.80:443 marshal-zhukov.com tcp
US 8.8.8.8:53 50.144.67.172.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.128.193:443 th.bing.com tcp
GB 92.123.128.170:443 r.bing.com tcp
GB 92.123.128.170:443 r.bing.com tcp
GB 92.123.128.193:443 th.bing.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
US 8.8.8.8:53 aefd.nelreports.net udp
GB 2.19.117.88:443 aefd.nelreports.net tcp
US 8.8.8.8:53 170.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 88.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 res.public.onecdn.static.microsoft udp
GB 2.23.221.136:443 res.public.onecdn.static.microsoft tcp
GB 2.23.221.136:443 res.public.onecdn.static.microsoft tcp
US 8.8.8.8:53 ecs.office.com udp
US 52.113.194.132:443 ecs.office.com tcp
US 8.8.8.8:53 c.live.com udp
IE 13.74.129.1:443 c.live.com tcp
US 8.8.8.8:53 storage.live.com udp
IE 20.135.20.1:443 storage.live.com tcp
US 8.8.8.8:53 csp.microsoft.com udp
US 13.107.246.65:443 csp.microsoft.com tcp
US 8.8.8.8:53 m.adnxs.com udp
US 8.8.8.8:53 res-1.cdn.office.net udp
NL 185.89.210.46:443 m.adnxs.com tcp
US 8.8.8.8:53 eu-office.events.data.microsoft.com udp
GB 2.23.210.151:443 res-1.cdn.office.net tcp
NL 52.178.17.235:443 eu-office.events.data.microsoft.com tcp
US 8.8.8.8:53 1.20.135.20.in-addr.arpa udp
US 8.8.8.8:53 46.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 4.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 151.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 235.17.178.52.in-addr.arpa udp
US 8.8.8.8:53 205.47.74.20.in-addr.arpa udp
US 8.8.8.8:53 eu-mobile.events.data.microsoft.com udp
IE 13.69.239.73:443 eu-mobile.events.data.microsoft.com tcp
US 8.8.8.8:53 73.239.69.13.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 ba6ef346187b40694d493da98d5da979
SHA1 643c15bec043f8673943885199bb06cd1652ee37
SHA256 d86eec91f295dfda8ed1c5fa99de426f2fe359282c7ebf67e3a40be739475d73
SHA512 2e6cc97330be8868d4b9c53be7e12c558f6eb1ac2c4080a611ba6c43561d0c5bb4791b8a11a8c2371599f0ba73ed1d9a7a2ea6dee2ae6a080f1912e0cb1f656c

\??\pipe\LOCAL\crashpad_2800_XKRRIZRRPRNZNPFU

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 b8880802fc2bb880a7a869faa01315b0
SHA1 51d1a3fa2c272f094515675d82150bfce08ee8d3
SHA256 467b8cd4aacac66557712f9843023dcedefcc26efc746f3e44157bc8dac73812
SHA512 e1c6dba2579357ba70de58968b167d2c529534d24bff70568144270c48ac18a48ee2af2d58d78ae741e5a36958fa78a57955bd2456f1df00b781fc1002e123d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b9db13f5688710cdcee3c3249df81806
SHA1 c5388b6a07a005cde065d8f91c30bbf665333960
SHA256 95d67bfe1853cbe5e44aecefab3f3f77d4d8b23459b222568b1687dc00f22035
SHA512 1ea4c9534d3749a39cf8f238442797694bc0e7075e999ce2a70d669be06e2ab0d57bf8af53cc897bdb8b77e63d38c0d1c6241ab7402729c90abe55a218537d60

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 ff53c789995ccb92668566f2affcf338
SHA1 a7efeaa4023dbc3a68227ee0c8883d95f5d14d29
SHA256 c593eaec46f57706e6329b7c48f82d6e30baed3d4fb9456f27a4fadc15a40db5
SHA512 687b16af14565ed0e86888bde659998a6b824c3fc860a874ad6987140f673e3004b5bea7917780917607c315a5d982adb06bad2e5ae9bf13de75c0b20b7ea7bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bfe9c6577f07a19d081dea49b8af545d
SHA1 af9b8c6986b338b79b2df0d55e4596e4150f0f69
SHA256 d9b315cb8ceca709971dbad8ae5268b38cf9021e97ff55767215d40c549b86a0
SHA512 ccf6f79fe7d73893ce5750f373a10b340de3d3fd19b205f346bc0b5c50e50bcb0c544a38280c29ff69f9870a4764eaa0a57741241075a994ee693363cdb1d85c

memory/4104-306-0x0000028083F20000-0x0000028083F40000-memory.dmp

memory/5580-377-0x0000027FC0670000-0x0000027FC0680000-memory.dmp

memory/5580-361-0x0000027FC0570000-0x0000027FC0580000-memory.dmp

memory/5580-393-0x0000027FC8C60000-0x0000027FC8C61000-memory.dmp

memory/5580-394-0x0000027FC8C90000-0x0000027FC8C91000-memory.dmp

memory/5580-395-0x0000027FC8C90000-0x0000027FC8C91000-memory.dmp

memory/5580-396-0x0000027FC8C90000-0x0000027FC8C91000-memory.dmp

memory/5580-397-0x0000027FC8C90000-0x0000027FC8C91000-memory.dmp

memory/5580-401-0x0000027FC8C90000-0x0000027FC8C91000-memory.dmp

memory/5580-402-0x0000027FC8C90000-0x0000027FC8C91000-memory.dmp

memory/5580-403-0x0000027FC8C90000-0x0000027FC8C91000-memory.dmp

memory/5580-404-0x0000027FC8C90000-0x0000027FC8C91000-memory.dmp

memory/5580-405-0x0000027FC8C90000-0x0000027FC8C91000-memory.dmp

memory/5580-406-0x0000027FC8C90000-0x0000027FC8C91000-memory.dmp

memory/5580-417-0x0000027FC88B0000-0x0000027FC88B1000-memory.dmp

memory/5580-418-0x0000027FC88A0000-0x0000027FC88A1000-memory.dmp

memory/5580-421-0x0000027FC88B0000-0x0000027FC88B1000-memory.dmp

memory/5580-424-0x0000027FC88A0000-0x0000027FC88A1000-memory.dmp

memory/5580-427-0x0000027FC87E0000-0x0000027FC87E1000-memory.dmp

C:\Users\Admin\AppData\Local\Comms\UnistoreDB\store.jfm

MD5 852191086a8a256a495e49c24febcbdb
SHA1 bae15557ecb2f44ece093a045b00f0f0d458fce3
SHA256 c9d6208287821aa7461f4c7f4b88c3699d79c4a4c640924b418a1b900f7c5824
SHA512 9a7d35624069a2d143b977078b81a763dd7737004562351c434e62c45fdda3176114ca8557047dd6f1f3c883f9f6313096c42f7dc23de0f1c492252cf3375575

memory/5580-439-0x0000027FC89E0000-0x0000027FC89E1000-memory.dmp

memory/5580-441-0x0000027FC89F0000-0x0000027FC89F1000-memory.dmp

memory/5580-443-0x0000027FC8B00000-0x0000027FC8B01000-memory.dmp

memory/5580-442-0x0000027FC89F0000-0x0000027FC89F1000-memory.dmp

memory/4104-496-0x0000028098A40000-0x0000028098A60000-memory.dmp

memory/4104-600-0x00000280A9C60000-0x00000280A9D60000-memory.dmp

memory/4104-581-0x00000280A9900000-0x00000280A9A00000-memory.dmp

memory/4104-604-0x00000280A9B40000-0x00000280A9C40000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 34133716734f5a1e83013700672f83e3
SHA1 705665c2f535c658e6ce70ffb4b46ddd76d65439
SHA256 5040bef194232e1931ace1ee4869972294c0b5370c45515847473d87c0e770b1
SHA512 044cd3c87a9e31e81a112abe4250a8007e470d854f165036191156b40fbc0454ee613695e3521310e956820e3c1e61af3e2de01158cd77f3d069c2065e6a7ec7

memory/4104-516-0x0000028094490000-0x00000280944B0000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\D89FLNQQ\login.live[1].xml

MD5 c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA1 35e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256 b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA512 6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

memory/4104-1216-0x0000028096CC0000-0x0000028096DC0000-memory.dmp

memory/4104-1526-0x00000280AB9F0000-0x00000280ABA10000-memory.dmp

memory/4104-1552-0x00000280ADB00000-0x00000280ADC00000-memory.dmp

memory/4104-1541-0x00000280ADB00000-0x00000280ADC00000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 8ee2b92ab183efe49b92a04bafa63b89
SHA1 0ac5f6909b17000ef1a126599e1e40c6146ecc1d
SHA256 228124d23875c20385a7d3df7b55efe87a39b02437046a1b7b940c917a2745e8
SHA512 b03bf58487ea7d7b48c07f2c8f15155735f44e319950b9e9e78d69b6330bab5ed86bf46478f8b8da1d312b234a7eac98953424d248c62c519110dcd880a2f4ea

memory/4104-1644-0x00000280A9F00000-0x00000280AA000000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 75291fec91d1b2e35659b99297e762d4
SHA1 c6c1b53588307adcd82b6151b72c9dd3689569ff
SHA256 f2e23d64611eb86806d43f00cf23abe467dd6d0d60b52f9216665007ee60e8e5
SHA512 3fcbcb73a7ffcf1f27bc449265386341350b81940823e7bc12e2953289792113d298f39db09de7ab9638b458dbeb2373b2a6bfcc5a33ae5617590d05c2f57669

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AC\INetCache\WCK6JWS6\microsoft_logo_564db913a7fa0ca42727161c6d031bef[1].svg

MD5 ee5c8d9fb6248c938fd0dc19370e90bd
SHA1 d01a22720918b781338b5bbf9202b241a5f99ee4
SHA256 04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a
SHA512 c77215b729d0e60c97f075998e88775cd0f813b4d094dc2fdd13e5711d16f4e5993d4521d0fbd5bf7150b0dbe253d88b1b1ff60901f053113c5d7c1919852d58

C:\Users\Admin\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\edb.log

MD5 b795c341858b1bdfb90e0c434fab9982
SHA1 f350478c84ea61e16f0d31ebe9900afbc56b93ea
SHA256 4f742787b3bc4e344b3bf177890889bb093c8bcffbcaa11ec5439c9542afe873
SHA512 19f95d0ec8976e43a5628ff73a2a7777318dde8c3ef6d342e597d176c66f4ab1e2199d8fe3ec0d5e0fb8ae7a5bb61792044340bccb7cb9739c94e5a672dcd544

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 6646fcd90fe7eb7d65a425475cb2fc25
SHA1 447076099508614214fad1c4814410f7647ca3de
SHA256 b47c25d0d0b522c588bad51efd3902e090440dc30bd121037824dc7a60274d9d
SHA512 1d50b13cd84b0b3990182da11e13cd5799cfc31d7f14b66e1d4d750b868b0d71a2f47fc8426f00768aaa2272bb0aa9278b3c8dac2d1af137ffac85eda9b6859e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

MD5 e5e3377341056643b0494b6842c0b544
SHA1 d53fd8e256ec9d5cef8ef5387872e544a2df9108
SHA256 e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25
SHA512 83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1034d8c79e2cc3a70efc9a0ac8f89fee
SHA1 ccb586c5a59dd3e18eadaa8c4ee97860538f4903
SHA256 56d398c042f57db076fb1c8088b34e6ba4165e1fac6f2659e25d6c23d125839f
SHA512 383e7ebf2ff417573eee815a162d3cdf9dd050b3c8cb571a2703e20defc1ea46092e6bb7f22ce61351764533a93dfde3980c86ac8371392441c9830cf6573fb9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

MD5 537946d94e0c59c0f2aa099c034c3cb2
SHA1 08684fcb4710b62df59607cccdb32e9ebef94e6e
SHA256 45af73695f8e482bdc8a2d3de91a5a5245a9de418eb92898ba3f1ba7b655125b
SHA512 ac4ad90a4fc4846c0a6420a9496eea0f5c4ce1ffad1c742e71e7fa5b453e3f69172222bdeec24cdcd14b638440421eb0696ffc0f7d2f2c47208e0deb0d075e8f

C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\b0f987ac893c7db6e707980c1bcbda860488b6bf.tbres

MD5 caf1112b31c5b01d4b7b65135fdc0934
SHA1 98bf9394308ee3da851a1bc8e26b2b99586b70c6
SHA256 a2edc97c67ddb9ec22c14e767beb498c47491182ae80e97f00486aa24a05d583
SHA512 d26714bb5ee02c67cb4eb9bc93b9da01e455a01af964fa16a66ded87bce981cd2371373fe99550857b3a09db00d35b291032d23d9d738e683cc1f28091d3b9bb

C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

MD5 06e8fbe6f221c8869dfb69f8df61e94c
SHA1 5126ae404db55a7c0e8785ade35d06d8a808a673
SHA256 9dc9f4a768882024f7b0f5082f68b22ba405a195d228f1886f10d602026fc710
SHA512 8fd90f401bdf25b0c997bed5c7039b9f3d74ab43658f19bb12b8360bffe1f1c862c3e5f9778d1d5dca5d23d998e786cff250a60af684740eaa6d41f8e3f363b4

C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\4b9d60f403a28abda6afdc6fdbd22169deb9f5e6.tbres

MD5 02b2c407930ffd92b1895d604a5f7fdc
SHA1 88672276e10654397eeb8ff92821d3376e030d5a
SHA256 86e18f4f41d7097237eebdb1bca0abacdd8711b5f18d721a4fb8e1b974058bc0
SHA512 90f05f437d18b67748ed1c51ca3a060a4cfdc204230198a13ab6bcde247b646e43343da6d885e4d208210c8b03c79e8f39ff3ada8180ce053958e054d3c91d2a

C:\Users\Admin\AppData\Local\Microsoft\Windows\SettingSync\metastore\edb.log

MD5 2accb2bdc354cbecd9089e494693c654
SHA1 c82d32fdf3fa29ca5f283a74917c6a66cb073570
SHA256 874b9ddd54972b547e317db007bf695592dbeba10ca5ac73365662afb0b9807e
SHA512 8c0ca14bd122088371715590bc106534f92dd1388958e118723cddf479325cb58d3ff14275944daafeca9dd1caaaa91c79ba7b786e208dd6669398d0fa28f09d

C:\Users\Admin\AppData\Local\Temp\TP_64E5.tmp

MD5 b7724b8df00847fe0917f8dc1a30b21d
SHA1 770c5c55cfdfa64ea8243826a9e98d289ce5a5c7
SHA256 67cd0c9028ee30ac50b5a9e4cf59d62b9e165552121471c8046fc4eb647299e1
SHA512 27d39ff3baf180a69686039ef2c3eff88572b48674f86ebbbea2eed7f39a494a4ff957193ce4270d1b35d4fe61165f930fde34e19d13f2e9f3a82e798584d269

C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

MD5 da0fed09b93450a91221bc88a8a80259
SHA1 69f05a3a6d813b74a2b0039314b6a3f328072e1a
SHA256 75dd8c98c15ef8125be15eae15286ce9e0d654513ee2c194cc88135f27d92add
SHA512 0232fa65547d84ed7cdbb9a77727df6511d8b806d48069e1f833d106ec2d0778ef371eab757dde44ae61e6808b1225f60244eaf46d413df1f79b66c7cb42e8b5

C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

MD5 01facc7bfe7a85f46ba221364075c0a7
SHA1 046d627cdbd4e6ad8314f30dae440d369095fdc1
SHA256 52cc489955916ee99e619222dc095dd47a63dc437ff0a56fb16a9693dbb1f959
SHA512 18c153914d7adddfa249e5bd80a266ffa634d3b2b4ea4763fb580d2f9f67ba90377fd88cc0400bab0d6c56630ba431914ac6cc2c4bc1558ced918c3767357e69

C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

MD5 99b2b373913042ecd316688b41d9d235
SHA1 8376df1f1ff00f9fa4216c6b205c90daef6dc3ee
SHA256 47c7c3a654ba7aad61c26461267147dfa7a678b0a13676c3f15c9678062cbc1f
SHA512 dba6a9d4fe89a43d577857da2e60ae4f371d167c8edfde0e6110e5a436b6a32bee49d30f65ae23291c0eefe25e9423136d8afaa9e70fc6fe69fb6c02760e3af6

C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

MD5 824258e5f9131ab1e38fa028c8716324
SHA1 7ac239a3769a31138a6bf1d7ea5d2e00987b5629
SHA256 4511b2bc526720c2840e260af766a79b1d48d1fd25de34f6fc7dbf6d7f0a29dd
SHA512 f8986bac50a9412dea772e4f5d63d1d9eb846d0266fcd88143aff29a2482c167b66cbc7ade476ff07a0b7db9706aac6eb5c89aca7c9f0fb8c6ac7c0b2ceaa364

C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

MD5 861844a1e60337f63283dd46f927efe7
SHA1 58d8936597bc3f4486ad80a30009c5e7d0afec82
SHA256 40343f8b1fb6d58b69502eb2c7bb660484f6e8c2b9bb188576465debb6067227
SHA512 7feb5b6bc8d9b465da384b5865c3a2d20c3079ebb44891da4915dab637ad3ef3ad35f7a489d9b5fd1c634ffa2b448e19c957c639ddf94e9d610dd6272162dc6c

C:\Users\Admin\AppData\Local\Temp\TP_65B5.tmp

MD5 9b20c529385ae1a4cc648cb6703132cd
SHA1 886e596b95c968d9a2c3b585b48e31b47c9eb1b1
SHA256 28f3dca69a8a244b84a8966404c265ae313d9c679b65d3932c5a5d0ea943e08d
SHA512 8152ec337fba2dede54e5000dce4f55b929a31b2ce5814720493530433cb7136556e47ea04568deeba8daf049f85687db3ad499a44eae72f24b3144539e03550

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a089573ddd021ed018f2cd1d22da47f8
SHA1 525f749b72d4d3aa139308033b23cf3b210b93fd
SHA256 28136d5be1c8be8e10256702a157c1b30b7aeff0d62e10fa2fec800cc45ecaa7
SHA512 ed75d999bfd19e5759d86aa546530c2c7853df9285d69459cf69dede5263ae308d34ed9c8191d190d59929843c9702e03ec679dd4dc3b434f799674272e59727

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5a7b1d.TMP

MD5 fe8e6f34cf394e49aed552675a9d8e13
SHA1 f6afe46e9fd82259027d4d8393c73fdc3617b3cc
SHA256 0b033a2a7a475f23960fd84db1919866df59f4a0366e227b47f8bc7fc10b5a0d
SHA512 b00ea431db7411bde4dbd104519a095af2793c701012d756bfec49b80f5ada04ee1dcdc4ca48117a1556af824fa7c684074fa0cbc30037e75b18b4e52f351ee1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3476548bbf111478c8d1a98fb8e8210b
SHA1 75527b252fa08776949e6ad6be6b393b37a5acc2
SHA256 ad5d4db334be038e0ddf8abdc58aa87392cefe4d17960e57f06d44b684518ff7
SHA512 3d356d46a5b065fc6981674874ac5c616fb8bd4dcbe961b3a4137318a64d0ec1418e743f330a91b66b0bb1bbcf586f2ad21c9913af25e107e3ad3ae50f119095

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d77beccb80e0c775689bd92e0aa0f2e6
SHA1 bdac55d1943a99990824d9017598e0894e06d818
SHA256 ec2266231eb5c80fc1e0e717fd7ed2969ec207317ec6b58db966793a3c450a5a
SHA512 61ca62bf78180a7275cd17da0397783cc1acd8776d9f488f87cd13b9bd61ffc9901741aa257aa3c2a9535260b57cfd3e0c05aa9e5dfb12955ac6e4ee1752f3f4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 7cd657689252f6e187103461e20f5b3c
SHA1 b7d25c41cf8647eed146807514ccd3e1a0346925
SHA256 de848323f395a0ebaff3073ac825f9b84aeb4855d95197f27881377d13cff032
SHA512 0245dd348ed45fd9fe1419868ae5c44a561cbf6d2f17ba8d51100951910c0c861d4e6d80b00e3d784e25472e48d7be11c9000b75e3a1d91af1b7dd68afb30a24

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 6484ec400a211e306035ba24da32ec2c
SHA1 a51a282d2f3a5e78275d8a5afbaa7c32c49f7e77
SHA256 15f2682674c74b7a61ee1a765b188d06d2b87c642a58af406d090bd7048de968
SHA512 ed9f136c037740c1347af564b6ba72450da6cea27bd815db877c712a8ec8a09400bb220353304fa87e102400a74d694176688a56ea4c753b7573ffd7e015eed6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 4988e20cdd7070403db1fba18a76b9df
SHA1 6c040140ce42207c75b2269cc99baf012c256b30
SHA256 28c1853fb66c7a8f5fc927b8fee65086fcb7a5e4a950c059ce65b101549b43eb
SHA512 7aa6374aa80d8a71b9931e709e015ec08507311ae2cacea35aea4441fddc0a31367a6cae99669f8f1b563984e4e64d0c41dfdc6b286a1f58757fc6310eb27adc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 afabc5b3dbe5431ccde5104dd2970b0e
SHA1 1f23f6878b942b9ea1462b21f255b4cdd3b1dd13
SHA256 0145767b4a4a9919bf5356b3ffae910af1c1cba1ecbfff4937899e6528585dcc
SHA512 06ef5fab6800d3ac0f6160dfa4a9190fe3c952a8d07f7b689118d420404ed0a38d16ac6c08bc01cb0533f16580b64841c3c6bba8b7482fbc6ecbf530aa6c46a5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9a9694b35a3ef783331e09cb71c655a4
SHA1 19160310c13520f7a063c3302a5b0080990b29d8
SHA256 0bac4cd158e84018cec3a64b8165a4e9b11942d1e48b67879de610cf3449ea32
SHA512 5b66c2130cb15500acebb89bf9dbbaf2f211713f7ea6e90fc036ae177fad70ef549e74080b5f180314977face0e60a788d1c951184e077156f5e787ee2c52409

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04

MD5 cafd4f75ec5e89b420ee122ee9bb9390
SHA1 3f98be26ac6e810eca1de0f95b2d7993eaad540c
SHA256 d1c437f5fc41235819a5a943ded5b67426319423a1cafef1f5272513eb3fb7ff
SHA512 b61c5510204c174ef670d324208b14d59ebb72c343b197d867088d532b2f3f280ce9d7e288c32bc6b18df8a26b8603c0ca94a2f6cc9d0bf92a9487e66930ac9a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04

MD5 b542bd8a32623d5cf1c907db568d46a8
SHA1 49fe96f250aa5f2696a91daf18801418983095e9
SHA256 638ddab398a968ff6098f7ec7b84fb5c6c338b5142185656f987c8b7b7d21146
SHA512 3a7942e6fb9f9d12856bb0cf4356ca948d5fc3aa41a2d7e94859889f5654fb6fc01194b010b375f3d6f8a1ef6a1e91b6f03cddf7baea26c3f609b0dad069af81

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 88feae77011ffd3e244721233fbaafc1
SHA1 d0c96a8e3374e308d2719e4ec6762abee650a691
SHA256 c8ff1edc7e48939404f6ad2d1c6a857a4a86b2704572fb7a8c37d5246ff18753
SHA512 fbc7bb58cbbc8c6ab243a7f9c15d51ddb3c599c31f9c372b70a9801452a73b40cebd613796925a8b83ec140f3224408c569a082284a11639d19a5116c3db4ba2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 03d3f803d860d7d598e9cc91e1c167ea
SHA1 6f6eb2ca4fc4fb9562d418606a39da2c69e76085
SHA256 b1f550c70b8bf3b3637cb8d4b95ac992beb6e2399547eba724824dfbe4ddba50
SHA512 f07546750f95c3ae035a5424a859d2c19f6da86f48897318d3c0f7887ae71ebd7b96fff284f17268456e58fbf57f7f0d789010376e2182cbcce0025a31523bb5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 af5b578bceea8033d02208426afe1b26
SHA1 880bc33c6d15e06b6f9b076c7fc002952837cad7
SHA256 84115680adf8f9a1324cc2d2a4f52d7fbc8740de89d49fe6a323abfc766bec26
SHA512 da25654912d7f4b47008a6eb05562920b42bb4a29105b4a8b2d04ca6b3e4f56f24b718ce4cee7fa5599e4f294fd563525378985f3cd0e7c691cdc4ba9e016efe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a89ae24a4090ee6978326b8f9b488db6
SHA1 b0c359942661e8cec5f502cfd8b256d80d0f654e
SHA256 f521ceef4ef4e2b9c74787787dafccefdc202e526083e147cb9809fc2f33a190
SHA512 e8523703eac553ad9610ad7604ae8a43e1f34be1d46bdaa3c8f3a6b481e4b6efbc573dbfecee4b7d1df238ff34ad959e68d9de519c3f27cd53605042a503a252

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 123b8062631e20621d2983f4e2bb047c
SHA1 1452495c9ed143f0832b04765907f992f9467d63
SHA256 c80093402d4dc0e1bc61599180074aeec70a48470276ea53b293ff6b95ef9b8e
SHA512 609fe27e93eea0e00ab5e215f2e2d218de79265a6295644ea83b06e461de23efb03e4016ea52c07ec1f5e8cc77e5745b51f8f2cd3df9ef967f45a9c07ffb1015

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 48df4d909cad9a9036c732b19b45e78e
SHA1 e18282f114a8445eae0c9d370af2409d0ed2ede2
SHA256 0cd53c8ea70dc9aa2222e355e307eff5e073c2e94a6cbee631ba643f448a854c
SHA512 b06db02199b8943057bfa1dc4161189c47e320dd00c7e7a60ce4d05e7f340da80544d9aeeecf16f32ba48c170942145ce304cf8b1e3768275e22fb2adc1269ad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 0a2380f1a35c3638eca1970c56de7a29
SHA1 8dda8808ffb4ee95547692e43bb060058df75ac5
SHA256 bfb433f274d85a61707d7124f5ab1f94c809ced0edb2b5b5ee120ae3a2c09ad5
SHA512 846fe99446969b96ed397fdad7c4582cd735d59cded2689a91e65831a5cd2961a03592f6c35724f07f266928a839bc72b5b3eb336a0aa1c9a868afb62a9d6908

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 6b6823a61f4f80b6e5ebad0fc6639527
SHA1 57e69df61a545237f9565afaebd631cb24e816d5
SHA256 38d479c798c94acc98c0108a375ec7cf0837138faf67507e010c920e3b312be6
SHA512 cee698f4da953b6e0d422590b07a28d199b54725be77ee03431c4340c3f1f0dcb5a1b73f8c062a3691a527aee6ac651017bc72b8d827cdbdb162fbac4f31422a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ed6581fc56b1114a6a1cfb66f8c15008
SHA1 d920096541cc5f172a7e16b47e67e5bf5d079341
SHA256 5fbc922b0040881d2865e72ef4aec1b8fd208e0c452529ee52a03edd121b71e4
SHA512 c629328020632c1b21a453fa705f5c12874b76496ec303d3d802b0ae16b4417cda09de0c3fdf8a6d050a5cd5f6b5169c7d7a797cb8f2bed6af1b4a0e6bf1d317

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 08eb8b901790acc73794882518da97a8
SHA1 3c37bf3b2b88547a4885982d67dc91e21adc32de
SHA256 950fa9523657e429b147676fcdf1ebff9cbaa5990dfa9dc64972adcbb64fe0ee
SHA512 600f6639b464b912c886d58104d54f7eb95cd2895686f9c9405f2ef1ce3932077e0f7b6dc84276e203ab7809085af13b0bcdf5a51b2d3148f9065b49c210b050

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 e2245581210f2356b57e082f7acede00
SHA1 fa575d3839c117009a7227dcd752f9b89ad794d9
SHA256 aed6f7a0380354b07ee52e42ffd813d29fcf231164caaf128af15fd81b5abfc1
SHA512 a3147e463af58222c22f3f6f79127415e384521b5106f992915239bc6ae588d08b0177be4270a11f976b277eb00b9b2782accb73b5434204fab7a2c1e242b8dc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5bb13b.TMP

MD5 8d192cae42286a8dd5a71af0ba3d9693
SHA1 a179dc3d20c269fb943d1632c0f076cd84e3fd02
SHA256 fd8bba66e3e0a246fafb4d019057569110420522af5127ee8d9c6189fd316543
SHA512 6a116796a8557b48aa25eca414a77905eb4eb2c4305801622b59e004b47fae4865b69712488a74aa0c9e33cec74f84e484a897ae4046dd439cd83633afd2bc19

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 74b3d9233c6793a996bdca0bceaeb73a
SHA1 e270f7ffe1bf46bee479f052d75e0098d7a02f88
SHA256 dd3e57770ca208d415f8eff663993720afb0499d7c40d292aae12eb211551462
SHA512 03db9b1b49e54ff03205f1607aed8b12b3087eb0403b1ef273b4fe6caa398920b71dc8f6ea9c6ba10cb215ea6190f8ea4e208726a66309a9a3b2562fb7a22d81

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\2fc131a0-d690-48d6-8103-2bec0d1579f3\index-dir\the-real-index

MD5 e0f47a8b8446a6376494aefd59bf46e9
SHA1 c0836d29e3dfa7d80dba73b3fa8f997ddc074508
SHA256 2fb1e65538b3fb1315b2da073865a593066a24697bda002a4d4c4844ca7346a5
SHA512 c1e8b41eedc55e0a0fcdcd69b0bd1ff13008fa32efddecc29575fd5a358edfedd1b620d2b1cd37a66df55a07fc175107dfa005edf2d1760306b1fc19eb707181

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\2fc131a0-d690-48d6-8103-2bec0d1579f3\index-dir\the-real-index~RFe5bf5c6.TMP

MD5 dbc663cdabd7b6f4b8a75ec3573035a1
SHA1 402c30cbe75cb253c00efbed424f990dcc9a74ef
SHA256 a71544ac3ce8e76a74ce14b04be3a738e7786f1011976f89351ffeaa9c198551
SHA512 7efe33c02e41ea0ae8349a173ebede129134d1da014dfe2042aab656dc71438e10fa1ab81e0dd19258f8d3a7a499448feaa8bccedffbd40c312fb6b1cf3e3fdf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 55e0f5809f3f509e7673ae42e56e0148
SHA1 734d151a906ee26e520823a16b1fe0dc48bcaef3
SHA256 6df53511a1fabaf0402617b9209f0bcc7800a6109e44495916500604c6d746c1
SHA512 4b000b73110d100c03fa870fcca274a9e14393ccf65bcd25beaab0ef8be18c3383d015514882fc0fc781a0f0e926000daf0389df1ed3d63d722d65aca77be3e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000065

MD5 c2cbb38ef5d99970f0f57a980c56c52d
SHA1 96cff3fd944c87a9abfd54fa36c43a6d48dac9cc
SHA256 85369a1cf6e7ff57fe2587323c440ed24488b5ed26d82ba0cd52c86c42eec4a7
SHA512 50371320c29f0a682b9ae3703ef16c08f5c036e84d5056e658f5d9be7607e852adf72c13bf2d0b63fc492f5c26d330bdeb2ba38bfd8b0d4567f0cc6b0c0f7bd9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 1872eea48488899af33d15e1ecde9f6f
SHA1 cc3f2a7e52671c80349d106dbc03d994b003a0ca
SHA256 f468a511884e85726f1d8c4910d37729130ea10f7a6b1eda8cdb2d61cfd330bb
SHA512 298ffdcbffe79f09c16b9f90b83ffae01df29d299d5f28c5c2c6594c400751881ca9cdef906d3c844a6eaa21ad77f683ba20856bd2af1386cce8371460f827e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\2fc131a0-d690-48d6-8103-2bec0d1579f3\index-dir\the-real-index

MD5 69d40da08ddd3e8364bc5c327de70eca
SHA1 a41a8d40630e16804bec3b9301d9f78f3b2895a7
SHA256 c495f86c2a9133878f23284e65c1e88d07fef6a9c1f4d52f7d62234cbfa5456a
SHA512 ba9064b0ec4ffff129e16bb412c289f74e8c327071fd0519ec054602cb8bea9f252881821090a1e6188296a5b7fbe82d85e2677d72cf1be7bb728c4e34531322

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 ff56e3ae5b3f503eaaaf46e651ea6a8b
SHA1 aeeb11942d50a589eb11b7afe34c3d1bed9ac52f
SHA256 6f3662d3643836c55172437c207eafdcd79d8661429119961306d1d040197b36
SHA512 da33486cd3acac9729ef7e52edc05148b198739191174b9dcf675047fcb95f5e17c2c2eee2543cba2518a3a6d697e98855019ffe88c39c45e6e12c6d3e9869a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b09078cc8782d3167c603e5f5794027a
SHA1 23a15150f7886363f564230304e996ca373976bb
SHA256 7edf0233d7edda72cd4e6a0ae60fe9ee62aeaedcaf690dfc0877417b768dc51a
SHA512 9920d80dfac0d7975998103428ead1f79c02234cf3bc5689a864e5d24c50bc4e4744f5d32d8341e6304ea3991c2df78413fc01d62dae94d3557dcf878200b9d3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002b

MD5 328d4652d2b0d7f8992fd936a2968a0f
SHA1 4743d54fbb947b2af2846851ff27911507be8e86
SHA256 e9c92fa892b5ada08e4e701d3bf5d7beae1ed66ce60bff666b75f861a7a2834a
SHA512 d47f9e46abfd97749a98edac08ad34441494b8f461cd5a58bfdf44e0c2d8543946f50f355289173748145b3a3c2d1117004e9fb99b7891674f940eec24928b51

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a

MD5 c257db4317275367d6e4d764be73973e
SHA1 722b93640bea4e42e50bb436fa30e27150c83cd4
SHA256 09379b0abdd8be3c83c72b4d9e0ae2e02383756ce363c0c973f1eef192570d0c
SHA512 2396a84544c26da74b51a31c583f75fbd32396e197fb8e0018178d9a36a703afb723deaf8c86653ccb41c474a6f8809bbc0de5724303207032ba41fdbeaf72a3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029

MD5 660c3b546f2a131de50b69b91f26c636
SHA1 70f80e7f10e1dd9180efe191ce92d28296ec9035
SHA256 fd91362b7111a0dcc85ef6bd9bc776881c7428f8631d5a32725711dce678bff9
SHA512 6be1e881fbb4a112440883aecb232c1afc28d0f247276ef3285b17b925ea0a5d3bac8eac6db906fc6ac64a4192dd740f5743ba62ba36d8204ff3e8669b123db2

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 ad91961b2afc6fcf6a04b6dfb6881f5a
SHA1 4aedb1e77d0c4db68c4afd9d5a06a18b7515af2a
SHA256 fd7cffbc20a724aa9418fb62f1dc7591b1d686b1cb5c63722b7dfde9e37e799c
SHA512 713fb7499761c8a72fc4709099c50efbc17e0ab384b28e902494ccfb49982654a9dd613a7c846b56787982dfb5cc449845abcae602fe6980718a1811732e2f4e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002f

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d

MD5 16de6e339f772662082512ad86ea12ae
SHA1 cae1b0d78a66949c4c6d52ee7db0ad6afacfa952
SHA256 2aaf97da178e61aad7fa665a211a989a966464214efa07acc9b9d8f9b37d359b
SHA512 d5f73461d6cfada784b35e9286bbbc620d8d169be0ea153e51f60aa8da5cd0693b97f17fc26a312934f3152f62a3a5d9649690cd72a5bf3f26c7e3100969ba7d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030

MD5 0e2c50d262d1606ba6896bbe88ebd435
SHA1 89c5d8d6c66a8697aad3fd8d6f9b7355dccb3bba
SHA256 90522749598e5c4fe314a93087e82a2090d62d0e288fb6315aa22fbee14fbcb8
SHA512 0441ace627ffb9cce2e3119a48830e2030f4f6dfd0d3594d72d06388e55a4d2311d2421ec54e466cbb6738d71375d07b27b9b7fd80dbdd02cf62a28d563a3330

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 87b41133e70bd15890196f38d4e21b59
SHA1 923f1a977f437f621de2971f150dfe3cb68cd845
SHA256 ff9c67c5608bf354822494df93daaa9c00727f8a3fcbb39b9687cb3c6cef3198
SHA512 7b3f5b7ea4dc299a6cd2d45e93ebf1f698e1873df348dc5f4bb7ab054be7793683b246b1b9540dc05f003047aa051a0c1d1dfcca33b5d318470607dfb39db022

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 92b7ee90cb6ee71d3e49153ff23c6ed6
SHA1 868fae0e4d4169e57991c90123d7ac17dffbb0d7
SHA256 ed23a79b8fd86a47c392d5426b2377d01e2c653d8a0af6f8b6310be230ffd6f5
SHA512 74ec22f8beef2c0feefc4b3f9e261f69816b690e214d757fbffd830d51552284daa513fff83eddb60d066ac8dea7b7382e4b90f44b12aaf7461da204f7857cab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0748de72-ee94-466b-806f-f5cf1b1b96b4.tmp

MD5 1ad0eda4527e948c3d9633ee5fee2c26
SHA1 c64668857341f5c2c23727a64454080d25510822
SHA256 1e73ece32ad67f7b46e98ef8403692a8c86c3abfd40215aeed71d0841e1f11df
SHA512 a717c9adbabd9c83a9cac5a5a26163b6bbe36bc70a66b963717ea649524150b4691a384e141775dea7fc5048360e1123722b0b477164cd6292177e076baff6b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 9913b68a4270e310214b942cbe910700
SHA1 9be8f1f395ed1f0f6c1424c2b81f6bfe414e7437
SHA256 fb22176e4cbb86a65624ee063439d4d944f8ec1b83a5d27e2a0e049f10aa7ad4
SHA512 ef085be87cc2220754c1cfd42e900aa06aae982227fc66024462d92cc12ebdb2879db8b640bae3dfd52b0609b08b69724beb8acb10ec0f457d994a507bf9e94e

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 b41d8d0edf2dfbb21f57150458baf8a6
SHA1 c8669584d7e8c1d6d3fc8cdb92ef861bebe68e1c
SHA256 4ca2e4244da416a99fe646c76f4c2ac4424f7a0ee1a87146f16d2d9bba7afcac
SHA512 70d03e6fa1bb08b27c017a72c5e1ad7a5636a58a543cbafdd7d0889f641785e6b623ed95e090f7fa7cf8f13b9b26ea8677131f3ada162ab19d5cd4a93fd2787d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3455c8b5bd860405460ac55640f13921
SHA1 4fe1ef78a97e38e73c217b88f9694e5304a44413
SHA256 e67a30d382fa130d57147e9343e69f403d71df996c96388005758474652cd1ac
SHA512 b792ad5c0cb7941276a42ed53c7a655035d4728729380c6580e464ba8134a73a9440a4163763bdea5b72b27a822cfeef2cfccbb8cc592f39c155d61bd397d4b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 dd019ff02a13f47094994ea67bd41d10
SHA1 a847a2f2e7482f47cdaec21ecb0dc162da69f223
SHA256 9781f8187f1aa2978d06ef8851b7583ea2770936156f76e1d6208c4c3e21be86
SHA512 4f00a63da0aa00466c097d59683ff8335bda6ae77056fae3fd6cd8be25f6617bc59636021b07ca339aed0641503e274c4c3f5b876876541a3bf0ec732eefee4b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 b7570db86d6c704260e666eadf840a64
SHA1 6f45ac5dda33f3b34312abeb6733cb5935807a91
SHA256 5067621422cb72d1bb94ba28e5510627f705438548ef9369451dcabf2b24f0ae
SHA512 e07aebbaef7404767af0ff5a364f5f29c45fe3c542a739c96984226b7043027ad2b4a9811da6dcdb35ae8e33437b43c1cec53b1e30612be3fd8f235b67a24d1f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 f7c3da298c03f160c9eb540b9bd7e2e8
SHA1 e00b5f66c96369cfa9462635bfa2e1b3fbe2a157
SHA256 e1ed143ebe13798384bef9a49f93800147cde35324e1e4154a8f98a44b4d3055
SHA512 05f24ac97faa2e2211cf01621410d08e5a5da97eb8b3cabc731754111e0a9047b3eefff695d23a2d5f62ce12ec38a1053754c029200d726c3c17e4492e4f4759

memory/6160-7339-0x0000000000E20000-0x0000000001627000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 4028f13f3a3cb552f1ff78e44b73d34b
SHA1 a0d0661de3fcc2a6e5a8c8f3f001545080af4c61
SHA256 0d49e6d017290b6e171ffbc399012f07a136008f71dd6b919642c5cce84e1170
SHA512 46f18e6594d0309c4fb0829d4f72547f5abffba9233a81ee8f775668cf0a3343b0abf4650e93e7245fb472c91123ed0ca3e835080cbbbfc12e2c29c0caf4a33f

memory/6160-7360-0x0000000000E20000-0x0000000001627000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\edb.chk

MD5 9a8de360c5fcc34ed3bc9897de4b5172
SHA1 80c622cb26ac6e687d0074560aca8ffdb7e79ea7
SHA256 4062493b9de3670928de310cbcfaf9d17dcd9fb030aac27b8a6bdffce2425ef3
SHA512 b18c1808320f56593fbb63ff0270043faa931cb41f9ac54cfb7f096f3a1b609a196d6cd50753a218c54d9d3736cf5df5dee55d1345836bafe859efa0376ec1a2

C:\Users\Admin\AppData\Local\Microsoft\Windows\SettingSync\metastore\edb.chk

MD5 48aba1954933d073101cad99beaf1db3
SHA1 6a0e4a94aacfeeb92599764d29f02d09ea056511
SHA256 4f2fac8e40ea4c12945850a87024c419d719505217a8d5884e3236469ff7aeba
SHA512 7ec39c54a8971769b3593fd01363e2506f973f6da7aa57684dff2f63841e79aed200560b0bd9c0d32a1d195cb92ff0a924a1b4cd58997eb79293061ac7156862

memory/6160-7418-0x0000000000E20000-0x0000000001627000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036

MD5 fb2f02c107cee2b4f2286d528d23b94e
SHA1 d76d6b684b7cfbe340e61734a7c197cc672b1af3
SHA256 925dd883d5a2eb44cf1f75e8d71346b98f14c4412a0ea0c350672384a0e83e7a
SHA512 be51d371b79f4cc1f860706207d5978d18660bf1dc0ca6706d43ca0375843ec924aa4a8ed44867661a77e3ec85e278c559ab6f6946cba4f43daf3854b838bb82

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038

MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

MD5 c3c0eb5e044497577bec91b5970f6d30
SHA1 d833f81cf21f68d43ba64a6c28892945adc317a6
SHA256 eb48be34490ec9c4f9402b882166cd82cd317b51b2a49aae75cdf9ee035035eb
SHA512 83d3545a4ed9eed2d25f98c4c9f100ae0ac5e4bc8828dccadee38553b7633bb63222132df8ec09d32eb37d960accb76e7aab5719fc08cc0a4ef07b053f30cf38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000037

MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0a755c8abbefae843ca0f830e2fc1ce6
SHA1 e9b88d8bf213a07fc79085b5a74776a4c50df444
SHA256 9a3fe2df47d40a2fd744085b594c3f2a43f14b2962d61323261d844eb9db9a7b
SHA512 07301cf41b7bd3d20f8dad012a7c7aedbff9669b0e3ff21e2f1342d7a7d8a683e66ec7689fbcc67a3bf7d4a91b4b329bc5796d7fb2e38ace24dca152e2c3a7d8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d7f59cfb9104d945be7e4781d41f4e19
SHA1 553407b49f75224c19395999d179fa539949955f
SHA256 c9e66aa41d4204bb34e3d4a383f64b7593eea1a9718caac0f84ec1bf63cd7e4e
SHA512 faedbca6272b3893556d4494b642a79102a128606fa6cd21fabfc45849fc7cad257fa83c7d908ea65acafc0ed0e9780e87d677055e3570166b3bbfccb57f3644

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_outlook.live.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 88334c81c7bba15fdba807b6abd85ab6
SHA1 a0974544f11c72ee109030cb12f64d4970f9e10d
SHA256 7e56767c918a95b057efd277e5ec4106b15d69f7af011d12a320ac147971b3e3
SHA512 5d1e9c63c1bc6c7f50d314ea450c77c96a451fe920625ad94b808c9b3ba8f713fb4137046c8d3d20d889495b6bb5a2dafc711ed6e9df2511f22185965712c3d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d4ba122509dbcf6d2fe647fe95af8b9e
SHA1 f2929d88b126ee64cac94682afac4dcc0237d3fa
SHA256 6c7709cd73f93020107d656f3ee0a3a682a8fbdb8702a6ac98fc865146aeaff7
SHA512 bba6c7cdb6f8cc99055b9ac48cc9ef0175833d48cba635b29e8020897e49bfc36692030a7bded4fc4385362aa837936b536d0830e98c7ca85eea4853b4301d5a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4f0343017456147ee57a757dd087882c
SHA1 a06a7046117f549b7015197cd9ec23c5c9fa3318
SHA256 4752d25efe0a10b0a85e1de7469f19b09eff366f91edc7b2a05dc6442925354e
SHA512 d90c0563d7d4b3dddba55b3978b5259730269ae541f31dc6345d36dc18737f91791897d5603ef3a0f6f3a0d6c99d6d30268b4c37e165b398aa5dd206459a095c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

MD5 7b7d9be9d8b4e45ac36e5cc652c3824d
SHA1 816defc019e2e05eb93907748cdde4f87982d55a
SHA256 8ad980c8cc020e95631cf7fdbf3a67c780e4752f9525e40330fc7cbf489f902d
SHA512 e42bc03e54ab00e80c796576736afff413464b5b326795fdc2eeb0999366febd0d260b5ccb87aa473325a72333575981b66949752cbe8fc81474ba09f085e18d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt~RFe607832.TMP

MD5 9c2b4678dda2fe2b678e70123dc8bbe5
SHA1 507ff9b67a4e93aed996cb4b1a4719a9cd4d7203
SHA256 8beea7ecb8c10426ebfd8ac1ef0493d7390cb8372c2d914bd256a9c61b28e68d
SHA512 b13b0af82f6eb8585972fe14775e53ff81e05ec909905e8cbddeb83623d55ca5abb11fc4e5523ef76f6024e0091721f973aa4b981f5a7e1dc98febc36d049367

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\57da8c48-bd00-42c8-a4dd-ebfdfca21f8b\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

MD5 7ed0ddc1f41eb75aca684c64536dc820
SHA1 05b814d37419adaeeabb5941ded59bd1f5da5415
SHA256 f8c466a38bcbd7fa0624c35ee3b0fad198f42f6e375007ee6184c6ea073bdefa
SHA512 83e5b38c19955b512d4295bd4bf70584092060c01fd4c4c71a517f67cbc2a5f1006fe13110f4634a768dd07b17e4741ccbe782ee152937d6110f1a62b0587d4e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

MD5 97d5f65881dcf1370e0f450c74916071
SHA1 8356aa6595b01f1b3d60df82686d78c6b573c033
SHA256 3ac8ef666dc310ef3a2a6f90247aab7bcbdaf26b21147f7b06f1bd39bdf848cc
SHA512 7e5da137492e2d0f42cd6a7f1b36fdef012af3282eeaca25b3da50eeb5420b199fa65bcc6d3f67da371c31173a10ff06804a368872cbf4b63f9beb44a2d30f4f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

MD5 09ff8433c885940531a44ae541234c91
SHA1 447ad4ec767f520c7e4b410f51db4e13b6ae74cb
SHA256 3ec57f9074c4271690b206be9b428524c0a25cbcedba72b5c92ade3da35904ab
SHA512 5209737f4771504e254f6190bca7fd49622da647ee2130e6ca265d9e851a0041ca2065c71cb158529efd1410e190678ec6101086152d73ce45940070c57fedbb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

MD5 2e03a6dbf26581466d09a77213cee970
SHA1 5d562123c6fbb08fc065744721f116a0845bf630
SHA256 77423a8650615ebbcb18502cc6f00597570bf86c9c93bcec2e490aba33133e86
SHA512 0d7e0ed0f62854376a5c2567877efaf35f92841f009babe175585015364053ea2e246885a1212b924fe452cc0b0d67b67e1d463ebe09dff77dbf37996a3a1d3f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

MD5 f06e37a4c23e49e1dc615c11e9f164e2
SHA1 be7a8c9fece14201f2e6514bcd0d1cde08daf60c
SHA256 4d44fdb569469002637e474640fe3b8e5e6d552dfe317a48369f7d8fca07dd9c
SHA512 2aea4937d507d041c2dedd835215337c4cb3afa965831eee64092e3106f984b3e69c6e881c61717386adc1be601b7cac29fbec1892aa1cad1655d9ad753bf10f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a1

MD5 1f6d8aa51a0c9ecbc20b70d666ef8036
SHA1 e52d80ff2558a68be83dbc5b040ad84b5643bdcf
SHA256 f05a41062802273ab57ed59447b51c7c93c94156ce9bbb501b07a8793c8685ad
SHA512 ed23106894bc6140682c0a38a76a08a741de8f2375970326edaa9a207db24cfe28f8421fe5a6373e4dad90fe156a31de5ddf43ac0d5bb7e2e93106c1bf8e3864

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 765e5100ef53804131f47ddb7bfdcbe9
SHA1 da9fc421507f037ee2116eca2c9554b41d6765b7
SHA256 ccccbe1df1dede1d2e9840b45bb870317b8e0fb403bf03b9d2063ebb544d03d5
SHA512 0f3fe9e6c38650b5996e5c73c5b0024c3026a2820c4960335e2d075cc16c3342bf9bc5694b002381dc7c2444e7446b2c9eb8d363949c9db4dd895ba842f04e51

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000cc

MD5 20f6368f2265e76d494b2f72851cace5
SHA1 24da5c183279e33498ed1fe25a5c036ab07c815d
SHA256 61512cca8364883dabf6c76840a4094d1dcb4ce105accdea8926884f22a792e8
SHA512 0544d14d67c799883990be9c9d87a9c46e5cb7c2c9ef73f86c1fc44388f1c17408575c1c3b0c84ff0c0c61426c00d18837af0b6fa1ea8f208dcc3c8f4e602be2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 13c4b5233dc7a1760fe5db055ab9dca7
SHA1 0d6146d75b94eabf85ddab2eb7a006f4a6af2d81
SHA256 3815a917fabb4ea6069e7ae9caea06db466cc998a0a6d385507f8dde787f3689
SHA512 8e8d77cd3a8ebbfea93190d9b241d06fbc645ad8e823b474c0715cea21d5d62bf4d505b1f22b545d89d8d7780dbc55d54af098659678023952e07e540e3ed756

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000109

MD5 75865015e33bf577cfb830bf64b3d84c
SHA1 f3ea90334d2de42611fcd153a57cf73edd5c2f37
SHA256 e077fbb7fc850c8b11b5c1820a6b559a80392d5bdb452035ff057d8b1b9bd654
SHA512 e0ec38a3d20a3da10baef764eabe1e093fe39ea01e7df3e56207e81fe802e08e19960f9d585dfe430b5b600d2604365cf512041d4a188b1c5ff64934cef163c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e032e2f055e43045444acc7ed9450b92
SHA1 b89effba8859f5677d133a9772e09c0cdc4825a7
SHA256 b8a8a86a172631dd2bade24f2a98381dda073f746aa1a575088c5a1e4de93fa3
SHA512 86097cb16e8f8ba074105f995e7006172823ab850d9b9cf19184f39ac4f8b84466b250b8930133798bdf02a78f88682b73141f8ada2db9e911cf79e54644f262

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

MD5 2cd276f2d280db39a5c60c870705a22e
SHA1 200599a494590f919fbf9a1253dabaa4d4c2803a
SHA256 06ccc489538ec7b9ae72a7d0ecb29fce6084d8c828401b86511e6a53fca78649
SHA512 3ad79317a955ca02e270e8be9c400779fb4d85840e708de3b61e3a33fe735171e50181e647ddb86748b6f98d543dd7fe0dc9c6bcba0c7f107d112c80a31a498e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

MD5 c38f35a265586545aaf2cf442fcf2c17
SHA1 a8980b201b790ea096fab8b6650b2276f232f52d
SHA256 e47c61d79ad19c5804c26c600ed6775e56fd0f05106ca4066162f4acb44ea29c
SHA512 29b1dda5cfe3b68766dece0ac36d144f105dfe404e97077599e7b5b9d7d2b022a0ec8dfad83aaa040f6901ace7c0c0d8f07371a1cd4d4182cb846b382ebf02d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e7

MD5 02aab3e961e2938c020e34517324fc23
SHA1 2b293a8d9076405874b5b43cb0c97bee75548e02
SHA256 6cab3741fa18362802d95dd7d1fd49b53ffc4972a8f52f5d6aff41e5b33cfa19
SHA512 e181f591fd83a7d19d868e72a4bf122bd2e18ba3e95cdfc566e3762f41f3e41c4914101461a91722c8ab39325fb075cbaa74bbc08d1409d89847ce492135e36c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72978804e7724d1ec1769a0999d234ab4b7b3fc4\1e4976c6-cd62-4e78-b438-112e1464f5b1\index-dir\the-real-index

MD5 7bda55b938b58647b6d399f4049e0acd
SHA1 b36c07ab8c3db8dcefcd386474d623f159d70c99
SHA256 e0bd878fc46ea1e38f978b54afe9a5e65adbeebafa5a47f23375645b21f195d7
SHA512 dee4239310fd2d7a19b288538a3f60f0ef10afb290525dcfd6913d61252ca95dcb98dffbd3857053b4a2d09227100e3081857aed9e24ba27de6a4f34f8f815c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72978804e7724d1ec1769a0999d234ab4b7b3fc4\1e4976c6-cd62-4e78-b438-112e1464f5b1\index-dir\the-real-index~RFe60acce.TMP

MD5 f69b72255f5c9de953b6957c1b3ad634
SHA1 7d21299b238d1a1b28bb3333cc7a9aa07efa7c3e
SHA256 01e3c53d8260738e442dc148ef14c53f3292b25af10d117e37e9e60de46c30e2
SHA512 d08a194c74a448e8628d9d38adcd81aefa2ca79480bf5909c2c89a1485ff62bcb37a40d536420a6a017446cdee1b73eee3e28f6ea0d7e0e2a117f5ac8b0aa9cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1a06855dd7e7b8cb54daadcffa15bfbd
SHA1 e4bd0334fa11f30281768ee55e656f22694a1959
SHA256 397eecf77bc04185b52ba749eb2df6f5d16815f5b07614fc191e35efec36107e
SHA512 4c02ff58c4faf4ee34c64f043a46f0ae1797b25f0bc0c4316d2a7834d1778fc855276f02bce7a26ea4282a08209354f582eddea0abb676b27b26062323de201e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0ff97b11195bc95135109d2d03cac434
SHA1 691daddd4b38ef1e0bd907ca3904be335489b190
SHA256 262895cfeb0d1004df5f787f6fa217dad6b140d681b3e161132b838b4ef7d8d7
SHA512 3bba6af6e70f8da6dc171dee415fa681126ce482dd0b81863ea4201c08c93414261bdbd0ff020458476443a62ed35cead62d10de6643d7ac557eea870a89f48e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 b4d4bf2b2473aaf6fe65a900b2405d79
SHA1 3ac56cf85d2a769a0f159d7882688ed68e503e44
SHA256 6e87eb53b4a168fed652fc1226224e81e3073671ce085dc1929282be532121bf
SHA512 57a0343a12d75e14c5944b1d01d6abf22a6a1166d336b3a8326783ad987b471f761b76fa696a4ea5777321360d994d51cb535a7dbb8f2f9bc5f1adff67c4febc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\2d03f961-dfcd-4ff6-b824-a91d5231e33a\index-dir\the-real-index

MD5 00b8672446f25714b267d4fd8c2fac5f
SHA1 fa6b6d8e39c18d2c33643a7165881e78163fbbc8
SHA256 51cc65412b9f9e52e23cf5cc4b297779d90f69eee782f5eac15018b511c8367e
SHA512 78f5794e26db5b0ab8d5255175fb72f74780b584dcc13e330a670fc690b5d8e274a20e9a1a31255d22affee011f82ed32f8b951b5c9a34c4705979cba60047bd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\2d03f961-dfcd-4ff6-b824-a91d5231e33a\index-dir\the-real-index~RFe60c671.TMP

MD5 d05381b9ab4a29703b651c45d04c0cbd
SHA1 fbe8e200bd69e6eac43c11562feaeb9a5de297e0
SHA256 8a5050d415ea06195371fb62ee196792f9043aff63afda8d603c38d95fe1b918
SHA512 34b334909005b000cc1268e5bf057168157bdc05778a8218a41f2cbfdfc657530c305193c011efd2508bd77f3d302de94c603b9b0f3ab34553f7a2c2a78dac92

memory/1692-9471-0x0000000000E20000-0x0000000001627000-memory.dmp

memory/4152-9478-0x0000000000E20000-0x0000000001627000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\60a91e8c-7a08-4fa4-b3b2-b3578ec26e8f\index-dir\the-real-index~RFe60d96c.TMP

MD5 a77241dd578791937b62d46631ebdff7
SHA1 063cb655d52adf8694cc4aa1077197f1205999d3
SHA256 8e298df644c242a5cca41d40dc39bb87471c3674a2f22a589212013d75dde599
SHA512 b8aa7b87d363d397cbb069e7693f0e0894fcef5a93c0999d863ede0e16064e78a07eae0ae94756a67fc7126dc2dc7aaad023204440287594cd09e784cbf96387

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\60a91e8c-7a08-4fa4-b3b2-b3578ec26e8f\index-dir\the-real-index

MD5 7f08638a1d99c32ab969ff5f4ba8cb74
SHA1 2e359890b62dfcff2865c936d1afdb9053e9f7bb
SHA256 26e461e81f154a34ac19ecedee06e947bf567b07e3452c53468b86cc7d2481f5
SHA512 c7fb67a6854584f8e465fe1805665310755f4e437bd4fe45e647afb5748b03ab2cf96c26aed445e35bb9fe67f5c6acfb4edad78d985e77206ee878bf96588b20

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\15055719-d523-4d6f-84b4-4889fffe4a4d\index-dir\the-real-index

MD5 f751c9bf058128bd739b5ea068df7b64
SHA1 c767b2a591c734df242bfedb0ca8b6a8682c286a
SHA256 828b2069fb5fc9ea5020253f8f879c9f252f3a8735d48a78bf692c47a6085ebd
SHA512 e5de98443e50861f89a3f7eadd2f705b3cf3895a4a11ec98817d801d6357d16936551a9d7bd7acc1b00c58c7294df449fb899761460d28388d250f72cb8be124

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\15055719-d523-4d6f-84b4-4889fffe4a4d\index-dir\the-real-index~RFe60da47.TMP

MD5 929ae038c42da2dda28cc7858e992f1e
SHA1 c961a35ad7aeef67a3759c55faaa69f2901791e0
SHA256 5116c43bb50e88bde6f723c8f3f2eb87be1dc6d7d6bec49f13056c8117919eb5
SHA512 d36d52cc76dd9442dcc865f66bcf4cec4471454b4eb05f881ce5040ff8b361107a7725855625ef996e246c3e1b6bd51c3588425550ca2cf782fe595f44b6c601

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\1dda07b8-72df-4498-8a65-7700e7ca79e4\index-dir\the-real-index

MD5 40c6027fd8141567156f4e136687e110
SHA1 6a1240ba7256f3c27cd8af931469c1fc86f55d83
SHA256 3eb06127dc01e81b275b9995644ea2a42fb9d489e272bd09e913b9c9321991f7
SHA512 47e37bbafd6d1aab8a19fb56f06ca644b826d9c96d241fa10178e5c812cfda343bd4dfb4a730c50e47be130deeb02e88769b47c6e9736a934019f65d23b8cbc9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\1dda07b8-72df-4498-8a65-7700e7ca79e4\index-dir\the-real-index~RFe60da47.TMP

MD5 903329747a77c3c455915a658a18a1c3
SHA1 1f4fef4aa9a8cb8ac35da027d3ee40ad047d558d
SHA256 960d91ea1b26be52f3eb4d638d64bd872b1bd143f488490780079e794d9c756c
SHA512 010d5b0484a33e7b343ee8fa4aac5088cddcb691d45e95f08b6c47c59de9b6f1c4f151f2b52801286ff52276ba739abb763973e63732c14625ce9ba6fb560240

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\index-dir\the-real-index~RFe60deea.TMP

MD5 53a1c2b673b6218caacbb598492402f8
SHA1 db62c73945e87d1541e91003ec471e63437f324f
SHA256 c94a7debd7ae809519365ae47f5676fb9523d7b8fc23df63a5e937538d8c50c8
SHA512 331b9f0f6caa0efe49d82bda3bde002e63100e6577a393546c7d3fbb99b904c75853429aa647dbf0a7164a4e7a9a686d41e6309ce38080d22b02f1da9cd87b2f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\index-dir\the-real-index

MD5 cf1398882cb6f1792b34fa7c6b35d9a0
SHA1 fe754b12127ce314ce5c208b8ca178d098677060
SHA256 26517dcb6eb88a0688e90562d0291e467e79a5a9a4623c0ebaf2c11d21344502
SHA512 848fc240283c8e7b7b44ab5a7cbec1ef15be0b797d4cd66ba37599d32de3de20b987387ae6f870a40e5a310af51a25bd84d849e2a86fa39622881aee6561bac4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

MD5 2ffec9db91647f40a1443066e250da4e
SHA1 f215b73e3bca3b67bcef49fa0764f55c6f58e9f7
SHA256 cf75948c987db840602f3667ac6621da89020fb405156a29193d49aca064518d
SHA512 045f63506040d53ba344479c8c98da34bd5e4130ce3c5cc619d1b28c59b420595c4dc3ab671b13e312adaf8d739164b7c45353b21daf039c76bdd8543b6928a0

memory/1692-9525-0x0000000000E20000-0x0000000001627000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 bb709c244275c918c1e116f2600bb90c
SHA1 15f7c92ba0f1705cab1b6193a697e6626e366306
SHA256 e3c7efcc893ac74d7e5456b0091cf1e4a17ecdd1e0a77ef3e0adccc01d339025
SHA512 bba0d2502ce889d95de08c186fc7e642a7c2552ea2068b02d4a243b624cdc1794599983c86c657792bab501fde575584c6bfa9bbf783e7189918d17f989a3449

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 bfbe458c5b39bbd28e8d3e76c5f7fbb4
SHA1 6095410372b9668322856d234c6413d53a690398
SHA256 52aa8df9ac6b0fccef22c303431f9960e37badc5ad2d51277fa51f939f294168
SHA512 d1cb597a7f2bda583f8b71d802f6c35cc3b11a4c128517db07cbb3d8d2a39d96b672ec5d37872385baf388acd7d316e592208345b56b4f73de4b403dcc1bef65

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72978804e7724d1ec1769a0999d234ab4b7b3fc4\index.txt

MD5 dc3499a5a8a774334abb5ab12ac15316
SHA1 f39716aa5c95fb9d6ff10917ebf677a46d25b2ea
SHA256 8e90aaab500e5780eb1e6487cb94e0e9fd5b964939eb791d856a0d6354eff2e4
SHA512 6e1e2d60ee5fe6f542e5ee085fb3e4084c1e33cf38541060e54e51444593afde1f5635fd8518e63381250d2b7c6e0b68c251bb802a324a778116bbc254126776

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72978804e7724d1ec1769a0999d234ab4b7b3fc4\index.txt

MD5 c6a63a26df773b37a820f51422351cfe
SHA1 746dc3d0f7aff87a986acd00dbe878f0a9cd4014
SHA256 9a6be5e8f64fe1afc17b71d6be4342f660fd50c5234e0b167b16992a4da16748
SHA512 bb599f89dc7e419255fb55d10e67a8feefe0dd23967c2a1da9b25715606b956d40b23c2fb498da2ff619966c8380a82e932b41c05ac45ee43bcad9c6a97a8a00

memory/3452-9568-0x0000000000E20000-0x0000000001627000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 d3c388782b3b94ac52caec9862771b6a
SHA1 94b6204b858cd094270ab78d23e9053619ebc546
SHA256 82a286aa21e55200f44ce0646607878c3ae361ae75c3663269cb09001aa758a0
SHA512 c0977d192247868819d35f2ff379528510900e49f48e910e98ca9fa8c8f64a63a0ae5afe42c26229a8dc1aae11588b389a255678aba1cb2304cfc01ebc0c7100

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0

MD5 60b10727e6332400c45da3b6b83818fe
SHA1 f533f5d8d8f181b9f7a26a5b230ca75cdca34e96
SHA256 364c07d62144fac07e4a76dee237474abeef2968f438fe7a45571cec2806321f
SHA512 5dea58ca67bbb5971688ca08741578995c4b22ea51f9162bc717c08310049758efe934abe10865b209229781ea82c8def3f5e2d5f319dade0b898ca712b2f21b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b600678bf97c47a331232395d12458c7
SHA1 c2ac683e4a87ab08ad62bdf6c0e0fa35bb93f4a8
SHA256 8fac363fe840256a8431c70a0d453342ff41b0e529fdd20d3356b6add44ebb8b
SHA512 32733a19aa03b1999a3e4aeb4ca37a85e0ba802b36bbacc59df867bc5dadc1656a3a583b58a37f092ca63e6fe86b0dc5311e35b7a48b621ede26a85ed4c049a6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c5

MD5 86dc83b28d1ca15d38f4e3d0d714ecab
SHA1 1e4417fb02531948f4481c68e18f86ebf6205916
SHA256 cc8507df8850c6a2abbcd9927e2cd255f2ad975b3f7854049f51237104dcdcd9
SHA512 8902bde7ae251ecc06047a66f26f4142c1cc997a4b3e0ae8d928ca21e003fff6e0973ddb375ff440e22d645b41f88d4e398a34cb4cd235838b36150b4f863f18

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\1dda07b8-72df-4498-8a65-7700e7ca79e4\todelete_cc09a8f78c39a96c_0_1

MD5 522f5ef9545ea667fa94c2d826b492b0
SHA1 8b5d5cb3736ca1251f269246d00e32a4f7d8fff7
SHA256 517a168b2f1f404e619b3d1de9ede866d9874b5cb69cd479530fdbc71084acf4
SHA512 ac4833725012007d7dcf05ae9a0262e99dc8bb2a523165de1d5ef95cebb641a511bde417ec840b29652bf73f29e34b035143fa28e4d75503fc93409ff41a289b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\15055719-d523-4d6f-84b4-4889fffe4a4d\todelete_322ae1bdab361352_0_1

MD5 b586d2d62c635be3d6f541034d430321
SHA1 dd68c06d65790f2403aa76860a8a6b972819cb78
SHA256 d9639baf5405c1e0bd16033185f967d8096798aeb2dcb470f9cc90e499d2ebf9
SHA512 c117bdbec1166c3fa4578c8e4dd36f00378069cd5ff471886295a6276aed96cc9cb90cf0f47a934910c3456384a300a511faf482ea3e6746740823dbf41e3f11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_0

MD5 a8af08e93169083f666c3d3ff9c16a9e
SHA1 1f86ed888a2c30efa3d5713bc68024429b10738e
SHA256 8a7043df91ba31be870be47def6c1449d6218c14dde420e946af5e8241fc90ef
SHA512 2d8edb630096d9b43c08029dd76eb3d5049a7ce11e410432d55dee1e140b0f9f03508d980c461c477d8140c01788f479aa471638a29f563cf7084969b6681443

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_1

MD5 43f065341b185a8caa39dd619fa4e6c3
SHA1 de292b7dbcfecd10a915b0fd37bcc4960a65a64e
SHA256 6b20c51959972081c48bd7be313ed29454dfe9e886934d49af3baa6544da9b47
SHA512 a3f79b26c600bcd39dac06795ef8e92b5d0157a445b9957500de06318384b95a37097b6ab99a7bd70380b82ee8f7266128801d8bf4c87a690e179dceadabc28e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 26e7517cf88df6373fd1003ff936d2fc
SHA1 009ff1755aa6fbabab3ab2c74cb95f420e9cb572
SHA256 65fd3cf34395dca642f85aea416fe8bff699530b0a1e324fc32f4c652aee0420
SHA512 4ae47b10f73c15b1fab6d41116e4825b8e5d483af58a44ed8742fe23c337613e550bc0957269bfd93fd0e0fdb40cd3ec51bd70a0cbe1d51dba767e5a55234df6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 aa51c82fc9611548e5db0a512cf40b37
SHA1 f47854eded5f682fccc4bea4be0ffa84e2383701
SHA256 a13b98f8a2d5575df94390b166115ebaeece8544077ef94918fa135d074afd6f
SHA512 64a89d79d04625cef722c9f5764537fc0aff3f4943f7afaaac33b694c01454a2a6a8fe3fa90e7293357ba26021d161da5c844cf827190427c22c2c9670966c07

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 599b7e183b23393e6a58cdcd22e2d64a
SHA1 3af78bbeb448e7dd57a5311e4003dd3b5a2e7106
SHA256 034d1bbde54df795d57841aa78287a82d45b461e4fdccfe3cd01c333dddb8d4c
SHA512 07605b6d7691294929880c2d829c558d75e8dd030e3367b1cc5e514aeca1d703d960e62f6fe0abad8ffc239e2e8602ec3e3ad3d920dc848ba237c7bbbedce721

memory/1764-10509-0x0000000000E20000-0x0000000001627000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\04bb1a011669cde7_0

MD5 a6d1820e8d0016be31c923c60d7215f7
SHA1 2e6643e19adeec8fb390b7c420702304d9d4e75a
SHA256 bcca736b54cfda66cb3ab2afe49b0fda55e19d0565660a2ac53352e656c5f2a9
SHA512 3fb73011edb5a394871135bee99caeeb53daaac5ec158bb22935553ce4a8843e2bbbc50894cd3ca644c2e7960fb6ce3acf7a553ca701e95fb6db05123389d192

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\27736d53d669cdc5_0

MD5 e346fcedb38ba5b62aee4fa524144af5
SHA1 66870618a37e79cdf1b98860ee4c71c8e188e5d6
SHA256 37a7b4ce9a1805d245afb1e2cef1f189463832a9852ef9806c3b2ec2b3600bfa
SHA512 18888395f35365fe1f3a236cc08afc2e1749f9e24a4af78e834fbee8c35a15b700cf144f2048a60366249a48c2b951bfcdc0b58780bd92ab7030e23e864e3aeb

memory/3088-10875-0x0000000000E20000-0x0000000001627000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0ddc6708050ae636e3eea74c14759277
SHA1 de97d227bc1b3394d0377cc2285aa7663bce649b
SHA256 1d26c59cfd96fdf3cd8ce2d7126f75e73f28dc5096bdd58346795c5cf8b52e5a
SHA512 87831fab5e64b9de82c737859fb7a8d0cbd64214cc2892174b83385a8ae5e5bb40289ac77bbb95f3c20aec76de900297f92d9811ce2d8ac34bfe60b8e4ce1f6f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\1dda07b8-72df-4498-8a65-7700e7ca79e4\index-dir\the-real-index

MD5 448336cfb4bc659635096392021f4e8f
SHA1 d0f3119434fa11775199f4275eb22bfecd6732fc
SHA256 b92b078c0e60741b6e524c11fc08bb13a1910488cafd1f7dd5c0019d6ede62c7
SHA512 0b449342aeb7a1d8f4fad7d53bba8a1871d34bb99d42865f9f21be2bf7b75018f0b2ffffec5830dae4d71689625250855e609abdf5e88e5c6b6c2473f9757f9c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\2d03f961-dfcd-4ff6-b824-a91d5231e33a\index-dir\the-real-index

MD5 c9962321e4b19c44094e90f0d31fbceb
SHA1 15b7ed6cbd44342114b9d313533989d9ea360beb
SHA256 cd941c32a8778691e97188691d0422a5d82224c00f24e6315f593e812a4604c8
SHA512 e7b70a6afa6998fd441a43b5e0a46d3897132f9570ab50dc86b6901ca34514af78642b276ee6d9dbc5f53f4e3165a572d3b223c97b67a609e50239068a116ea0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\15055719-d523-4d6f-84b4-4889fffe4a4d\index-dir\the-real-index

MD5 3621b0c53abd7cf47f5489f11ac06a9f
SHA1 aee3ea646d4dec83e6aed53f49cfd23f331fe53c
SHA256 874ca528c82ba8ee125b74d80d0a7c23f2395c9880059671d846e1a4f43f3ef4
SHA512 ff5b27d3514b5b3d63b763ed3870b271d2f819549ab7d560a46618cb629365d73722ed6a313d22ad075fd49c802a6f4310f3ed1ac686e7fa4082b58f51602baa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\index-dir\the-real-index

MD5 1126121ba316349ce0d62618d7123047
SHA1 d7c3778408a669d501d4b0e5cdacbbd3d26ae95f
SHA256 7402d88191bffbeb89196486a8e379e18af0cf7be39b5d9f8c8409ca6909a777
SHA512 112b57b103af423a903520eed335e3276fee58c542d6248c3d4a6e9421267ddc44c6c1adcb2f8db069e15a48d3a1022c800f256fe5a6688d045adfed04314b58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

MD5 3733de407248d9a540806f630658ec98
SHA1 b1c8fd85b372f4435e2be77538178d09c4320077
SHA256 f2510caff37188f4b7192bcbf62c0ad42f146b5d6b1234f6f753747dcfbfa06f
SHA512 9fcc37719d1a7c046df037592753afeb68e774eeeacbf247982295cba7ef56bd864cbd2ed7ea34edd7da1752699bc109f1200046e7c522b50694bb1b6923e21e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c374b736b46ff6ba9099df7ab34db1da
SHA1 99607a42eed515509154d3d3ee8787cbf6a51246
SHA256 680fd20e42476849a573f8736940150a18a8ffd5f0b10b267dee825a2c32ce7d
SHA512 e93a8994f5fa1bfd01b069ceca9a284af80d94d2d68fcdadb0c7013d95d7be8c47cd6d2dc6b1e3a5a14633980b6fd5391bd8e7b8f34aea305e6361908b1a575a

memory/2732-10968-0x0000000000E20000-0x0000000001627000-memory.dmp

memory/6248-10976-0x0000000000E20000-0x0000000001627000-memory.dmp

memory/2732-10978-0x0000000000E20000-0x0000000001627000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2edac453f1bff606dbf67b9c2be8424a
SHA1 48d253a7660184a35d701c73d35aa2a4bf4fa684
SHA256 1b27d1c86a02beb32467e336a66e3469bac36ebfcf8e12112abf7db9494b2c6c
SHA512 cc515d404448c72d35e8bd98ed379bbe1ebbb0db443c8adaca42ec0cbdf81702397185b609cc0f16f181f7266a6dc2c6666fc3c923ad0a827a25eee4a6915bef

memory/6248-11003-0x0000000000E20000-0x0000000001627000-memory.dmp

memory/8036-11010-0x0000000000E20000-0x0000000001627000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_outlook.live.com_0.indexeddb.leveldb\LOG.old

MD5 a23316a5087bc297572580506d90bae7
SHA1 f9edd59b021abd774e4ccb419804d4d2993ac2fe
SHA256 abcc9d245adc591eaefc9c998d01eef8880c3b50c6290803ab91c81ac0fbc8c7
SHA512 86f15dc21628880fc1d1ee8736dc154543789a58c30ea14f48dde8a3091efef578579e81a8d480d1b89a31a79d07dbaa650cd7fbba263030332a231410a6f8d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_outlook.live.com_0.indexeddb.leveldb\LOG.old~RFe63f959.TMP

MD5 39a74f52f7de61db6d04a894483441d7
SHA1 0148816bc105ec12547db1cd47ded143268f905d
SHA256 c8e9ca3a8100fd54c4bbbf21eafdc3ed68f3291f74589eb9992d2bb5c6fa07f7
SHA512 7f2c1ac2f29f322cd569b001c7ed0cbeb39601424ab071b12823c4ff7c2ce3995e9d258d8fa75f49eee3cdc4f04b47b0143624a0c72ea81e6af8b205b498829b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000bb

MD5 1e528432761ca9650902785b8102f88a
SHA1 81421d3b47d88ab6bc4ad7bc17f665dc9451896d
SHA256 893be2ccbc7e937baa0c6457a1b58fa6b8283cd12e6b0a17d17951071941d324
SHA512 a67d7a787247feba698fd13ec4d10613db1c1399fb4f1bf4944a31329c59447c4cc07d796b83537acc1f0ca23868ef72bef39ee9704e4dba1f1f16cc8323511b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000af

MD5 857e68a874fad045297b7a84b6f5acef
SHA1 4cae290e32af194d7347112a212e3eef0125a05f
SHA256 376a95c38c168577508ce7acb656be72a6716b17ba08c0ddaa4a241fb8892094
SHA512 9aa810b52ea17f6b26adac120661dfc96432f243b6dc5cbee81de4d842a0ded2d8b529dfca57ed4d53e763844c59437529b077bee62a67cd50617159ffe851c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b0

MD5 744bc950359c9f3ba45432e4edf59245
SHA1 74dccfb325c4a1bd34f9572d27ac93b25edec669
SHA256 f64fc339e5a6127e344321e771329f00d878b0579c175e3147b49740451c234b
SHA512 92f20a0c75fc62faec505cd9bd77c47faf7780a21b5301e92fcbdaf7b037a67c379d817c66af3f7b70d6b07a52c3b85bccf3cbd6bffa7290310dada929c706f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ad

MD5 e3b8b2f03c5b02bcee5340aca3c4f8c7
SHA1 1dfc2522839b5e544184d8afea1d6aa529853f19
SHA256 e49cc3dac6010deb7d80c6fdf18d1d043fae6fbbd19a75b463296a0711a833a8
SHA512 ab3a64cb642d76ac11fb9865a87baf908f60649cf497d289e17c9edd0c81a93c8c8a4fc7824023e27cf60fad1074414dc8ec279ea6a363729d98704a774d0dcc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b6

MD5 15cfc307ed2d8004b38c4750c8202ebf
SHA1 ffc125429858c36c7445e986c0dd5fa3126dd969
SHA256 ba99204103cc88806b95138a358f32795d2bf6a066c4415944d22bd6ba8bc98a
SHA512 095ef7eae5cea869b97b0ecaad31524b2828cdf61984869c3eb7db0dbb5d620c77d885475ceea4f118cd19c19ac95bc1e8c23190888ac261ea1ecf00e3451e66

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b7

MD5 92bae25799629eb2b2c32284a8a79242
SHA1 3b58030bed23d01d723506e853c3d78d8be5e8e0
SHA256 79ab9f7f75e5f9c82a97f5ffa4159b10864742ebdd9b86cc47810f599832a827
SHA512 0ed8b7c622c3e66d95eb7d4ffe4a729ec523442555e46142e2ad6102a3bac67598b7cd087e6ebb62280bddeb395c01756b7ee04f61fe4e5a785588b2c8884d98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\814782e7a6a55f38_0

MD5 15966b4cf9b8568fa1160c54f9b4011b
SHA1 17e576617d875c51798c53ccb7c55c3a3307264d
SHA256 ef9821a240605bc20e94fa086a070c9e57c9c70ddd0864f9408a10842710690b
SHA512 7b2a3074129516c9a007877c9e3e6cb5877a741c482413d81eb46aaf1b709a6e368771f32d9bb45416cd981335bccc6941f14e40e7ad91308f898d0528aa44d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\b2ea910658f10885_0

MD5 b014cad9da4c72b384036cc8a20140d8
SHA1 e4852b55a4a3821517048bfd45f76e8ddbeae2dc
SHA256 cc86943e42ca4855bee4c1c3aa4f071725d26806f3cdfa0d6763a46316521556
SHA512 d15535292f601077db70baa5c9f5850faaec172753dc182b31fb3e43b2bba87e91102d52bf264609a083e4bb8038e70afb72db41b6483efde8f8612d18706f33

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\9a6e98bc8a2e1c74_0

MD5 cff290d13f07247cce553522a098e3c4
SHA1 e22966d3f04f3aba467c41bc4e4f00e513e915e6
SHA256 0114e79b25e41f1a485f9580e96826a4f6947c18c629ff0f97d2fcbf96074540
SHA512 50a2daf05c08b0da83f9b0c875047583035dba06198f85e0c2ffdbffccaf8f5a379d3bb1093eabc60244460f2d35d7defa86ae66504bf2d632c460ed345a3094

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c0

MD5 3840910db5503eae6b338f9cc44cf144
SHA1 337085b91743fbf7ddaf651558c6eb7ac15ce151
SHA256 973652cbd690397c04d0fd3815977dbf039c6620d11717ebd3b769b32efdebba
SHA512 647ee9ecb7f3fda1ef596f81402501784e09e6cc33beebda77160d907a6eeb73e4ebba89a3d37001d8c73241c7b56fbdfeb9e5ed9f8cee4c003df125fb610ab1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b2

MD5 05a1a886968440b9b136245240602d81
SHA1 2a930dcc64d3a8d4e9c2b3a40f6859a65864ea61
SHA256 46a9bfd4e849e478459572cf2769c4bab03685876a8ff4acf29c3b8027798425
SHA512 49785a28c0c9cdcc8e3eff780534c00a60f7c8fac1df7fd41f84c740c015347d84a4aad69306c8a17fff25adcf5ed6a2946ef165cf6a450e2313494d101dffac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ae

MD5 b1566d39c2dbeb3d39c0d9f57c7d5112
SHA1 7c8e7acb56e91b602ba98803b3f20dcee0cd6cc6
SHA256 7841aa70cfce43d83998080f27d2eb1fb4f7cf4c24468f8dbfaa85141a05d0a7
SHA512 396ea76418085666e1d00903afe2db8101bf52bd14c10ce29f7d0b71dac2dc6d06662ebf79a423f96a98b34e7d27ac223f721d1157c0e085fe3edcc2338462ae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\a15fda75bfeb140a_0

MD5 016d452f0640b41467682762a1e15a62
SHA1 1edf5afd39034f16025529bcaf832bae546d559c
SHA256 9b6b95cffccdf8bd984ed824198f50d0573bed4a17964941f0501905dce068f7
SHA512 0ad936fd9c007e3b904f7a8f9dc1f86a61ea98674dfdc393255e82c59152ee3ac64536467d00d21353861d5cad042f61562522d7d3480336a8f348fb27e1baaa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b9

MD5 3680fcc28f5a2767f128994b5df689d0
SHA1 051b622064a8fc93543201dc87259898f735bc64
SHA256 0c715a99cea95231fc915aa0f9f0ad9c44c4d5b7780f78b34a9ec53b4fad7486
SHA512 f02d137677ccb440e99a94860ec34f168503bcd05c76ce9ce187bc97cd3a0f158ff84c1f4aef14b2d392aa6e9c8b920283505cd14c750d450844cb464d693b0b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\42a468a24b5b590d_0

MD5 d7914267584b33b9347675c28f1499a8
SHA1 5491303b204a881db529d73c97c80ac67806c794
SHA256 0aacd95a434f3e9e2096662820bda4989eb95c592ea417f5684106cd15603994
SHA512 8373353eb1210718d9fc872a1d575ad7834be3cdc3e721d80734c9463856e29e317226d0fbee1fe048281f1d3740a88e7d1004ae4515fa2eaf832aff4d4932a9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\43618445417b70da_0

MD5 57ccc091b56fa5c45f478d457797d6ec
SHA1 249f1edd66fc065b2651f7099dbb945ac658a091
SHA256 c5111442b0a43ebf9d3453a1ec10eeb1b2edea23092af2f90df2be598188306e
SHA512 9f03f39339d7ff378b6ae02348970ed2225cff513a01154e2961ee98735279fddf6837857305013aa51f95b5210d1ddeb1595779d60f06cbbb75d9cbd93f258d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ba

MD5 fdf317d1421992c8668328fcce65a95a
SHA1 4902de7ec024142abedfa64aa21e961977c0035d
SHA256 75d4918adf3f6fade5ab0dc16f221d0c1527f59722c1d3e71571f555b72f6228
SHA512 699b9e884814391ff874b26b5e33c7cf1036950b2750a4cdbcdc86934674ffcb9862142a51ca33c0f71f40353c54ae942ceaa88078f5b2f7e39879362d2c9e44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\f232a6385c6527e3_0

MD5 56e60991a8eb0d1805b03aad3085ed4b
SHA1 b6990d09fd8e4828ce6b96a2d8a8d33b1a8b2a03
SHA256 3fca4a14f65e85fd75782ed622845cc620afff1628493104b4213acce054d368
SHA512 c47ace4fb63a7b9ef86c089bb7555ddc12494c16f0a39cd0e5bb0a2770d5aa03f12e96da6b0439f0bd14e085c131355d93c65d2272ea6f8a854f38dd74e42c37

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000bf

MD5 e17fab8a17add8152b3b719961072179
SHA1 e55707a36be86e077cf73d27821b1eec52199cfc
SHA256 022a1102981a348f2c63ca134c4137921ffa92451367ff00d3aba2dd33cd438f
SHA512 6841a5f38672d2698f969d2e8be54a333b4af4e2d056dbed798f28a64c6d5f82e4866f036f94496a87e9f4561e0f2876a96f0998f81edd900cee6881ea6d0c42

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c2

MD5 a7c0e66812a608302215669706ac3cb7
SHA1 2dde9b4679b7cb75cea4313f04a35989faf497f7
SHA256 071d5968405b4ca16703eae457dbfc978bca2e8be18126dac015f8806db9e991
SHA512 3cfb89f315425e4ee9fae58e200e72501872f583d78162aa0772108e32ea9aacf99cb7aa960dc88eef04448d3b8ba4ed049c79b3e63a5aae224b1853773666c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c3

MD5 6c0b7880e44c2a73e41fc3739db36304
SHA1 5d76041c282ce1cd37903d024f1d51bcc4561505
SHA256 821515111c36dca199a4ad73f848618d3139956d68f25d8aae5fb4a97f9159f0
SHA512 5368448266dea8e832ca9c96b39fb7ad1d07c63db2643993c1ff429ff6ff9c4942787f69e63a9110f4e1dcf0edf2f9d6351316127799c49f8fbaac3f45f536ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c4

MD5 10f14565e1d381fc9b2c54360c1ba9aa
SHA1 ae88ab23dda7b7f0f7bbc6dc96deac39876fa6d6
SHA256 9c7f08fd9c32948dc291c06844e9bf1998d12bd8f5fcffe9942d712487626840
SHA512 d649a3cdfaec9cfd2979b4f47907e4863fd995d0d38afa20d0dd897cbff97d966329487ed23bd1fdfeab256ceddaa1bfcd9ccf6bb52b394f51105ad371563630

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\7c8edd8e9ebba357_0

MD5 d4501b9fd7c6f018b7eae68a89a10e1f
SHA1 5f06c97f0ba820bb7fce7195a827660ed929b700
SHA256 4edfc021320219becdedcd653a4241ca2f2630024108d38d57ca1f32a4a2996f
SHA512 4c37b010f42eb8542f9638ba0fc09847aa81bec498c729161d7a6323de66967308be3934b71f163ec58f54c73c830e1e67cb447f5284866a2481a6dca218fdc4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c6

MD5 6cf3e9ee7bf4b62ac831255b52153eef
SHA1 60a4dade0ea44f5b71d461052a012348ffbe675a
SHA256 befe7bdb6f64a4bbb89ed51ebb44ceba13136110ffbb17be96a7c9ddfa8c8759
SHA512 71ca1feee436a22967f1e989a4b4a42a16a6c85f50a807f9a7a00318cb59312e3d2a15f450b5ff3a0a21cb3296c0c64ddc52720a93a3e1c24efc9053bcb0e1e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c7

MD5 429e87d2db3ef4eb667d49ae437c8dd3
SHA1 3c89a334fdfdfe163fc3907bfbd77d0eeb0a8b7c
SHA256 9ecd07cc1074e29b790c0b15725f327e8926adc9223070d95fc6b387fa64c711
SHA512 d149f8544dbcb87f143ab7c56848b2fdf2f480d67ecd9e79cb7c6ad423a399e477b4c57b7a72df2f2ec8c5789f927d3e06abe12be969a99f2cf9991df852aa83

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c8

MD5 66861d864ff8c937edee4e64fd5fcf1b
SHA1 5ef332ad0c309ac8658f36145fde1f897a3a0939
SHA256 5e6b1a1310e4616b6ba9b6dd2c8a860fbc7a95041c07415973df0c463702a159
SHA512 2daeca23c2f815e5ccc55a01fed903468eabf2d0b02b0cbfca1eff3a117b541778df5598df8d471207b0b04da93a5cc5480c0787996c47aebdb6ff92107abac9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 73fe876ffc5b9edfdeb5023b0528d98e
SHA1 88b9196f7ede7799a244347b20c388edd8dfd60b
SHA256 1224ee46903fcc9898369ff343d6986d299e45c6240a089870d37f50047e3aea
SHA512 e8fa37f4e6f5cf6cc009cf23b014ec48bdaa73fa7e3e9dfb50636ef7b53602caa49e173c833b8e0a1ffceb500cd61b66e103b6eb861f8d70c54c89ca384950fc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e8

MD5 b58b0834a58d8a01e577a46f0c2eeefb
SHA1 d2efeabf26d9f2ce5caac715f172fb461542ba8a
SHA256 0457b33c7f905286d348069bcfb8bbe26f1c01268d23b1b03664f80fecacd2ed
SHA512 0a376cd147fc2355cd5776d02708f79fa69087bffb423bae26f6c1feedc682f2a104b5db659e8276a54760b4dd4494ff9239f8547d3925f8ec9c2e75feae216c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ee

MD5 4bba6b5581fab2216096cdee62158fe1
SHA1 8ba07cca62ac384c42e4d0802e33516de4e54707
SHA256 6c47aecaf6cafe6497d40c6a78c1b08dfa22cc85d48ad497a7b9a234d5f0acf1
SHA512 883ea4d4d59ca65af93231ed383b4b2ba02ea560330dc96bef4e923423ed177884f29e49905cbbf76d5bceecc8131bd828d06f1a732e1909d81c8ded1ef7145d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\2103b365d670d1cd_0

MD5 6ec42ae807e2de466e83e1a73f443031
SHA1 08ba84841fcca94f362d2fd2a6f255bb2e9ad6f7
SHA256 aa55d3c4ef8232f7d4579a3018c9811c7b87c904201c941714db79935b4ef180
SHA512 58074f940eb1d0c2d4f16e0a74e6eef56da19a98b16359b7f507bc470d44ec1d0e759af34d5940bc69686d0556f1a980bca12274c6031187b050c339c207cbe0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\ef69e4bc88994401_0

MD5 8cf6d908758c9e3dcfac01d310eab4c1
SHA1 3d18b540ac420f96ac1327b4b3a27fcadc7dd53c
SHA256 39895f74d97df84b466356180c52e158a7f56e3e9295f45ee7f4491a765daae1
SHA512 e1811474a667180b8d136a7bf0b072e41367376865e9a0850e0f3ae2df66d4cac5c57fb90b16df9e3f58da4fc2ee79f33a454d77a65cd92bcdd9f09ac09411d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\09cb9908d9458114_0

MD5 380f453f1496904b1c3fa7100306fc52
SHA1 123f8193e0d5f524f00a986fc13105e49fba25bc
SHA256 2e2d32f5d89748abf67af13e5b21b4b40b39e095f7005e0242baf614055bf62a
SHA512 0831aa8ca432415881ea0feba253167b307f99dd4cc95bb50c6b9597a034e0a7a688a5f074a92ac7cacc7f5d432f3b4ca27d14330d8961d53f7ab346d60eeb5f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\9f1b2440da478097_0

MD5 9b0130f46a620f85d24931b4c0e5806f
SHA1 2865b57f81aa4888572259388c974521b5daa501
SHA256 29094447a6baf8724fbedea4f8c823a5552b1fe96259a7acadaf7cd24c9e79be
SHA512 e27e75c36018901b3cdab1edb9549d93a7014277185085e521485d909046d162d1a678aea7dd8702a20f3b9e7dd1d738b78f28945f9ef9df5641c4f1de707ddc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\a1996e88c0272e52_0

MD5 87ee436190fc3651f0dd9c0856abb293
SHA1 146dd332f98862b89b3acd97aa88d3e278ef553e
SHA256 5d4de53c3c1392190d642e4e3cf34cd3b8be32f8c3402efea8a69c29ec37ef3b
SHA512 6e55b65f90a384dd0ff586fe052c666d09b07d3185fed59822557ee439513fbb1905c26b9b7d94e39a190b0d7db2191378f250814622db7b934d673718d88f14

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\df082433a4f6233c_0

MD5 063f0ba76faf76dfa5dab7b447e65e46
SHA1 c89733bd07d0a823d413702cb520854de43762ec
SHA256 cdafc7b1cec39211deb997df7bb592b670d96f0d6d3571f77296a625699fc8dd
SHA512 f0a56787dc11160dfae2fc47bc421b04355ee533233f40db48891987fc8354d2d14e9d57992600b1370471892ce647df85e383fde5509a1190e19a43d63f7882

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\ea4717fc94183897_0

MD5 3ed3232f075489ccc1a9e94b894e51d2
SHA1 4ff0a8691ec27440f0f02a2efe31934d66f8714f
SHA256 6421c33d73bab45f7e97d1aafd8d40c4f8ebb5cb60aa9cb0f4d1c222fe9d48bc
SHA512 be5853d9cf08a8b9c17f5cb5093ecc2a9c2445a4765ab5bdbeddc0a87045519dc98adceb4b01e41d087771b629dc40fb0c74c066d1797821eddcad016b296d6a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\842e3759dd795292_0

MD5 826cf7dd2aaa8054f753dd529bea80e4
SHA1 aef8c1d5eb5d0a426bca139ec1a9d8b57379274c
SHA256 045be6b72e5a9860de6ebb02cfe1c3a8e42a2362a5059de6f50a29be258ea223
SHA512 420981ecae38c9eecd8446446c8b493191e056443b85664602f80cd3c3478dd906af27518fa886671ad7e754411febe2e89e005f79011fc65e632c97a7a95176

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\b6850c081621ebff_0

MD5 25638475d73a60be92fb2a9cb14f0205
SHA1 cb23ea02e0db4b92dd89cf506c5ac552fd1126de
SHA256 7919f6b4f307908a32dec70e88babf6adac121078cd2dc47a7b4ca72ac271fe0
SHA512 13239e0be16db5e6c4b5743843adae3815060a200d19f443a55bac157e1382ef219df31a76500d8985d64e259aae53760db85c184e850707a3f4a26f783f5c12

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\78293e21e6a6fa7e_0

MD5 be191645c5673a8c64b54b7021ad6543
SHA1 b13af0e3ab3b0f34cd0dc64e989220e5800fe985
SHA256 961bdee9a5c484717b9dc4da34ff4ae6b487a0039f398d305caff3d25207be37
SHA512 adabf76850b8a1e46d66cb10ff2d33db274c319cd21b97c22958f417cb847475abd1ed05750f97b8387d430846fab1ac2e91d339191e5dab134ce5c168f86e93

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\6d2f986bc2f6f36f_0

MD5 e7ea93139e046f5b3ddcaf2644d31f4b
SHA1 6faba3f319601cc888039c640f559ce38394da20
SHA256 92cca724fbdcfc8e597fad519d35844a5a96a2679de3069dc55a50503b09135b
SHA512 333bd6b76c0f1195f64d7cfb92171eb87030adb75d813474939fbf515e9a3cf6f94f684e5c07987c2b009ca4d27ff3fa6d1acf93f011118d5d33f3d565cfae01

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\fb5649b05ff72bed_0

MD5 c1985e39ab1bda6fa0c04cb0e4a53631
SHA1 b28b35b6feced18b8c19369601d9934c3bfdd13c
SHA256 e7882d89d4781f92366f2a44dae81669c83a1ccc0686e3e3c4df63101049b4b7
SHA512 1245a37e5684820d6548c55d728062b3efbb85e5446ac90745031b2e7c6c3e9668e29171527a09b13389c62c0d38578187226296c9537ee745c344c154586451

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\70dbaf21a1597da0_0

MD5 d38656016aa3e523fe3290424d23f3e5
SHA1 74dd64bcf5dc257c9b4ef78663478d8b2dea0e3e
SHA256 a6b5f5ce7c6256e8a46a1c8695ace73e32047f22fc6883223a96fbeb3af30729
SHA512 c72d9af6d03879c463fe410d80b68eb80d815c0580dd574c7a089510293e50faa78789ceb937fe275f1c3763ca3248da9a6cc7c07f54209765d550d19dde7a0c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\97ddb647c5f7e40f_0

MD5 f6305075cc6bc89d64f644c56cb43a40
SHA1 3983abb734ed5fdaf5d8001cf24076c8d7c83c86
SHA256 0052afbbfe21c9ad0cd2408bf7750b9d5651b7c0a878f57b83e2b917866b849f
SHA512 74d4df0c0c276fb61e2da51e9788cc3cedf2c5783436cabded037bcb2cecc66447dabca5f6bfbd64c837b4cf030ad887f9770621a4ed0bb3dbea99b8b4daced3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\079d4162b4f06507_0

MD5 94405722e1b5a45a592ad883d1158212
SHA1 60c14f18aa1f8ad0f65a33d2163976c0b0987ffc
SHA256 0b6f4a5165f9d0e1097a96fa1aae1fe15194c549139e83c00984fc7ca4935083
SHA512 9aa085c5eba51c4a2b04fd6a7df7af611cd05861726d69b5fde18d0bb0e59add97be303e788c20c68f1e174c53cba2fc2d29469378dc675047e4ad4d8e79944e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\cf74948d10d95440_0

MD5 5f29dab8219bb73b11fccac47f23ad45
SHA1 c4df8077c7808f9a70d41542625d92433ad284d4
SHA256 19ecb1f6ad08aa259d0a09057f0128ebaa407741048ec17fb85836b483519af8
SHA512 ee6cc8fe564391084ea347af35ae21238211e3354106d19f8ff8a831f1757c5647e3cb6a67bb368db6f0be5310149c2539de641eb3d4c477e0903ec89e9ab9e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\38c38f2bfa0e4270_0

MD5 6ce8d8defb37c7e73d0ac5d7ef82c0af
SHA1 66300c2d37fe33cdd3ce8be97b6fdabebd993cbe
SHA256 05b1b2c57586ac922a9f32f4741a89223cd3e980094dce6dc06b8e5f8e783748
SHA512 ebc5df7769bbbb252158ea4894872fea2deed3d4621cb96792fa4cd5d3bc3478d3bbfbed498a4dbb5291e89e7d9d0fc1a83ff7c4561c8e1733a14c86e18ea08c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\0b71221c7a183de4_0

MD5 77183198fa962fde146da605b15c2e95
SHA1 2d902f4b76fb442deeeffe21a364c09b19134aa0
SHA256 3e7c67f583632ac721023c3a1d8f114df0a4e59248bcab21e7484198ac9b7e99
SHA512 12486b6bf285c57a555aa814282db893d7e9f37f3bcac67dbe50984100551306e6fc582d52457f17d8c0ffb150dd18f0b7b176867be53343beb7f204c3b14b3f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00013c

MD5 8ae67696e0897d4500ad9c84006eb170
SHA1 4154e51a0b92f6e655bbf8f15958a56b1f400650
SHA256 e5fd71bfb930c6d1c53600377ac7ee91dd768807866030b32e420edcc13be99e
SHA512 592495d6e02ff4582b8de55ea851df10a57920f2a5d77ab026f9ae811d8180ede00c8ecca85cedf631ddab5e5b2ca0f0bf806b65cfaebef429d5e1a6adbe3f5e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5e31a13798da5bce32f60e7530837183
SHA1 0ef39cb86a564c7e082871886f50d492c153ddd3
SHA256 45e0c54f6db950d8d4fbc1f84536d758bb9e90cf8bce96def8f800ea2cdffefe
SHA512 ddfe2a1eb84191af75f25a1accc2af19894e3f1533bbd081490694aeab35eb48ae5227efb034e32cd429ee3feb8c40f90f9d0267377dc2844041db82ff469388

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00013f

MD5 23e351a3ff88e20f8288c8d39ae488b7
SHA1 ea979fd57c82b0f44a474fea4ec13c62348a460b
SHA256 d62458209d46aefb8fe8819d995c55d86b89f581591c7682c591b7f8156006d0
SHA512 ef99fbdf55c58b1a3b09ee2fdccea99102e8a16271e4342635f255fa52e2a7fe34df9ba5627caf9dc25763e9003e7fdeab2e22f459460e21057f172a8bcb7eb7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\b6eaefe3878ec61e_0

MD5 2d2e8117026c7f7ef8c9c8365fcea3e4
SHA1 263d433fb39a477ded4ce587641a972a99edd1f5
SHA256 78e5efd50af7db416689759c057fb189344b7187b72b6195387a67ecc0f62ebb
SHA512 46e06b2bbf2ca55ee41e2d00cf9cb075d76b3f90202bf011854feb5d20e20a599f90b2824e19c6c389f77e6721dddc6fdb36b2f6e35f8bb2b2f1688b42b8bde1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\b6f7e14c270e9105_0

MD5 cda90b7e508b639f8c1d692d4096e3cc
SHA1 21a1351f7f1735d3b4213d113b5a01eafa8eb54d
SHA256 8a74a5b0115208bdc1fdf758cc703ebe014290a7e524a8c7a71396088dce3193
SHA512 ca2e67a1a3ebdfc161c8bd2e693b99ba08ff3518b28358c88be44d54e0d700fd94f086be11c719d614c4f4c5f598c0b11dfcf5b5216f72716eb94d1e0fc19197

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\281352d012516dd7_0

MD5 7242a4639300b9bcd06b6ac4133d6a9c
SHA1 fdb0672bb17d5b645bdde9221f6de25afc2e1538
SHA256 2a1f6ec4fb58f90e5821be66f506f246a80fd1f7e4bc4b49c1a47bff3835ee5c
SHA512 61376a15d310a9631e577f36997a6eb0c16db27d91e8a8bbb8edc75b9dd8d56978f9aaa3e09fda4fb95535f2898cae56b4c3a06c96075d57d85fb966c98f1011

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\5826572f6dceb6ec_0

MD5 51e387ec5c1d550604941d28d6b9615b
SHA1 06e4a481421c5a75c9c99b59fbbd9065546b73ed
SHA256 dbb9b5b4cf108e232406b165b5d8782f97d91c1155e78e8f7ccb24d135676c4e
SHA512 51992cea4607a05cd165e285d6f81e59fbb48151fd8ca755051ec1aefdf22656f237bb14c1482cdbea4d18e181e0168e08dd2fe1c3897cd4e83be595637bc962

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\9c97154502be227f_0

MD5 caf7d4e8e087011a7bbf682ea5ddcb00
SHA1 a522667a3b3631a8c8ff4911dcbae45ffc7502bf
SHA256 63c4d1d325d916bdaafb5c916b471cd1d2a4904e332586169489adb3a0888b62
SHA512 c26ece7a0d2580c873d64f2dab112aa5255017ab7819a7498f23623266eb67f2df9ab571edf59a6300974c7007a3b42f40eb27d56a4e6d6fb6ad39e6c1356bd6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\83aae89c8fdcd196_0

MD5 66cb36102d7b3cf632bf84ca2c04717b
SHA1 dacd5e2a4a7862b15d7c6ef054f6f5967cea0227
SHA256 a5f8facb8106d690dc7aeb174364d96205b974b378e89b704e466e90540c5cf2
SHA512 777d1de64c51502fd50022c21fb97e0a3651e17b583cf85e52c03f31fd50acd8809a40970f981440fbcacf970c3d4a41d5bf2a73e156c41435d3fd0c6db9dc73

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\2c4d10acc0d42554_0

MD5 605e5560f6a706ff13072d3cb2b6e45a
SHA1 646e6bbfd6618acffea67d2849199c04a444549b
SHA256 f84d4aef3ebec53689d4355fe8710f61eb08b6ff20e1e8cee38db25e57ee8f51
SHA512 4e9ecacc61a4dac49fd1a2da854bfb30d736fa5b9fe06690d5d3197646918f48a2ec3481e4109a91f85510a15924e2f9dee350bdb6592903fd0ee4402f84f253

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ca

MD5 99b0ad5ffd52b965ce59af9ff0230fd2
SHA1 aabdc9e6c48bef1375f81f9fac240ab4c2ca5641
SHA256 1280a6f3a5e3ef3971cedb1970f0ea275439a7cd254f786037cef59672e2818a
SHA512 5c22d122bb956da7c5e557abfb43c72af419faf7e4e4607471276af141c70740441dcc7fd012fddca5b1a39c659159087feb8a5eec01c1be62be0a0d8c1d09d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\f165c6086bdf7d54_0

MD5 93a38ecf7f378575c0676cbc225b2384
SHA1 3fb5b72e58c10ef433459eaeb006c279f9e477ad
SHA256 ece8b2728653ff25fdf6971df9c05306c485580bdc1206108d5239fce2180eeb
SHA512 45dae874833776d6edc063b63382b3e2f5a9a282fbc6091301906cebb31f158590d8cf0f0d455142b1713dd0e8f9d0cad585449a61dad9d8a946a5e2afa58675

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\aa9333c2d4e3d8bf_0

MD5 135490e30304cc0b0f2a26835310b798
SHA1 9deffb093fa126fe2ac97d8a7270e7965826191a
SHA256 30a18b764eadc3d1a28144a96b8d6a7fa472fd5db153806574aa8d5a0875b84d
SHA512 e3bd57bd87481bb215da84faa5eda405148f0733df94ec6a22a928390589e577e7c9202470ccb53efdacd151209d8da8ad609d9e0858edc71393b92d7ae34e28

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\f4af7a6732b88673_0

MD5 5614c935dbae5da3e59e406deb0ae228
SHA1 3fa915328ede8e0b392d808bdd96df376de77ed9
SHA256 0dea863dcb28fdc1ed823d98e5af6e2f92442b96a6aa79ae8f7a7f7e0e5ee79f
SHA512 b3843f7ef35ae79aa0bc1af699dfb5350bc8099837eecc2730265d3aabf0b2676d6c11ccf2e7b8b96854589c0bb399504693b790b676aa1215738591e95cf61c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\c995ca29b7b603b2_0

MD5 8185ec17bc057755743e2144fcfea1a2
SHA1 d57c517012b685cce40b9231d615b6cd6897bc22
SHA256 e79a9c061d3736db654f163be9d1e877b1bcb1329ef87c382ff029b9445707ff
SHA512 3b84c5e0968250d588df0ebbe7ccaa65c7a9f11dcfdc928abfb035a92e4cd9a5a980a88c6277a707893bb18b669d5f9b67bc2d1407cda0be7e83fda5dfc586d1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\68c8f18d4c141583_0

MD5 10c1eac9e11b8ff53ec14e5eb46e9351
SHA1 dc200d992351ba2e5f452452f8e3b0ff9a7679bd
SHA256 a26bd856dea3ca350f999907b78b4ff8f9d1ec0b095a35472eb07841eb3cac27
SHA512 016744007374ca8fc55a748fb9a5e660dc09e185691d49bc9c9e8150c5270a1674e2ef88781d4309598236b9dd6e7aaf46dbe90711e6662e5db8d22468c2b4ac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\a1c76b6dce7895af_0

MD5 1df34adaaa3ed1f4bd0f57f98cb9b3a6
SHA1 90e9c68f67e04194ba8789fd41b40fcebc30335c
SHA256 9e05f16422625f7e6ebd210cff7b8cae42a98719936316ac88de7e315a2af01e
SHA512 59c4c28df4b07a263e48f8c55c0d3d54e0113657120513f4acd62f9abf0f3e96ff28902eba44365fc4996d6367ea869d781c714ff70c99e284cf97afbc6b337f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ce

MD5 cee65a7c799171344045681e9fb87b48
SHA1 53b61d6b9079e042d92fb8b2faa2abbc52cf8f12
SHA256 528b07999dcadc3c15b53ffd87392b1b57f24ad5919278c501dd042f06e531c0
SHA512 83c36cb07d6ada6ab570fe57c70d1d7a69820ce3a3655b4019c0d356795d800d932991dad9a6ef5695997faa992a0846f3b3ef63b1745541604bea2105717c46

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000145

MD5 78ae3b31fb27f5f8a9e8fe4f252651c1
SHA1 f85932cf0126efd389487b6ba1c0462b8c0bbf92
SHA256 772c40887577782b6ca12d2b99ab3986bee573fa2a4c25247caeb07a27ccc61d
SHA512 166214cb5fcbfe6c30a8f402387e8425aa327d8b65769b4d9ff423faf792dc225a8ba42749b2c52223fe66ffbd48b5661e5112af4f32cf3842bf3db8ab8dba0b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000144

MD5 f763e60ba9a8133758e3728774e29518
SHA1 2534d53edf4ab9e22e9a9e2bbcf713aef7dc3834
SHA256 7e9dc930d71f020f87b8f1c607967a6f7252fa574ae052078c8f30661411b6de
SHA512 2ac6b6170e5ff2aac2c7d0059c10878bbc8400562b872205dd23d1b2bca2461b3bb51f5104e5a6ab581634467aa4416b9e460845de1829b7c06987f715a9dbcd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\064b13034361f861_0

MD5 a2d407b61a2626a171d6c611af9f0ccd
SHA1 431ea0f6ad141d43c29bc1902f0ddde8a04d5382
SHA256 37fd8df17900b20a7cc6a6970a4763802fe26ca1210af32e810ff9659c869427
SHA512 f57dbd991b77101e26b428b5e76a6c9eae5abd50dba1ba14a9b800b338e51bd31d64de5d5a84706cecaceec195c632e346ec0440dcfdf0f8b026af53cc7e7a83

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d8

MD5 38660b5698b7bd3f690c3410315ee4ac
SHA1 3839c0cee27ecec70f115368952ff5493da6a5da
SHA256 8c91e72d997eb3f6d45256572d9bba2794624c46f3fe5671b7adc385100ab95e
SHA512 05042c4895a5c04b1f6d5a713e1ac6467314e4f51dd677fdbab19d18a728214fd41da396e7d0d5435e22bd984519b5b5eb9df7595a216ce4317844df718d7f6a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d5

MD5 3d7a2072ba36a6e4a3a87dd47c26aba6
SHA1 f4dd527629d8e9c9f005f0883351468a4a585ab1
SHA256 8a48a9e1307224aa05a03bbded3bd508bb0d2260c931f72c784b661792a654a8
SHA512 b1d702c7a8b8452a81f5561fe1f95ead1282220910c5c93d4ee42119ea0df120a0f6a335671a18aa21454d9743a96b45771bb685a70c835a5fddada4c7634126

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\48e9d89e6d115846_0

MD5 84fe83a7e25b570cb10c3af17a13b59a
SHA1 bc601640f2c5a0f00200ad9ca62738a2edc6d7d3
SHA256 f59811872b84f1b17d6c2716393deb3ba925eb6f6823d5db87f007b5fedcaea1
SHA512 b45fcf5c7395968c5a2ce5999f5b5450b02eaed5a7338e02e437e6c272762767734155c23943dfdf640fc332dbd431f453f7ce120e6acd2758bd2fc59515785f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\beda5b916fa6f8a3_0

MD5 a40b3aab8acde49813111c1c68d3773b
SHA1 b8b2ebe4e572a5899a4311581cf2e544ccc44b20
SHA256 1cf99bf1c85063e3b755801641693ceb28ff87194cd5d16ecf9e0cbe7fce1196
SHA512 892dea0d9d2dfc1c9089d2b5168d46b02c9cc0a93837bc9053deeb7fe8b7129416e6359cb8a1420b9887565858e2e72bdd0407d031855b91de2264e53a5fdb01

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000147

MD5 afccd3c9a0207c76ce91077660d1b85c
SHA1 8f2f2b041a9e739d3383f4b0730b30435ccbca4c
SHA256 1ef94f2e7c3f2925988da24a07cc1b5b5666a991f1e4e7df4693877ca8069088
SHA512 4244f50d36b614840834e2d727b4171e73244ebaff377ae7520362aba3562df187d0ec4c76ffddbd867aa98096201c3052c9d21f606991cb37010cdc25de3eca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 65a4b19d10f7322360987472dd8b51fe
SHA1 a8a3c1126b541f0f00ad98a54547940b74b6f164
SHA256 12de64fe650b4c8341d199f8efe36ab6d88ecb92fb921f73375fa485bb21db78
SHA512 946889d0161dd9ad1ff5ab57493cd5523da671675210edd6bd76aee7756a7daf0a6247d82affd878f7c6e3face1d12739852c2b7466e9db8cb6203de278975c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\1dda07b8-72df-4498-8a65-7700e7ca79e4\index-dir\the-real-index

MD5 c6085eef0570d5f974ddd23bfe90e7c3
SHA1 ac439e7930a985d943617284d9e12908b6d51d1e
SHA256 8f60962d12027d5013a22c02c9192487b2c653e10effaa044c41f272236f3aa7
SHA512 3011d3350ec8db67e3647280109f5a817653b9aa6a3773635a070ab9227b6a2afa4470b2936d2d97d5ce40c9914ed3e1a16208f726a36d2bd0b45f928534d1fe

memory/8036-11822-0x0000000000E20000-0x0000000001627000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\2d03f961-dfcd-4ff6-b824-a91d5231e33a\index-dir\the-real-index

MD5 e8f21a2995848360d4d7c458ab95e031
SHA1 7128a0e5fbba9f8ca1826d44c59eafcb4154613b
SHA256 067ec97cdba4a4c06667390dc73568eae5b383d3ac16bab799dda449abd7b436
SHA512 e0cea21ac9c6deb2613f963ff080dcc4da4a8cae558e2343a7f4e4c0264239740108f22387029013d6d5f69afe39fa82b5ba2c90fafa1f2860e3ae84e88eebec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\index-dir\the-real-index

MD5 65f8c13705b751456c2d52c0b648c367
SHA1 05da1368fe604ea3bf8ce1dd21fef6d421c9bb1e
SHA256 887249fa556ca4ee4d072d33ca46bc3c88b1425e1e3c2cbb845d9d6afefd3756
SHA512 a06be42911ee0be3d2d21ff1881ab5100f6b1b9f559bdfd7974afcba0faceb5a2e259dbfaf0863e85d0cfa031e495533fe025752e50ba780235baccb3f012c52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\15055719-d523-4d6f-84b4-4889fffe4a4d\index-dir\the-real-index

MD5 4a76757c3140eb793132480848d28495
SHA1 4be6c1d15523f9084634eb35d6398d99029c887d
SHA256 dfefca4636a2232ac4e2ffd3fe5cbe70e79e0e95a28774840f6e9d3350a9c544
SHA512 29a2474d8312f12df1de49cd0eb1aa328141cbe63505bdf61e62e8684fc5652cf200409be6f9ce6bdcefeb0bfd6f70777bc8e63d8b84c8fa00dffe7b60414eba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1ad7643e008ac5b6890015b2fcde0f11
SHA1 767b7e2ef2d8cc2230fe3d4d850b693a779eb806
SHA256 53f54a019dc40c331ac47af668a53b3d029da7cb721904628c697ac99aaff4a7
SHA512 433c1116dd67ccc0f30f14f66d124943d5014bc74a8613a23e8b73e019d6b421e4ad7012835124bfd21b15f11b5434bd81f0bfba5f8f7587dc0a369ca10517be

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\324fccc69a21b506_0

MD5 4ba955675747f1e05774ac3c9c574679
SHA1 4d46de4ce3e2c5725c4a8d5207244a12ab4c45e1
SHA256 0dec8fc2da0d466bf2280f11a478e33c078172a537f953875a7252c312d992d7
SHA512 84529fdb9ded0834fb01a58f3c3c511675f16cfd09cf14b3b74214cf8ad8dc838e1ed15101d54c016a4141669d46f4bd47f9ab584277e04b6823588a4982f3ae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\535423c5ec5d1256_0

MD5 25e0385fa1eb1bb7c0a70704b318e83a
SHA1 4e3189b0538e08170e749b058740453acaa41653
SHA256 39de418453d2edb6a266881ca24ab7073b8f0cd4371378d55018163ed626f0fe
SHA512 94d08cc09f10295785a9c43833cadb567b92eed3838a000cc0cf52a855cdffc53019a8d493c9894face460402b4d18ffc95f8ebe71072c5dac45a280b3eb6f06

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 025a88548d431ecbfac4046a185e7583
SHA1 f7973bcf1584daaf1a1f272ec3fe3140f577e222
SHA256 28b830a93120e1427e947396f0622bb0716c76d002b829b033c8dfae3d26d89a
SHA512 b1a8aeac958ae59a73ff45208a48b3f0fa4907bc21a1c01641fb9de0747fa0800883e797828cc6449d1a2e2a0aead3f1ed71aae60cad6d4620c65a7c81275f94

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c368de3bd2d259bb57c2828467cd3a6c
SHA1 68fdb1348bd133cf54fa54eb262ccdf5b47fd251
SHA256 6f3a195112ce18e9f7a92a2c1bdc8540065f3dfced8dfa51e37914a40eedd726
SHA512 218c40c87df5d09b293f1a1e5023d00cf412e78bd1b4cc3e5731e639bc5fa9cb595d5d3bdd85a2a04a036439722e4dbf32871982b566b24328b30855094dcb4e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 824665c23e4dfce3e2b2820b4395b099
SHA1 a8e2999671db3983e222fcce5553f6e04b93e832
SHA256 6effbfcbdea05d4e57d951c469f3c6ecd984855f17a97079fb41ee62f2589df1
SHA512 e8352d13a54164ca53fd87adb81cbb29faeb6eacfa64f8a9130723b3fa0f5318df943ed5b5a80bd0ef60a1e121ab627ce3e088838b5420f6f4439759b4d98c08

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6d8ba057f059294884146ec13d8676d0
SHA1 e51b4daa0528ed6c6baf03d3e60249f8340767e4
SHA256 e1b5252e502778d57ef7c83f0293063f54d4c37ef4411e97dac2d3959ec40993
SHA512 290832eecf88bc1f52c88a18d512ec4699203d1c73cff40309a8d2d907bfb29085b66c154039ed23f7f76f510a81cb861c18cd8bb9fcd9b7d73c9ac11fa2384b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 abe516ca31bd4ac70d52bc8fc51d99e0
SHA1 1527187754901021606289e52da110087f6251df
SHA256 af8e4482b2c16921f332f18b866df2f8d5e07702ab1dea0aab05b0b26f198d91
SHA512 33fc669aa5108d7b5459630fce1cf8cdf3a51eadc7b7668e538ff25c2b46641f9a6e97ceaa9b0afdf9a6c907ba08fb74d52f14ad82c29399ce959639c094b9eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b6bc33b1036a4e08460b2324cfba9f90
SHA1 a76c60b718c45b780181220cfa3e2e6633520f4f
SHA256 3dc5412c68227702db75df86a42f44bc0c6f5737d0e8834c379ffec2e38a72c9
SHA512 cf1f1341adb3bfeb863b4fa682de5b6c36ad045331ed96fdce7fccb2d9a9fa6aa714c17dd597f351e98abc0f52299a0090673be30028397843f7ef958063bc64

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 4e8e3af66334102f14103b69eca8c56a
SHA1 cc5a6d0be6ae536c65f1ad403539deea0be8ce7e
SHA256 2f2924e131f89632ff354e2a0929b74c72f5322c7260435747183a2b0a436a7c
SHA512 329ae944f427e158cde0c266aa1f19453474ee546d2e3187062be32b0c8b642cc956d669993a03233c7e66f33e89bb1c6a1f65c715a05a3295a858cbcf47c9ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6da58b95ed75660a4fa07c72211b3561
SHA1 06b590f725feea269319109271197f5c028df67c
SHA256 e9608db66c1425432b63ee7b3b47e1253993d3e03bceaf7cac5daf93f3732cd5
SHA512 744a1a706f43ec6793853abc20cdedbc4be695bf583de60382f766901fc6455e647588adfa6904f81933a5dbcf95ad80c4d1e2a41a48b49ee702bd4ac667d15b

memory/6936-12041-0x0000000000E20000-0x0000000001627000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034

MD5 0ef81c037915f392e47c9edb5a07f6d9
SHA1 afa30374a5cadedb3ac20040afbe9aecfe7b47c5
SHA256 499bd63725e6c3be459bd85700dc64eda35b33d078818272aef53f60f81a689e
SHA512 e161773426b0bd8d04261c14c5bd698d1fa87d0c4503c7e12bae8e6ae2e1d1a34c629ef956a8b09cbdf7cf74917980bb579ad8f3a425b7a4486a190853c2976d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000039

MD5 cd74fa4f0944963c0908611fed565d9b
SHA1 c18033d8679d742e2aab1d6c88c28bd8f8a9e10d
SHA256 e432edfafbd52fcdbd59ef74892aa2e2ab19df6647ae723b368fca529066a804
SHA512 b526216bdbc73a97db41edbec6fdfd09b7b4ae149d415fb5811dde03ad4b1b0247950abd78fef807ae47674ab1b56ff0b971fa5e305b26bc92dc07871313b750

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

MD5 3051c1e179d84292d3f84a1a0a112c80
SHA1 c11a63236373abfe574f2935a0e7024688b71ccb
SHA256 992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3
SHA512 df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000044

MD5 68f0a51fa86985999964ee43de12cdd5
SHA1 bbfc7666be00c560b7394fa0b82b864237a99d8c
SHA256 f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f
SHA512 3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fecdbedcec84a4b9dbbe84d0d605ee74
SHA1 62501fdbea45d55625888acb355fdb5197052701
SHA256 b0b133f485227741e67ec3070c63f19d83962babaa5857148cfc1cd0cab2f810
SHA512 e45fdf9cf05af0b5c232cb30c683b767f7874ca67a8a8bb26fcfad8b935486318b6aa4672eb58b0c7c453dadd7c4b75815110bf5a0bd6e8991b09788d39d6e63

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e43e9b241887a402b209074f8fc916da
SHA1 f954766575c2dfda5f68bec5303cec261fb74527
SHA256 07ce150c4327122fffc3f2d42c8154d17759e751c360f8fd0e0ce8236cdc9b33
SHA512 de3a1de6f849f106c7e44007ac7cf9beaa88f3f6a3601bc5793fa63b25b763653c02b774454f91d8227f59d59be540674b98f1bc702e15c08ff5eba075dc5bc6

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 0cf4345fe37142facd25614a5e65ec9b
SHA1 9bb73aac38c55bd82b050ffb8d9f082bc7515054
SHA256 3ba9c186f12dc2943f0276cb6fc4f126ea937b3ec272d2eafbe4104610cbbb97
SHA512 1f873ea5c28903434b85bbef6528d7f159f9979c7aec313a7f991b4fcc6d002acccec5aa540bb5188d5a6a9771bc3960daa06c9d2a606695ec772300a3fe9bb3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_outlook.live.com_0.indexeddb.leveldb\LOG.old

MD5 852614ed67875ad3d430348cd2eb16e3
SHA1 3598735dab7b3936ac702a2303366b5ea6fc7cbd
SHA256 467957a316d37543af11caca69c44f17b035aa4c8cfe33939d4d840101682d6a
SHA512 bbec22af5e10037b1529f57c7d24ca6ed8da340af8756bb8949ec974695ed8bd1960d31e062e8d7cb076719915b39bb701792e3e3ffe174032f858e4fa9d161d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\1dda07b8-72df-4498-8a65-7700e7ca79e4\cc09a8f78c39a96c_0

MD5 95dfb8fd58f344b291d111083ac3abca
SHA1 91bda603cfea5963a75dbfde85881d974264bb97
SHA256 ee171b0715adcb43bfd5879adb53ff5926fcdff2cdb9e2ec5612f69f27d7161f
SHA512 543d904346e075672f17c8ee34e77b768255e14878417fd5967f977bf819b805b7c892d973cda249b3dbc92ad9d213d6e405e33a51b39ef13f2a28f63aa47f2d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\75735d1977c9aa58_0

MD5 7be74ed9e37393d397d4fd23a0160ac6
SHA1 a7f42e780f971636972cecc6794dd8f45270e40d
SHA256 79de43b218478d9a5f36d83a74d12cc3b8ff1a1b443694f118865f53d06d4b14
SHA512 880af7d003f75dba37379481d8392f247dc3680d0387456aecec9398aaf533485ae965f44f6273b753e83447729005a84c228eeab1bee63d02597c0ea7729a95

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\a3df09b9c9aedd97_0

MD5 5cd0650590697db179b992dfa9d6aaab
SHA1 ea5b3b158f7eeb1c3a1faa1f18cef02a4cccbb55
SHA256 3a39e9931f625c3983b8e6f33887008bd8ac08308caa36b62feb8e1ce2b425c8
SHA512 045b06b08758fbc2c4fe282870777db25fd27eb68f7db2c619806f3f6e6bb6126cf26b3446c3e1ac1e34ee770f88bdec9d28a2011fb73ea910d2cc8403f4366d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\10a904db0e2bbdd1_0

MD5 cb34b5a9c1752aec2b5f38b48d29d18d
SHA1 7762dc962ebcf793bfe7e2a5839144e3fb5667d1
SHA256 757dbcb6bc1f8085101715596a85e332a06e6f276d8f94fa5804a62c4c49ff5f
SHA512 a1854585fac89c6dbd6c4eb592f64eea9432e5f73f4f8b7fef490b63278d5f3963e59a23097a71a8cdd997dd07febd2a2cf7729f4c6fd6c017723e5b83739c21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\f0768880bb6c169f_0

MD5 11a41fe087d3adcbac50be8bbea72f93
SHA1 822f1a95ebf9bc4fc97a7aa9c584b9d04df37420
SHA256 c92d17c23122d5fd67eb5873d7a841a7a6e940d9e81da952a2f2186a0fa958f3
SHA512 28378d30443baba17b61f87108649cec64330125f39c6f0b987bc0a329257f565453c12b0d5f3f9913ec1bee5c7f4dcab2f712cebdff872098c1a0717773bc86

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\1efeeb954fe3a95c_0

MD5 4d68cc0c9826972998a6c2d3dd7e9130
SHA1 04ee2591faad277d44863cb09fad219cb03563e0
SHA256 8a3208267b2fa007278be27e3414d81b9110bf2eea760ca5d635de4f360e4673
SHA512 716172ae6e2f6b7536a1efa62c46e43b1b9344cecf336ff2d29f78e214777344a3040c002c08a48a7bf782314050fd7b7edf60d42a32d0410bb08e27f4311efc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\370cfd9724b92f13_0

MD5 a2853aefee0c3c49df50d96c5270eb97
SHA1 48576bfd90d44f739b3d817e4057f89149bbb41e
SHA256 04ffcac7a80856dcb79fada304d921f440ddf317c2453c9a503ba97b2c4c1cd9
SHA512 d8b40a52fddd074bebe1e005c62539963bef86a3c592cbb379d98ef63788b758a7e50d1dec57645911b9e93c52b72072dc296c6d8046baf4ec9cbf3ea756e616

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\393e7ff431176702_0

MD5 c70756ea41f50291b90d87efafd1c6bc
SHA1 e963b45ad90baa04045a741a9fc33bb9db53af19
SHA256 1ff2b2bbc61a67dd39b8d9e323b04bcb8e9d9e55629a74c3422bce20a4ac7023
SHA512 1e00c155eef82dbc6dc1b7c6accd11016aca3fb1d08cedbab9ac9d61203b03c6a1f2af4919332333d832c6ad1eede0fbf69aa84cf4048e6b5ccd54a5048916ed

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\5f574dbcb7324e3f_0

MD5 426f694ca73dfdc4126338b3457b6af7
SHA1 e3f4aa43bd9931a9dc3589c645cb6f3e596c75dc
SHA256 0c867ed522edb92ac3c9437ff17787090283fd66c4747de2b73e3281347a29c3
SHA512 2446da77562a95362582a4a744f0246601c0b50e5249bd29b9f957b6bb47849e737214d02202e390bd9bab4cfe0f278f48663ee35ba4fc158a12732a4b06b3de

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\0d5d4124f8ee6108_0

MD5 b2f84e57a6ae5ca04bddc2e529a42a59
SHA1 a21cc072e13c7b8191ad96bdad9f933108273dac
SHA256 bccb696b17baff8a915088e687b8957467a3588bcb64a14c0dc9f773571be517
SHA512 9102ffb8601b1b3929f7b250b217d2ff5e5a9ebccd9d021cd1da2980a1099ab27ce22177ad707f545c073da31722ff8e45e9beafec9a8bf0d7ecce8000710ea8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\7597824511420d9d_0

MD5 c92978be44512bc5c70e6645604879ff
SHA1 dafd001134d292585ecc6b2a33eecfb9ba652672
SHA256 e8aead60e0f5a4587e4abc9845951407e8b1c212330a4b8d74e28b9c80bf65f7
SHA512 07184a673c1098d6be53c71c37dbd75e9b2fe73aafb6b05e1330c8ae23f628dea2b6d804aca835fcc617de91c65a8a2bfbd3fcf5df4da1bcbb9c2661b0c7f9c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\b2c4b5be47d415eb_0

MD5 b7b18bb630259375ef5ec2ef76ad3e5d
SHA1 20e5296d2ba9ae14fef4b500960c34f6f592e71d
SHA256 a3f9e61895c100edf5691ea5266a1d2cd179b2c825850e36c47594724a65fbc3
SHA512 f72353f18fa85309905b0c02a1ec75f2aa3147d46830132cddc03ff0cdd4237aa3ca8abf94efea5bdd4d60b879f2ae6ea82eb8f8bd88f75ee45bbc4319bfd38c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\2e19e663ee812f37_0

MD5 29f26e730f5611359106c322411f6502
SHA1 7bb014df16a1483628e643888775adb8b6077773
SHA256 b195ab1defd52a60341f61b689201d2e5013a2e4bbdd950c5c66108efa5049e0
SHA512 a15dfcc103364a44821bd32ac1167fc8b39e26c110a8f531c333a20a4e12cd8de91c5c24b2894fbb0404b85b28301a04cac4b63d64164e631bb559f7bb44b0ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\617294770de52aa7_0

MD5 3e0cac67e542ddf50f27cf9d43df4b22
SHA1 53bf71a8b807da1f75870967e13a448d9b88b67a
SHA256 cd954ca07cac9ad282aa8375c5f49112dd06f574fc7cb7874e7d2907c3dce9e6
SHA512 9659948584c4e67250f925eb02687fb14b6c81bb6d57d2114ece360822d4ab7c9400c0bf1b83e3e037c705b4b8850d3726ee3875bf7f2acf618ac5128d15f239

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\69513fe9f9bebfe8_0

MD5 e5747fe8af6de70d5a16d07322bdcda2
SHA1 0e290e414b05d06668fa90bde91b03d04faaa3ef
SHA256 7fb284bdc9f7231d74f7a7a7e987b2a154230d30dd66ead70334b5e24359d566
SHA512 7c60595ffd5f18a332803b00c96f781ca33931da98494cd95bf753ee7a97fa4955d6027c1192dcce92b4dd6277dbc8bfe9b2beb6513b21b59e6c7ad7a1e45d83

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\796847b040111221_0

MD5 4b74d47eed3b13e256b93de337a51d8d
SHA1 aa91cf9b0caa7938628c9e6b8d358c64a964fa5a
SHA256 4517f4beebe8d06245e14317f1966052eea7ce15b98cf47cfcd2ab3109c3f8bf
SHA512 05dc241975bfcc56b751a49a861331d4ee1bfe410248ebfd395f827c2e9f53df74be209c92c414764c4a2e6a8bcd54698aeb391615bed594b1b7e18a68ac2a4b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\203d57d254fb983c_0

MD5 4b09c7ed37216ccd8e7f8eb2f1b44716
SHA1 4d57aa02891f1a1c6c21dd619a1182a2e4deceb4
SHA256 cc4a06940054267b910550a60c9dc84bfe9c1e1b86af6e6a7517890a7aa78d62
SHA512 8abc1ccdaabaf7622226b1d2aa7bf7e05deb8d653e0620aa2f86a4b640d7588861d085706a7ec3295916b28710fa1c47a8ea710bc0031d4d27a094f02ec45cbe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\5013eb67876ca878_0

MD5 89c91f419e450ca1e4832ea95c71198a
SHA1 63c8ec03787ce4d13a512fdf189eaa2c8c8d46b0
SHA256 13d84827a0903fc046d844ab4b794ab3a08aef4ae01b39b7fa7ea4bf014b39ff
SHA512 d532eb2d3b667b0d4bad0f2d409a3e725be749dd167c4c0430b88675225b72320403932be3f0d1ff7aa26990e12c642418e7f345067a7e02673c0abf60c7e07d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\3fc2f5cb90c1b413_0

MD5 6297fa2e8d1171761da0d8c85623a826
SHA1 acf6bd3de99df7fc71c4a079fc0b9656745d14f4
SHA256 ed8f3837989d3a23c1b803a1648860f58755b87b3d20ec44ec50049f21b5047b
SHA512 9fbb02079d36509f03205c675364e0a842f87e640768ba53c7972030671713137ccf1821f48d8b54f6b46a4916e8b2d261b41a8cb00307cc094da4785b2e4a1b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\4a160f8f29702900_0

MD5 528b5c9076c805d44ae7c3901755e011
SHA1 8c01b985638a0720cb319de5c90824156754fb99
SHA256 2b9544aaba14e3d0bc3a34818c5182f75bbc8135055e3cd5fe5fd7225bab1a57
SHA512 f8093c40ec6ce4ab98344abbcdf7fe2b5d8cb87f6d8a1146fed711492d08fd6af6d989f68df04428b6e5d65b606b4a1c1beb8d2556dace58e2a7c7de5b156f70

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\811be618ee0ac2c6_0

MD5 3c468144050d095b3a051b02885c9cfa
SHA1 21487895aabaf80266ed1fb0bd28fd7d1d6b956b
SHA256 c3cd1c43aea4c9a43e909fcf9ef916b63d00f5e5d5d98cc1e1b88b2b9780dfa5
SHA512 27c481608e9f27664f2d1cdc36c9b1f921769ed3e2658301af6413d2f349f3dbf03013a14948dc84995e1431ca89e9a61c0aa40441d846bfa80a7ed0231fcd18

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\1e22e9f2b4a3409e_0

MD5 78beee1b86b8bc3e7ca7f7d98d173146
SHA1 8c438fae9958d7a23d02e974349f3d9de6594066
SHA256 40ff6ca36ba455e26bc44d1a49902d4e360ebeea9fc9866c89a65d5627e77daa
SHA512 c8a67e4d3354f0ece2f9e816cd0d13c748245af398fbd5370519c5e95e33894d83aae5fc43029af10ae2323ae80083e742c13d7e6ae83dede11e12ab79333752

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\36088a14309a94bd_0

MD5 8f0d23eff569f27668ce58ba9b4bd954
SHA1 8d31a6388c597f9777ff73060eb867424c70df96
SHA256 fa560bc49ec58576c3df0e4fb89fb0aff90057f1494933701c1826e684a4496a
SHA512 bdc7f95bea48d93862203937a4cf34fc50dc257172332344c91b19e13197bb7f4415d8d6983b17dad23173c372367d2804a512d5b4a1b459136baf603904172b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\17bf615af434267b_0

MD5 9591cd2d0d8eccbacad3487432956c4a
SHA1 11f0b42c6222d7f31c82c47d8cabc7a35b4a7b28
SHA256 78989f14f3bbaeb17d34e08a46934bf2940e1a7341f94697e55d3e81ddf80e66
SHA512 137abe7f355c05009708428fb65bf78c4b83506bd777ee0d58a10cf45827d5ac49b02243035009ad111b7e2683ffad13469f73a3ce777977d1d440828576065c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\cd02ad2020f42e40_0

MD5 22193928c2c5146d17c2b8b45e9082d4
SHA1 88f4361d49e90971510ad0e7458a9cd87ee65d30
SHA256 4d2593704c3fa889523310086ed7f49e5573e176ddc5e04d960f7893a687bc2c
SHA512 dcbc2c66c4a5355cdf7aefb7fdf181c1ddc4ab20e67da62980607af695950017bc39e79200410917d576ef8875914040a3036c25ac04c690e3e32e27d9410e2d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\b439a097f615f3af_0

MD5 8e6fd2816fdcf26f932fc74e93d71716
SHA1 8ba400797e1b75960ca32538a4cf1d64fee3eab8
SHA256 502cf56fb73dcddd96a273246bf14ccfdc5cb79800ad20c4982db80f5dabcdf4
SHA512 3f60f47888c92b1de7721ad079e6f74d59b897b36e53b767177f7443f1454b43102fa259a8eb6ba554011339c35c0607a44882037f395e5e12337f6191223951

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\eb95906b8bb2c177_0

MD5 9819ab7c9ec86582a96cc70a31dbcc0e
SHA1 3139de156710bb98518c2a0a23162ac64eb69106
SHA256 42ad3c89b0147d3af94223f53ddf9d845729f0a29a23dc2575eb28eed680d5cc
SHA512 fd8574bdb2416b44288d1299455afa1fe603a8b10fd34ceaa859439375d2880a5804e477e5db15b0159b93df1c306fb2d9fbab3090202da0a8842c8d01e83ca5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\5b4548e8b72c08e4_0

MD5 831bab52c624d3523055ce6361edbf68
SHA1 16ad59ecd460ce1e87be1b988dade5062aeef3b1
SHA256 ae9055ffb1d2aebceb04176eda7a1cc4174365094e760a63f4b59b24d9ba0b2b
SHA512 c8fffe680bb14a855620ae8d5920b3335ba10924b91cc7333d7b6034926012eb78ffb2e11071f8ca10f11e074f620df49e529c2e4a845a365a14bfc46bc7bf54

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\1ad18cf9a6e752e2_0

MD5 a964a1e6eeea24d50411d1ed509894a7
SHA1 37994b8f9b7469d9c4dfb1af14499b7081c01776
SHA256 70ce249d33180ecc1bedf45caaa0cadf090665157225cf89db3d4ad655563bdb
SHA512 44721f69da3b347c1fa912272707732aa0cf190bab0f465e22c466fe0ae4ef5da49cc7555bfa54f9c3b2b5694da252157115622d23a3d186bcc81767d15ec9b6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\7a9b299a4a277633_0

MD5 ddf89475bc58811fbedc052067ac8226
SHA1 60936f4945d14ee4eb7980488d7ca0dd0309b02b
SHA256 bb67aaa104a216882b03c9d85410d9e89d9e6ca6d2469ceceaff44ea6908a658
SHA512 1cb27585c0a565951aed0f1fdf1e9fc989038a0b5c14eebf9998526db9c534abd09caee6c733bdc1f24e6d13a86c2045f2c6bce5be6052ec422afd4938c9549b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\bab998e32f5972ac_0

MD5 253370e3650f76860b88b1aac3fe20f9
SHA1 34fbdcb2d7d1c44b929e3bd69c53e5a6f6442d0c
SHA256 751e6b3eeb9693bc5a7a31301a04a04b729a931ed03abf6859bde8750af64c15
SHA512 2d38d682580fb15ef7e451cec41cadb479338c99750d8ca4c9fb819bd1ca2fd95be863ba62bc115854ee142fd7ccc5cc9b00af952c0692334be1a83ec00b9f62

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\0ff80ec3e11b6a1b_0

MD5 85ec011edecffb3f91605dbf86f4231e
SHA1 45cb4fe1dcf64ba6bbb7f417765071606f27444f
SHA256 36b361579be2a09575d98b0af826b9a230ab59689a0316de5bd6042da33bbdba
SHA512 373d3aff4471e545e710e7a03bfe48a292ac21f27c700c3391a8f1e46f11748a9659d5cb21bde87ec889d4479f0e005bfb4ac42cb5c25bb9e65bb1b1f2445dab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\8250b316fb923248_0

MD5 c0f5d01a8eaeced4c7f714870c61d4e5
SHA1 fce788dda9e62191a37319e192c5cbcbe9170297
SHA256 24c91675cb3bdcdd6448299e1e8b6f3509ef670c2f5ddb65877adeb761c88d7e
SHA512 fb9737c7a26ff0d91ed610dfdd9fb06a4a377c845d879d8e01a1fa41b333564c9d8a34d8b34ff956a23303d68942a9e12c0086cfbbb820e8d3a074ffe339ad79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\b0e681ff90ff875a_0

MD5 99bc98b3e12103b2e349ec8511c6b5f6
SHA1 fe9aaf86acef8c1007d79f7b64fa592fcdac9c51
SHA256 96e2c687728a3faa16729054f8a81cdad418443e2688aaf2afd6fedabdfb359c
SHA512 ff0af8704936560741a7b63e336392c6a3755444edb7b55741bb518d4de2e7e9145149e42912af837325a6bcf533eb1ce4393b9d5668322ee27918c44034b850

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 825db9e76cbcda8c8e298e63accde92c
SHA1 9bbe00759a4a6dde97451a4a4b0999d29200242e
SHA256 dc7eeb191d131cf0abb1e8cf0a0532396bcbcd8163c6c76f122dd2ebe386c608
SHA512 745e6b210dc69429ac53ef73626a9cb73f46b9046107ca79c251b2bddfa1c1e8b933a109aea30716025c51e1a6a89d445412be105f8bde9f6e6ee7411a4a5eb6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\326cd3338205499f_0

MD5 413e095d550bc169b6bc1f0c8ba6c2fb
SHA1 6df567f170f4614050e6d7d33b6fdf64b941441c
SHA256 3221283d6032dcbbf2bc07adb48ed7359d8219cac85095efa4b13dbc836b78f2
SHA512 bacd93480a782fe3e656a1cc5e12a819920b2832f027cf5c8ad540589da8069128ac264d4f48bd9ca6210ec420d8b0284ac36b9a04fe8e3ee92b55dfd9d6d839

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\ef856c1a5c506b16_0

MD5 93092aa12b9c4b64b3e0341f5e059440
SHA1 98de20a3fc35401e04b65d034b18e2c98764f37c
SHA256 5b05b842fef9fb1582a7b7438038beb57e7c8e297313d91f0cefd6fdb7e580c6
SHA512 b428d0a4fcfe53e7f368114a1d4acb118e64e416c9651dc9a92b2373840ea1baf91f15050aa35fb66d9a17b6d4f884ee5c8afaca7500b5b06b9e5272161928c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\62f9ef135a9ba8cb_0

MD5 8a1e361975314f4f124cf55638651863
SHA1 38ec326ec2edfaf8902261745bdc2eaa04ca3acf
SHA256 ff1855f66deec941cd846a78bb135d2faae6d124df7a90c96235fffa257b28bd
SHA512 605b664932d1f948226c8e6974142585041022aaedebf7b892bc44756ca3d915c5544efe4d3e14500272bfe2c4d285b6aaa798c4916f89d037bcfdaff243a2d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\daed32f3f3691de4_0

MD5 85a393731e53bcd162e3a865fbd4515f
SHA1 6c1e61bcba46e06d29125573de24ae92f27f36c3
SHA256 b38982826de90b80833387ee1f8fd663e9be28a71805b08ef3c0f926bea3f26f
SHA512 c4c7c1b6182ec14589077bf0d8443a695d42d101028a4885b8fa11e5c8235b12b8e146ccdbdcb1aa14b273f1706b970041e6179f49b71de7b9bad81598b431ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\43a7062352b29eed_0

MD5 8c0f1c4ecd946d0b02c48f2023032a49
SHA1 80ffd21c401df56feb164f0673b2b236298e0443
SHA256 6e0e256db5908071589e1759ffc98e9d9075860cc9fee422ffd04057c8b04058
SHA512 cd0549a8dfa41cba146df99e3674c31501596ba151d62e6b9ca16aac48b3ad3fb98fdbb6fbc97586c6423c3247d6af6c443a1cbfd83b41cad18333b574b46afe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\1b78132296754a17_0

MD5 91d1faa2d6642dfd13364f4c1cadefcb
SHA1 1e0bc11aeee70ed7afddf825e769717284b049af
SHA256 efde37db2deed65008e5775df274dc0406361ded856ad58cebf140cc5e950d39
SHA512 a856c438b191ec1d47d31b8bb30bc51fdcd8122261d0ea87c6e13a4847d94dd3dfda6a4d40c61557f38fd53a1cf79d57a8834defbf93c23eb83f02ec60d79c00

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\9e5ce865694a955a_0

MD5 0a8bc3854e66bbef99b8fb34d9e23ce1
SHA1 b20918b8aa05e08b93615efc24f9644a01db1ab5
SHA256 d689ce2dc7a9fc20da1703e599618b4a839c28fbf2929a4217d4cd5810857f6b
SHA512 f387e7b2b233d1c27d9a5b40ed4d3af497728d7b320b15ddedd7f7ecfdee80632a6ae07866dac64253e0d26b80cc4881ed1266e523a5a82e31998d8a07d96a75

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\52db7ee5d3a9d435_0

MD5 00cd296f5536f32fa3fccd05e3619fc5
SHA1 842e1ebb8ac5823053e18fd888a121b88328f359
SHA256 0ebad82b246fb3d2e482f36110c46f4570c9f8821184576035d157df3901262f
SHA512 e1e6b682bf0335333ea0c670ef4d803286252f1b58e7752f5fa71deb9b5b78dc0d5b78d565f799f3d17d7af14bb33b2095a370e5d515693edd7044cf9c9edf47

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\55604f703b29303e_0

MD5 c2402adb1d9cd99eb5d22fa59655cb60
SHA1 3644bdd482b8328d55bb3a2f8ff3fd51c8c61a2f
SHA256 c29171693aa8dba30fdc6799cef96d68d833910ba3693f739eb57921ac406413
SHA512 418bdcf465f94ce39eee79db281fdfe1a41d63996010b15bff56cf6082f28b641663e4f9d235083559bf7c7f2c9582696c767b2384e220ffe103682b1ea2de97

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\44c34e3a4a5ecd8b_0

MD5 c4785e8679cec98b3e4767c3a62f18d7
SHA1 f978d314a8a370282ece5e8825689162f167ca5c
SHA256 770b5caa2425d2bb50b76cb81918b4cdfc254bb2467d4a4ee63dec13a3b45116
SHA512 5e40ee8ee831943ce947e6a0808f0ad9108a433b9f77bb3990d1ee94ea51c9cad9ba7bcd52679f6c58eb247cf1d5c553960200ce432d943353d210d5b30a5a0e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\66432727d0d25b1e_0

MD5 3c5e565a7610cab7b29a7f9f15184570
SHA1 fa7eec1e1e10850e03167fc66bc40739b267950d
SHA256 2c046898fd778b1c0a9c11f35502b93a0afe612b6e572aee5bb7eae8b169d584
SHA512 d1d330b72be57fcbdb59636eda25ecc28e99e0450b95fcd6302e352488d73525c602addfb3252f3ef34085f9b574da34f7932f4376bb1c745c1552e6d496aa63

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\ada576cd43c51f40_0

MD5 58a6d63deb93f84915240cbfaea5c165
SHA1 625a36d7e42f1deb2ef75921bb93a36fa4e64ca4
SHA256 c0b5ff5a27163149fa8c715f3f67bbf86f116bfb4c4e420c9bc343bdc204579b
SHA512 63bc5527fed1dc48b4409453004cd912dca6832365160ea4e47d9cf9371aae27782fd22278fde2e8b416820620b67b3f104270aaac4bb5e8d4596af43ff440c1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\dd63b0f8f6bb0cc3_0

MD5 c57b2eb211cae63b4ed537a3e7ee7406
SHA1 9169f41044b05fd5af6526a690968a1def9f53f2
SHA256 73fe54da9ff8f4f8941d3cbfcb0ef42ef2c8680b1beb95e8093211f11f1fe578
SHA512 fe5595f76a5f62be18af252d3db0ebdce688958b0dfb1aeb676a7cdebc2f8e0dadab4fa2498c32b4931baf7e4be4cdcecc8473416626e30843744bbc56739599

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\8a8a81d50f2ad4ca_0

MD5 a0e091f089eebb897b932f30da303304
SHA1 ec84f1e373df1a6b345dbeacd75f0a015a454866
SHA256 1f43b2c0f9a39ad3ca08e6af0d0d0796c368b08654fe3ecfa889c62af6f25825
SHA512 0936f0be88b826c53b5931a8a1cc42b33acc52136354c0e7fcd21ad41a9dbf5a9c93e4a6bd5aae92f325c33ddc1ef62f4cecdb917a72836ef5ad42900e9f9cd5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\acac629655bcfa33_0

MD5 f93e0d3cc893268a17dd80ce8ce8f2ae
SHA1 31a5b309af913f8a15529e4df407cab70c7926f7
SHA256 c5fbdbee83f985da6c138fff7463363f0aea2a12362a6392b2da31db1ed605de
SHA512 f7cf086a9a0dcdcd67482bb8d07b927ebfd1c58e0f992f561e1e96bfc945d3190781ff330c803170284913b985197e82d175368caed07692ed6673f396c0da02

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\27be182165c691ae_0

MD5 04bbde0f1385bbbd08a1c7816ae37aa7
SHA1 dfe5c21053098097ceca549ac6448988b99c54fb
SHA256 b30e9dc5002d82e19a4f0ef8462d1e5660a633dfa5cb940949d5bd5b0be70055
SHA512 1197e90b8e9dc1751d4206e9caf9d650e2bc37f1a02bb5c69cc117f4b215120e1b4fd29536914ba3cd1965d94f9a0abbc59dc876b53621f27d37cbcf0afa4bf2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\8906ca0fd446fe21_0

MD5 4739fa2fe021e1a47f49caf82e4c73b9
SHA1 89392e8fb587627aab074a7916cba3647b3f04e9
SHA256 645c55d435987c1e45f3509c122137fff5a697629c47282d4d1d661258be2a25
SHA512 379c32332e855219f1c7d57d8cd5586f2fc6425fe620b7a5a8ec0eb7f086c46cdb6046f79150e69ac204fd7ecabef61d79df36d1b3f440ecce61c9984240ff95

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\7e84dba31d60df23_0

MD5 a95dd215f56ccc297deffa1c4b3ffc46
SHA1 cafe156338507fb0555e6ca8d9a44ab6ad55e8ba
SHA256 2a5118daf443a871c1364143a4b1a007cea5e23db8923b50e20fcea6d73f0314
SHA512 615e190b9802c6c5f970cdc8f4c00aa3d4cad00702ad3e7b670e512a0d52c6f4c4900c0c3465c6dbbf54083d22ca2f941cded0039d0530c471906d03ca33e9f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\78cf418098fc49b6_0

MD5 3810993bf9554a89a7e9e9f1cbc88c87
SHA1 387145d6adfe65afb3ac60187d7c74581d379361
SHA256 a1969f8ced7c36062ffbe4f296c2f2c25ec0309deca231ca8dc3366c98973763
SHA512 088a3d41a051ff11283c2a32e4fa33cbfd93c30a901a4923329f9205f4d5f5b2773c551249aa9dd15304a7c7867ed00ffc1bd0b773b396aa24dff71b28515ca4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\874f609baa3847fe_0

MD5 148e9d8268d07d499ca4da1f8a4c12b2
SHA1 1f794002a17974577c76556c2fd8afc1b8e9a67c
SHA256 60d28bf1bf49a361240eb43a755063fa7b97631d47031f8185691f2c58e4faf6
SHA512 bd86676215bf8aec54dfff7f8488e1119510b383f2a021e5983a403e2277c1fbd9d9eefecda9b205eb021f59616638be1846f964be1dabaaa9483ef2473d3480

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\3153015e4a4621d3_0

MD5 3b58d53d344f5810354ef5defcc8a763
SHA1 3b42eb2602528245fd1d2e1dbbd7e7a6fb527629
SHA256 e8f64c4ebc237e231945bf8d0da18434d776c758fe683d841314c00a72380333
SHA512 4d36505bfc33929bdfe93ef075d7e859309a32a778128de814291a73b671f4240e000348dd662a45bf5dfb3c39a0e0e33aa513edad24df77728202d18f89ae92

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\3de7364846067839_0

MD5 655cec60db2bf0e611be0de90a925c5b
SHA1 1782706835b113eac9f274e8127ff07b1e5c11d5
SHA256 84279797ee41a75f938bada83e6ef9d1e94c29897f3d521fa00c4a132f8c1291
SHA512 3ed5771ea1320b8d14f191e1e462d2d350450ac5a7b7097db2698d9bbd58901f200a8f2e260db81ba35b04128434fef137964fa60c6c27377cd3c555fd91ce54

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\9da99005a9c3281a_0

MD5 3407d906ef12cc3c115a2d2451a8fe28
SHA1 0040b14982a4a6eb5cb08e6b179871c523968f4a
SHA256 926d514648afb6810c8da74c6f879c0db70160a195c4541092e3d99d9a23243a
SHA512 cc22385e63c441f63fe8d55a24efa4ccd3253a0ba4daee99b1e6044d5dbc3345b94441663222441c3d24559a7cf7710e75106e19f6529584df83b7519aaa7ea2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\c29ea55c07646465_0

MD5 bacef4658870aa63d4192b154e32d703
SHA1 580badb0287eb92c736429e02608b5ae177c9d84
SHA256 44e80d70c7cb4f171f31868d8fc328fd281093a36b7bf37983aa863a35187c6b
SHA512 182a7b9e8a7a844cf9dbc2e49087cd1164ad01e17c98bc364a5d28efa5cc84bafa995effe40b0a67e2d37722a9cbbd7ea5b938905722837ea88a077b962ebf95

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\516c6c3288baad3a_0

MD5 e3b6cf8f809980eab0026a5e0b2460b6
SHA1 a571575ae3efb436e03e07251b20f4ecbb419610
SHA256 357a66a69a21051954ec1fbe21da6419f627357caef30a5573cf12485a7d6212
SHA512 26c0e89fea6643a5fc9b0c797492473db3d5661cc44cc8fab5fedac167aad8e780aa381759db213fb82b2b2c821f5ed4c4b9c7cd88d5beb199757928c2fe5405

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\d92b0389fce1e270_0

MD5 d8933aaeb010ac4dbed84e462afb2ffc
SHA1 958dd894a2a9205ffad7278472233e71488f5410
SHA256 a9d91a9d03f9f53bf4851b6d13d3e906b36662baf5c9b804c7778603b0e0ede1
SHA512 bfde3e9e3226e39f3cab7f19848b29457cc645173d00441dbad5174a2fd2ccd1bfde56ee8c49221bf6c94c44f4499ed5a62b700d4b6cd387d498ffee4f09b6d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\ae793aa89cc3ed5a_0

MD5 d6b49ba16181cdaa75100cf7617dc945
SHA1 e49207e32d5bb9ef3e32803bee88efff72881d8e
SHA256 3bcb03790e22b7c4fb55e4c3723c5f3733e2ddf548e40fb03dbf864a9032cc32
SHA512 b4624e9215672f460cde15863b85d3fff8a19913adb3595cf219fede33ed8ce22c499bb608ee2ee29ddec1a351bc04b95e0fc82d984fb8bad819e8fdbadd41b4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\8f916b17ea9df774_0

MD5 dd33ac8922e7c5dc1d10b1540ac08fb5
SHA1 9c8803c9dac6bad5c466aa4cbda2c283660d2944
SHA256 f1d0083294fd4e4ce80c0f97745801c43511822851618ece7987202ddd6a7348
SHA512 fddd077d1cac74eb7e30cc8d29cde43fc06db32b7a214ee1906cc55ad320219e0a4e45d4f080aadd4ae8cb9d8e849b25cf6899b6ca846835bbe1bb8971b2d485

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\67440b3268b41f7a_0

MD5 2002730b4c6d7a677ba9ec6571e7e9b1
SHA1 f25adb8119d7f49bed8b576df758bb42482fadda
SHA256 07eebe2a0e76e6a3053484aa8c4f1af0dbd507321fb753982b22ab4b257065b4
SHA512 9b09d8b7cd9531f490c715c2f44d516c54feca2485aa0fe1891f00f466007a6b95dccfced93a0203b9a5cd95e0e390ed4d6123482ba5154f3ef422b632ec7ecc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\9509ec25178f23d4_0

MD5 a5c47160d04dec99b9528e33f463377a
SHA1 57458e5ba1540cc793386aa6241e3d09be14fc49
SHA256 d9c6e0f192d42ed138547ca455d32b51293cd25a710d96196133f9f5c85efb44
SHA512 1c53c6cca741eb68a8c34bc65c61a012b1eaf890ef544b0a8f9e362132eaa917bf3de5c5ce4d7c9a403e49eebd9913037ff1a6c6bc7ec7d3d73e5ae8435384b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\6ecf68a5c3eef6d8_0

MD5 3389f3c282984e85836b99666e8abfc0
SHA1 96c50f1d0b29389dfc60eb00888ecc533da7d311
SHA256 97844752772f0e6d7c74c2b5f09834483a95298bd2b472fc5540a29ef2aac115
SHA512 99246c9bf9b189a908218134d0ade85f621a30f4785fa8a59678f2f857c7c3127e1d163a8f4b231037ec7c1058a270800703a5d107e8d052e6cf3da9018a9b5b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\588a150e1e9b842a_0

MD5 7aab79750a3107e03c5730c724da0fee
SHA1 4d8264d632d1b5f67c15436587aad70e22c97c89
SHA256 6d659ae4a86440bac58c786613650abd891e667e3825a0e25c1b5044478aec9c
SHA512 d7f2070df3b4ba2a3bdd033c60b2c4c846256e35dc21c4b79210f3a77dae462a5f47e304ffe5f144c66dbca2cd0c45730d5c1bb52adb847c56b736ae5f119d65

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\c1c84e5ba331424e_0

MD5 5364e1e9283eaf2ddbdf996a3d3e9d21
SHA1 59e01f98544e6162cde52b1b705c53643a1ac849
SHA256 2ca618a5519a972275f214391d93fe1927916faa1b94ecd8c71f4f6875b17acb
SHA512 9d786c3e1e6578211e77c843d3c1b7fb7da0a0f3b954fbd235fee7d55d0dd4c5dc1f735192f115d895cf9001a25dbac4451f5f11c681565696c170d37d0f1231

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\8958c4d0ff187f3b_0

MD5 58c8882d982e831f699258c3002448bf
SHA1 edf90d7624b36ea3e24612e8a67b76b35b611596
SHA256 4e23a7570c2f48ab2661c035f715d2a906bf895519ff31466deb8e153b668b8a
SHA512 87af43f4c9c88446d889fbc063c30e4c051f59c19054bf03755d95aed806b11b8f1af54281b8009a0c14e58793eea253efb4e6adc07af710de2725eedb345f92

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\9d5041c4e3852c79_0

MD5 c8181acf97de2052f519e0c3c96a2119
SHA1 2900d7af0374649b9558370545d6e6f4df0569ab
SHA256 892e5833b0a187f829e545beb14bbc834a3bb920735daa189b68b266a73a9de0
SHA512 a230fff58b9d7dbd62a3779125968c23ef775895e19dd918a922290fd586bf61b5b1541be794e46c0cd942f4c4f8072c2d1c74da5f470b9e663032412cd8fd37

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\6b2a472f83873e87_0

MD5 c9127ab578e88053fcbd28e695aab01e
SHA1 a5c747c8054f5d9594f2edfe62788f3307427315
SHA256 5cf0d5e73c1f9e6e8bf0cb03023acb88edd8970c11922bc229c52417853075e2
SHA512 90cff22fc413bbb91802bc461dfd7bef23c81926d0abdbecaddc8d8089c6b5c431db052f6289b096ededb9d226b85048e2fdfa09a1416ede4421956dac423574

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\76f281be596491e5_0

MD5 576fbe27b5a39e939ed61f1671424821
SHA1 9e38884b54f0a55aad219341468208a603909189
SHA256 60c2c3f0fc9ff093376326a76837f13bd99312bfa6c09ace5c4a38abd4b5bd25
SHA512 5b94f957698ba75cf0ff1c7fdd919c042e136e29309fdc663ae915b590cc43db27486e24d564e17286d803241d030cb164fdeea657b5f14fd3e2550c3283f086

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\2b7ddf2b5a608651_0

MD5 f2c9a70c3e0eee6f6cff4dad3f4f5e31
SHA1 6c7eaf7b4660550a5111adadf0b3d6c3d4587bf7
SHA256 55323b9ec89a8542cb9d7709c6d134d4cf87b6115bb052f3e1e7ec72263d3e56
SHA512 57535b6d8cb81f0eeef7d664913f3a7cb0326d09c727c260895922e225e03011f546d899f717b12a6707029e4156384fbd63e872c0aba76121823c16fc3b987b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\680df4410a3a35ca_0

MD5 c5a223b62bc250d561aff8a2f3f08129
SHA1 9a84d7c4861ce58b01217fc5fedbbf3091012062
SHA256 98b896a4109a8be72ad05d34d24e935f450ea3adf1ac377a57483b2471ba340a
SHA512 d3bf2a4ef6a787239f9be917db4140eecd4715854fd334995fefd1e2834d030b6c22090cc1365c4c93f9ff10a71a3f36f831318d31fa2e24bae46767b243a2d8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\3e5d0fb9a8e54794_0

MD5 759bfa88800882ca090cb12341f3ce4a
SHA1 4fa0d25e92a715dc7c93d82cc6fc51f501c06aef
SHA256 86dc03f87ef15be1d933ea2db1215ab357595fd3923bdf3cdad9e76308e8c6bd
SHA512 d7d2072c76086bda30ca492b92d1a4c97236cbaab62075d99f6db7fb5e5acd50e11672fce100828b0d792eda705d6604596c86eb86c4b644ed3baa662d8e3cb1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\0633d46d8be2bfca_0

MD5 8e4790df32c0ddf7f7257126423088ce
SHA1 4f22a37ac8d256bf487b9bc0954da66cb8c63aba
SHA256 d99f17b68a8a8346626f6940b9918a62487bbc2e4ce1b0330dce36b4039afd21
SHA512 e3f70a9501888cab9f468ec83b2acee7f34883e545a876b3e08691ec6631faef256b4a38f892757d595be3be6a32c7d14fd6985fee96311948a4d3449ba1b6eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\363fd6c9e8674ca1_0

MD5 60370931634f3dfbdd51aa1e146cbfde
SHA1 05cab4c7243305a1b6244fdbba8fe76e082184fc
SHA256 d2c01ed16bc963f5a870b4bf3d163f77f5c97ab4284c905c0db1c3534488a993
SHA512 b4a03f50aedbfeacca772a864e924f52f755138b5a65013e18f7efdd27370796ceec1c3de5b8364fdca0ae93acce4db1a2f974d8bbb6222ef077c152a7dea522

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\f2f8521be50ecc02_0

MD5 aa7e539b8a0ba39340e496ea18a0ca35
SHA1 fbbc3fbeba69900865c3b29d307ae22319949b76
SHA256 7ae8ba53da0cdc879f96322257b02d89eb9f501bcdaa0af16e469199d80db51a
SHA512 62008d082bf7a2b2d4519e5de5cbb047722aaf18bbb062e2b53ffb0f409f3eb294cb45aa60f2133ba494eecee91a8760597c88722ae0ce65e1ef684d6c54e72f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\eb5e6cab4396dc94_0

MD5 e54828f903dd0067dae02e2b4a11f03c
SHA1 863d381ee2206935ced70e663cea64418984329b
SHA256 60af30deeed93905985aba3e49ceb9c24a9bf708f3f98d4f528b04e9404e8c23
SHA512 4cf596341b60ee587ed87d459837d67f556caaa3ee8e3771263c737ef39de29ff9da901b5f1fe412827bdae5984ffacf94480f8d8dc1a873f9fa99e7dad1ad23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\273f927679c839be_0

MD5 ba55794b0baa74b69124a4a5b47bae8e
SHA1 5bbd51d04eaef08c7d89f996bbb8d5fe98663932
SHA256 900646cc3df438ded8a77ee3f8b843544752bf1a702d6bfbf44e132d5ef060f5
SHA512 29c9b18bef8bc9ad65230569134a2bbe43a18e55c686dfe4531375ffb045fa2c98750877d8726fd8930b5e36b4176a6015f3d571702c865373a9d270c54111ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\37fc7534f141e54d_0

MD5 6547f08aeecc6ff5c7ab324cfc138ba9
SHA1 7a100f4b37f328907fe98abe69470098297ed8c4
SHA256 3a0f09c7dece279bea0408abd31e2940ec7526637f0533735f236e2e3a6eb1f0
SHA512 ec4c30caafdab1322bb1408a0b554d0deb6b47e8bffa048632eafc899798108d6a8879030a656e51b33e401de9aba63ee3be6825df3ca5a195f200bb9c164998

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\f3af0bf16e074d08_0

MD5 398143a322935f013a39a2a27675e34d
SHA1 11fb7b89b5ee8af35fe864147989906237db0c2f
SHA256 b6a67e625a2ccd5b4b1643901d33c53768f3589484e01f7c03897ff81784cca5
SHA512 b54d87257259e2ac7d091ec5e1698864d9b71b24a48eb8897a73db6ddbd2be03f2091272a86c04c02b569cd0ac84366b8078ac4745900d710af323f0029df4c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\168c4ecc-6b20-4730-97f6-4aed861ff4e5\04280ecb8b0ad5d3_0

MD5 78cb4d968dcc302a99778578ba22b79a
SHA1 efb835d0d59dfcb42e4fbb33651370e2201f30df
SHA256 7fd3c9fc0c788fd761f455ccf0becb06b2c8f0138e6a5ec26ebd7d5885fd4b59
SHA512 5d8171bc320ce8618c284896eef1bf5a1c577d59bdcc92793603886689df2da9a184ae14cd8ea5cf2df1db3118421e29a1e239037faf7f3d9ed046209127c3cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_outlook.live.com_0.indexeddb.leveldb\000005.ldb

MD5 fab3b0ac06ce6f68aef482b254b6f85c
SHA1 38a31838b3bbd536e671fc3908cd3dc779bd73f3
SHA256 2874c434745ab88e780860c34c66e09cf072eb0435d0f20127b9b8a696e1236c
SHA512 8b335c91906a933957b7674b12bdfb14fe4e0c3a21df3c7eacc3c937e37607585b3d5f7ef2591327bf1fef478d3780458e94d743e5f9672ff4f28d3363e0ac2b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0b7be28df3ca4b0a288de85552c6c66d
SHA1 d141c8923e85765eacb7b2abf2f14d5e21bba057
SHA256 bb561da91862863c7035820187435cf585795052795200a10d2eb4035e4e94ad
SHA512 868a47fa2062044ceb75273db249d743570fc5f1f1d3fc28412addc758b9fe936103c6d402b53ee469e4feae5d4c4e048081d42c64b52adf0f03603b9abd999e